, 0x20}, {0x4, 0xf2c}, {0x1000, 0x5}, {0x81, 0x90}, {0x0, 0x9}, {0x4}, {0xd5, 0x1}], 0x7, 0xfd, 0x0, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000040)=[@increfs_done={0x40106308, 0x3}, @free_buffer, @release={0x40046306, 0x3}], 0x26, 0x0, &(0x7f0000000080)="2b2f6647afca0958c968e20215ce10696970731ca100390fc6470617bb23f0be1fc52600610e"}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0xfff, 0x2) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000100)={0x1, @pix_mp={0x5, 0xb5, 0x55595659, 0x0, 0x6, [{0xb388, 0x7fffffff}, {0x80000000, 0x20}, {0x4, 0xf2c}, {0x1000, 0x5}, {0x81, 0x90}, {0x0, 0x9}, {0x4}, {0xd5, 0x1}], 0x7, 0xfd, 0x0, 0x0, 0x2}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000040)=[@increfs_done={0x40106308, 0x3}, @free_buffer, @release={0x40046306, 0x3}], 0x26, 0x0, &(0x7f0000000080)="2b2f6647afca0958c968e20215ce10696970731ca100390fc6470617bb23f0be1fc52600610e"}) (async) 18:11:24 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') r1 = socket$l2tp(0x2, 0x2, 0x73) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000000)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000680)={r2, 0x3, 0x0, [0x80, 0xa2, 0x1ff, 0xffffffffffffff01, 0x7], [0x2, 0x7fff, 0x4, 0x3, 0x9, 0x6, 0x7, 0x8, 0x0, 0x9, 0x5, 0x5, 0x3, 0xfaa1, 0x81, 0x4, 0xd2f3, 0x7, 0x80, 0x9, 0xffff, 0x7, 0xffffffff, 0x1000, 0x1, 0x88e9, 0xed0, 0x3, 0x8, 0xfffffffffffffffc, 0x5, 0x9, 0x1, 0x4c, 0x9, 0x4c, 0x5, 0xfffffffffffffffe, 0x6, 0x9, 0x4, 0x0, 0x6, 0x4, 0xa4858e7, 0x7, 0x6, 0x101, 0x9, 0x0, 0xffffffffffffffc0, 0xaf, 0x1, 0x0, 0xd12, 0x3, 0x1, 0x4, 0x545de95e, 0x3f, 0x10001, 0x0, 0x7ff, 0x100000000, 0x2340, 0xa9, 0x100, 0x50, 0x3, 0x949, 0x3ff, 0x9a, 0x1, 0x5, 0x1, 0x0, 0xfffffffffffffc00, 0x0, 0x7, 0x1000, 0x3, 0x1, 0x1f, 0x1, 0x0, 0x98, 0xffff, 0xfffffffffffffffe, 0x4, 0x9, 0x27740256, 0x7fffffffffffffff, 0x1fc0, 0x9, 0x2, 0x2, 0x1f, 0xffffffff, 0x8, 0x1, 0xffffffffffffffc0, 0x4, 0x80000000, 0x6, 0x5, 0x6ee, 0x0, 0xd2, 0x0, 0x9b, 0x2, 0x8025, 0x3, 0x7, 0x9, 0x6, 0x3, 0x20, 0x401, 0x8, 0xfffffffffffffeff]}) (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) 18:11:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) (async) socketpair(0x2, 0x6, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getuid() (async) r3 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r2, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r3, 0xffffffffffffffff, 0x20}) (async) r4 = getgid() (async) r5 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r2, 0xee01, r2, r4, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r3, r5, 0xf001}) (async) r6 = syz_open_procfs(r3, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r6, 0x8004551a, &(0x7f0000000900)) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r6, 0x80045301, &(0x7f0000000940)) r7 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r7, 0x50009417, &(0x7f0000000f40)={{r6}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r8}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000004c0), 0x2, 0x0, &(0x7f0000000500)=[{}, {}]}) (async) read$usbfs(r6, &(0x7f0000000140)=""/185, 0xb9) ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f0000000600)={{0x80000000, 0x0, 0x2, [0x3ff, 0x1]}, {0x80000000, 0x0, 0x3, [0x4, 0x2]}, 0x1, [0x0, 0x401]}) (async) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="5315e2525dc2"}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000080) 18:11:24 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x6, 0x4c314356, 0x2, @discrete={0xbbe, 0x5}}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x10000, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000100)={0x3, @sliced={0xde, [0xfff, 0x80, 0x2173, 0x0, 0x6, 0x0, 0xffff, 0x5, 0x5598, 0x7, 0x1, 0x7fff, 0xcb2, 0x760, 0x7, 0x5a0b, 0x4, 0x3, 0x6, 0x81, 0x3, 0x0, 0x7fff, 0x8001, 0x401, 0xfff, 0x3ee5, 0x2, 0x1, 0x868, 0x5, 0x7, 0x0, 0x6, 0x3ff, 0xfff, 0x1, 0x2, 0xffff, 0x4, 0x0, 0x1, 0xa2e, 0x2, 0x20, 0xfff, 0xbf, 0xc9], 0xfff}}) 18:11:24 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x400}, 0x3}, 0x1, 0x0, 0x0, 0x10}, 0x40800) 18:11:24 executing program 2: r0 = shmget(0x3, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil) shmctl$IPC_RMID(r0, 0x0) (async) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000400)=""/29) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000340)={0x5, 0x1f, 0x0, 'queue1\x00', 0x2}) (async) r2 = shmget(0x3, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil) shmctl$IPC_RMID(r2, 0x0) (async, rerun: 32) shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000440)=""/11) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000040)={{0x14}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000200)={0x5, 0x400000, 0x3}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000300)={0x80000000, &(0x7f00000001c0), &(0x7f0000000280)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000000c0)={r3, &(0x7f0000000100), &(0x7f0000000140)}) 18:11:24 executing program 4: r0 = getuid() r1 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r1, 0xffffffffffffffff, 0x20}) r2 = getgid() r3 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r2, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r1, r3, 0xf001}) r4 = syz_open_procfs(r1, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000940)) r5 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000f40)={{r4}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r6}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r8, 0x1}, 0x14}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@private, @broadcast, 0x0}, &(0x7f0000000080)=0xc) r10 = getuid() r11 = getuid() r12 = getpid() r13 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000480)={{0x1, r10, r2, r11, r2, 0x10, 0x8}, 0xeb, 0xd56, 0x4, 0x4, r12, r13, 0x200}) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r7) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r14, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x401}]}, 0x30}}, 0x40000) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24084094}, 0x444) r15 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r15, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) 18:11:24 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x6, 0x4c314356, 0x2, @discrete={0xbbe, 0x5}}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) syz_open_dev$vim2m(&(0x7f0000000080), 0x10000, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000100)={0x3, @sliced={0xde, [0xfff, 0x80, 0x2173, 0x0, 0x6, 0x0, 0xffff, 0x5, 0x5598, 0x7, 0x1, 0x7fff, 0xcb2, 0x760, 0x7, 0x5a0b, 0x4, 0x3, 0x6, 0x81, 0x3, 0x0, 0x7fff, 0x8001, 0x401, 0xfff, 0x3ee5, 0x2, 0x1, 0x868, 0x5, 0x7, 0x0, 0x6, 0x3ff, 0xfff, 0x1, 0x2, 0xffff, 0x4, 0x0, 0x1, 0xa2e, 0x2, 0x20, 0xfff, 0xbf, 0xc9], 0xfff}}) 18:11:24 executing program 0: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='numa_maps\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8000000000000000) 18:11:24 executing program 4: r0 = getuid() (async) r1 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r1, 0xffffffffffffffff, 0x20}) (async) r2 = getgid() (async) r3 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r2, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r1, r3, 0xf001}) (async) r4 = syz_open_procfs(r1, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000940)) (async) r5 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000f40)={{r4}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r6}) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r8, 0x1}, 0x14}}, 0x0) (async, rerun: 32) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@private, @broadcast, 0x0}, &(0x7f0000000080)=0xc) (async, rerun: 32) r10 = getuid() (async) r11 = getuid() (async) r12 = getpid() r13 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000480)={{0x1, r10, r2, r11, r2, 0x10, 0x8}, 0xeb, 0xd56, 0x4, 0x4, r12, r13, 0x200}) (async) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r7) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r14, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x401}]}, 0x30}}, 0x40000) (async) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24084094}, 0x444) r15 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r15, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) 18:11:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, 0x0, 0x40800) 18:11:24 executing program 1: r0 = getuid() r1 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r1, 0xffffffffffffffff, 0x20}) r2 = getgid() r3 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r2, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r1, r3, 0xf001}) r4 = syz_open_procfs(r1, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000940)) r5 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000f40)={{r4}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r6}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0xedc86ecc235a0625}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r7 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x8000000000000000) 18:11:24 executing program 0: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='numa_maps\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8000000000000000) 18:11:24 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000100)=@multiplanar_overlay={0xffffff01, 0x1, 0x4, 0x0, 0x1, {}, {0x0, 0xc, 0x7, 0x0, 0x3f, 0x7f, "d2773749"}, 0x0, 0x3, {&(0x7f0000000000)=[{0x100000, 0x333d, {0x7}, 0x6}, {0x9, 0xffffffff, {0x6}, 0x1}]}, 0x2, 0x0, 0xffffffffffffffff}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000980)={0x3, @pix_mp={0x6, 0xe15b, 0x52424752, 0x1, 0x7, [{0x4dd4bc8f, 0x3f}, {0x4, 0x10001}, {0xe5, 0x9}, {0x80000003, 0x45}, {0x1, 0x2}, {0x9, 0x1}, {0x8, 0x5}, {0xa61, 0x1f}], 0x1, 0x1, 0x0, 0x0, 0x4}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000180)={0x0, 0xfffffffffffffffa, 0x9e6d, 0x1}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000580)={r4, 0xe358, 0x40, 0x1}) 18:11:24 executing program 2: r0 = shmget(0x3, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil) shmctl$IPC_RMID(r0, 0x0) (async) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000400)=""/29) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000340)={0x5, 0x1f, 0x0, 'queue1\x00', 0x2}) (async) r2 = shmget(0x3, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil) shmctl$IPC_RMID(r2, 0x0) (async) shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000440)=""/11) (async) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000040)={{0x14}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000200)={0x5, 0x400000, 0x3}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000300)={0x80000000, &(0x7f00000001c0), &(0x7f0000000280)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000000c0)={r3, &(0x7f0000000100), &(0x7f0000000140)}) 18:11:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, 0x0, 0x40800) 18:11:24 executing program 1: r0 = getuid() r1 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r1, 0xffffffffffffffff, 0x20}) r2 = getgid() r3 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r2, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r1, r3, 0xf001}) r4 = syz_open_procfs(r1, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000940)) r5 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000f40)={{r4}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r6}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0xedc86ecc235a0625}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r7 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x8000000000000000) getuid() (async) getpid() (async) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r1, 0xffffffffffffffff, 0x20}) (async) getgid() (async) getpid() (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r2, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r1, r3, 0xf001}) (async) syz_open_procfs(r1, &(0x7f00000008c0)='net/ip_mr_vif\x00') (async) ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000900)) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000940)) (async) userfaultfd(0x80000) (async) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000f40)={{r4}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r6}) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0xedc86ecc235a0625}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x8000000000000000) (async) 18:11:24 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x400) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f00000000c0)=""/131) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f00000001c0)={0x4, 0x9901, 0x7064}) 18:11:24 executing program 3: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) (async) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000100)=@multiplanar_overlay={0xffffff01, 0x1, 0x4, 0x0, 0x1, {}, {0x0, 0xc, 0x7, 0x0, 0x3f, 0x7f, "d2773749"}, 0x0, 0x3, {&(0x7f0000000000)=[{0x100000, 0x333d, {0x7}, 0x6}, {0x9, 0xffffffff, {0x6}, 0x1}]}, 0x2}) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000100)=@multiplanar_overlay={0xffffff01, 0x1, 0x4, 0x0, 0x1, {}, {0x0, 0xc, 0x7, 0x0, 0x3f, 0x7f, "d2773749"}, 0x0, 0x3, {&(0x7f0000000000)=[{0x100000, 0x333d, {0x7}, 0x6}, {0x9, 0xffffffff, {0x6}, 0x1}]}, 0x2, 0x0, 0xffffffffffffffff}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000980)={0x3, @pix_mp={0x6, 0xe15b, 0x52424752, 0x1, 0x7, [{0x4dd4bc8f, 0x3f}, {0x4, 0x10001}, {0xe5, 0x9}, {0x80000003, 0x45}, {0x1, 0x2}, {0x9, 0x1}, {0x8, 0x5}, {0xa61, 0x1f}], 0x1, 0x1, 0x0, 0x0, 0x4}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000180)={0x0, 0xfffffffffffffffa, 0x9e6d, 0x1}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000580)={r4, 0xe358, 0x40, 0x1}) 18:11:24 executing program 0: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='numa_maps\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8000000000000000) getpid() (async) syz_open_procfs(r0, &(0x7f0000000040)='numa_maps\x00') (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8000000000000000) (async) 18:11:24 executing program 4: r0 = getuid() (async) r1 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r1, 0xffffffffffffffff, 0x20}) (async) r2 = getgid() (async) r3 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r2, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r1, r3, 0xf001}) (async) r4 = syz_open_procfs(r1, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000900)) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000940)) r5 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000f40)={{r4}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r6}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r8, 0x1}, 0x14}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@private, @broadcast, 0x0}, &(0x7f0000000080)=0xc) (async) r10 = getuid() (async, rerun: 32) r11 = getuid() (rerun: 32) r12 = getpid() (async) r13 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000480)={{0x1, r10, r2, r11, r2, 0x10, 0x8}, 0xeb, 0xd56, 0x4, 0x4, r12, r13, 0x200}) (async) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r7) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r14, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x401}]}, 0x30}}, 0x40000) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24084094}, 0x444) r15 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r15, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) 18:11:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, 0x0, 0x40800) 18:11:24 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x400) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) (async) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f00000000c0)=""/131) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f00000001c0)={0x4, 0x9901, 0x7064}) 18:11:24 executing program 1: r0 = getuid() getpid() (async) r1 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r1, 0xffffffffffffffff, 0x20}) (async) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r1, 0xffffffffffffffff, 0x20}) r2 = getgid() getpid() (async) r3 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r2, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r1, r3, 0xf001}) r4 = syz_open_procfs(r1, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000900)) (async) ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000940)) r5 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000f40)={{r4}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r6}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0xedc86ecc235a0625}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r7 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x8000000000000000) (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x8000000000000000) 18:11:24 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x440040) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0xf181) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000200)={0x1d, 0x4, {0x1, @usage=0x8000, 0x0, 0x9, 0x2, 0x4, 0x400, 0x6, 0xc, @usage=0x10001, 0x20, 0x2990f62c, [0xff, 0x80000001, 0x706c, 0x401, 0x800, 0x10000]}, {0x2, @struct={0x0, 0x5}, 0x0, 0x1, 0x0, 0xffffffff, 0x1f, 0x2, 0x41, @struct={0xb25, 0x5}, 0x9, 0x10000, [0x7, 0x7fffffffffffffff, 0x3f, 0xee0, 0x6, 0x5]}, {0x40, @struct={0x257, 0x4}, 0x0, 0x7, 0x4, 0x8, 0x0, 0x6068, 0x31, @usage=0xfffffffffffffffe, 0x3fe, 0x5, [0x9, 0x400, 0x1f, 0x8, 0x0, 0x7]}, {0x7ff, 0x87ec, 0x10000}}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000680)={0x2, 0x4, @start={r2, 0x0, "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", "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"}, [0xaa, 0x8, 0x0, 0x40, 0x7fffffff, 0x0, 0x4, 0x2, 0x0, 0xfffffffffffffffb, 0x0, 0xfffffffffffff641, 0x8, 0x7f8000, 0x8, 0x8, 0x1ae, 0x0, 0x5, 0x7, 0x6, 0xffff, 0x3, 0xb3f1, 0x5, 0x9, 0x4, 0x7fffffffffffffff, 0x9, 0x7, 0x81, 0x80, 0x1ff, 0xa3c, 0x8, 0x8, 0x200, 0x8001, 0x5e, 0x4, 0x81, 0xffffffffffffffff, 0x2, 0x3, 0x6, 0x8, 0x3f, 0xffffffffffffffff, 0x100000000, 0x5, 0xd239, 0x400, 0x8fb, 0x1, 0x2, 0x8000, 0x2, 0x8c9, 0x1, 0x1, 0xfffffffffffffff8, 0x5, 0x8, 0x2]}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x18, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="096310400000000000000b630000"], 0xd1, 0x0, &(0x7f00000000c0)="321ecb1d6a88c64f81c91afa5ef84ac3f1f7b386f722e9fadc3cdd933de1a28578e1ef0ca86351e84906b650a2627c421739df2e31ef35406745f5e501b9c7904dd70a35c74749b53fcd02e16ea8c85ebf7f1a5fa514f5aab702c35b58bb0b51635d9fef92b367935994b7007a4b006a5f0997c0e3caaba8aac691ffd2b06c0908e570c2f338fa9a46019b108c198b6df1c749d9a9809ed229af48d75bcf3296ba0e992879e9605cc0910716dcfd5e286c0a20db85c11fd7b340f512a8c6790e8ba1efe210fac5c4fedbb50c1f0917765d"}) 18:11:24 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000100)=@multiplanar_overlay={0xffffff01, 0x1, 0x4, 0x0, 0x1, {}, {0x0, 0xc, 0x7, 0x0, 0x3f, 0x7f, "d2773749"}, 0x0, 0x3, {&(0x7f0000000000)=[{0x100000, 0x333d, {0x7}, 0x6}, {0x9, 0xffffffff, {0x6}, 0x1}]}, 0x2, 0x0, 0xffffffffffffffff}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000980)={0x3, @pix_mp={0x6, 0xe15b, 0x52424752, 0x1, 0x7, [{0x4dd4bc8f, 0x3f}, {0x4, 0x10001}, {0xe5, 0x9}, {0x80000003, 0x45}, {0x1, 0x2}, {0x9, 0x1}, {0x8, 0x5}, {0xa61, 0x1f}], 0x1, 0x1, 0x0, 0x0, 0x4}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000180)={0x0, 0xfffffffffffffffa, 0x9e6d, 0x1}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000580)={r4, 0xe358, 0x40, 0x1}) 18:11:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40800) 18:11:24 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x400) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) (async, rerun: 32) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f00000000c0)=""/131) (rerun: 32) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f00000001c0)={0x4, 0x9901, 0x7064}) 18:11:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') (async) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x440040) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0xf181) (async) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000200)={0x1d, 0x4, {0x1, @usage=0x8000, 0x0, 0x9, 0x2, 0x4, 0x400, 0x6, 0xc, @usage=0x10001, 0x20, 0x2990f62c, [0xff, 0x80000001, 0x706c, 0x401, 0x800, 0x10000]}, {0x2, @struct={0x0, 0x5}, 0x0, 0x1, 0x0, 0xffffffff, 0x1f, 0x2, 0x41, @struct={0xb25, 0x5}, 0x9, 0x10000, [0x7, 0x7fffffffffffffff, 0x3f, 0xee0, 0x6, 0x5]}, {0x40, @struct={0x257, 0x4}, 0x0, 0x7, 0x4, 0x8, 0x0, 0x6068, 0x31, @usage=0xfffffffffffffffe, 0x3fe, 0x5, [0x9, 0x400, 0x1f, 0x8, 0x0, 0x7]}, {0x7ff, 0x87ec, 0x10000}}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000680)={0x2, 0x4, @start={r2, 0x0, "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", "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"}, [0xaa, 0x8, 0x0, 0x40, 0x7fffffff, 0x0, 0x4, 0x2, 0x0, 0xfffffffffffffffb, 0x0, 0xfffffffffffff641, 0x8, 0x7f8000, 0x8, 0x8, 0x1ae, 0x0, 0x5, 0x7, 0x6, 0xffff, 0x3, 0xb3f1, 0x5, 0x9, 0x4, 0x7fffffffffffffff, 0x9, 0x7, 0x81, 0x80, 0x1ff, 0xa3c, 0x8, 0x8, 0x200, 0x8001, 0x5e, 0x4, 0x81, 0xffffffffffffffff, 0x2, 0x3, 0x6, 0x8, 0x3f, 0xffffffffffffffff, 0x100000000, 0x5, 0xd239, 0x400, 0x8fb, 0x1, 0x2, 0x8000, 0x2, 0x8c9, 0x1, 0x1, 0xfffffffffffffff8, 0x5, 0x8, 0x2]}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x18, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="096310400000000000000b630000"], 0xd1, 0x0, &(0x7f00000000c0)="321ecb1d6a88c64f81c91afa5ef84ac3f1f7b386f722e9fadc3cdd933de1a28578e1ef0ca86351e84906b650a2627c421739df2e31ef35406745f5e501b9c7904dd70a35c74749b53fcd02e16ea8c85ebf7f1a5fa514f5aab702c35b58bb0b51635d9fef92b367935994b7007a4b006a5f0997c0e3caaba8aac691ffd2b06c0908e570c2f338fa9a46019b108c198b6df1c749d9a9809ed229af48d75bcf3296ba0e992879e9605cc0910716dcfd5e286c0a20db85c11fd7b340f512a8c6790e8ba1efe210fac5c4fedbb50c1f0917765d"}) 18:11:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40800) 18:11:25 executing program 1: syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xd75) 18:11:25 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @sliced={0x6, [0x5, 0xed, 0x0, 0xf001, 0x986, 0x5, 0x9, 0x4, 0x440, 0x1f, 0x0, 0xb50, 0x9, 0x101, 0x101, 0x5, 0x94, 0x0, 0x6, 0x4, 0x1, 0x5, 0x1, 0x800, 0x1, 0x7, 0x9, 0x3, 0x4, 0x6, 0x8001, 0x0, 0x3, 0xfbaf, 0x5, 0x8, 0x80, 0x3e88, 0x4599, 0x1, 0x3f, 0x1, 0x5, 0xfef0, 0x200, 0xffff, 0x1, 0x200], 0xfff}}) personality(0xf) 18:11:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40800) 18:11:25 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000000c0)={{0x14}, {0xfe}, 0x0, 0x4}) 18:11:25 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r1 = getuid() r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) r3 = getgid() r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) r6 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000100)={0x0, @sliced={0x3, [0x9, 0x7f, 0x0, 0x8, 0x7fff, 0x7, 0x9, 0x3f, 0x1, 0xdd7e, 0x3, 0x0, 0xfbff, 0x3f, 0x4, 0x9, 0x8000, 0x0, 0x7, 0x65, 0x3, 0x4, 0x3, 0x5, 0xff7f, 0x5, 0x852, 0x1000, 0x5, 0x9, 0x4, 0x9, 0x1, 0x5, 0x1ff, 0x87aa, 0xfe01, 0x3f, 0x0, 0x2, 0x401, 0x9, 0xb2c, 0x2, 0x2d, 0x40, 0xfff9, 0x4], 0x9}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) 18:11:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') (async) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x440040) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0xf181) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000200)={0x1d, 0x4, {0x1, @usage=0x8000, 0x0, 0x9, 0x2, 0x4, 0x400, 0x6, 0xc, @usage=0x10001, 0x20, 0x2990f62c, [0xff, 0x80000001, 0x706c, 0x401, 0x800, 0x10000]}, {0x2, @struct={0x0, 0x5}, 0x0, 0x1, 0x0, 0xffffffff, 0x1f, 0x2, 0x41, @struct={0xb25, 0x5}, 0x9, 0x10000, [0x7, 0x7fffffffffffffff, 0x3f, 0xee0, 0x6, 0x5]}, {0x40, @struct={0x257, 0x4}, 0x0, 0x7, 0x4, 0x8, 0x0, 0x6068, 0x31, @usage=0xfffffffffffffffe, 0x3fe, 0x5, [0x9, 0x400, 0x1f, 0x8, 0x0, 0x7]}, {0x7ff, 0x87ec, 0x10000}}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000680)={0x2, 0x4, @start={r2, 0x0, "420754b715cf7a009fa1ca85fb58e69cb1f6cdb5924c5455634cdf41055e747588ae1775db8d24f92f077ba8eb4c3d66156207599d2a348d9d2fbcafe92500f9bfa54d39d3ce7cf3e982dc3a572a7bbb9759d7742fe46609c1327a321ebc8937f1e6fc282df3980883212035fa8bf33f9dda1e97446db1d94aee8544933c5b38a560c467f113e6025cd0caf555f72fcd7c57bc9e529d672ffbc601ad3e1aa30a766231430106ae500ceeec5cda76584b5735800efd28db3e7ffac79a50188fbfa77dcbf4a14848802d9d4a9cee96fc03ff4ebcf4debf0b93c2e8a9416caab6aefe0108d0b9acc262bcde81a3e6cf92087fefebc978135fcb81cb37b5df232b691ec94f7bc1fae8e7239cb41803285bd85c44c646176c7298d96cd60b4335a71098c080096ecc937f828967d466e912dc7f68ec7e0cfbd672a334819c215eb669dba0e941c1276c61b5a7b51b5e566d2b119928e0d232e8a4dd7e718bbda1f42882959b816608069caf2309a6b75e03d00871db88935e9252ac20d7a52b17eb1679f495d92309ac2116e079052f97514a841bd83a29daab0481f73861bda9fb2f10398526b95af43aa09624db6cc963df400c90522b9d7fc78bd12685161f79eb68536961a64b05d9fc7ab55976ebebc7d4c697820b700d5e3b89cac8e25bb5932f978a7d5eaf92668a504b3d235748659e4cef66b990ab25ae29d6e7016b63c9aed8dff49b9f1cfc320fed7c66e53944bafaa279d43c11d54ef25832657d9efa9399802eb1b7a25e1d60dccf3581969d28dfc758b8f55d38d85afe754820819a89f5af514f8594f1f36d04192723976e17184669d921fc7281d565c17230adb03366513db04c338746a7036de4a43da61e504b2ecdbb5d69e88f650e052bd38c7f20e7b716b858c15927c8c2f2687d0079814e330357964951d290632a309010f0d155ab08a5cd95865d328f8c38649288e7aeb50b2064b66c1ac94397f60055c63c34bd46c3a502e9ac072110095e17c586ebaece572450c881be4995d2239127992e8995f173692f067e1fbf122832eaeb35dc1ac6df8d2d8cfe8957c762bec7d08ff06c67e0b8139b85b15e5ab6bafe2ee6dd1c77dd9bf7faa93d94f6a5e0c285ef43c11cbc3f72998f46c861819e484f8e5eedbd4a6547c6a24979ec2f949f30b080057a581a1659fee544db29008974be2764ae5116bc2a22e43c528cb63866940764c209200f35ed68eacd090af4f9ad69aa23e50df41cb347a28bb4d6669e59b9fb603ae0f34f63cbf7170852f46b9ef3b3ec2afcf5dbc4ea20a8d258a162c20f5b70b94cf106eeeeba985ba2aa18b228def04aaa13f8e9f0318160e727246915bd11bd14da75c181a19bc609c7a2c5c81cd8155122c0513238fc1fd80b5b600eb87b793a314186eee0e61ca7adffd3576341f6f56167683bc8ba41386b", "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"}, [0xaa, 0x8, 0x0, 0x40, 0x7fffffff, 0x0, 0x4, 0x2, 0x0, 0xfffffffffffffffb, 0x0, 0xfffffffffffff641, 0x8, 0x7f8000, 0x8, 0x8, 0x1ae, 0x0, 0x5, 0x7, 0x6, 0xffff, 0x3, 0xb3f1, 0x5, 0x9, 0x4, 0x7fffffffffffffff, 0x9, 0x7, 0x81, 0x80, 0x1ff, 0xa3c, 0x8, 0x8, 0x200, 0x8001, 0x5e, 0x4, 0x81, 0xffffffffffffffff, 0x2, 0x3, 0x6, 0x8, 0x3f, 0xffffffffffffffff, 0x100000000, 0x5, 0xd239, 0x400, 0x8fb, 0x1, 0x2, 0x8000, 0x2, 0x8c9, 0x1, 0x1, 0xfffffffffffffff8, 0x5, 0x8, 0x2]}) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x18, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="096310400000000000000b630000"], 0xd1, 0x0, &(0x7f00000000c0)="321ecb1d6a88c64f81c91afa5ef84ac3f1f7b386f722e9fadc3cdd933de1a28578e1ef0ca86351e84906b650a2627c421739df2e31ef35406745f5e501b9c7904dd70a35c74749b53fcd02e16ea8c85ebf7f1a5fa514f5aab702c35b58bb0b51635d9fef92b367935994b7007a4b006a5f0997c0e3caaba8aac691ffd2b06c0908e570c2f338fa9a46019b108c198b6df1c749d9a9809ed229af48d75bcf3296ba0e992879e9605cc0910716dcfd5e286c0a20db85c11fd7b340f512a8c6790e8ba1efe210fac5c4fedbb50c1f0917765d"}) 18:11:25 executing program 1: syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xd75) 18:11:25 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @sliced={0x6, [0x5, 0xed, 0x0, 0xf001, 0x986, 0x5, 0x9, 0x4, 0x440, 0x1f, 0x0, 0xb50, 0x9, 0x101, 0x101, 0x5, 0x94, 0x0, 0x6, 0x4, 0x1, 0x5, 0x1, 0x800, 0x1, 0x7, 0x9, 0x3, 0x4, 0x6, 0x8001, 0x0, 0x3, 0xfbaf, 0x5, 0x8, 0x80, 0x3e88, 0x4599, 0x1, 0x3f, 0x1, 0x5, 0xfef0, 0x200, 0xffff, 0x1, 0x200], 0xfff}}) personality(0xf) 18:11:25 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000000c0)={{0x14}, {0xfe}, 0x0, 0x4}) 18:11:25 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r1 = getuid() r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) (async) r3 = getgid() r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) (async) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) r6 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000100)={0x0, @sliced={0x3, [0x9, 0x7f, 0x0, 0x8, 0x7fff, 0x7, 0x9, 0x3f, 0x1, 0xdd7e, 0x3, 0x0, 0xfbff, 0x3f, 0x4, 0x9, 0x8000, 0x0, 0x7, 0x65, 0x3, 0x4, 0x3, 0x5, 0xff7f, 0x5, 0x852, 0x1000, 0x5, 0x9, 0x4, 0x9, 0x1, 0x5, 0x1ff, 0x87aa, 0xfe01, 0x3f, 0x0, 0x2, 0x401, 0x9, 0xb2c, 0x2, 0x2d, 0x40, 0xfff9, 0x4], 0x9}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) 18:11:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x40800) 18:11:25 executing program 0: mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x8000000000000000) 18:11:25 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000000c0)={{0x14}, {0xfe}, 0x0, 0x4}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000000c0)={{0x14}, {0xfe}, 0x0, 0x4}) (async) 18:11:25 executing program 1: syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') (async) syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xd75) 18:11:25 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r1 = getuid() r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) r3 = getgid() r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) r6 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000100)={0x0, @sliced={0x3, [0x9, 0x7f, 0x0, 0x8, 0x7fff, 0x7, 0x9, 0x3f, 0x1, 0xdd7e, 0x3, 0x0, 0xfbff, 0x3f, 0x4, 0x9, 0x8000, 0x0, 0x7, 0x65, 0x3, 0x4, 0x3, 0x5, 0xff7f, 0x5, 0x852, 0x1000, 0x5, 0x9, 0x4, 0x9, 0x1, 0x5, 0x1ff, 0x87aa, 0xfe01, 0x3f, 0x0, 0x2, 0x401, 0x9, 0xb2c, 0x2, 0x2d, 0x40, 0xfff9, 0x4], 0x9}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) (async) getuid() (async) getpid() (async) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) (async) getgid() (async) getpid() (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) (async) syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') (async) ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) (async) userfaultfd(0x80000) (async) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000100)={0x0, @sliced={0x3, [0x9, 0x7f, 0x0, 0x8, 0x7fff, 0x7, 0x9, 0x3f, 0x1, 0xdd7e, 0x3, 0x0, 0xfbff, 0x3f, 0x4, 0x9, 0x8000, 0x0, 0x7, 0x65, 0x3, 0x4, 0x3, 0x5, 0xff7f, 0x5, 0x852, 0x1000, 0x5, 0x9, 0x4, 0x9, 0x1, 0x5, 0x1ff, 0x87aa, 0xfe01, 0x3f, 0x0, 0x2, 0x401, 0x9, 0xb2c, 0x2, 0x2d, 0x40, 0xfff9, 0x4], 0x9}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) (async) 18:11:25 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @sliced={0x6, [0x5, 0xed, 0x0, 0xf001, 0x986, 0x5, 0x9, 0x4, 0x440, 0x1f, 0x0, 0xb50, 0x9, 0x101, 0x101, 0x5, 0x94, 0x0, 0x6, 0x4, 0x1, 0x5, 0x1, 0x800, 0x1, 0x7, 0x9, 0x3, 0x4, 0x6, 0x8001, 0x0, 0x3, 0xfbaf, 0x5, 0x8, 0x80, 0x3e88, 0x4599, 0x1, 0x3f, 0x1, 0x5, 0xfef0, 0x200, 0xffff, 0x1, 0x200], 0xfff}}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @sliced={0x6, [0x5, 0xed, 0x0, 0xf001, 0x986, 0x5, 0x9, 0x4, 0x440, 0x1f, 0x0, 0xb50, 0x9, 0x101, 0x101, 0x5, 0x94, 0x0, 0x6, 0x4, 0x1, 0x5, 0x1, 0x800, 0x1, 0x7, 0x9, 0x3, 0x4, 0x6, 0x8001, 0x0, 0x3, 0xfbaf, 0x5, 0x8, 0x80, 0x3e88, 0x4599, 0x1, 0x3f, 0x1, 0x5, 0xfef0, 0x200, 0xffff, 0x1, 0x200], 0xfff}}) personality(0xf) 18:11:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x40800) 18:11:25 executing program 0: mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x8000000000000000) 18:11:25 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}, {0x98}, 0x0, 0x5}) 18:11:25 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0xc31ef82d5f16c9a, 0x0) read$usbfs(r0, &(0x7f0000000040)=""/165, 0xa5) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000002000002) 18:11:25 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r1 = getuid() r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) r3 = getgid() r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) r6 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r9, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r9, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000090}, 0x40000) clock_adjtime(0x2, &(0x7f0000000100)={0x67, 0x80, 0x1ff, 0x7, 0x100, 0x6, 0x3, 0xcede, 0xf86c, 0x8, 0x2, 0x0, 0xe82, 0x8, 0x8, 0x0, 0x8000000000000000, 0x5, 0x8, 0x7000, 0x800, 0x6, 0x2, 0x1000, 0x2, 0x5}) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r10, 0xc0405602, &(0x7f0000000040)={0x401, 0x2, 0x1, "a1c12c4cebdda4952fd452bed8d7a359e9758e3198c4b373bba1a5251e8197be", 0x38415262}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) 18:11:25 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x2, @win={{0xfffffe00, 0x40000000, 0x9, 0x7}, 0x0, 0xfffffe00, &(0x7f0000000080)={{0x1, 0x4d, 0x1, 0x80000001}, &(0x7f0000000040)={{0xc4, 0xdcc4b45, 0xfffffffc, 0xffffffff}, &(0x7f0000000000)={{0x5, 0x4, 0xfffffffd, 0xf1}}}}, 0x401, &(0x7f0000000180)="547e9ad8a67a310a40b870879b7efb7da039f8d34cf32cbc218c3744f7f3b86803e92a74c5d85f5f664d03ec931ac6c4d7a026ae7d57c914a98cc7ca9771b463a38b25e398fd947ea455ec7546df070d6ae3a865bb16ddb6f8cc46b97c79cf69821a6db8e5ed0cf6957b60876a027aa45b0c1e1080b56f80", 0xa}}) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) 18:11:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x40800) 18:11:25 executing program 0: mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x8000000000000000) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x8000000000000000) (async) 18:11:25 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}, {0x98}, 0x0, 0x5}) 18:11:25 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x2, @win={{0xfffffe00, 0x40000000, 0x9, 0x7}, 0x0, 0xfffffe00, &(0x7f0000000080)={{0x1, 0x4d, 0x1, 0x80000001}, &(0x7f0000000040)={{0xc4, 0xdcc4b45, 0xfffffffc, 0xffffffff}, &(0x7f0000000000)={{0x5, 0x4, 0xfffffffd, 0xf1}}}}, 0x401, &(0x7f0000000180)="547e9ad8a67a310a40b870879b7efb7da039f8d34cf32cbc218c3744f7f3b86803e92a74c5d85f5f664d03ec931ac6c4d7a026ae7d57c914a98cc7ca9771b463a38b25e398fd947ea455ec7546df070d6ae3a865bb16ddb6f8cc46b97c79cf69821a6db8e5ed0cf6957b60876a027aa45b0c1e1080b56f80", 0xa}}) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) (async) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) 18:11:25 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000a80)={{0x0, 0x1, 0x0, 0x6ac, 0x40, 0x4, 0x9855, 0x4, 0x1, 0x90, 0x9, 0x101, 0x8000000000000001, 0x82bb, 0x400}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000b40)={{r1, 0x7cb7, 0x1, 0x4, 0x1de, 0x2, 0x7, 0x800, 0x7, 0x1f, 0x27a, 0x6, 0x7, 0x1, 0x2}}) close$fd_v4l2_buffer(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x1f80, 0x1f, 0x10001, {0x80000001, 0x1}, 0x4, 0x800}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000040)={0x6, 0x8, 0x0, {0x5, 0x6}, 0x7ff, 0x8}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') openat$cgroup_ro(r2, &(0x7f0000000580)='freezer.state\x00', 0x0, 0x0) r3 = openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f00000005c0)={0x80000000, 0x0, 0x7fffffff, {0x6e3, 0x7}, 0x0, 0x3}) close$fd_v4l2_buffer(r0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000680)={0x0, 0x100, 0x2}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000180)={0x0, 0xf8, 0x8000}) 18:11:25 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r1 = getuid() (async) r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) (async) r3 = getgid() (async) r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) (async, rerun: 32) r6 = userfaultfd(0x80000) (async) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r9, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x24}}, 0x0) (async, rerun: 32) sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r9, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000090}, 0x40000) (async, rerun: 32) clock_adjtime(0x2, &(0x7f0000000100)={0x67, 0x80, 0x1ff, 0x7, 0x100, 0x6, 0x3, 0xcede, 0xf86c, 0x8, 0x2, 0x0, 0xe82, 0x8, 0x8, 0x0, 0x8000000000000000, 0x5, 0x8, 0x7000, 0x800, 0x6, 0x2, 0x1000, 0x2, 0x5}) (async, rerun: 32) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) (rerun: 32) ioctl$vim2m_VIDIOC_ENUM_FMT(r10, 0xc0405602, &(0x7f0000000040)={0x401, 0x2, 0x1, "a1c12c4cebdda4952fd452bed8d7a359e9758e3198c4b373bba1a5251e8197be", 0x38415262}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) 18:11:25 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0xc31ef82d5f16c9a, 0x0) (async) read$usbfs(r0, &(0x7f0000000040)=""/165, 0xa5) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000002000002) 18:11:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x3}, 0x1, 0x0, 0x0, 0x10}, 0x40800) 18:11:25 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}, {0x98}, 0x0, 0x5}) 18:11:25 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000a80)={{0x0, 0x1, 0x0, 0x6ac, 0x40, 0x4, 0x9855, 0x4, 0x1, 0x90, 0x9, 0x101, 0x8000000000000001, 0x82bb, 0x400}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000b40)={{r1, 0x7cb7, 0x1, 0x4, 0x1de, 0x2, 0x7, 0x800, 0x7, 0x1f, 0x27a, 0x6, 0x7, 0x1, 0x2}}) (async, rerun: 32) close$fd_v4l2_buffer(r0) (rerun: 32) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x1f80, 0x1f, 0x10001, {0x80000001, 0x1}, 0x4, 0x800}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000040)={0x6, 0x8, 0x0, {0x5, 0x6}, 0x7ff, 0x8}) (async, rerun: 32) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') (rerun: 32) openat$cgroup_ro(r2, &(0x7f0000000580)='freezer.state\x00', 0x0, 0x0) (async) r3 = openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f00000005c0)={0x80000000, 0x0, 0x7fffffff, {0x6e3, 0x7}, 0x0, 0x3}) (async, rerun: 64) close$fd_v4l2_buffer(r0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000680)={0x0, 0x100, 0x2}) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000180)={0x0, 0xf8, 0x8000}) 18:11:25 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0xc31ef82d5f16c9a, 0x0) read$usbfs(r0, &(0x7f0000000040)=""/165, 0xa5) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000002000002) syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0xc31ef82d5f16c9a, 0x0) (async) read$usbfs(r0, &(0x7f0000000040)=""/165, 0xa5) (async) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000002000002) (async) 18:11:25 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x2, @win={{0xfffffe00, 0x40000000, 0x9, 0x7}, 0x0, 0xfffffe00, &(0x7f0000000080)={{0x1, 0x4d, 0x1, 0x80000001}, &(0x7f0000000040)={{0xc4, 0xdcc4b45, 0xfffffffc, 0xffffffff}, &(0x7f0000000000)={{0x5, 0x4, 0xfffffffd, 0xf1}}}}, 0x401, &(0x7f0000000180)="547e9ad8a67a310a40b870879b7efb7da039f8d34cf32cbc218c3744f7f3b86803e92a74c5d85f5f664d03ec931ac6c4d7a026ae7d57c914a98cc7ca9771b463a38b25e398fd947ea455ec7546df070d6ae3a865bb16ddb6f8cc46b97c79cf69821a6db8e5ed0cf6957b60876a027aa45b0c1e1080b56f80", 0xa}}) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x2, @win={{0xfffffe00, 0x40000000, 0x9, 0x7}, 0x0, 0xfffffe00, &(0x7f0000000080)={{0x1, 0x4d, 0x1, 0x80000001}, &(0x7f0000000040)={{0xc4, 0xdcc4b45, 0xfffffffc, 0xffffffff}, &(0x7f0000000000)={{0x5, 0x4, 0xfffffffd, 0xf1}}}}, 0x401, &(0x7f0000000180)="547e9ad8a67a310a40b870879b7efb7da039f8d34cf32cbc218c3744f7f3b86803e92a74c5d85f5f664d03ec931ac6c4d7a026ae7d57c914a98cc7ca9771b463a38b25e398fd947ea455ec7546df070d6ae3a865bb16ddb6f8cc46b97c79cf69821a6db8e5ed0cf6957b60876a027aa45b0c1e1080b56f80", 0xa}}) (async) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) (async) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) (async) 18:11:25 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000000c0)={{0x1, 0x9}, 'port1\x00', 0x80, 0x40, 0x6, 0x20, 0x114, 0xe4d0, 0x8, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) 18:11:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x3}}, 0x40800) 18:11:25 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) (async) r1 = getuid() (async) r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) r3 = getgid() (async) r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) (async) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) (async) r6 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r9, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r9, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000090}, 0x40000) (async) clock_adjtime(0x2, &(0x7f0000000100)={0x67, 0x80, 0x1ff, 0x7, 0x100, 0x6, 0x3, 0xcede, 0xf86c, 0x8, 0x2, 0x0, 0xe82, 0x8, 0x8, 0x0, 0x8000000000000000, 0x5, 0x8, 0x7000, 0x800, 0x6, 0x2, 0x1000, 0x2, 0x5}) (async) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r10, 0xc0405602, &(0x7f0000000040)={0x401, 0x2, 0x1, "a1c12c4cebdda4952fd452bed8d7a359e9758e3198c4b373bba1a5251e8197be", 0x38415262}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) 18:11:25 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffe, 0x18242) r2 = getuid() r3 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r2, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r3, 0xffffffffffffffff, 0x20}) r4 = getgid() r5 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r2, 0xee01, r2, r4, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r3, r5, 0xf001}) r6 = syz_open_procfs(r3, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r6, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r6, 0x80045301, &(0x7f0000000940)) r7 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r7, 0x50009417, &(0x7f0000000f40)={{r6}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r8}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000040)=@mmap={0x6, 0x1, 0x4, 0x100000, 0x7, {0x0, 0xea60}, {0x1, 0x0, 0x8, 0x3, 0xfc, 0x1, "22ac2638"}, 0x5, 0x1, {}, 0x6, 0x0, r6}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) 18:11:25 executing program 1: shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x480040) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000040)={{0x2, 0x9}, 'port1\x00', 0x18, 0x4, 0xffffff01, 0x20, 0x9, 0x2, 0x3, 0x0, 0x6, 0x9f}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) 18:11:25 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000a80)={{0x0, 0x1, 0x0, 0x6ac, 0x40, 0x4, 0x9855, 0x4, 0x1, 0x90, 0x9, 0x101, 0x8000000000000001, 0x82bb, 0x400}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000b40)={{r1, 0x7cb7, 0x1, 0x4, 0x1de, 0x2, 0x7, 0x800, 0x7, 0x1f, 0x27a, 0x6, 0x7, 0x1, 0x2}}) (async) close$fd_v4l2_buffer(r0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x1f80, 0x1f, 0x10001, {0x80000001, 0x1}, 0x4, 0x800}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000040)={0x6, 0x8, 0x0, {0x5, 0x6}, 0x7ff, 0x8}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') openat$cgroup_ro(r2, &(0x7f0000000580)='freezer.state\x00', 0x0, 0x0) r3 = openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f00000005c0)={0x80000000, 0x0, 0x7fffffff, {0x6e3, 0x7}, 0x0, 0x3}) (async, rerun: 64) close$fd_v4l2_buffer(r0) (async, rerun: 64) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000680)={0x0, 0x100, 0x2}) (async, rerun: 64) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000180)={0x0, 0xf8, 0x8000}) (rerun: 64) 18:11:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x3}}, 0x0) 18:11:25 executing program 4: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x71, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x1, 0x0, "510000000020df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x9) 18:11:25 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000000c0)={{0x1, 0x9}, 'port1\x00', 0x80, 0x40, 0x6, 0x20, 0x114, 0xe4d0, 0x8, 0x0, 0x4}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) 18:11:25 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffe, 0x18242) r2 = getuid() (async) r3 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r2, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r3, 0xffffffffffffffff, 0x20}) r4 = getgid() r5 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r2, 0xee01, r2, r4, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r3, r5, 0xf001}) (async) r6 = syz_open_procfs(r3, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r6, 0x8004551a, &(0x7f0000000900)) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r6, 0x80045301, &(0x7f0000000940)) r7 = userfaultfd(0x80000) (async) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r7, 0x50009417, &(0x7f0000000f40)={{r6}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r8}) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000040)=@mmap={0x6, 0x1, 0x4, 0x100000, 0x7, {0x0, 0xea60}, {0x1, 0x0, 0x8, 0x3, 0xfc, 0x1, "22ac2638"}, 0x5, 0x1, {}, 0x6, 0x0, r6}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) 18:11:25 executing program 0: syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xe00e, 0x301840) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x2d24cd9) 18:11:25 executing program 1: shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x480040) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000040)={{0x2, 0x9}, 'port1\x00', 0x18, 0x4, 0xffffff01, 0x20, 0x9, 0x2, 0x3, 0x0, 0x6, 0x9f}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) 18:11:25 executing program 4: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x71, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x1, 0x0, "510000000020df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x9) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x71, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x1, 0x0, "510000000020df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) (async) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x9) (async) 18:11:25 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000a80)={{0x0, 0x1, 0x0, 0x6ac, 0x40, 0x4, 0x9855, 0x4, 0x1, 0x90, 0x9, 0x101, 0x8000000000000001, 0x82bb, 0x400}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000b40)={{r1, 0x7cb7, 0x1, 0x4, 0x1de, 0x2, 0x7, 0x800, 0x7, 0x1f, 0x27a, 0x6, 0x7, 0x1, 0x2}}) close$fd_v4l2_buffer(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x1f80, 0x1f, 0x10001, {0x80000001, 0x1}, 0x4, 0x800}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000040)={0x6, 0x8, 0x0, {0x5, 0x6}, 0x7ff, 0x8}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') openat$cgroup_ro(r2, &(0x7f0000000580)='freezer.state\x00', 0x0, 0x0) r3 = openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f00000005c0)={0x80000000, 0x0, 0x7fffffff, {0x6e3, 0x7}, 0x0, 0x3}) close$fd_v4l2_buffer(r0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000680)={0x0, 0x100, 0x2}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000180)={0x0, 0xf8, 0x8000}) 18:11:26 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffe, 0x18242) (async) r2 = getuid() (async) r3 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r2, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r3, 0xffffffffffffffff, 0x20}) (async) r4 = getgid() r5 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r2, 0xee01, r2, r4, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r3, r5, 0xf001}) (async) r6 = syz_open_procfs(r3, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r6, 0x8004551a, &(0x7f0000000900)) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r6, 0x80045301, &(0x7f0000000940)) (async) r7 = userfaultfd(0x80000) (async) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r7, 0x50009417, &(0x7f0000000f40)={{r6}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r8}) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000040)=@mmap={0x6, 0x1, 0x4, 0x100000, 0x7, {0x0, 0xea60}, {0x1, 0x0, 0x8, 0x3, 0xfc, 0x1, "22ac2638"}, 0x5, 0x1, {}, 0x6, 0x0, r6}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) 18:11:26 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000000c0)={{0x1, 0x9}, 'port1\x00', 0x80, 0x40, 0x6, 0x20, 0x114, 0xe4d0, 0x8, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) 18:11:26 executing program 0: syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') (async) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xe00e, 0x301840) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x2d24cd9) 18:11:26 executing program 1: shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x0, 0x0) (async) shmctl$SHM_INFO(0x0, 0xe, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x480040) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000040)={{0x2, 0x9}, 'port1\x00', 0x18, 0x4, 0xffffff01, 0x20, 0x9, 0x2, 0x3, 0x0, 0x6, 0x9f}) (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) 18:11:26 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) 18:11:26 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) r1 = getuid() r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) r3 = getgid() r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) r6 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r5, 0xc0a85322, &(0x7f00000000c0)) 18:11:26 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000a80)={{0x0, 0x1, 0x0, 0x6ac, 0x40, 0x4, 0x9855, 0x4, 0x1, 0x90, 0x9, 0x101, 0x8000000000000001, 0x82bb, 0x400}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000b40)={{r1, 0x7cb7, 0x1, 0x4, 0x1de, 0x2, 0x7, 0x800, 0x7, 0x1f, 0x27a, 0x6, 0x7, 0x1, 0x2}}) close$fd_v4l2_buffer(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x1f80, 0x1f, 0x10001, {0x80000001, 0x1}, 0x4, 0x800}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000040)={0x6, 0x8, 0x0, {0x5, 0x6}, 0x7ff, 0x8}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') openat$cgroup_ro(r2, &(0x7f0000000580)='freezer.state\x00', 0x0, 0x0) r3 = openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f00000005c0)={0x80000000, 0x0, 0x7fffffff, {0x6e3, 0x7}, 0x0, 0x3}) close$fd_v4l2_buffer(r0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000680)={0x0, 0x100, 0x2}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000180)={0x0, 0xf8, 0x8000}) 18:11:26 executing program 4: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x71, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x1, 0x0, "510000000020df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) (async) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x9) 18:11:26 executing program 0: syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xe00e, 0x301840) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x2d24cd9) syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') (async) syz_open_dev$vcsn(&(0x7f0000000000), 0xe00e, 0x301840) (async) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x2d24cd9) (async) 18:11:26 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) getitimer(0x1, &(0x7f0000000000)) 18:11:26 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) 18:11:26 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) r1 = getuid() r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) r3 = getgid() r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) r6 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r5, 0xc0a85322, &(0x7f00000000c0)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) (async) getuid() (async) getpid() (async) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) (async) getgid() (async) getpid() (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) (async) syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') (async) ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) (async) userfaultfd(0x80000) (async) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r5, 0xc0a85322, &(0x7f00000000c0)) (async) 18:11:26 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000a80)={{0x0, 0x1, 0x0, 0x6ac, 0x40, 0x4, 0x9855, 0x4, 0x1, 0x90, 0x9, 0x101, 0x8000000000000001, 0x82bb, 0x400}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000b40)={{r1, 0x7cb7, 0x1, 0x4, 0x1de, 0x2, 0x7, 0x800, 0x7, 0x1f, 0x27a, 0x6, 0x7, 0x1, 0x2}}) close$fd_v4l2_buffer(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x1f80, 0x1f, 0x10001, {0x80000001, 0x1}, 0x4, 0x800}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000040)={0x6, 0x8, 0x0, {0x5, 0x6}, 0x7ff, 0x8}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') openat$cgroup_ro(r2, &(0x7f0000000580)='freezer.state\x00', 0x0, 0x0) r3 = openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f00000005c0)={0x80000000, 0x0, 0x7fffffff, {0x6e3, 0x7}, 0x0, 0x3}) close$fd_v4l2_buffer(r0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000680)={0x0, 0x100, 0x2}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000180)={0x0, 0xf8, 0x8000}) 18:11:26 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) 18:11:26 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000040)={{0x0, 0xb88, 0x2, 0x9, 0x5, 0x8001, 0xd72, 0x4, 0x3, 0x1ff, 0x5, 0xffff, 0x2, 0x7fff, 0x2}}) 18:11:26 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) getitimer(0x1, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) (async) getitimer(0x1, &(0x7f0000000000)) (async) 18:11:26 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) (async) 18:11:26 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) r1 = getuid() r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) r3 = getgid() r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) r6 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r5, 0xc0a85322, &(0x7f00000000c0)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) (async) getuid() (async) getpid() (async) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) (async) getgid() (async) getpid() (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) (async) syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') (async) ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) (async) userfaultfd(0x80000) (async) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r5, 0xc0a85322, &(0x7f00000000c0)) (async) 18:11:26 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000a80)={{0x0, 0x1, 0x0, 0x6ac, 0x40, 0x4, 0x9855, 0x4, 0x1, 0x90, 0x9, 0x101, 0x8000000000000001, 0x82bb, 0x400}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000b40)={{r1, 0x7cb7, 0x1, 0x4, 0x1de, 0x2, 0x7, 0x800, 0x7, 0x1f, 0x27a, 0x6, 0x7, 0x1, 0x2}}) close$fd_v4l2_buffer(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x1f80, 0x1f, 0x10001, {0x80000001, 0x1}, 0x4, 0x800}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000040)={0x6, 0x8, 0x0, {0x5, 0x6}, 0x7ff, 0x8}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') openat$cgroup_ro(r2, &(0x7f0000000580)='freezer.state\x00', 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f00000005c0)={0x80000000, 0x0, 0x7fffffff, {0x6e3, 0x7}, 0x0, 0x3}) close$fd_v4l2_buffer(r0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000680)={0x0, 0x100, 0x2}) 18:11:26 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) 18:11:26 executing program 3: syz_open_dev$MSR(&(0x7f0000000180), 0xfffffffffffefffb, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) 18:11:26 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000040)={{0x0, 0xb88, 0x2, 0x9, 0x5, 0x8001, 0xd72, 0x4, 0x3, 0x1ff, 0x5, 0xffff, 0x2, 0x7fff, 0x2}}) 18:11:26 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) getitimer(0x1, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) (async) getitimer(0x1, &(0x7f0000000000)) (async) 18:11:26 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000a80)={{0x0, 0x1, 0x0, 0x6ac, 0x40, 0x4, 0x9855, 0x4, 0x1, 0x90, 0x9, 0x101, 0x8000000000000001, 0x82bb, 0x400}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000b40)={{r1, 0x7cb7, 0x1, 0x4, 0x1de, 0x2, 0x7, 0x800, 0x7, 0x1f, 0x27a, 0x6, 0x7, 0x1, 0x2}}) close$fd_v4l2_buffer(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x1f80, 0x1f, 0x10001, {0x80000001, 0x1}, 0x4, 0x800}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000040)={0x6, 0x8, 0x0, {0x5, 0x6}, 0x7ff, 0x8}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') openat$cgroup_ro(r2, &(0x7f0000000580)='freezer.state\x00', 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f00000005c0)={0x80000000, 0x0, 0x7fffffff, {0x6e3, 0x7}, 0x0, 0x3}) close$fd_v4l2_buffer(r0) 18:11:26 executing program 4: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) (async) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) 18:11:26 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0xcf, 0x34, 0xff, @time={0x0, 0x2}, {0x2, 0x99}, {0x2}, @result={0x23af5512, 0xd46}}, {0x3f, 0x81, 0xff, 0x3, @tick=0x400, {0x40, 0x3}, {0xff, 0xff}, @ext={0x1000, &(0x7f0000000680)="766d7ed553abef60b715cc8c43c3f600875ad2871e9e5ae12c37c88517987d240686dce8d6e01462d60452110eb5e7f4ae5228981f1a6cb3c75af348656772a3c40b57b0e39bc8bc62451f4ae62fe03ebe350561a6dfd63132194add7e3ffe010df5b50909af364468d0192d6ab26f8c38fef76fa7080acae4b09f04eb90e8d28ecef518b143598c06d6cbbbfd13104a4b0187db8267a3c8d7f28a30c95b25e20e77577ca8d3f58d55c9df467143bfbfbc0f402c4c6f67d70108227eed0cb4f8d508b4d78c51bfaf9a8457bcbc0dd5058a635cbe93c25b55e7566f7228f63a0b9742bc3beb09236094107a947ddb43dc56b80ed78573c02be851eb7db54a18134ec569ef98992d8fb4b5e64487938146c7eb66b8330ecc437d8b2e5676538e4542f1cdb9408f3cb786a85604eead11e6853edb59ca8ea6bc9a9fd7674c02f8caf7c823f95fff2de18e649d234091dca6bd1ed45e733946f3f5a77b81779e0c969163ecfcf57c92b4d8d91d9018521a4b4ea98584e21ffca1bc62e202663e1d367c804aea4b0a771731b84c9e37e99962e64ccbf57fc02fbe0efabc4cb684e1a88fec00b0ab8a5ed85a24b25a9bc9b66ac2ad3d89402c5b844ed3c7e1d53dd49bfdca442cb2368023ba0f3a3db639bedd3229eb147fbdfa09b01aae3047bf33d67497c5970589af1113e2a4e8c231c2e5422d4dbd0d0ba0aea9b2d978210a5256b8257e6c84c196ec43ff6b339ee26e4d309fc20a9d26a663fea0878b0a452f6f7e3e38947ea05e4351fb6752d5495477b041bf5381e7fb462ab108f7aea0d605cadcde3427520ed54c1ecc84c8c0d3e69e64642c0e6cf3bee4826ca03b68ba53143bf4280a6299fd09c134be446d9f94f064eb0a9b4f5dbfeba05f3528967621d22b915b64f782d2a50f73f0b84e33cb89a4196a05b7be3f722500b105a98c5e6e3efdae90487d92042d44a27c97c39fdd954da69082bb91f1a40130999acbc45f77b646397771c3556700329345ca0d9af53aec34bd0064d3591426ce9f0b4dac27429d57d84a00df7cd5ac4357097ed8fb7248ffa85286039d126d44e714d15c9aa9f5910299f57889f84abce1c90e66f952cadcec9998f4657e594053db4456e5764e5c5cd641e8565c4398e04ab9d2dbfccb56daf5469ac06d90481054ecba6d7cab5ca4488f57a44586d3f17c2dbed9b464a8e87df626389b81cfe0d421ac0853fcc63bfca773cbc7f334bcaf823e7bf32736d6a617893818aa11d3b3e185bd1d2c9ad706e46742a54de2397cfb5fad845cea0bb41c727d76bff3b1182a93ac9e786932994da30f484142e2504a7c439c71e7d63c723a80afbc41882d5403c99143222336936b0e351982b3e5196de5fb996636192d25376a6670b07b478de5e085f6acd4321c1ff84b106701f29a771dc25e879758fb9bc98c312500996ad8ac1ed25e81adaab5f8ae37fa52d67e9923ea22ec87e7c83f6acd88917dc7d9aa2504015c0f53a72fa33593fe300d6d42f9f60c5766865c9786a402cbb7be509872015505eb09293ea92fc20bf59719072b89b6fd53f241301d6790254734523d4538263ed4c0f6926c3a643e2e05c16e12f1236d9ffa48fb56d139632b2ec0760f72c8951af712f08aedf4664b642245109e13961e3095703a53eeb93f47d73ee2acaef8e0003b3f023f80c698b78ef8d9ace45cf07ecf10b084aafd356585716ba6d481d446346e3ff32ae11d1db8efd42d9280e22234cb435eb0f8d5b844ff416090e809bf3c992722b4a37c04eba74fe53db4eb46571dd1fef59cc570309725ad0bdb1a9c863f3e4523f4c4de2eb87e3ca08def7252abe6914802beb24d35e05d6193b0dc4fc971fd12539e17bd14965ac101c0e2adbc5672d49f4bdc35afe051cf565845033144cafc0c4a8fbac3e072aaa88beea73caced17d6dc5131c3fdbc8c4ff3cc7b397bda495a34ad2ea5082224bfd6c82675ebac8d3f8285eb37bd6f4df9af8850a43fefb2831dfe09bd42654dbedcb4b87f81d3fd485305d19ff06d435b2575d5dbf60d456ae7fe208ba28a942cef0739d6c0d11f55e744bfe2f59fe8e00464499604e440598074e07998a27d7a985d7e4c1951c6ddc2a2dbd61b6f0499644965d91926982df43465c95b2b6c44057c3cb3581ad4cdce10b1891fb918d6028e56a05e14e046e742b3cd090d84474e541d35fc80ce5148c8a8c0fba15fd7215b8187c569452e1c2b9749ce47937bc1d514ba2fe2ae8e9a2cfd9d9a8d079634dd02a50866d9d691e55452723ed967af53e1cdbd75effca5b46766e1b3d02b5535a49feae3e869ac5aeb55ae1fa91437bc0be507046bc6220d5854aa097e34137ef8caaa7eabbe4df0c7e52ecac6b3800b20d64842bb6a426e977cbf986b38c705f362af43def3e06c0dfc29a66b964d67a5f34386328c9f393b66c4c8c968ede699a51125104d5ba8b3d1d3180d88db4c5fa0683d486c8740ebf0ec61389772aa4e093a0db81241e5e7ec752f0522c9faba9f2d07e0d774cb72477609244d4540bb3ef2d8e06c845c088a3604150954d19f0624091216ab6db31f74dd8f588d82c35d292661eb6f01b77ded8e2142fa5526c5e575621ae6612ad8aa5f2f9d3afe6e3bdce4852b9286d34c83d742f2dd8bfad4a3fe039f46c27d79007d1af30335932012e169b4dad36de6a38141bf9ea7e18b3033e6a61cfa90cbb210b359f186857de31a580adddf21efae6c0a3f17c03b4e3c7e1ef79a82a0a736fd211ef9843d64a1444e05f9fd3177ee6940f6276f429f50c619ba4511300ab9b6f65e62c8a121cd8ce1663acddf4388e987a031135b85529e6593d246e071412012bc112bf19f901bc1666a91fd2e56391f144c2b2acfdc38560b181385d859b88a2b989fd5b0ac7271c7d6955714d20a3614547e177b10122ec8b0433ffe2a1fe51a6d9e67a3eb6562928a8ce64cc1f15727b60ccfdcaef003238e4ad7d3ecf227868c5f2e3fec7da2564e4c2a860416a4351976b2c756b0b2533c430ff3059cae4481332c59e88444eae1f990868784c46847216b8fa0e132b27c839469880359621b1f2ea7f4756202d2b3445f12468b742f0541b55f92a8f337db7dbc7cb5023f1c1a6643b51655afddeed512e60f64d172da51fbda9141f4ba6164122bbe95952ccb0e2c823830c6153067de2a62ca2d1b6eaea825395203739321894d071d9b1f2ade0604fe5db2839a2b0e3b07d492c8310239e14b8504d4010dbdc6c171e71a3f8dda13bb2c3678250fae7ec54fd8923e921837deff100111fb1bdd9b7323fbed2428a1205f89706415121737a7c067cd3fd0e133d1ead2767cd3adf989cad204160aea6702450976374c02f215f18046fe5c46cd551721c193a0902963e976d4b5a4a0361d36b045ce46f71ba50215213a5063fa9af0579418046316dd52eb0a7e94b501cca1b4330081f7aa4653b741e5141d56904864fd8ceebe42e4c5739d411d9ae5bd3b790a280093bea8e0ca17ee0a41b8b59b725a68d5900102680705fb63dd44451cc7284808946c7e333d0e563f6069df4cc1a5fc1aeeddbcbcb4a0ec92c27d4330e39582d0f55846355b5a791b8522f5f8352441620b5d26ce170596a47e30507f010679fc2607b898565cdedea02d767148a930c9647523b2a1335f60a5184539dee1558405653ba537567377c706b432d051d5563329f4b8eb586dcfeba2993c7bd0a4d20ccd0ed5f5fdd4f34340721a588e4e90058d1dad9055f6abceb8952bac79d666abc63db8688d50c5b7ceffcd7aef43f865dc3613a17dc425b6c58d257c3ee0daf6bb3e935fbbe72d84b9255bec8b07ed741f30d2b2e680d291c0acde948e8391056278fd3c256597ce4c38fa7e89fd2e9d41022a13f771d78f86a3969502e1f05a556a4a8972959b440ff6c19f5c91d00bedcf99536bb54ab5c26bb10005050f607952ebc1f5564c246a717a0b6051fe86f897634fc29d2e32dad2d2e70a362872702e99a968017035bf240be06519a5bbbb9ce46465896116d1f38ca1af875a2b2fa23e2150dc859af71cb9cdff6aa28b22005ad0155d777524b838ccfb60115e07bcbceaee924e1a70a66e3e898d6b937eb4291483d7e8ae6f77eb40683ccd555565b0eb236e2e8acdc9973da895b3011fe938a68cb6f1e61657703290015a2f0d9c9de0e04da55888b05f9cf9118ed47f85109875c5d19587ff2ed123d809df8910b018b142c79fe7d7cea0282f14ba694ceed1f1ca05ceeb83e83f4dcff5494244174b4d48d4d22a76fa2bae06450737a7555508074a9d11b1abf5a0de887b514186db3880d2a1450bd0af8df4c452443fc6890213f031e2a5ea853361e5bc2fd8627a3eccdfe7e776442d4fdfc62974d8359ea4cbdeb47adcec33296dae1139efd9f2bba4eacaf61eb5319ec97638e7eb57df0de29e02de28ff4e4fd05ffad2585bb44931e29a6a1ced5c0e5e6c6e85d5d3c28092107e6befa874b885b4724b170b86f262781525e0bf947031a142790707e34a841347cf07a778932d9a183dc5218f19037df89a4827c107e7348324c588f54eaf3848f2c42c3040cb1e5be3557b0e6d69091108a157bd1fb4de96fd37a0060f5d117f34138447768edbdaf821b47c22b781d3cdb9fdd8824535d18055e5951072fe9a5f4ff3390c89fd0045cb07113c368b04c26c9d36fc8d52a7ab24f36d5b0b12924d24a05e331efa26ca427bebee9ae23d6adc24738361fe27bf59eb59ec155b658b7e0b460e403a1b93bf62a7333f10eeab3c7b48c4fa799be0d34245a8065aac36a71ebb37ad2af08ad3ad4c365907097459335fa04d56589235a71d527863bd6c3c03f89336d0dc9c1e7e3bc4f0c7d0a276d00e8e5d40700f307c700f53784909b1826f1cca5dd0e4b82857c0cf1e0b6388d4a7e235b8bd18989537ed9179a2b1d315232118453c40e0b077889cc9a9ee6003b5bdac5f9d100c69ffe555177888f3e1c0faec0a33fcad22c4753ee7de48cb502ddd2990fac431c74132139d982b3deb8dd9dc75426e1d36c5e2b6cb864abfebec4b9b5d7c8656637dd70ecb1303f13dc10f066ddcb85c3da5b023aaf96a1bc4c88e47d96373b9136db6f368cec0531b714379ab406bd6a439a1c0e885dc85aaba4d534771c3e9156aae7edd229f56321b264d75cbdc67ae7bc57aa7a0b70657abaffbff6f2f505cb060268be9af5ede67c0860a8530f4b0e5ea32604b33b06953d8596045b5d1bd2307a2a542ac8eaaf97b3c6e7a5fe8233715f91e6e67bee32039920245bc3c9836395ed2fc3362d7237742308b15744ddf68cf2be3bf9f2f23818d86cb1213a33009991b359897d5bb3a711eabb41b935c615d6b3d58488851f29b2f843b03916d488885b6e6ef43e35a7742cebfe5c1e145b00c38e153fef3740e609907f61384751bfebd4b76ef2cb869f641d20264d1e6e01fd3b45baf5d75ee9c6a1359624d02c2a2df0cee633b576a22d2852835352438c73588bd2b9eb6784a2b96506bb5ac9f5a47d5d0bfb6434a548c3ccbfa51a03a83a08e3d8d2fa979f521efd0d50a86d70df4c557658acaaa22cab1ab3c4a4a4264f5c6d3d262c9bfadc9df1c4d9cfb4698ebc93ff778931275f3041779f1631891507e28d76ef4f5d74f4da12ecb3d6fa65416867a1ace64838d186988ce904068475567c27871ce9ac2c1bd929f57cb8d9820c397c25a526a23ea914f6721d16abdac69a563187ae12ddc308ba2b0daa774eedbb8a41c506c133c645a513d6794e83fba972619"}}], 0x38) r1 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') r2 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r2, &(0x7f0000000080)={0x22, 0x6, 0x0, 0xf7, 0x62}, 0x6) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8000000000000000) 18:11:26 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000040)={{0x0, 0xb88, 0x2, 0x9, 0x5, 0x8001, 0xd72, 0x4, 0x3, 0x1ff, 0x5, 0xffff, 0x2, 0x7fff, 0x2}}) 18:11:26 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = getuid() r1 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r1, 0xffffffffffffffff, 0x20}) r2 = getgid() r3 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r2, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r1, r3, 0xf001}) r4 = syz_open_procfs(r1, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000940)) r5 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000f40)={{r4}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r6}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000040)={{0x14}, {0x9}, 0x7f, 0x0, 0x4}) 18:11:26 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') r2 = perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x6, 0x1f, 0x7f, 0x9, 0x0, 0x5, 0x86002, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x5, 0x3}, 0x800, 0x6, 0x0, 0x0, 0x101, 0xfc000000, 0x6, 0x0, 0x1}, 0x0, 0x3, r1, 0xa) perf_event_open(&(0x7f0000000980)={0x5, 0x80, 0x80, 0x6, 0x81, 0x7, 0x0, 0x9, 0x2000, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4c000000, 0x0, @perf_config_ext={0x10000, 0x3}, 0x60, 0x8, 0x782a, 0x5, 0x8, 0x8, 0x6a6f, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r2, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x3, 0x200, 0x2}) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x10182) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r8, 0xc0a85352, &(0x7f0000000340)={{0x4, 0x4}, 'port1\x00', 0x17, 0x410, 0xc00000, 0x300000, 0x4, 0x3ff, 0x6, 0x0, 0x4, 0x80}) ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x24280, 0x0) r9 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000480)={0x0, 0x246, 0x3000000000800}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r9, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r10}) r11 = syz_open_dev$vcsn(&(0x7f0000000080), 0xc7, 0x290000) ioctl$vim2m_VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000180)=@multiplanar_mmap={0x8, 0x2, 0x4, 0x0, 0x4, {0x0, 0x2710}, {0x3, 0x2, 0x0, 0x3, 0x73, 0x20, "27d3766b"}, 0x8001, 0x1, {&(0x7f0000000100)=[{0x28d8, 0x4, {0x8}, 0xff}, {0x2, 0x4e3, {0x8e5}, 0x1}]}, 0x9, 0x0, r11}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) 18:11:26 executing program 3: syz_open_dev$MSR(&(0x7f0000000180), 0xfffffffffffefffb, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) 18:11:26 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000a80)={{0x0, 0x1, 0x0, 0x6ac, 0x40, 0x4, 0x9855, 0x4, 0x1, 0x90, 0x9, 0x101, 0x8000000000000001, 0x82bb, 0x400}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000b40)={{r1, 0x7cb7, 0x1, 0x4, 0x1de, 0x2, 0x7, 0x800, 0x7, 0x1f, 0x27a, 0x6, 0x7, 0x1, 0x2}}) close$fd_v4l2_buffer(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x1f80, 0x1f, 0x10001, {0x80000001, 0x1}, 0x4, 0x800}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000040)={0x6, 0x8, 0x0, {0x5, 0x6}, 0x7ff, 0x8}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') openat$cgroup_ro(r2, &(0x7f0000000580)='freezer.state\x00', 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) close$fd_v4l2_buffer(r0) 18:11:26 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0xcf, 0x34, 0xff, @time={0x0, 0x2}, {0x2, 0x99}, {0x2}, @result={0x23af5512, 0xd46}}, {0x3f, 0x81, 0xff, 0x3, @tick=0x400, {0x40, 0x3}, {0xff, 0xff}, @ext={0x1000, &(0x7f0000000680)="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"}}], 0x38) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') r2 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r2, &(0x7f0000000080)={0x22, 0x6, 0x0, 0xf7, 0x62}, 0x6) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8000000000000000) 18:11:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) r1 = openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x74, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x2}, @dead_binder_done, @request_death={0x400c630e, 0x3}, @decrefs={0x40046307, 0x2}, @release, @acquire_done={0x40106309, 0x3}, @release={0x40046306, 0x2}, @increfs_done={0x40106308, 0x2}, @increfs], 0xc, 0x0, &(0x7f0000000100)="c5e8c947033485d8094e5d3a"}) openat$cgroup_devices(r1, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) 18:11:26 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') r2 = perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x6, 0x1f, 0x7f, 0x9, 0x0, 0x5, 0x86002, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x5, 0x3}, 0x800, 0x6, 0x0, 0x0, 0x101, 0xfc000000, 0x6, 0x0, 0x1}, 0x0, 0x3, r1, 0xa) perf_event_open(&(0x7f0000000980)={0x5, 0x80, 0x80, 0x6, 0x81, 0x7, 0x0, 0x9, 0x2000, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4c000000, 0x0, @perf_config_ext={0x10000, 0x3}, 0x60, 0x8, 0x782a, 0x5, 0x8, 0x8, 0x6a6f, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r2, 0x2) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x3, 0x200, 0x2}) (async) r3 = getuid() (async) r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) (async) r5 = getgid() (async) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x10182) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r8, 0xc0a85352, &(0x7f0000000340)={{0x4, 0x4}, 'port1\x00', 0x17, 0x410, 0xc00000, 0x300000, 0x4, 0x3ff, 0x6, 0x0, 0x4, 0x80}) (async) ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x24280, 0x0) (async) r9 = userfaultfd(0x80000) (async) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000480)={0x0, 0x246, 0x3000000000800}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r9, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r10}) r11 = syz_open_dev$vcsn(&(0x7f0000000080), 0xc7, 0x290000) ioctl$vim2m_VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000180)=@multiplanar_mmap={0x8, 0x2, 0x4, 0x0, 0x4, {0x0, 0x2710}, {0x3, 0x2, 0x0, 0x3, 0x73, 0x20, "27d3766b"}, 0x8001, 0x1, {&(0x7f0000000100)=[{0x28d8, 0x4, {0x8}, 0xff}, {0x2, 0x4e3, {0x8e5}, 0x1}]}, 0x9, 0x0, r11}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) 18:11:26 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r0 = getuid() (async) r1 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r1, 0xffffffffffffffff, 0x20}) (async) r2 = getgid() (async) r3 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r2, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r1, r3, 0xf001}) (async) r4 = syz_open_procfs(r1, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000900)) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000940)) (async) r5 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000f40)={{r4}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r6}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000040)={{0x14}, {0x9}, 0x7f, 0x0, 0x4}) 18:11:26 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000a80)={{0x0, 0x1, 0x0, 0x6ac, 0x40, 0x4, 0x9855, 0x4, 0x1, 0x90, 0x9, 0x101, 0x8000000000000001, 0x82bb, 0x400}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000b40)={{r1, 0x7cb7, 0x1, 0x4, 0x1de, 0x2, 0x7, 0x800, 0x7, 0x1f, 0x27a, 0x6, 0x7, 0x1, 0x2}}) close$fd_v4l2_buffer(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x1f80, 0x1f, 0x10001, {0x80000001, 0x1}, 0x4, 0x800}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000040)={0x6, 0x8, 0x0, {0x5, 0x6}, 0x7ff, 0x8}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') openat$cgroup_ro(r2, &(0x7f0000000580)='freezer.state\x00', 0x0, 0x0) close$fd_v4l2_buffer(r0) 18:11:26 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0xcf, 0x34, 0xff, @time={0x0, 0x2}, {0x2, 0x99}, {0x2}, @result={0x23af5512, 0xd46}}, {0x3f, 0x81, 0xff, 0x3, @tick=0x400, {0x40, 0x3}, {0xff, 0xff}, @ext={0x1000, &(0x7f0000000680)="766d7ed553abef60b715cc8c43c3f600875ad2871e9e5ae12c37c88517987d240686dce8d6e01462d60452110eb5e7f4ae5228981f1a6cb3c75af348656772a3c40b57b0e39bc8bc62451f4ae62fe03ebe350561a6dfd63132194add7e3ffe010df5b50909af364468d0192d6ab26f8c38fef76fa7080acae4b09f04eb90e8d28ecef518b143598c06d6cbbbfd13104a4b0187db8267a3c8d7f28a30c95b25e20e77577ca8d3f58d55c9df467143bfbfbc0f402c4c6f67d70108227eed0cb4f8d508b4d78c51bfaf9a8457bcbc0dd5058a635cbe93c25b55e7566f7228f63a0b9742bc3beb09236094107a947ddb43dc56b80ed78573c02be851eb7db54a18134ec569ef98992d8fb4b5e64487938146c7eb66b8330ecc437d8b2e5676538e4542f1cdb9408f3cb786a85604eead11e6853edb59ca8ea6bc9a9fd7674c02f8caf7c823f95fff2de18e649d234091dca6bd1ed45e733946f3f5a77b81779e0c969163ecfcf57c92b4d8d91d9018521a4b4ea98584e21ffca1bc62e202663e1d367c804aea4b0a771731b84c9e37e99962e64ccbf57fc02fbe0efabc4cb684e1a88fec00b0ab8a5ed85a24b25a9bc9b66ac2ad3d89402c5b844ed3c7e1d53dd49bfdca442cb2368023ba0f3a3db639bedd3229eb147fbdfa09b01aae3047bf33d67497c5970589af1113e2a4e8c231c2e5422d4dbd0d0ba0aea9b2d978210a5256b8257e6c84c196ec43ff6b339ee26e4d309fc20a9d26a663fea0878b0a452f6f7e3e38947ea05e4351fb6752d5495477b041bf5381e7fb462ab108f7aea0d605cadcde3427520ed54c1ecc84c8c0d3e69e64642c0e6cf3bee4826ca03b68ba53143bf4280a6299fd09c134be446d9f94f064eb0a9b4f5dbfeba05f3528967621d22b915b64f782d2a50f73f0b84e33cb89a4196a05b7be3f722500b105a98c5e6e3efdae90487d92042d44a27c97c39fdd954da69082bb91f1a40130999acbc45f77b646397771c3556700329345ca0d9af53aec34bd0064d3591426ce9f0b4dac27429d57d84a00df7cd5ac4357097ed8fb7248ffa85286039d126d44e714d15c9aa9f5910299f57889f84abce1c90e66f952cadcec9998f4657e594053db4456e5764e5c5cd641e8565c4398e04ab9d2dbfccb56daf5469ac06d90481054ecba6d7cab5ca4488f57a44586d3f17c2dbed9b464a8e87df626389b81cfe0d421ac0853fcc63bfca773cbc7f334bcaf823e7bf32736d6a617893818aa11d3b3e185bd1d2c9ad706e46742a54de2397cfb5fad845cea0bb41c727d76bff3b1182a93ac9e786932994da30f484142e2504a7c439c71e7d63c723a80afbc41882d5403c99143222336936b0e351982b3e5196de5fb996636192d25376a6670b07b478de5e085f6acd4321c1ff84b106701f29a771dc25e879758fb9bc98c312500996ad8ac1ed25e81adaab5f8ae37fa52d67e9923ea22ec87e7c83f6acd88917dc7d9aa2504015c0f53a72fa33593fe300d6d42f9f60c5766865c9786a402cbb7be509872015505eb09293ea92fc20bf59719072b89b6fd53f241301d6790254734523d4538263ed4c0f6926c3a643e2e05c16e12f1236d9ffa48fb56d139632b2ec0760f72c8951af712f08aedf4664b642245109e13961e3095703a53eeb93f47d73ee2acaef8e0003b3f023f80c698b78ef8d9ace45cf07ecf10b084aafd356585716ba6d481d446346e3ff32ae11d1db8efd42d9280e22234cb435eb0f8d5b844ff416090e809bf3c992722b4a37c04eba74fe53db4eb46571dd1fef59cc570309725ad0bdb1a9c863f3e4523f4c4de2eb87e3ca08def7252abe6914802beb24d35e05d6193b0dc4fc971fd12539e17bd14965ac101c0e2adbc5672d49f4bdc35afe051cf565845033144cafc0c4a8fbac3e072aaa88beea73caced17d6dc5131c3fdbc8c4ff3cc7b397bda495a34ad2ea5082224bfd6c82675ebac8d3f8285eb37bd6f4df9af8850a43fefb2831dfe09bd42654dbedcb4b87f81d3fd485305d19ff06d435b2575d5dbf60d456ae7fe208ba28a942cef0739d6c0d11f55e744bfe2f59fe8e00464499604e440598074e07998a27d7a985d7e4c1951c6ddc2a2dbd61b6f0499644965d91926982df43465c95b2b6c44057c3cb3581ad4cdce10b1891fb918d6028e56a05e14e046e742b3cd090d84474e541d35fc80ce5148c8a8c0fba15fd7215b8187c569452e1c2b9749ce47937bc1d514ba2fe2ae8e9a2cfd9d9a8d079634dd02a50866d9d691e55452723ed967af53e1cdbd75effca5b46766e1b3d02b5535a49feae3e869ac5aeb55ae1fa91437bc0be507046bc6220d5854aa097e34137ef8caaa7eabbe4df0c7e52ecac6b3800b20d64842bb6a426e977cbf986b38c705f362af43def3e06c0dfc29a66b964d67a5f34386328c9f393b66c4c8c968ede699a51125104d5ba8b3d1d3180d88db4c5fa0683d486c8740ebf0ec61389772aa4e093a0db81241e5e7ec752f0522c9faba9f2d07e0d774cb72477609244d4540bb3ef2d8e06c845c088a3604150954d19f0624091216ab6db31f74dd8f588d82c35d292661eb6f01b77ded8e2142fa5526c5e575621ae6612ad8aa5f2f9d3afe6e3bdce4852b9286d34c83d742f2dd8bfad4a3fe039f46c27d79007d1af30335932012e169b4dad36de6a38141bf9ea7e18b3033e6a61cfa90cbb210b359f186857de31a580adddf21efae6c0a3f17c03b4e3c7e1ef79a82a0a736fd211ef9843d64a1444e05f9fd3177ee6940f6276f429f50c619ba4511300ab9b6f65e62c8a121cd8ce1663acddf4388e987a031135b85529e6593d246e071412012bc112bf19f901bc1666a91fd2e56391f144c2b2acfdc38560b181385d859b88a2b989fd5b0ac7271c7d6955714d20a3614547e177b10122ec8b0433ffe2a1fe51a6d9e67a3eb6562928a8ce64cc1f15727b60ccfdcaef003238e4ad7d3ecf227868c5f2e3fec7da2564e4c2a860416a4351976b2c756b0b2533c430ff3059cae4481332c59e88444eae1f990868784c46847216b8fa0e132b27c839469880359621b1f2ea7f4756202d2b3445f12468b742f0541b55f92a8f337db7dbc7cb5023f1c1a6643b51655afddeed512e60f64d172da51fbda9141f4ba6164122bbe95952ccb0e2c823830c6153067de2a62ca2d1b6eaea825395203739321894d071d9b1f2ade0604fe5db2839a2b0e3b07d492c8310239e14b8504d4010dbdc6c171e71a3f8dda13bb2c3678250fae7ec54fd8923e921837deff100111fb1bdd9b7323fbed2428a1205f89706415121737a7c067cd3fd0e133d1ead2767cd3adf989cad204160aea6702450976374c02f215f18046fe5c46cd551721c193a0902963e976d4b5a4a0361d36b045ce46f71ba50215213a5063fa9af0579418046316dd52eb0a7e94b501cca1b4330081f7aa4653b741e5141d56904864fd8ceebe42e4c5739d411d9ae5bd3b790a280093bea8e0ca17ee0a41b8b59b725a68d5900102680705fb63dd44451cc7284808946c7e333d0e563f6069df4cc1a5fc1aeeddbcbcb4a0ec92c27d4330e39582d0f55846355b5a791b8522f5f8352441620b5d26ce170596a47e30507f010679fc2607b898565cdedea02d767148a930c9647523b2a1335f60a5184539dee1558405653ba537567377c706b432d051d5563329f4b8eb586dcfeba2993c7bd0a4d20ccd0ed5f5fdd4f34340721a588e4e90058d1dad9055f6abceb8952bac79d666abc63db8688d50c5b7ceffcd7aef43f865dc3613a17dc425b6c58d257c3ee0daf6bb3e935fbbe72d84b9255bec8b07ed741f30d2b2e680d291c0acde948e8391056278fd3c256597ce4c38fa7e89fd2e9d41022a13f771d78f86a3969502e1f05a556a4a8972959b440ff6c19f5c91d00bedcf99536bb54ab5c26bb10005050f607952ebc1f5564c246a717a0b6051fe86f897634fc29d2e32dad2d2e70a362872702e99a968017035bf240be06519a5bbbb9ce46465896116d1f38ca1af875a2b2fa23e2150dc859af71cb9cdff6aa28b22005ad0155d777524b838ccfb60115e07bcbceaee924e1a70a66e3e898d6b937eb4291483d7e8ae6f77eb40683ccd555565b0eb236e2e8acdc9973da895b3011fe938a68cb6f1e61657703290015a2f0d9c9de0e04da55888b05f9cf9118ed47f85109875c5d19587ff2ed123d809df8910b018b142c79fe7d7cea0282f14ba694ceed1f1ca05ceeb83e83f4dcff5494244174b4d48d4d22a76fa2bae06450737a7555508074a9d11b1abf5a0de887b514186db3880d2a1450bd0af8df4c452443fc6890213f031e2a5ea853361e5bc2fd8627a3eccdfe7e776442d4fdfc62974d8359ea4cbdeb47adcec33296dae1139efd9f2bba4eacaf61eb5319ec97638e7eb57df0de29e02de28ff4e4fd05ffad2585bb44931e29a6a1ced5c0e5e6c6e85d5d3c28092107e6befa874b885b4724b170b86f262781525e0bf947031a142790707e34a841347cf07a778932d9a183dc5218f19037df89a4827c107e7348324c588f54eaf3848f2c42c3040cb1e5be3557b0e6d69091108a157bd1fb4de96fd37a0060f5d117f34138447768edbdaf821b47c22b781d3cdb9fdd8824535d18055e5951072fe9a5f4ff3390c89fd0045cb07113c368b04c26c9d36fc8d52a7ab24f36d5b0b12924d24a05e331efa26ca427bebee9ae23d6adc24738361fe27bf59eb59ec155b658b7e0b460e403a1b93bf62a7333f10eeab3c7b48c4fa799be0d34245a8065aac36a71ebb37ad2af08ad3ad4c365907097459335fa04d56589235a71d527863bd6c3c03f89336d0dc9c1e7e3bc4f0c7d0a276d00e8e5d40700f307c700f53784909b1826f1cca5dd0e4b82857c0cf1e0b6388d4a7e235b8bd18989537ed9179a2b1d315232118453c40e0b077889cc9a9ee6003b5bdac5f9d100c69ffe555177888f3e1c0faec0a33fcad22c4753ee7de48cb502ddd2990fac431c74132139d982b3deb8dd9dc75426e1d36c5e2b6cb864abfebec4b9b5d7c8656637dd70ecb1303f13dc10f066ddcb85c3da5b023aaf96a1bc4c88e47d96373b9136db6f368cec0531b714379ab406bd6a439a1c0e885dc85aaba4d534771c3e9156aae7edd229f56321b264d75cbdc67ae7bc57aa7a0b70657abaffbff6f2f505cb060268be9af5ede67c0860a8530f4b0e5ea32604b33b06953d8596045b5d1bd2307a2a542ac8eaaf97b3c6e7a5fe8233715f91e6e67bee32039920245bc3c9836395ed2fc3362d7237742308b15744ddf68cf2be3bf9f2f23818d86cb1213a33009991b359897d5bb3a711eabb41b935c615d6b3d58488851f29b2f843b03916d488885b6e6ef43e35a7742cebfe5c1e145b00c38e153fef3740e609907f61384751bfebd4b76ef2cb869f641d20264d1e6e01fd3b45baf5d75ee9c6a1359624d02c2a2df0cee633b576a22d2852835352438c73588bd2b9eb6784a2b96506bb5ac9f5a47d5d0bfb6434a548c3ccbfa51a03a83a08e3d8d2fa979f521efd0d50a86d70df4c557658acaaa22cab1ab3c4a4a4264f5c6d3d262c9bfadc9df1c4d9cfb4698ebc93ff778931275f3041779f1631891507e28d76ef4f5d74f4da12ecb3d6fa65416867a1ace64838d186988ce904068475567c27871ce9ac2c1bd929f57cb8d9820c397c25a526a23ea914f6721d16abdac69a563187ae12ddc308ba2b0daa774eedbb8a41c506c133c645a513d6794e83fba972619"}}], 0x38) (async) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0xcf, 0x34, 0xff, @time={0x0, 0x2}, {0x2, 0x99}, {0x2}, @result={0x23af5512, 0xd46}}, {0x3f, 0x81, 0xff, 0x3, @tick=0x400, {0x40, 0x3}, {0xff, 0xff}, @ext={0x1000, &(0x7f0000000680)="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"}}], 0x38) r1 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') socket$isdn_base(0x22, 0x3, 0x0) (async) r2 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r2, &(0x7f0000000080)={0x22, 0x6, 0x0, 0xf7, 0x62}, 0x6) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8000000000000000) 18:11:26 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) getuid() (async) r0 = getuid() r1 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r1, 0xffffffffffffffff, 0x20}) getgid() (async) r2 = getgid() r3 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r2, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r1, r3, 0xf001}) syz_open_procfs(r1, &(0x7f00000008c0)='net/ip_mr_vif\x00') (async) r4 = syz_open_procfs(r1, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) (async) r5 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000f40)={{r4}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r6}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000040)={{0x14}, {0x9}, 0x7f, 0x0, 0x4}) 18:11:26 executing program 3: syz_open_dev$MSR(&(0x7f0000000180), 0xfffffffffffefffb, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) (async) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) 18:11:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) (async) r1 = openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) (async, rerun: 64) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x74, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x2}, @dead_binder_done, @request_death={0x400c630e, 0x3}, @decrefs={0x40046307, 0x2}, @release, @acquire_done={0x40106309, 0x3}, @release={0x40046306, 0x2}, @increfs_done={0x40106308, 0x2}, @increfs], 0xc, 0x0, &(0x7f0000000100)="c5e8c947033485d8094e5d3a"}) (async, rerun: 64) openat$cgroup_devices(r1, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) 18:11:26 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x0, @pix={0xff8c, 0x1ff, 0x34325258, 0x6, 0x40, 0x1ff, 0x8, 0x5, 0x0, 0x7, 0x0, 0x5}}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) 18:11:26 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000a80)={{0x0, 0x1, 0x0, 0x6ac, 0x40, 0x4, 0x9855, 0x4, 0x1, 0x90, 0x9, 0x101, 0x8000000000000001, 0x82bb, 0x400}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000b40)={{r1, 0x7cb7, 0x1, 0x4, 0x1de, 0x2, 0x7, 0x800, 0x7, 0x1f, 0x27a, 0x6, 0x7, 0x1, 0x2}}) close$fd_v4l2_buffer(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x1f80, 0x1f, 0x10001, {0x80000001, 0x1}, 0x4, 0x800}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000040)={0x6, 0x8, 0x0, {0x5, 0x6}, 0x7ff, 0x8}) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') close$fd_v4l2_buffer(r0) 18:11:26 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') r2 = perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x6, 0x1f, 0x7f, 0x9, 0x0, 0x5, 0x86002, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x5, 0x3}, 0x800, 0x6, 0x0, 0x0, 0x101, 0xfc000000, 0x6, 0x0, 0x1}, 0x0, 0x3, r1, 0xa) perf_event_open(&(0x7f0000000980)={0x5, 0x80, 0x80, 0x6, 0x81, 0x7, 0x0, 0x9, 0x2000, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4c000000, 0x0, @perf_config_ext={0x10000, 0x3}, 0x60, 0x8, 0x782a, 0x5, 0x8, 0x8, 0x6a6f, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, r2, 0x2) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x3, 0x200, 0x2}) r3 = getuid() (async) r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) (async) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') (async) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x10182) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r8, 0xc0a85352, &(0x7f0000000340)={{0x4, 0x4}, 'port1\x00', 0x17, 0x410, 0xc00000, 0x300000, 0x4, 0x3ff, 0x6, 0x0, 0x4, 0x80}) (async) ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x24280, 0x0) r9 = userfaultfd(0x80000) (async) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000480)={0x0, 0x246, 0x3000000000800}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r9, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r10}) (async) r11 = syz_open_dev$vcsn(&(0x7f0000000080), 0xc7, 0x290000) ioctl$vim2m_VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000180)=@multiplanar_mmap={0x8, 0x2, 0x4, 0x0, 0x4, {0x0, 0x2710}, {0x3, 0x2, 0x0, 0x3, 0x73, 0x20, "27d3766b"}, 0x8001, 0x1, {&(0x7f0000000100)=[{0x28d8, 0x4, {0x8}, 0xff}, {0x2, 0x4e3, {0x8e5}, 0x1}]}, 0x9, 0x0, r11}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) 18:11:26 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x6aa43) r1 = syz_open_dev$vcsn(&(0x7f0000000380), 0xfff, 0x505000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f00000003c0)={0x6d, 0x1, 0xffff7fff, {0xffff, 0x2}, 0xe6, 0x8001}) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100, 0x80) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000300)=0x401) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x200000) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f0000000480)) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="e6ab0442c4412d0efb0214a1b74b", @ANYRES16=0x0, @ANYBLOB="04032abd7000fbdbdf250800000005001200790000000500210000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4004081}, 0x4000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000240)={{0xff, 0x7}, 'port0\x00', 0x8, 0x0, 0x100, 0x6, 0x6, 0x3ff, 0x1, 0x0, 0x1, 0x50}) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/custom0\x00', 0x3, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x401) 18:11:26 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f0000000040)=0xe5) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) 18:11:26 executing program 4: sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40}, 0x800) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0x0, @vbi={0x4, 0xcebc, 0x80000000, 0x33424752, [0xe1, 0x7], [0x3, 0x1ff], 0x2}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x80000) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='uid_map\x00') ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f00000002c0)=@multiplanar_mmap={0xbbcf, 0x3, 0x4, 0x70000, 0x4, {0x77359400}, {0x3, 0xc, 0xc1, 0x4, 0x5, 0x5d, "0e5d9732"}, 0xf4c, 0x1, {&(0x7f0000000240)=[{0x80000001, 0x8001, {0xef}, 0x8}, {0x4, 0x1, {0x2}, 0x8000}]}, 0x7}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x9, 0x2, 0x2b, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x48) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000480)=ANY=[@ANYRES32=r3, @ANYBLOB="000000002b30303030303030303030303030303030303030336538699e200cebd33e5c82c8984d8ff87813dc6bd8d32f61fef80831d93ec7a4e37f99edf47d0c1d225188644108fa8b87d09db64dcf5c630709c72179df47efdbcf451d6bcf1c1bdd08fdd46dc20ccf7b212c9728be559d6e2568503e94782834a667c7a8b984f9"]) 18:11:26 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x6aa43) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000380), 0xfff, 0x505000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f00000003c0)={0x6d, 0x1, 0xffff7fff, {0xffff, 0x2}, 0xe6, 0x8001}) (async) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100, 0x80) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000300)=0x401) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x200000) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f0000000480)) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="e6ab0442c4412d0efb0214a1b74b", @ANYRES16=0x0, @ANYBLOB="04032abd7000fbdbdf250800000005001200790000000500210000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4004081}, 0x4000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000240)={{0xff, 0x7}, 'port0\x00', 0x8, 0x0, 0x100, 0x6, 0x6, 0x3ff, 0x1, 0x0, 0x1, 0x50}) (async, rerun: 64) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) (rerun: 64) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/custom0\x00', 0x3, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x401) 18:11:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) (async) r1 = openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x74, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x2}, @dead_binder_done, @request_death={0x400c630e, 0x3}, @decrefs={0x40046307, 0x2}, @release, @acquire_done={0x40106309, 0x3}, @release={0x40046306, 0x2}, @increfs_done={0x40106308, 0x2}, @increfs], 0xc, 0x0, &(0x7f0000000100)="c5e8c947033485d8094e5d3a"}) openat$cgroup_devices(r1, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) 18:11:26 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f0000000040)=0xe5) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) 18:11:26 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x0, @pix={0xff8c, 0x1ff, 0x34325258, 0x6, 0x40, 0x1ff, 0x8, 0x5, 0x0, 0x7, 0x0, 0x5}}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x0, @pix={0xff8c, 0x1ff, 0x34325258, 0x6, 0x40, 0x1ff, 0x8, 0x5, 0x0, 0x7, 0x0, 0x5}}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) 18:11:27 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000a80)={{0x0, 0x1, 0x0, 0x6ac, 0x40, 0x4, 0x9855, 0x4, 0x1, 0x90, 0x9, 0x101, 0x8000000000000001, 0x82bb, 0x400}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000b40)={{r1, 0x7cb7, 0x1, 0x4, 0x1de, 0x2, 0x7, 0x800, 0x7, 0x1f, 0x27a, 0x6, 0x7, 0x1, 0x2}}) close$fd_v4l2_buffer(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x1f80, 0x1f, 0x10001, {0x80000001, 0x1}, 0x4, 0x800}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000040)={0x6, 0x8, 0x0, {0x5, 0x6}, 0x7ff, 0x8}) close$fd_v4l2_buffer(r0) 18:11:27 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x6aa43) syz_open_dev$vcsn(&(0x7f0000000380), 0xfff, 0x505000) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000380), 0xfff, 0x505000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f00000003c0)={0x6d, 0x1, 0xffff7fff, {0xffff, 0x2}, 0xe6, 0x8001}) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100, 0x80) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000300)=0x401) (async) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000300)=0x401) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x200000) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x200000) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f0000000480)) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="e6ab0442c4412d0efb0214a1b74b", @ANYRES16=0x0, @ANYBLOB="04032abd7000fbdbdf250800000005001200790000000500210000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4004081}, 0x4000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000240)={{0xff, 0x7}, 'port0\x00', 0x8, 0x0, 0x100, 0x6, 0x6, 0x3ff, 0x1, 0x0, 0x1, 0x50}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000240)={{0xff, 0x7}, 'port0\x00', 0x8, 0x0, 0x100, 0x6, 0x6, 0x3ff, 0x1, 0x0, 0x1, 0x50}) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/custom0\x00', 0x3, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x401) 18:11:27 executing program 4: sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40}, 0x800) (async) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0x0, @vbi={0x4, 0xcebc, 0x80000000, 0x33424752, [0xe1, 0x7], [0x3, 0x1ff], 0x2}}) (async, rerun: 64) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x80000) (async, rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) (async, rerun: 32) r1 = socket$l2tp(0x2, 0x2, 0x73) (async, rerun: 32) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='uid_map\x00') ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f00000002c0)=@multiplanar_mmap={0xbbcf, 0x3, 0x4, 0x70000, 0x4, {0x77359400}, {0x3, 0xc, 0xc1, 0x4, 0x5, 0x5d, "0e5d9732"}, 0xf4c, 0x1, {&(0x7f0000000240)=[{0x80000001, 0x8001, {0xef}, 0x8}, {0x4, 0x1, {0x2}, 0x8000}]}, 0x7}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x9, 0x2, 0x2b, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x48) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000480)=ANY=[@ANYRES32=r3, @ANYBLOB="000000002b30303030303030303030303030303030303030336538699e200cebd33e5c82c8984d8ff87813dc6bd8d32f61fef80831d93ec7a4e37f99edf47d0c1d225188644108fa8b87d09db64dcf5c630709c72179df47efdbcf451d6bcf1c1bdd08fdd46dc20ccf7b212c9728be559d6e2568503e94782834a667c7a8b984f9"]) 18:11:27 executing program 0: r0 = getpid() syz_open_procfs(r0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/ip6_flowlabel\x00') r2 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_int(r2, 0x21, 0x10, &(0x7f0000000000)=0x1, 0x4) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000040)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x8000000000000000) 18:11:27 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) (async, rerun: 32) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (rerun: 32) ioctl$SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f0000000040)=0xe5) (async, rerun: 32) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) (rerun: 32) 18:11:27 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x0, @pix={0xff8c, 0x1ff, 0x34325258, 0x6, 0x40, 0x1ff, 0x8, 0x5, 0x0, 0x7, 0x0, 0x5}}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) 18:11:27 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xa00) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) 18:11:27 executing program 0: r0 = getpid() syz_open_procfs(r0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/ip6_flowlabel\x00') r2 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_int(r2, 0x21, 0x10, &(0x7f0000000000)=0x1, 0x4) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000040)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x8000000000000000) getpid() (async) syz_open_procfs(r0, 0x0) (async) syz_open_procfs(r0, &(0x7f0000000080)='net/ip6_flowlabel\x00') (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) setsockopt$inet6_dccp_int(r2, 0x21, 0x10, &(0x7f0000000000)=0x1, 0x4) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000040)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x2, 0x0) (async) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x8000000000000000) (async) 18:11:27 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000a80)={{0x0, 0x1, 0x0, 0x6ac, 0x40, 0x4, 0x9855, 0x4, 0x1, 0x90, 0x9, 0x101, 0x8000000000000001, 0x82bb, 0x400}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000b40)={{r1, 0x7cb7, 0x1, 0x4, 0x1de, 0x2, 0x7, 0x800, 0x7, 0x1f, 0x27a, 0x6, 0x7, 0x1, 0x2}}) close$fd_v4l2_buffer(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x1f80, 0x1f, 0x10001, {0x80000001, 0x1}, 0x4, 0x800}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000040)={0x6, 0x8, 0x0, {0x5, 0x6}, 0x7ff, 0x8}) close$fd_v4l2_buffer(r0) 18:11:27 executing program 4: sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40}, 0x800) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0x0, @vbi={0x4, 0xcebc, 0x80000000, 0x33424752, [0xe1, 0x7], [0x3, 0x1ff], 0x2}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x80000) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='uid_map\x00') ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f00000002c0)=@multiplanar_mmap={0xbbcf, 0x3, 0x4, 0x70000, 0x4, {0x77359400}, {0x3, 0xc, 0xc1, 0x4, 0x5, 0x5d, "0e5d9732"}, 0xf4c, 0x1, {&(0x7f0000000240)=[{0x80000001, 0x8001, {0xef}, 0x8}, {0x4, 0x1, {0x2}, 0x8000}]}, 0x7}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x9, 0x2, 0x2b, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x48) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000480)=ANY=[@ANYRES32=r3, @ANYBLOB="000000002b30303030303030303030303030303030303030336538699e200cebd33e5c82c8984d8ff87813dc6bd8d32f61fef80831d93ec7a4e37f99edf47d0c1d225188644108fa8b87d09db64dcf5c630709c72179df47efdbcf451d6bcf1c1bdd08fdd46dc20ccf7b212c9728be559d6e2568503e94782834a667c7a8b984f9"]) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40}, 0x800) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0x0, @vbi={0x4, 0xcebc, 0x80000000, 0x33424752, [0xe1, 0x7], [0x3, 0x1ff], 0x2}}) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x80000) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) (async) socket$l2tp(0x2, 0x2, 0x73) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='uid_map\x00') (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f00000002c0)=@multiplanar_mmap={0xbbcf, 0x3, 0x4, 0x70000, 0x4, {0x77359400}, {0x3, 0xc, 0xc1, 0x4, 0x5, 0x5d, "0e5d9732"}, 0xf4c, 0x1, {&(0x7f0000000240)=[{0x80000001, 0x8001, {0xef}, 0x8}, {0x4, 0x1, {0x2}, 0x8000}]}, 0x7}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x9, 0x2, 0x2b, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x48) (async) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000480)=ANY=[@ANYRES32=r3, @ANYBLOB="000000002b30303030303030303030303030303030303030336538699e200cebd33e5c82c8984d8ff87813dc6bd8d32f61fef80831d93ec7a4e37f99edf47d0c1d225188644108fa8b87d09db64dcf5c630709c72179df47efdbcf451d6bcf1c1bdd08fdd46dc20ccf7b212c9728be559d6e2568503e94782834a667c7a8b984f9"]) (async) 18:11:27 executing program 3: shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0x3, @sdr={0x3234564e, 0x820}}) 18:11:27 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xa00) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xa00) (async) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f00000000c0)) (async) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) (async) 18:11:27 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000a80)={{0x0, 0x1, 0x0, 0x6ac, 0x40, 0x4, 0x9855, 0x4, 0x1, 0x90, 0x9, 0x101, 0x8000000000000001, 0x82bb, 0x400}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000b40)={{r1, 0x7cb7, 0x1, 0x4, 0x1de, 0x2, 0x7, 0x800, 0x7, 0x1f, 0x27a, 0x6, 0x7, 0x1, 0x2}}) close$fd_v4l2_buffer(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x1f80, 0x1f, 0x10001, {0x80000001, 0x1}, 0x4, 0x800}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000040)={0x6, 0x8, 0x0, {0x5, 0x6}, 0x7ff, 0x8}) close$fd_v4l2_buffer(r0) 18:11:27 executing program 1: r0 = getpid() syz_open_procfs(r0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/dev_snmp6\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8000000000000000) 18:11:27 executing program 3: shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) (async) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0x3, @sdr={0x3234564e, 0x820}}) 18:11:27 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000a80)={{0x0, 0x1, 0x0, 0x6ac, 0x40, 0x4, 0x9855, 0x4, 0x1, 0x90, 0x9, 0x101, 0x8000000000000001, 0x82bb, 0x400}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000b40)={{r1, 0x7cb7, 0x1, 0x4, 0x1de, 0x2, 0x7, 0x800, 0x7, 0x1f, 0x27a, 0x6, 0x7, 0x1, 0x2}}) close$fd_v4l2_buffer(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x1f80, 0x1f, 0x10001, {0x80000001, 0x1}, 0x4, 0x800}) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') close$fd_v4l2_buffer(r0) 18:11:27 executing program 3: shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) (async) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0x3, @sdr={0x3234564e, 0x820}}) 18:11:27 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xa00) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) 18:11:27 executing program 0: r0 = getpid() syz_open_procfs(r0, 0x0) (async, rerun: 32) r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/ip6_flowlabel\x00') (async, rerun: 32) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_int(r2, 0x21, 0x10, &(0x7f0000000000)=0x1, 0x4) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000040)) (async, rerun: 64) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x2, 0x0) (rerun: 64) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x8000000000000000) 18:11:27 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x64da, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000480)={{r1}, 0x0, 0x1c, @unused=[0x13, 0x8, 0x1f, 0x6], @name="502880cc8880b4b4999a429d4d61788a550a27bbe7f80ee16ee318f347f7c5f0f937687d053f01ed7e7bb593c9eac0a9608f404915b37d15a21999ea04c8e36e31359183dc5b18283045f2065b222e96541e084b8a450563741d7a3282ccdee05a602633df526169cf394d8cd3e1de2b05ae67041c2f126ae7c19dd11b9686628a058041e4e40b976df6a6e551f8174502c38c995896250ebaa5543e434c9ae88b957e6f5eae5139a401fcde0e45e8c1ee7cf992fcfc32e70df7582fe6390a7862a68cda511ba81a529f775337b423f53e2e0a646aac0b9a310c4d6657cd60a82d464f1f7919d0cada3b83cfbed5e03070857e4ec3e9b01f88cd432cd75fcebc784a4f0b3e2b74fa4e86d245454deb427821164b08181d1ca6f2d99a76c35112d95405d35bf7c8ecfc8d49efa2bc79f53b2eb3dae2eb985aa6e28ed3f5eae352792ff5fe2210742e784b0956949e984bbe775606f1b343ebd4ac78ec5b699b2df79de98e1f5db992b4f0a9d79babdc8d7077dbd0b70ea359a0c0e720a53fad48ca7a6773a9e1841410669f3855eecea374a24ffe39353d2a50dfc1f2d1c3c4587922b79962c22cf73890d96cd5c8c84d6560109fd354cb77f048c16e9b14708564311c9324a2de9311be25aa7cb6580c80b5d263e1fd521e4f912a53cbdce57591480aeefe992d97d7d857cfa20f560c1a3d69d6379bad14d7e2b47c785bad5fe385253f52459bddab1e7dcc0d816d884febf55b2ab4104ca425bdda16cd97bcc0d6a14fba0ba9c4d3d5f7dfcb6b4cbb71c045254476353234000c54c7222d8447a2224ef10cc6e259fd43445cf84dc03a2f325e638d0949ac429504987cf8e9733f43de87a667dd85174ac54ed4f3f1371e59d1862d3e2876cce3f0ce609cd5c4d9f5e110b8fc21d45653b10b65e80dd80bc47c2626f6262ea951a400395c00d806262b5a515d6e7043e61c1400591977826d42de6725a015b3c25c38b3a923ad8c94f0f135be9ab13dd494507a407534cb3539c3360cc654af8f41410219e31101f7b747ec94c014f6767b4be221e8391ee2628423a8e83d2b179a1b3cf8e2a298adc88488d55115d4c1c3c2601d9bdbdc17213c842ca8d4044d630517f9cf2edbc54676d2ce63ec1c78f48e39c3d5ebcb3b0bfbc5a6dbd0203b4fad2c147901c0dfbf3f1540106db7cfca2aa8529d09c5f0e538a22b4faf9c291ba32ab4c50b8a3a7089d78858cf7f87db5284bf700a8a8a4cf7a4c20ecf5fb1c0889fe7cd463cf2b4c84f1a3bb5bfbc86ac4856d80378b4d7cda913a2036229499beeb7613dce09e68d9b556f7237ffe54299851b772f0d17de9d3c321be8304286b02d50b661108c9f98fada90be8a5e0815411a9b885c4bff958e5e5b985e79d3fdc20bf09b3edf1a474a1d2df4e7e52f10a58e86610030ec8517e5a0d6e8483e103a9b0af0b74524b01be1781697ec63e3895d42b238811d50ffc69ad7425cd733e581ccf86f3bc41b173e67f9aeca1a5e247a85013fa743c9f11ef4166f43d074af541ef5b93aa5285d7db328f0de5f04382eb76b96175bec2918f322344726d70735222e05432ad47fd76d2c68379c10b304b100e6652599242c7e8d599ea9e9407f47abd94457a16895e3c73e7d2bd55b588d8c62372afe814e3bc11483a8dacc9d7a26c7a6e4948b6d9f47a78542e9aef291702c6c7397e401b1083b98613a82f95abb0e94bd467ac24965ae7e167aa2656f0f3297badec170a774af59bfa4eb06f4906a6c04fbb762b4af4a69dfbc0b9b16b4186505116e78c67e98e71e8c107e94ac8d5a824af3882886f3fd48982ab21e773296ad4a5130943b73d0a00d0736e9d7a329b6dbebb1046f6c92d618a8194c02313271d1e16cedf73af0cc3342367c7db88693d88906146a91bb26f25ce87200573d5e4d119aa8cac30b1a57e6dac665341ba0303e3fecb4e5f7a84373e311395041c7577c54dcbb8f6e4f96e0e1df76475c37f4fc1048f681e7d76cbe2c4a82b7d50afd7c39b61f16eca9404f5d186d4ba14c6b0fee060a8c3e2bfb77d6636b0bff4810e33a09c9634bb0f6afb97dcce1b644fcefb48038e38e1c21ab8d83e407053980554a21fb25371efe47e9a261c4fbe6d419763063fb5ca2167dee7fa8683715179ebbc5def8e658971e49691f9aa5005b80e0b0c663db81a3a788aea2c46bf8bf7c0e7058c879ae76e8e0132f04d22fa724e2ef1e9a7be5e127a2bf4522a2bf443a464962e94090992399b58be24b7abcee0e60d5dc6a0072c1c8987caea50babbd29ddfcb2d0cc618e66d929467cee792e8ab140b627efa3b4298dfee6516ba0f7d8172f11bd2a8dc540dc8175155cdf95e44e8b85aacc741165e21e1d8a252912f126b73a525b87c0dc2103bd5dfe677b2f61a6fd76f0e26e07c8af85a78e768402113b52b2163331990569ae36d3c8e751667201005b63fb60ba6331065069286e41dad68c775da0f2385d295ea7a11539116079510c7957d5750598eff96723553744e6a4366eb4f715464e4ccba1853e026c643bd0068ab0b9968c0e3ce55d31e9ec5ec516039d0143bc3682b27281c6731fd7dff350db58f046c6beb1f017cb579f785920d1e81b3229b2279d76a7eff694ccc8fc9c34394dcdf0e85de835b58cf9bcfbf610f1567525d730efff33e5b0d0fafb68f613addd0cc0f3c740aac3c524105734f6da9d0031289c2d5651fb4883c2e8d5d3a712430db4e6e63d4b82db897b52dd0fab8de29ba5b162af2f265bb8736045b86f33dd79411baa0f0123fa25b218cdd6bd356cfcca25d7ccb671b6f633faf5891742d356aa768d501cc40cf6e151963c45dad701c069fa4d797164c2c2aef93689eb75f032345c23dbcc59284c22915bd77042c1a7e55a08562a5fc482129fad4517632146965cafdb8f0765b715327fc0087c9b4dd00a2c99de6acd7a7ae6c19020e64bc2700207bda2c19956f5de3a397dbab441ac93cb66472f52fb1a6f9dc067c49a61c83f3b316cceef7b24601be59e59e773f143ddc9e57bf0d43e9f9d989ff83991cfef6c0da33e794aa87151d727dce1deef9aec229ae260a0f6395c9999e323d3e8e1679d9b5d31c35281f96c5d9d25592ea3d44cab58b8f37bc49fd7430a9041b15c1fd90d230e893fc1d31e485d23f53095d999b264b14ca1bc82004b33534e35c5cfa5cda0c7b35d88bacaf3c4486b065523356b4f92a0adc5a8a128f9f58be5920c3ea0289f151e35ba12aaef324d309bd7533d73579e3c05ff63a01fc868355bdf0a6766b2769946d0474a8011571a5f44014101096613782de07a6caea19d39329adbb84159f2d887b3c97e10a969121841ce033aea626f350faf8352a33b14b7209e8b16f631892395d5ae12e62c69c47934d9322a4b2bebcb9f35e5f6afd6a00fb2d2d9b5ea413c9fdc5b2fbb4342713281c316593df94caac76ea2a090dfb1b77a395ab9c0c82178cbc3964a705e8857932f2afac0eeb633b92a8e0db617d88ad9a515b4e98cb6f54c68e1c131b0900589dd1d0af235d581fc541d16bd703f9c5fd7750880989620007c5cf07b8c16caee5063af89312fcc0d00782f5144a0a610f4cae47ebd703684c49fa7ee95c2329a599b005ad6a5edf023304ef83f9dfb4d62256f6c13c234d09ceaed40021150c15d99ac6c225d131ba02b88e56b7b080d38e25afc4fbe08b77b2c179ceab3a4ff9e7af05328617228bab044068cede49af64f5d7bbe47a552702a37fe446ae180620e2896dfce3bf8f6f5a943dc4453819a91485ccaebf3473a82b600dc6f7e7a7f4c549babd25d86271d9fbd4bff14f41a190c377833ca647caf4f335b46f9e7cc3474295e88893c66245e8aac90f42582aa4f5bdbd4558ca19d7f5094e0bd05c9795353872555ee86fab0b09dbe34440328c67b440cfc5dde330db1a993da7ebf776b41dd313004244f44d1e329b1281f14b631829d8c6a335aa7d226904cfec9e746a81d94b440150551040e6fd056a8e2dbc12ef4ed4b141960e3d2d8505fffaec72bee130e6823eb1fb20fa8dff08911f63426ed51d8640c32dd09a0e6579fd9901fa5f1e602ad0712aaa82854cc9fb398260d3b0b615b07e0e0dee02a57f1958c627b21e7c51ad96093dd4fd14832d8a76f662619bc0a4e0f0887dd86548a00a4c089ab665ff6dc20f033774b36bcd93f2c225f9cdb96d187b1d58ccd172e057b7c6c88e34eb61feb63eb7be485fdc366fd4df45d374e4c51c74e26c5ce58acf57a46a6738a72984d55f1a49390df7e6494902701b11d413df222d040f75a5c65c0c8eed46bff7ec3ec62610d14d97938346355fdf49a6fc0a3593abde1521ad4a5e8b657b7f84011beaab069f1137dd1d25f13e11d21d636019414f9ad74b3d41097aff142692ad6d1236e3827d4072f60c20f148ac51466acc9d9962f54399a2764f3fa5250935d767dafb0db2184574d90db76aaa154f6a76ddbc2ad689f0d6ecbfa2c2f92a900207dd92e8d7d6001a025b0f184af071963a52d102ee1de45cacd7a42bae792347a848febbf37e5fdf47f9262e28b0e780aa3d777e9b1ad2c688e9588568bdbd8149fba26c4668c8139c312da5378ee1e2fcdcdfb4794255945cc88ed542cf7902e0ca1a8605fa009c06639eeae0d28982ac56f1f12dd341a1067edad29cfbdff89f136c45a106693def49352501a4fb21f325c48da484da296bcec916318f8f96d344e5f3f8ba175af793d42f8557891a59e68b6336a66d059f7b4016717d287d3c0c858fcd63a2e181d940ccf7676db7f65fdedf79f40490d91f31339da0ae64ad67a01b6440a6a1dc5f15e2eacf8668407c9ad7ac3682d75e2451c8baff25805163d326b8f43613b63b9464049f28cd2f8ce392d3c458cf0b43419156fcfba280c841e9a3fd8136bb71e52a6c61a703d1a6be68b98c805a3e6659410ea9db92133f7a4169c49d33aa39af6e45e6cbbb6f4c9111859f2effc5baad7f52cd982fc7f9e152e203b95c06be545f7a23c00170c93f633600461936bcc99e48a2d18cca111a6dbec1c613d6f03c844fb566fd416bf4df25f8be20066d7e1097006b29e9a17e1459eae4bef8b1924e0b06ac04794f91cb8ec811bbc56edc8b490a2ce834a31f895b1cffb6180f9661fa955c5a9a300bfb3583cfbf707f1ff0c4e39623ee07311c770d774ad628ee7ada89bae3f84935b53d118af53d31ca8576fbdb6113571bbc1f7953a8c88c4623e61e6f4ec190feba61e6454f8ea55fcaf6b1fc4b04130f60e356ca54fffc8bfde29d67b8302a3b473d3da00775fb270a3392490eeeccb46080fef15967e5c103564e04526fdf6a40db5aab89f35cfc9888d5e8c398f22578f785a9215ad4c2f86fd463c272a8fcdf60c6506623bae9f2d8ad6b684a6f7522e185ef8e025ceaf24f20338bba419fa57891984efd2f8595420d36a0e8f3d83b37fe0c5a512412b5af78f36806b965e756bf8f41778786e51d74098cde93c597b58f54182f5449bd5dc29cd94f36944d5c9ccdf624e2e2335dda8deb6df675bcf19ec1aef8b59421a5b0159959b284e5a14136e3199f3f100a6a208e28ee4d3e7f547c828901515fdcf0163557aeba42528c8ee32418a2b7a10e8b9b5b4710cc1e04d7d718df7257225469f29ad2f28954e7e793642120299e80f2051fe035af87d3ef7c568bde11c9ba0a998b79a450a"}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x800, 0x1, 0x1, "b414d7f73fd36442baa62084332298391e8b2a0cd4727492d9a099c4fb1e0143", 0x33524742}) r2 = getuid() r3 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r2, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r3, 0xffffffffffffffff, 0x20}) r4 = getgid() r5 = getpid() r6 = getuid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r2, 0xee01, r6, r4, 0x122, 0x83}, 0x2, 0x1, 0x1, 0x200, r3, r5, 0xf001}) r7 = syz_open_procfs(r3, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) read$msr(r7, &(0x7f0000000080)=""/247, 0xf7) 18:11:27 executing program 1: r0 = getpid() syz_open_procfs(r0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/dev_snmp6\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8000000000000000) getpid() (async) syz_open_procfs(r0, 0x0) (async) syz_open_procfs(r0, &(0x7f0000000040)='net/dev_snmp6\x00') (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8000000000000000) (async) 18:11:27 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000a80)={{0x0, 0x1, 0x0, 0x6ac, 0x40, 0x4, 0x9855, 0x4, 0x1, 0x90, 0x9, 0x101, 0x8000000000000001, 0x82bb, 0x400}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000b40)={{r1, 0x7cb7, 0x1, 0x4, 0x1de, 0x2, 0x7, 0x800, 0x7, 0x1f, 0x27a, 0x6, 0x7, 0x1, 0x2}}) close$fd_v4l2_buffer(r0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') close$fd_v4l2_buffer(r0) 18:11:27 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 18:11:27 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x403181) r1 = getuid() r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) r3 = getgid() r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) r6 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)=ANY=[@ANYBLOB="01000000000000000a0000000000000007000000000000028100000000000000080000000000000006000000000000000500000000000000ff00000000000000000000001c00000003000000000000000100010000000000050000f9ffffffffffffff07000000000000000300000000000000030000000000000001000000000000000300"/152]}, @devid=r7}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0xc04c5349, &(0x7f00000000c0)={0xff, 0x9, 0x8}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) 18:11:27 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x64da, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000480)={{r1}, 0x0, 0x1c, @unused=[0x13, 0x8, 0x1f, 0x6], @name="502880cc8880b4b4999a429d4d61788a550a27bbe7f80ee16ee318f347f7c5f0f937687d053f01ed7e7bb593c9eac0a9608f404915b37d15a21999ea04c8e36e31359183dc5b18283045f2065b222e96541e084b8a450563741d7a3282ccdee05a602633df526169cf394d8cd3e1de2b05ae67041c2f126ae7c19dd11b9686628a058041e4e40b976df6a6e551f8174502c38c995896250ebaa5543e434c9ae88b957e6f5eae5139a401fcde0e45e8c1ee7cf992fcfc32e70df7582fe6390a7862a68cda511ba81a529f775337b423f53e2e0a646aac0b9a310c4d6657cd60a82d464f1f7919d0cada3b83cfbed5e03070857e4ec3e9b01f88cd432cd75fcebc784a4f0b3e2b74fa4e86d245454deb427821164b08181d1ca6f2d99a76c35112d95405d35bf7c8ecfc8d49efa2bc79f53b2eb3dae2eb985aa6e28ed3f5eae352792ff5fe2210742e784b0956949e984bbe775606f1b343ebd4ac78ec5b699b2df79de98e1f5db992b4f0a9d79babdc8d7077dbd0b70ea359a0c0e720a53fad48ca7a6773a9e1841410669f3855eecea374a24ffe39353d2a50dfc1f2d1c3c4587922b79962c22cf73890d96cd5c8c84d6560109fd354cb77f048c16e9b14708564311c9324a2de9311be25aa7cb6580c80b5d263e1fd521e4f912a53cbdce57591480aeefe992d97d7d857cfa20f560c1a3d69d6379bad14d7e2b47c785bad5fe385253f52459bddab1e7dcc0d816d884febf55b2ab4104ca425bdda16cd97bcc0d6a14fba0ba9c4d3d5f7dfcb6b4cbb71c045254476353234000c54c7222d8447a2224ef10cc6e259fd43445cf84dc03a2f325e638d0949ac429504987cf8e9733f43de87a667dd85174ac54ed4f3f1371e59d1862d3e2876cce3f0ce609cd5c4d9f5e110b8fc21d45653b10b65e80dd80bc47c2626f6262ea951a400395c00d806262b5a515d6e7043e61c1400591977826d42de6725a015b3c25c38b3a923ad8c94f0f135be9ab13dd494507a407534cb3539c3360cc654af8f41410219e31101f7b747ec94c014f6767b4be221e8391ee2628423a8e83d2b179a1b3cf8e2a298adc88488d55115d4c1c3c2601d9bdbdc17213c842ca8d4044d630517f9cf2edbc54676d2ce63ec1c78f48e39c3d5ebcb3b0bfbc5a6dbd0203b4fad2c147901c0dfbf3f1540106db7cfca2aa8529d09c5f0e538a22b4faf9c291ba32ab4c50b8a3a7089d78858cf7f87db5284bf700a8a8a4cf7a4c20ecf5fb1c0889fe7cd463cf2b4c84f1a3bb5bfbc86ac4856d80378b4d7cda913a2036229499beeb7613dce09e68d9b556f7237ffe54299851b772f0d17de9d3c321be8304286b02d50b661108c9f98fada90be8a5e0815411a9b885c4bff958e5e5b985e79d3fdc20bf09b3edf1a474a1d2df4e7e52f10a58e86610030ec8517e5a0d6e8483e103a9b0af0b74524b01be1781697ec63e3895d42b238811d50ffc69ad7425cd733e581ccf86f3bc41b173e67f9aeca1a5e247a85013fa743c9f11ef4166f43d074af541ef5b93aa5285d7db328f0de5f04382eb76b96175bec2918f322344726d70735222e05432ad47fd76d2c68379c10b304b100e6652599242c7e8d599ea9e9407f47abd94457a16895e3c73e7d2bd55b588d8c62372afe814e3bc11483a8dacc9d7a26c7a6e4948b6d9f47a78542e9aef291702c6c7397e401b1083b98613a82f95abb0e94bd467ac24965ae7e167aa2656f0f3297badec170a774af59bfa4eb06f4906a6c04fbb762b4af4a69dfbc0b9b16b4186505116e78c67e98e71e8c107e94ac8d5a824af3882886f3fd48982ab21e773296ad4a5130943b73d0a00d0736e9d7a329b6dbebb1046f6c92d618a8194c02313271d1e16cedf73af0cc3342367c7db88693d88906146a91bb26f25ce87200573d5e4d119aa8cac30b1a57e6dac665341ba0303e3fecb4e5f7a84373e311395041c7577c54dcbb8f6e4f96e0e1df76475c37f4fc1048f681e7d76cbe2c4a82b7d50afd7c39b61f16eca9404f5d186d4ba14c6b0fee060a8c3e2bfb77d6636b0bff4810e33a09c9634bb0f6afb97dcce1b644fcefb48038e38e1c21ab8d83e407053980554a21fb25371efe47e9a261c4fbe6d419763063fb5ca2167dee7fa8683715179ebbc5def8e658971e49691f9aa5005b80e0b0c663db81a3a788aea2c46bf8bf7c0e7058c879ae76e8e0132f04d22fa724e2ef1e9a7be5e127a2bf4522a2bf443a464962e94090992399b58be24b7abcee0e60d5dc6a0072c1c8987caea50babbd29ddfcb2d0cc618e66d929467cee792e8ab140b627efa3b4298dfee6516ba0f7d8172f11bd2a8dc540dc8175155cdf95e44e8b85aacc741165e21e1d8a252912f126b73a525b87c0dc2103bd5dfe677b2f61a6fd76f0e26e07c8af85a78e768402113b52b2163331990569ae36d3c8e751667201005b63fb60ba6331065069286e41dad68c775da0f2385d295ea7a11539116079510c7957d5750598eff96723553744e6a4366eb4f715464e4ccba1853e026c643bd0068ab0b9968c0e3ce55d31e9ec5ec516039d0143bc3682b27281c6731fd7dff350db58f046c6beb1f017cb579f785920d1e81b3229b2279d76a7eff694ccc8fc9c34394dcdf0e85de835b58cf9bcfbf610f1567525d730efff33e5b0d0fafb68f613addd0cc0f3c740aac3c524105734f6da9d0031289c2d5651fb4883c2e8d5d3a712430db4e6e63d4b82db897b52dd0fab8de29ba5b162af2f265bb8736045b86f33dd79411baa0f0123fa25b218cdd6bd356cfcca25d7ccb671b6f633faf5891742d356aa768d501cc40cf6e151963c45dad701c069fa4d797164c2c2aef93689eb75f032345c23dbcc59284c22915bd77042c1a7e55a08562a5fc482129fad4517632146965cafdb8f0765b715327fc0087c9b4dd00a2c99de6acd7a7ae6c19020e64bc2700207bda2c19956f5de3a397dbab441ac93cb66472f52fb1a6f9dc067c49a61c83f3b316cceef7b24601be59e59e773f143ddc9e57bf0d43e9f9d989ff83991cfef6c0da33e794aa87151d727dce1deef9aec229ae260a0f6395c9999e323d3e8e1679d9b5d31c35281f96c5d9d25592ea3d44cab58b8f37bc49fd7430a9041b15c1fd90d230e893fc1d31e485d23f53095d999b264b14ca1bc82004b33534e35c5cfa5cda0c7b35d88bacaf3c4486b065523356b4f92a0adc5a8a128f9f58be5920c3ea0289f151e35ba12aaef324d309bd7533d73579e3c05ff63a01fc868355bdf0a6766b2769946d0474a8011571a5f44014101096613782de07a6caea19d39329adbb84159f2d887b3c97e10a969121841ce033aea626f350faf8352a33b14b7209e8b16f631892395d5ae12e62c69c47934d9322a4b2bebcb9f35e5f6afd6a00fb2d2d9b5ea413c9fdc5b2fbb4342713281c316593df94caac76ea2a090dfb1b77a395ab9c0c82178cbc3964a705e8857932f2afac0eeb633b92a8e0db617d88ad9a515b4e98cb6f54c68e1c131b0900589dd1d0af235d581fc541d16bd703f9c5fd7750880989620007c5cf07b8c16caee5063af89312fcc0d00782f5144a0a610f4cae47ebd703684c49fa7ee95c2329a599b005ad6a5edf023304ef83f9dfb4d62256f6c13c234d09ceaed40021150c15d99ac6c225d131ba02b88e56b7b080d38e25afc4fbe08b77b2c179ceab3a4ff9e7af05328617228bab044068cede49af64f5d7bbe47a552702a37fe446ae180620e2896dfce3bf8f6f5a943dc4453819a91485ccaebf3473a82b600dc6f7e7a7f4c549babd25d86271d9fbd4bff14f41a190c377833ca647caf4f335b46f9e7cc3474295e88893c66245e8aac90f42582aa4f5bdbd4558ca19d7f5094e0bd05c9795353872555ee86fab0b09dbe34440328c67b440cfc5dde330db1a993da7ebf776b41dd313004244f44d1e329b1281f14b631829d8c6a335aa7d226904cfec9e746a81d94b440150551040e6fd056a8e2dbc12ef4ed4b141960e3d2d8505fffaec72bee130e6823eb1fb20fa8dff08911f63426ed51d8640c32dd09a0e6579fd9901fa5f1e602ad0712aaa82854cc9fb398260d3b0b615b07e0e0dee02a57f1958c627b21e7c51ad96093dd4fd14832d8a76f662619bc0a4e0f0887dd86548a00a4c089ab665ff6dc20f033774b36bcd93f2c225f9cdb96d187b1d58ccd172e057b7c6c88e34eb61feb63eb7be485fdc366fd4df45d374e4c51c74e26c5ce58acf57a46a6738a72984d55f1a49390df7e6494902701b11d413df222d040f75a5c65c0c8eed46bff7ec3ec62610d14d97938346355fdf49a6fc0a3593abde1521ad4a5e8b657b7f84011beaab069f1137dd1d25f13e11d21d636019414f9ad74b3d41097aff142692ad6d1236e3827d4072f60c20f148ac51466acc9d9962f54399a2764f3fa5250935d767dafb0db2184574d90db76aaa154f6a76ddbc2ad689f0d6ecbfa2c2f92a900207dd92e8d7d6001a025b0f184af071963a52d102ee1de45cacd7a42bae792347a848febbf37e5fdf47f9262e28b0e780aa3d777e9b1ad2c688e9588568bdbd8149fba26c4668c8139c312da5378ee1e2fcdcdfb4794255945cc88ed542cf7902e0ca1a8605fa009c06639eeae0d28982ac56f1f12dd341a1067edad29cfbdff89f136c45a106693def49352501a4fb21f325c48da484da296bcec916318f8f96d344e5f3f8ba175af793d42f8557891a59e68b6336a66d059f7b4016717d287d3c0c858fcd63a2e181d940ccf7676db7f65fdedf79f40490d91f31339da0ae64ad67a01b6440a6a1dc5f15e2eacf8668407c9ad7ac3682d75e2451c8baff25805163d326b8f43613b63b9464049f28cd2f8ce392d3c458cf0b43419156fcfba280c841e9a3fd8136bb71e52a6c61a703d1a6be68b98c805a3e6659410ea9db92133f7a4169c49d33aa39af6e45e6cbbb6f4c9111859f2effc5baad7f52cd982fc7f9e152e203b95c06be545f7a23c00170c93f633600461936bcc99e48a2d18cca111a6dbec1c613d6f03c844fb566fd416bf4df25f8be20066d7e1097006b29e9a17e1459eae4bef8b1924e0b06ac04794f91cb8ec811bbc56edc8b490a2ce834a31f895b1cffb6180f9661fa955c5a9a300bfb3583cfbf707f1ff0c4e39623ee07311c770d774ad628ee7ada89bae3f84935b53d118af53d31ca8576fbdb6113571bbc1f7953a8c88c4623e61e6f4ec190feba61e6454f8ea55fcaf6b1fc4b04130f60e356ca54fffc8bfde29d67b8302a3b473d3da00775fb270a3392490eeeccb46080fef15967e5c103564e04526fdf6a40db5aab89f35cfc9888d5e8c398f22578f785a9215ad4c2f86fd463c272a8fcdf60c6506623bae9f2d8ad6b684a6f7522e185ef8e025ceaf24f20338bba419fa57891984efd2f8595420d36a0e8f3d83b37fe0c5a512412b5af78f36806b965e756bf8f41778786e51d74098cde93c597b58f54182f5449bd5dc29cd94f36944d5c9ccdf624e2e2335dda8deb6df675bcf19ec1aef8b59421a5b0159959b284e5a14136e3199f3f100a6a208e28ee4d3e7f547c828901515fdcf0163557aeba42528c8ee32418a2b7a10e8b9b5b4710cc1e04d7d718df7257225469f29ad2f28954e7e793642120299e80f2051fe035af87d3ef7c568bde11c9ba0a998b79a450a"}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x800, 0x1, 0x1, "b414d7f73fd36442baa62084332298391e8b2a0cd4727492d9a099c4fb1e0143", 0x33524742}) r2 = getuid() r3 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r2, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r3, 0xffffffffffffffff, 0x20}) r4 = getgid() r5 = getpid() r6 = getuid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r2, 0xee01, r6, r4, 0x122, 0x83}, 0x2, 0x1, 0x1, 0x200, r3, r5, 0xf001}) r7 = syz_open_procfs(r3, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) read$msr(r7, &(0x7f0000000080)=""/247, 0xf7) syz_open_dev$vim2m(&(0x7f0000000000), 0x64da, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000480)={{r1}, 0x0, 0x1c, @unused=[0x13, 0x8, 0x1f, 0x6], @name="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"}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x800, 0x1, 0x1, "b414d7f73fd36442baa62084332298391e8b2a0cd4727492d9a099c4fb1e0143", 0x33524742}) (async) getuid() (async) getpid() (async) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r2, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r3, 0xffffffffffffffff, 0x20}) (async) getgid() (async) getpid() (async) getuid() (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r2, 0xee01, r6, r4, 0x122, 0x83}, 0x2, 0x1, 0x1, 0x200, r3, r5, 0xf001}) (async) syz_open_procfs(r3, &(0x7f00000008c0)='net/ip_mr_vif\x00') (async) ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) (async) userfaultfd(0x80000) (async) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) (async) read$msr(r7, &(0x7f0000000080)=""/247, 0xf7) (async) 18:11:27 executing program 1: r0 = getpid() syz_open_procfs(r0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/dev_snmp6\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8000000000000000) getpid() (async) syz_open_procfs(r0, 0x0) (async) syz_open_procfs(r0, &(0x7f0000000040)='net/dev_snmp6\x00') (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8000000000000000) (async) 18:11:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') syz_open_dev$media(&(0x7f0000000080), 0x400, 0x8000) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0xfff, 0x9, 0x4, 0x1000, 0xfff, {0x0, 0x2710}, {0x5, 0x0, 0xe7, 0x8, 0xf8, 0x3, "0607fbfe"}, 0x6, 0x4, {}, 0xfffffffa, 0x0, r0}) 18:11:27 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 18:11:27 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000a80)={{0x0, 0x1, 0x0, 0x6ac, 0x40, 0x4, 0x9855, 0x4, 0x1, 0x90, 0x9, 0x101, 0x8000000000000001, 0x82bb, 0x400}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000b40)={{r1, 0x7cb7, 0x1, 0x4, 0x1de, 0x2, 0x7, 0x800, 0x7, 0x1f, 0x27a, 0x6, 0x7, 0x1, 0x2}}) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') close$fd_v4l2_buffer(r0) 18:11:27 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x403181) r1 = getuid() (async, rerun: 64) r2 = getpid() (rerun: 64) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) r3 = getgid() (async) r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) r6 = userfaultfd(0x80000) (async) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)=ANY=[@ANYBLOB="01000000000000000a0000000000000007000000000000028100000000000000080000000000000006000000000000000500000000000000ff00000000000000000000001c00000003000000000000000100010000000000050000f9ffffffffffffff07000000000000000300000000000000030000000000000001000000000000000300"/152]}, @devid=r7}) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0xc04c5349, &(0x7f00000000c0)={0xff, 0x9, 0x8}) (rerun: 64) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) 18:11:27 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') socket$nl_generic(0x10, 0x3, 0x10) r1 = getuid() r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) r3 = getgid() r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) getpid() ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) r6 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f00000001c0)={&(0x7f0000000400), 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100060001000000000005001300001f9600000000000000000000000000d11e929da0469baa3fc4d6742f56ebf299d8f31b8e87a248"], 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000012e0727007215041da8a9b36255982bacd8576197feaffd506863d8dc814bda8c6511d16d6294a4b2e87d1f6ad0bfe9d316c1ce1f1b03b501bcaa71ae1060cd83186e8df5266b94a22a80d3d32a633669637ffc82a6180e4d9ef2a5e3ffb3e08ebbc6ebeb24bc902d1fdb80e9d2d7c242fe7f5e0b1e984ef711239284200e626ac9eb34f30aa9175e82908b0ff2cc5c40babc4c1792ec51f2bf50dd21dbf91df064977df3c44e0628289a7e7", @ANYRES16=r9, @ANYBLOB="000826bd7000fddbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x40000) r10 = syz_open_dev$vcsn(&(0x7f0000000000), 0xf94a, 0x80000) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, 0x0) ioctl$BTRFS_IOC_RESIZE(r11, 0x50009403, &(0x7f0000000100)={{r10}, {@void, @max}}) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f00000000c0)={0x60, 0xc, 0x1, 0x9, 0x5d, 0x4, &(0x7f0000000040)="82b28840322338c0fc77d2536340360357bc71aa35e26ddfcda86051059eeb90c5e3f3222195b58089329147c447856ce17c38ccfe3c27580c0de1b206c0d6835bd2336091b2b046a5ae0256ff5ce769ea532c85ac4126d6f16503e6c0"}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) 18:11:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') syz_open_dev$media(&(0x7f0000000080), 0x400, 0x8000) (async, rerun: 32) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) (rerun: 32) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0xfff, 0x9, 0x4, 0x1000, 0xfff, {0x0, 0x2710}, {0x5, 0x0, 0xe7, 0x8, 0xf8, 0x3, "0607fbfe"}, 0x6, 0x4, {}, 0xfffffffa, 0x0, r0}) 18:11:27 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x64da, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000480)={{r1}, 0x0, 0x1c, @unused=[0x13, 0x8, 0x1f, 0x6], @name="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"}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x800, 0x1, 0x1, "b414d7f73fd36442baa62084332298391e8b2a0cd4727492d9a099c4fb1e0143", 0x33524742}) (async) r2 = getuid() (async) r3 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r2, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r3, 0xffffffffffffffff, 0x20}) r4 = getgid() (async) r5 = getpid() (async) r6 = getuid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r2, 0xee01, r6, r4, 0x122, 0x83}, 0x2, 0x1, 0x1, 0x200, r3, r5, 0xf001}) r7 = syz_open_procfs(r3, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) (async) read$msr(r7, &(0x7f0000000080)=""/247, 0xf7) 18:11:27 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x403181) r1 = getuid() r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) r3 = getgid() r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) r6 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)=ANY=[@ANYBLOB="01000000000000000a0000000000000007000000000000028100000000000000080000000000000006000000000000000500000000000000ff00000000000000000000001c00000003000000000000000100010000000000050000f9ffffffffffffff07000000000000000300000000000000030000000000000001000000000000000300"/152]}, @devid=r7}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0xc04c5349, &(0x7f00000000c0)={0xff, 0x9, 0x8}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x403181) (async) getuid() (async) getpid() (async) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) (async) getgid() (async) getpid() (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) (async) syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') (async) ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) (async) userfaultfd(0x80000) (async) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)=ANY=[@ANYBLOB="01000000000000000a0000000000000007000000000000028100000000000000080000000000000006000000000000000500000000000000ff00000000000000000000001c00000003000000000000000100010000000000050000f9ffffffffffffff07000000000000000300000000000000030000000000000001000000000000000300"/152]}, @devid=r7}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0xc04c5349, &(0x7f00000000c0)={0xff, 0x9, 0x8}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) (async) 18:11:27 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) 18:11:27 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000a80)={{0x0, 0x1, 0x0, 0x6ac, 0x40, 0x4, 0x9855, 0x4, 0x1, 0x90, 0x9, 0x101, 0x8000000000000001, 0x82bb, 0x400}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000b40)={{r1, 0x7cb7, 0x1, 0x4, 0x1de, 0x2, 0x7, 0x800, 0x7, 0x1f, 0x27a, 0x6, 0x7, 0x1, 0x2}}) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') close$fd_v4l2_buffer(r0) [ 1384.475050] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 18:11:27 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) r1 = shmget(0x2, 0x1000, 0x54000000, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x1000) 18:11:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') syz_open_dev$media(&(0x7f0000000080), 0x400, 0x8000) (async, rerun: 32) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) (async, rerun: 32) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0xfff, 0x9, 0x4, 0x1000, 0xfff, {0x0, 0x2710}, {0x5, 0x0, 0xe7, 0x8, 0xf8, 0x3, "0607fbfe"}, 0x6, 0x4, {}, 0xfffffffa, 0x0, r0}) 18:11:27 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = getuid() (async) r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) (async) r3 = getgid() r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) (async) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) getpid() (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) r6 = userfaultfd(0x80000) (async, rerun: 64) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) (rerun: 64) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f00000001c0)={&(0x7f0000000400), 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100060001000000000005001300001f9600000000000000000000000000d11e929da0469baa3fc4d6742f56ebf299d8f31b8e87a248"], 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000012e0727007215041da8a9b36255982bacd8576197feaffd506863d8dc814bda8c6511d16d6294a4b2e87d1f6ad0bfe9d316c1ce1f1b03b501bcaa71ae1060cd83186e8df5266b94a22a80d3d32a633669637ffc82a6180e4d9ef2a5e3ffb3e08ebbc6ebeb24bc902d1fdb80e9d2d7c242fe7f5e0b1e984ef711239284200e626ac9eb34f30aa9175e82908b0ff2cc5c40babc4c1792ec51f2bf50dd21dbf91df064977df3c44e0628289a7e7", @ANYRES16=r9, @ANYBLOB="000826bd7000fddbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x40000) (async, rerun: 32) r10 = syz_open_dev$vcsn(&(0x7f0000000000), 0xf94a, 0x80000) (async, rerun: 32) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, 0x0) (async) ioctl$BTRFS_IOC_RESIZE(r11, 0x50009403, &(0x7f0000000100)={{r10}, {@void, @max}}) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f00000000c0)={0x60, 0xc, 0x1, 0x9, 0x5d, 0x4, &(0x7f0000000040)="82b28840322338c0fc77d2536340360357bc71aa35e26ddfcda86051059eeb90c5e3f3222195b58089329147c447856ce17c38ccfe3c27580c0de1b206c0d6835bd2336091b2b046a5ae0256ff5ce769ea532c85ac4126d6f16503e6c0"}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) 18:11:27 executing program 3: syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adb6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df4438484302000000b9ff2edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb039cfbf7db93ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d3500"}) 18:11:27 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000a80)={{0x0, 0x1, 0x0, 0x6ac, 0x40, 0x4, 0x9855, 0x4, 0x1, 0x90, 0x9, 0x101, 0x8000000000000001, 0x82bb, 0x400}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000b40)={{r1, 0x7cb7, 0x1, 0x4, 0x1de, 0x2, 0x7, 0x800, 0x7, 0x1f, 0x27a, 0x6, 0x7, 0x1, 0x2}}) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') close$fd_v4l2_buffer(r0) 18:11:27 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) (async) r1 = shmget(0x2, 0x1000, 0x54000000, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x1000) 18:11:27 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000000c0)={{0x4c, 0x80}, 'port1\x00', 0x10, 0x1000, 0xfffffffc, 0x3, 0x2, 0x7}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) 18:11:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) [ 1384.608679] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 18:11:27 executing program 3: syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adb6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df4438484302000000b9ff2edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb039cfbf7db93ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d3500"}) 18:11:27 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000a80)={{0x0, 0x1, 0x0, 0x6ac, 0x40, 0x4, 0x9855, 0x4, 0x1, 0x90, 0x9, 0x101, 0x8000000000000001, 0x82bb, 0x400}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) close$fd_v4l2_buffer(r0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') close$fd_v4l2_buffer(r0) 18:11:27 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = getuid() (async) r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) r3 = getgid() r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) (async, rerun: 32) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') (rerun: 32) ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) (async) getpid() ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) (async, rerun: 32) r6 = userfaultfd(0x80000) (async, rerun: 32) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f00000001c0)={&(0x7f0000000400), 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100060001000000000005001300001f9600000000000000000000000000d11e929da0469baa3fc4d6742f56ebf299d8f31b8e87a248"], 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000012e0727007215041da8a9b36255982bacd8576197feaffd506863d8dc814bda8c6511d16d6294a4b2e87d1f6ad0bfe9d316c1ce1f1b03b501bcaa71ae1060cd83186e8df5266b94a22a80d3d32a633669637ffc82a6180e4d9ef2a5e3ffb3e08ebbc6ebeb24bc902d1fdb80e9d2d7c242fe7f5e0b1e984ef711239284200e626ac9eb34f30aa9175e82908b0ff2cc5c40babc4c1792ec51f2bf50dd21dbf91df064977df3c44e0628289a7e7", @ANYRES16=r9, @ANYBLOB="000826bd7000fddbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x40000) (async) r10 = syz_open_dev$vcsn(&(0x7f0000000000), 0xf94a, 0x80000) (async) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, 0x0) ioctl$BTRFS_IOC_RESIZE(r11, 0x50009403, &(0x7f0000000100)={{r10}, {@void, @max}}) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f00000000c0)={0x60, 0xc, 0x1, 0x9, 0x5d, 0x4, &(0x7f0000000040)="82b28840322338c0fc77d2536340360357bc71aa35e26ddfcda86051059eeb90c5e3f3222195b58089329147c447856ce17c38ccfe3c27580c0de1b206c0d6835bd2336091b2b046a5ae0256ff5ce769ea532c85ac4126d6f16503e6c0"}) (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) 18:11:27 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) (async) r1 = shmget(0x2, 0x1000, 0x54000000, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x1000) 18:11:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) 18:11:27 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000000c0)={{0x4c, 0x80}, 'port1\x00', 0x10, 0x1000, 0xfffffffc, 0x3, 0x2, 0x7}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000000c0)={{0x4c, 0x80}, 'port1\x00', 0x10, 0x1000, 0xfffffffc, 0x3, 0x2, 0x7}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) (async) 18:11:27 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) close$fd_v4l2_buffer(r0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') close$fd_v4l2_buffer(r0) 18:11:27 executing program 3: syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adb6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df4438484302000000b9ff2edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb039cfbf7db93ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d3500"}) 18:11:27 executing program 4: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) r0 = getuid() r1 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r1, 0xffffffffffffffff, 0x20}) r2 = getgid() r3 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r2, 0x100, 0x83}, 0x9, 0x1, 0x1, 0x200, r1, r3, 0xf001}) r4 = syz_open_procfs(r1, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000940)) r5 = userfaultfd(0x80000) r6 = getuid() r7 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r6, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r7, 0xffffffffffffffff, 0x20}) r8 = getgid() r9 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r6, 0xee01, r6, r8, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r7, r9, 0xf001}) r10 = syz_open_procfs(r7, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r10, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r10, 0x80045301, &(0x7f0000000940)) r11 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r10, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r11, 0x50009417, &(0x7f0000000f40)={{r10}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r12}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r10, 0xc08c5334, &(0x7f0000000300)={0xfff, 0x400, 0x0, 'queue1\x00', 0x3}) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000f40)={{r4}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0xffff, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x8000000000000000]}}, @devid=r13}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)=@userptr={0x2, 0x3, 0x4, 0x400, 0xffff, {0x77359400}, {0x4, 0x0, 0x3, 0x1, 0x1, 0x80, "e861525d"}, 0x1f, 0x2, {&(0x7f00000000c0)}, 0x6, 0x0, r4}) 18:11:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) 18:11:27 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') close$fd_v4l2_buffer(r0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') close$fd_v4l2_buffer(r0) 18:11:27 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) write$cgroup_freezer_state(r0, &(0x7f0000000000)='THAWED\x00', 0x7) 18:11:27 executing program 4: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) r0 = getuid() r1 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r1, 0xffffffffffffffff, 0x20}) r2 = getgid() (async) r3 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r2, 0x100, 0x83}, 0x9, 0x1, 0x1, 0x200, r1, r3, 0xf001}) (async) r4 = syz_open_procfs(r1, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000900)) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000940)) (async) r5 = userfaultfd(0x80000) r6 = getuid() (async) r7 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r6, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r7, 0xffffffffffffffff, 0x20}) (async) r8 = getgid() r9 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r6, 0xee01, r6, r8, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r7, r9, 0xf001}) (async) r10 = syz_open_procfs(r7, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r10, 0x8004551a, &(0x7f0000000900)) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r10, 0x80045301, &(0x7f0000000940)) r11 = userfaultfd(0x80000) (async) ioctl$BTRFS_IOC_SCRUB(r10, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r11, 0x50009417, &(0x7f0000000f40)={{r10}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r12}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r10, 0xc08c5334, &(0x7f0000000300)={0xfff, 0x400, 0x0, 'queue1\x00', 0x3}) (async) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000f40)={{r4}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0xffff, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x8000000000000000]}}, @devid=r13}) (async) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)=@userptr={0x2, 0x3, 0x4, 0x400, 0xffff, {0x77359400}, {0x4, 0x0, 0x3, 0x1, 0x1, 0x80, "e861525d"}, 0x1f, 0x2, {&(0x7f00000000c0)}, 0x6, 0x0, r4}) 18:11:27 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) r1 = userfaultfd(0x1c00) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) 18:11:27 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000000c0)={{0x4c, 0x80}, 'port1\x00', 0x10, 0x1000, 0xfffffffc, 0x3, 0x2, 0x7}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) 18:11:27 executing program 0: r0 = getpid() r1 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, 0x0, 0xee01, 0x0, 0x0, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, r1, 0xf001}) r2 = getuid() r3 = getuid() r4 = getpid() r5 = getgid() r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000140)={{0x0, 0x0, 0x0, r2, r5, 0x110, 0xc5e}, 0x3, 0x9, 0x0, 0x5, r0, r7, 0x1000}) syz_open_procfs(r0, 0x0) r8 = syz_open_procfs(r0, &(0x7f0000000040)='net/ip_mr_cache\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r8, 0x8000000000000000) r9 = getuid() r10 = getpid() r11 = getgid() r12 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r9, 0xee01, r9, r11, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r10, r12, 0xf001}) r13 = getuid() r14 = getpid() r15 = getgid() r16 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r13, 0xee01, r13, r15, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r14, r16, 0xf001}) r17 = getpid() syz_open_procfs(r17, &(0x7f0000000100)='net/vlan/config\x00') getgroups(0x1, &(0x7f0000000000)=[0x0]) r19 = getpid() r20 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, r9, r15, 0x0, r18, 0x11c, 0x9eb}, 0x3ff, 0x101, 0x6, 0x1, r19, r20, 0x8}) 18:11:27 executing program 5: close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') close$fd_v4l2_buffer(0xffffffffffffffff) 18:11:28 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) write$cgroup_freezer_state(r0, &(0x7f0000000000)='THAWED\x00', 0x7) (async) write$cgroup_freezer_state(r0, &(0x7f0000000000)='THAWED\x00', 0x7) 18:11:28 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 18:11:28 executing program 0: r0 = getpid() r1 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, 0x0, 0xee01, 0x0, 0x0, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, r1, 0xf001}) (async) r2 = getuid() r3 = getuid() (async) r4 = getpid() (async, rerun: 64) r5 = getgid() (async, rerun: 64) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000140)={{0x0, 0x0, 0x0, r2, r5, 0x110, 0xc5e}, 0x3, 0x9, 0x0, 0x5, r0, r7, 0x1000}) (async) syz_open_procfs(r0, 0x0) r8 = syz_open_procfs(r0, &(0x7f0000000040)='net/ip_mr_cache\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r8, 0x8000000000000000) r9 = getuid() (async) r10 = getpid() (async) r11 = getgid() (async) r12 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r9, 0xee01, r9, r11, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r10, r12, 0xf001}) (async) r13 = getuid() (async) r14 = getpid() (async) r15 = getgid() (async) r16 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r13, 0xee01, r13, r15, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r14, r16, 0xf001}) r17 = getpid() syz_open_procfs(r17, &(0x7f0000000100)='net/vlan/config\x00') getgroups(0x1, &(0x7f0000000000)=[0x0]) (async, rerun: 64) r19 = getpid() (async, rerun: 64) r20 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, r9, r15, 0x0, r18, 0x11c, 0x9eb}, 0x3ff, 0x101, 0x6, 0x1, r19, r20, 0x8}) 18:11:28 executing program 4: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) r0 = getuid() (async) r1 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r1, 0xffffffffffffffff, 0x20}) (async) r2 = getgid() (async) r3 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r2, 0x100, 0x83}, 0x9, 0x1, 0x1, 0x200, r1, r3, 0xf001}) (async) r4 = syz_open_procfs(r1, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000900)) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000940)) (async, rerun: 32) r5 = userfaultfd(0x80000) (async) r6 = getuid() r7 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r6, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r7, 0xffffffffffffffff, 0x20}) (async) r8 = getgid() (async, rerun: 32) r9 = getpid() (rerun: 32) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r6, 0xee01, r6, r8, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r7, r9, 0xf001}) (async) r10 = syz_open_procfs(r7, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r10, 0x8004551a, &(0x7f0000000900)) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r10, 0x80045301, &(0x7f0000000940)) (async) r11 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r10, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r11, 0x50009417, &(0x7f0000000f40)={{r10}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r12}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r10, 0xc08c5334, &(0x7f0000000300)={0xfff, 0x400, 0x0, 'queue1\x00', 0x3}) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000f40)={{r4}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0xffff, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x8000000000000000]}}, @devid=r13}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)=@userptr={0x2, 0x3, 0x4, 0x400, 0xffff, {0x77359400}, {0x4, 0x0, 0x3, 0x1, 0x1, 0x80, "e861525d"}, 0x1f, 0x2, {&(0x7f00000000c0)}, 0x6, 0x0, r4}) 18:11:28 executing program 3: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) (async) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) r1 = userfaultfd(0x1c00) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) 18:11:28 executing program 5: close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') close$fd_v4l2_buffer(0xffffffffffffffff) 18:11:28 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) 18:11:28 executing program 0: r0 = getpid() (async) r1 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, 0x0, 0xee01, 0x0, 0x0, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, r1, 0xf001}) (async) r2 = getuid() r3 = getuid() (async) r4 = getpid() r5 = getgid() (async) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000140)={{0x0, 0x0, 0x0, r2, r5, 0x110, 0xc5e}, 0x3, 0x9, 0x0, 0x5, r0, r7, 0x1000}) (async) syz_open_procfs(r0, 0x0) (async) r8 = syz_open_procfs(r0, &(0x7f0000000040)='net/ip_mr_cache\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r8, 0x8000000000000000) r9 = getuid() (async) r10 = getpid() (async) r11 = getgid() (async) r12 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r9, 0xee01, r9, r11, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r10, r12, 0xf001}) (async) r13 = getuid() (async) r14 = getpid() (async) r15 = getgid() r16 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r13, 0xee01, r13, r15, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r14, r16, 0xf001}) (async) r17 = getpid() syz_open_procfs(r17, &(0x7f0000000100)='net/vlan/config\x00') (async) getgroups(0x1, &(0x7f0000000000)=[0x0]) (async) r19 = getpid() (async) r20 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, r9, r15, 0x0, r18, 0x11c, 0x9eb}, 0x3ff, 0x101, 0x6, 0x1, r19, r20, 0x8}) 18:11:28 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) write$cgroup_freezer_state(r0, &(0x7f0000000000)='THAWED\x00', 0x7) 18:11:28 executing program 5: close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') close$fd_v4l2_buffer(0xffffffffffffffff) 18:11:28 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 18:11:28 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) (async) r1 = userfaultfd(0x1c00) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) 18:11:28 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0x6, @sdr={0x52424752, 0x7}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) 18:11:28 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) r1 = getuid() r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) r3 = getgid() r4 = getpid() ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000140)) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) r6 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r5, 0x15, 0x1, 0x1f, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r5, 0xc05c5340, &(0x7f00000000c0)={0x45c, 0x7ff, 0x92d5, {}, 0x4, 0x7e83f6b3}) 18:11:28 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) close$fd_v4l2_buffer(r0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') close$fd_v4l2_buffer(r0) 18:11:28 executing program 1: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/ip_mr_vif\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8000000000000000) 18:11:28 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0x6, @sdr={0x52424752, 0x7}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) 18:11:28 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f0000000000)=0x5) 18:11:28 executing program 3: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) 18:11:28 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) r1 = getuid() r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) r3 = getgid() r4 = getpid() ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000140)) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) r6 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r5, 0x15, 0x1, 0x1f, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r5, 0xc05c5340, &(0x7f00000000c0)={0x45c, 0x7ff, 0x92d5, {}, 0x4, 0x7e83f6b3}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) (async) getuid() (async) getpid() (async) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) (async) getgid() (async) getpid() (async) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000140)) (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) (async) syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') (async) ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) (async) userfaultfd(0x80000) (async) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r5, 0x15, 0x1, 0x1f, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r5, 0xc05c5340, &(0x7f00000000c0)={0x45c, 0x7ff, 0x92d5, {}, 0x4, 0x7e83f6b3}) (async) 18:11:28 executing program 1: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/ip_mr_vif\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8000000000000000) 18:11:28 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0x6, @sdr={0x52424752, 0x7}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) 18:11:28 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) (async) ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f0000000000)=0x5) 18:11:28 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) close$fd_v4l2_buffer(r0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') close$fd_v4l2_buffer(r0) 18:11:28 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000480)={{r2}, r3, 0xc, @inherit={0x60, &(0x7f0000000000)={0x1, 0x3, 0xffffffff, 0xffffffffffffffe0, {0x4, 0x9, 0x7, 0x2, 0xaf5d}, [0x1, 0x3fffc00000, 0x6]}}, @subvolid=0xbe3d}) 18:11:28 executing program 1: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/ip_mr_vif\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8000000000000000) getpid() (async) syz_open_procfs(r0, &(0x7f0000000000)='net/ip_mr_vif\x00') (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8000000000000000) (async) 18:11:28 executing program 3: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) (async) 18:11:28 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) (async) ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f0000000000)=0x5) 18:11:28 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) r1 = getuid() r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) (async) r3 = getgid() (async) r4 = getpid() ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000140)) (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) (async) r6 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r5, 0x15, 0x1, 0x1f, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r5, 0xc05c5340, &(0x7f00000000c0)={0x45c, 0x7ff, 0x92d5, {}, 0x4, 0x7e83f6b3}) 18:11:28 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000100)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000480)={{r2}, r3, 0xc, @inherit={0x60, &(0x7f0000000000)={0x1, 0x3, 0xffffffff, 0xffffffffffffffe0, {0x4, 0x9, 0x7, 0x2, 0xaf5d}, [0x1, 0x3fffc00000, 0x6]}}, @subvolid=0xbe3d}) 18:11:28 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) close$fd_v4l2_buffer(r0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') close$fd_v4l2_buffer(r0) 18:11:28 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) getsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x1, @sliced={0x9, [0x5, 0x800, 0xa3, 0x0, 0x401, 0x7, 0x3, 0x4, 0x100, 0x6, 0xff, 0x401, 0x80, 0x4, 0x3, 0x4, 0x19d9, 0x4, 0x400, 0x4, 0x2, 0x2e9d, 0x24ee, 0xbf, 0xfc00, 0x20, 0xab, 0x1000, 0x2, 0x8, 0x3, 0x3, 0xe56b, 0x23ba, 0x0, 0x6, 0x2, 0x525c, 0x76, 0x1, 0x6, 0x9, 0x400, 0x97ca, 0x0, 0x401, 0x80, 0x1], 0x7}}) 18:11:28 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000480)={{r2}, r3, 0xc, @inherit={0x60, &(0x7f0000000000)={0x1, 0x3, 0xffffffff, 0xffffffffffffffe0, {0x4, 0x9, 0x7, 0x2, 0xaf5d}, [0x1, 0x3fffc00000, 0x6]}}, @subvolid=0xbe3d}) 18:11:28 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') close$fd_v4l2_buffer(r0) 18:11:28 executing program 3: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) 18:11:28 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) getsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x1, @sliced={0x9, [0x5, 0x800, 0xa3, 0x0, 0x401, 0x7, 0x3, 0x4, 0x100, 0x6, 0xff, 0x401, 0x80, 0x4, 0x3, 0x4, 0x19d9, 0x4, 0x400, 0x4, 0x2, 0x2e9d, 0x24ee, 0xbf, 0xfc00, 0x20, 0xab, 0x1000, 0x2, 0x8, 0x3, 0x3, 0xe56b, 0x23ba, 0x0, 0x6, 0x2, 0x525c, 0x76, 0x1, 0x6, 0x9, 0x400, 0x97ca, 0x0, 0x401, 0x80, 0x1], 0x7}}) syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) (async) getsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x1, @sliced={0x9, [0x5, 0x800, 0xa3, 0x0, 0x401, 0x7, 0x3, 0x4, 0x100, 0x6, 0xff, 0x401, 0x80, 0x4, 0x3, 0x4, 0x19d9, 0x4, 0x400, 0x4, 0x2, 0x2e9d, 0x24ee, 0xbf, 0xfc00, 0x20, 0xab, 0x1000, 0x2, 0x8, 0x3, 0x3, 0xe56b, 0x23ba, 0x0, 0x6, 0x2, 0x525c, 0x76, 0x1, 0x6, 0x9, 0x400, 0x97ca, 0x0, 0x401, 0x80, 0x1], 0x7}}) (async) 18:11:28 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f00000020c0)={{r0}, 0x0, 0x2, @unused=[0x2, 0x401, 0x7, 0x100000000], @devid}) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x6}, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000001680)={0x2, 0x4, @status={[0x1f, 0x401, 0xffff, 0x5, 0x4, 0x4]}, [0x8000, 0x20, 0xc2e, 0x2145, 0x9a6, 0x8000000000000001, 0x6, 0x0, 0x1f, 0xa1d, 0x100000001, 0x8, 0x4, 0x1ff, 0x4, 0x1, 0xffffffffffffff9e, 0xc1ed, 0x57, 0x0, 0xfffffffffffffff7, 0x7, 0xd867, 0x400, 0x6, 0xfffffffffffff5cc, 0x50d, 0x3269, 0x4, 0x1, 0x5, 0x6, 0xffffffffffffffff, 0x425, 0xa6d9, 0x40, 0x3, 0x200, 0x3f, 0xe000000000000000, 0x4, 0x6, 0xffffffffffffffc1, 0x216, 0x3, 0x6, 0x4, 0x3, 0x100000000, 0x6, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0xfe4, 0xffffffffffffffff, 0x2, 0x5, 0xffff, 0x8, 0x1, 0x5, 0x1, 0x7]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f00000030c0)={{r2}, r4, 0xc, @inherit={0x48, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000002000000000000000008000000000000000000000000001d0000000000000000000100000000000002ffff000000000000"]}, @devid}) openat$cgroup_ro(r0, &(0x7f0000000280)='cgroup.controllers\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000240)='syz0\x00', 0x1ff) 18:11:28 executing program 2: r0 = getuid() unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200) r1 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r1, 0xffffffffffffffff, 0x20}) r2 = getgid() r3 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r2, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r1, r3, 0xf001}) r4 = syz_open_procfs(r1, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000940)) r5 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000f40)={{r4}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000a0000000000000007000000000000008100000000000000080000000000000006000000000000000500000000000000ff00000000000000000000001c0000000300000000000000010001000000000005000000000000005e14000000000000f9ffffffff203e27d675ffffff07000000000000000300000000000000030000000000000001000000000000000300000000000000"]}, @devid=r6}) setsockopt$inet6_dccp_buf(r4, 0x21, 0xc, &(0x7f0000000040)="a6fc72e975301a3e9c351e0af5d48ab0f5ca6cd47de5215945f692bb8b97101738e5aa999d5c2101b99ead499f044cab1ed8161bce7b122b3fee160b9cf8093b23be93824a78c55ec82ed77b7b61748058b073dce56f34fa3e6c0da300b51daeea3932a96dcc4c4bf0e007ab89be25ee0faaf9cc901c54dde8ffef232df959a1d8554920e9b40cdaa90fb97bc99a583a09339ede69ab232fec2d1067dd5ac79f38f5881a54abe8cbf1c7b72edea5d380a5e62e7799fa2ef75bd0b59d3a007617826af4175d805cb5cb8f749fcbf84d45f517c596", 0xd4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 18:11:28 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') close$fd_v4l2_buffer(r0) 18:11:28 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) 18:11:28 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000100)={{0x4}, 'port1\x00'}) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) 18:11:28 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) (async) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f00000020c0)={{r0}, 0x0, 0x2, @unused=[0x2, 0x401, 0x7, 0x100000000], @devid}) (async) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x6}, 0x10) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000001680)={0x2, 0x4, @status={[0x1f, 0x401, 0xffff, 0x5, 0x4, 0x4]}, [0x8000, 0x20, 0xc2e, 0x2145, 0x9a6, 0x8000000000000001, 0x6, 0x0, 0x1f, 0xa1d, 0x100000001, 0x8, 0x4, 0x1ff, 0x4, 0x1, 0xffffffffffffff9e, 0xc1ed, 0x57, 0x0, 0xfffffffffffffff7, 0x7, 0xd867, 0x400, 0x6, 0xfffffffffffff5cc, 0x50d, 0x3269, 0x4, 0x1, 0x5, 0x6, 0xffffffffffffffff, 0x425, 0xa6d9, 0x40, 0x3, 0x200, 0x3f, 0xe000000000000000, 0x4, 0x6, 0xffffffffffffffc1, 0x216, 0x3, 0x6, 0x4, 0x3, 0x100000000, 0x6, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0xfe4, 0xffffffffffffffff, 0x2, 0x5, 0xffff, 0x8, 0x1, 0x5, 0x1, 0x7]}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f00000030c0)={{r2}, r4, 0xc, @inherit={0x48, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000002000000000000000008000000000000000000000000001d0000000000000000000100000000000002ffff000000000000"]}, @devid}) openat$cgroup_ro(r0, &(0x7f0000000280)='cgroup.controllers\x00', 0x0, 0x0) (async) mkdirat$cgroup(r0, &(0x7f0000000240)='syz0\x00', 0x1ff) 18:11:28 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) getsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async, rerun: 32) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x1, @sliced={0x9, [0x5, 0x800, 0xa3, 0x0, 0x401, 0x7, 0x3, 0x4, 0x100, 0x6, 0xff, 0x401, 0x80, 0x4, 0x3, 0x4, 0x19d9, 0x4, 0x400, 0x4, 0x2, 0x2e9d, 0x24ee, 0xbf, 0xfc00, 0x20, 0xab, 0x1000, 0x2, 0x8, 0x3, 0x3, 0xe56b, 0x23ba, 0x0, 0x6, 0x2, 0x525c, 0x76, 0x1, 0x6, 0x9, 0x400, 0x97ca, 0x0, 0x401, 0x80, 0x1], 0x7}}) (rerun: 32) 18:11:28 executing program 2: r0 = getuid() unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200) r1 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r1, 0xffffffffffffffff, 0x20}) r2 = getgid() (async) r3 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r2, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r1, r3, 0xf001}) (async) r4 = syz_open_procfs(r1, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000940)) (async) r5 = userfaultfd(0x80000) (async) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000f40)={{r4}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000a0000000000000007000000000000008100000000000000080000000000000006000000000000000500000000000000ff00000000000000000000001c0000000300000000000000010001000000000005000000000000005e14000000000000f9ffffffff203e27d675ffffff07000000000000000300000000000000030000000000000001000000000000000300000000000000"]}, @devid=r6}) (async) setsockopt$inet6_dccp_buf(r4, 0x21, 0xc, &(0x7f0000000040)="a6fc72e975301a3e9c351e0af5d48ab0f5ca6cd47de5215945f692bb8b97101738e5aa999d5c2101b99ead499f044cab1ed8161bce7b122b3fee160b9cf8093b23be93824a78c55ec82ed77b7b61748058b073dce56f34fa3e6c0da300b51daeea3932a96dcc4c4bf0e007ab89be25ee0faaf9cc901c54dde8ffef232df959a1d8554920e9b40cdaa90fb97bc99a583a09339ede69ab232fec2d1067dd5ac79f38f5881a54abe8cbf1c7b72edea5d380a5e62e7799fa2ef75bd0b59d3a007617826af4175d805cb5cb8f749fcbf84d45f517c596", 0xd4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 18:11:28 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') close$fd_v4l2_buffer(r0) 18:11:28 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) 18:11:28 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000100)={{0x4}, 'port1\x00'}) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000100)={{0x4}, 'port1\x00'}) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) (async) 18:11:28 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) (async) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f00000020c0)={{r0}, 0x0, 0x2, @unused=[0x2, 0x401, 0x7, 0x100000000], @devid}) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x6}, 0x10) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000001680)={0x2, 0x4, @status={[0x1f, 0x401, 0xffff, 0x5, 0x4, 0x4]}, [0x8000, 0x20, 0xc2e, 0x2145, 0x9a6, 0x8000000000000001, 0x6, 0x0, 0x1f, 0xa1d, 0x100000001, 0x8, 0x4, 0x1ff, 0x4, 0x1, 0xffffffffffffff9e, 0xc1ed, 0x57, 0x0, 0xfffffffffffffff7, 0x7, 0xd867, 0x400, 0x6, 0xfffffffffffff5cc, 0x50d, 0x3269, 0x4, 0x1, 0x5, 0x6, 0xffffffffffffffff, 0x425, 0xa6d9, 0x40, 0x3, 0x200, 0x3f, 0xe000000000000000, 0x4, 0x6, 0xffffffffffffffc1, 0x216, 0x3, 0x6, 0x4, 0x3, 0x100000000, 0x6, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0xfe4, 0xffffffffffffffff, 0x2, 0x5, 0xffff, 0x8, 0x1, 0x5, 0x1, 0x7]}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f00000030c0)={{r2}, r4, 0xc, @inherit={0x48, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000002000000000000000008000000000000000000000000001d0000000000000000000100000000000002ffff000000000000"]}, @devid}) (async) openat$cgroup_ro(r0, &(0x7f0000000280)='cgroup.controllers\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000240)='syz0\x00', 0x1ff) 18:11:28 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') close$fd_v4l2_buffer(r0) syz_open_procfs(0x0, 0x0) close$fd_v4l2_buffer(r0) 18:11:28 executing program 1: syz_open_procfs(0x0, &(0x7f0000000640)='personality\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x8000000000000000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000000)=[@acquire_done, @clear_death={0x400c630f, 0x2}], 0x9c, 0x0, &(0x7f0000000040)="11463f7a61b715ddf888afa14eec400164a27cba1a6a711b9014aacc767d8bf068c31bebd190b8e806a182d5141966adfe29f2b724468fb0b4aaf06c5a86fdc2bb0168c4eda2c5742018ebfceecf988b0df2dbc31a9f6484ec13fd17704f07e014cd8ad200cd64e0c66b89995ec5b0717602118e5229315663807966167809e899030c55e99ae681d6eab3c87d1418252af8d50c3fcd236f96ca7392"}) 18:11:28 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) (async) 18:11:28 executing program 2: r0 = getuid() unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200) r1 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r1, 0xffffffffffffffff, 0x20}) r2 = getgid() r3 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r2, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r1, r3, 0xf001}) r4 = syz_open_procfs(r1, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000940)) r5 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000f40)={{r4}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000a0000000000000007000000000000008100000000000000080000000000000006000000000000000500000000000000ff00000000000000000000001c0000000300000000000000010001000000000005000000000000005e14000000000000f9ffffffff203e27d675ffffff07000000000000000300000000000000030000000000000001000000000000000300000000000000"]}, @devid=r6}) setsockopt$inet6_dccp_buf(r4, 0x21, 0xc, &(0x7f0000000040)="a6fc72e975301a3e9c351e0af5d48ab0f5ca6cd47de5215945f692bb8b97101738e5aa999d5c2101b99ead499f044cab1ed8161bce7b122b3fee160b9cf8093b23be93824a78c55ec82ed77b7b61748058b073dce56f34fa3e6c0da300b51daeea3932a96dcc4c4bf0e007ab89be25ee0faaf9cc901c54dde8ffef232df959a1d8554920e9b40cdaa90fb97bc99a583a09339ede69ab232fec2d1067dd5ac79f38f5881a54abe8cbf1c7b72edea5d380a5e62e7799fa2ef75bd0b59d3a007617826af4175d805cb5cb8f749fcbf84d45f517c596", 0xd4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) getuid() (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200) (async) getpid() (async) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r1, 0xffffffffffffffff, 0x20}) (async) getgid() (async) getpid() (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r2, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r1, r3, 0xf001}) (async) syz_open_procfs(r1, &(0x7f00000008c0)='net/ip_mr_vif\x00') (async) ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000900)) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000940)) (async) userfaultfd(0x80000) (async) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000f40)={{r4}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000a0000000000000007000000000000008100000000000000080000000000000006000000000000000500000000000000ff00000000000000000000001c0000000300000000000000010001000000000005000000000000005e14000000000000f9ffffffff203e27d675ffffff07000000000000000300000000000000030000000000000001000000000000000300000000000000"]}, @devid=r6}) (async) setsockopt$inet6_dccp_buf(r4, 0x21, 0xc, &(0x7f0000000040)="a6fc72e975301a3e9c351e0af5d48ab0f5ca6cd47de5215945f692bb8b97101738e5aa999d5c2101b99ead499f044cab1ed8161bce7b122b3fee160b9cf8093b23be93824a78c55ec82ed77b7b61748058b073dce56f34fa3e6c0da300b51daeea3932a96dcc4c4bf0e007ab89be25ee0faaf9cc901c54dde8ffef232df959a1d8554920e9b40cdaa90fb97bc99a583a09339ede69ab232fec2d1067dd5ac79f38f5881a54abe8cbf1c7b72edea5d380a5e62e7799fa2ef75bd0b59d3a007617826af4175d805cb5cb8f749fcbf84d45f517c596", 0xd4) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) 18:11:28 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') close$fd_v4l2_buffer(r0) syz_open_procfs(0x0, 0x0) close$fd_v4l2_buffer(r0) 18:11:28 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000100)={{0x4}, 'port1\x00'}) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) 18:11:28 executing program 4: getsockname$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r1 = getuid() r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) r3 = getgid() r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) r6 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000100)=@overlay={0x7f, 0x1, 0x4, 0x4000, 0x8, {0x77359400}, {0x4, 0x2, 0xe1, 0x81, 0x2, 0x80, "330d6ca9"}, 0x1f, 0x3, {}, 0xe287}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) 18:11:28 executing program 1: syz_open_procfs(0x0, &(0x7f0000000640)='personality\x00') (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x8000000000000000) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000000)=[@acquire_done, @clear_death={0x400c630f, 0x2}], 0x9c, 0x0, &(0x7f0000000040)="11463f7a61b715ddf888afa14eec400164a27cba1a6a711b9014aacc767d8bf068c31bebd190b8e806a182d5141966adfe29f2b724468fb0b4aaf06c5a86fdc2bb0168c4eda2c5742018ebfceecf988b0df2dbc31a9f6484ec13fd17704f07e014cd8ad200cd64e0c66b89995ec5b0717602118e5229315663807966167809e899030c55e99ae681d6eab3c87d1418252af8d50c3fcd236f96ca7392"}) 18:11:28 executing program 0: ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000000c0)={{0x2, 0xb4}, {0x0, 0xe6}, 0x101, 0x3, 0x7}) r1 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000001c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000680)={{r2}, r3, 0x8, @inherit={0x68, &(0x7f00000003c0)={0x1, 0x4, 0x4, 0x1a2593f1, {0x7, 0x4000000000000, 0x2, 0x7fffffff, 0x4}, [0x7, 0x1f, 0x6, 0x1]}}, @name="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"}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8000000000000000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000000)={0x0, 0x2, {0x2, 0x0, 0x3, 0x0, 0x1ff}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000140)) 18:11:28 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) r1 = getuid() r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) r3 = getgid() r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) r6 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f00000000c0)) 18:11:28 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') close$fd_v4l2_buffer(r0) syz_open_procfs(0x0, 0x0) close$fd_v4l2_buffer(r0) 18:11:28 executing program 4: getsockname$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) (async) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) (async) r1 = getuid() r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) r3 = getgid() (async) r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) (async) r6 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000100)=@overlay={0x7f, 0x1, 0x4, 0x4000, 0x8, {0x77359400}, {0x4, 0x2, 0xe1, 0x81, 0x2, 0x80, "330d6ca9"}, 0x1f, 0x3, {}, 0xe287}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) 18:11:28 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') close$fd_v4l2_buffer(r0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') close$fd_v4l2_buffer(0xffffffffffffffff) 18:11:28 executing program 1: syz_open_procfs(0x0, &(0x7f0000000640)='personality\x00') (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x8000000000000000) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000000)=[@acquire_done, @clear_death={0x400c630f, 0x2}], 0x9c, 0x0, &(0x7f0000000040)="11463f7a61b715ddf888afa14eec400164a27cba1a6a711b9014aacc767d8bf068c31bebd190b8e806a182d5141966adfe29f2b724468fb0b4aaf06c5a86fdc2bb0168c4eda2c5742018ebfceecf988b0df2dbc31a9f6484ec13fd17704f07e014cd8ad200cd64e0c66b89995ec5b0717602118e5229315663807966167809e899030c55e99ae681d6eab3c87d1418252af8d50c3fcd236f96ca7392"}) 18:11:28 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r1 = getuid() r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) r3 = getgid() r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) r6 = getgid() r7 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, 0x0, 0xee01, 0x0, r6, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, r7, 0xf001}) r8 = getuid() r9 = getpid() r10 = getgid() r11 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r8, 0xee01, r8, r10, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r9, r11, 0xf001}) r12 = getuid() r13 = getgid() r14 = getpid() syz_open_procfs(r14, 0x0) r15 = getpid() syz_open_procfs(r15, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, r10, r12, r13, 0xcc, 0x3}, 0xfffffff8, 0x5, 0x9, 0x6, r14, r15, 0x81}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) r16 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r16, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x1f, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x100000145e, 0xfffffffffffffff9, 0x3, 0x3, 0x62, 0x1, 0x3]}}, @devid=r17}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r5, 0x1d, 0x0, 0x800, &(0x7f0000000000)=[0x0, 0x0], 0x2}, 0x20) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) 18:11:28 executing program 0: ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000000c0)={{0x2, 0xb4}, {0x0, 0xe6}, 0x101, 0x3, 0x7}) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000001c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000680)={{r2}, r3, 0x8, @inherit={0x68, &(0x7f00000003c0)={0x1, 0x4, 0x4, 0x1a2593f1, {0x7, 0x4000000000000, 0x2, 0x7fffffff, 0x4}, [0x7, 0x1f, 0x6, 0x1]}}, @name="66cef8d7b52cfe48c6d85075e247a24e353d9992de147a00e042a9e9c9f6bc8a0d23c211cafc21b436b77eb58e36933a65f026c8b338fedc6a4f4e2f5812902cf2dfb08a819f918a6d817b861b2cdcb72634f82750d993038e19a1915bdfd00e276a01306b128f8dfac91ec6eb7302e41e1237c9a79ec180c5057dac5e0db20efc11d69a55013fa27ccbaf75070d131fc2609304803db0be3c50045578db538c5211647907140d1cd08c233caf98aee67e929f0034273cfe85a9c85876769cbffd9339a8fa716ddd6c0aed398193a976d0b9833d7062bf252296caf46df39eb5d6e98ac6ba4d6f4d02346685aeae14ab5ed95efb00e8922a2d71c3e701af2f6413ffe3768aa8ee3ce1360116e7afb7036dc7d8c32c875de40b506188f818c412af9725dae86611d90b953a4aac9ff3f83d02c967a9141a8d828044664e2cea45d9c6282c6e24ec12e7fd744536ed80b3c0d528298624b79c8c4ae9f4545408151e4fbdb979c1514416695c0ee46e64909aad0140e5511c90619e6f6c51610e05e0561672059a004dcbe12eb6db2fbfa376e9fdbd136f06fb0a8677b202de4670fbc33ce401174f209cb8103b3a4acca2c2fa1b74741722cab42cf1917d7e71a2e02efdac23cede1ac909bd5096163d6be0408664d3aceacc9d6a3d87f8f89ef8072278ede2a28ff9defdcfccf08590ea807a1b23646601a1e7031af18f38976f178819dad87b5899276c7e622278e7b0f98c418406bbfbb279a0689441fb5c6b801047f558195b485288f6dbedd22e0e64a676a9a236767ee2f89722652fb21a2fa488b930c506d3dbdaee5f0aac2d1a4a036376a0a34fcd80800de4a87b4ae781b8acde55856d7e75ddbfcc3bf6a33d52b7e19ccef3c23187bf532505a1f871b35dbfcb3c07065247df53fda2e59b74f5071ec9ab03766b9c1a1186c96c5bb28326737e5da4f9737d860d92dfde956ca5f4ea8cbe951ade3a3e496b1a0b59f40dc32b878704a41d93d3f2dc04806390b418f7a54ae44fa32046b51c5e4925397cb6dadb66134f67984de044950c1760599a26f82a9260cc49e35348a74312e2fbe4f323377183d12d0a40c9893d1f1501b7894e011579dd43efc5f4d8bf38e44332343cf5749868bc67d9e928eb722d24034eb857173f7ede1c7d64cf8c8705f7ef6d30f7118478b3487d45d079da11f38da088a1c3ef34459ec1ef0e3a10401a2d79ee1f8fe031038296f593607fb8af5a7bd965b26979ced766b7e4000952d57791c902dfcdcec7c20affc4f89a36747dc568e0579489d38c46a22a8d2a753a1e338cee97165d6910604873491f1b87ab50faa2144186bd667a61e7e7f3b3bc62ae634d0fda3148964d2eda7f9bf4a10e0310d8a39406bb033f443e138543e6ca8bfd3f4b311a854efd914b1dec9c227974ed4a6c0e59ee10ffe223dc7d1324957f28107ab2fc845a1e8d9374e6d4dd1759683b5a3b38fe1f9bbd48fbe00043ff63ac1cdf2f42e600405b0b162a1824c99708e9e04135d3faefd2e1c6e3794f9df0305ae7101d7baee86dea5f76077f1313d197f8b36c7ccd3a0d7e68e8f29a0d677803f95c16a0c300e468f5ea09cd5cb280a91a415ad16b16d7f0efcbffc9f650d3f3c0fbbc01c5b3548a120e6ef84b213400785eafc65ee46f2e7713c9dafc36f62de62a6f63c1eb514f57a875789e95d4303d6596dd77f509c4be31a1d4348aa57f1093b6647d32b5588b25456b9efe7c570f4162f09bbb52cfd3f14f5161da4018dff5dce50f01e22ada877b4a04933700b6b6ce3596d5c6fda7d06fc396f7d19244df8cdffba2dec0b94822070e223dbd2b59ed3bcec63999ec68f397089ee06ce077cf0bf1fba03dab8b94193ba4ae906b8350899c1c9ea43150a7cfffa4fd1b3848d982b33f84dff9273c1476951bc2bbb35a01cef690b1fc4272ec73374a431ac9e176bc97c44b9e7deaaa235b698e7dd79f0666b8d9a4a0da2d3c0298a8f44182fec1ab543ec2621df00217aea7eb323ed9d87f2982e01118065d667b184685f012f844a3b5e8098806577a85d8b91d1a6f0e25b1fa8b6098c2a2f28cb463106e6918746c88694377e0fb500def58e989628eca3516b561ddfabdfd67015b24dd0924fa9b7f4b6a0966cc17c9ba97ac68c9692cb12b6f5450c1997e9082ce16141fdf96de48101cc3571b13909ae6d3cb9df25a5d8ac6b46d0585b572704d985ca18388fca0b835e00a019b19778301e633d24a3539b3c2ef715ea438e3f9c286089e872d68bc91cd722043ecef6a2a9236ea829562605c0c4bd2949ea69575b837b41f5c8a0597d01f8945db72a47e52c7001279dfbf2b9ec1e90ecf7849bec0bea047c1c3f0cfb8fff6d30a8289367755f8b07d3605a6dc6c8df347088ffc50ba87c1ec13e25719971970371310f9f16ce03251221dd1fc2314bff389d11534bb320f0a1af07569661f547335cea56a40d42e4b5c78354240d64b2401b053a58a27411fbf29c4cfd645df316879bad4a4670969caf75e33e462020df7a1c11ccb8b557d008318cac8602e53c0c034acf196d49fa20741bd978ba5b810aa798a2f1b2510b515ebfad8a38332ca808ffa4c3d3edacc74aa84326bdbdb315679decb42d42d60143a3e3a75f2db3899b090bc9f734e2a0f8c01900918147f334ab672328d61561ca97e145af5d15cd1ef62f3067b59f5766d8a6827282548521c4e5eb9fcb3b78b4abfb7fc8dbc60e4cd0e4a5abce566f5407688fe9bd026bad110f90838355d2f2de3f0e3230e0ac4425652897e529e1024ca060a51bb7a2ddadb682977f79cc09bbca6466f288206a9b43b21eae8aebacaa2a668b8fd687650a32ceb296d0ebe9525455784f30f34ef2d7e0a51c400d141ca2d3cc1f777ed6acccce80bbe52d47f658a5ee7dbc615bb312af13d4f09601cdb6cbbece2b6d12e9dc466035c08e57e22b9e8999511f933db18fa503bc617f3e5b7d60a858dee5e981f47d9be26367d105149359572debe4247f8f3ff9db464fcd7b80675aa4fadd06f527dbc5e47d3e31ca49ab3fb52fee8a9cc8f17270a89ae04cacd651ff42d90e57b021c122b57788b04419fa94a384f21a8ef3666797abc1d5c3471b6226ad6add18825a1f8c2b397cbeb8a3b504d08fa7b9e9b96b93c78b58481caa47f7c7a0b72e5085735e143534ce6c45ff980a2dc7aa257b6c75e5ca5b415e87240c6675482e3aed97d73ca9979733a869eeda59cdd696072b49a02b3399f8d820b85aab540f764a658ead9e49e74d40871ded7acff3a2ddc24d0a379495170addb49776439fb57407eca82fac12e21b05c3b6e72f3b25fd53e28bff8040c9a45659ebe035a1a10658ae7c92b960773fe48c3020028b0a3b5856a617254572d3634fa89ce9d76f482b57f2d5c060cc735defb9f6744f120c3a0056b6ec25caa5d75dc2e03cedc452d1204615188fc97e6afef7ace2456cf90bcaf8ae467df72f522280491f5d64f4aa1b8b43210376d0a67b32775201fb3352df953bcb0e06abd8507bf3a87ddf4b7403850d3ab56dd9b93e16f8086cbdb7fc5bf496b7c712e177b48de5bd82e59e201861659337176cc3f4f11c211674aa319f4fcc9344a99f558aee7aed412c68f9f978be5d748a951c562d73333929575ca22f1e43659ef02e24d460023f7d6ed77e076e9e972d377569084984e22a9120b2170ebb2be96980100685a9b60c01e6b646e167df81bce35921cc8541e1ae1a6541406ec8e7f60681490ea0be7037735eaf4c05a2f1d42f265257b0bed7f559f90ebe849e8c398647bc0056aa1fa0642c3bf5307576ea39151f4285409a25c20f8bc385c0d8a8644480ec1a7e27c060ecc00d41afd5250b36570fd85f57303ae9e8f6d3985e1bcb8372379f3dd7efb081115f75663dbbdbc6db08bca9f04ff40ef3c1ba01176d2c924c6ea83a2dd06d73e4b4eac1b1b7850ca69874a0f94d35dbea4728da527983715fce24b37094266cc8bc7b5be85ea4260a9634c6fa980cc184d1067a1ec28ce406d49193ceaca560e763dcafab9e9838429c1a37bad9e4cd4862bffd2e4143ebee5067cfdfb2786d5baea5eed443586a79c45c3fcd275b96d18a7b60b7b2754df475cbfb9c572cc7f39b27ac196f13f3fc08f2539c32748d8643d12cbdcf98b69c95f76632dfe1f218bad176b991fd4d3eeb3b8c976392e01bbc45fa29dd3424f544f42656e2c43ea23533fcf0bd249464837724b980170703f542b4734864b3d330d7479782982dbfb957900bac0b8589e676b14a11f007380d75400c15199ea707e680fcc1703a240c51738f725c243f3eb40533399b66122b22d1f113da1545c5f5e995a368b12f0b5aafbb08e4b5e8b1c02fe6c363bb9893ca7207c0bf2019b30404126e9b91cecf966453d80093dc1f414f5bcaf89a07af2aff911353161e002effc5eaf25632db99c759e23634f81f66ec6a1151b829fee34f8e29ce36e5671588a8b720d4453eff05f5d41892b137bef542e8f94be636f0c69c3793e863fe487fb273b07bfc14eb0e6423289100218812075381f900d3e6bad049b1f3d2d8a1478e8e29d9d1839bc7b71d2665e18a96d5d46158158f010e1bf3073e6d931541e75c3cdec64309a83488a26eb71b83ffaf3cf17ba6ec4447e3c991e3c795e0908661ae3e2bfc7872fc2a452a28e13c5880a6ced0fc0da9dd2a1be3b6ed0049bcdbd594166b6353caf7f6fc4a31152e154d19d09d51b7f293a8cb768c66ed87ff980f9754851b1e09f83dd3978a28d66cf454067d8f6378d0add1806a5d0284497f2fb93edd5ee260dca7262009be92a1184d0bb6dcad6bb5fc40ed6395f31cc2e770907e2a74a54adbae325fd8cd2a3e0010a578b5a55ba91dc882b81f7752cb7d91f849e0afb2e69c65346fe6747e35f349a74108deac12194fa81f16e177f157d47fc0ed97b6b2bb0e28b42bb82f086e7eea14fb545ce4438a3c5b2adbbd86233cf1395ba0b6bd278b16fb3a769568ee29c0ba651a2436660411690b5d02ea228f1ee39451bdbb0185c6ef22a2c16d27f9f49e59e83262acc96e6a2f6dd562af737afd733131a6ddd740882b70877e666bec9b2a60b6184e306bb02d71fc65bcdfb20e5d0b1f92af54c70c064d644939aa0fae8c82905e160d47724e921f6759c5c440919bb4fc50203da4998bb6997ca8cb2f510871c451f0813b65cfa47c36cbb5ccd5e7f80b60f525a35c47c33ca9aae44c16be3f2752ac5d52799bd12e407ebc4747754bb00ce5d916942eb8a217389a82418fdaa277bfb84a8de6a37e0bde4bfd73d478737bfb85ed072658545b793627eadc8b0640e4dc6f9982dda7b1259fbe6a3a5352ea2792df1c529aa2c91c264d1f92917d495f1eff5f38bf051b51ea3ca689f5229a893cb2693cd524e1860117f46848789b4b37bab1fb4418fbb613ce6fed740a29b9efc45ba9f4bb3710cb807c844f5d99e515ae2b30c27ecaa34ab2ee2408fa90e0af22cba161aba2ae4b58ea9152f36c31488e91e6ddeaaad7e82baaf4f58c885b3770537aea900e18a6c04e3b78df1843d71ab4e338926f10cf2692b4d379cb5e3ab25093e4f19617590774d87ba0c6d7718c90d4476b4c410f696724c837552643e78b4ff8d57256fc4baac045e9818d502629287827c1d07777e133f0b7599ddfb1f92087cbcb0795289adf8a64b4596f1bd023e93"}) (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8000000000000000) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000000)={0x0, 0x2, {0x2, 0x0, 0x3, 0x0, 0x1ff}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000140)) 18:11:28 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) r1 = getuid() r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) r3 = getgid() r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) r6 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f00000000c0)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) (async) getuid() (async) getpid() (async) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) (async) getgid() (async) getpid() (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) (async) syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') (async) ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) (async) userfaultfd(0x80000) (async) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f00000000c0)) (async) 18:11:28 executing program 4: getsockname$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r1 = getuid() r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) r3 = getgid() r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) r6 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000100)=@overlay={0x7f, 0x1, 0x4, 0x4000, 0x8, {0x77359400}, {0x4, 0x2, 0xe1, 0x81, 0x2, 0x80, "330d6ca9"}, 0x1f, 0x3, {}, 0xe287}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) (async) getuid() (async) getpid() (async) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) (async) getgid() (async) getpid() (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) (async) syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') (async) ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) (async) userfaultfd(0x80000) (async) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000100)=@overlay={0x7f, 0x1, 0x4, 0x4000, 0x8, {0x77359400}, {0x4, 0x2, 0xe1, 0x81, 0x2, 0x80, "330d6ca9"}, 0x1f, 0x3, {}, 0xe287}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) (async) 18:11:28 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') close$fd_v4l2_buffer(r0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') close$fd_v4l2_buffer(0xffffffffffffffff) 18:11:28 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x8000000000000000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = getuid() r5 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r4, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r5, 0xffffffffffffffff, 0x20}) r6 = getgid() r7 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r4, 0xee01, r4, r6, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r5, r7, 0xf001}) r8 = syz_open_procfs(r5, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r8, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r8, 0x80045301, &(0x7f0000000940)) r9 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r8, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r9, 0x50009417, &(0x7f0000000f40)={{r8}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r10}) ioctl$vim2m_VIDIOC_STREAMON(r8, 0x40045612, &(0x7f00000006c0)=0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x154, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x4, 0x1, 0x1f}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/27, 0x1b, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r3}, @flat=@weak_binder={0x77622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/125, 0x7d, 0x0, 0x22}}, &(0x7f0000000300)={0x0, 0x18, 0x30}}, 0x40}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@fda={0x66646185, 0x4, 0x1, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/42, 0x2a, 0x0, 0x2a}, @flat=@binder={0x73622a85, 0x1}}, &(0x7f0000000400)={0x0, 0x20, 0x48}}}, @increfs_done={0x40106308, 0x1}, @release={0x40046306, 0x3}, @increfs={0x40046304, 0x3}, @request_death], 0x67, 0x0, &(0x7f00000005c0)="a9689f9e0a66111d23b95dbb43815235e41f0e4a17227168f231f32e4e974cdd45399f7852fd5f810a5345414b51d018039919d5bb5e1193d2fce090118f514366f67f0c497ac954c9b0d5df889747588863a2f88f6e21634e7a15d4bb30d2887498f3240bf166"}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x80000000, 0x0, 0x0, "69e582cb4f68399286dd4dcc84ce09deac4328f87f49f17098fa032c80a45151", 0x3131354f}) 18:11:28 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) (async) r1 = getuid() r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) r3 = getgid() (async) r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) (async) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) (async) r6 = getgid() r7 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, 0x0, 0xee01, 0x0, r6, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, r7, 0xf001}) (async) r8 = getuid() (async) r9 = getpid() (async) r10 = getgid() r11 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r8, 0xee01, r8, r10, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r9, r11, 0xf001}) (async) r12 = getuid() (async) r13 = getgid() r14 = getpid() syz_open_procfs(r14, 0x0) (async) r15 = getpid() syz_open_procfs(r15, 0x0) (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, r10, r12, r13, 0xcc, 0x3}, 0xfffffff8, 0x5, 0x9, 0x6, r14, r15, 0x81}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) r16 = userfaultfd(0x80000) (async) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r16, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x1f, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x100000145e, 0xfffffffffffffff9, 0x3, 0x3, 0x62, 0x1, 0x3]}}, @devid=r17}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r5, 0x1d, 0x0, 0x800, &(0x7f0000000000)=[0x0, 0x0], 0x2}, 0x20) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) 18:11:28 executing program 0: ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000000c0)={{0x2, 0xb4}, {0x0, 0xe6}, 0x101, 0x3, 0x7}) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000001c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000680)={{r2}, r3, 0x8, @inherit={0x68, &(0x7f00000003c0)={0x1, 0x4, 0x4, 0x1a2593f1, {0x7, 0x4000000000000, 0x2, 0x7fffffff, 0x4}, [0x7, 0x1f, 0x6, 0x1]}}, @name="66cef8d7b52cfe48c6d85075e247a24e353d9992de147a00e042a9e9c9f6bc8a0d23c211cafc21b436b77eb58e36933a65f026c8b338fedc6a4f4e2f5812902cf2dfb08a819f918a6d817b861b2cdcb72634f82750d993038e19a1915bdfd00e276a01306b128f8dfac91ec6eb7302e41e1237c9a79ec180c5057dac5e0db20efc11d69a55013fa27ccbaf75070d131fc2609304803db0be3c50045578db538c5211647907140d1cd08c233caf98aee67e929f0034273cfe85a9c85876769cbffd9339a8fa716ddd6c0aed398193a976d0b9833d7062bf252296caf46df39eb5d6e98ac6ba4d6f4d02346685aeae14ab5ed95efb00e8922a2d71c3e701af2f6413ffe3768aa8ee3ce1360116e7afb7036dc7d8c32c875de40b506188f818c412af9725dae86611d90b953a4aac9ff3f83d02c967a9141a8d828044664e2cea45d9c6282c6e24ec12e7fd744536ed80b3c0d528298624b79c8c4ae9f4545408151e4fbdb979c1514416695c0ee46e64909aad0140e5511c90619e6f6c51610e05e0561672059a004dcbe12eb6db2fbfa376e9fdbd136f06fb0a8677b202de4670fbc33ce401174f209cb8103b3a4acca2c2fa1b74741722cab42cf1917d7e71a2e02efdac23cede1ac909bd5096163d6be0408664d3aceacc9d6a3d87f8f89ef8072278ede2a28ff9defdcfccf08590ea807a1b23646601a1e7031af18f38976f178819dad87b5899276c7e622278e7b0f98c418406bbfbb279a0689441fb5c6b801047f558195b485288f6dbedd22e0e64a676a9a236767ee2f89722652fb21a2fa488b930c506d3dbdaee5f0aac2d1a4a036376a0a34fcd80800de4a87b4ae781b8acde55856d7e75ddbfcc3bf6a33d52b7e19ccef3c23187bf532505a1f871b35dbfcb3c07065247df53fda2e59b74f5071ec9ab03766b9c1a1186c96c5bb28326737e5da4f9737d860d92dfde956ca5f4ea8cbe951ade3a3e496b1a0b59f40dc32b878704a41d93d3f2dc04806390b418f7a54ae44fa32046b51c5e4925397cb6dadb66134f67984de044950c1760599a26f82a9260cc49e35348a74312e2fbe4f323377183d12d0a40c9893d1f1501b7894e011579dd43efc5f4d8bf38e44332343cf5749868bc67d9e928eb722d24034eb857173f7ede1c7d64cf8c8705f7ef6d30f7118478b3487d45d079da11f38da088a1c3ef34459ec1ef0e3a10401a2d79ee1f8fe031038296f593607fb8af5a7bd965b26979ced766b7e4000952d57791c902dfcdcec7c20affc4f89a36747dc568e0579489d38c46a22a8d2a753a1e338cee97165d6910604873491f1b87ab50faa2144186bd667a61e7e7f3b3bc62ae634d0fda3148964d2eda7f9bf4a10e0310d8a39406bb033f443e138543e6ca8bfd3f4b311a854efd914b1dec9c227974ed4a6c0e59ee10ffe223dc7d1324957f28107ab2fc845a1e8d9374e6d4dd1759683b5a3b38fe1f9bbd48fbe00043ff63ac1cdf2f42e600405b0b162a1824c99708e9e04135d3faefd2e1c6e3794f9df0305ae7101d7baee86dea5f76077f1313d197f8b36c7ccd3a0d7e68e8f29a0d677803f95c16a0c300e468f5ea09cd5cb280a91a415ad16b16d7f0efcbffc9f650d3f3c0fbbc01c5b3548a120e6ef84b213400785eafc65ee46f2e7713c9dafc36f62de62a6f63c1eb514f57a875789e95d4303d6596dd77f509c4be31a1d4348aa57f1093b6647d32b5588b25456b9efe7c570f4162f09bbb52cfd3f14f5161da4018dff5dce50f01e22ada877b4a04933700b6b6ce3596d5c6fda7d06fc396f7d19244df8cdffba2dec0b94822070e223dbd2b59ed3bcec63999ec68f397089ee06ce077cf0bf1fba03dab8b94193ba4ae906b8350899c1c9ea43150a7cfffa4fd1b3848d982b33f84dff9273c1476951bc2bbb35a01cef690b1fc4272ec73374a431ac9e176bc97c44b9e7deaaa235b698e7dd79f0666b8d9a4a0da2d3c0298a8f44182fec1ab543ec2621df00217aea7eb323ed9d87f2982e01118065d667b184685f012f844a3b5e8098806577a85d8b91d1a6f0e25b1fa8b6098c2a2f28cb463106e6918746c88694377e0fb500def58e989628eca3516b561ddfabdfd67015b24dd0924fa9b7f4b6a0966cc17c9ba97ac68c9692cb12b6f5450c1997e9082ce16141fdf96de48101cc3571b13909ae6d3cb9df25a5d8ac6b46d0585b572704d985ca18388fca0b835e00a019b19778301e633d24a3539b3c2ef715ea438e3f9c286089e872d68bc91cd722043ecef6a2a9236ea829562605c0c4bd2949ea69575b837b41f5c8a0597d01f8945db72a47e52c7001279dfbf2b9ec1e90ecf7849bec0bea047c1c3f0cfb8fff6d30a8289367755f8b07d3605a6dc6c8df347088ffc50ba87c1ec13e25719971970371310f9f16ce03251221dd1fc2314bff389d11534bb320f0a1af07569661f547335cea56a40d42e4b5c78354240d64b2401b053a58a27411fbf29c4cfd645df316879bad4a4670969caf75e33e462020df7a1c11ccb8b557d008318cac8602e53c0c034acf196d49fa20741bd978ba5b810aa798a2f1b2510b515ebfad8a38332ca808ffa4c3d3edacc74aa84326bdbdb315679decb42d42d60143a3e3a75f2db3899b090bc9f734e2a0f8c01900918147f334ab672328d61561ca97e145af5d15cd1ef62f3067b59f5766d8a6827282548521c4e5eb9fcb3b78b4abfb7fc8dbc60e4cd0e4a5abce566f5407688fe9bd026bad110f90838355d2f2de3f0e3230e0ac4425652897e529e1024ca060a51bb7a2ddadb682977f79cc09bbca6466f288206a9b43b21eae8aebacaa2a668b8fd687650a32ceb296d0ebe9525455784f30f34ef2d7e0a51c400d141ca2d3cc1f777ed6acccce80bbe52d47f658a5ee7dbc615bb312af13d4f09601cdb6cbbece2b6d12e9dc466035c08e57e22b9e8999511f933db18fa503bc617f3e5b7d60a858dee5e981f47d9be26367d105149359572debe4247f8f3ff9db464fcd7b80675aa4fadd06f527dbc5e47d3e31ca49ab3fb52fee8a9cc8f17270a89ae04cacd651ff42d90e57b021c122b57788b04419fa94a384f21a8ef3666797abc1d5c3471b6226ad6add18825a1f8c2b397cbeb8a3b504d08fa7b9e9b96b93c78b58481caa47f7c7a0b72e5085735e143534ce6c45ff980a2dc7aa257b6c75e5ca5b415e87240c6675482e3aed97d73ca9979733a869eeda59cdd696072b49a02b3399f8d820b85aab540f764a658ead9e49e74d40871ded7acff3a2ddc24d0a379495170addb49776439fb57407eca82fac12e21b05c3b6e72f3b25fd53e28bff8040c9a45659ebe035a1a10658ae7c92b960773fe48c3020028b0a3b5856a617254572d3634fa89ce9d76f482b57f2d5c060cc735defb9f6744f120c3a0056b6ec25caa5d75dc2e03cedc452d1204615188fc97e6afef7ace2456cf90bcaf8ae467df72f522280491f5d64f4aa1b8b43210376d0a67b32775201fb3352df953bcb0e06abd8507bf3a87ddf4b7403850d3ab56dd9b93e16f8086cbdb7fc5bf496b7c712e177b48de5bd82e59e201861659337176cc3f4f11c211674aa319f4fcc9344a99f558aee7aed412c68f9f978be5d748a951c562d73333929575ca22f1e43659ef02e24d460023f7d6ed77e076e9e972d377569084984e22a9120b2170ebb2be96980100685a9b60c01e6b646e167df81bce35921cc8541e1ae1a6541406ec8e7f60681490ea0be7037735eaf4c05a2f1d42f265257b0bed7f559f90ebe849e8c398647bc0056aa1fa0642c3bf5307576ea39151f4285409a25c20f8bc385c0d8a8644480ec1a7e27c060ecc00d41afd5250b36570fd85f57303ae9e8f6d3985e1bcb8372379f3dd7efb081115f75663dbbdbc6db08bca9f04ff40ef3c1ba01176d2c924c6ea83a2dd06d73e4b4eac1b1b7850ca69874a0f94d35dbea4728da527983715fce24b37094266cc8bc7b5be85ea4260a9634c6fa980cc184d1067a1ec28ce406d49193ceaca560e763dcafab9e9838429c1a37bad9e4cd4862bffd2e4143ebee5067cfdfb2786d5baea5eed443586a79c45c3fcd275b96d18a7b60b7b2754df475cbfb9c572cc7f39b27ac196f13f3fc08f2539c32748d8643d12cbdcf98b69c95f76632dfe1f218bad176b991fd4d3eeb3b8c976392e01bbc45fa29dd3424f544f42656e2c43ea23533fcf0bd249464837724b980170703f542b4734864b3d330d7479782982dbfb957900bac0b8589e676b14a11f007380d75400c15199ea707e680fcc1703a240c51738f725c243f3eb40533399b66122b22d1f113da1545c5f5e995a368b12f0b5aafbb08e4b5e8b1c02fe6c363bb9893ca7207c0bf2019b30404126e9b91cecf966453d80093dc1f414f5bcaf89a07af2aff911353161e002effc5eaf25632db99c759e23634f81f66ec6a1151b829fee34f8e29ce36e5671588a8b720d4453eff05f5d41892b137bef542e8f94be636f0c69c3793e863fe487fb273b07bfc14eb0e6423289100218812075381f900d3e6bad049b1f3d2d8a1478e8e29d9d1839bc7b71d2665e18a96d5d46158158f010e1bf3073e6d931541e75c3cdec64309a83488a26eb71b83ffaf3cf17ba6ec4447e3c991e3c795e0908661ae3e2bfc7872fc2a452a28e13c5880a6ced0fc0da9dd2a1be3b6ed0049bcdbd594166b6353caf7f6fc4a31152e154d19d09d51b7f293a8cb768c66ed87ff980f9754851b1e09f83dd3978a28d66cf454067d8f6378d0add1806a5d0284497f2fb93edd5ee260dca7262009be92a1184d0bb6dcad6bb5fc40ed6395f31cc2e770907e2a74a54adbae325fd8cd2a3e0010a578b5a55ba91dc882b81f7752cb7d91f849e0afb2e69c65346fe6747e35f349a74108deac12194fa81f16e177f157d47fc0ed97b6b2bb0e28b42bb82f086e7eea14fb545ce4438a3c5b2adbbd86233cf1395ba0b6bd278b16fb3a769568ee29c0ba651a2436660411690b5d02ea228f1ee39451bdbb0185c6ef22a2c16d27f9f49e59e83262acc96e6a2f6dd562af737afd733131a6ddd740882b70877e666bec9b2a60b6184e306bb02d71fc65bcdfb20e5d0b1f92af54c70c064d644939aa0fae8c82905e160d47724e921f6759c5c440919bb4fc50203da4998bb6997ca8cb2f510871c451f0813b65cfa47c36cbb5ccd5e7f80b60f525a35c47c33ca9aae44c16be3f2752ac5d52799bd12e407ebc4747754bb00ce5d916942eb8a217389a82418fdaa277bfb84a8de6a37e0bde4bfd73d478737bfb85ed072658545b793627eadc8b0640e4dc6f9982dda7b1259fbe6a3a5352ea2792df1c529aa2c91c264d1f92917d495f1eff5f38bf051b51ea3ca689f5229a893cb2693cd524e1860117f46848789b4b37bab1fb4418fbb613ce6fed740a29b9efc45ba9f4bb3710cb807c844f5d99e515ae2b30c27ecaa34ab2ee2408fa90e0af22cba161aba2ae4b58ea9152f36c31488e91e6ddeaaad7e82baaf4f58c885b3770537aea900e18a6c04e3b78df1843d71ab4e338926f10cf2692b4d379cb5e3ab25093e4f19617590774d87ba0c6d7718c90d4476b4c410f696724c837552643e78b4ff8d57256fc4baac045e9818d502629287827c1d07777e133f0b7599ddfb1f92087cbcb0795289adf8a64b4596f1bd023e93"}) (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8000000000000000) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000000)={0x0, 0x2, {0x2, 0x0, 0x3, 0x0, 0x1ff}}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000140)) 18:11:28 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') close$fd_v4l2_buffer(r0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') close$fd_v4l2_buffer(0xffffffffffffffff) 18:11:28 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) (async) r1 = getuid() (async, rerun: 64) r2 = getpid() (rerun: 64) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) (async) r3 = getgid() r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) (async) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) r6 = userfaultfd(0x80000) (async) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f00000000c0)) 18:11:28 executing program 4: ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000000)) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)=@fd={0x40, 0x3, 0x4, 0x100000, 0xffff, {r2, r3/1000+10000}, {0x4, 0x1, 0x3, 0x20, 0xa0, 0x3, 'R<0\f'}, 0x8, 0x4, {}, 0xffffff81}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c", 0xb1463758}) 18:11:28 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x8000000000000000) (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x8000000000000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) getuid() (async) r4 = getuid() r5 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r4, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r5, 0xffffffffffffffff, 0x20}) getgid() (async) r6 = getgid() r7 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r4, 0xee01, r4, r6, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r5, r7, 0xf001}) r8 = syz_open_procfs(r5, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r8, 0x8004551a, &(0x7f0000000900)) (async) ioctl$USBDEVFS_GET_CAPABILITIES(r8, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r8, 0x80045301, &(0x7f0000000940)) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r8, 0x80045301, &(0x7f0000000940)) r9 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r8, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r9, 0x50009417, &(0x7f0000000f40)={{r8}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r10}) ioctl$vim2m_VIDIOC_STREAMON(r8, 0x40045612, &(0x7f00000006c0)=0x3) (async) ioctl$vim2m_VIDIOC_STREAMON(r8, 0x40045612, &(0x7f00000006c0)=0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x154, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x4, 0x1, 0x1f}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/27, 0x1b, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r3}, @flat=@weak_binder={0x77622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/125, 0x7d, 0x0, 0x22}}, &(0x7f0000000300)={0x0, 0x18, 0x30}}, 0x40}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@fda={0x66646185, 0x4, 0x1, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/42, 0x2a, 0x0, 0x2a}, @flat=@binder={0x73622a85, 0x1}}, &(0x7f0000000400)={0x0, 0x20, 0x48}}}, @increfs_done={0x40106308, 0x1}, @release={0x40046306, 0x3}, @increfs={0x40046304, 0x3}, @request_death], 0x67, 0x0, &(0x7f00000005c0)="a9689f9e0a66111d23b95dbb43815235e41f0e4a17227168f231f32e4e974cdd45399f7852fd5f810a5345414b51d018039919d5bb5e1193d2fce090118f514366f67f0c497ac954c9b0d5df889747588863a2f88f6e21634e7a15d4bb30d2887498f3240bf166"}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x80000000, 0x0, 0x0, "69e582cb4f68399286dd4dcc84ce09deac4328f87f49f17098fa032c80a45151", 0x3131354f}) 18:11:29 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) (async) r1 = getuid() r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) (async, rerun: 64) r3 = getgid() (async, rerun: 64) r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) (async, rerun: 32) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') (rerun: 32) ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) (async) r6 = getgid() (async, rerun: 64) r7 = getpid() (rerun: 64) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, 0x0, 0xee01, 0x0, r6, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, r7, 0xf001}) r8 = getuid() r9 = getpid() (async) r10 = getgid() (async) r11 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r8, 0xee01, r8, r10, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r9, r11, 0xf001}) (async, rerun: 32) r12 = getuid() (async, rerun: 32) r13 = getgid() r14 = getpid() syz_open_procfs(r14, 0x0) (async) r15 = getpid() syz_open_procfs(r15, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, r10, r12, r13, 0xcc, 0x3}, 0xfffffff8, 0x5, 0x9, 0x6, r14, r15, 0x81}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) (async) r16 = userfaultfd(0x80000) (async) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r16, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x1f, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x100000145e, 0xfffffffffffffff9, 0x3, 0x3, 0x62, 0x1, 0x3]}}, @devid=r17}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r5, 0x1d, 0x0, 0x800, &(0x7f0000000000)=[0x0, 0x0], 0x2}, 0x20) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) 18:11:29 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') close$fd_v4l2_buffer(r0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') close$fd_v4l2_buffer(0xffffffffffffffff) 18:11:29 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x8000000000000000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) (async, rerun: 64) r4 = getuid() (async, rerun: 64) r5 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r4, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r5, 0xffffffffffffffff, 0x20}) (async) r6 = getgid() r7 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r4, 0xee01, r4, r6, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r5, r7, 0xf001}) (async) r8 = syz_open_procfs(r5, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r8, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r8, 0x80045301, &(0x7f0000000940)) (async) r9 = userfaultfd(0x80000) (async) ioctl$BTRFS_IOC_SCRUB(r8, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r9, 0x50009417, &(0x7f0000000f40)={{r8}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r10}) (async, rerun: 32) ioctl$vim2m_VIDIOC_STREAMON(r8, 0x40045612, &(0x7f00000006c0)=0x3) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x154, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x4, 0x1, 0x1f}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/27, 0x1b, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r3}, @flat=@weak_binder={0x77622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/125, 0x7d, 0x0, 0x22}}, &(0x7f0000000300)={0x0, 0x18, 0x30}}, 0x40}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@fda={0x66646185, 0x4, 0x1, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/42, 0x2a, 0x0, 0x2a}, @flat=@binder={0x73622a85, 0x1}}, &(0x7f0000000400)={0x0, 0x20, 0x48}}}, @increfs_done={0x40106308, 0x1}, @release={0x40046306, 0x3}, @increfs={0x40046304, 0x3}, @request_death], 0x67, 0x0, &(0x7f00000005c0)="a9689f9e0a66111d23b95dbb43815235e41f0e4a17227168f231f32e4e974cdd45399f7852fd5f810a5345414b51d018039919d5bb5e1193d2fce090118f514366f67f0c497ac954c9b0d5df889747588863a2f88f6e21634e7a15d4bb30d2887498f3240bf166"}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x80000000, 0x0, 0x0, "69e582cb4f68399286dd4dcc84ce09deac4328f87f49f17098fa032c80a45151", 0x3131354f}) 18:11:29 executing program 4: ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000000)) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)=@fd={0x40, 0x3, 0x4, 0x100000, 0xffff, {r2, r3/1000+10000}, {0x4, 0x1, 0x3, 0x20, 0xa0, 0x3, 'R<0\f'}, 0x8, 0x4, {}, 0xffffff81}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c", 0xb1463758}) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000000)) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') (async) clock_gettime(0x0, &(0x7f0000000080)) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)=@fd={0x40, 0x3, 0x4, 0x100000, 0xffff, {r2, r3/1000+10000}, {0x4, 0x1, 0x3, 0x20, 0xa0, 0x3, 'R<0\f'}, 0x8, 0x4, {}, 0xffffff81}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c", 0xb1463758}) (async) 18:11:29 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2181) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000100)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000040)={{0x80}}) 18:11:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='attr/keycreate\x00') r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = getuid() r3 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r2, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r3, 0xffffffffffffffff, 0x20}) r4 = getgid() r5 = getuid() r6 = getpid() r7 = getgid() r8 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r5, 0xee01, r5, r7, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r6, r8, 0xf001}) r9 = getuid() r10 = getpid() r11 = getgid() r12 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r9, 0xee01, r9, r11, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r10, r12, 0xf001}) getgroups(0x1, &(0x7f0000000480)=[r4]) getgroups(0x9, &(0x7f0000000540)=[0xee00, r4, r7, r4, r11, r4, r13, r4, r4]) r14 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r2, 0xee01, r2, r4, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r3, r14, 0xf001}) r15 = syz_open_procfs(r3, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r15, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r15, 0x80045301, &(0x7f0000000940)) r16 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r15, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r16, 0x50009417, &(0x7f0000000f40)={{r15}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000640)=ANY=[@ANYBLOB="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"]}, @subvolid=0x8}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r15, 0xc05c5340, &(0x7f0000000400)={0x6, 0x2, 0x3, {0x9, 0x7ff}, 0xfffff000, 0xe80a}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x1}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) 18:11:29 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') close$fd_v4l2_buffer(r0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') close$fd_v4l2_buffer(0xffffffffffffffff) 18:11:29 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2181) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000100)) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000040)={{0x80}}) 18:11:29 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00') r1 = getuid() r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) r3 = getgid() r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) r6 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)=ANY=[@ANYBLOB="01000000000000000a000000000000000700000000000000080000000000000006000000000000000500000000000000ff00000000000000000000001c0000000300000000000000010001000000000005000000000000005e14000000000000f9ffffffffffffff07000000000000000300000000000000030000000000000001000000000000000300000000000000"]}, @devid=r7}) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000000)={0x40, 0x5, 0x35, 0x81, 0x73, 0x633a, &(0x7f0000000080)="c5bd895117e1cf5db8a79e575ea2871b4a5ebbfb8d387787d207e320b2562c9b5fc17b988e1cc02895615acecc344d483973029c238f7d97d683ae0c117af151aaa88384b7e174e17821195181384fea28eec36ccbd0023d15e24411feda20988b73e034dce7c751849c47715f9a9f6109e885"}) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000002, 0x10010, r0, 0x27e5) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) 18:11:29 executing program 4: ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000000)) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)=@fd={0x40, 0x3, 0x4, 0x100000, 0xffff, {r2, r3/1000+10000}, {0x4, 0x1, 0x3, 0x20, 0xa0, 0x3, 'R<0\f'}, 0x8, 0x4, {}, 0xffffff81}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c", 0xb1463758}) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000000)) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') (async) clock_gettime(0x0, &(0x7f0000000080)) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)=@fd={0x40, 0x3, 0x4, 0x100000, 0xffff, {r2, r3/1000+10000}, {0x4, 0x1, 0x3, 0x20, 0xa0, 0x3, 'R<0\f'}, 0x8, 0x4, {}, 0xffffff81}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c", 0xb1463758}) (async) 18:11:29 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r1 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) r2 = getgid() r3 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r2, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, r3, 0xf001}) r4 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000940)) r5 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000f40)={{r4}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a0000000000000007000000000000008100000000000000080000000000000006000000000000000500000000000000ff00000000000000000000001c0000000300000000000000010001000000000005000000000000005e14000000000000f9ffffffffffffff07000000000000000300000000000000030000000000000001000000000000000300000000000000c5e128ede2ebcbee08b8a271a65b44953c22cc5e76f98feb7e193ed85f9039a16d2f31c2c96841a403e547"]}, @devid=r6}) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {r8, r9/1000+60000}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff, 0x0, r4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000480)=@mmap={0x0, 0x3, 0x4, 0x800, 0xadfa, {0x0, 0xea60}, {0x5, 0x0, 0x1, 0x9, 0x5, 0x3f, "6ea1c91c"}, 0x1, 0x1, {}, 0x2, 0x0, r10}) r11 = getuid() r12 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r11, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r12, 0xffffffffffffffff, 0x20}) r13 = getgid() r14 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r11, 0xee01, r11, r13, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r12, r14, 0xf001}) r15 = syz_open_procfs(r12, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r15, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r15, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r15, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$vim2m_VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000100)={0x3, @win={{0x2a, 0x7f, 0x9, 0x4}, 0x3, 0x4, &(0x7f0000000540)={{0xa20, 0x5, 0xfffffff7, 0x4}, &(0x7f0000000500)={{0x1000, 0x4, 0x10000, 0xefc5}, &(0x7f0000000080)={{0x138, 0x4, 0x6, 0x81}}}}, 0x0, &(0x7f0000000580)="935cdf6318e9fdd60478cce11e078500d4e5a958485dab623706d01786454621f24dfa38545f0e847acf78a11fb67a39ed02e4b23d5d7f6bc4cf928a740566", 0x9}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) 18:11:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='attr/keycreate\x00') (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) r2 = getuid() r3 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r2, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r3, 0xffffffffffffffff, 0x20}) (async) r4 = getgid() r5 = getuid() (async) r6 = getpid() r7 = getgid() (async) r8 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r5, 0xee01, r5, r7, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r6, r8, 0xf001}) r9 = getuid() (async) r10 = getpid() (async) r11 = getgid() (async) r12 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r9, 0xee01, r9, r11, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r10, r12, 0xf001}) getgroups(0x1, &(0x7f0000000480)=[r4]) getgroups(0x9, &(0x7f0000000540)=[0xee00, r4, r7, r4, r11, r4, r13, r4, r4]) (async) r14 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r2, 0xee01, r2, r4, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r3, r14, 0xf001}) (async) r15 = syz_open_procfs(r3, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r15, 0x8004551a, &(0x7f0000000900)) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r15, 0x80045301, &(0x7f0000000940)) r16 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r15, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r16, 0x50009417, &(0x7f0000000f40)={{r15}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000640)=ANY=[@ANYBLOB="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"]}, @subvolid=0x8}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r15, 0xc05c5340, &(0x7f0000000400)={0x6, 0x2, 0x3, {0x9, 0x7ff}, 0xfffff000, 0xe80a}) (async) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x1}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) 18:11:29 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') close$fd_v4l2_buffer(r0) 18:11:29 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) (async) r1 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) r2 = getgid() (async, rerun: 64) r3 = getpid() (rerun: 64) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r2, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, r3, 0xf001}) (async) r4 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000940)) (async) r5 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000f40)={{r4}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a0000000000000007000000000000008100000000000000080000000000000006000000000000000500000000000000ff00000000000000000000001c0000000300000000000000010001000000000005000000000000005e14000000000000f9ffffffffffffff07000000000000000300000000000000030000000000000001000000000000000300000000000000c5e128ede2ebcbee08b8a271a65b44953c22cc5e76f98feb7e193ed85f9039a16d2f31c2c96841a403e547"]}, @devid=r6}) (async) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) (rerun: 64) ioctl$vim2m_VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {r8, r9/1000+60000}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff, 0x0, r4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000480)=@mmap={0x0, 0x3, 0x4, 0x800, 0xadfa, {0x0, 0xea60}, {0x5, 0x0, 0x1, 0x9, 0x5, 0x3f, "6ea1c91c"}, 0x1, 0x1, {}, 0x2, 0x0, r10}) (async, rerun: 64) r11 = getuid() (async, rerun: 64) r12 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r11, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r12, 0xffffffffffffffff, 0x20}) (async) r13 = getgid() (async) r14 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r11, 0xee01, r11, r13, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r12, r14, 0xf001}) r15 = syz_open_procfs(r12, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r15, 0x8004551a, &(0x7f0000000900)) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r15, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) (async) ioctl$BTRFS_IOC_SCRUB(r15, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000100)={0x3, @win={{0x2a, 0x7f, 0x9, 0x4}, 0x3, 0x4, &(0x7f0000000540)={{0xa20, 0x5, 0xfffffff7, 0x4}, &(0x7f0000000500)={{0x1000, 0x4, 0x10000, 0xefc5}, &(0x7f0000000080)={{0x138, 0x4, 0x6, 0x81}}}}, 0x0, &(0x7f0000000580)="935cdf6318e9fdd60478cce11e078500d4e5a958485dab623706d01786454621f24dfa38545f0e847acf78a11fb67a39ed02e4b23d5d7f6bc4cf928a740566", 0x9}}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) 18:11:29 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00') (async) r1 = getuid() r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) (async) r3 = getgid() r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) (async) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) r6 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)=ANY=[@ANYBLOB="01000000000000000a000000000000000700000000000000080000000000000006000000000000000500000000000000ff00000000000000000000001c0000000300000000000000010001000000000005000000000000005e14000000000000f9ffffffffffffff07000000000000000300000000000000030000000000000001000000000000000300000000000000"]}, @devid=r7}) (async) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000000)={0x40, 0x5, 0x35, 0x81, 0x73, 0x633a, &(0x7f0000000080)="c5bd895117e1cf5db8a79e575ea2871b4a5ebbfb8d387787d207e320b2562c9b5fc17b988e1cc02895615acecc344d483973029c238f7d97d683ae0c117af151aaa88384b7e174e17821195181384fea28eec36ccbd0023d15e24411feda20988b73e034dce7c751849c47715f9a9f6109e885"}) (async) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000002, 0x10010, r0, 0x27e5) (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) 18:11:29 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2181) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000100)) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000040)={{0x80}}) 18:11:29 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x5, 0x3, 0x0, "51d0f3bebc20df4544dcbb75449bcad2afaee0c04c00", 0x34363248}) 18:11:29 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}, {0x40}, 0x10000000}) 18:11:29 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r1 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) r2 = getgid() r3 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r2, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, r3, 0xf001}) r4 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000940)) r5 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000f40)={{r4}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a0000000000000007000000000000008100000000000000080000000000000006000000000000000500000000000000ff00000000000000000000001c0000000300000000000000010001000000000005000000000000005e14000000000000f9ffffffffffffff07000000000000000300000000000000030000000000000001000000000000000300000000000000c5e128ede2ebcbee08b8a271a65b44953c22cc5e76f98feb7e193ed85f9039a16d2f31c2c96841a403e547"]}, @devid=r6}) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {r8, r9/1000+60000}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff, 0x0, r4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000480)=@mmap={0x0, 0x3, 0x4, 0x800, 0xadfa, {0x0, 0xea60}, {0x5, 0x0, 0x1, 0x9, 0x5, 0x3f, "6ea1c91c"}, 0x1, 0x1, {}, 0x2, 0x0, r10}) r11 = getuid() r12 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r11, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r12, 0xffffffffffffffff, 0x20}) r13 = getgid() r14 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r11, 0xee01, r11, r13, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r12, r14, 0xf001}) r15 = syz_open_procfs(r12, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r15, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r15, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r15, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$vim2m_VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000100)={0x3, @win={{0x2a, 0x7f, 0x9, 0x4}, 0x3, 0x4, &(0x7f0000000540)={{0xa20, 0x5, 0xfffffff7, 0x4}, &(0x7f0000000500)={{0x1000, 0x4, 0x10000, 0xefc5}, &(0x7f0000000080)={{0x138, 0x4, 0x6, 0x81}}}}, 0x0, &(0x7f0000000580)="935cdf6318e9fdd60478cce11e078500d4e5a958485dab623706d01786454621f24dfa38545f0e847acf78a11fb67a39ed02e4b23d5d7f6bc4cf928a740566", 0x9}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) 18:11:29 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x5, 0x3, 0x0, "51d0f3bebc20df4544dcbb75449bcad2afaee0c04c00", 0x34363248}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x5, 0x3, 0x0, "51d0f3bebc20df4544dcbb75449bcad2afaee0c04c00", 0x34363248}) (async) 18:11:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='attr/keycreate\x00') r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = getuid() r3 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r2, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r3, 0xffffffffffffffff, 0x20}) (async) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r2, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r3, 0xffffffffffffffff, 0x20}) r4 = getgid() r5 = getuid() r6 = getpid() r7 = getgid() getpid() (async) r8 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r5, 0xee01, r5, r7, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r6, r8, 0xf001}) getuid() (async) r9 = getuid() r10 = getpid() r11 = getgid() r12 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r9, 0xee01, r9, r11, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r10, r12, 0xf001}) getgroups(0x1, &(0x7f0000000480)=[r4]) getgroups(0x9, &(0x7f0000000540)=[0xee00, r4, r7, r4, r11, r4, r13, r4, r4]) getpid() (async) r14 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r2, 0xee01, r2, r4, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r3, r14, 0xf001}) r15 = syz_open_procfs(r3, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r15, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r15, 0x80045301, &(0x7f0000000940)) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r15, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) (async) r16 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r15, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r16, 0x50009417, &(0x7f0000000f40)={{r15}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000640)=ANY=[@ANYBLOB="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"]}, @subvolid=0x8}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r15, 0xc05c5340, &(0x7f0000000400)={0x6, 0x2, 0x3, {0x9, 0x7ff}, 0xfffff000, 0xe80a}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r15, 0xc05c5340, &(0x7f0000000400)={0x6, 0x2, 0x3, {0x9, 0x7ff}, 0xfffff000, 0xe80a}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x1}) (async) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000000)={0x0, 0x0, 0xffff, 0x1}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) 18:11:29 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}, {0x40}, 0x10000000}) 18:11:29 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) (async) r1 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) (async) r2 = getgid() r3 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r2, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, r3, 0xf001}) r4 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000900)) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000940)) (rerun: 64) r5 = userfaultfd(0x80000) (async) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000f40)={{r4}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a0000000000000007000000000000008100000000000000080000000000000006000000000000000500000000000000ff00000000000000000000001c0000000300000000000000010001000000000005000000000000005e14000000000000f9ffffffffffffff07000000000000000300000000000000030000000000000001000000000000000300000000000000c5e128ede2ebcbee08b8a271a65b44953c22cc5e76f98feb7e193ed85f9039a16d2f31c2c96841a403e547"]}, @devid=r6}) (async) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {r8, r9/1000+60000}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff, 0x0, r4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000480)=@mmap={0x0, 0x3, 0x4, 0x800, 0xadfa, {0x0, 0xea60}, {0x5, 0x0, 0x1, 0x9, 0x5, 0x3f, "6ea1c91c"}, 0x1, 0x1, {}, 0x2, 0x0, r10}) r11 = getuid() (async, rerun: 32) r12 = getpid() (rerun: 32) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r11, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r12, 0xffffffffffffffff, 0x20}) (async, rerun: 32) r13 = getgid() (async, rerun: 32) r14 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r11, 0xee01, r11, r13, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r12, r14, 0xf001}) (async, rerun: 64) r15 = syz_open_procfs(r12, &(0x7f00000008c0)='net/ip_mr_vif\x00') (rerun: 64) ioctl$USBDEVFS_GET_CAPABILITIES(r15, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r15, 0x80045301, &(0x7f0000000940)) (async) userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r15, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) (async, rerun: 64) ioctl$vim2m_VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000100)={0x3, @win={{0x2a, 0x7f, 0x9, 0x4}, 0x3, 0x4, &(0x7f0000000540)={{0xa20, 0x5, 0xfffffff7, 0x4}, &(0x7f0000000500)={{0x1000, 0x4, 0x10000, 0xefc5}, &(0x7f0000000080)={{0x138, 0x4, 0x6, 0x81}}}}, 0x0, &(0x7f0000000580)="935cdf6318e9fdd60478cce11e078500d4e5a958485dab623706d01786454621f24dfa38545f0e847acf78a11fb67a39ed02e4b23d5d7f6bc4cf928a740566", 0x9}}) (rerun: 64) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) 18:11:29 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00') (async) r1 = getuid() (async) r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) (async) r3 = getgid() r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) (async) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) (async) r6 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)=ANY=[@ANYBLOB="01000000000000000a000000000000000700000000000000080000000000000006000000000000000500000000000000ff00000000000000000000001c0000000300000000000000010001000000000005000000000000005e14000000000000f9ffffffffffffff07000000000000000300000000000000030000000000000001000000000000000300000000000000"]}, @devid=r7}) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000000)={0x40, 0x5, 0x35, 0x81, 0x73, 0x633a, &(0x7f0000000080)="c5bd895117e1cf5db8a79e575ea2871b4a5ebbfb8d387787d207e320b2562c9b5fc17b988e1cc02895615acecc344d483973029c238f7d97d683ae0c117af151aaa88384b7e174e17821195181384fea28eec36ccbd0023d15e24411feda20988b73e034dce7c751849c47715f9a9f6109e885"}) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000002, 0x10010, r0, 0x27e5) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) 18:11:29 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x5, 0x3, 0x0, "51d0f3bebc20df4544dcbb75449bcad2afaee0c04c00", 0x34363248}) 18:11:29 executing program 0: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000640)='attr/prev\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8000000000000000) 18:11:29 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r1 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) r2 = getgid() r3 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r2, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, r3, 0xf001}) r4 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000940)) r5 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000f40)={{r4}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a0000000000000007000000000000008100000000000000080000000000000006000000000000000500000000000000ff00000000000000000000001c0000000300000000000000010001000000000005000000000000005e14000000000000f9ffffffffffffff07000000000000000300000000000000030000000000000001000000000000000300000000000000c5e128ede2ebcbee08b8a271a65b44953c22cc5e76f98feb7e193ed85f9039a16d2f31c2c96841a403e547"]}, @devid=r6}) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {r8, r9/1000+60000}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff, 0x0, r4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000480)=@mmap={0x0, 0x3, 0x4, 0x800, 0xadfa, {0x0, 0xea60}, {0x5, 0x0, 0x1, 0x9, 0x5, 0x3f, "6ea1c91c"}, 0x1, 0x1, {}, 0x2, 0x0, r10}) r11 = getuid() r12 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r11, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r12, 0xffffffffffffffff, 0x20}) r13 = getgid() r14 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r11, 0xee01, r11, r13, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r12, r14, 0xf001}) r15 = syz_open_procfs(r12, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r15, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r15, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r15, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$vim2m_VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000100)={0x3, @win={{0x2a, 0x7f, 0x9, 0x4}, 0x3, 0x4, &(0x7f0000000540)={{0xa20, 0x5, 0xfffffff7, 0x4}, &(0x7f0000000500)={{0x1000, 0x4, 0x10000, 0xefc5}, &(0x7f0000000080)={{0x138, 0x4, 0x6, 0x81}}}}, 0x0, &(0x7f0000000580)="935cdf6318e9fdd60478cce11e078500d4e5a958485dab623706d01786454621f24dfa38545f0e847acf78a11fb67a39ed02e4b23d5d7f6bc4cf928a740566", 0x9}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) 18:11:29 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}, {0x40}, 0x10000000}) 18:11:29 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000000)={{r0}, {@void, @max}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x24}}, 0x0) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r2, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r7}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8095}, 0x4000) 18:11:29 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000000)={0x1, 0x80, 0x1fc, {0x1000000b, 0x80}, 0x7, 0x1006}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) 18:11:29 executing program 0: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000640)='attr/prev\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8000000000000000) getpid() (async) syz_open_procfs(r0, &(0x7f0000000640)='attr/prev\x00') (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8000000000000000) (async) 18:11:29 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r1 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) r2 = getgid() r3 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r2, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, r3, 0xf001}) r4 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000940)) r5 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000f40)={{r4}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a0000000000000007000000000000008100000000000000080000000000000006000000000000000500000000000000ff00000000000000000000001c0000000300000000000000010001000000000005000000000000005e14000000000000f9ffffffffffffff07000000000000000300000000000000030000000000000001000000000000000300000000000000c5e128ede2ebcbee08b8a271a65b44953c22cc5e76f98feb7e193ed85f9039a16d2f31c2c96841a403e547"]}, @devid=r6}) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {r8, r9/1000+60000}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff, 0x0, r4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000480)=@mmap={0x0, 0x3, 0x4, 0x800, 0xadfa, {0x0, 0xea60}, {0x5, 0x0, 0x1, 0x9, 0x5, 0x3f, "6ea1c91c"}, 0x1, 0x1, {}, 0x2, 0x0, r10}) r11 = getuid() r12 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r11, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r12, 0xffffffffffffffff, 0x20}) r13 = getgid() r14 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r11, 0xee01, r11, r13, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r12, r14, 0xf001}) r15 = syz_open_procfs(r12, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r15, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r15, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r15, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$vim2m_VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000100)={0x3, @win={{0x2a, 0x7f, 0x9, 0x4}, 0x3, 0x4, &(0x7f0000000540)={{0xa20, 0x5, 0xfffffff7, 0x4}, &(0x7f0000000500)={{0x1000, 0x4, 0x10000, 0xefc5}, &(0x7f0000000080)={{0x138, 0x4, 0x6, 0x81}}}}, 0x0, &(0x7f0000000580)="935cdf6318e9fdd60478cce11e078500d4e5a958485dab623706d01786454621f24dfa38545f0e847acf78a11fb67a39ed02e4b23d5d7f6bc4cf928a740566", 0x9}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) 18:11:29 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) (async) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000000)={{r0}, {@void, @max}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x24}}, 0x0) (async) r3 = getuid() (async) r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) (async, rerun: 64) r5 = getgid() (async, rerun: 64) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) (async) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) (rerun: 32) r8 = userfaultfd(0x80000) (async) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r2, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r7}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8095}, 0x4000) 18:11:29 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x600640) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) r1 = getuid() r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) r3 = getgid() r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x140, 0x83}, 0x2, 0xff, 0x200000000000001, 0x200, r2, r4, 0xeffd}) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) r6 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f00000000c0)={{0x80}, 0x0, 0x7b, 0x81, {0x0, 0x20}, 0x1, 0x3}) 18:11:29 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000000)={0x1, 0x80, 0x1fc, {0x1000000b, 0x80}, 0x7, 0x1006}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) 18:11:29 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x1, @vbi={0x9, 0x0, 0x4, 0x3231564e, [0x9, 0x7], [0x250, 0xe24b], 0x2}}) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x1200000000000000, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0xcc, 0x0, &(0x7f0000000340)=[@request_death={0x400c630e, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x9, 0x1, 0x40}, @fd={0x66642a85, 0x0, r1}, @flat=@handle={0x73682a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}}, @enter_looper, @enter_looper, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @free_buffer, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@fda={0x66646185, 0x4, 0x0, 0x2d}, @fda={0x66646185, 0x6, 0x2, 0x34}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/39, 0x27, 0x0, 0xf}}, &(0x7f0000000300)={0x0, 0x20, 0x40}}}, @register_looper], 0xd5, 0x0, &(0x7f0000000440)="4f49f7c3ff986d73081beaf7074960828a4ae979cd0bdbc49f82e2c142d4701c14dae783aa3e16700cd5a91bb4c2f895bb774a3dc3cdad81043d0c4e57fdc13dfa7cbbd5321585a5eef8e39e8ddb642eb2cc43eede9b567b0f4b5b5cc1564ab6de3d40a8cf773f32d0f72a5d8e656150ea0dfae17623c4feaf7bbb2ebb43e2cc04ae791c27759e1528cdd1dab1a44c5b36d348ddc9d382e713d44be294209ac3b0b81d532876099c2a2b7d9e0db4fc4542326b03ede5aac1a5d8700bdd4fef29c0142e61b0d78647cafd8293309cc6f3dfafa142c3"}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1, 0x81, 0x7, 0x2, 0xa06, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x48) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000740)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f00000025c0)={{r3}, 0x0, 0x2, @unused=[0x2, 0x7fff, 0x401], @devid=r4}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x3c, 0x0, 0x14, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x936}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfcd6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x4000000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, r6, 0x2, 0x7, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffff33}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008881) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000001300)={0x1298, 0x12, 0x231, 0x70bd2a, 0x25dfdbfe, {0x1d, 0x9, 0x3, 0x40, {0x4e23, 0x4e23, [0x139b, 0x2, 0xfd, 0x5], [0x0, 0x4, 0x2, 0x2], r5, [0x8]}, 0x0, 0x7ff}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xcc, 0x1, "f390a7d9c4a1aeacbadead9dde998134c698ca9783b6bcaab0c982b96365319ee8f3884b24806a7cf2607da7838be9178ffbf6578aec6607ff35a9972d3cb87022e85610dbc50c9a423fe281296271468d25abf0d5864778b25be24c5cc2ca3a419bd6b05fa411db3b6b2cbaa17e805b8152594c4083862ed5ff8da5ebe3ef6d1c2add346c6df1970d526fdbafbd90a490c6f6adb0786356267408debc073e490cc9c28eecddd3102a3ecf3ac54b995897cf1ce046d22d9c06130bdcb53c54e25f61ebab6ea34b98"}, @INET_DIAG_REQ_BYTECODE={0xb1, 0x1, "22de1bd241c5e7dba21942c0692b42758fda796ee999506f61ec1a9bad61822890570c6c12f49d595e0c2e8bbe45990a6eb4209477d8748a6810060420990332f9f86c7c5348e0500d075736f6eb2f37418a951ac97e7a1f063424861dfe8a2487fcf4ff3584b7275674e89def4638ec33e2b8f2eb0aef27ef3bb33254be698c3ccbe5babfa094f3d32aff9f5c2d0f2016a5004edfcd591b41e58a973cb2534fd919c76dd03cfc83f35a793600"}, @INET_DIAG_REQ_BYTECODE={0xc6, 0x1, "b1e4dfd5900a3965adc68cb8b671af061d6e614521f29605f45c75e29cc188621a3ee99f3fa44505b6cf736758ad55439dd346d1eb3662fd7bb8b7a90c2a582c3f805b4d665eb109665d5add46f52205693ea426dc1a7890e1c9a8b3ca2facc3fe6b192aeb0085573cd25f41be38f8173aea9c8110ad31ef24cab539f7c8bc3bcd981153c5977c80f0c5736288423ebe1dde02510587ff364402ed2ee079f342d620038730c22ffc8aed57be5dabc10e3b12570862d3182ebfecc2e5dde394217904"}]}, 0x1298}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 18:11:29 executing program 5: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r0 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) r1 = getgid() r2 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r1, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, r2, 0xf001}) r3 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r3, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000940)) r4 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000f40)={{r3}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a0000000000000007000000000000008100000000000000080000000000000006000000000000000500000000000000ff00000000000000000000001c0000000300000000000000010001000000000005000000000000005e14000000000000f9ffffffffffffff07000000000000000300000000000000030000000000000001000000000000000300000000000000c5e128ede2ebcbee08b8a271a65b44953c22cc5e76f98feb7e193ed85f9039a16d2f31c2c96841a403e547"]}, @devid=r5}) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {r7, r8/1000+60000}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff, 0x0, r3}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000480)=@mmap={0x0, 0x3, 0x4, 0x800, 0xadfa, {0x0, 0xea60}, {0x5, 0x0, 0x1, 0x9, 0x5, 0x3f, "6ea1c91c"}, 0x1, 0x1, {}, 0x2, 0x0, r9}) r10 = getuid() r11 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r10, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r11, 0xffffffffffffffff, 0x20}) r12 = getgid() r13 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r10, 0xee01, r10, r12, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r11, r13, 0xf001}) r14 = syz_open_procfs(r11, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r14, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r14, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r14, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$vim2m_VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000100)={0x3, @win={{0x2a, 0x7f, 0x9, 0x4}, 0x3, 0x4, &(0x7f0000000540)={{0xa20, 0x5, 0xfffffff7, 0x4}, &(0x7f0000000500)={{0x1000, 0x4, 0x10000, 0xefc5}, &(0x7f0000000080)={{0x138, 0x4, 0x6, 0x81}}}}, 0x0, &(0x7f0000000580)="935cdf6318e9fdd60478cce11e078500d4e5a958485dab623706d01786454621f24dfa38545f0e847acf78a11fb67a39ed02e4b23d5d7f6bc4cf928a740566", 0x9}}) 18:11:29 executing program 0: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000640)='attr/prev\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8000000000000000) getpid() (async) syz_open_procfs(r0, &(0x7f0000000640)='attr/prev\x00') (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8000000000000000) (async) 18:11:29 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000000)={{r0}, {@void, @max}}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x24}}, 0x0) (async) r3 = getuid() (async) r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) (async, rerun: 32) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') (rerun: 32) ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) (async, rerun: 64) r8 = userfaultfd(0x80000) (async) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r2, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r7}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8095}, 0x4000) 18:11:29 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x1, @vbi={0x9, 0x0, 0x4, 0x3231564e, [0x9, 0x7], [0x250, 0xe24b], 0x2}}) syz_open_dev$MSR(&(0x7f0000000140), 0x1200000000000000, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x1200000000000000, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0xcc, 0x0, &(0x7f0000000340)=[@request_death={0x400c630e, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x9, 0x1, 0x40}, @fd={0x66642a85, 0x0, r1}, @flat=@handle={0x73682a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}}, @enter_looper, @enter_looper, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @free_buffer, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@fda={0x66646185, 0x4, 0x0, 0x2d}, @fda={0x66646185, 0x6, 0x2, 0x34}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/39, 0x27, 0x0, 0xf}}, &(0x7f0000000300)={0x0, 0x20, 0x40}}}, @register_looper], 0xd5, 0x0, &(0x7f0000000440)="4f49f7c3ff986d73081beaf7074960828a4ae979cd0bdbc49f82e2c142d4701c14dae783aa3e16700cd5a91bb4c2f895bb774a3dc3cdad81043d0c4e57fdc13dfa7cbbd5321585a5eef8e39e8ddb642eb2cc43eede9b567b0f4b5b5cc1564ab6de3d40a8cf773f32d0f72a5d8e656150ea0dfae17623c4feaf7bbb2ebb43e2cc04ae791c27759e1528cdd1dab1a44c5b36d348ddc9d382e713d44be294209ac3b0b81d532876099c2a2b7d9e0db4fc4542326b03ede5aac1a5d8700bdd4fef29c0142e61b0d78647cafd8293309cc6f3dfafa142c3"}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1, 0x81, 0x7, 0x2, 0xa06, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1, 0x81, 0x7, 0x2, 0xa06, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x48) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000740)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f00000025c0)={{r3}, 0x0, 0x2, @unused=[0x2, 0x7fff, 0x401], @devid=r4}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x3c, 0x0, 0x14, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x936}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfcd6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x4000000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, r6, 0x2, 0x7, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffff33}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008881) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, r6, 0x2, 0x7, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffff33}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008881) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000001300)={0x1298, 0x12, 0x231, 0x70bd2a, 0x25dfdbfe, {0x1d, 0x9, 0x3, 0x40, {0x4e23, 0x4e23, [0x139b, 0x2, 0xfd, 0x5], [0x0, 0x4, 0x2, 0x2], r5, [0x8]}, 0x0, 0x7ff}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xcc, 0x1, "f390a7d9c4a1aeacbadead9dde998134c698ca9783b6bcaab0c982b96365319ee8f3884b24806a7cf2607da7838be9178ffbf6578aec6607ff35a9972d3cb87022e85610dbc50c9a423fe281296271468d25abf0d5864778b25be24c5cc2ca3a419bd6b05fa411db3b6b2cbaa17e805b8152594c4083862ed5ff8da5ebe3ef6d1c2add346c6df1970d526fdbafbd90a490c6f6adb0786356267408debc073e490cc9c28eecddd3102a3ecf3ac54b995897cf1ce046d22d9c06130bdcb53c54e25f61ebab6ea34b98"}, @INET_DIAG_REQ_BYTECODE={0xb1, 0x1, "22de1bd241c5e7dba21942c0692b42758fda796ee999506f61ec1a9bad61822890570c6c12f49d595e0c2e8bbe45990a6eb4209477d8748a6810060420990332f9f86c7c5348e0500d075736f6eb2f37418a951ac97e7a1f063424861dfe8a2487fcf4ff3584b7275674e89def4638ec33e2b8f2eb0aef27ef3bb33254be698c3ccbe5babfa094f3d32aff9f5c2d0f2016a5004edfcd591b41e58a973cb2534fd919c76dd03cfc83f35a793600"}, @INET_DIAG_REQ_BYTECODE={0xc6, 0x1, "b1e4dfd5900a3965adc68cb8b671af061d6e614521f29605f45c75e29cc188621a3ee99f3fa44505b6cf736758ad55439dd346d1eb3662fd7bb8b7a90c2a582c3f805b4d665eb109665d5add46f52205693ea426dc1a7890e1c9a8b3ca2facc3fe6b192aeb0085573cd25f41be38f8173aea9c8110ad31ef24cab539f7c8bc3bcd981153c5977c80f0c5736288423ebe1dde02510587ff364402ed2ee079f342d620038730c22ffc8aed57be5dabc10e3b12570862d3182ebfecc2e5dde394217904"}]}, 0x1298}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 18:11:29 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x600640) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) r1 = getuid() (async) r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) r3 = getgid() (async) r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x140, 0x83}, 0x2, 0xff, 0x200000000000001, 0x200, r2, r4, 0xeffd}) (async) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) (async) r6 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f00000000c0)={{0x80}, 0x0, 0x7b, 0x81, {0x0, 0x20}, 0x1, 0x3}) 18:11:29 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000000)={0x1, 0x80, 0x1fc, {0x1000000b, 0x80}, 0x7, 0x1006}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) 18:11:29 executing program 5: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r0 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) r1 = getgid() r2 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r1, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, r2, 0xf001}) r3 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r3, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000940)) r4 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000f40)={{r3}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a0000000000000007000000000000008100000000000000080000000000000006000000000000000500000000000000ff00000000000000000000001c0000000300000000000000010001000000000005000000000000005e14000000000000f9ffffffffffffff07000000000000000300000000000000030000000000000001000000000000000300000000000000c5e128ede2ebcbee08b8a271a65b44953c22cc5e76f98feb7e193ed85f9039a16d2f31c2c96841a403e547"]}, @devid=r5}) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {r7, r8/1000+60000}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff, 0x0, r3}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000480)=@mmap={0x0, 0x3, 0x4, 0x800, 0xadfa, {0x0, 0xea60}, {0x5, 0x0, 0x1, 0x9, 0x5, 0x3f, "6ea1c91c"}, 0x1, 0x1, {}, 0x2, 0x0, r9}) r10 = getuid() r11 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r10, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r11, 0xffffffffffffffff, 0x20}) r12 = getgid() r13 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r10, 0xee01, r10, r12, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r11, r13, 0xf001}) r14 = syz_open_procfs(r11, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r14, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r14, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r14, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) 18:11:29 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x1, @vbi={0x9, 0x0, 0x4, 0x3231564e, [0x9, 0x7], [0x250, 0xe24b], 0x2}}) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x1200000000000000, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0xcc, 0x0, &(0x7f0000000340)=[@request_death={0x400c630e, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x9, 0x1, 0x40}, @fd={0x66642a85, 0x0, r1}, @flat=@handle={0x73682a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}}, @enter_looper, @enter_looper, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @free_buffer, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@fda={0x66646185, 0x4, 0x0, 0x2d}, @fda={0x66646185, 0x6, 0x2, 0x34}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/39, 0x27, 0x0, 0xf}}, &(0x7f0000000300)={0x0, 0x20, 0x40}}}, @register_looper], 0xd5, 0x0, &(0x7f0000000440)="4f49f7c3ff986d73081beaf7074960828a4ae979cd0bdbc49f82e2c142d4701c14dae783aa3e16700cd5a91bb4c2f895bb774a3dc3cdad81043d0c4e57fdc13dfa7cbbd5321585a5eef8e39e8ddb642eb2cc43eede9b567b0f4b5b5cc1564ab6de3d40a8cf773f32d0f72a5d8e656150ea0dfae17623c4feaf7bbb2ebb43e2cc04ae791c27759e1528cdd1dab1a44c5b36d348ddc9d382e713d44be294209ac3b0b81d532876099c2a2b7d9e0db4fc4542326b03ede5aac1a5d8700bdd4fef29c0142e61b0d78647cafd8293309cc6f3dfafa142c3"}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1, 0x81, 0x7, 0x2, 0xa06, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x48) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000740)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f00000025c0)={{r3}, 0x0, 0x2, @unused=[0x2, 0x7fff, 0x401], @devid=r4}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x3c, 0x0, 0x14, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x936}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfcd6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x4000000) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, r6, 0x2, 0x7, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffff33}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008881) (async) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000001300)={0x1298, 0x12, 0x231, 0x70bd2a, 0x25dfdbfe, {0x1d, 0x9, 0x3, 0x40, {0x4e23, 0x4e23, [0x139b, 0x2, 0xfd, 0x5], [0x0, 0x4, 0x2, 0x2], r5, [0x8]}, 0x0, 0x7ff}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xcc, 0x1, "f390a7d9c4a1aeacbadead9dde998134c698ca9783b6bcaab0c982b96365319ee8f3884b24806a7cf2607da7838be9178ffbf6578aec6607ff35a9972d3cb87022e85610dbc50c9a423fe281296271468d25abf0d5864778b25be24c5cc2ca3a419bd6b05fa411db3b6b2cbaa17e805b8152594c4083862ed5ff8da5ebe3ef6d1c2add346c6df1970d526fdbafbd90a490c6f6adb0786356267408debc073e490cc9c28eecddd3102a3ecf3ac54b995897cf1ce046d22d9c06130bdcb53c54e25f61ebab6ea34b98"}, @INET_DIAG_REQ_BYTECODE={0xb1, 0x1, "22de1bd241c5e7dba21942c0692b42758fda796ee999506f61ec1a9bad61822890570c6c12f49d595e0c2e8bbe45990a6eb4209477d8748a6810060420990332f9f86c7c5348e0500d075736f6eb2f37418a951ac97e7a1f063424861dfe8a2487fcf4ff3584b7275674e89def4638ec33e2b8f2eb0aef27ef3bb33254be698c3ccbe5babfa094f3d32aff9f5c2d0f2016a5004edfcd591b41e58a973cb2534fd919c76dd03cfc83f35a793600"}, @INET_DIAG_REQ_BYTECODE={0xc6, 0x1, "b1e4dfd5900a3965adc68cb8b671af061d6e614521f29605f45c75e29cc188621a3ee99f3fa44505b6cf736758ad55439dd346d1eb3662fd7bb8b7a90c2a582c3f805b4d665eb109665d5add46f52205693ea426dc1a7890e1c9a8b3ca2facc3fe6b192aeb0085573cd25f41be38f8173aea9c8110ad31ef24cab539f7c8bc3bcd981153c5977c80f0c5736288423ebe1dde02510587ff364402ed2ee079f342d620038730c22ffc8aed57be5dabc10e3b12570862d3182ebfecc2e5dde394217904"}]}, 0x1298}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 18:11:29 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) syz_open_dev$vim2m(&(0x7f0000000000), 0x3f, 0x2) 18:11:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x6) 18:11:29 executing program 5: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r0 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) r1 = getgid() r2 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r1, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, r2, 0xf001}) r3 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r3, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000940)) r4 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000f40)={{r3}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a0000000000000007000000000000008100000000000000080000000000000006000000000000000500000000000000ff00000000000000000000001c0000000300000000000000010001000000000005000000000000005e14000000000000f9ffffffffffffff07000000000000000300000000000000030000000000000001000000000000000300000000000000c5e128ede2ebcbee08b8a271a65b44953c22cc5e76f98feb7e193ed85f9039a16d2f31c2c96841a403e547"]}, @devid=r5}) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {r7, r8/1000+60000}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff, 0x0, r3}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000480)=@mmap={0x0, 0x3, 0x4, 0x800, 0xadfa, {0x0, 0xea60}, {0x5, 0x0, 0x1, 0x9, 0x5, 0x3f, "6ea1c91c"}, 0x1, 0x1, {}, 0x2, 0x0, r9}) r10 = getuid() r11 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r10, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r11, 0xffffffffffffffff, 0x20}) r12 = getgid() r13 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r10, 0xee01, r10, r12, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r11, r13, 0xf001}) r14 = syz_open_procfs(r11, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r14, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r14, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) 18:11:29 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x600640) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) r1 = getuid() (async) r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) r3 = getgid() r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x140, 0x83}, 0x2, 0xff, 0x200000000000001, 0x200, r2, r4, 0xeffd}) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) (async) r6 = userfaultfd(0x80000) (async) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f00000000c0)={{0x80}, 0x0, 0x7b, 0x81, {0x0, 0x20}, 0x1, 0x3}) 18:11:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x6) 18:11:29 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) syz_open_dev$vim2m(&(0x7f0000000000), 0x3f, 0x2) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x3f, 0x2) (async) 18:11:29 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') r1 = getuid() r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) r3 = getgid() r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) r6 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg1\x00'}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) 18:11:29 executing program 0: syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x6) 18:11:29 executing program 5: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r0 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) r1 = getgid() r2 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r1, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, r2, 0xf001}) r3 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r3, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000940)) r4 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000f40)={{r3}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a0000000000000007000000000000008100000000000000080000000000000006000000000000000500000000000000ff00000000000000000000001c0000000300000000000000010001000000000005000000000000005e14000000000000f9ffffffffffffff07000000000000000300000000000000030000000000000001000000000000000300000000000000c5e128ede2ebcbee08b8a271a65b44953c22cc5e76f98feb7e193ed85f9039a16d2f31c2c96841a403e547"]}, @devid=r5}) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {r7, r8/1000+60000}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff, 0x0, r3}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000480)=@mmap={0x0, 0x3, 0x4, 0x800, 0xadfa, {0x0, 0xea60}, {0x5, 0x0, 0x1, 0x9, 0x5, 0x3f, "6ea1c91c"}, 0x1, 0x1, {}, 0x2, 0x0, r9}) r10 = getuid() r11 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r10, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r11, 0xffffffffffffffff, 0x20}) r12 = getgid() r13 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r10, 0xee01, r10, r12, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r11, r13, 0xf001}) r14 = syz_open_procfs(r11, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r14, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r14, 0x80045301, &(0x7f0000000940)) 18:11:29 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) syz_open_dev$vim2m(&(0x7f0000000000), 0x3f, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x3f, 0x2) 18:11:29 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000000c0)={{0x14}, {0x4, 0xff}}) 18:11:29 executing program 5: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r0 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) r1 = getgid() r2 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r1, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, r2, 0xf001}) r3 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r3, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000940)) r4 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000f40)={{r3}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a0000000000000007000000000000008100000000000000080000000000000006000000000000000500000000000000ff00000000000000000000001c0000000300000000000000010001000000000005000000000000005e14000000000000f9ffffffffffffff07000000000000000300000000000000030000000000000001000000000000000300000000000000c5e128ede2ebcbee08b8a271a65b44953c22cc5e76f98feb7e193ed85f9039a16d2f31c2c96841a403e547"]}, @devid=r5}) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {r7, r8/1000+60000}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff, 0x0, r3}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000480)=@mmap={0x0, 0x3, 0x4, 0x800, 0xadfa, {0x0, 0xea60}, {0x5, 0x0, 0x1, 0x9, 0x5, 0x3f, "6ea1c91c"}, 0x1, 0x1, {}, 0x2, 0x0, r9}) r10 = getuid() r11 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r10, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r11, 0xffffffffffffffff, 0x20}) r12 = getgid() r13 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r10, 0xee01, r10, r12, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r11, r13, 0xf001}) r14 = syz_open_procfs(r11, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r14, 0x8004551a, &(0x7f0000000900)) 18:11:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010800000000000000c09011d500"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="0f39d6545f69a27cb0701274c5e168b8f90d3c7ba629d3bba7a9c82839eca08b036a8197bb6127f7e508b5d6ab3614f7f02c891399c9e04a73eb6052cf623cf01e4a402d48e2020125ea5d1cc7f742e50bc700040ef4e37585f0ec19ab64611c39ef8b3d8d9545f332a24ab8b769f4f19c6f6e47ba85dd03828d4da8146c4b925f3ab70e7835a2bdf1802e017cda8fdfcdd7e1e8ff766e58a8ff64f39e00afa54d7c0fb213d796c26eb8eaae873a4b58f44f47c5f9daac8c5a956fb1d4e5b681723b7af9", @ANYRES16=r1, @ANYRESHEX], 0x4c}, 0x1, 0x0, 0x0, 0x20000051}, 0xc000) r2 = getuid() r3 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r2, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r3, 0xffffffffffffffff, 0x20}) r4 = getgid() r5 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r2, 0xee01, r2, r4, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r3, r5, 0xf001}) r6 = syz_open_procfs(r3, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r6, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r6, 0x80045301, &(0x7f0000000940)) r7 = userfaultfd(0x80000) r8 = shmget$private(0x0, 0xf000, 0x200, &(0x7f0000ff1000/0xf000)=nil) shmctl$SHM_LOCK(r8, 0xb) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r7, 0x50009417, &(0x7f0000000f40)={{r6}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x7f, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r12, 0x1}, 0x14}}, 0x0) getuid() getpid() sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x30, r12, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x30}}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r10, 0xd, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1c2d}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) r13 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r13, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) 18:11:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) 18:11:29 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000000c0)={{0x14}, {0x4, 0xff}}) 18:11:29 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) getpeername$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}, &(0x7f0000000040)=0x20) 18:11:29 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') (async) r1 = getuid() r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) (async) r3 = getgid() (async) r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) (async) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) (async) r6 = userfaultfd(0x80000) (async) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) (async) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg1\x00'}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000) (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) 18:11:29 executing program 5: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r0 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) r1 = getgid() r2 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r1, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, r2, 0xf001}) r3 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r3, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000940)) r4 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000f40)={{r3}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a0000000000000007000000000000008100000000000000080000000000000006000000000000000500000000000000ff00000000000000000000001c0000000300000000000000010001000000000005000000000000005e14000000000000f9ffffffffffffff07000000000000000300000000000000030000000000000001000000000000000300000000000000c5e128ede2ebcbee08b8a271a65b44953c22cc5e76f98feb7e193ed85f9039a16d2f31c2c96841a403e547"]}, @devid=r5}) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {r7, r8/1000+60000}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff, 0x0, r3}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000480)=@mmap={0x0, 0x3, 0x4, 0x800, 0xadfa, {0x0, 0xea60}, {0x5, 0x0, 0x1, 0x9, 0x5, 0x3f, "6ea1c91c"}, 0x1, 0x1, {}, 0x2, 0x0, r9}) r10 = getuid() r11 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r10, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r11, 0xffffffffffffffff, 0x20}) r12 = getgid() r13 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r10, 0xee01, r10, r12, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r11, r13, 0xf001}) syz_open_procfs(r11, &(0x7f00000008c0)='net/ip_mr_vif\x00') 18:11:29 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) getpeername$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}, &(0x7f0000000040)=0x20) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) (async) getpeername$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}, &(0x7f0000000040)=0x20) (async) 18:11:29 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000000c0)={{0x14}, {0x4, 0xff}}) 18:11:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010800000000000000c09011d500"], 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="0f39d6545f69a27cb0701274c5e168b8f90d3c7ba629d3bba7a9c82839eca08b036a8197bb6127f7e508b5d6ab3614f7f02c891399c9e04a73eb6052cf623cf01e4a402d48e2020125ea5d1cc7f742e50bc700040ef4e37585f0ec19ab64611c39ef8b3d8d9545f332a24ab8b769f4f19c6f6e47ba85dd03828d4da8146c4b925f3ab70e7835a2bdf1802e017cda8fdfcdd7e1e8ff766e58a8ff64f39e00afa54d7c0fb213d796c26eb8eaae873a4b58f44f47c5f9daac8c5a956fb1d4e5b681723b7af9", @ANYRES16=r1, @ANYRESHEX], 0x4c}, 0x1, 0x0, 0x0, 0x20000051}, 0xc000) r2 = getuid() (async) r3 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r2, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r3, 0xffffffffffffffff, 0x20}) (async) r4 = getgid() (async) r5 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r2, 0xee01, r2, r4, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r3, r5, 0xf001}) (async) r6 = syz_open_procfs(r3, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r6, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r6, 0x80045301, &(0x7f0000000940)) (async) r7 = userfaultfd(0x80000) (async) r8 = shmget$private(0x0, 0xf000, 0x200, &(0x7f0000ff1000/0xf000)=nil) shmctl$SHM_LOCK(r8, 0xb) (async) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r7, 0x50009417, &(0x7f0000000f40)={{r6}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x7f, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r12, 0x1}, 0x14}}, 0x0) (async) getuid() (async) getpid() (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x30, r12, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x30}}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r10, 0xd, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1c2d}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) (async) r13 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r13, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) 18:11:29 executing program 5: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r0 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) r1 = getgid() r2 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r1, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, r2, 0xf001}) r3 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r3, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000940)) r4 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000f40)={{r3}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a0000000000000007000000000000008100000000000000080000000000000006000000000000000500000000000000ff00000000000000000000001c0000000300000000000000010001000000000005000000000000005e14000000000000f9ffffffffffffff07000000000000000300000000000000030000000000000001000000000000000300000000000000c5e128ede2ebcbee08b8a271a65b44953c22cc5e76f98feb7e193ed85f9039a16d2f31c2c96841a403e547"]}, @devid=r5}) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {r7, r8/1000+60000}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff, 0x0, r3}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000480)=@mmap={0x0, 0x3, 0x4, 0x800, 0xadfa, {0x0, 0xea60}, {0x5, 0x0, 0x1, 0x9, 0x5, 0x3f, "6ea1c91c"}, 0x1, 0x1, {}, 0x2, 0x0, r9}) r10 = getuid() r11 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r10, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r11, 0xffffffffffffffff, 0x20}) r12 = getgid() r13 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r10, 0xee01, r10, r12, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r11, r13, 0xf001}) 18:11:29 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f00000000c0)={{0x4, 0x3}, 'port0\x00', 0x0, 0x40, 0x0, 0x9, 0x81, 0x3, 0x3, 0x0, 0x1, 0x81}) 18:11:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) 18:11:29 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') r1 = getuid() r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) r3 = getgid() r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) r6 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg1\x00'}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') (async) getuid() (async) getpid() (async) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) (async) getgid() (async) getpid() (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) (async) syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') (async) ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) (async) userfaultfd(0x80000) (async) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) (async) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg1\x00'}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000) (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) (async) 18:11:29 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010800000000000000c09011d500"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="0f39d6545f69a27cb0701274c5e168b8f90d3c7ba629d3bba7a9c82839eca08b036a8197bb6127f7e508b5d6ab3614f7f02c891399c9e04a73eb6052cf623cf01e4a402d48e2020125ea5d1cc7f742e50bc700040ef4e37585f0ec19ab64611c39ef8b3d8d9545f332a24ab8b769f4f19c6f6e47ba85dd03828d4da8146c4b925f3ab70e7835a2bdf1802e017cda8fdfcdd7e1e8ff766e58a8ff64f39e00afa54d7c0fb213d796c26eb8eaae873a4b58f44f47c5f9daac8c5a956fb1d4e5b681723b7af9", @ANYRES16=r1, @ANYRESHEX], 0x4c}, 0x1, 0x0, 0x0, 0x20000051}, 0xc000) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="0f39d6545f69a27cb0701274c5e168b8f90d3c7ba629d3bba7a9c82839eca08b036a8197bb6127f7e508b5d6ab3614f7f02c891399c9e04a73eb6052cf623cf01e4a402d48e2020125ea5d1cc7f742e50bc700040ef4e37585f0ec19ab64611c39ef8b3d8d9545f332a24ab8b769f4f19c6f6e47ba85dd03828d4da8146c4b925f3ab70e7835a2bdf1802e017cda8fdfcdd7e1e8ff766e58a8ff64f39e00afa54d7c0fb213d796c26eb8eaae873a4b58f44f47c5f9daac8c5a956fb1d4e5b681723b7af9", @ANYRES16=r1, @ANYRESHEX], 0x4c}, 0x1, 0x0, 0x0, 0x20000051}, 0xc000) r2 = getuid() r3 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r2, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r3, 0xffffffffffffffff, 0x20}) (async) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r2, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r3, 0xffffffffffffffff, 0x20}) getgid() (async) r4 = getgid() r5 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r2, 0xee01, r2, r4, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r3, r5, 0xf001}) r6 = syz_open_procfs(r3, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r6, 0x8004551a, &(0x7f0000000900)) (async) ioctl$USBDEVFS_GET_CAPABILITIES(r6, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r6, 0x80045301, &(0x7f0000000940)) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r6, 0x80045301, &(0x7f0000000940)) r7 = userfaultfd(0x80000) shmget$private(0x0, 0xf000, 0x200, &(0x7f0000ff1000/0xf000)=nil) (async) r8 = shmget$private(0x0, 0xf000, 0x200, &(0x7f0000ff1000/0xf000)=nil) shmctl$SHM_LOCK(r8, 0xb) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r7, 0x50009417, &(0x7f0000000f40)={{r6}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x7f, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r12, 0x1}, 0x14}}, 0x0) getuid() getpid() (async) getpid() sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x30, r12, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x30}}, 0x1) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x30, r12, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x30}}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r10, 0xd, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1c2d}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) r13 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r13, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) 18:11:29 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) (async) getpeername$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}, &(0x7f0000000040)=0x20) 18:11:29 executing program 5: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r0 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) r1 = getgid() r2 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r1, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, r2, 0xf001}) r3 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r3, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000940)) r4 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000f40)={{r3}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a0000000000000007000000000000008100000000000000080000000000000006000000000000000500000000000000ff00000000000000000000001c0000000300000000000000010001000000000005000000000000005e14000000000000f9ffffffffffffff07000000000000000300000000000000030000000000000001000000000000000300000000000000c5e128ede2ebcbee08b8a271a65b44953c22cc5e76f98feb7e193ed85f9039a16d2f31c2c96841a403e547"]}, @devid=r5}) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {r7, r8/1000+60000}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff, 0x0, r3}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000480)=@mmap={0x0, 0x3, 0x4, 0x800, 0xadfa, {0x0, 0xea60}, {0x5, 0x0, 0x1, 0x9, 0x5, 0x3f, "6ea1c91c"}, 0x1, 0x1, {}, 0x2, 0x0, r9}) r10 = getuid() r11 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r10, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r11, 0xffffffffffffffff, 0x20}) getgid() getpid() 18:11:30 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x105021) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000040)) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000440)={0x6, 0x1, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) 18:11:30 executing program 0: syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) 18:11:30 executing program 5: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r0 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) r1 = getgid() r2 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r1, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, r2, 0xf001}) r3 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r3, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000940)) r4 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000f40)={{r3}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a0000000000000007000000000000008100000000000000080000000000000006000000000000000500000000000000ff00000000000000000000001c0000000300000000000000010001000000000005000000000000005e14000000000000f9ffffffffffffff07000000000000000300000000000000030000000000000001000000000000000300000000000000c5e128ede2ebcbee08b8a271a65b44953c22cc5e76f98feb7e193ed85f9039a16d2f31c2c96841a403e547"]}, @devid=r5}) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {r7, r8/1000+60000}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff, 0x0, r3}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000480)=@mmap={0x0, 0x3, 0x4, 0x800, 0xadfa, {0x0, 0xea60}, {0x5, 0x0, 0x1, 0x9, 0x5, 0x3f, "6ea1c91c"}, 0x1, 0x1, {}, 0x2, 0x0, r9}) r10 = getuid() r11 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r10, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r11, 0xffffffffffffffff, 0x20}) getgid() 18:11:30 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f00000000c0)={{0x4, 0x3}, 'port0\x00', 0x0, 0x40, 0x0, 0x9, 0x81, 0x3, 0x3, 0x0, 0x1, 0x81}) 18:11:30 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000001300)={{r1}, r2, 0x2, @inherit={0x68, &(0x7f0000000040)={0x1, 0x4, 0x1f, 0x8, {0x22, 0x0, 0x200, 0x7fff, 0x6}, [0x8000000000000000, 0x3, 0x3d4e, 0x9]}}, @devid}) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) 18:11:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8000000000000000) 18:11:30 executing program 5: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r0 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) r1 = getgid() r2 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r1, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, r2, 0xf001}) r3 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r3, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000940)) r4 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000f40)={{r3}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a0000000000000007000000000000008100000000000000080000000000000006000000000000000500000000000000ff00000000000000000000001c0000000300000000000000010001000000000005000000000000005e14000000000000f9ffffffffffffff07000000000000000300000000000000030000000000000001000000000000000300000000000000c5e128ede2ebcbee08b8a271a65b44953c22cc5e76f98feb7e193ed85f9039a16d2f31c2c96841a403e547"]}, @devid=r5}) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {r7, r8/1000+60000}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff, 0x0, r3}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000480)=@mmap={0x0, 0x3, 0x4, 0x800, 0xadfa, {0x0, 0xea60}, {0x5, 0x0, 0x1, 0x9, 0x5, 0x3f, "6ea1c91c"}, 0x1, 0x1, {}, 0x2, 0x0, r9}) r10 = getuid() r11 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r10, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r11, 0xffffffffffffffff, 0x20}) 18:11:30 executing program 0: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r0 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) r1 = getgid() r2 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r1, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, r2, 0xf001}) r3 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r3, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000940)) r4 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000f40)={{r3}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a0000000000000007000000000000008100000000000000080000000000000006000000000000000500000000000000ff00000000000000000000001c0000000300000000000000010001000000000005000000000000005e14000000000000f9ffffffffffffff07000000000000000300000000000000030000000000000001000000000000000300000000000000c5e128ede2ebcbee08b8a271a65b44953c22cc5e76f98feb7e193ed85f9039a16d2f31c2c96841a403e547"]}, @devid=r5}) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {r7, r8/1000+60000}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff, 0x0, r3}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000480)=@mmap={0x0, 0x3, 0x4, 0x800, 0xadfa, {0x0, 0xea60}, {0x5, 0x0, 0x1, 0x9, 0x5, 0x3f, "6ea1c91c"}, 0x1, 0x1, {}, 0x2, 0x0, r9}) r10 = getuid() r11 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r10, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r11, 0xffffffffffffffff, 0x20}) r12 = getgid() r13 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r10, 0xee01, r10, r12, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r11, r13, 0xf001}) r14 = syz_open_procfs(r11, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r14, 0x8004551a, &(0x7f0000000900)) 18:11:30 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x105021) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000040)) (async) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000440)={0x6, 0x1, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) 18:11:30 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000001300)={{r1}, r2, 0x2, @inherit={0x68, &(0x7f0000000040)={0x1, 0x4, 0x1f, 0x8, {0x22, 0x0, 0x200, 0x7fff, 0x6}, [0x8000000000000000, 0x3, 0x3d4e, 0x9]}}, @devid}) (async) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) 18:11:30 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f00000000c0)={{0x4, 0x3}, 'port0\x00', 0x0, 0x40, 0x0, 0x9, 0x81, 0x3, 0x3, 0x0, 0x1, 0x81}) 18:11:30 executing program 5: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r0 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) r1 = getgid() r2 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r1, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, r2, 0xf001}) r3 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r3, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000940)) r4 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000f40)={{r3}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a0000000000000007000000000000008100000000000000080000000000000006000000000000000500000000000000ff00000000000000000000001c0000000300000000000000010001000000000005000000000000005e14000000000000f9ffffffffffffff07000000000000000300000000000000030000000000000001000000000000000300000000000000c5e128ede2ebcbee08b8a271a65b44953c22cc5e76f98feb7e193ed85f9039a16d2f31c2c96841a403e547"]}, @devid=r5}) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {r7, r8/1000+60000}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff, 0x0, r3}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000480)=@mmap={0x0, 0x3, 0x4, 0x800, 0xadfa, {0x0, 0xea60}, {0x5, 0x0, 0x1, 0x9, 0x5, 0x3f, "6ea1c91c"}, 0x1, 0x1, {}, 0x2, 0x0, r9}) getuid() getpid() 18:11:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8000000000000000) 18:11:30 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x105021) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000040)) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000440)={0x6, 0x1, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000440)={0x6, 0x1, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) 18:11:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8000000000000000) 18:11:30 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) socket$unix(0x1, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0080) r1 = getuid() r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) r3 = getgid() r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') getpid() ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) r6 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) 18:11:30 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000001300)={{r1}, r2, 0x2, @inherit={0x68, &(0x7f0000000040)={0x1, 0x4, 0x1f, 0x8, {0x22, 0x0, 0x200, 0x7fff, 0x6}, [0x8000000000000000, 0x3, 0x3d4e, 0x9]}}, @devid}) (async) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) 18:11:30 executing program 5: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r0 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) r1 = getgid() r2 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r1, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, r2, 0xf001}) r3 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r3, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000940)) r4 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000f40)={{r3}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a0000000000000007000000000000008100000000000000080000000000000006000000000000000500000000000000ff00000000000000000000001c0000000300000000000000010001000000000005000000000000005e14000000000000f9ffffffffffffff07000000000000000300000000000000030000000000000001000000000000000300000000000000c5e128ede2ebcbee08b8a271a65b44953c22cc5e76f98feb7e193ed85f9039a16d2f31c2c96841a403e547"]}, @devid=r5}) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {r7, r8/1000+60000}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff, 0x0, r3}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000480)=@mmap={0x0, 0x3, 0x4, 0x800, 0xadfa, {0x0, 0xea60}, {0x5, 0x0, 0x1, 0x9, 0x5, 0x3f, "6ea1c91c"}, 0x1, 0x1, {}, 0x2, 0x0, r9}) getuid() 18:11:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8000000000000000) 18:11:30 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) socket$unix(0x1, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0080) getuid() (async) r1 = getuid() getpid() (async) r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) r3 = getgid() r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') getpid() ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) (async) ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) (async) r6 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) 18:11:30 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000001300)={{r1}, r2, 0x2, @inherit={0x68, &(0x7f0000000040)={0x1, 0x4, 0x1f, 0x8, {0x22, 0x0, 0x200, 0x7fff, 0x6}, [0x8000000000000000, 0x3, 0x3d4e, 0x9]}}, @devid}) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) 18:11:30 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) 18:11:30 executing program 5: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r0 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) r1 = getgid() r2 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r1, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, r2, 0xf001}) r3 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r3, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000940)) r4 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000f40)={{r3}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a0000000000000007000000000000008100000000000000080000000000000006000000000000000500000000000000ff00000000000000000000001c0000000300000000000000010001000000000005000000000000005e14000000000000f9ffffffffffffff07000000000000000300000000000000030000000000000001000000000000000300000000000000c5e128ede2ebcbee08b8a271a65b44953c22cc5e76f98feb7e193ed85f9039a16d2f31c2c96841a403e547"]}, @devid=r5}) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {r7, r8/1000+60000}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff, 0x0, r3}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000480)=@mmap={0x0, 0x3, 0x4, 0x800, 0xadfa, {0x0, 0xea60}, {0x5, 0x0, 0x1, 0x9, 0x5, 0x3f, "6ea1c91c"}, 0x1, 0x1, {}, 0x2, 0x0, r9}) 18:11:30 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) 18:11:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') r1 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x800, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000a00)={0x58, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000840)={@fd={0x66642a85, 0x0, r2}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/241, 0xf1, 0x1, 0x10}}, &(0x7f00000008c0)={0x0, 0x18, 0x30}}}, @acquire={0x40046305, 0x1}, @free_buffer={0x40086303, r1}], 0x50, 0x0, &(0x7f0000000980)="55faa98497d08eef9c835b5b6f8a62001c90429f24038f5fb78bb66b9269be61b51f0687dedbdef4f93e21e2578dab5b185c498b6b86c94d0ac6d0fadc4531ee677aec2d75c4cc13206888362e36e6a9"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000700)={0x128, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x100, 0x2}, @flat=@binder={0x73622a85, 0x0, 0x2}, @fda={0x66646185, 0x3, 0x2, 0x40}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x40}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000380)={@fd, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/211, 0xd3, 0x0, 0x9}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/223, 0xdf, 0x1, 0x21}}, &(0x7f0000000400)={0x0, 0x18, 0x40}}}, @dead_binder_done, @clear_death={0x400c630f, 0x1}, @register_looper, @release={0x40046306, 0x2}, @register_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x1}, @clear_death={0x400c630f, 0x3}], 0x7e, 0x0, &(0x7f0000000680)="d75ae6ab3bfbc716f3b057e4e9c6218ca9a881aa6706198462da99916f27e5c8fcb676b773705783b56124d42a1a4eb5b6971fc66b074e8534ca042c82c4e7f2ac28240e56758a94272dae8d8884ba8ff6ac5507b679de34bb2542a6f3cc9b982f62c777f31f249e8483154ad9d81fb9150497d2da0b83c92f35e69760da"}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') ioctl$USBDEVFS_RELEASEINTERFACE(r5, 0x80045510, &(0x7f0000000040)=0x5) 18:11:30 executing program 0: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r0 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) r1 = getgid() r2 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r1, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, r2, 0xf001}) r3 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r3, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000940)) r4 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000f40)={{r3}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a0000000000000007000000000000008100000000000000080000000000000006000000000000000500000000000000ff00000000000000000000001c0000000300000000000000010001000000000005000000000000005e14000000000000f9ffffffffffffff07000000000000000300000000000000030000000000000001000000000000000300000000000000c5e128ede2ebcbee08b8a271a65b44953c22cc5e76f98feb7e193ed85f9039a16d2f31c2c96841a403e547"]}, @devid=r5}) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {r7, r8/1000+60000}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff, 0x0, r3}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000480)=@mmap={0x0, 0x3, 0x4, 0x800, 0xadfa, {0x0, 0xea60}, {0x5, 0x0, 0x1, 0x9, 0x5, 0x3f, "6ea1c91c"}, 0x1, 0x1, {}, 0x2, 0x0, r9}) r10 = getuid() r11 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r10, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r11, 0xffffffffffffffff, 0x20}) r12 = getgid() r13 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r10, 0xee01, r10, r12, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r11, r13, 0xf001}) r14 = syz_open_procfs(r11, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r14, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r14, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) 18:11:30 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) (async) socket$unix(0x1, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0080) r1 = getuid() (async) r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) (async) r3 = getgid() r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') getpid() (async) ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) r6 = userfaultfd(0x80000) (async) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) 18:11:30 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) (async) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) 18:11:30 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) 18:11:30 executing program 5: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r0 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) r1 = getgid() r2 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r1, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, r2, 0xf001}) r3 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r3, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000940)) r4 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000f40)={{r3}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a0000000000000007000000000000008100000000000000080000000000000006000000000000000500000000000000ff00000000000000000000001c0000000300000000000000010001000000000005000000000000005e14000000000000f9ffffffffffffff07000000000000000300000000000000030000000000000001000000000000000300000000000000c5e128ede2ebcbee08b8a271a65b44953c22cc5e76f98feb7e193ed85f9039a16d2f31c2c96841a403e547"]}, @devid=r5}) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {r7, r8/1000+60000}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff, 0x0, r3}) 18:11:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') r1 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x800, 0x0) (async, rerun: 32) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000a00)={0x58, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000840)={@fd={0x66642a85, 0x0, r2}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/241, 0xf1, 0x1, 0x10}}, &(0x7f00000008c0)={0x0, 0x18, 0x30}}}, @acquire={0x40046305, 0x1}, @free_buffer={0x40086303, r1}], 0x50, 0x0, &(0x7f0000000980)="55faa98497d08eef9c835b5b6f8a62001c90429f24038f5fb78bb66b9269be61b51f0687dedbdef4f93e21e2578dab5b185c498b6b86c94d0ac6d0fadc4531ee677aec2d75c4cc13206888362e36e6a9"}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000700)={0x128, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x100, 0x2}, @flat=@binder={0x73622a85, 0x0, 0x2}, @fda={0x66646185, 0x3, 0x2, 0x40}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x40}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000380)={@fd, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/211, 0xd3, 0x0, 0x9}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/223, 0xdf, 0x1, 0x21}}, &(0x7f0000000400)={0x0, 0x18, 0x40}}}, @dead_binder_done, @clear_death={0x400c630f, 0x1}, @register_looper, @release={0x40046306, 0x2}, @register_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x1}, @clear_death={0x400c630f, 0x3}], 0x7e, 0x0, &(0x7f0000000680)="d75ae6ab3bfbc716f3b057e4e9c6218ca9a881aa6706198462da99916f27e5c8fcb676b773705783b56124d42a1a4eb5b6971fc66b074e8534ca042c82c4e7f2ac28240e56758a94272dae8d8884ba8ff6ac5507b679de34bb2542a6f3cc9b982f62c777f31f249e8483154ad9d81fb9150497d2da0b83c92f35e69760da"}) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') ioctl$USBDEVFS_RELEASEINTERFACE(r5, 0x80045510, &(0x7f0000000040)=0x5) 18:11:30 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) (async) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) 18:11:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x6) 18:11:30 executing program 2: r0 = getuid() r1 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r1, 0xffffffffffffffff, 0x20}) r2 = getgid() r3 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r2, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r1, r3, 0xf001}) r4 = syz_open_procfs(r1, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000940)) r5 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000f40)={{r4}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r6}) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x610, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000051) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r7, 0xc0505350, &(0x7f0000000040)={{0x14}}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r7, 0x40505330, &(0x7f00000000c0)={{0x7c, 0x1}, {0x4, 0x9}, 0x6428, 0x5, 0x3a}) 18:11:30 executing program 5: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r0 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) r1 = getgid() r2 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r1, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, r2, 0xf001}) r3 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r3, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000940)) r4 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000f40)={{r3}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a0000000000000007000000000000008100000000000000080000000000000006000000000000000500000000000000ff00000000000000000000001c0000000300000000000000010001000000000005000000000000005e14000000000000f9ffffffffffffff07000000000000000300000000000000030000000000000001000000000000000300000000000000c5e128ede2ebcbee08b8a271a65b44953c22cc5e76f98feb7e193ed85f9039a16d2f31c2c96841a403e547"]}, @devid=r5}) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff, 0x0, r3}) 18:11:30 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) 18:11:30 executing program 5: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r0 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) r1 = getgid() r2 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r1, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, r2, 0xf001}) r3 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r3, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000940)) r4 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000f40)={{r3}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a0000000000000007000000000000008100000000000000080000000000000006000000000000000500000000000000ff00000000000000000000001c0000000300000000000000010001000000000005000000000000005e14000000000000f9ffffffffffffff07000000000000000300000000000000030000000000000001000000000000000300000000000000c5e128ede2ebcbee08b8a271a65b44953c22cc5e76f98feb7e193ed85f9039a16d2f31c2c96841a403e547"]}, @devid=r5}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff, 0x0, r3}) 18:11:30 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r1 = getuid() r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) r3 = getgid() r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) r6 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000040)={0x2, 0x8, 0xffffffff, 0x4800}) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0xd500, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000000100)={0x3, @vbi={0x18, 0x27b, 0x9a7, 0x34324d59, [0x0, 0x8], [0x5, 0x9b], 0x139}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) 18:11:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') r1 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x800, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000a00)={0x58, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000840)={@fd={0x66642a85, 0x0, r2}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/241, 0xf1, 0x1, 0x10}}, &(0x7f00000008c0)={0x0, 0x18, 0x30}}}, @acquire={0x40046305, 0x1}, @free_buffer={0x40086303, r1}], 0x50, 0x0, &(0x7f0000000980)="55faa98497d08eef9c835b5b6f8a62001c90429f24038f5fb78bb66b9269be61b51f0687dedbdef4f93e21e2578dab5b185c498b6b86c94d0ac6d0fadc4531ee677aec2d75c4cc13206888362e36e6a9"}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000700)={0x128, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x100, 0x2}, @flat=@binder={0x73622a85, 0x0, 0x2}, @fda={0x66646185, 0x3, 0x2, 0x40}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x40}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000380)={@fd, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/211, 0xd3, 0x0, 0x9}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/223, 0xdf, 0x1, 0x21}}, &(0x7f0000000400)={0x0, 0x18, 0x40}}}, @dead_binder_done, @clear_death={0x400c630f, 0x1}, @register_looper, @release={0x40046306, 0x2}, @register_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x1}, @clear_death={0x400c630f, 0x3}], 0x7e, 0x0, &(0x7f0000000680)="d75ae6ab3bfbc716f3b057e4e9c6218ca9a881aa6706198462da99916f27e5c8fcb676b773705783b56124d42a1a4eb5b6971fc66b074e8534ca042c82c4e7f2ac28240e56758a94272dae8d8884ba8ff6ac5507b679de34bb2542a6f3cc9b982f62c777f31f249e8483154ad9d81fb9150497d2da0b83c92f35e69760da"}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') ioctl$USBDEVFS_RELEASEINTERFACE(r5, 0x80045510, &(0x7f0000000040)=0x5) 18:11:30 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r1 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) r2 = getgid() r3 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r2, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, r3, 0xf001}) r4 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000940)) r5 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000f40)={{r4}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a0000000000000007000000000000008100000000000000080000000000000006000000000000000500000000000000ff00000000000000000000001c0000000300000000000000010001000000000005000000000000005e14000000000000f9ffffffffffffff07000000000000000300000000000000030000000000000001000000000000000300000000000000c5e128ede2ebcbee08b8a271a65b44953c22cc5e76f98feb7e193ed85f9039a16d2f31c2c96841a403e547"]}, @devid=r6}) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {r8, r9/1000+60000}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff, 0x0, r4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000480)=@mmap={0x0, 0x3, 0x4, 0x800, 0xadfa, {0x0, 0xea60}, {0x5, 0x0, 0x1, 0x9, 0x5, 0x3f, "6ea1c91c"}, 0x1, 0x1, {}, 0x2, 0x0, r10}) r11 = getuid() r12 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r11, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r12, 0xffffffffffffffff, 0x20}) r13 = getgid() r14 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r11, 0xee01, r11, r13, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r12, r14, 0xf001}) r15 = syz_open_procfs(r12, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r15, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r15, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r15, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$vim2m_VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000100)={0x3, @win={{0x2a, 0x7f, 0x9, 0x4}, 0x3, 0x4, &(0x7f0000000540)={{0xa20, 0x5, 0xfffffff7, 0x4}, &(0x7f0000000500)={{0x1000, 0x4, 0x10000, 0xefc5}, &(0x7f0000000080)={{0x138, 0x4, 0x6, 0x81}}}}, 0x0, &(0x7f0000000580)="935cdf6318e9fdd60478cce11e078500d4e5a958485dab623706d01786454621f24dfa38545f0e847acf78a11fb67a39ed02e4b23d5d7f6bc4cf928a740566", 0x9}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) 18:11:30 executing program 2: r0 = getuid() (async) r1 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r1, 0xffffffffffffffff, 0x20}) (async, rerun: 32) r2 = getgid() (async, rerun: 32) r3 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r2, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r1, r3, 0xf001}) r4 = syz_open_procfs(r1, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000940)) (async) r5 = userfaultfd(0x80000) (async) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000f40)={{r4}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r6}) (async) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x610, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000051) (async) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r7, 0xc0505350, &(0x7f0000000040)={{0x14}}) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r7, 0x40505330, &(0x7f00000000c0)={{0x7c, 0x1}, {0x4, 0x9}, 0x6428, 0x5, 0x3a}) (rerun: 32) 18:11:30 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) r1 = getuid() r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) r3 = getgid() r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) r6 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000100)={0x1, @sdr={0x3090c0a, 0x8}}) 18:11:30 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000400), 0x0, 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000440)={0x3, 0x20, 0x2, 0x80080}) r1 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8000000000000000) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000000)={0x10, 0x5, {0x8000000000000001, @usage=0xffffffffffffcfff, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, 0x40, @usage=0x5, 0x0, 0x7, [0x0, 0x1, 0x80000001, 0x4412, 0x9, 0x3]}, {0x7, @usage=0xffffffff, 0x0, 0x3, 0x0, 0xff, 0x0, 0x5, 0x244, @usage=0x5a00000, 0x9, 0x7f, [0xfffffffffffffffb, 0x4, 0x9, 0x1, 0x9, 0x1ff]}, {0x2737, @struct={0x45, 0x1000}, 0x0, 0x43, 0xffffffff, 0x2e6e, 0x80000000, 0x5, 0x1, @usage=0x40, 0x2, 0x7fffffff, [0x401, 0xfffffffffffffff9, 0xf63, 0xfc9, 0x0, 0x1]}, {0x7, 0x805e, 0x4}}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000680)={0x1, 0x156d, @start={r2, 0x0, "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", "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"}, [0x7, 0x80000001, 0x10001, 0x7fffffffffffffff, 0x7, 0x7, 0x2, 0x5, 0x9, 0xcf, 0x6, 0x4, 0x8, 0x3, 0xf7, 0x200, 0x8, 0x1d3d, 0x2, 0xb126, 0xf86, 0x800000000010000, 0x2, 0x1000, 0x1, 0x7f, 0x2, 0xffffffffffffffff, 0x1, 0x6, 0xc5a1, 0x2, 0xfffffffffffffff9, 0x5, 0x9, 0xfffffffffffffff7, 0x7, 0x4, 0x3f, 0x8, 0xdbd, 0x9, 0x1, 0x6, 0x1ff, 0x3cf, 0x8000, 0xc38, 0x16, 0x4, 0x9, 0x0, 0x2c94, 0x8000000000000000, 0xffffffffffff8001, 0x7, 0x800, 0x3, 0x8, 0x0, 0x20, 0x7fffffff, 0x10001, 0xc7]}) 18:11:30 executing program 5: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r0 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) r1 = getgid() r2 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r1, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, r2, 0xf001}) r3 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r3, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000940)) r4 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000f40)={{r3}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a0000000000000007000000000000008100000000000000080000000000000006000000000000000500000000000000ff00000000000000000000001c0000000300000000000000010001000000000005000000000000005e14000000000000f9ffffffffffffff07000000000000000300000000000000030000000000000001000000000000000300000000000000c5e128ede2ebcbee08b8a271a65b44953c22cc5e76f98feb7e193ed85f9039a16d2f31c2c96841a403e547"]}, @devid=r5}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff, 0x0, r3}) 18:11:30 executing program 0: r0 = getuid() r1 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r1, 0xffffffffffffffff, 0x20}) r2 = getgid() r3 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r2, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r1, r3, 0xf001}) r4 = syz_open_procfs(r1, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000940)) r5 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000f40)={{r4}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r6}) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x610, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000051) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r7, 0xc0505350, &(0x7f0000000040)={{0x14}}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r7, 0x40505330, &(0x7f00000000c0)={{0x7c, 0x1}, {0x4, 0x9}, 0x6428, 0x5, 0x3a}) 18:11:30 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r1 = getuid() r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) r3 = getgid() r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) r6 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000040)={0x2, 0x8, 0xffffffff, 0x4800}) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0xd500, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000000100)={0x3, @vbi={0x18, 0x27b, 0x9a7, 0x34324d59, [0x0, 0x8], [0x5, 0x9b], 0x139}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) (async) getuid() (async) getpid() (async) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) (async) getgid() (async) getpid() (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) (async) syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') (async) ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) (async) userfaultfd(0x80000) (async) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000040)={0x2, 0x8, 0xffffffff, 0x4800}) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0xd500, 0x2) (async) ioctl$vim2m_VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000000100)={0x3, @vbi={0x18, 0x27b, 0x9a7, 0x34324d59, [0x0, 0x8], [0x5, 0x9b], 0x139}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) (async) 18:11:30 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) r1 = getuid() (async) r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) r3 = getgid() (async) r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) (async) r6 = userfaultfd(0x80000) (async, rerun: 32) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) (rerun: 32) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000100)={0x1, @sdr={0x3090c0a, 0x8}}) 18:11:30 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000400), 0x0, 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000440)={0x3, 0x20, 0x2, 0x80080}) r1 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8000000000000000) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000000)={0x10, 0x5, {0x8000000000000001, @usage=0xffffffffffffcfff, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, 0x40, @usage=0x5, 0x0, 0x7, [0x0, 0x1, 0x80000001, 0x4412, 0x9, 0x3]}, {0x7, @usage=0xffffffff, 0x0, 0x3, 0x0, 0xff, 0x0, 0x5, 0x244, @usage=0x5a00000, 0x9, 0x7f, [0xfffffffffffffffb, 0x4, 0x9, 0x1, 0x9, 0x1ff]}, {0x2737, @struct={0x45, 0x1000}, 0x0, 0x43, 0xffffffff, 0x2e6e, 0x80000000, 0x5, 0x1, @usage=0x40, 0x2, 0x7fffffff, [0x401, 0xfffffffffffffff9, 0xf63, 0xfc9, 0x0, 0x1]}, {0x7, 0x805e, 0x4}}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000680)={0x1, 0x156d, @start={r2, 0x0, "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", "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"}, [0x7, 0x80000001, 0x10001, 0x7fffffffffffffff, 0x7, 0x7, 0x2, 0x5, 0x9, 0xcf, 0x6, 0x4, 0x8, 0x3, 0xf7, 0x200, 0x8, 0x1d3d, 0x2, 0xb126, 0xf86, 0x800000000010000, 0x2, 0x1000, 0x1, 0x7f, 0x2, 0xffffffffffffffff, 0x1, 0x6, 0xc5a1, 0x2, 0xfffffffffffffff9, 0x5, 0x9, 0xfffffffffffffff7, 0x7, 0x4, 0x3f, 0x8, 0xdbd, 0x9, 0x1, 0x6, 0x1ff, 0x3cf, 0x8000, 0xc38, 0x16, 0x4, 0x9, 0x0, 0x2c94, 0x8000000000000000, 0xffffffffffff8001, 0x7, 0x800, 0x3, 0x8, 0x0, 0x20, 0x7fffffff, 0x10001, 0xc7]}) 18:11:30 executing program 2: r0 = getuid() r1 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r1, 0xffffffffffffffff, 0x20}) r2 = getgid() r3 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r2, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r1, r3, 0xf001}) r4 = syz_open_procfs(r1, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000940)) r5 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000f40)={{r4}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r6}) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x610, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000051) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r7, 0xc0505350, &(0x7f0000000040)={{0x14}}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r7, 0x40505330, &(0x7f00000000c0)={{0x7c, 0x1}, {0x4, 0x9}, 0x6428, 0x5, 0x3a}) getuid() (async) getpid() (async) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r1, 0xffffffffffffffff, 0x20}) (async) getgid() (async) getpid() (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r2, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r1, r3, 0xf001}) (async) syz_open_procfs(r1, &(0x7f00000008c0)='net/ip_mr_vif\x00') (async) ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000900)) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000940)) (async) userfaultfd(0x80000) (async) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000f40)={{r4}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r6}) (async) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x610, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000051) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r7, 0xc0505350, &(0x7f0000000040)={{0x14}}) (async) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r7, 0x40505330, &(0x7f00000000c0)={{0x7c, 0x1}, {0x4, 0x9}, 0x6428, 0x5, 0x3a}) (async) 18:11:30 executing program 0: r0 = getuid() r1 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r1, 0xffffffffffffffff, 0x20}) r2 = getgid() r3 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r2, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r1, r3, 0xf001}) r4 = syz_open_procfs(r1, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000940)) r5 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000f40)={{r4}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r6}) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x610, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000051) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r7, 0xc0505350, &(0x7f0000000040)={{0x14}}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r7, 0x40505330, &(0x7f00000000c0)={{0x7c, 0x1}, {0x4, 0x9}, 0x6428, 0x5, 0x3a}) 18:11:30 executing program 5: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r0 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) r1 = getgid() r2 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r1, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, r2, 0xf001}) r3 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r3, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000940)) r4 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000f40)={{r3}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a0000000000000007000000000000008100000000000000080000000000000006000000000000000500000000000000ff00000000000000000000001c0000000300000000000000010001000000000005000000000000005e14000000000000f9ffffffffffffff07000000000000000300000000000000030000000000000001000000000000000300000000000000c5e128ede2ebcbee08b8a271a65b44953c22cc5e76f98feb7e193ed85f9039a16d2f31c2c96841a403e547"]}, @devid=r5}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff, 0x0, r3}) 18:11:30 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r1 = getuid() r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) r3 = getgid() r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) r6 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000040)={0x2, 0x8, 0xffffffff, 0x4800}) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0xd500, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000000100)={0x3, @vbi={0x18, 0x27b, 0x9a7, 0x34324d59, [0x0, 0x8], [0x5, 0x9b], 0x139}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) (async) getuid() (async) getpid() (async) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) (async) getgid() (async) getpid() (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) (async) syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') (async) ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) (async) userfaultfd(0x80000) (async) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000040)={0x2, 0x8, 0xffffffff, 0x4800}) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0xd500, 0x2) (async) ioctl$vim2m_VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000000100)={0x3, @vbi={0x18, 0x27b, 0x9a7, 0x34324d59, [0x0, 0x8], [0x5, 0x9b], 0x139}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) (async) 18:11:30 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000000c0)={0x0, 0x1, 0x7}) 18:11:30 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000400), 0x0, 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000440)={0x3, 0x20, 0x2, 0x80080}) r1 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8000000000000000) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000000)={0x10, 0x5, {0x8000000000000001, @usage=0xffffffffffffcfff, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, 0x40, @usage=0x5, 0x0, 0x7, [0x0, 0x1, 0x80000001, 0x4412, 0x9, 0x3]}, {0x7, @usage=0xffffffff, 0x0, 0x3, 0x0, 0xff, 0x0, 0x5, 0x244, @usage=0x5a00000, 0x9, 0x7f, [0xfffffffffffffffb, 0x4, 0x9, 0x1, 0x9, 0x1ff]}, {0x2737, @struct={0x45, 0x1000}, 0x0, 0x43, 0xffffffff, 0x2e6e, 0x80000000, 0x5, 0x1, @usage=0x40, 0x2, 0x7fffffff, [0x401, 0xfffffffffffffff9, 0xf63, 0xfc9, 0x0, 0x1]}, {0x7, 0x805e, 0x4}}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000680)={0x1, 0x156d, @start={r2, 0x0, "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", "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"}, [0x7, 0x80000001, 0x10001, 0x7fffffffffffffff, 0x7, 0x7, 0x2, 0x5, 0x9, 0xcf, 0x6, 0x4, 0x8, 0x3, 0xf7, 0x200, 0x8, 0x1d3d, 0x2, 0xb126, 0xf86, 0x800000000010000, 0x2, 0x1000, 0x1, 0x7f, 0x2, 0xffffffffffffffff, 0x1, 0x6, 0xc5a1, 0x2, 0xfffffffffffffff9, 0x5, 0x9, 0xfffffffffffffff7, 0x7, 0x4, 0x3f, 0x8, 0xdbd, 0x9, 0x1, 0x6, 0x1ff, 0x3cf, 0x8000, 0xc38, 0x16, 0x4, 0x9, 0x0, 0x2c94, 0x8000000000000000, 0xffffffffffff8001, 0x7, 0x800, 0x3, 0x8, 0x0, 0x20, 0x7fffffff, 0x10001, 0xc7]}) syz_open_dev$swradio(&(0x7f0000000400), 0x0, 0x2) (async) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000440)={0x3, 0x20, 0x2, 0x80080}) (async) syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8000000000000000) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000000)={0x10, 0x5, {0x8000000000000001, @usage=0xffffffffffffcfff, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, 0x40, @usage=0x5, 0x0, 0x7, [0x0, 0x1, 0x80000001, 0x4412, 0x9, 0x3]}, {0x7, @usage=0xffffffff, 0x0, 0x3, 0x0, 0xff, 0x0, 0x5, 0x244, @usage=0x5a00000, 0x9, 0x7f, [0xfffffffffffffffb, 0x4, 0x9, 0x1, 0x9, 0x1ff]}, {0x2737, @struct={0x45, 0x1000}, 0x0, 0x43, 0xffffffff, 0x2e6e, 0x80000000, 0x5, 0x1, @usage=0x40, 0x2, 0x7fffffff, [0x401, 0xfffffffffffffff9, 0xf63, 0xfc9, 0x0, 0x1]}, {0x7, 0x805e, 0x4}}) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000680)={0x1, 0x156d, @start={r2, 0x0, "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", "2edd3fd95bfd833f77510fe34d5cac14a4ba135d0927200d0e2160344b0e5cb3451dc5b45478b282e2e27195007fcf0042de30d492901afdfd94f7f8c58536b30e5fdfd794e79de908d2c50f2322ab1ab95497096bfe6bf375ed5feaf0d2dab0b9be806e5bf689a8e45fb866a818fa4b5dc0a20fdf0034752f82eb172c3317dbdd39fe2b891ae8db0cee89583bb875bb48d557641b76c17c65e88b6002686c36d95a910b9b14a78428d131296d20c96135fd047c6c80f87d4461786b68225b3458189d98b057b803e674e74c119d97812ab10db866e86f64d65a9d8ef08db40eed9bbd98171e42f817145b4399f49277051468636d59cbc95af7a290445c8ba349fd4654feb19be04d9e05420e5179e8fd7c26a65a85880fc9b3ccacf0c87671f6a102d245004eeac7ec86128507b03d902e598ab134fba577c727f0fc9398f1bca81a9fb95c945d7d45082c7e86e7a301dfc1052fea490dac87f2f8a94eab9422dacf67e9f2078b867f8182bf2642a4e6956725e9a2bc35b0ef5f2b3ce03015aef9a19d7aff723425307d8cf086f18fd600fc9066b051158569f9562133ef494f1f94ca363c0feab5f56d95f2ab495131f574addf1c89124ee7738fdde36c60c13a9586661a760eb987044fe2ab4fd606a4c5845dc3c79a2375daa4011bef95d01a4c04ca9bed7ecd3b85d967c36596eccd29a5820a166992868be21f0e7a3a0b52a1e6a0013cc3df27efaf48b7a8b6ffc965d1b042f7bfe3b7202b2a473fb5e9bd803241a69bbfcc335e4142e2ef87600876588aaaba8891e809a313d72013d71ea1fa28af196cef9500081b964014463150f34aa5d495ebb660fa0276b7168141b91d02b32ac15ebc6b405555634f4f3537d88e0a0015ace7b3cd901cd988c1ac4abb9d9b259e1721855fab0ce072f3dfcd342d95fc70c81c294211263900eeb5d7917803995ae84b791c79cc4da99de728ffc8a12f85d715df5d68cc5b0210b264d0a369c46d72074d1ba7d72fca21644a74879b8fa590a59e3182f9872c0f05cf4f9e469fd389acce165c77d7386a277f687a8c175266589b8841d3f93ef07dd8c5b92a8f3e3bc3aff902e96faf380fce0d67997e8124589358d2a4eb00cf9d6215286846de33ca0331c9c1c86967f776e61bb10b721a6ac24ecff6f1dd231da18d77cca2d19ded2ba398a54f262740810f54f378736492264564a63a89128d854fa4e5852133f1f86e4b7b5fb593a7e713a28ac2f3752a685b08cbc759f151087dd8ddf4c70133f938d541596ab61b36fbf099419d663f1182f343fd9c1b0e7e8790c2f279b5d149a7c9f9ca3bdfb0ba077bc11046e2db44226b24616f836c4e12f1cf2cb50459979e83ab71429877d74d735f9e745cd1338afcd7eddec4c301c473facfb5d60d318fb774895d2c0c963500ef5b253c8303ef494cc02657"}, [0x7, 0x80000001, 0x10001, 0x7fffffffffffffff, 0x7, 0x7, 0x2, 0x5, 0x9, 0xcf, 0x6, 0x4, 0x8, 0x3, 0xf7, 0x200, 0x8, 0x1d3d, 0x2, 0xb126, 0xf86, 0x800000000010000, 0x2, 0x1000, 0x1, 0x7f, 0x2, 0xffffffffffffffff, 0x1, 0x6, 0xc5a1, 0x2, 0xfffffffffffffff9, 0x5, 0x9, 0xfffffffffffffff7, 0x7, 0x4, 0x3f, 0x8, 0xdbd, 0x9, 0x1, 0x6, 0x1ff, 0x3cf, 0x8000, 0xc38, 0x16, 0x4, 0x9, 0x0, 0x2c94, 0x8000000000000000, 0xffffffffffff8001, 0x7, 0x800, 0x3, 0x8, 0x0, 0x20, 0x7fffffff, 0x10001, 0xc7]}) (async) 18:11:30 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) r1 = getuid() r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) r3 = getgid() r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) r6 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000100)={0x1, @sdr={0x3090c0a, 0x8}}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) (async) getuid() (async) getpid() (async) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) (async) getgid() (async) getpid() (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) (async) syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') (async) ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) (async) userfaultfd(0x80000) (async) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000100)={0x1, @sdr={0x3090c0a, 0x8}}) (async) 18:11:30 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000a80)={{0x0, 0x1, 0x0, 0x6ac, 0x40, 0x4, 0x9855, 0x4, 0x1, 0x90, 0x9, 0x101, 0x8000000000000001, 0x82bb, 0x400}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000b40)={{r1, 0x7cb7, 0x1, 0x4, 0x1de, 0x2, 0x7, 0x800, 0x7, 0x1f, 0x27a, 0x6, 0x7, 0x1, 0x2}}) close$fd_v4l2_buffer(r0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') close$fd_v4l2_buffer(r0) 18:11:30 executing program 1: bind$isdn_base(0xffffffffffffffff, &(0x7f0000000000)={0x22, 0x40, 0x80, 0x9, 0x1}, 0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) 18:11:30 executing program 5: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r0 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) r1 = getgid() r2 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r1, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, r2, 0xf001}) r3 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r3, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff, 0x0, r3}) 18:11:30 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) (async) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000000c0)={0x0, 0x1, 0x7}) 18:11:30 executing program 4: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000480)={0x0, "a4816374f53d3bc16498c1a361796e11"}) 18:11:30 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x64da, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000480)={{r1}, 0x0, 0x1c, @unused=[0x13, 0x8, 0x1f, 0x6], @name="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"}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x800, 0x1, 0x1, "b414d7f73fd36442baa62084332298391e8b2a0cd4727492d9a099c4fb1e0143", 0x33524742}) r2 = getuid() r3 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r2, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r3, 0xffffffffffffffff, 0x20}) r4 = getgid() r5 = getpid() r6 = getuid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r2, 0xee01, r6, r4, 0x122, 0x83}, 0x2, 0x1, 0x1, 0x200, r3, r5, 0xf001}) r7 = syz_open_procfs(r3, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) read$msr(r7, &(0x7f0000000080)=""/247, 0xf7) 18:11:30 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000100)={0x0, 0x4e8, 0x9}) 18:11:30 executing program 1: bind$isdn_base(0xffffffffffffffff, &(0x7f0000000000)={0x22, 0x40, 0x80, 0x9, 0x1}, 0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000000)={0x22, 0x40, 0x80, 0x9, 0x1}, 0x6) (async) syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) (async) 18:11:30 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000000c0)={0x0, 0x1, 0x7}) (async) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000000c0)={0x0, 0x1, 0x7}) 18:11:30 executing program 4: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000480)={0x0, "a4816374f53d3bc16498c1a361796e11"}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000480)={0x0, "a4816374f53d3bc16498c1a361796e11"}) (async) 18:11:30 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000100)={0x0, 0x4e8, 0x9}) 18:11:30 executing program 5: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r0 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) r1 = getgid() r2 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r1, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, r2, 0xf001}) r3 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r3, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff, 0x0, r3}) 18:11:30 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000a80)={{0x0, 0x1, 0x0, 0x6ac, 0x40, 0x4, 0x9855, 0x4, 0x1, 0x90, 0x9, 0x101, 0x8000000000000001, 0x82bb, 0x400}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000b40)={{r1, 0x7cb7, 0x1, 0x4, 0x1de, 0x2, 0x7, 0x800, 0x7, 0x1f, 0x27a, 0x6, 0x7, 0x1, 0x2}}) close$fd_v4l2_buffer(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x1f80, 0x1f, 0x10001, {0x80000001, 0x1}, 0x4, 0x800}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000040)={0x6, 0x8, 0x0, {0x5, 0x6}, 0x7ff, 0x8}) close$fd_v4l2_buffer(r0) 18:11:30 executing program 4: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000480)={0x0, "a4816374f53d3bc16498c1a361796e11"}) 18:11:30 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000100)={0x0, 0x4e8, 0x9}) 18:11:30 executing program 1: bind$isdn_base(0xffffffffffffffff, &(0x7f0000000000)={0x22, 0x40, 0x80, 0x9, 0x1}, 0x6) (async) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000000)={0x22, 0x40, 0x80, 0x9, 0x1}, 0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) 18:11:30 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f00000000c0)={0xffffffff, 0x10001, 0x2, 0xb3d, 0x10000, 0x1ff}) 18:11:30 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000a80)={{0x0, 0x1, 0x0, 0x6ac, 0x40, 0x4, 0x9855, 0x4, 0x1, 0x90, 0x9, 0x101, 0x8000000000000001, 0x82bb, 0x400}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000b40)={{r1, 0x7cb7, 0x1, 0x4, 0x1de, 0x2, 0x7, 0x800, 0x7, 0x1f, 0x27a, 0x6, 0x7, 0x1, 0x2}}) close$fd_v4l2_buffer(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x1f80, 0x1f, 0x10001, {0x80000001, 0x1}, 0x4, 0x800}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000040)={0x6, 0x8, 0x0, {0x5, 0x6}, 0x7ff, 0x8}) close$fd_v4l2_buffer(r0) 18:11:30 executing program 5: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r0 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) r1 = getgid() r2 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r1, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, r2, 0xf001}) r3 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r3, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000940)) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff, 0x0, r3}) 18:11:30 executing program 4: r0 = getuid() r1 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r1, 0xffffffffffffffff, 0x20}) r2 = getgid() r3 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r2, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r1, r3, 0xf001}) r4 = syz_open_procfs(r1, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000940)) r5 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000f40)={{r4}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r6}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x0, 0x200, 0x20, 0x1090, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4, 0xd}, 0x48) r8 = getuid() r9 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r8, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r9, 0xffffffffffffffff, 0x20}) r10 = getgid() r11 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r8, 0xee01, r8, r10, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r9, r11, 0xf001}) r12 = syz_open_procfs(r9, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r12, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r12, 0x80045301, &(0x7f0000000940)) r13 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r12, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r13, 0x50009417, &(0x7f0000000f40)={{r12}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r14}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0xfffffff7}, [@jmp={0x5, 0x0, 0x8, 0x5, 0x5, 0x6, 0xfffffffffffffff0}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}]}, &(0x7f0000000040)='syzkaller\x00', 0x7ff, 0xf5, &(0x7f0000000200)=""/245, 0x41000, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x7, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r7, r12]}, 0x80) r15 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r15, 0xc0d05640, &(0x7f0000000100)={0x0, @vbi={0x9, 0x1000, 0x7, 0x75630305, [0x5], [0x6, 0x1], 0x13b}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r15, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) 18:11:30 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) r1 = openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x74, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x2}, @dead_binder_done, @request_death={0x400c630e, 0x3}, @decrefs={0x40046307, 0x2}, @release, @acquire_done={0x40106309, 0x3}, @release={0x40046306, 0x2}, @increfs_done={0x40106308, 0x2}, @increfs], 0xc, 0x0, &(0x7f0000000100)="c5e8c947033485d8094e5d3a"}) openat$cgroup_devices(r1, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) 18:11:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x6) 18:11:30 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f00000000c0)={0xffffffff, 0x10001, 0x2, 0xb3d, 0x10000, 0x1ff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f00000000c0)={0xffffffff, 0x10001, 0x2, 0xb3d, 0x10000, 0x1ff}) (async) 18:11:31 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000a80)={{0x0, 0x1, 0x0, 0x6ac, 0x40, 0x4, 0x9855, 0x4, 0x1, 0x90, 0x9, 0x101, 0x8000000000000001, 0x82bb, 0x400}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000b40)={{r1, 0x7cb7, 0x1, 0x4, 0x1de, 0x2, 0x7, 0x800, 0x7, 0x1f, 0x27a, 0x6, 0x7, 0x1, 0x2}}) close$fd_v4l2_buffer(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x1f80, 0x1f, 0x10001, {0x80000001, 0x1}, 0x4, 0x800}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000040)={0x6, 0x8, 0x0, {0x5, 0x6}, 0x7ff, 0x8}) close$fd_v4l2_buffer(r0) 18:11:31 executing program 5: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r0 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) r1 = getgid() r2 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r1, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, r2, 0xf001}) r3 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r3, 0x8004551a, &(0x7f0000000900)) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff, 0x0, r3}) 18:11:31 executing program 4: r0 = getuid() r1 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r1, 0xffffffffffffffff, 0x20}) (async) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r1, 0xffffffffffffffff, 0x20}) getgid() (async) r2 = getgid() r3 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r2, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r1, r3, 0xf001}) (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r2, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r1, r3, 0xf001}) syz_open_procfs(r1, &(0x7f00000008c0)='net/ip_mr_vif\x00') (async) r4 = syz_open_procfs(r1, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000940)) r5 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000f40)={{r4}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r6}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x0, 0x200, 0x20, 0x1090, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4, 0xd}, 0x48) r8 = getuid() r9 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r8, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r9, 0xffffffffffffffff, 0x20}) getgid() (async) r10 = getgid() r11 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r8, 0xee01, r8, r10, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r9, r11, 0xf001}) syz_open_procfs(r9, &(0x7f00000008c0)='net/ip_mr_vif\x00') (async) r12 = syz_open_procfs(r9, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r12, 0x8004551a, &(0x7f0000000900)) (async) ioctl$USBDEVFS_GET_CAPABILITIES(r12, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r12, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) (async) r13 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r12, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) (async) ioctl$BTRFS_IOC_SCRUB(r12, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r13, 0x50009417, &(0x7f0000000f40)={{r12}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r14}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0xfffffff7}, [@jmp={0x5, 0x0, 0x8, 0x5, 0x5, 0x6, 0xfffffffffffffff0}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}]}, &(0x7f0000000040)='syzkaller\x00', 0x7ff, 0xf5, &(0x7f0000000200)=""/245, 0x41000, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x7, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r7, r12]}, 0x80) r15 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r15, 0xc0d05640, &(0x7f0000000100)={0x0, @vbi={0x9, 0x1000, 0x7, 0x75630305, [0x5], [0x6, 0x1], 0x13b}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r15, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) 18:11:31 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000a80)={{0x0, 0x1, 0x0, 0x6ac, 0x40, 0x4, 0x9855, 0x4, 0x1, 0x90, 0x9, 0x101, 0x8000000000000001, 0x82bb, 0x400}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000b40)={{r1, 0x7cb7, 0x1, 0x4, 0x1de, 0x2, 0x7, 0x800, 0x7, 0x1f, 0x27a, 0x6, 0x7, 0x1, 0x2}}) close$fd_v4l2_buffer(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x1f80, 0x1f, 0x10001, {0x80000001, 0x1}, 0x4, 0x800}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000040)={0x6, 0x8, 0x0, {0x5, 0x6}, 0x7ff, 0x8}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') openat$cgroup_ro(r2, &(0x7f0000000580)='freezer.state\x00', 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f00000005c0)={0x80000000, 0x0, 0x7fffffff, {0x6e3, 0x7}, 0x0, 0x3}) close$fd_v4l2_buffer(r0) 18:11:31 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x6) syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') (async) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x6) (async) 18:11:31 executing program 5: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r0 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) r1 = getgid() r2 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r1, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, r2, 0xf001}) r3 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/ip_mr_vif\x00') r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff, 0x0, r3}) 18:11:31 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000a80)={{0x0, 0x1, 0x0, 0x6ac, 0x40, 0x4, 0x9855, 0x4, 0x1, 0x90, 0x9, 0x101, 0x8000000000000001, 0x82bb, 0x400}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000b40)={{r1, 0x7cb7, 0x1, 0x4, 0x1de, 0x2, 0x7, 0x800, 0x7, 0x1f, 0x27a, 0x6, 0x7, 0x1, 0x2}}) close$fd_v4l2_buffer(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x1f80, 0x1f, 0x10001, {0x80000001, 0x1}, 0x4, 0x800}) close$fd_v4l2_buffer(r0) 18:11:31 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x14}}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f00000000c0)={0xffffffff, 0x10001, 0x2, 0xb3d, 0x10000, 0x1ff}) 18:11:31 executing program 4: r0 = getuid() r1 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r1, 0xffffffffffffffff, 0x20}) (async) r2 = getgid() (async) r3 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r2, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r1, r3, 0xf001}) (async) r4 = syz_open_procfs(r1, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000900)) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000940)) (async) r5 = userfaultfd(0x80000) (async) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000f40)={{r4}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r6}) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x0, 0x200, 0x20, 0x1090, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4, 0xd}, 0x48) (async) r8 = getuid() (async) r9 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r8, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r9, 0xffffffffffffffff, 0x20}) (async) r10 = getgid() (async) r11 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r8, 0xee01, r8, r10, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r9, r11, 0xf001}) r12 = syz_open_procfs(r9, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r12, 0x8004551a, &(0x7f0000000900)) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r12, 0x80045301, &(0x7f0000000940)) (async) r13 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r12, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r13, 0x50009417, &(0x7f0000000f40)={{r12}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r14}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0xfffffff7}, [@jmp={0x5, 0x0, 0x8, 0x5, 0x5, 0x6, 0xfffffffffffffff0}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}]}, &(0x7f0000000040)='syzkaller\x00', 0x7ff, 0xf5, &(0x7f0000000200)=""/245, 0x41000, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x7, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r7, r12]}, 0x80) (async) r15 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r15, 0xc0d05640, &(0x7f0000000100)={0x0, @vbi={0x9, 0x1000, 0x7, 0x75630305, [0x5], [0x6, 0x1], 0x13b}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r15, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) 18:11:31 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000a80)={{0x0, 0x1, 0x0, 0x6ac, 0x40, 0x4, 0x9855, 0x4, 0x1, 0x90, 0x9, 0x101, 0x8000000000000001, 0x82bb, 0x400}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000b40)={{r1, 0x7cb7, 0x1, 0x4, 0x1de, 0x2, 0x7, 0x800, 0x7, 0x1f, 0x27a, 0x6, 0x7, 0x1, 0x2}}) close$fd_v4l2_buffer(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x1f80, 0x1f, 0x10001, {0x80000001, 0x1}, 0x4, 0x800}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000040)={0x6, 0x8, 0x0, {0x5, 0x6}, 0x7ff, 0x8}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') openat$cgroup_ro(r2, &(0x7f0000000580)='freezer.state\x00', 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f00000005c0)={0x80000000, 0x0, 0x7fffffff, {0x6e3, 0x7}, 0x0, 0x3}) close$fd_v4l2_buffer(r0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000680)={0x0, 0x100, 0x2}) 18:11:31 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000a80)={{0x0, 0x1, 0x0, 0x6ac, 0x40, 0x4, 0x9855, 0x4, 0x1, 0x90, 0x9, 0x101, 0x8000000000000001, 0x82bb, 0x400}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000b40)={{r1, 0x7cb7, 0x1, 0x4, 0x1de, 0x2, 0x7, 0x800, 0x7, 0x1f, 0x27a, 0x6, 0x7, 0x1, 0x2}}) close$fd_v4l2_buffer(r0) close$fd_v4l2_buffer(r0) 18:11:31 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x6) 18:11:31 executing program 5: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r0 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) r1 = getgid() r2 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r0, 0xee01, r0, r1, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, r2, 0xf001}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff}) 18:11:31 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000a80)={{0x0, 0x1, 0x0, 0x6ac, 0x40, 0x4, 0x9855, 0x4, 0x1, 0x90, 0x9, 0x101, 0x8000000000000001, 0x82bb, 0x400}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000b40)={{r1, 0x7cb7, 0x1, 0x4, 0x1de, 0x2, 0x7, 0x800, 0x7, 0x1f, 0x27a, 0x6, 0x7, 0x1, 0x2}}) close$fd_v4l2_buffer(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x1f80, 0x1f, 0x10001, {0x80000001, 0x1}, 0x4, 0x800}) close$fd_v4l2_buffer(r0) 18:11:31 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) r1 = getuid() r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) r3 = getgid() r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) r6 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r10 = getuid() r11 = getpid() r12 = getgid() r13 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r10, 0xee01, r10, r12, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r11, r13, 0xf001}) r14 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x2, r1, r12, r1, r3, 0x18, 0x6}, 0x0, 0x9, 0x9, 0xdf, r2, r14, 0x8000}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000100)=@mmap={0xaa39, 0x2, 0x4, 0x2, 0x1, {r8, r9/1000+60000}, {0x5, 0x0, 0xff, 0x8, 0x0, 0x7, "04ca0091"}, 0x3ff, 0x1, {}, 0xfffffff9}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 18:11:31 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8000000000000000) 18:11:31 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0xc31ef82d5f16c9a, 0x0) read$usbfs(r0, &(0x7f0000000040)=""/165, 0xa5) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000002000002) 18:11:31 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000a80)={{0x0, 0x1, 0x0, 0x6ac, 0x40, 0x4, 0x9855, 0x4, 0x1, 0x90, 0x9, 0x101, 0x8000000000000001, 0x82bb, 0x400}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000b40)={{r1, 0x7cb7, 0x1, 0x4, 0x1de, 0x2, 0x7, 0x800, 0x7, 0x1f, 0x27a, 0x6, 0x7, 0x1, 0x2}}) close$fd_v4l2_buffer(r0) 18:11:31 executing program 2: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x400}, 0x3}, 0x1, 0x0, 0x0, 0x10}, 0x40800) 18:11:31 executing program 5: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r0 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) getgid() getpid() r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff}) 18:11:31 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) r1 = getuid() (async) r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) (async) r3 = getgid() (async) r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) (async) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) (async) r6 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r10 = getuid() r11 = getpid() (async) r12 = getgid() r13 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r10, 0xee01, r10, r12, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r11, r13, 0xf001}) r14 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x2, r1, r12, r1, r3, 0x18, 0x6}, 0x0, 0x9, 0x9, 0xdf, r2, r14, 0x8000}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000100)=@mmap={0xaa39, 0x2, 0x4, 0x2, 0x1, {r8, r9/1000+60000}, {0x5, 0x0, 0xff, 0x8, 0x0, 0x7, "04ca0091"}, 0x3ff, 0x1, {}, 0xfffffff9}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 18:11:31 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8000000000000000) 18:11:31 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) socket$inet(0x2, 0x6, 0x9) socket$inet(0x2, 0x2, 0x8001) 18:11:31 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000a80)={{0x0, 0x1, 0x0, 0x6ac, 0x40, 0x4, 0x9855, 0x4, 0x1, 0x90, 0x9, 0x101, 0x8000000000000001, 0x82bb, 0x400}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000b40)={{r1, 0x7cb7, 0x1, 0x4, 0x1de, 0x2, 0x7, 0x800, 0x7, 0x1f, 0x27a, 0x6, 0x7, 0x1, 0x2}}) close$fd_v4l2_buffer(r0) 18:11:31 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) (async, rerun: 32) r1 = getuid() (async, rerun: 32) r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) (async) r3 = getgid() (async) r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) (async) r6 = userfaultfd(0x80000) (async) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) (async, rerun: 64) r10 = getuid() (async, rerun: 64) r11 = getpid() (async, rerun: 32) r12 = getgid() (async, rerun: 32) r13 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r10, 0xee01, r10, r12, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r11, r13, 0xf001}) (async) r14 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x2, r1, r12, r1, r3, 0x18, 0x6}, 0x0, 0x9, 0x9, 0xdf, r2, r14, 0x8000}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000100)=@mmap={0xaa39, 0x2, 0x4, 0x2, 0x1, {r8, r9/1000+60000}, {0x5, 0x0, 0xff, 0x8, 0x0, 0x7, "04ca0091"}, 0x3ff, 0x1, {}, 0xfffffff9}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 18:11:31 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x800, 0x40) ioctl$SNDCTL_SEQ_NRSYNTHS(r1, 0x8004510a, &(0x7f0000000040)) r2 = getuid() r3 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r2, 0xee00, 0xee00, 0xee00, 0x20}, 0x7fff, 0x1, 0xe2071db, 0x10000, r3, 0xffffffffffffffff}) getgid() getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, 0x0, 0xee01, 0x0, 0x0, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, 0x0, 0xf001}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x400}, 0x3}, 0x1, 0x0, 0x0, 0x10}, 0x40800) 18:11:31 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000a80)={{0x0, 0x1, 0x0, 0x6ac, 0x40, 0x4, 0x9855, 0x4, 0x1, 0x90, 0x9, 0x101, 0x8000000000000001, 0x82bb, 0x400}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000b40)={{r1, 0x7cb7, 0x1, 0x4, 0x1de, 0x2, 0x7, 0x800, 0x7, 0x1f, 0x27a, 0x6, 0x7, 0x1, 0x2}}) close$fd_v4l2_buffer(r0) 18:11:31 executing program 5: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r0 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) getgid() r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff}) 18:11:31 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8000000000000000) 18:11:31 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000a80)={{0x0, 0x1, 0x0, 0x6ac, 0x40, 0x4, 0x9855, 0x4, 0x1, 0x90, 0x9, 0x101, 0x8000000000000001, 0x82bb, 0x400}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) close$fd_v4l2_buffer(r0) close$fd_v4l2_buffer(r0) 18:11:31 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) socket$inet(0x2, 0x6, 0x9) socket$inet(0x2, 0x2, 0x8001) 18:11:31 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) close$fd_v4l2_buffer(r0) close$fd_v4l2_buffer(r0) 18:11:31 executing program 4: r0 = shmget(0x3, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil) shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ffb000/0x2000)=nil) r1 = shmget(0x3, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil) shmctl$IPC_RMID(r1, 0x0) r2 = shmget(0x3, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil) shmctl$IPC_RMID(r2, 0x0) shmctl$IPC_RMID(r2, 0x0) shmctl$IPC_RMID(r0, 0x0) r3 = shmget(0x2, 0x2000, 0x2, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_RMID(r3, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) 18:11:31 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') r1 = getuid() r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) r3 = getgid() r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) r6 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) ioctl$USBDEVFS_RESET(r5, 0x5514) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) 18:11:31 executing program 4: r0 = shmget(0x3, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil) (async) shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ffb000/0x2000)=nil) (async) r1 = shmget(0x3, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil) shmctl$IPC_RMID(r1, 0x0) (async) r2 = shmget(0x3, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil) shmctl$IPC_RMID(r2, 0x0) (async) shmctl$IPC_RMID(r2, 0x0) shmctl$IPC_RMID(r0, 0x0) r3 = shmget(0x2, 0x2000, 0x2, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_RMID(r3, 0x0) (async) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) 18:11:31 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x246200) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='fdinfo\x00') r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x19, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x0, 0x9, 0x7, 0x0, 0x50, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0xee5, 0x0, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x21}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0xd0, &(0x7f0000000580)=""/208, 0x41100, 0x9, '\x00', 0x0, 0x14, r1, 0x8, &(0x7f0000000680)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x9, 0x3, 0x5}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000700)=[0x1, r1, r1, r1, r1, r1]}, 0x80) r3 = syz_open_dev$dmmidi(&(0x7f00000007c0), 0x70a, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000800)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 18:11:31 executing program 5: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r0 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff}) 18:11:31 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') (async, rerun: 64) r1 = getuid() (rerun: 64) r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) (async) r3 = getgid() (async) r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) (async, rerun: 32) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') (rerun: 32) ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) r6 = userfaultfd(0x80000) (async) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) ioctl$USBDEVFS_RESET(r5, 0x5514) (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) 18:11:31 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) socket$inet(0x2, 0x6, 0x9) socket$inet(0x2, 0x2, 0x8001) 18:11:31 executing program 4: r0 = shmget(0x3, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil) shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ffb000/0x2000)=nil) r1 = shmget(0x3, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil) shmctl$IPC_RMID(r1, 0x0) r2 = shmget(0x3, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil) shmctl$IPC_RMID(r2, 0x0) shmctl$IPC_RMID(r2, 0x0) shmctl$IPC_RMID(r0, 0x0) r3 = shmget(0x2, 0x2000, 0x2, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_RMID(r3, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) shmget(0x3, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil) (async) shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ffb000/0x2000)=nil) (async) shmget(0x3, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil) (async) shmctl$IPC_RMID(r1, 0x0) (async) shmget(0x3, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil) (async) shmctl$IPC_RMID(r2, 0x0) (async) shmctl$IPC_RMID(r2, 0x0) (async) shmctl$IPC_RMID(r0, 0x0) (async) shmget(0x2, 0x2000, 0x2, &(0x7f0000ffb000/0x2000)=nil) (async) shmctl$IPC_RMID(r3, 0x0) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) (async) 18:11:31 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') close$fd_v4l2_buffer(r0) close$fd_v4l2_buffer(r0) 18:11:31 executing program 5: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) getuid() r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff}) 18:11:31 executing program 5: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff}) 18:11:31 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x3) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x111401) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) syz_open_procfs(0x0, &(0x7f0000000280)='net/raw6\x00') r1 = socket$unix(0x1, 0x1, 0x0) r2 = getuid() r3 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r2, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r3, 0xffffffffffffffff, 0x20}) r4 = getgid() r5 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r2, 0xee01, r2, r4, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r3, r5, 0xf001}) r6 = syz_open_procfs(r3, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r6, 0x8004551a, &(0x7f0000000900)) ioctl$BTRFS_IOC_RESIZE(r6, 0x50009403, &(0x7f0000000180)={{}, {@void, @max}}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r6, 0x80045301, &(0x7f0000000940)) r7 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r7, 0x50009417, &(0x7f0000000f40)={{r6}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r8}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)=@fd={0x0, 0x2, 0x4, 0x2000, 0x8001, {0x77359400}, {0x1, 0xc, 0x2, 0x58, 0xfe, 0xe8, "18a689d9"}, 0x80000000, 0x4, {}, 0xffffffff, 0x0, r6}) 18:11:31 executing program 0: close$fd_v4l2_buffer(0xffffffffffffffff) close$fd_v4l2_buffer(0xffffffffffffffff) 18:11:31 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x246200) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='fdinfo\x00') r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x19, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x0, 0x9, 0x7, 0x0, 0x50, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0xee5, 0x0, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x21}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0xd0, &(0x7f0000000580)=""/208, 0x41100, 0x9, '\x00', 0x0, 0x14, r1, 0x8, &(0x7f0000000680)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x9, 0x3, 0x5}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000700)=[0x1, r1, r1, r1, r1, r1]}, 0x80) r3 = syz_open_dev$dmmidi(&(0x7f00000007c0), 0x70a, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000800)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 18:11:31 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') r1 = getuid() r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) (async) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) r3 = getgid() getpid() (async) r4 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, r1, r3, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r2, r4, 0xf001}) syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') (async) r5 = syz_open_procfs(r2, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) (async) r6 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000f40)={{r5}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r7}) ioctl$USBDEVFS_RESET(r5, 0x5514) (async) ioctl$USBDEVFS_RESET(r5, 0x5514) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) 18:11:31 executing program 0: close$fd_v4l2_buffer(0xffffffffffffffff) close$fd_v4l2_buffer(0xffffffffffffffff) 18:11:31 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) socket$inet(0x2, 0x6, 0x9) 18:11:31 executing program 1: syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') 18:11:31 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x3) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x111401) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) syz_open_procfs(0x0, &(0x7f0000000280)='net/raw6\x00') r1 = socket$unix(0x1, 0x1, 0x0) r2 = getuid() r3 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r2, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r3, 0xffffffffffffffff, 0x20}) r4 = getgid() r5 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r2, 0xee01, r2, r4, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r3, r5, 0xf001}) r6 = syz_open_procfs(r3, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r6, 0x8004551a, &(0x7f0000000900)) ioctl$BTRFS_IOC_RESIZE(r6, 0x50009403, &(0x7f0000000180)={{}, {@void, @max}}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r6, 0x80045301, &(0x7f0000000940)) r7 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r7, 0x50009417, &(0x7f0000000f40)={{r6}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r8}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)=@fd={0x0, 0x2, 0x4, 0x2000, 0x8001, {0x77359400}, {0x1, 0xc, 0x2, 0x58, 0xfe, 0xe8, "18a689d9"}, 0x80000000, 0x4, {}, 0xffffffff, 0x0, r6}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) (async) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x3) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x111401) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) (async) syz_open_procfs(0x0, &(0x7f0000000280)='net/raw6\x00') (async) socket$unix(0x1, 0x1, 0x0) (async) getuid() (async) getpid() (async) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r2, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r3, 0xffffffffffffffff, 0x20}) (async) getgid() (async) getpid() (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r2, 0xee01, r2, r4, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r3, r5, 0xf001}) (async) syz_open_procfs(r3, &(0x7f00000008c0)='net/ip_mr_vif\x00') (async) ioctl$USBDEVFS_GET_CAPABILITIES(r6, 0x8004551a, &(0x7f0000000900)) (async) ioctl$BTRFS_IOC_RESIZE(r6, 0x50009403, &(0x7f0000000180)={{}, {@void, @max}}) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r6, 0x80045301, &(0x7f0000000940)) (async) userfaultfd(0x80000) (async) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r7, 0x50009417, &(0x7f0000000f40)={{r6}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r8}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)=@fd={0x0, 0x2, 0x4, 0x2000, 0x8001, {0x77359400}, {0x1, 0xc, 0x2, 0x58, 0xfe, 0xe8, "18a689d9"}, 0x80000000, 0x4, {}, 0xffffffff, 0x0, r6}) (async) 18:11:31 executing program 0: close$fd_v4l2_buffer(0xffffffffffffffff) close$fd_v4l2_buffer(0xffffffffffffffff) 18:11:31 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff}) 18:11:31 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x246200) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='fdinfo\x00') r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x19, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x0, 0x9, 0x7, 0x0, 0x50, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0xee5, 0x0, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x21}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0xd0, &(0x7f0000000580)=""/208, 0x41100, 0x9, '\x00', 0x0, 0x14, r1, 0x8, &(0x7f0000000680)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x9, 0x3, 0x5}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000700)=[0x1, r1, r1, r1, r1, r1]}, 0x80) r3 = syz_open_dev$dmmidi(&(0x7f00000007c0), 0x70a, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000800)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 18:11:31 executing program 5: r0 = syz_open_dev$vim2m(0x0, 0x1000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff}) 18:11:31 executing program 1: syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') 18:11:31 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) (async) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x3) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x111401) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x6, 0x3, 0x0, "51d0f3bebc20df4544dcbb7549794104a607860ee60ea0449bcad2afaee0c04c"}) (async) syz_open_procfs(0x0, &(0x7f0000000280)='net/raw6\x00') r1 = socket$unix(0x1, 0x1, 0x0) r2 = getuid() (async) r3 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r2, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r3, 0xffffffffffffffff, 0x20}) r4 = getgid() r5 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r2, 0xee01, r2, r4, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r3, r5, 0xf001}) (async) r6 = syz_open_procfs(r3, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r6, 0x8004551a, &(0x7f0000000900)) (async) ioctl$BTRFS_IOC_RESIZE(r6, 0x50009403, &(0x7f0000000180)={{}, {@void, @max}}) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r6, 0x80045301, &(0x7f0000000940)) (async) r7 = userfaultfd(0x80000) (async) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r7, 0x50009417, &(0x7f0000000f40)={{r6}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r8}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)=@fd={0x0, 0x2, 0x4, 0x2000, 0x8001, {0x77359400}, {0x1, 0xc, 0x2, 0x58, 0xfe, 0xe8, "18a689d9"}, 0x80000000, 0x4, {}, 0xffffffff, 0x0, r6}) 18:11:31 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) close$fd_v4l2_buffer(r0) close$fd_v4l2_buffer(r0) 18:11:31 executing program 5: r0 = syz_open_dev$vim2m(0x0, 0x1000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff}) 18:11:31 executing program 1: syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') (async) 18:11:31 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) 18:11:31 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040040}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5a00) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x200, @tick=0x100, 0xc, {0x0, 0x4}, 0x3f, 0x2, 0x6}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x5, 0x3, 0x0, "51d0f3bebc20df450600bb755f794104a607860ee60ea0447dcad2afaee0c04c"}) 18:11:31 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x246200) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='fdinfo\x00') r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x19, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x0, 0x9, 0x7, 0x0, 0x50, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0xee5, 0x0, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x21}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0xd0, &(0x7f0000000580)=""/208, 0x41100, 0x9, '\x00', 0x0, 0x14, r1, 0x8, &(0x7f0000000680)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x9, 0x3, 0x5}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000700)=[0x1, r1, r1, r1, r1, r1]}, 0x80) syz_open_dev$dmmidi(&(0x7f00000007c0), 0x70a, 0x2) 18:11:31 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) close$fd_v4l2_buffer(r0) close$fd_v4l2_buffer(r0) 18:11:31 executing program 5: r0 = syz_open_dev$vim2m(0x0, 0x1000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff}) 18:11:31 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) socket$inet(0x2, 0x6, 0x9) 18:11:31 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) close$fd_v4l2_buffer(r0) close$fd_v4l2_buffer(r0) 18:11:31 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040040}, 0x10) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5a00) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x200, @tick=0x100, 0xc, {0x0, 0x4}, 0x3f, 0x2, 0x6}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x5, 0x3, 0x0, "51d0f3bebc20df450600bb755f794104a607860ee60ea0447dcad2afaee0c04c"}) 18:11:31 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff}) 18:11:31 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') close$fd_v4l2_buffer(0xffffffffffffffff) close$fd_v4l2_buffer(r0) 18:11:32 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x246200) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000540)='fdinfo\x00') r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) syz_open_dev$dmmidi(&(0x7f00000007c0), 0x70a, 0x2) 18:11:32 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040040}, 0x10) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5a00) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x200, @tick=0x100, 0xc, {0x0, 0x4}, 0x3f, 0x2, 0x6}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x5, 0x3, 0x0, "51d0f3bebc20df450600bb755f794104a607860ee60ea0447dcad2afaee0c04c"}) 18:11:32 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') close$fd_v4l2_buffer(0xffffffffffffffff) close$fd_v4l2_buffer(r0) 18:11:32 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff}) 18:11:32 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') close$fd_v4l2_buffer(0xffffffffffffffff) close$fd_v4l2_buffer(r0) 18:11:32 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) 18:11:32 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x246200) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000540)='fdinfo\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) syz_open_dev$dmmidi(&(0x7f00000007c0), 0x70a, 0x2) 18:11:32 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) socket$inet(0x2, 0x6, 0x9) 18:11:32 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') close$fd_v4l2_buffer(0xffffffffffffffff) close$fd_v4l2_buffer(r0) 18:11:32 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff}) 18:11:32 executing program 4: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x246200) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='fdinfo\x00') r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x19, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x0, 0x9, 0x7, 0x0, 0x50, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0xee5, 0x0, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x21}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0xd0, &(0x7f0000000580)=""/208, 0x41100, 0x9, '\x00', 0x0, 0x14, r1, 0x8, &(0x7f0000000680)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x9, 0x3, 0x5}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000700)=[0x1, r1, r1, r1, r1, r1]}, 0x80) syz_open_dev$dmmidi(&(0x7f00000007c0), 0x70a, 0x2) 18:11:32 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) 18:11:32 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x246200) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000540)='fdinfo\x00') syz_open_dev$dmmidi(&(0x7f00000007c0), 0x70a, 0x2) 18:11:32 executing program 5: syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff}) 18:11:32 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') close$fd_v4l2_buffer(r0) close$fd_v4l2_buffer(0xffffffffffffffff) 18:11:32 executing program 5: syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff}) 18:11:32 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') close$fd_v4l2_buffer(r0) close$fd_v4l2_buffer(0xffffffffffffffff) 18:11:32 executing program 4: syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff}) 18:11:32 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/netlink\x00') close$fd_v4l2_buffer(r0) close$fd_v4l2_buffer(0xffffffffffffffff) 18:11:32 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) socket$inet(0x2, 0x6, 0x9) 18:11:32 executing program 5: syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000300)=@fd={0x2000000, 0x2, 0x4, 0x100000, 0x6, {}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff}) 18:11:32 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) 18:11:32 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netlink\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x400c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x48, r4, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x3e}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r6, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r6, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0xd}}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x73}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xff}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x20}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000680)={0x0, "17ad155a1ff30a84d1c704223de13645"}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000) 18:11:32 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x246200) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_open_dev$dmmidi(&(0x7f00000007c0), 0x70a, 0x2) 18:11:32 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) 18:11:32 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, 0x0) 18:11:32 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) 18:11:32 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) 18:11:32 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) 18:11:32 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x246200) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x802, 0x0) syz_open_dev$dmmidi(&(0x7f00000007c0), 0x70a, 0x2) 18:11:32 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, 0x0) 18:11:32 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) 18:11:32 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) 18:11:32 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) 18:11:32 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) 18:11:32 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, 0x0) 18:11:32 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x246200) syz_open_dev$dmmidi(&(0x7f00000007c0), 0x70a, 0x2) 18:11:32 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000300)=@fd={0x0, 0x2, 0x4, 0x100000, 0x6, {}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff}) 18:11:32 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000300)=@fd={0x0, 0x0, 0x4, 0x100000, 0x6, {}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff}) 18:11:32 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000300)=@fd={0x0, 0x0, 0x4, 0x100000, 0x6, {}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff}) 18:11:32 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_open_dev$dmmidi(&(0x7f00000007c0), 0x70a, 0x2) 18:11:32 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000300)=@fd={0x0, 0x0, 0x4, 0x100000, 0x6, {}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff}) 18:11:32 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000300)=@fd={0x0, 0x2, 0x4, 0x0, 0x6, {}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff}) 18:11:32 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) 18:11:32 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) 18:11:33 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) 18:11:33 executing program 2: syz_open_dev$dmmidi(&(0x7f00000007c0), 0x70a, 0x2) 18:11:33 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) 18:11:33 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) 18:11:33 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000300)=@fd={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x1, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff}) 18:11:33 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) 18:11:33 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000300)=@fd={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0xc, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff}) 18:11:33 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) 18:11:33 executing program 2: syz_open_dev$dmmidi(0x0, 0x70a, 0x2) 18:11:33 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) 18:11:33 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) socket$inet(0x2, 0x6, 0x9) 18:11:33 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) 18:11:33 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000300)=@fd={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x1f, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff}) 18:11:33 executing program 2: syz_open_dev$dmmidi(0x0, 0x70a, 0x2) 18:11:33 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) 18:11:33 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) 18:11:33 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000300)=@fd={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0xd3, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff}) 18:11:33 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) 18:11:33 executing program 2: syz_open_dev$dmmidi(0x0, 0x70a, 0x2) 18:11:33 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) 18:11:33 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) 18:11:33 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) 18:11:33 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) socket$inet(0x2, 0x6, 0x9) 18:11:33 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000300)=@fd={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff}) 18:11:33 executing program 2: syz_open_dev$dmmidi(&(0x7f00000007c0), 0x0, 0x2) 18:11:33 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000300)=@fd={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aca74438"}, 0xfffffffa, 0x4, {}, 0xffffffff}) 18:11:33 executing program 2: syz_open_dev$dmmidi(&(0x7f00000007c0), 0x0, 0x2) 18:11:33 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000300)=@fd={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aca74438"}, 0x0, 0x4, {}, 0xffffffff}) 18:11:33 executing program 2: syz_open_dev$dmmidi(&(0x7f00000007c0), 0x0, 0x2) 18:11:33 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000300)=@fd={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aca74438"}}) 18:11:33 executing program 2: syz_open_dev$dmmidi(&(0x7f00000007c0), 0x70a, 0x0) 18:11:33 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) 18:11:33 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) 18:11:33 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000300)=@fd={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "aca74438"}, 0x0, 0x4, {}, 0xffffffff}) 18:11:33 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) socket$inet(0x2, 0x6, 0x9) 18:11:33 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) 18:11:33 executing program 2: syz_open_dev$dmmidi(&(0x7f00000007c0), 0x70a, 0x0) 18:11:33 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) 18:11:33 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) 18:11:33 executing program 2: syz_open_dev$dmmidi(&(0x7f00000007c0), 0x70a, 0x0) 18:11:33 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) 18:11:34 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) 18:11:34 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) 18:11:34 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) 18:11:34 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) 18:11:34 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) 18:11:34 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) socket$inet(0x2, 0x6, 0x9) 18:11:34 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') 18:11:34 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) 18:11:34 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) 18:11:34 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) 18:11:34 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) 18:11:34 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) 18:11:34 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) 18:11:34 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) 18:11:34 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) 18:11:34 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) 18:11:34 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) 18:11:34 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) socket$inet(0x2, 0x6, 0x9) 18:11:34 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) getpid() 18:11:34 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) 18:11:34 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) 18:11:34 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) 18:11:34 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) 18:11:34 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) socket$inet(0x2, 0x6, 0x9) 18:11:34 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) 18:11:34 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) 18:11:35 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) 18:11:35 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) 18:11:35 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) 18:11:35 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) 18:11:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) 18:11:35 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) 18:11:35 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) getuid() getpid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) 18:11:35 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) socket$inet(0x2, 0x6, 0x9) 18:11:35 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) 18:11:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) 18:11:35 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) getuid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) 18:11:35 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) 18:11:35 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) socket$inet(0x2, 0x6, 0x9) 18:11:35 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) 18:11:35 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) 18:11:35 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) 18:11:35 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) 18:11:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) 18:11:35 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r9}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) socket$inet(0x2, 0x6, 0x9) 18:11:35 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) 18:11:35 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) 18:11:35 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) 18:11:35 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) 18:11:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) 18:11:35 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) socket$inet(0x2, 0x6, 0x9) 18:11:35 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) 18:11:35 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) 18:11:36 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) getuid() getpid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) 18:11:36 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) 18:11:36 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) 18:11:36 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) getuid() getpid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) 18:11:36 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) 18:11:36 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) 18:11:36 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') 18:11:36 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) getuid() getpid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) 18:11:36 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000640)=""/22, 0x16) 18:11:36 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) socket$inet(0x2, 0x6, 0x9) 18:11:36 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) 18:11:36 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) 18:11:36 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000640)=""/22, 0x16) 18:11:36 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000640)=""/22, 0x16) 18:11:36 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) 18:11:36 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) 18:11:36 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) getpid() 18:11:36 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) 18:11:36 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) 18:11:36 executing program 4: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) read$msr(r0, &(0x7f0000000640)=""/22, 0x16) 18:11:36 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) getpid() ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) 18:11:36 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) socket$inet(0x2, 0x6, 0x9) 18:11:36 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) 18:11:36 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) 18:11:36 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) read$msr(r0, &(0x7f0000000640)=""/22, 0x16) 18:11:36 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) 18:11:36 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) 18:11:36 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) getpid() ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) 18:11:36 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) 18:11:36 executing program 4: r0 = syz_open_dev$vim2m(0x0, 0x9, 0x2) read$msr(r0, &(0x7f0000000640)=""/22, 0x16) 18:11:36 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, 0x0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r3, 0xffffffffffffffff, 0x20}) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) 18:11:36 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) 18:11:37 executing program 4: r0 = syz_open_dev$vim2m(0x0, 0x9, 0x2) read$msr(r0, &(0x7f0000000640)=""/22, 0x16) 18:11:37 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) socket$inet(0x2, 0x6, 0x9) 18:11:37 executing program 4: r0 = syz_open_dev$vim2m(0x0, 0x9, 0x2) read$msr(r0, &(0x7f0000000640)=""/22, 0x16) 18:11:37 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) getuid() getpid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) 18:11:37 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, 0x0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r3, 0xffffffffffffffff, 0x20}) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) 18:11:37 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) getpid() ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) 18:11:37 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) getpid() ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) 18:11:37 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) read$msr(r0, &(0x7f0000000640)=""/22, 0x16) 18:11:37 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) read$msr(r0, &(0x7f0000000640)=""/22, 0x16) 18:11:37 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) read$msr(r0, &(0x7f0000000640)=""/22, 0x16) 18:11:37 executing program 4: syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) read$msr(0xffffffffffffffff, &(0x7f0000000640)=""/22, 0x16) 18:11:37 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) getuid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) 18:11:37 executing program 4: syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) read$msr(0xffffffffffffffff, &(0x7f0000000640)=""/22, 0x16) 18:11:37 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) socket$inet(0x2, 0x6, 0x9) 18:11:37 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, 0x0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r3, 0xffffffffffffffff, 0x20}) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) 18:11:37 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) 18:11:37 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, 0x0, 0xf001}) ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) 18:11:37 executing program 4: syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) read$msr(0xffffffffffffffff, &(0x7f0000000640)=""/22, 0x16) 18:11:37 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) 18:11:38 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) read$msr(r0, 0x0, 0x0) 18:11:38 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) 18:11:38 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r2 = getuid() r3 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r2, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r3, 0xffffffffffffffff, 0x20}) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) 18:11:38 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, 0x0, 0xf001}) ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) 18:11:38 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) 18:11:38 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) 18:11:38 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) socket$inet(0x2, 0x6, 0x9) 18:11:38 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) 18:11:38 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = getuid() r3 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r2, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r3, 0xffffffffffffffff, 0x20}) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) 18:11:38 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) 18:11:38 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, 0x0, 0xf001}) ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) 18:11:38 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) getuid() getpid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) 18:11:38 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = getuid() r3 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r2, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r3, 0xffffffffffffffff, 0x20}) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) 18:11:38 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) 18:11:38 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, 0x0, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, 0x0, 0xf001}) ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) 18:11:38 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r8}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) socket$inet(0x2, 0x6, 0x9) 18:11:38 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = getuid() r3 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r2, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r3, 0xffffffffffffffff, 0x20}) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) 18:11:38 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) getuid() getpid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) 18:11:38 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) 18:11:38 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000940)) r8 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) socket$inet(0x2, 0x6, 0x9) 18:11:38 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r2 = getuid() r3 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r2, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r3, 0xffffffffffffffff, 0x20}) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) 18:11:38 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, 0x0, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, 0x0, 0xf001}) ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) 18:11:38 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000640)=""/22, 0x16) 18:11:38 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000900)) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r8}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) socket$inet(0x2, 0x6, 0x9) 18:11:38 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) getuid() getpid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) 18:11:38 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r2 = getuid() r3 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r2, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r3, 0xffffffffffffffff, 0x20}) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) 18:11:38 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000640)=""/22, 0x16) 18:11:38 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, 0x0, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, 0x0, 0xf001}) ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) 18:11:38 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) 18:11:38 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r2 = getuid() r3 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r2, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r3, 0xffffffffffffffff, 0x20}) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) 18:11:38 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r2 = getuid() r3 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r2, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r3, 0xffffffffffffffff, 0x20}) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) 18:11:38 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000640)=""/22, 0x16) 18:11:38 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r8}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) socket$inet(0x2, 0x6, 0x9) 18:11:38 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) 18:11:39 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) 18:11:39 executing program 5: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) read$msr(r0, &(0x7f0000000640)=""/22, 0x16) 18:11:39 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, 0x0, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, 0x0, 0xf001}) ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) 18:11:39 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r2 = getuid() r3 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r2, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r3, 0xffffffffffffffff, 0x20}) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) 18:11:39 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r1 = getuid() r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) read$msr(0xffffffffffffffff, &(0x7f0000000640)=""/22, 0x16) 18:11:39 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() r4 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r4, 0xffffffffffffffff, 0x20}) r5 = getgid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) r6 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, r5, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, r4, r6, 0xf001}) r7 = syz_open_procfs(r4, &(0x7f00000008c0)='net/ip_mr_vif\x00') ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000f40)={{r7}, 0x0, 0x0, @inherit={0x98, &(0x7f0000000a80)={0x1, 0xa, 0x7, 0x81, {0x8, 0x6, 0x5, 0xff, 0x1c00000000}, [0x3, 0x10001, 0x5, 0x145e, 0xfffffffffffffff9, 0x7, 0x3, 0x3, 0x1, 0x3]}}, @devid=r8}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6, 0x0, r7}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) socket$inet(0x2, 0x6, 0x9) 18:11:39 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r3, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, 0x0, 0xffffffffffffffff, 0x20}) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) 18:11:39 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r1 = getuid() r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) read$msr(0xffffffffffffffff, &(0x7f0000000640)=""/22, 0x16) 18:11:39 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r1 = getuid() r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r1, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r2, 0xffffffffffffffff, 0x20}) read$msr(0xffffffffffffffff, &(0x7f0000000640)=""/22, 0x16) 18:11:39 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r2 = getuid() r3 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, r2, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r3, 0xffffffffffffffff, 0x20}) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) 18:11:39 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) read$msr(r0, &(0x7f0000000640)=""/22, 0x16) 18:11:39 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x2, 0x0, 0xee00, 0xee00, 0xee00, 0x20}, 0x5d3808c7, 0x1, 0xe2071db, 0x10000, r3, 0xffffffffffffffff, 0x20}) read$msr(r1, &(0x7f0000000640)=""/22, 0x16) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) [ 1396.371266] ================================================================== [ 1396.378872] BUG: KASAN: use-after-free in __vb2_perform_fileio+0xce9/0xda0 [ 1396.385898] Read of size 4 at addr ffff8880a4c43e1c by task syz-executor.4/13479 [ 1396.393455] [ 1396.395099] CPU: 0 PID: 13479 Comm: syz-executor.4 Not tainted 4.14.305-syzkaller #0 [ 1396.402985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 1396.412443] Call Trace: [ 1396.415045] dump_stack+0x1b2/0x281 18:11:39 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001200)={0x3, @raw_data="a8fd6f0f60273eb3986cfb90c036f30ae4344bc88ae690896193dc4403e4b1265a7a9ad9925ae3f7a7307872ab124adba08fc94ad2dbc11485eb66a6abbd6941672eab0cedaf27d8d63e112322ac0667e625e40a9471c554fe1b61de4cd7b2641f90db989f3c3fb93f1e25bb3ec1df443848430f46032bb9b92edc9ca7e7f001a9514ad1c983598aec2bf24182e1aea194e61e7af8e885be97de98b78e221f2cb349f4cb037bfbf7db95ec11a2bf14ebe1541c513db560fc96c3b017d17f3112cf44839afb765d35"}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0x3, 0x1, 0x0, 0x9}, 0x8, 0x6, &(0x7f0000000100)={{0xfffffe00, 0x80000001, 0x5}, &(0x7f0000000080)={{0x3, 0xd7, 0x5, 0xfffffffd}, &(0x7f0000000040)={{0x2, 0x1, 0x7, 0xffff}}}}, 0x4, &(0x7f0000000140)="dbe3deb3c79bb7e3b5", 0xbb}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x20, 0x0, 0x1, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) r3 = getuid() read$msr(r1, &(0x7f0000000640)=""/22, 0x16) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r3, 0xee01, r3, 0x0, 0x100, 0x83}, 0x2, 0x1, 0x1, 0x200, 0x0, 0x0, 0xf001}) ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000900)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000940)) userfaultfd(0x80000) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5947, 0x3000000000000}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x40, 0x80000001, {0x77359400}, {0x3, 0x0, 0x2, 0x2, 0xa0, 0x4, "2c86b540"}, 0xffffffff, 0x1, {&(0x7f0000000540)=[{0x40, 0x10001, {0x7fffffffffffffff}, 0x4}, {0x8, 0x7, {0x3}, 0x40004000}]}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000480)={0x7f, 0x40, 0x1, 'queue0\x00', 0x7fffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000380)={0x1, @sliced={0x8, [0x9, 0xfffd, 0x2, 0xfff, 0x3f, 0x6, 0x5, 0x1, 0x0, 0x87e9, 0x1ff, 0x910d, 0xfffe, 0x432a, 0x3, 0x3, 0x401, 0xfffe, 0x1000, 0x3ff, 0xddb, 0x1, 0x696d, 0x8, 0x21, 0x831, 0x8, 0x7, 0x3, 0x3, 0x73, 0x1, 0x2, 0x8000, 0x3, 0x8, 0xff, 0x1, 0x8, 0x100, 0x6, 0x2, 0x5, 0x8001, 0x4, 0x7, 0x1ff, 0x3], 0x1}}) [ 1396.418694] print_address_description.cold+0x54/0x1d3 [ 1396.423992] kasan_report_error.cold+0x8a/0x191 [ 1396.428675] ? __vb2_perform_fileio+0xce9/0xda0 [ 1396.433359] __asan_report_load4_noabort+0x68/0x70 [ 1396.438302] ? __vb2_perform_fileio+0xce9/0xda0 [ 1396.442998] __vb2_perform_fileio+0xce9/0xda0 [ 1396.447515] ? __vb2_init_fileio+0xa90/0xa90 [ 1396.451933] ? aa_file_perm+0x304/0xab0 [ 1396.455929] vb2_fop_read+0x1ef/0x3d0 [ 1396.459753] ? vb2_fop_write+0x3d0/0x3d0 [ 1396.463824] v4l2_read+0x19a/0x200 [ 1396.467387] __vfs_read+0xe4/0x620 [ 1396.470939] ? v4l2_write+0x200/0x200 [ 1396.474758] ? vfs_copy_file_range+0x9b0/0x9b0 [ 1396.479358] ? common_file_perm+0x3ee/0x580 [ 1396.483712] ? lock_acquire+0x170/0x3f0 [ 1396.487708] ? security_file_permission+0x82/0x1e0 [ 1396.492654] ? rw_verify_area+0xe1/0x2a0 [ 1396.496733] vfs_read+0x139/0x340 [ 1396.500207] SyS_read+0xf2/0x210 [ 1396.503619] ? kernel_write+0x110/0x110 [ 1396.507611] ? do_syscall_64+0x4c/0x640 [ 1396.511601] ? kernel_write+0x110/0x110 [ 1396.515580] do_syscall_64+0x1d5/0x640 [ 1396.519494] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1396.524695] RIP: 0033:0x7fc49f0000f9 [ 1396.528430] RSP: 002b:00007fc49d572168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1396.536140] RAX: ffffffffffffffda RBX: 00007fc49f11ff80 RCX: 00007fc49f0000f9 [ 1396.543413] RDX: 0000000000000016 RSI: 0000000020000640 RDI: 0000000000000004 [ 1396.550809] RBP: 00007fc49f05bae9 R08: 0000000000000000 R09: 0000000000000000 [ 1396.558097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1396.565366] R13: 00007ffe342cdeaf R14: 00007fc49d572300 R15: 0000000000022000 [ 1396.572723] [ 1396.574338] Allocated by task 13479: [ 1396.578050] kasan_kmalloc+0xeb/0x160 [ 1396.581864] kmem_cache_alloc_trace+0x131/0x3d0 [ 1396.586528] __vb2_init_fileio+0x17f/0xa90 [ 1396.590751] __vb2_perform_fileio+0x993/0xda0 [ 1396.595320] vb2_fop_read+0x1ef/0x3d0 [ 1396.599110] v4l2_read+0x19a/0x200 [ 1396.602687] __vfs_read+0xe4/0x620 [ 1396.606226] vfs_read+0x139/0x340 [ 1396.609683] SyS_read+0xf2/0x210 [ 1396.613078] do_syscall_64+0x1d5/0x640 [ 1396.616957] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1396.622139] [ 1396.623754] Freed by task 13461: [ 1396.627126] kasan_slab_free+0xc3/0x1a0 [ 1396.631090] kfree+0xc9/0x250 [ 1396.634191] __vb2_cleanup_fileio+0xf5/0x150 [ 1396.638602] vb2_core_queue_release+0x17/0x70 [ 1396.643102] _vb2_fop_release+0x1c1/0x280 [ 1396.647255] vivid_fop_release+0x17d/0x6c0 [ 1396.651478] v4l2_release+0xf4/0x190 [ 1396.655198] __fput+0x25f/0x7a0 [ 1396.658469] task_work_run+0x11f/0x190 [ 1396.662350] exit_to_usermode_loop+0x1ad/0x200 [ 1396.666923] do_syscall_64+0x4a3/0x640 [ 1396.670804] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1396.675978] [ 1396.677630] The buggy address belongs to the object at ffff8880a4c43b00 [ 1396.677630] which belongs to the cache kmalloc-1024 of size 1024 [ 1396.690478] The buggy address is located 796 bytes inside of [ 1396.690478] 1024-byte region [ffff8880a4c43b00, ffff8880a4c43f00) [ 1396.702440] The buggy address belongs to the page: [ 1396.707369] page:ffffea0002931080 count:1 mapcount:0 mapping:ffff8880a4c42000 index:0xffff8880a4c42d80 compound_mapcount: 0 [ 1396.718636] flags: 0xfff00000008100(slab|head) [ 1396.723237] raw: 00fff00000008100 ffff8880a4c42000 ffff8880a4c42d80 0000000100000006 [ 1396.731106] raw: ffffea0002b09020 ffffea0002ae3820 ffff88813fe74ac0 0000000000000000 [ 1396.738970] page dumped because: kasan: bad access detected [ 1396.744659] [ 1396.746279] Memory state around the buggy address: [ 1396.751206] ffff8880a4c43d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1396.758568] ffff8880a4c43d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1396.765944] >ffff8880a4c43e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1396.773286] ^ [ 1396.777440] ffff8880a4c43e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1396.784790] ffff8880a4c43f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1396.792138] ================================================================== [ 1396.799482] Disabling lock debugging due to kernel taint [ 1396.815045] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1396.815045] [ 1396.823044] CPU: 0 PID: 13479 Comm: syz-executor.4 Tainted: G B 4.14.305-syzkaller #0 [ 1396.832147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 1396.841504] Call Trace: [ 1396.844103] dump_stack+0x1b2/0x281 [ 1396.847743] panic+0x21d/0x451 [ 1396.850953] ? add_taint.cold+0x16/0x16 [ 1396.854938] ? ___preempt_schedule+0x16/0x18 [ 1396.859375] ? preempt_schedule_common+0x45/0xc0 [ 1396.864127] ? ___preempt_schedule+0x16/0x18 [ 1396.868640] check_panic_on_warn.cold+0x19/0x35 [ 1396.873306] kasan_end_report+0x3a/0x40 [ 1396.877269] kasan_report_error.cold+0xa7/0x191 [ 1396.882112] ? __vb2_perform_fileio+0xce9/0xda0 [ 1396.886791] __asan_report_load4_noabort+0x68/0x70 [ 1396.891721] ? __vb2_perform_fileio+0xce9/0xda0 [ 1396.896389] __vb2_perform_fileio+0xce9/0xda0 [ 1396.900882] ? __vb2_init_fileio+0xa90/0xa90 [ 1396.905285] ? aa_file_perm+0x304/0xab0 [ 1396.909349] vb2_fop_read+0x1ef/0x3d0 [ 1396.913148] ? vb2_fop_write+0x3d0/0x3d0 [ 1396.917196] v4l2_read+0x19a/0x200 [ 1396.920738] __vfs_read+0xe4/0x620 [ 1396.924275] ? v4l2_write+0x200/0x200 [ 1396.928061] ? vfs_copy_file_range+0x9b0/0x9b0 [ 1396.932633] ? common_file_perm+0x3ee/0x580 [ 1396.936942] ? lock_acquire+0x170/0x3f0 [ 1396.940905] ? security_file_permission+0x82/0x1e0 [ 1396.945824] ? rw_verify_area+0xe1/0x2a0 [ 1396.949876] vfs_read+0x139/0x340 [ 1396.953319] SyS_read+0xf2/0x210 [ 1396.956763] ? kernel_write+0x110/0x110 [ 1396.960727] ? do_syscall_64+0x4c/0x640 [ 1396.964688] ? kernel_write+0x110/0x110 [ 1396.968650] do_syscall_64+0x1d5/0x640 [ 1396.972540] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1396.977724] RIP: 0033:0x7fc49f0000f9 [ 1396.981425] RSP: 002b:00007fc49d572168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1396.989124] RAX: ffffffffffffffda RBX: 00007fc49f11ff80 RCX: 00007fc49f0000f9 [ 1396.996391] RDX: 0000000000000016 RSI: 0000000020000640 RDI: 0000000000000004 [ 1397.003663] RBP: 00007fc49f05bae9 R08: 0000000000000000 R09: 0000000000000000 [ 1397.011076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1397.018349] R13: 00007ffe342cdeaf R14: 00007fc49d572300 R15: 0000000000022000 [ 1397.025816] Kernel Offset: disabled [ 1397.029449] Rebooting in 86400 seconds..