92210d93312b1844dc5968549e7ed5300b8196d12da4aad7aeaf4358dbf8e3d3803df714ce1a0316a9df2ff9cf063862f7b9e6bd7746a510cd44945341d0133d9940b090e56b34579401c15a4e2229cf4829206b71e714c037861aa728820f5fba896dc930c80e2528bfad72b6f043958f5a5c6b5cae1cb19c650616f0b7d44e30ca866ce1608acf20cf3551436fc2a7fd1ec92276d7a91fa7aeb6d84c"}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) 21:56:52 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000080)={0x45, ""/69}) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x80) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000100)) (async) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000040), 0x4) 21:56:52 executing program 1: setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, &(0x7f0000000040), 0x4) mq_open(&(0x7f0000000080)='\xce\x00', 0x40, 0xf1, &(0x7f00000000c0)={0x8000000000000001, 0x1000, 0x3, 0x6}) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x800) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000140)={@none, 0x1f}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x5a35c3, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)) setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000000)=0xfffffc01, 0x4) 21:56:52 executing program 1: setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, &(0x7f0000000040), 0x4) mq_open(&(0x7f0000000080)='\xce\x00', 0x40, 0xf1, &(0x7f00000000c0)={0x8000000000000001, 0x1000, 0x3, 0x6}) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x800) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000140)={@none, 0x1f}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x5a35c3, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)) setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000000)=0xfffffc01, 0x4) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, &(0x7f0000000040), 0x4) (async) mq_open(&(0x7f0000000080)='\xce\x00', 0x40, 0xf1, &(0x7f00000000c0)={0x8000000000000001, 0x1000, 0x3, 0x6}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x800) (async) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000140)={@none, 0x1f}) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x5a35c3, 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)) (async) setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000000)=0xfffffc01, 0x4) (async) 21:56:52 executing program 1: setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, &(0x7f0000000040), 0x4) (async) mq_open(&(0x7f0000000080)='\xce\x00', 0x40, 0xf1, &(0x7f00000000c0)={0x8000000000000001, 0x1000, 0x3, 0x6}) (async) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x800) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000140)={@none, 0x1f}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x5a35c3, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000200)) (async) setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000000)=0xfffffc01, 0x4) 21:56:52 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000280)={0x2, 0x4, 0x2, {0x0, @vbi={0x8, 0xf3f9, 0xd2f, 0x35315241, [], [0x0, 0x3], 0x2}}, 0x3}) syz_open_dev$video4linux(&(0x7f0000000080), 0x1, 0x8e380) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000500)) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000380)={0x0, 0x1}) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), r2, 0xfffffff7}}, 0x18) r3 = socket(0x1e, 0x2, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x324, 0x1, 0x2, 0x9, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x10) 21:56:52 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000280)={0x2, 0x4, 0x2, {0x0, @vbi={0x8, 0xf3f9, 0xd2f, 0x35315241, [], [0x0, 0x3], 0x2}}, 0x3}) (async, rerun: 32) syz_open_dev$video4linux(&(0x7f0000000080), 0x1, 0x8e380) (async, rerun: 32) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000380)={0x0, 0x1}) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), r2, 0xfffffff7}}, 0x18) r3 = socket(0x1e, 0x2, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x324, 0x1, 0x2, 0x9, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x10) 21:56:52 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000280)={0x2, 0x4, 0x2, {0x0, @vbi={0x8, 0xf3f9, 0xd2f, 0x35315241, [], [0x0, 0x3], 0x2}}, 0x3}) syz_open_dev$video4linux(&(0x7f0000000080), 0x1, 0x8e380) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000500)) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000380)={0x0, 0x1}) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), r2, 0xfffffff7}}, 0x18) (async) r3 = socket(0x1e, 0x2, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x324, 0x1, 0x2, 0x9, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x10) 21:56:52 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000080)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x1, "a7514a", "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"}}, 0x110) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) setsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000040), 0x4) 21:56:52 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000080)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x1, "a7514a", "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"}}, 0x110) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) (async) setsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000040), 0x4) 21:56:52 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000080)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x1, "a7514a", "f3933f4dde3d15c2617517606f6ca8e4264b8f627b93c823b0eca4ca46a1302349bdef61381420a7327ce430e2af9a0ba9410ac045d79f0fae55901abbf9b5303e5c793efdad4c374fd0dc89c7adfe4ead5fd611caa21f45c6fdcec9fbc4a3aafcf65074368d1b7b2461f4f9ab01979ef7657668e63201c27d1dd3d5dc6e4840b8a6f06b40d78f6eabf5082fe1fb07e977aa6892fd075595ff43e1e90954b80bf4658a8cc457441a4a6038239e6806ff981306e47384936d73d9db5334815d2b7741bd74744f2118299d2f20ecd808dc194dc1274a8e3d5d57ba33bace7152811b1b998d0c90114b5a684b39727f94196f7d717d442f2ab7d540edbb02a783e2"}}, 0x110) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) setsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000040), 0x4) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000080)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x1, "a7514a", "f3933f4dde3d15c2617517606f6ca8e4264b8f627b93c823b0eca4ca46a1302349bdef61381420a7327ce430e2af9a0ba9410ac045d79f0fae55901abbf9b5303e5c793efdad4c374fd0dc89c7adfe4ead5fd611caa21f45c6fdcec9fbc4a3aafcf65074368d1b7b2461f4f9ab01979ef7657668e63201c27d1dd3d5dc6e4840b8a6f06b40d78f6eabf5082fe1fb07e977aa6892fd075595ff43e1e90954b80bf4658a8cc457441a4a6038239e6806ff981306e47384936d73d9db5334815d2b7741bd74744f2118299d2f20ecd808dc194dc1274a8e3d5d57ba33bace7152811b1b998d0c90114b5a684b39727f94196f7d717d442f2ab7d540edbb02a783e2"}}, 0x110) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x4) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) (async) setsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000040), 0x4) (async) 21:56:52 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400080) r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) bind$llc(r1, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x7f, 0xff, @multicast}, 0x10) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000100)=0x10001, 0x4) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)='memory.pressure\x00', 0x2, 0x0) 21:56:53 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x5, 0x82040) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000240)) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f00000000c0)=0x2) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000940)) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x2, @raw_data="f4b5c3b63416e95d9f14155f295bd5f9454e4e98f309ca7716ec65d51d6a48976e2d4e4a0f2b0e661edf48e06837ce612f08b1aeadde5999c991b16063f9db697a3b70bf6ff5024db52361327ffb87dbdb316fe06ddcddf773fd28a292047de809afb5a9124268d53b29cf77f23bd11a5014492a10015aca7deb70f1aa5e2cd86f039a0a81a98c12ffcf7d134d7b589f570b75f45cfb80baeb528c24d4c082be972556634c7a87ebf766b3c754bb748132cb2baca105786040a134ae1393abffdd28f5989c3a50d6"}) ioctl$TCGETA(r5, 0x5405, &(0x7f0000000200)) 21:56:53 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400080) r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) bind$llc(r1, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x7f, 0xff, @multicast}, 0x10) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000100)=0x10001, 0x4) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)='memory.pressure\x00', 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400080) (async) syz_init_net_socket$llc(0x1a, 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) bind$llc(r1, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x7f, 0xff, @multicast}, 0x10) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000100)=0x10001, 0x4) (async) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)='memory.pressure\x00', 0x2, 0x0) (async) 21:56:53 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x5, 0x82040) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000240)) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f00000000c0)=0x2) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000940)) (async) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x2, @raw_data="f4b5c3b63416e95d9f14155f295bd5f9454e4e98f309ca7716ec65d51d6a48976e2d4e4a0f2b0e661edf48e06837ce612f08b1aeadde5999c991b16063f9db697a3b70bf6ff5024db52361327ffb87dbdb316fe06ddcddf773fd28a292047de809afb5a9124268d53b29cf77f23bd11a5014492a10015aca7deb70f1aa5e2cd86f039a0a81a98c12ffcf7d134d7b589f570b75f45cfb80baeb528c24d4c082be972556634c7a87ebf766b3c754bb748132cb2baca105786040a134ae1393abffdd28f5989c3a50d6"}) (async) ioctl$TCGETA(r5, 0x5405, &(0x7f0000000200)) 21:56:53 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400080) r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) (async, rerun: 64) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) bind$llc(r1, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x7f, 0xff, @multicast}, 0x10) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000100)=0x10001, 0x4) (async) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)='memory.pressure\x00', 0x2, 0x0) 21:56:53 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x5, 0x82040) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000240)) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f00000000c0)=0x2) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000940)) (async) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x2, @raw_data="f4b5c3b63416e95d9f14155f295bd5f9454e4e98f309ca7716ec65d51d6a48976e2d4e4a0f2b0e661edf48e06837ce612f08b1aeadde5999c991b16063f9db697a3b70bf6ff5024db52361327ffb87dbdb316fe06ddcddf773fd28a292047de809afb5a9124268d53b29cf77f23bd11a5014492a10015aca7deb70f1aa5e2cd86f039a0a81a98c12ffcf7d134d7b589f570b75f45cfb80baeb528c24d4c082be972556634c7a87ebf766b3c754bb748132cb2baca105786040a134ae1393abffdd28f5989c3a50d6"}) (async) ioctl$TCGETA(r5, 0x5405, &(0x7f0000000200)) 21:56:53 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000180)=0x1) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:56:53 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x6, 0x95, 0x4, 0x3f, 0x1f}, 0x10) 21:56:53 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x6, 0x95, 0x4, 0x3f, 0x1f}, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x6, 0x95, 0x4, 0x3f, 0x1f}, 0x10) (async) 21:56:53 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000180)=0x1) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:56:53 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x6, 0x95, 0x4, 0x3f, 0x1f}, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x6, 0x95, 0x4, 0x3f, 0x1f}, 0x10) (async) 21:56:53 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000180)=0x1) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:56:53 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000040)) 21:56:53 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) mq_getsetattr(r0, &(0x7f0000000000)={0x6, 0x3, 0x5, 0x5}, &(0x7f0000000080)) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @initdev, @loopback}, &(0x7f0000000140)=0xc) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc000000", @ANYRES16=0x0, @ANYBLOB="20022dbd7000fcdbdf25040000000800020006000000080003000000000008000300000000000800030002000000080003000000000034000180060005004e230000060005004e240000060001000a00000008000700", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r1, @ANYBLOB="060001000a000000080003000100000008000200fc00000000000000000000000000000108000700", @ANYRES32=0x0, @ANYBLOB="084003006401010114000400000000000000000000000000000000010800060004000000051f020009000000"], 0xcc}, 0x1, 0x0, 0x0, 0x6}, 0x16) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000000040), 0x4) 21:56:53 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async, rerun: 32) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000040)) (rerun: 32) 21:56:53 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) mq_getsetattr(r0, &(0x7f0000000000)={0x6, 0x3, 0x5, 0x5}, &(0x7f0000000080)) (async, rerun: 32) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @initdev, @loopback}, &(0x7f0000000140)=0xc) (rerun: 32) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc000000", @ANYRES16=0x0, @ANYBLOB="20022dbd7000fcdbdf25040000000800020006000000080003000000000008000300000000000800030002000000080003000000000034000180060005004e230000060005004e240000060001000a00000008000700", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r1, @ANYBLOB="060001000a000000080003000100000008000200fc00000000000000000000000000000108000700", @ANYRES32=0x0, @ANYBLOB="084003006401010114000400000000000000000000000000000000010800060004000000051f020009000000"], 0xcc}, 0x1, 0x0, 0x0, 0x6}, 0x16) (async) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000000040), 0x4) 21:56:53 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000040)) syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000040)) (async) 21:56:53 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) mq_getsetattr(r0, &(0x7f0000000000)={0x6, 0x3, 0x5, 0x5}, &(0x7f0000000080)) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @initdev, @loopback}, &(0x7f0000000140)=0xc) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc000000", @ANYRES16=0x0, @ANYBLOB="20022dbd7000fcdbdf25040000000800020006000000080003000000000008000300000000000800030002000000080003000000000034000180060005004e230000060005004e240000060001000a00000008000700", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r1, @ANYBLOB="060001000a000000080003000100000008000200fc00000000000000000000000000000108000700", @ANYRES32=0x0, @ANYBLOB="084003006401010114000400000000000000000000000000000000010800060004000000051f020009000000"], 0xcc}, 0x1, 0x0, 0x0, 0x6}, 0x16) (async) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000000040), 0x4) 21:56:53 executing program 1: ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x105000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) mq_getsetattr(r1, &(0x7f0000000000)={0xfffffffffffffff9, 0x8001, 0xfffffffffffffffb, 0x4}, &(0x7f00000000c0)) 21:56:53 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) clock_gettime(0x0, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)=@multiplanar_userptr={0x1, 0x3, 0x4, 0x100000, 0x200, {}, {0x2, 0x0, 0x1, 0xf8, 0x80, 0x80, "78e68b52"}, 0x6, 0x2, {&(0x7f0000000240)=[{0x1, 0x6f024784, {&(0x7f0000000180)}, 0x1f}, {0x9, 0x1, {&(0x7f0000000200)}, 0x5}]}, 0x80000000, 0x0, r1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:56:53 executing program 1: ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x105000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) mq_getsetattr(r1, &(0x7f0000000000)={0xfffffffffffffff9, 0x8001, 0xfffffffffffffffb, 0x4}, &(0x7f00000000c0)) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x105000) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) mq_getsetattr(r1, &(0x7f0000000000)={0xfffffffffffffff9, 0x8001, 0xfffffffffffffffb, 0x4}, &(0x7f00000000c0)) (async) 21:56:53 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)=@multiplanar_userptr={0x1, 0x3, 0x4, 0x100000, 0x200, {}, {0x2, 0x0, 0x1, 0xf8, 0x80, 0x80, "78e68b52"}, 0x6, 0x2, {&(0x7f0000000240)=[{0x1, 0x6f024784, {&(0x7f0000000180)}, 0x1f}, {0x9, 0x1, {&(0x7f0000000200)}, 0x5}]}, 0x80000000, 0x0, r1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:56:53 executing program 1: ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) (async, rerun: 64) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (rerun: 64) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x105000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async, rerun: 32) mq_getsetattr(r1, &(0x7f0000000000)={0xfffffffffffffff9, 0x8001, 0xfffffffffffffffb, 0x4}, &(0x7f00000000c0)) (rerun: 32) 21:56:53 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000040)) (async, rerun: 32) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)=@multiplanar_userptr={0x1, 0x3, 0x4, 0x100000, 0x200, {}, {0x2, 0x0, 0x1, 0xf8, 0x80, 0x80, "78e68b52"}, 0x6, 0x2, {&(0x7f0000000240)=[{0x1, 0x6f024784, {&(0x7f0000000180)}, 0x1f}, {0x9, 0x1, {&(0x7f0000000200)}, 0x5}]}, 0x80000000, 0x0, r1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:56:53 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000040), 0x4) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x41060, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="00fe51b571cd55", @ANYRESHEX=r3, @ANYBLOB="2c706f736978e1636c2c666f776e65723d", @ANYRESDEC=0xee00, @ANYBLOB=',pcr=00000000000000000009,obj_role=.+!,mask=MAY_EXEC,euid=', @ANYRESDEC=0xee00, @ANYBLOB=',subj_user=,subj_type=,mask=^MAY_WRITE,smackfshat=\\),appraise,\x00']) 21:56:53 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x2, 0x0, 0x8}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x3, @pix_mp={0x7f, 0x8, 0x59555956, 0x4, 0x4, [{}, {0x8000, 0x914}, {0x877, 0xffffffda}, {0xff, 0x3f}, {0x3, 0xa96c}, {0x6016655b, 0x80}, {0x3, 0xffff}, {0xf17, 0xffff8001}], 0x1, 0xe3, 0x3, 0x2, 0x5}}) 21:56:53 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000040), 0x4) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x41060, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="00fe51b571cd55", @ANYRESHEX=r3, @ANYBLOB="2c706f736978e1636c2c666f776e65723d", @ANYRESDEC=0xee00, @ANYBLOB=',pcr=00000000000000000009,obj_role=.+!,mask=MAY_EXEC,euid=', @ANYRESDEC=0xee00, @ANYBLOB=',subj_user=,subj_type=,mask=^MAY_WRITE,smackfshat=\\),appraise,\x00']) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000040), 0x4) (async) pipe2$9p(&(0x7f00000000c0), 0x800) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x41060, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="00fe51b571cd55", @ANYRESHEX=r3, @ANYBLOB="2c706f736978e1636c2c666f776e65723d", @ANYRESDEC=0xee00, @ANYBLOB=',pcr=00000000000000000009,obj_role=.+!,mask=MAY_EXEC,euid=', @ANYRESDEC=0xee00, @ANYBLOB=',subj_user=,subj_type=,mask=^MAY_WRITE,smackfshat=\\),appraise,\x00']) (async) 21:56:53 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x2, 0x0, 0x8}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x3, @pix_mp={0x7f, 0x8, 0x59555956, 0x4, 0x4, [{}, {0x8000, 0x914}, {0x877, 0xffffffda}, {0xff, 0x3f}, {0x3, 0xa96c}, {0x6016655b, 0x80}, {0x3, 0xffff}, {0xf17, 0xffff8001}], 0x1, 0xe3, 0x3, 0x2, 0x5}}) syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x2, 0x0, 0x8}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x3, @pix_mp={0x7f, 0x8, 0x59555956, 0x4, 0x4, [{}, {0x8000, 0x914}, {0x877, 0xffffffda}, {0xff, 0x3f}, {0x3, 0xa96c}, {0x6016655b, 0x80}, {0x3, 0xffff}, {0xf17, 0xffff8001}], 0x1, 0xe3, 0x3, 0x2, 0x5}}) (async) 21:56:54 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000040), 0x4) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x41060, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="00fe51b571cd55", @ANYRESHEX=r3, @ANYBLOB="2c706f736978e1636c2c666f776e65723d", @ANYRESDEC=0xee00, @ANYBLOB=',pcr=00000000000000000009,obj_role=.+!,mask=MAY_EXEC,euid=', @ANYRESDEC=0xee00, @ANYBLOB=',subj_user=,subj_type=,mask=^MAY_WRITE,smackfshat=\\),appraise,\x00']) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000040), 0x4) (async) pipe2$9p(&(0x7f00000000c0), 0x800) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x41060, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="00fe51b571cd55", @ANYRESHEX=r3, @ANYBLOB="2c706f736978e1636c2c666f776e65723d", @ANYRESDEC=0xee00, @ANYBLOB=',pcr=00000000000000000009,obj_role=.+!,mask=MAY_EXEC,euid=', @ANYRESDEC=0xee00, @ANYBLOB=',subj_user=,subj_type=,mask=^MAY_WRITE,smackfshat=\\),appraise,\x00']) (async) 21:56:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x2, 0x0, 0x8}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x3, @pix_mp={0x7f, 0x8, 0x59555956, 0x4, 0x4, [{}, {0x8000, 0x914}, {0x877, 0xffffffda}, {0xff, 0x3f}, {0x3, 0xa96c}, {0x6016655b, 0x80}, {0x3, 0xffff}, {0xf17, 0xffff8001}], 0x1, 0xe3, 0x3, 0x2, 0x5}}) syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x2, 0x0, 0x8}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x3, @pix_mp={0x7f, 0x8, 0x59555956, 0x4, 0x4, [{}, {0x8000, 0x914}, {0x877, 0xffffffda}, {0xff, 0x3f}, {0x3, 0xa96c}, {0x6016655b, 0x80}, {0x3, 0xffff}, {0xf17, 0xffff8001}], 0x1, 0xe3, 0x3, 0x2, 0x5}}) (async) 21:56:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:56:54 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) r1 = socket(0x1d, 0x3, 0x100) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) socket$inet(0x2, 0x801, 0x5) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x811}, 0x40) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socket(0x5, 0x4, 0x6) r3 = socket$inet(0x2, 0x5, 0x80000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000080)={0x0, @private, @broadcast}, &(0x7f0000000240)=0xc) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000500)) ioctl$ASHMEM_GET_PIN_STATUS(r6, 0x7709, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="98001600", @ANYRESDEC=r5, @ANYRES64=0x0, @ANYRES32=r5, @ANYBLOB="0800030004000000"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) 21:56:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:56:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) (async) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000040)) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:56:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x1) 21:56:54 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) (async) r1 = socket(0x1d, 0x3, 0x100) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) socket$inet(0x2, 0x801, 0x5) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x811}, 0x40) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) socket(0x5, 0x4, 0x6) (async) r3 = socket$inet(0x2, 0x5, 0x80000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000080)={0x0, @private, @broadcast}, &(0x7f0000000240)=0xc) (async) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000500)) (async, rerun: 64) ioctl$ASHMEM_GET_PIN_STATUS(r6, 0x7709, 0x0) (async, rerun: 64) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="98001600", @ANYRESDEC=r5, @ANYRES64=0x0, @ANYRES32=r5, @ANYBLOB="0800030004000000"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) 21:56:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x1) syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x1) (async) 21:56:54 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) r1 = socket(0x1d, 0x3, 0x100) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) socket$inet(0x2, 0x801, 0x5) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x811}, 0x40) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socket(0x5, 0x4, 0x6) r3 = socket$inet(0x2, 0x5, 0x80000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000080)={0x0, @private, @broadcast}, &(0x7f0000000240)=0xc) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000500)) ioctl$ASHMEM_GET_PIN_STATUS(r6, 0x7709, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="98001600", @ANYRESDEC=r5, @ANYRES64=0x0, @ANYRES32=r5, @ANYBLOB="0800030004000000"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) (async) socket(0x1d, 0x3, 0x100) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) socket$inet(0x2, 0x801, 0x5) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x811}, 0x40) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) socket(0x5, 0x4, 0x6) (async) socket$inet(0x2, 0x5, 0x80000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r4) (async) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000080)={0x0, @private, @broadcast}, &(0x7f0000000240)=0xc) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$ASHMEM_GET_PIN_STATUS(r6, 0x7709, 0x0) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="98001600", @ANYRESDEC=r5, @ANYRES64=0x0, @ANYRES32=r5, @ANYBLOB="0800030004000000"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) (async) 21:56:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x1) 21:56:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @private, @dev}, &(0x7f0000000100)=0xc) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000280)={0x0, 0x2}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x78, 0x0, 0x108, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x4091}, 0x20004000) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0xc40) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000300)={0x101, 0x1, 0x2, 0x0, 0xff}) 21:56:54 executing program 1: syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f0000000040)=""/124) socket$inet(0x2, 0xa, 0x9) r0 = socket$inet(0x2, 0x2, 0x80) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0]) 21:56:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @private, @dev}, &(0x7f0000000100)=0xc) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000280)={0x0, 0x2}) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x78, 0x0, 0x108, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x4091}, 0x20004000) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0xc40) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000300)={0x101, 0x1, 0x2, 0x0, 0xff}) 21:56:54 executing program 1: syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f0000000040)=""/124) (async) socket$inet(0x2, 0xa, 0x9) (async) r0 = socket$inet(0x2, 0x2, 0x80) (async) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0]) 21:56:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async, rerun: 32) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (rerun: 32) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @private, @dev}, &(0x7f0000000100)=0xc) (async, rerun: 64) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000280)={0x0, 0x2}) (rerun: 64) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x78, 0x0, 0x108, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x4091}, 0x20004000) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0xc40) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000300)={0x101, 0x1, 0x2, 0x0, 0xff}) 21:56:54 executing program 1: syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f0000000040)=""/124) socket$inet(0x2, 0xa, 0x9) (async) r0 = socket$inet(0x2, 0x2, 0x80) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0]) 21:56:54 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x60000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@fscache}, {@cache_loose}, {@cache_none}, {@nodevmap}, {@noextend}, {@cache_none}, {@dfltuid}], [{@uid_eq={'uid', 0x3d, r1}}]}}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000000040), 0x4) 21:56:54 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x60000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@fscache}, {@cache_loose}, {@cache_none}, {@nodevmap}, {@noextend}, {@cache_none}, {@dfltuid}], [{@uid_eq={'uid', 0x3d, r1}}]}}) (async) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000000040), 0x4) 21:56:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x3, 0x80000000, 0x3, {0x1, @vbi={0x20, 0x10000, 0x0, 0x33524742, [0xd311, 0x5ba80996], [0x1f, 0x4], 0x2}}, 0x3f}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:56:54 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x60000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@fscache}, {@cache_loose}, {@cache_none}, {@nodevmap}, {@noextend}, {@cache_none}, {@dfltuid}], [{@uid_eq={'uid', 0x3d, r1}}]}}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000000040), 0x4) 21:56:54 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) ioctl$KIOCSOUND(r2, 0x4b2f, 0xffffffffffffff81) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x2, 0x0, 0x81}) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) 21:56:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x3, 0x80000000, 0x3, {0x1, @vbi={0x20, 0x10000, 0x0, 0x33524742, [0xd311, 0x5ba80996], [0x1f, 0x4], 0x2}}, 0x3f}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:56:54 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) ioctl$KIOCSOUND(r2, 0x4b2f, 0xffffffffffffff81) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x2, 0x0, 0x81}) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) (async) ioctl$KIOCSOUND(r2, 0x4b2f, 0xffffffffffffff81) (async) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) (async) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x2, 0x0, 0x81}) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) (async) 21:56:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x3, 0x80000000, 0x3, {0x1, @vbi={0x20, 0x10000, 0x0, 0x33524742, [0xd311, 0x5ba80996], [0x1f, 0x4], 0x2}}, 0x3f}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x3, 0x80000000, 0x3, {0x1, @vbi={0x20, 0x10000, 0x0, 0x33524742, [0xd311, 0x5ba80996], [0x1f, 0x4], 0x2}}, 0x3f}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) 21:56:54 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) ioctl$KIOCSOUND(r2, 0x4b2f, 0xffffffffffffff81) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x2, 0x0, 0x81}) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) (async) ioctl$KIOCSOUND(r2, 0x4b2f, 0xffffffffffffff81) (async) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) (async) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x2, 0x0, 0x81}) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) (async) 21:56:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) 21:56:54 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000000)) 21:56:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) openat$md(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) (async) 21:56:54 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000000)) 21:56:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) 21:56:54 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000000)) 21:56:54 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x509102) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) 21:56:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f00000000c0)="37331979aa0d33f99aba5421c6cc0a72699894480a4de36f27de44053b44e7965b2b525a181813e01359f2e192f0c39517a6f452e4c4e2e8f7510363df801f6cb68d3dbfa313a17486cacf8c2139d98bd17b330b86d5d58c190b53442fc5d706f357a32c5b24871ae3aaff7d") ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1, 0x0, 0x6b}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:56:54 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x509102) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) 21:56:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f00000000c0)="37331979aa0d33f99aba5421c6cc0a72699894480a4de36f27de44053b44e7965b2b525a181813e01359f2e192f0c39517a6f452e4c4e2e8f7510363df801f6cb68d3dbfa313a17486cacf8c2139d98bd17b330b86d5d58c190b53442fc5d706f357a32c5b24871ae3aaff7d") ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1, 0x0, 0x6b}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) (async) ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f00000000c0)="37331979aa0d33f99aba5421c6cc0a72699894480a4de36f27de44053b44e7965b2b525a181813e01359f2e192f0c39517a6f452e4c4e2e8f7510363df801f6cb68d3dbfa313a17486cacf8c2139d98bd17b330b86d5d58c190b53442fc5d706f357a32c5b24871ae3aaff7d") (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1, 0x0, 0x6b}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) 21:56:54 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x509102) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x509102) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) (async) 21:56:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) (async) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f00000000c0)="37331979aa0d33f99aba5421c6cc0a72699894480a4de36f27de44053b44e7965b2b525a181813e01359f2e192f0c39517a6f452e4c4e2e8f7510363df801f6cb68d3dbfa313a17486cacf8c2139d98bd17b330b86d5d58c190b53442fc5d706f357a32c5b24871ae3aaff7d") (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1, 0x0, 0x6b}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:56:54 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)) getitimer(0x2, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x341, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f0000000100), r2, 0x31}}, 0x18) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) 21:56:54 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)) getitimer(0x2, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x341, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f0000000100), r2, 0x31}}, 0x18) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)) (async) getitimer(0x2, &(0x7f0000000000)) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080), 0x341, 0x5}}, 0x20) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f0000000100), r2, 0x31}}, 0x18) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) (async) 21:56:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r1 = syz_open_pts(0xffffffffffffffff, 0xca824db40957e6e2) r2 = syz_open_pts(r1, 0xc400) ioctl$KIOCSOUND(r2, 0x4b2f, 0x7fff) ioctl$KDADDIO(r1, 0x4b34, 0x6) 21:56:54 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async, rerun: 32) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)) (async, rerun: 64) getitimer(0x2, &(0x7f0000000000)) (rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x341, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f0000000100), r2, 0x31}}, 0x18) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) 21:56:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r1 = syz_open_pts(0xffffffffffffffff, 0xca824db40957e6e2) r2 = syz_open_pts(r1, 0xc400) ioctl$KIOCSOUND(r2, 0x4b2f, 0x7fff) ioctl$KDADDIO(r1, 0x4b34, 0x6) syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) syz_open_pts(0xffffffffffffffff, 0xca824db40957e6e2) (async) syz_open_pts(r1, 0xc400) (async) ioctl$KIOCSOUND(r2, 0x4b2f, 0x7fff) (async) ioctl$KDADDIO(r1, 0x4b34, 0x6) (async) 21:56:54 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) 21:56:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) r1 = syz_open_pts(0xffffffffffffffff, 0xca824db40957e6e2) r2 = syz_open_pts(r1, 0xc400) ioctl$KIOCSOUND(r2, 0x4b2f, 0x7fff) (async) ioctl$KDADDIO(r1, 0x4b34, 0x6) 21:56:54 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) 21:56:54 executing program 5: ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000200)) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000180)) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{}]}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x208801, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000140)) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:56:54 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) 21:56:54 executing program 5: ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000200)) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000180)) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{}]}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x208801, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000140)) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000200)) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000180)) (async) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{}]}) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x208801, 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000140)) (async) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) 21:56:54 executing program 1: setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, &(0x7f0000000000), 0x4) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x85, 0x0) 21:56:54 executing program 5: ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000200)) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000180)) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{}]}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x208801, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000140)) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000200)) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000180)) (async) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{}]}) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x208801, 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000140)) (async) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) 21:56:54 executing program 1: setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, &(0x7f0000000000), 0x4) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x85, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, &(0x7f0000000000), 0x4) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x85, 0x0) (async) 21:56:54 executing program 1: setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, &(0x7f0000000000), 0x4) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x85, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, &(0x7f0000000000), 0x4) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x85, 0x0) (async) 21:56:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:56:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:56:54 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f00000000c0)="37331979aa0d33f99aba5421c6cc0a72699894480a4de36f27de44053b44e7965b2b525a181813e01359f2e192f0c39517a6f452e4c4e2e8f7510363df801f6cb68d3dbfa313a17486cacf8c2139d98bd17b330b86d5d58c190b53442fc5d706f357a32c5b24871ae3aaff7d") ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1, 0x0, 0x6b}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:56:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:56:54 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x60000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@fscache}, {@cache_loose}, {@cache_none}, {@nodevmap}, {@noextend}, {@cache_none}, {@dfltuid}], [{@uid_eq={'uid', 0x3d, r1}}]}}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000000040), 0x4) 21:56:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000040)=0x1) 21:56:54 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x0, @raw_data="4b99cc513c1ca64a7c0320d8cc7390d4b3697258499acab18a1c0e1df5269945eecf973fd60fa5e434463e92210d93312b1844dc5968549e7ed5300b8196d12da4aad7aeaf4358dbf8e3d3803df714ce1a0316a9df2ff9cf063862f7b9e6bd7746a510cd44945341d0133d9940b090e56b34579401c15a4e2229cf4829206b71e714c037861aa728820f5fba896dc930c80e2528bfad72b6f043958f5a5c6b5cae1cb19c650616f0b7d44e30ca866ce1608acf20cf3551436fc2a7fd1ec92276d7a91fa7aeb6d84c"}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:56:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000040)=0x1) 21:56:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000040)=0x1) 21:56:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x1, {0xa, 0x4e24, 0x7, @mcast2}, r3}}, 0x38) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r4}}, 0x38) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x3e, 0x0, @ib={0x1b, 0x6, 0x8, {"2a1fc06013d3bd960d5540201d2f9d82"}, 0x20, 0x10001, 0x9}}}, 0x90) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x9, 0x400) ioctl$DRM_IOCTL_GET_CTX(r5, 0xc0086423, &(0x7f00000002c0)={0x0, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000000c0)={0x46b2, 0x4, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000040)={r8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000340)={r8}) 21:56:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x1, {0xa, 0x4e24, 0x7, @mcast2}, r3}}, 0x38) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r4}}, 0x38) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x3e, 0x0, @ib={0x1b, 0x6, 0x8, {"2a1fc06013d3bd960d5540201d2f9d82"}, 0x20, 0x10001, 0x9}}}, 0x90) (async) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x9, 0x400) ioctl$DRM_IOCTL_GET_CTX(r5, 0xc0086423, &(0x7f00000002c0)={0x0, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000000c0)={0x46b2, 0x4, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000040)={r8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000340)={r8}) 21:56:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x1, {0xa, 0x4e24, 0x7, @mcast2}, r3}}, 0x38) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r4}}, 0x38) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x3e, 0x0, @ib={0x1b, 0x6, 0x8, {"2a1fc06013d3bd960d5540201d2f9d82"}, 0x20, 0x10001, 0x9}}}, 0x90) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x9, 0x400) ioctl$DRM_IOCTL_GET_CTX(r5, 0xc0086423, &(0x7f00000002c0)={0x0, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000000c0)={0x46b2, 0x4, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000040)={r8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000340)={r8}) syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x13f, 0x5}}, 0x20) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x1, {0xa, 0x4e24, 0x7, @mcast2}, r3}}, 0x38) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r4}}, 0x38) (async) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x3e, 0x0, @ib={0x1b, 0x6, 0x8, {"2a1fc06013d3bd960d5540201d2f9d82"}, 0x20, 0x10001, 0x9}}}, 0x90) (async) syz_open_dev$dri(&(0x7f0000000280), 0x9, 0x400) (async) ioctl$DRM_IOCTL_GET_CTX(r5, 0xc0086423, &(0x7f00000002c0)={0x0, 0x3}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000000c0)={0x46b2, 0x4, 0x8}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000040)={r8}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000340)={r8}) (async) 21:56:55 executing program 5: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000000c0)=""/76) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:56:55 executing program 5: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000000c0)=""/76) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) (async) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000000c0)=""/76) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0xffffffffffffffff}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) 21:56:55 executing program 5: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000000c0)=""/76) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:56:55 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2, 0x0, 0x24}) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000040)=0x4, 0x4) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f00000000c0)) 21:56:55 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2, 0x0, 0x24}) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000040)=0x4, 0x4) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f00000000c0)) syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2, 0x0, 0x24}) (async) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000040)=0x4, 0x4) (async) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f00000000c0)) (async) 21:56:55 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2, 0x0, 0x24}) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000040)=0x4, 0x4) (async) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f00000000c0)) 21:56:55 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x0, @raw_data="4b99cc513c1ca64a7c0320d8cc7390d4b3697258499acab18a1c0e1df5269945eecf973fd60fa5e434463e92210d93312b1844dc5968549e7ed5300b8196d12da4aad7aeaf4358dbf8e3d3803df714ce1a0316a9df2ff9cf063862f7b9e6bd7746a510cd44945341d0133d9940b090e56b34579401c15a4e2229cf4829206b71e714c037861aa728820f5fba896dc930c80e2528bfad72b6f043958f5a5c6b5cae1cb19c650616f0b7d44e30ca866ce1608acf20cf3551436fc2a7fd1ec92276d7a91fa7aeb6d84c"}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:56:55 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f00000000c0)={0x0, 0x1}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x40040, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000140)={0x0, &(0x7f0000000200)=""/153}) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000040)) 21:56:55 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f00000000c0)={0x0, 0x1}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x40040, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000140)={0x0, &(0x7f0000000200)=""/153}) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000040)) 21:56:55 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f00000000c0)={0x0, 0x1}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x40040, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000140)={0x0, &(0x7f0000000200)=""/153}) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000040)) syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f00000000c0)={0x0, 0x1}) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x40040, 0x0) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000140)={0x0, &(0x7f0000000200)=""/153}) (async) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000040)) (async) 21:56:55 executing program 5: clock_gettime(0x6, &(0x7f0000000100)) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:56:55 executing program 5: clock_gettime(0x6, &(0x7f0000000100)) (async, rerun: 32) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) (rerun: 32) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:56:55 executing program 5: clock_gettime(0x6, &(0x7f0000000100)) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async, rerun: 64) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (rerun: 64) 21:56:55 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7e, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:56:55 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7e, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:56:55 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7e, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:56:55 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x10000, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xeea, 0x6}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:56:56 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x10000, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xeea, 0x6}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:56:56 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x0, @raw_data="4b99cc513c1ca64a7c0320d8cc7390d4b3697258499acab18a1c0e1df5269945eecf973fd60fa5e434463e92210d93312b1844dc5968549e7ed5300b8196d12da4aad7aeaf4358dbf8e3d3803df714ce1a0316a9df2ff9cf063862f7b9e6bd7746a510cd44945341d0133d9940b090e56b34579401c15a4e2229cf4829206b71e714c037861aa728820f5fba896dc930c80e2528bfad72b6f043958f5a5c6b5cae1cb19c650616f0b7d44e30ca866ce1608acf20cf3551436fc2a7fd1ec92276d7a91fa7aeb6d84c"}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:56:56 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x10000, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xeea, 0x6}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x10000, 0x2) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xeea, 0x6}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) 21:56:56 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000000c0)) 21:56:56 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000000c0)) 21:56:56 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000000c0)) 21:56:56 executing program 5: ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000240)={0x4, @pix={0x80000001, 0xfffffff8, 0x42303159, 0x0, 0x3, 0x5819ad3f, 0xa, 0x8, 0x1, 0x1, 0x2, 0x5}}) clock_getres(0x6, &(0x7f0000000200)) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x2, @raw_data="2b474c52b7f5b69a1e8e1f85c71553056a03d1095cc46e5dd83cb9643013d01a1c4dc461d9934a8d41494a66dc4ac1843a886ede8cb9b9ace657ace2d70a648b30ed3a4b4cda7d312c3c998acfd4e645c526913ea531eb6a0e31b1b5efdfbfbecfe0b9759cf6a23c0b31aa45c064d8f6497bc7b7ebc4f415edd2c193e1a0a030193878a468ced6a8bf1dba289eb8afb612956688b654fe766f9abd1c5d62f98fb8cb181433f75a14a5bc8cd327a5a8efb069938fddd1d5bcdbb267cff3738e9722c5b68f50a691a9"}) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000340)) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r1 = syz_open_dev$vim2m(&(0x7f0000000380), 0x6, 0x2) r2 = syz_open_dev$audion(&(0x7f00000003c0), 0x8, 0x20000) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000400)=@overlay={0x8000, 0x1, 0x4, 0x100000, 0x4, {}, {0x2, 0xc, 0x4, 0x9, 0x1, 0x1f, "e2aee728"}, 0x3, 0x3, {}, 0x2, 0x0, r2}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 21:56:56 executing program 5: ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000240)={0x4, @pix={0x80000001, 0xfffffff8, 0x42303159, 0x0, 0x3, 0x5819ad3f, 0xa, 0x8, 0x1, 0x1, 0x2, 0x5}}) clock_getres(0x6, &(0x7f0000000200)) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x2, @raw_data="2b474c52b7f5b69a1e8e1f85c71553056a03d1095cc46e5dd83cb9643013d01a1c4dc461d9934a8d41494a66dc4ac1843a886ede8cb9b9ace657ace2d70a648b30ed3a4b4cda7d312c3c998acfd4e645c526913ea531eb6a0e31b1b5efdfbfbecfe0b9759cf6a23c0b31aa45c064d8f6497bc7b7ebc4f415edd2c193e1a0a030193878a468ced6a8bf1dba289eb8afb612956688b654fe766f9abd1c5d62f98fb8cb181433f75a14a5bc8cd327a5a8efb069938fddd1d5bcdbb267cff3738e9722c5b68f50a691a9"}) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000340)) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r1 = syz_open_dev$vim2m(&(0x7f0000000380), 0x6, 0x2) r2 = syz_open_dev$audion(&(0x7f00000003c0), 0x8, 0x20000) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000400)=@overlay={0x8000, 0x1, 0x4, 0x100000, 0x4, {}, {0x2, 0xc, 0x4, 0x9, 0x1, 0x1f, "e2aee728"}, 0x3, 0x3, {}, 0x2, 0x0, r2}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000240)={0x4, @pix={0x80000001, 0xfffffff8, 0x42303159, 0x0, 0x3, 0x5819ad3f, 0xa, 0x8, 0x1, 0x1, 0x2, 0x5}}) (async) clock_getres(0x6, &(0x7f0000000200)) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x2, @raw_data="2b474c52b7f5b69a1e8e1f85c71553056a03d1095cc46e5dd83cb9643013d01a1c4dc461d9934a8d41494a66dc4ac1843a886ede8cb9b9ace657ace2d70a648b30ed3a4b4cda7d312c3c998acfd4e645c526913ea531eb6a0e31b1b5efdfbfbecfe0b9759cf6a23c0b31aa45c064d8f6497bc7b7ebc4f415edd2c193e1a0a030193878a468ced6a8bf1dba289eb8afb612956688b654fe766f9abd1c5d62f98fb8cb181433f75a14a5bc8cd327a5a8efb069938fddd1d5bcdbb267cff3738e9722c5b68f50a691a9"}) (async) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000340)) (async) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) syz_open_dev$vim2m(&(0x7f0000000380), 0x6, 0x2) (async) syz_open_dev$audion(&(0x7f00000003c0), 0x8, 0x20000) (async) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000400)=@overlay={0x8000, 0x1, 0x4, 0x100000, 0x4, {}, {0x2, 0xc, 0x4, 0x9, 0x1, 0x1f, "e2aee728"}, 0x3, 0x3, {}, 0x2, 0x0, r2}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) 21:56:56 executing program 5: ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000240)={0x4, @pix={0x80000001, 0xfffffff8, 0x42303159, 0x0, 0x3, 0x5819ad3f, 0xa, 0x8, 0x1, 0x1, 0x2, 0x5}}) clock_getres(0x6, &(0x7f0000000200)) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x2, @raw_data="2b474c52b7f5b69a1e8e1f85c71553056a03d1095cc46e5dd83cb9643013d01a1c4dc461d9934a8d41494a66dc4ac1843a886ede8cb9b9ace657ace2d70a648b30ed3a4b4cda7d312c3c998acfd4e645c526913ea531eb6a0e31b1b5efdfbfbecfe0b9759cf6a23c0b31aa45c064d8f6497bc7b7ebc4f415edd2c193e1a0a030193878a468ced6a8bf1dba289eb8afb612956688b654fe766f9abd1c5d62f98fb8cb181433f75a14a5bc8cd327a5a8efb069938fddd1d5bcdbb267cff3738e9722c5b68f50a691a9"}) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000340)) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r1 = syz_open_dev$vim2m(&(0x7f0000000380), 0x6, 0x2) r2 = syz_open_dev$audion(&(0x7f00000003c0), 0x8, 0x20000) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000400)=@overlay={0x8000, 0x1, 0x4, 0x100000, 0x4, {}, {0x2, 0xc, 0x4, 0x9, 0x1, 0x1f, "e2aee728"}, 0x3, 0x3, {}, 0x2, 0x0, r2}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000240)={0x4, @pix={0x80000001, 0xfffffff8, 0x42303159, 0x0, 0x3, 0x5819ad3f, 0xa, 0x8, 0x1, 0x1, 0x2, 0x5}}) (async) clock_getres(0x6, &(0x7f0000000200)) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x2, @raw_data="2b474c52b7f5b69a1e8e1f85c71553056a03d1095cc46e5dd83cb9643013d01a1c4dc461d9934a8d41494a66dc4ac1843a886ede8cb9b9ace657ace2d70a648b30ed3a4b4cda7d312c3c998acfd4e645c526913ea531eb6a0e31b1b5efdfbfbecfe0b9759cf6a23c0b31aa45c064d8f6497bc7b7ebc4f415edd2c193e1a0a030193878a468ced6a8bf1dba289eb8afb612956688b654fe766f9abd1c5d62f98fb8cb181433f75a14a5bc8cd327a5a8efb069938fddd1d5bcdbb267cff3738e9722c5b68f50a691a9"}) (async) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000340)) (async) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) syz_open_dev$vim2m(&(0x7f0000000380), 0x6, 0x2) (async) syz_open_dev$audion(&(0x7f00000003c0), 0x8, 0x20000) (async) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000400)=@overlay={0x8000, 0x1, 0x4, 0x100000, 0x4, {}, {0x2, 0xc, 0x4, 0x9, 0x1, 0x1f, "e2aee728"}, 0x3, 0x3, {}, 0x2, 0x0, r2}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) 21:56:56 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000140)={0x0, 0x2}) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x9, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f00000000c0)) 21:56:56 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000140)={0x0, 0x2}) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x9, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f00000000c0)) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000140)={0x0, 0x2}) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) (async) socket$bt_cmtp(0x1f, 0x3, 0x5) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f00000000c0)) (async) 21:56:56 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000140)={0x0, 0x2}) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x9, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f00000000c0)) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000140)={0x0, 0x2}) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) (async) socket$bt_cmtp(0x1f, 0x3, 0x5) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f00000000c0)) (async) 21:56:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000100)) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20000000000002, 0x2) syz_open_dev$vim2m(&(0x7f00000000c0), 0x38, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x3, 0xff, 0xf, 0x40}) 21:56:57 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x0, @raw_data="4b99cc513c1ca64a7c0320d8cc7390d4b3697258499acab18a1c0e1df5269945eecf973fd60fa5e434463e92210d93312b1844dc5968549e7ed5300b8196d12da4aad7aeaf4358dbf8e3d3803df714ce1a0316a9df2ff9cf063862f7b9e6bd7746a510cd44945341d0133d9940b090e56b34579401c15a4e2229cf4829206b71e714c037861aa728820f5fba896dc930c80e2528bfad72b6f043958f5a5c6b5cae1cb19c650616f0b7d44e30ca866ce1608acf20cf3551436fc2a7fd1ec92276d7a91fa7aeb6d84c"}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:56:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) (async) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000100)) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20000000000002, 0x2) syz_open_dev$vim2m(&(0x7f00000000c0), 0x38, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x3, 0xff, 0xf, 0x40}) 21:56:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000100)) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20000000000002, 0x2) syz_open_dev$vim2m(&(0x7f00000000c0), 0x38, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async, rerun: 64) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async, rerun: 64) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x3, 0xff, 0xf, 0x40}) 21:56:57 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x0, @raw_data="4b99cc513c1ca64a7c0320d8cc7390d4b3697258499acab18a1c0e1df5269945eecf973fd60fa5e434463e92210d93312b1844dc5968549e7ed5300b8196d12da4aad7aeaf4358dbf8e3d3803df714ce1a0316a9df2ff9cf063862f7b9e6bd7746a510cd44945341d0133d9940b090e56b34579401c15a4e2229cf4829206b71e714c037861aa728820f5fba896dc930c80e2528bfad72b6f043958f5a5c6b5cae1cb19c650616f0b7d44e30ca866ce1608acf20cf3551436fc2a7fd1ec92276d7a91fa7aeb6d84c"}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:56:57 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{}, {}, {@none}]}) 21:56:57 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x0, @raw_data="4b99cc513c1ca64a7c0320d8cc7390d4b3697258499acab18a1c0e1df5269945eecf973fd60fa5e434463e92210d93312b1844dc5968549e7ed5300b8196d12da4aad7aeaf4358dbf8e3d3803df714ce1a0316a9df2ff9cf063862f7b9e6bd7746a510cd44945341d0133d9940b090e56b34579401c15a4e2229cf4829206b71e714c037861aa728820f5fba896dc930c80e2528bfad72b6f043958f5a5c6b5cae1cb19c650616f0b7d44e30ca866ce1608acf20cf3551436fc2a7fd1ec92276d7a91fa7aeb6d84c"}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:56:57 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:56:57 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{}, {}, {@none}]}) 21:56:57 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{}, {}, {@none}]}) syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{}, {}, {@none}]}) (async) 21:56:57 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x26, 0x0, 0x3, 0x0, 0x4}) 21:56:57 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x26, 0x0, 0x3, 0x0, 0x4}) syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x26, 0x0, 0x3, 0x0, 0x4}) (async) 21:56:57 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x26, 0x0, 0x3, 0x0, 0x4}) 21:56:57 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000500)={0x0, 0x2, 0x0, &(0x7f00000000c0)=[{}, {}], 0x4, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}], 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x5}) 21:56:57 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000500)={0x0, 0x2, 0x0, &(0x7f00000000c0)=[{}, {}], 0x4, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}], 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x5}) 21:56:57 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000500)={0x0, 0x2, 0x0, &(0x7f00000000c0)=[{}, {}], 0x4, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}], 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) (async, rerun: 64) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async, rerun: 64) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x5}) 21:56:57 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)=@userptr={0x9, 0x0, 0x4, 0x104020, 0x5, {0x0, 0x2710}, {0x0, 0x8, 0x1, 0x81, 0xfc, 0xf9, "eecdc36d"}, 0x40, 0x2, {}, 0x7, 0x0, r2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000540)="77e961a88b55506ef42b4f7b31d04bcbb78949cda6db478c1d1471c4c893c58217fbb7f4f3e170393cdb33b3922c6d05209e862043eb4fabc9a0d855db9f1d2ac685dc139c4461cb7ba047154197a1f62901dcf1dbf6f982c6435df7a61ce47d16d1fe73ea49cccba58eca55b72492461e3310cebeaa4c61101ccdb1ef6d8ee86cc278c9521be2a6f865510ebd7ac0d598ef28f2f674963dfc9ee3650a8f0361b5df14aafcc249812d258ff9502bc7482ee044917265090fdf31432effdfe94330b422bf53e47d7e5ca761bf3de8aec9bbe39196ed90692a5a5d293962d69a390d9da86170b13cb60157652e99aea1a8200d21bcf4dd23089c7b4d67e927652a86d03a080f6d411b2ac7ad2126ad600467e6dd206f7aa739baee815a9eb3d490777e32113cdc32441e48ceb06fc892fedeb7b29aa4c6a799615a9e2fe274f1e4e5bcb9c7c5e8408e41fb1b1fb377e1e7baeb9b9c79ea04851f91ad97f566c86a15d3aa9d80ba30d84aa443ff7604ce687975c35377d0d921f6b8b1a6a3974d3ee8b01a320ac723de5357f8b91e1c3d68c73185eec75a6a6b816cba09811860c97e3504e3842000798437e82ac3a8ef8064e78c657465062a30530651ac847ba920210c9a0ecb9a8ba5d241707351d4781615eed83bf3d349129737daae239abd5b53f9f482ce0e75fb5a5ce2465619ebeae0d6ca05b3bfc7afff1f1dab5a8c41e58e74056190c29a76431fe7cb2d853482a2b244a5916c54b8560a6f5cd8a996a4b3d823367bd68708ea2bf3494b0d2b8c38ddd68f6907ddb88d94f08b60fea62ea5c611a148da73db38f75230a85ef181e87be3acec295065785a9e15597659d01c9326f2c959f8b06e0cde68403280f35ea05079c8464decbc690b923b87e664306ab735e80915fd2a6b43d2109d6edc6fd05d1d5a73ed7f2cadd3593c4703eea44421332926e60cc982fba0230e89cb5a27dfda7ea2c6bde12e8f46a7260651635b76af4030acb9fba8bd763fca9adc31f0ca445b2caba7738331dd0239403b8edf40f41e99ccaf63a6f4556ef832ad8345f069180b0b13dfc0667249b8cecaff8ad28d4f34ecec3ff9704972a3bb212a1fe66a6a9fa2ccba711fc7b470b5e9a56206282310c8fc1a1548570aa2657a3549c6b3a0a531e432238dc9e3841bc835994e88cc1f09341ebc2d9e2d091fb34f62bbeec45076ee299fe17996d3e5c1bbf18b50ed085418139a804b755ddd3fae3d03a1990314e732c9ab923cd1aafe2570dd2dac0c6595bb6cd9d4243a669d16cb0f7ddc826b6f9b5a4eb8c4f4822a963696465ee8b5e99b4c614a3a2302ee8941bd0b37ae4578ba607762698d245d76f8a79a0a56ed6b01e1a594150f9f7b15b7d346886227646aa14b55c47db24af763fb92683a80029f2da24d1b6a0071c07da69b5f891b38696d270cb5387768b167ca106a929042fc09830f61c91db65764ff37947a653ff391a5f4c41cc3dc2ec52eb205f645740e2ae5709b2d87cbd77e9df9fc6d226033f5c46bf2c8feb8742acb95c215a18b411569e4e2cf6ffb9f009f014793ce09543b67882b6eefae2854c44bb15fc7b90e106a0fffca55877400961dbc42c1aa2282f659f50c019018d1747e78210cfe122512f7a0685ee2dcfc0046348ac4f22aabf83ad3ca680b64276c57584f5ea367ed8af716b5756ba679e2836faf4e2e433961bac093f31e82b0338764305fb48599c8b794e98183fec7716fe15743aad50c73e11cfb73d0e5ccecbc509d5f51d0ae745cf23259211b5580550656baacb07386de951e59a4b6e1b0cfc14696e4ba650e4a1b3f04d28f914249b2314f72718b4f2b35681b8011cd144068403360e8b007e4be5ff8f4ccf9098adeb09eb9f73f08e7aadc6816ab1872bc93c81c8606284b3364257682fe6494e4a1cd29804ca887b39cb19a6e86718eef3634800e02c584da2be6901acd0ebf2eeb532c822b2dd81e7fb5b3fbea7b29ba2d853edbc06ada01fb5a8637dade851424a9053e22a0eef67cbb31937c2b85cc663ebee2af584a2543f27eb76e201531a8cf3e8743496720cafc76315c31c9d08bc3c761c8c384d7189ed2a25b8551cd8b7818917e302b05893fe8a7f3dbf41e7b46edff16afe1981b82998a9bf44ac83ebb0dfbac1f663850755df058b29bdf3ebc3f55f911bec001970de2e573ece87e07be504531c777d83f9c7aca372b4da0a09d5053161f653bd4e33037e5149ca28fa59d023406cb6271a9f057c78b72c45eb33ee69a8d2352ab4e289352b4d245ae0186f42d35016cdb8d28eac975fe76310f2589cfb7e97dba67f1d386a922699c74739fa8b949f6eec2bfdffcc0c42531c83aac119e734b06818b798874252750e572d184d5cccafa13fb61a6744729c63547538c85d1c5ebb7d0941b2ccc603547131d16e0759433a0a60c326bc79170894c97ad5867eb2084eb31f34e86124c6ee9e4bf1c79e31a2fea73cf04caee97772ab69128cb6de721c4a3f42229a83f3817aa0fe9b563848efeb1084ca3189c5e75e836167dedc6e003693b350b8e8cea828e5bcb7e53f5b68f9219fb5119ddbc43e90ee95c6159c29a423ca70ca5e34a735dc7f83c61aea5c9fd23a1643a01e1764c7690f8fdbb93c445d81d92c87e0b63b16d782242ab50040944227618dc93bceb0278504070ad1dba2c122830c5a481b0d9fbed51983a79bee7c611639cfd5c24a68d78a8efe38fb8e9869f75c3eabf79b5f84850b31d2ca4ec4408ee43d6eb9a1db839f2417c125ff68a1514524681efdb3f22835f5a3e41220a6301e0434ad8a2f10c5b244d6eb5cc61571bbdf2b5796fccd81c9f1b6e665aad7c0b51282e53bfc118d46a5109c9f9e42973f4d599cba587a4879f7b9df029c189676721e86ff5342ca8e13cfc1ec739f5725723a1be5057e17964f73c35330bc1ce55eeb3461332e41d26971215e4e686ca316e3a741414729b4a00b676365a235392e261223f5f14befa3840bd48ece01f47fd8d95b3aee06d5baceb76e0b75b4e08d404746f2d79b94f8e3678f62da07dd62cd8edb37a5090dceb7855e579b2c8cd16f898d03e36c235c8715ed38468a1093aff902a71efe951df3a57435b4bfd2802d15906d94bf39edbb07e58be8ab7f0caca18d01e2415806966dcd5f500472478d051a6c5bcdceb512ec4eb4473007554e3f291ebe8fb1ee32c6b75918689e3f79fc618e318df9d2b94f7db80d4ccf0c3fab2298c8c13e865b3b03d400defa93b292650764c903f6f0fb91cf521beaf7a3fff506ac85f4987492f8a8ecb65fba3bb4f17b74201fd4f292f84b91e0e3c3fd373638d15fe4c110be119aed41d425b25cb9ce0815abd0ea4ab996002638baa8d700bf4c3984cf9ea480aeb057d7ebce5c4ac319ba74e5e1527acec46e8388b626040ee816f70df214f7348467d391a15e7d70fdba953772db4fcf21e96124074bf900c9fe567fec5950037be6a837f867520236fab7d16251375d524ca098bb33ed2281bf643a2e5f5a0cfd6664aacb6cd91215e94c29d2393eefd25c6eca528a94c931654166410158afca810fdd178897f0a93d7deae9b15f214064a74a37054bf6034cbfccacf803be36e18a3db5e176a627ecd90fbc5a93a535560362b2a056572faaceb7db131c480f70101fa53e1f05cc6edadb83c1590e1a98857b01d2b1befd4e21d6cb683dc00c56f376b9392347c627f4f56da04c64222c9f3dc27ca52406820d55afecd6c22c86a85731983a4389ca4d54817b182ff5d5ca01f7b361c8eaaff9e8a9448336eba9cd7ebd17592250ca80682f40535fa1377ec738e2afb49ab25a90aed640f1f45b1797363b31fa5cb9a1ea7bb0d81e057066711153a240191ca57698d06cad1232c9e0e00236c4ce26b85791bdb23404cad9323996947e1b13b803bf3090da1c5f3dde43ef9e883554b1d88c3e399f39eb14bfc62a3fb6ef3e5b71906df713d122e4c45fc772d0a54d2a7ad48283fc69a5ee26ef42e368f78fe36f6d79a9e3a9b79d8067cd1ca214ee5fd19419c7638806c55e5ece5cdd858e5d0d923b2a6166b8c7ff676350f33ce720db2639103b1cdb532321dbc1ec18f4ae503061845d432cb041c0277419fd1a790e4141bc38de077e5c47269ee6d98e62c1e77a13f4d6458ff5c6f92ed5f90a84fc7b91802517df7dbaa5f3503a72358b912640eb40a1855d3113f2a0b7da368344eb586c51182d15b07e36ea8e23e179308efc6f8875dd5c24dd5c16bc0a8df296c9039f211b95cb7016e4112edbb524ba6c98f2469be86c7a80a7179238b05b2aeefeffc2c37d73351a4ce068868bd49e21ec31a585e2130d27283c66b1a71fcdd2c7bb596081cba0084cfa0490197758da2e9f7152ce50a983b854f94233b9c5a8ac597c401871f01b0c965e07665490d2ecc991e487d3ece6f6cef60b036936cef15c7ac61df2ff04a369543ffca3cdd339f7572c97091914a881f9c8e1f45aaac416c9a3468f62e2267ea3b4cbc244116d89cba8fe27238a563c6b55a459e69340883e9d5bb091c888a81c141ad15054b9618c7c1b5626e3c93b2652772af94172a50d7d30b31fadc926b739d79c3331b21a88d7c0745748a88a74587135faab971c555e3fef43e83f25016bf4769bdb5c4a8adad9148897700661e95c2d53facfe8937e0aafa55d305bb24483510a012fe0f42ddb04b9705c373d123866405f0a0a4715ec632450c9785573671da89e3f74cd9c3a62abb24f01b83b587119069c52944c2bf08a402826701d0a4768f6497665cb7de6b5dfb994cba2c93ee0df1c8c037cf947aa0716bdbe34668509a4c6053dadbad252c687840e915a7778406726510d1acdf85bf8017979bc5161c444b7c07140d6f7300ec8939214ad566dd8c101d26e5c75e1e723c1e9a2b1fc11bda1fee7555b27f5298be50334f5f79974f47e57df3e7802b5b5541af0c76b6ad5cfe83a2d72834721e313d1b2e5ed74fdeaf890561ccb8de78f5402bb332d74cf8be2aaee35b64d07151e0be0f0f23d5b81526a4883ba7bf7aa88a774fd4394d6108a18cb4bb3980df825f8c7d83c527d710921338b72e06aea6b1e8b68e54cbe92702462114080777572e365fde6ac3d50806367aa899fd36ded6d6002ddb1f8d2fe8ca8a6812167ba5f2068352657f60c39e34eb2f102c0121b57876760cd10b211f580066ed2337d6f55442467d1501f75bf695ada9fb08c242818b341a6efe8892f5dc451a0b0f153bd23720a1e2db0f7d8f340f203d65cd009e6a58043376ab599b64b336cb0ed3ed552e970ed7e38780cea546fdb6e8dbbe1a702c92180dc211560e8532094af8e361f5b623f719f633ec99064a9c5c5a7efa3f6f74afec983e6b7799721ba52d4f85c91c66dfcfe194e6b700e3ee5232928dd4155ab9ee80d6db07f7783b71dfd0fd27e3eb639e38dcacbeae98cbec5320d850b19ee7d0658c9a59ad42b6adf32dc5486147c5913f0a003b5f97fa578d1775a01d932e6b82b5987e041f9a63557498ab40d9d9a8c41092c5e03c18d19fee27162465648fa2a14f7f8235d3a0d3443bdc7c66ac757d7fe68b467284a98f0d662fcc297462dbba022150d299178c77c9931b9de098424b51fe81479d7210e5df49c684394938c75bfb920aba8a20fa948d7849cdf4ae7bed160524a1a6f11a56a6c8e46f2abd622df3d2ae76f7d2f16692f433057d1e93bd359345b221e293a97811fb6e73210a405c0d063625957bc8cfa64d01c009bf2332d6b8e558c4c87aa48a38") ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000000c0)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000500)) ioctl$ASHMEM_GET_PIN_STATUS(r4, 0x7709, 0x0) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x94a46) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000200)={0x2, 0xfff, 0x540, 0x80}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1) 21:56:57 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)=@userptr={0x9, 0x0, 0x4, 0x104020, 0x5, {0x0, 0x2710}, {0x0, 0x8, 0x1, 0x81, 0xfc, 0xf9, "eecdc36d"}, 0x40, 0x2, {}, 0x7, 0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000540)="77e961a88b55506ef42b4f7b31d04bcbb78949cda6db478c1d1471c4c893c58217fbb7f4f3e170393cdb33b3922c6d05209e862043eb4fabc9a0d855db9f1d2ac685dc139c4461cb7ba047154197a1f62901dcf1dbf6f982c6435df7a61ce47d16d1fe73ea49cccba58eca55b72492461e3310cebeaa4c61101ccdb1ef6d8ee86cc278c9521be2a6f865510ebd7ac0d598ef28f2f674963dfc9ee3650a8f0361b5df14aafcc249812d258ff9502bc7482ee044917265090fdf31432effdfe94330b422bf53e47d7e5ca761bf3de8aec9bbe39196ed90692a5a5d293962d69a390d9da86170b13cb60157652e99aea1a8200d21bcf4dd23089c7b4d67e927652a86d03a080f6d411b2ac7ad2126ad600467e6dd206f7aa739baee815a9eb3d490777e32113cdc32441e48ceb06fc892fedeb7b29aa4c6a799615a9e2fe274f1e4e5bcb9c7c5e8408e41fb1b1fb377e1e7baeb9b9c79ea04851f91ad97f566c86a15d3aa9d80ba30d84aa443ff7604ce687975c35377d0d921f6b8b1a6a3974d3ee8b01a320ac723de5357f8b91e1c3d68c73185eec75a6a6b816cba09811860c97e3504e3842000798437e82ac3a8ef8064e78c657465062a30530651ac847ba920210c9a0ecb9a8ba5d241707351d4781615eed83bf3d349129737daae239abd5b53f9f482ce0e75fb5a5ce2465619ebeae0d6ca05b3bfc7afff1f1dab5a8c41e58e74056190c29a76431fe7cb2d853482a2b244a5916c54b8560a6f5cd8a996a4b3d823367bd68708ea2bf3494b0d2b8c38ddd68f6907ddb88d94f08b60fea62ea5c611a148da73db38f75230a85ef181e87be3acec295065785a9e15597659d01c9326f2c959f8b06e0cde68403280f35ea05079c8464decbc690b923b87e664306ab735e80915fd2a6b43d2109d6edc6fd05d1d5a73ed7f2cadd3593c4703eea44421332926e60cc982fba0230e89cb5a27dfda7ea2c6bde12e8f46a7260651635b76af4030acb9fba8bd763fca9adc31f0ca445b2caba7738331dd0239403b8edf40f41e99ccaf63a6f4556ef832ad8345f069180b0b13dfc0667249b8cecaff8ad28d4f34ecec3ff9704972a3bb212a1fe66a6a9fa2ccba711fc7b470b5e9a56206282310c8fc1a1548570aa2657a3549c6b3a0a531e432238dc9e3841bc835994e88cc1f09341ebc2d9e2d091fb34f62bbeec45076ee299fe17996d3e5c1bbf18b50ed085418139a804b755ddd3fae3d03a1990314e732c9ab923cd1aafe2570dd2dac0c6595bb6cd9d4243a669d16cb0f7ddc826b6f9b5a4eb8c4f4822a963696465ee8b5e99b4c614a3a2302ee8941bd0b37ae4578ba607762698d245d76f8a79a0a56ed6b01e1a594150f9f7b15b7d346886227646aa14b55c47db24af763fb92683a80029f2da24d1b6a0071c07da69b5f891b38696d270cb5387768b167ca106a929042fc09830f61c91db65764ff37947a653ff391a5f4c41cc3dc2ec52eb205f645740e2ae5709b2d87cbd77e9df9fc6d226033f5c46bf2c8feb8742acb95c215a18b411569e4e2cf6ffb9f009f014793ce09543b67882b6eefae2854c44bb15fc7b90e106a0fffca55877400961dbc42c1aa2282f659f50c019018d1747e78210cfe122512f7a0685ee2dcfc0046348ac4f22aabf83ad3ca680b64276c57584f5ea367ed8af716b5756ba679e2836faf4e2e433961bac093f31e82b0338764305fb48599c8b794e98183fec7716fe15743aad50c73e11cfb73d0e5ccecbc509d5f51d0ae745cf23259211b5580550656baacb07386de951e59a4b6e1b0cfc14696e4ba650e4a1b3f04d28f914249b2314f72718b4f2b35681b8011cd144068403360e8b007e4be5ff8f4ccf9098adeb09eb9f73f08e7aadc6816ab1872bc93c81c8606284b3364257682fe6494e4a1cd29804ca887b39cb19a6e86718eef3634800e02c584da2be6901acd0ebf2eeb532c822b2dd81e7fb5b3fbea7b29ba2d853edbc06ada01fb5a8637dade851424a9053e22a0eef67cbb31937c2b85cc663ebee2af584a2543f27eb76e201531a8cf3e8743496720cafc76315c31c9d08bc3c761c8c384d7189ed2a25b8551cd8b7818917e302b05893fe8a7f3dbf41e7b46edff16afe1981b82998a9bf44ac83ebb0dfbac1f663850755df058b29bdf3ebc3f55f911bec001970de2e573ece87e07be504531c777d83f9c7aca372b4da0a09d5053161f653bd4e33037e5149ca28fa59d023406cb6271a9f057c78b72c45eb33ee69a8d2352ab4e289352b4d245ae0186f42d35016cdb8d28eac975fe76310f2589cfb7e97dba67f1d386a922699c74739fa8b949f6eec2bfdffcc0c42531c83aac119e734b06818b798874252750e572d184d5cccafa13fb61a6744729c63547538c85d1c5ebb7d0941b2ccc603547131d16e0759433a0a60c326bc79170894c97ad5867eb2084eb31f34e86124c6ee9e4bf1c79e31a2fea73cf04caee97772ab69128cb6de721c4a3f42229a83f3817aa0fe9b563848efeb1084ca3189c5e75e836167dedc6e003693b350b8e8cea828e5bcb7e53f5b68f9219fb5119ddbc43e90ee95c6159c29a423ca70ca5e34a735dc7f83c61aea5c9fd23a1643a01e1764c7690f8fdbb93c445d81d92c87e0b63b16d782242ab50040944227618dc93bceb0278504070ad1dba2c122830c5a481b0d9fbed51983a79bee7c611639cfd5c24a68d78a8efe38fb8e9869f75c3eabf79b5f84850b31d2ca4ec4408ee43d6eb9a1db839f2417c125ff68a1514524681efdb3f22835f5a3e41220a6301e0434ad8a2f10c5b244d6eb5cc61571bbdf2b5796fccd81c9f1b6e665aad7c0b51282e53bfc118d46a5109c9f9e42973f4d599cba587a4879f7b9df029c189676721e86ff5342ca8e13cfc1ec739f5725723a1be5057e17964f73c35330bc1ce55eeb3461332e41d26971215e4e686ca316e3a741414729b4a00b676365a235392e261223f5f14befa3840bd48ece01f47fd8d95b3aee06d5baceb76e0b75b4e08d404746f2d79b94f8e3678f62da07dd62cd8edb37a5090dceb7855e579b2c8cd16f898d03e36c235c8715ed38468a1093aff902a71efe951df3a57435b4bfd2802d15906d94bf39edbb07e58be8ab7f0caca18d01e2415806966dcd5f500472478d051a6c5bcdceb512ec4eb4473007554e3f291ebe8fb1ee32c6b75918689e3f79fc618e318df9d2b94f7db80d4ccf0c3fab2298c8c13e865b3b03d400defa93b292650764c903f6f0fb91cf521beaf7a3fff506ac85f4987492f8a8ecb65fba3bb4f17b74201fd4f292f84b91e0e3c3fd373638d15fe4c110be119aed41d425b25cb9ce0815abd0ea4ab996002638baa8d700bf4c3984cf9ea480aeb057d7ebce5c4ac319ba74e5e1527acec46e8388b626040ee816f70df214f7348467d391a15e7d70fdba953772db4fcf21e96124074bf900c9fe567fec5950037be6a837f867520236fab7d16251375d524ca098bb33ed2281bf643a2e5f5a0cfd6664aacb6cd91215e94c29d2393eefd25c6eca528a94c931654166410158afca810fdd178897f0a93d7deae9b15f214064a74a37054bf6034cbfccacf803be36e18a3db5e176a627ecd90fbc5a93a535560362b2a056572faaceb7db131c480f70101fa53e1f05cc6edadb83c1590e1a98857b01d2b1befd4e21d6cb683dc00c56f376b9392347c627f4f56da04c64222c9f3dc27ca52406820d55afecd6c22c86a85731983a4389ca4d54817b182ff5d5ca01f7b361c8eaaff9e8a9448336eba9cd7ebd17592250ca80682f40535fa1377ec738e2afb49ab25a90aed640f1f45b1797363b31fa5cb9a1ea7bb0d81e057066711153a240191ca57698d06cad1232c9e0e00236c4ce26b85791bdb23404cad9323996947e1b13b803bf3090da1c5f3dde43ef9e883554b1d88c3e399f39eb14bfc62a3fb6ef3e5b71906df713d122e4c45fc772d0a54d2a7ad48283fc69a5ee26ef42e368f78fe36f6d79a9e3a9b79d8067cd1ca214ee5fd19419c7638806c55e5ece5cdd858e5d0d923b2a6166b8c7ff676350f33ce720db2639103b1cdb532321dbc1ec18f4ae503061845d432cb041c0277419fd1a790e4141bc38de077e5c47269ee6d98e62c1e77a13f4d6458ff5c6f92ed5f90a84fc7b91802517df7dbaa5f3503a72358b912640eb40a1855d3113f2a0b7da368344eb586c51182d15b07e36ea8e23e179308efc6f8875dd5c24dd5c16bc0a8df296c9039f211b95cb7016e4112edbb524ba6c98f2469be86c7a80a7179238b05b2aeefeffc2c37d73351a4ce068868bd49e21ec31a585e2130d27283c66b1a71fcdd2c7bb596081cba0084cfa0490197758da2e9f7152ce50a983b854f94233b9c5a8ac597c401871f01b0c965e07665490d2ecc991e487d3ece6f6cef60b036936cef15c7ac61df2ff04a369543ffca3cdd339f7572c97091914a881f9c8e1f45aaac416c9a3468f62e2267ea3b4cbc244116d89cba8fe27238a563c6b55a459e69340883e9d5bb091c888a81c141ad15054b9618c7c1b5626e3c93b2652772af94172a50d7d30b31fadc926b739d79c3331b21a88d7c0745748a88a74587135faab971c555e3fef43e83f25016bf4769bdb5c4a8adad9148897700661e95c2d53facfe8937e0aafa55d305bb24483510a012fe0f42ddb04b9705c373d123866405f0a0a4715ec632450c9785573671da89e3f74cd9c3a62abb24f01b83b587119069c52944c2bf08a402826701d0a4768f6497665cb7de6b5dfb994cba2c93ee0df1c8c037cf947aa0716bdbe34668509a4c6053dadbad252c687840e915a7778406726510d1acdf85bf8017979bc5161c444b7c07140d6f7300ec8939214ad566dd8c101d26e5c75e1e723c1e9a2b1fc11bda1fee7555b27f5298be50334f5f79974f47e57df3e7802b5b5541af0c76b6ad5cfe83a2d72834721e313d1b2e5ed74fdeaf890561ccb8de78f5402bb332d74cf8be2aaee35b64d07151e0be0f0f23d5b81526a4883ba7bf7aa88a774fd4394d6108a18cb4bb3980df825f8c7d83c527d710921338b72e06aea6b1e8b68e54cbe92702462114080777572e365fde6ac3d50806367aa899fd36ded6d6002ddb1f8d2fe8ca8a6812167ba5f2068352657f60c39e34eb2f102c0121b57876760cd10b211f580066ed2337d6f55442467d1501f75bf695ada9fb08c242818b341a6efe8892f5dc451a0b0f153bd23720a1e2db0f7d8f340f203d65cd009e6a58043376ab599b64b336cb0ed3ed552e970ed7e38780cea546fdb6e8dbbe1a702c92180dc211560e8532094af8e361f5b623f719f633ec99064a9c5c5a7efa3f6f74afec983e6b7799721ba52d4f85c91c66dfcfe194e6b700e3ee5232928dd4155ab9ee80d6db07f7783b71dfd0fd27e3eb639e38dcacbeae98cbec5320d850b19ee7d0658c9a59ad42b6adf32dc5486147c5913f0a003b5f97fa578d1775a01d932e6b82b5987e041f9a63557498ab40d9d9a8c41092c5e03c18d19fee27162465648fa2a14f7f8235d3a0d3443bdc7c66ac757d7fe68b467284a98f0d662fcc297462dbba022150d299178c77c9931b9de098424b51fe81479d7210e5df49c684394938c75bfb920aba8a20fa948d7849cdf4ae7bed160524a1a6f11a56a6c8e46f2abd622df3d2ae76f7d2f16692f433057d1e93bd359345b221e293a97811fb6e73210a405c0d063625957bc8cfa64d01c009bf2332d6b8e558c4c87aa48a38") (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000000c0)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000500)) ioctl$ASHMEM_GET_PIN_STATUS(r4, 0x7709, 0x0) (async) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x94a46) (async, rerun: 64) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000200)={0x2, 0xfff, 0x540, 0x80}) (async, rerun: 64) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1) (rerun: 64) 21:56:57 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) (async, rerun: 32) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async, rerun: 32) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async, rerun: 64) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)=@userptr={0x9, 0x0, 0x4, 0x104020, 0x5, {0x0, 0x2710}, {0x0, 0x8, 0x1, 0x81, 0xfc, 0xf9, "eecdc36d"}, 0x40, 0x2, {}, 0x7, 0x0, r2}) (rerun: 64) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) (async, rerun: 32) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000540)="77e961a88b55506ef42b4f7b31d04bcbb78949cda6db478c1d1471c4c893c58217fbb7f4f3e170393cdb33b3922c6d05209e862043eb4fabc9a0d855db9f1d2ac685dc139c4461cb7ba047154197a1f62901dcf1dbf6f982c6435df7a61ce47d16d1fe73ea49cccba58eca55b72492461e3310cebeaa4c61101ccdb1ef6d8ee86cc278c9521be2a6f865510ebd7ac0d598ef28f2f674963dfc9ee3650a8f0361b5df14aafcc249812d258ff9502bc7482ee044917265090fdf31432effdfe94330b422bf53e47d7e5ca761bf3de8aec9bbe39196ed90692a5a5d293962d69a390d9da86170b13cb60157652e99aea1a8200d21bcf4dd23089c7b4d67e927652a86d03a080f6d411b2ac7ad2126ad600467e6dd206f7aa739baee815a9eb3d490777e32113cdc32441e48ceb06fc892fedeb7b29aa4c6a799615a9e2fe274f1e4e5bcb9c7c5e8408e41fb1b1fb377e1e7baeb9b9c79ea04851f91ad97f566c86a15d3aa9d80ba30d84aa443ff7604ce687975c35377d0d921f6b8b1a6a3974d3ee8b01a320ac723de5357f8b91e1c3d68c73185eec75a6a6b816cba09811860c97e3504e3842000798437e82ac3a8ef8064e78c657465062a30530651ac847ba920210c9a0ecb9a8ba5d241707351d4781615eed83bf3d349129737daae239abd5b53f9f482ce0e75fb5a5ce2465619ebeae0d6ca05b3bfc7afff1f1dab5a8c41e58e74056190c29a76431fe7cb2d853482a2b244a5916c54b8560a6f5cd8a996a4b3d823367bd68708ea2bf3494b0d2b8c38ddd68f6907ddb88d94f08b60fea62ea5c611a148da73db38f75230a85ef181e87be3acec295065785a9e15597659d01c9326f2c959f8b06e0cde68403280f35ea05079c8464decbc690b923b87e664306ab735e80915fd2a6b43d2109d6edc6fd05d1d5a73ed7f2cadd3593c4703eea44421332926e60cc982fba0230e89cb5a27dfda7ea2c6bde12e8f46a7260651635b76af4030acb9fba8bd763fca9adc31f0ca445b2caba7738331dd0239403b8edf40f41e99ccaf63a6f4556ef832ad8345f069180b0b13dfc0667249b8cecaff8ad28d4f34ecec3ff9704972a3bb212a1fe66a6a9fa2ccba711fc7b470b5e9a56206282310c8fc1a1548570aa2657a3549c6b3a0a531e432238dc9e3841bc835994e88cc1f09341ebc2d9e2d091fb34f62bbeec45076ee299fe17996d3e5c1bbf18b50ed085418139a804b755ddd3fae3d03a1990314e732c9ab923cd1aafe2570dd2dac0c6595bb6cd9d4243a669d16cb0f7ddc826b6f9b5a4eb8c4f4822a963696465ee8b5e99b4c614a3a2302ee8941bd0b37ae4578ba607762698d245d76f8a79a0a56ed6b01e1a594150f9f7b15b7d346886227646aa14b55c47db24af763fb92683a80029f2da24d1b6a0071c07da69b5f891b38696d270cb5387768b167ca106a929042fc09830f61c91db65764ff37947a653ff391a5f4c41cc3dc2ec52eb205f645740e2ae5709b2d87cbd77e9df9fc6d226033f5c46bf2c8feb8742acb95c215a18b411569e4e2cf6ffb9f009f014793ce09543b67882b6eefae2854c44bb15fc7b90e106a0fffca55877400961dbc42c1aa2282f659f50c019018d1747e78210cfe122512f7a0685ee2dcfc0046348ac4f22aabf83ad3ca680b64276c57584f5ea367ed8af716b5756ba679e2836faf4e2e433961bac093f31e82b0338764305fb48599c8b794e98183fec7716fe15743aad50c73e11cfb73d0e5ccecbc509d5f51d0ae745cf23259211b5580550656baacb07386de951e59a4b6e1b0cfc14696e4ba650e4a1b3f04d28f914249b2314f72718b4f2b35681b8011cd144068403360e8b007e4be5ff8f4ccf9098adeb09eb9f73f08e7aadc6816ab1872bc93c81c8606284b3364257682fe6494e4a1cd29804ca887b39cb19a6e86718eef3634800e02c584da2be6901acd0ebf2eeb532c822b2dd81e7fb5b3fbea7b29ba2d853edbc06ada01fb5a8637dade851424a9053e22a0eef67cbb31937c2b85cc663ebee2af584a2543f27eb76e201531a8cf3e8743496720cafc76315c31c9d08bc3c761c8c384d7189ed2a25b8551cd8b7818917e302b05893fe8a7f3dbf41e7b46edff16afe1981b82998a9bf44ac83ebb0dfbac1f663850755df058b29bdf3ebc3f55f911bec001970de2e573ece87e07be504531c777d83f9c7aca372b4da0a09d5053161f653bd4e33037e5149ca28fa59d023406cb6271a9f057c78b72c45eb33ee69a8d2352ab4e289352b4d245ae0186f42d35016cdb8d28eac975fe76310f2589cfb7e97dba67f1d386a922699c74739fa8b949f6eec2bfdffcc0c42531c83aac119e734b06818b798874252750e572d184d5cccafa13fb61a6744729c63547538c85d1c5ebb7d0941b2ccc603547131d16e0759433a0a60c326bc79170894c97ad5867eb2084eb31f34e86124c6ee9e4bf1c79e31a2fea73cf04caee97772ab69128cb6de721c4a3f42229a83f3817aa0fe9b563848efeb1084ca3189c5e75e836167dedc6e003693b350b8e8cea828e5bcb7e53f5b68f9219fb5119ddbc43e90ee95c6159c29a423ca70ca5e34a735dc7f83c61aea5c9fd23a1643a01e1764c7690f8fdbb93c445d81d92c87e0b63b16d782242ab50040944227618dc93bceb0278504070ad1dba2c122830c5a481b0d9fbed51983a79bee7c611639cfd5c24a68d78a8efe38fb8e9869f75c3eabf79b5f84850b31d2ca4ec4408ee43d6eb9a1db839f2417c125ff68a1514524681efdb3f22835f5a3e41220a6301e0434ad8a2f10c5b244d6eb5cc61571bbdf2b5796fccd81c9f1b6e665aad7c0b51282e53bfc118d46a5109c9f9e42973f4d599cba587a4879f7b9df029c189676721e86ff5342ca8e13cfc1ec739f5725723a1be5057e17964f73c35330bc1ce55eeb3461332e41d26971215e4e686ca316e3a741414729b4a00b676365a235392e261223f5f14befa3840bd48ece01f47fd8d95b3aee06d5baceb76e0b75b4e08d404746f2d79b94f8e3678f62da07dd62cd8edb37a5090dceb7855e579b2c8cd16f898d03e36c235c8715ed38468a1093aff902a71efe951df3a57435b4bfd2802d15906d94bf39edbb07e58be8ab7f0caca18d01e2415806966dcd5f500472478d051a6c5bcdceb512ec4eb4473007554e3f291ebe8fb1ee32c6b75918689e3f79fc618e318df9d2b94f7db80d4ccf0c3fab2298c8c13e865b3b03d400defa93b292650764c903f6f0fb91cf521beaf7a3fff506ac85f4987492f8a8ecb65fba3bb4f17b74201fd4f292f84b91e0e3c3fd373638d15fe4c110be119aed41d425b25cb9ce0815abd0ea4ab996002638baa8d700bf4c3984cf9ea480aeb057d7ebce5c4ac319ba74e5e1527acec46e8388b626040ee816f70df214f7348467d391a15e7d70fdba953772db4fcf21e96124074bf900c9fe567fec5950037be6a837f867520236fab7d16251375d524ca098bb33ed2281bf643a2e5f5a0cfd6664aacb6cd91215e94c29d2393eefd25c6eca528a94c931654166410158afca810fdd178897f0a93d7deae9b15f214064a74a37054bf6034cbfccacf803be36e18a3db5e176a627ecd90fbc5a93a535560362b2a056572faaceb7db131c480f70101fa53e1f05cc6edadb83c1590e1a98857b01d2b1befd4e21d6cb683dc00c56f376b9392347c627f4f56da04c64222c9f3dc27ca52406820d55afecd6c22c86a85731983a4389ca4d54817b182ff5d5ca01f7b361c8eaaff9e8a9448336eba9cd7ebd17592250ca80682f40535fa1377ec738e2afb49ab25a90aed640f1f45b1797363b31fa5cb9a1ea7bb0d81e057066711153a240191ca57698d06cad1232c9e0e00236c4ce26b85791bdb23404cad9323996947e1b13b803bf3090da1c5f3dde43ef9e883554b1d88c3e399f39eb14bfc62a3fb6ef3e5b71906df713d122e4c45fc772d0a54d2a7ad48283fc69a5ee26ef42e368f78fe36f6d79a9e3a9b79d8067cd1ca214ee5fd19419c7638806c55e5ece5cdd858e5d0d923b2a6166b8c7ff676350f33ce720db2639103b1cdb532321dbc1ec18f4ae503061845d432cb041c0277419fd1a790e4141bc38de077e5c47269ee6d98e62c1e77a13f4d6458ff5c6f92ed5f90a84fc7b91802517df7dbaa5f3503a72358b912640eb40a1855d3113f2a0b7da368344eb586c51182d15b07e36ea8e23e179308efc6f8875dd5c24dd5c16bc0a8df296c9039f211b95cb7016e4112edbb524ba6c98f2469be86c7a80a7179238b05b2aeefeffc2c37d73351a4ce068868bd49e21ec31a585e2130d27283c66b1a71fcdd2c7bb596081cba0084cfa0490197758da2e9f7152ce50a983b854f94233b9c5a8ac597c401871f01b0c965e07665490d2ecc991e487d3ece6f6cef60b036936cef15c7ac61df2ff04a369543ffca3cdd339f7572c97091914a881f9c8e1f45aaac416c9a3468f62e2267ea3b4cbc244116d89cba8fe27238a563c6b55a459e69340883e9d5bb091c888a81c141ad15054b9618c7c1b5626e3c93b2652772af94172a50d7d30b31fadc926b739d79c3331b21a88d7c0745748a88a74587135faab971c555e3fef43e83f25016bf4769bdb5c4a8adad9148897700661e95c2d53facfe8937e0aafa55d305bb24483510a012fe0f42ddb04b9705c373d123866405f0a0a4715ec632450c9785573671da89e3f74cd9c3a62abb24f01b83b587119069c52944c2bf08a402826701d0a4768f6497665cb7de6b5dfb994cba2c93ee0df1c8c037cf947aa0716bdbe34668509a4c6053dadbad252c687840e915a7778406726510d1acdf85bf8017979bc5161c444b7c07140d6f7300ec8939214ad566dd8c101d26e5c75e1e723c1e9a2b1fc11bda1fee7555b27f5298be50334f5f79974f47e57df3e7802b5b5541af0c76b6ad5cfe83a2d72834721e313d1b2e5ed74fdeaf890561ccb8de78f5402bb332d74cf8be2aaee35b64d07151e0be0f0f23d5b81526a4883ba7bf7aa88a774fd4394d6108a18cb4bb3980df825f8c7d83c527d710921338b72e06aea6b1e8b68e54cbe92702462114080777572e365fde6ac3d50806367aa899fd36ded6d6002ddb1f8d2fe8ca8a6812167ba5f2068352657f60c39e34eb2f102c0121b57876760cd10b211f580066ed2337d6f55442467d1501f75bf695ada9fb08c242818b341a6efe8892f5dc451a0b0f153bd23720a1e2db0f7d8f340f203d65cd009e6a58043376ab599b64b336cb0ed3ed552e970ed7e38780cea546fdb6e8dbbe1a702c92180dc211560e8532094af8e361f5b623f719f633ec99064a9c5c5a7efa3f6f74afec983e6b7799721ba52d4f85c91c66dfcfe194e6b700e3ee5232928dd4155ab9ee80d6db07f7783b71dfd0fd27e3eb639e38dcacbeae98cbec5320d850b19ee7d0658c9a59ad42b6adf32dc5486147c5913f0a003b5f97fa578d1775a01d932e6b82b5987e041f9a63557498ab40d9d9a8c41092c5e03c18d19fee27162465648fa2a14f7f8235d3a0d3443bdc7c66ac757d7fe68b467284a98f0d662fcc297462dbba022150d299178c77c9931b9de098424b51fe81479d7210e5df49c684394938c75bfb920aba8a20fa948d7849cdf4ae7bed160524a1a6f11a56a6c8e46f2abd622df3d2ae76f7d2f16692f433057d1e93bd359345b221e293a97811fb6e73210a405c0d063625957bc8cfa64d01c009bf2332d6b8e558c4c87aa48a38") (async, rerun: 32) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000000c0)) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000500)) (async, rerun: 32) ioctl$ASHMEM_GET_PIN_STATUS(r4, 0x7709, 0x0) (async, rerun: 32) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x94a46) (async, rerun: 64) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000500)) (async, rerun: 64) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000200)={0x2, 0xfff, 0x540, 0x80}) (async, rerun: 64) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1) 21:56:58 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:56:58 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x6, 0x2) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000200)=@multiplanar_overlay={0x5, 0x2, 0x4, 0xe000, 0xfffff000, {0x77359400}, {0x1, 0xc, 0x2, 0x0, 0x1c, 0x6, "5c2e9d53"}, 0x10001, 0x3, {&(0x7f00000000c0)=[{0x1, 0x2, {0x7fffffff}, 0x20}, {0x1, 0x81, {0x2}, 0x6}]}, 0x3, 0x0, r2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x0, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:56:58 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x6, 0x2) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000200)=@multiplanar_overlay={0x5, 0x2, 0x4, 0xe000, 0xfffff000, {0x77359400}, {0x1, 0xc, 0x2, 0x0, 0x1c, 0x6, "5c2e9d53"}, 0x10001, 0x3, {&(0x7f00000000c0)=[{0x1, 0x2, {0x7fffffff}, 0x20}, {0x1, 0x81, {0x2}, 0x6}]}, 0x3, 0x0, r2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x0, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x6, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000200)=@multiplanar_overlay={0x5, 0x2, 0x4, 0xe000, 0xfffff000, {0x77359400}, {0x1, 0xc, 0x2, 0x0, 0x1c, 0x6, "5c2e9d53"}, 0x10001, 0x3, {&(0x7f00000000c0)=[{0x1, 0x2, {0x7fffffff}, 0x20}, {0x1, 0x81, {0x2}, 0x6}]}, 0x3, 0x0, r2}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x0, 0x3}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) 21:56:58 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x6, 0x2) (async, rerun: 64) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (rerun: 64) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000200)=@multiplanar_overlay={0x5, 0x2, 0x4, 0xe000, 0xfffff000, {0x77359400}, {0x1, 0xc, 0x2, 0x0, 0x1c, 0x6, "5c2e9d53"}, 0x10001, 0x3, {&(0x7f00000000c0)=[{0x1, 0x2, {0x7fffffff}, 0x20}, {0x1, 0x81, {0x2}, 0x6}]}, 0x3, 0x0, r2}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x0, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:56:58 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0xd8, 0x0, 0x2, 0x0, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x3, 0x4}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000180)={0x7f, 0xfffffff7, 0x7ff}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) syz_open_dev$vim2m(&(0x7f0000000040), 0x5, 0x2) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x4, 0x2) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000280)={0x0, 0x2}) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000200)) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000100)) 21:56:58 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0xd8, 0x0, 0x2, 0x0, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x3, 0x4}) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000180)={0x7f, 0xfffffff7, 0x7ff}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) syz_open_dev$vim2m(&(0x7f0000000040), 0x5, 0x2) (async) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x4, 0x2) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000280)={0x0, 0x2}) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000200)) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000100)) 21:56:58 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0xd8, 0x0, 0x2, 0x0, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x3, 0x4}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000180)={0x7f, 0xfffffff7, 0x7ff}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) syz_open_dev$vim2m(&(0x7f0000000040), 0x5, 0x2) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x4, 0x2) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000280)={0x0, 0x2}) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000200)) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000100)) syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0xd8, 0x0, 0x2, 0x0, 0x3}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x3, 0x4}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000180)={0x7f, 0xfffffff7, 0x7ff}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x5, 0x2) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x4, 0x2) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000280)={0x0, 0x2}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000200)) (async) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000100)) (async) 21:56:58 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) r1 = syz_open_dev$audion(&(0x7f0000000100), 0xffffffff, 0x301000) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xc}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004004}, 0x4055) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x1000, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0xffffffff, 0x1, 0x4, 0x0, 0xfe}) 21:56:58 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async, rerun: 32) r1 = syz_open_dev$audion(&(0x7f0000000100), 0xffffffff, 0x301000) (async, rerun: 32) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) (async) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x10) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xc}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004004}, 0x4055) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x1000, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0xffffffff, 0x1, 0x4, 0x0, 0xfe}) 21:56:58 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) r1 = syz_open_dev$audion(&(0x7f0000000100), 0xffffffff, 0x301000) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xc}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004004}, 0x4055) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x1000, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0xffffffff, 0x1, 0x4, 0x0, 0xfe}) syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) syz_open_dev$audion(&(0x7f0000000100), 0xffffffff, 0x301000) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r2) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x10) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xc}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004004}, 0x4055) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x1000, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0xffffffff, 0x1, 0x4, 0x0, 0xfe}) (async) 21:56:58 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x3, 0x1975, 0x3, 0x84000}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x8, 0x747b, 0x1b021d993dcc3d37}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)=@mmap={0xfffffff8, 0x2, 0x4, 0x20, 0x9, {r1, r2/1000+10000}, {0x1, 0xc, 0x2, 0x2, 0x6, 0x40, "00e6f7a8"}, 0x5, 0x1, {}, 0xffffff80}) 21:56:58 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x3, 0x1975, 0x3, 0x84000}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x8, 0x747b, 0x1b021d993dcc3d37}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)=@mmap={0xfffffff8, 0x2, 0x4, 0x20, 0x9, {r1, r2/1000+10000}, {0x1, 0xc, 0x2, 0x2, 0x6, 0x40, "00e6f7a8"}, 0x5, 0x1, {}, 0xffffff80}) syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x3, 0x1975, 0x3, 0x84000}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x8, 0x747b, 0x1b021d993dcc3d37}) (async) clock_gettime(0x0, &(0x7f0000000100)) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)=@mmap={0xfffffff8, 0x2, 0x4, 0x20, 0x9, {r1, r2/1000+10000}, {0x1, 0xc, 0x2, 0x2, 0x6, 0x40, "00e6f7a8"}, 0x5, 0x1, {}, 0xffffff80}) (async) 21:56:59 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:56:59 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x3, 0x1975, 0x3, 0x84000}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x8, 0x747b, 0x1b021d993dcc3d37}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)=@mmap={0xfffffff8, 0x2, 0x4, 0x20, 0x9, {r1, r2/1000+10000}, {0x1, 0xc, 0x2, 0x2, 0x6, 0x40, "00e6f7a8"}, 0x5, 0x1, {}, 0xffffff80}) 21:56:59 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)=@multiplanar_mmap={0x81, 0x1, 0x4, 0x1000, 0x200, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x63, 0x3, 0x1, "65a1e727"}, 0x9, 0x1, {&(0x7f00000000c0)=[{0x7, 0x2, {0x7}}, {0x3, 0xd0, {0x9}, 0x7fffffff}]}, 0xe7e3}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000200)=0x1) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:56:59 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async, rerun: 64) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)=@multiplanar_mmap={0x81, 0x1, 0x4, 0x1000, 0x200, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x63, 0x3, 0x1, "65a1e727"}, 0x9, 0x1, {&(0x7f00000000c0)=[{0x7, 0x2, {0x7}}, {0x3, 0xd0, {0x9}, 0x7fffffff}]}, 0xe7e3}) (async, rerun: 64) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000200)=0x1) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:56:59 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)=@multiplanar_mmap={0x81, 0x1, 0x4, 0x1000, 0x200, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x63, 0x3, 0x1, "65a1e727"}, 0x9, 0x1, {&(0x7f00000000c0)=[{0x7, 0x2, {0x7}}, {0x3, 0xd0, {0x9}, 0x7fffffff}]}, 0xe7e3}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000200)=0x1) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)=@multiplanar_mmap={0x81, 0x1, 0x4, 0x1000, 0x200, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x63, 0x3, 0x1, "65a1e727"}, 0x9, 0x1, {&(0x7f00000000c0)=[{0x7, 0x2, {0x7}}, {0x3, 0xd0, {0x9}, 0x7fffffff}]}, 0xe7e3}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000200)=0x1) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) 21:56:59 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x7fff, 0x1, 0x2}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000040)=0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000200)={0xd0d, 0x9, 0x4, {0x2, @pix={0x6, 0x8, 0x32314d59, 0x0, 0x5, 0x4, 0x1, 0x4, 0x1, 0x7, 0x2, 0x3}}, 0x2}) 21:56:59 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x7fff, 0x1, 0x2}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000040)=0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000200)={0xd0d, 0x9, 0x4, {0x2, @pix={0x6, 0x8, 0x32314d59, 0x0, 0x5, 0x4, 0x1, 0x4, 0x1, 0x7, 0x2, 0x3}}, 0x2}) syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x7fff, 0x1, 0x2}) (async) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000040)=0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000200)={0xd0d, 0x9, 0x4, {0x2, @pix={0x6, 0x8, 0x32314d59, 0x0, 0x5, 0x4, 0x1, 0x4, 0x1, 0x7, 0x2, 0x3}}, 0x2}) (async) 21:56:59 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x7fff, 0x1, 0x2}) (async, rerun: 32) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000040)=0x2) (async, rerun: 32) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000200)={0xd0d, 0x9, 0x4, {0x2, @pix={0x6, 0x8, 0x32314d59, 0x0, 0x5, 0x4, 0x1, 0x4, 0x1, 0x7, 0x2, 0x3}}, 0x2}) 21:56:59 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x0, @raw_data="4b99cc513c1ca64a7c0320d8cc7390d4b3697258499acab18a1c0e1df5269945eecf973fd60fa5e434463e92210d93312b1844dc5968549e7ed5300b8196d12da4aad7aeaf4358dbf8e3d3803df714ce1a0316a9df2ff9cf063862f7b9e6bd7746a510cd44945341d0133d9940b090e56b34579401c15a4e2229cf4829206b71e714c037861aa728820f5fba896dc930c80e2528bfad72b6f043958f5a5c6b5cae1cb19c650616f0b7d44e30ca866ce1608acf20cf3551436fc2a7fd1ec92276d7a91fa7aeb6d84c"}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:00 executing program 1: ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x0, @raw_data="4b99cc513c1ca64a7c0320d8cc7390d4b3697258499acab18a1c0e1df5269945eecf973fd60fa5e434463e92210d93312b1844dc5968549e7ed5300b8196d12da4aad7aeaf4358dbf8e3d3803df714ce1a0316a9df2ff9cf063862f7b9e6bd7746a510cd44945341d0133d9940b090e56b34579401c15a4e2229cf4829206b71e714c037861aa728820f5fba896dc930c80e2528bfad72b6f043958f5a5c6b5cae1cb19c650616f0b7d44e30ca866ce1608acf20cf3551436fc2a7fd1ec92276d7a91fa7aeb6d84c"}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:00 executing program 1: ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x0, @raw_data="4b99cc513c1ca64a7c0320d8cc7390d4b3697258499acab18a1c0e1df5269945eecf973fd60fa5e434463e92210d93312b1844dc5968549e7ed5300b8196d12da4aad7aeaf4358dbf8e3d3803df714ce1a0316a9df2ff9cf063862f7b9e6bd7746a510cd44945341d0133d9940b090e56b34579401c15a4e2229cf4829206b71e714c037861aa728820f5fba896dc930c80e2528bfad72b6f043958f5a5c6b5cae1cb19c650616f0b7d44e30ca866ce1608acf20cf3551436fc2a7fd1ec92276d7a91fa7aeb6d84c"}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:00 executing program 1: ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x0, @raw_data="4b99cc513c1ca64a7c0320d8cc7390d4b3697258499acab18a1c0e1df5269945eecf973fd60fa5e434463e92210d93312b1844dc5968549e7ed5300b8196d12da4aad7aeaf4358dbf8e3d3803df714ce1a0316a9df2ff9cf063862f7b9e6bd7746a510cd44945341d0133d9940b090e56b34579401c15a4e2229cf4829206b71e714c037861aa728820f5fba896dc930c80e2528bfad72b6f043958f5a5c6b5cae1cb19c650616f0b7d44e30ca866ce1608acf20cf3551436fc2a7fd1ec92276d7a91fa7aeb6d84c"}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:00 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x0, @raw_data="4b99cc513c1ca64a7c0320d8cc7390d4b3697258499acab18a1c0e1df5269945eecf973fd60fa5e434463e92210d93312b1844dc5968549e7ed5300b8196d12da4aad7aeaf4358dbf8e3d3803df714ce1a0316a9df2ff9cf063862f7b9e6bd7746a510cd44945341d0133d9940b090e56b34579401c15a4e2229cf4829206b71e714c037861aa728820f5fba896dc930c80e2528bfad72b6f043958f5a5c6b5cae1cb19c650616f0b7d44e30ca866ce1608acf20cf3551436fc2a7fd1ec92276d7a91fa7aeb6d84c"}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:00 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x0, @raw_data="4b99cc513c1ca64a7c0320d8cc7390d4b3697258499acab18a1c0e1df5269945eecf973fd60fa5e434463e92210d93312b1844dc5968549e7ed5300b8196d12da4aad7aeaf4358dbf8e3d3803df714ce1a0316a9df2ff9cf063862f7b9e6bd7746a510cd44945341d0133d9940b090e56b34579401c15a4e2229cf4829206b71e714c037861aa728820f5fba896dc930c80e2528bfad72b6f043958f5a5c6b5cae1cb19c650616f0b7d44e30ca866ce1608acf20cf3551436fc2a7fd1ec92276d7a91fa7aeb6d84c"}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:00 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x0, @raw_data="4b99cc513c1ca64a7c0320d8cc7390d4b3697258499acab18a1c0e1df5269945eecf973fd60fa5e434463e92210d93312b1844dc5968549e7ed5300b8196d12da4aad7aeaf4358dbf8e3d3803df714ce1a0316a9df2ff9cf063862f7b9e6bd7746a510cd44945341d0133d9940b090e56b34579401c15a4e2229cf4829206b71e714c037861aa728820f5fba896dc930c80e2528bfad72b6f043958f5a5c6b5cae1cb19c650616f0b7d44e30ca866ce1608acf20cf3551436fc2a7fd1ec92276d7a91fa7aeb6d84c"}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:00 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x0, @raw_data="4b99cc513c1ca64a7c0320d8cc7390d4b3697258499acab18a1c0e1df5269945eecf973fd60fa5e434463e92210d93312b1844dc5968549e7ed5300b8196d12da4aad7aeaf4358dbf8e3d3803df714ce1a0316a9df2ff9cf063862f7b9e6bd7746a510cd44945341d0133d9940b090e56b34579401c15a4e2229cf4829206b71e714c037861aa728820f5fba896dc930c80e2528bfad72b6f043958f5a5c6b5cae1cb19c650616f0b7d44e30ca866ce1608acf20cf3551436fc2a7fd1ec92276d7a91fa7aeb6d84c"}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:00 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x0, @raw_data="4b99cc513c1ca64a7c0320d8cc7390d4b3697258499acab18a1c0e1df5269945eecf973fd60fa5e434463e92210d93312b1844dc5968549e7ed5300b8196d12da4aad7aeaf4358dbf8e3d3803df714ce1a0316a9df2ff9cf063862f7b9e6bd7746a510cd44945341d0133d9940b090e56b34579401c15a4e2229cf4829206b71e714c037861aa728820f5fba896dc930c80e2528bfad72b6f043958f5a5c6b5cae1cb19c650616f0b7d44e30ca866ce1608acf20cf3551436fc2a7fd1ec92276d7a91fa7aeb6d84c"}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:00 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x0, @raw_data="4b99cc513c1ca64a7c0320d8cc7390d4b3697258499acab18a1c0e1df5269945eecf973fd60fa5e434463e92210d93312b1844dc5968549e7ed5300b8196d12da4aad7aeaf4358dbf8e3d3803df714ce1a0316a9df2ff9cf063862f7b9e6bd7746a510cd44945341d0133d9940b090e56b34579401c15a4e2229cf4829206b71e714c037861aa728820f5fba896dc930c80e2528bfad72b6f043958f5a5c6b5cae1cb19c650616f0b7d44e30ca866ce1608acf20cf3551436fc2a7fd1ec92276d7a91fa7aeb6d84c"}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:00 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x0, @raw_data="4b99cc513c1ca64a7c0320d8cc7390d4b3697258499acab18a1c0e1df5269945eecf973fd60fa5e434463e92210d93312b1844dc5968549e7ed5300b8196d12da4aad7aeaf4358dbf8e3d3803df714ce1a0316a9df2ff9cf063862f7b9e6bd7746a510cd44945341d0133d9940b090e56b34579401c15a4e2229cf4829206b71e714c037861aa728820f5fba896dc930c80e2528bfad72b6f043958f5a5c6b5cae1cb19c650616f0b7d44e30ca866ce1608acf20cf3551436fc2a7fd1ec92276d7a91fa7aeb6d84c"}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:00 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x0, @raw_data="4b99cc513c1ca64a7c0320d8cc7390d4b3697258499acab18a1c0e1df5269945eecf973fd60fa5e434463e92210d93312b1844dc5968549e7ed5300b8196d12da4aad7aeaf4358dbf8e3d3803df714ce1a0316a9df2ff9cf063862f7b9e6bd7746a510cd44945341d0133d9940b090e56b34579401c15a4e2229cf4829206b71e714c037861aa728820f5fba896dc930c80e2528bfad72b6f043958f5a5c6b5cae1cb19c650616f0b7d44e30ca866ce1608acf20cf3551436fc2a7fd1ec92276d7a91fa7aeb6d84c"}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:00 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x0, @raw_data="4b99cc513c1ca64a7c0320d8cc7390d4b3697258499acab18a1c0e1df5269945eecf973fd60fa5e434463e92210d93312b1844dc5968549e7ed5300b8196d12da4aad7aeaf4358dbf8e3d3803df714ce1a0316a9df2ff9cf063862f7b9e6bd7746a510cd44945341d0133d9940b090e56b34579401c15a4e2229cf4829206b71e714c037861aa728820f5fba896dc930c80e2528bfad72b6f043958f5a5c6b5cae1cb19c650616f0b7d44e30ca866ce1608acf20cf3551436fc2a7fd1ec92276d7a91fa7aeb6d84c"}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:01 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x0, @raw_data="4b99cc513c1ca64a7c0320d8cc7390d4b3697258499acab18a1c0e1df5269945eecf973fd60fa5e434463e92210d93312b1844dc5968549e7ed5300b8196d12da4aad7aeaf4358dbf8e3d3803df714ce1a0316a9df2ff9cf063862f7b9e6bd7746a510cd44945341d0133d9940b090e56b34579401c15a4e2229cf4829206b71e714c037861aa728820f5fba896dc930c80e2528bfad72b6f043958f5a5c6b5cae1cb19c650616f0b7d44e30ca866ce1608acf20cf3551436fc2a7fd1ec92276d7a91fa7aeb6d84c"}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:01 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) 21:57:01 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x6, @mcast1, 0xb3}, {0xa, 0x4e21, 0x5, @remote, 0x4}, r1, 0x6}}, 0x48) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x4a32d7e3, @private2, 0x3}, {0xa, 0x4e24, 0x0, @loopback, 0x230}, r1, 0x4}}, 0x48) 21:57:01 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000000)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f00000000c0)=0x7) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) 21:57:01 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x8}, 0x8) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x3, @private1, 0x5}}}, 0x30) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000040)=0xfffffffe, 0x4) 21:57:01 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x49, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x3, 0x4, 0x2000, 0x7fff, {0x0, 0xea60}, {0x1, 0x0, 0x80, 0x19, 0x1f, 0x0, "38aceb71"}, 0x2, 0x1, {&(0x7f00000000c0)=[{0x8, 0x1, {0xf28}}, {0x1, 0xfff, {0x80000001}, 0xffffffff}]}, 0x3}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000280)={0x1, 0x7fff, 0xbd59, 0x180800}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)=@fd={0x8000, 0x2, 0x4, 0x4, 0x7, {0x77359400}, {0x1, 0x1, 0xfd, 0x1, 0xfe, 0x2, "539eed37"}, 0x3fd, 0x4, {}, 0x4, 0x0, r4}) 21:57:01 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x2, @sliced={0xcd85, [0x1, 0x81, 0x1f, 0x3f, 0x61c4, 0xfffe, 0x1f, 0x800, 0x1ff, 0x4, 0xf9a, 0x4, 0x3, 0x1, 0x7ff, 0x3, 0x0, 0x7fff, 0x0, 0x6, 0x5, 0x0, 0xde59, 0x3, 0x1, 0x7, 0x9, 0x0, 0x1, 0x1ff, 0x7, 0xf800, 0x8, 0x1, 0x1, 0x6, 0x3, 0x8000, 0x81, 0xfffc, 0x1, 0x4, 0xc000, 0x8, 0xff, 0x5, 0x78, 0xb05], 0x80000000}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000040), 0x4) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000080)) 21:57:01 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140), 0xfff, 0x400001) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000400)={0x0, @vbi={0x0, 0x5, 0x6, 0x35315241, [0xbb6, 0x80000000], [0x5, 0x4], 0x1}}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r4}}, 0x38) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000200), r4}}, 0x18) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:01 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x711040, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000500)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r3, 0x1}}, 0x18) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x200, 0x0) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000580)="e8ffa0cc981ac50cc0f4e625202cbe5dbf24f11d9e38d7565b1ca58e055872eb7037a4cd3e272c691940b5ea6ddf3684c186bf0d1f3e15ecde138e0425fec4c1f805e9d08b97ddb1347ce663860630f2133098230f8af6627fc8d48610e2062beb3b36900a60ff6427d82ac07e9fe86fb66e2a44a2c75a9eaef2c82530c606228eac996bfb197a216907218c2b43fdb141329a5d572a6b99b6c8ec690bfc34c633223c9f261a6c5b8b39712c3a9b401629bccae7c2fa91a7ba34e247d2269b9eaaa4081e9197a39e0c6e371b15cc94ab1a87bdec27ef67b7bc15c1c5e123c26c12fb6b588c9c0ba0975a724d4ee68a73a6bb6b6f7447") ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000680)=0x9) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r1, 0xfffffffffffffe36, &(0x7f00000001c0)={&(0x7f0000000240)=""/157, 0xfffffdf7, 0x0, &(0x7f0000000100)=""/105, 0x69}}, 0x10) 21:57:01 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x711040, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000500)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r3, 0x1}}, 0x18) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x200, 0x0) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000580)="e8ffa0cc981ac50cc0f4e625202cbe5dbf24f11d9e38d7565b1ca58e055872eb7037a4cd3e272c691940b5ea6ddf3684c186bf0d1f3e15ecde138e0425fec4c1f805e9d08b97ddb1347ce663860630f2133098230f8af6627fc8d48610e2062beb3b36900a60ff6427d82ac07e9fe86fb66e2a44a2c75a9eaef2c82530c606228eac996bfb197a216907218c2b43fdb141329a5d572a6b99b6c8ec690bfc34c633223c9f261a6c5b8b39712c3a9b401629bccae7c2fa91a7ba34e247d2269b9eaaa4081e9197a39e0c6e371b15cc94ab1a87bdec27ef67b7bc15c1c5e123c26c12fb6b588c9c0ba0975a724d4ee68a73a6bb6b6f7447") ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000680)=0x9) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r1, 0xfffffffffffffe36, &(0x7f00000001c0)={&(0x7f0000000240)=""/157, 0xfffffdf7, 0x0, &(0x7f0000000100)=""/105, 0x69}}, 0x10) 21:57:01 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x711040, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000500)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r3, 0x1}}, 0x18) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x200, 0x0) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000580)="e8ffa0cc981ac50cc0f4e625202cbe5dbf24f11d9e38d7565b1ca58e055872eb7037a4cd3e272c691940b5ea6ddf3684c186bf0d1f3e15ecde138e0425fec4c1f805e9d08b97ddb1347ce663860630f2133098230f8af6627fc8d48610e2062beb3b36900a60ff6427d82ac07e9fe86fb66e2a44a2c75a9eaef2c82530c606228eac996bfb197a216907218c2b43fdb141329a5d572a6b99b6c8ec690bfc34c633223c9f261a6c5b8b39712c3a9b401629bccae7c2fa91a7ba34e247d2269b9eaaa4081e9197a39e0c6e371b15cc94ab1a87bdec27ef67b7bc15c1c5e123c26c12fb6b588c9c0ba0975a724d4ee68a73a6bb6b6f7447") ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000680)=0x9) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r1, 0xfffffffffffffe36, &(0x7f00000001c0)={&(0x7f0000000240)=""/157, 0xfffffdf7, 0x0, &(0x7f0000000100)=""/105, 0x69}}, 0x10) 21:57:02 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:02 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x711040, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000500)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r3, 0x1}}, 0x18) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x200, 0x0) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000580)="e8ffa0cc981ac50cc0f4e625202cbe5dbf24f11d9e38d7565b1ca58e055872eb7037a4cd3e272c691940b5ea6ddf3684c186bf0d1f3e15ecde138e0425fec4c1f805e9d08b97ddb1347ce663860630f2133098230f8af6627fc8d48610e2062beb3b36900a60ff6427d82ac07e9fe86fb66e2a44a2c75a9eaef2c82530c606228eac996bfb197a216907218c2b43fdb141329a5d572a6b99b6c8ec690bfc34c633223c9f261a6c5b8b39712c3a9b401629bccae7c2fa91a7ba34e247d2269b9eaaa4081e9197a39e0c6e371b15cc94ab1a87bdec27ef67b7bc15c1c5e123c26c12fb6b588c9c0ba0975a724d4ee68a73a6bb6b6f7447") ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000680)=0x9) 21:57:02 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x711040, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000500)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r3, 0x1}}, 0x18) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x200, 0x0) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000580)="e8ffa0cc981ac50cc0f4e625202cbe5dbf24f11d9e38d7565b1ca58e055872eb7037a4cd3e272c691940b5ea6ddf3684c186bf0d1f3e15ecde138e0425fec4c1f805e9d08b97ddb1347ce663860630f2133098230f8af6627fc8d48610e2062beb3b36900a60ff6427d82ac07e9fe86fb66e2a44a2c75a9eaef2c82530c606228eac996bfb197a216907218c2b43fdb141329a5d572a6b99b6c8ec690bfc34c633223c9f261a6c5b8b39712c3a9b401629bccae7c2fa91a7ba34e247d2269b9eaaa4081e9197a39e0c6e371b15cc94ab1a87bdec27ef67b7bc15c1c5e123c26c12fb6b588c9c0ba0975a724d4ee68a73a6bb6b6f7447") 21:57:02 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x711040, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000500)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r3, 0x1}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x200, 0x0) 21:57:02 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x711040, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2, 0x5}}, 0x20) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x200, 0x0) 21:57:02 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x711040, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x200, 0x0) 21:57:02 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x711040, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x200, 0x0) 21:57:02 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x200, 0x0) 21:57:02 executing program 5: syz_init_net_socket$llc(0x1a, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x200, 0x0) 21:57:02 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x200, 0x0) 21:57:02 executing program 5: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200, 0x0) 21:57:02 executing program 5: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200, 0x0) 21:57:03 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:03 executing program 5: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200, 0x0) 21:57:03 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:03 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) 21:57:03 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:03 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:03 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:03 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:03 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:03 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:03 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:03 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x0, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:03 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x0, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:03 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x0, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:03 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:03 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:03 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:03 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:04 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:04 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:05 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) 21:57:06 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) 21:57:07 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) 21:57:07 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x0, 0x2}) 21:57:08 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x0, 0x2}) 21:57:09 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x0, 0x2}) 21:57:10 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1}) 21:57:10 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1}) 21:57:11 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1}) 21:57:15 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x0, @raw_data="4b99cc513c1ca64a7c0320d8cc7390d4b3697258499acab18a1c0e1df5269945eecf973fd60fa5e434463e92210d93312b1844dc5968549e7ed5300b8196d12da4aad7aeaf4358dbf8e3d3803df714ce1a0316a9df2ff9cf063862f7b9e6bd7746a510cd44945341d0133d9940b090e56b34579401c15a4e2229cf4829206b71e714c037861aa728820f5fba896dc930c80e2528bfad72b6f043958f5a5c6b5cae1cb19c650616f0b7d44e30ca866ce1608acf20cf3551436fc2a7fd1ec92276d7a91fa7aeb6d84c"}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:15 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000100)={0x8, 0x120, 0xfa00, {0x3, {0x0, 0x79, "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", 0x4, 0x3, 0x9, 0xff, 0x1, 0x0, 0x1}}}, 0x128) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f00000000c0)) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x4, 0x8000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000280)=""/187) bind$llc(r2, &(0x7f0000000080)={0x1a, 0x1, 0x5, 0x9e, 0x40, 0x1, @multicast}, 0x10) 21:57:15 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x34080) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) mq_timedreceive(r1, &(0x7f0000000180)=""/63, 0x3f, 0x0, &(0x7f00000002c0)={r4, r5+10000000}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)=@multiplanar_fd={0x1000, 0x1, 0x4, 0x84ad4ae1ff570e90, 0x7, {r2, r3/1000+60000}, {0x5, 0xc, 0x0, 0x31, 0x5, 0x7, "6934aa51"}, 0x7f, 0x4, {&(0x7f0000000100)=[{0x10001, 0x44, {}, 0x9}, {0x10001, 0x1ff}]}, 0x200, 0x0, r0}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r6, 0x5411, &(0x7f0000000940)) ioctl$TIOCNXCL(r1, 0x540d) 21:57:15 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x105000) r1 = gettid() mq_notify(r0, &(0x7f00000000c0)={0x0, 0x39, 0x1, @tid=r1}) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) socketpair(0xf, 0x80000, 0x897d, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r3) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000500)) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r5, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x100) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:15 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000300)={0x2, @win={{0x2, 0x39, 0x8, 0x7}, 0x6, 0x9, &(0x7f0000000100)={{0x20, 0x7fff, 0x8, 0x2}, &(0x7f00000000c0)={{0x200, 0x3, 0xa107, 0x1ff}, &(0x7f0000000040)={{0x7fff, 0x8000, 0x3f, 0xfffffaeb}}}}, 0xf17, &(0x7f0000000200)="7d60064e0577bb1bd119fa90cd537eab804cf847baa77630a8910b5ce830280efadecb0357ae90af15d1b12b5e34c8bd4c82e08424531d5efa7ac61565997483cfb2f2fb0cfbbcd2babadf6e031463d68017050000130899e62c71bd7cef3fab7d39db125b907e7f7330ce1ef1157aadfdc714f4cd2f378267dce99b0115729fb6e8e6cdff9d4e323a7105633c5d0f3dd7e64d75930b81d52e0c961d60c8cbbee45fdd1afc00a4f63d7497694e53609a84dcf4335fd548f00e855da4e789e7a369f50166d49e385bbc3b5410bea6e45d4bf41534016540fa7a", 0x6}}) 21:57:15 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x472640) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000100)=0x2) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x4}, 0x6) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000000)={0x2, 0x6a, 0x7}) setsockopt$llc_int(r2, 0x10c, 0x5, &(0x7f0000000040), 0x4) 21:57:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x3f, 0x0) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000080)={0x0, 0x10}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000040), 0x4) 21:57:15 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000300)={0x2, @win={{0x2, 0x39, 0x8, 0x7}, 0x6, 0x9, &(0x7f0000000100)={{0x20, 0x7fff, 0x8, 0x2}, &(0x7f00000000c0)={{0x200, 0x3, 0xa107, 0x1ff}, &(0x7f0000000040)={{0x7fff, 0x8000, 0x3f, 0xfffffaeb}}}}, 0xf17, &(0x7f0000000200)="7d60064e0577bb1bd119fa90cd537eab804cf847baa77630a8910b5ce830280efadecb0357ae90af15d1b12b5e34c8bd4c82e08424531d5efa7ac61565997483cfb2f2fb0cfbbcd2babadf6e031463d68017050000130899e62c71bd7cef3fab7d39db125b907e7f7330ce1ef1157aadfdc714f4cd2f378267dce99b0115729fb6e8e6cdff9d4e323a7105633c5d0f3dd7e64d75930b81d52e0c961d60c8cbbee45fdd1afc00a4f63d7497694e53609a84dcf4335fd548f00e855da4e789e7a369f50166d49e385bbc3b5410bea6e45d4bf41534016540fa7a", 0x6}}) 21:57:15 executing program 4: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="c4ad8cbb288f25d808c98d298970764ae7f8131aaeefe10482775ca74593958dbce6c28b3faba4bb669c2aafc1291447f650a61d7a0043741f6be41b1eb23fb0494f259b771dc7159d54a370b0d5b664725c6a9ffe2f70ae") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000100)={0x40000216, &(0x7f0000000000)=[{}, {}, {}]}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000000040), 0x4) 21:57:15 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x34080) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) mq_timedreceive(r1, &(0x7f0000000180)=""/63, 0x3f, 0x0, &(0x7f00000002c0)={r4, r5+10000000}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)=@multiplanar_fd={0x1000, 0x1, 0x4, 0x84ad4ae1ff570e90, 0x7, {r2, r3/1000+60000}, {0x5, 0xc, 0x0, 0x31, 0x5, 0x7, "6934aa51"}, 0x7f, 0x4, {&(0x7f0000000100)=[{0x10001, 0x44, {}, 0x9}, {0x10001, 0x1ff}]}, 0x200, 0x0, r0}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r6, 0x5411, &(0x7f0000000940)) ioctl$TIOCNXCL(r1, 0x540d) 21:57:15 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000300)={0x2, @win={{0x2, 0x39, 0x8, 0x7}, 0x6, 0x9, &(0x7f0000000100)={{0x20, 0x7fff, 0x8, 0x2}, &(0x7f00000000c0)={{0x200, 0x3, 0xa107, 0x1ff}, &(0x7f0000000040)={{0x7fff, 0x8000, 0x3f, 0xfffffaeb}}}}, 0xf17, &(0x7f0000000200)="7d60064e0577bb1bd119fa90cd537eab804cf847baa77630a8910b5ce830280efadecb0357ae90af15d1b12b5e34c8bd4c82e08424531d5efa7ac61565997483cfb2f2fb0cfbbcd2babadf6e031463d68017050000130899e62c71bd7cef3fab7d39db125b907e7f7330ce1ef1157aadfdc714f4cd2f378267dce99b0115729fb6e8e6cdff9d4e323a7105633c5d0f3dd7e64d75930b81d52e0c961d60c8cbbee45fdd1afc00a4f63d7497694e53609a84dcf4335fd548f00e855da4e789e7a369f50166d49e385bbc3b5410bea6e45d4bf41534016540fa7a", 0x6}}) 21:57:15 executing program 0: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="c4ad8cbb288f25d808c98d298970764ae7f8131aaeefe10482775ca74593958dbce6c28b3faba4bb669c2aafc1291447f650a61d7a0043741f6be41b1eb23fb0494f259b771dc7159d54a370b0d5b664725c6a9ffe2f70ae") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000100)={0x40000216, &(0x7f0000000000)=[{}, {}, {}]}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000000040), 0x4) 21:57:16 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x0, @raw_data="4b99cc513c1ca64a7c0320d8cc7390d4b3697258499acab18a1c0e1df5269945eecf973fd60fa5e434463e92210d93312b1844dc5968549e7ed5300b8196d12da4aad7aeaf4358dbf8e3d3803df714ce1a0316a9df2ff9cf063862f7b9e6bd7746a510cd44945341d0133d9940b090e56b34579401c15a4e2229cf4829206b71e714c037861aa728820f5fba896dc930c80e2528bfad72b6f043958f5a5c6b5cae1cb19c650616f0b7d44e30ca866ce1608acf20cf3551436fc2a7fd1ec92276d7a91fa7aeb6d84c"}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:16 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x80000000408003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x189681) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000040)={{0x80000000, 0x0, 0x0, [0x6, 0xffffffff]}, {0x80000000, 0x0, 0x1, [0xfffffffb, 0x7]}, 0x1, [0x3, 0xff]}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:16 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000080)) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) 21:57:16 executing program 3: ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket(0xa, 0x2, 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x81, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), 0x4) 21:57:16 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x1, 0x1, 0x2}) 21:57:16 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (fail_nth: 1) 21:57:16 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (fail_nth: 1) 21:57:16 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (fail_nth: 1) 21:57:16 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (fail_nth: 1) 21:57:16 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (fail_nth: 1) 21:57:16 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)=0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:57:16 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x1, 0x6, 0x5e, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x10) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x1000, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r3}}, 0x38) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x101, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, r3}}, 0x30) [ 2820.217156] FAULT_INJECTION: forcing a failure. [ 2820.217156] name failslab, interval 1, probability 0, space 0, times 0 [ 2820.252969] CPU: 1 PID: 27054 Comm: syz-executor.1 Not tainted 4.14.292-syzkaller #0 [ 2820.261106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2820.270488] Call Trace: [ 2820.273084] dump_stack+0x1b2/0x281 [ 2820.276729] should_fail.cold+0x10a/0x149 [ 2820.280894] should_failslab+0xd6/0x130 [ 2820.284873] kmem_cache_alloc+0x28e/0x3c0 [ 2820.289035] getname_flags+0xc8/0x550 [ 2820.292926] do_sys_open+0x1ce/0x410 [ 2820.296640] ? filp_open+0x60/0x60 [ 2820.300184] ? __do_page_fault+0x159/0xad0 [ 2820.304453] ? do_syscall_64+0x4c/0x640 [ 2820.308426] ? SyS_open+0x30/0x30 [ 2820.311886] do_syscall_64+0x1d5/0x640 [ 2820.315779] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2820.320993] RIP: 0033:0x7ffbd8e41409 [ 2820.324730] RSP: 002b:00007ffbd77b6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2820.332532] RAX: ffffffffffffffda RBX: 00007ffbd8f53f80 RCX: 00007ffbd8e41409 [ 2820.339806] RDX: 0000000000000000 RSI: 0000000020000540 RDI: ffffffffffffff9c [ 2820.347072] RBP: 00007ffbd77b61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2820.354342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2820.361608] R13: 00007ffd09ef13cf R14: 00007ffbd77b6300 R15: 0000000000022000 [ 2821.056118] FAULT_INJECTION: forcing a failure. [ 2821.056118] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2821.068094] CPU: 0 PID: 27057 Comm: syz-executor.0 Not tainted 4.14.292-syzkaller #0 [ 2821.075979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2821.085352] Call Trace: [ 2821.087935] dump_stack+0x1b2/0x281 [ 2821.091564] should_fail.cold+0x10a/0x149 [ 2821.096064] __alloc_pages_nodemask+0x22c/0x2720 [ 2821.100822] ? __lock_acquire+0x5fc/0x3f20 21:57:17 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x0, @raw_data="4b99cc513c1ca64a7c0320d8cc7390d4b3697258499acab18a1c0e1df5269945eecf973fd60fa5e434463e92210d93312b1844dc5968549e7ed5300b8196d12da4aad7aeaf4358dbf8e3d3803df714ce1a0316a9df2ff9cf063862f7b9e6bd7746a510cd44945341d0133d9940b090e56b34579401c15a4e2229cf4829206b71e714c037861aa728820f5fba896dc930c80e2528bfad72b6f043958f5a5c6b5cae1cb19c650616f0b7d44e30ca866ce1608acf20cf3551436fc2a7fd1ec92276d7a91fa7aeb6d84c"}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:17 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) 21:57:17 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x1, 0x6, 0x5e, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x10) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x1000, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r3}}, 0x38) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x101, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, r3}}, 0x30) 21:57:17 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (fail_nth: 2) 21:57:17 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) (async) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)=0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) [ 2821.105062] ? lock_downgrade+0x740/0x740 [ 2821.109248] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2821.114099] ? trace_hardirqs_on+0x10/0x10 [ 2821.118335] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2821.123354] ? release_pages+0x828/0xbf0 [ 2821.127417] ? flush_tlb_mm_range+0x164/0x2f0 [ 2821.132034] ? unmap_page_range+0x10a0/0x1d90 [ 2821.136537] alloc_pages_current+0x155/0x260 [ 2821.140949] __get_free_pages+0xb/0x40 [ 2821.144841] __tlb_remove_page_size+0x272/0x440 [ 2821.149520] unmap_page_range+0xf94/0x1d90 [ 2821.153769] ? vm_normal_page_pmd+0x340/0x340 [ 2821.158266] unmap_single_vma+0x147/0x2b0 [ 2821.162411] unmap_vmas+0x9d/0x160 [ 2821.165952] exit_mmap+0x270/0x4d0 [ 2821.169493] ? SyS_remap_file_pages+0x6a0/0x6a0 [ 2821.174160] ? check_preemption_disabled+0x35/0x240 [ 2821.179193] ? kmem_cache_free+0x23a/0x2b0 [ 2821.183427] ? __khugepaged_exit+0x29b/0x3c0 [ 2821.187835] mmput+0xfa/0x420 [ 2821.190940] do_exit+0x984/0x2850 [ 2821.194399] ? mm_update_next_owner+0x5b0/0x5b0 [ 2821.199065] ? get_signal+0x323/0x1ca0 [ 2821.202949] ? lock_acquire+0x170/0x3f0 [ 2821.207015] ? lock_downgrade+0x740/0x740 [ 2821.211858] do_group_exit+0x100/0x2e0 [ 2821.215755] get_signal+0x38d/0x1ca0 [ 2821.219474] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2821.224931] do_signal+0x7c/0x1550 [ 2821.228470] ? fsnotify+0x974/0x11b0 [ 2821.232178] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2821.237104] ? __handle_mm_fault+0x80f/0x4620 [ 2821.241602] ? setup_sigcontext+0x820/0x820 [ 2821.245918] ? v4l2_ioctl+0x1d0/0x2f0 [ 2821.249720] ? v4l2_open+0x2f0/0x2f0 [ 2821.253429] ? do_vfs_ioctl+0xe2/0xff0 [ 2821.254481] FAULT_INJECTION: forcing a failure. [ 2821.254481] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2821.257357] ? ioctl_preallocate+0x1a0/0x1a0 [ 2821.273560] ? check_preemption_disabled+0x35/0x240 [ 2821.278602] ? kick_process+0xe4/0x170 [ 2821.282470] ? task_work_add+0x87/0xe0 [ 2821.286338] ? exit_to_usermode_loop+0x41/0x200 [ 2821.290986] exit_to_usermode_loop+0x160/0x200 [ 2821.295545] ? SyS_ioctl+0x5c/0xb0 [ 2821.299069] do_syscall_64+0x4a3/0x640 [ 2821.302953] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2821.308143] RIP: 0033:0x7f559b948409 [ 2821.311848] RSP: 002b:00007f559a29c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2821.319534] RAX: fffffffffffffe00 RBX: 00007f559ba5b050 RCX: 00007f559b948409 [ 2821.326785] RDX: 00000000200001c0 RSI: 00000000c0145608 RDI: 0000000000000003 [ 2821.334035] RBP: 00007f559a29c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2821.341287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2821.348535] R13: 00007ffe3656eeff R14: 00007f559a29c300 R15: 0000000000022000 [ 2821.355798] CPU: 1 PID: 27078 Comm: syz-executor.1 Not tainted 4.14.292-syzkaller #0 [ 2821.363684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2821.373036] Call Trace: [ 2821.375621] dump_stack+0x1b2/0x281 [ 2821.379249] should_fail.cold+0x10a/0x149 [ 2821.383409] __alloc_pages_nodemask+0x22c/0x2720 [ 2821.388185] ? lock_downgrade+0x740/0x740 [ 2821.392336] ? __lock_acquire+0x5fc/0x3f20 [ 2821.396566] ? get_pid_task+0x91/0x130 [ 2821.400449] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2821.405293] ? lock_downgrade+0x740/0x740 [ 2821.409445] ? get_pid_task+0xb8/0x130 [ 2821.413331] ? proc_fail_nth_write+0x7b/0x180 [ 2821.417824] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2821.422756] cache_grow_begin+0x91/0x700 [ 2821.426810] ? fs_reclaim_release+0xd0/0x110 [ 2821.431216] ? check_preemption_disabled+0x35/0x240 [ 2821.436237] cache_alloc_refill+0x273/0x350 [ 2821.440561] kmem_cache_alloc+0x333/0x3c0 [ 2821.444712] getname_flags+0xc8/0x550 [ 2821.448513] do_sys_open+0x1ce/0x410 [ 2821.452228] ? filp_open+0x60/0x60 [ 2821.455772] ? __do_page_fault+0x159/0xad0 [ 2821.460009] ? do_syscall_64+0x4c/0x640 [ 2821.463980] ? SyS_open+0x30/0x30 [ 2821.467433] do_syscall_64+0x1d5/0x640 [ 2821.471325] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2821.477019] RIP: 0033:0x7ffbd8e41409 [ 2821.480721] RSP: 002b:00007ffbd77b6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2821.488424] RAX: ffffffffffffffda RBX: 00007ffbd8f53f80 RCX: 00007ffbd8e41409 [ 2821.495690] RDX: 0000000000000000 RSI: 0000000020000540 RDI: ffffffffffffff9c 21:57:17 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r1 = syz_open_dev$audion(&(0x7f0000000100), 0x5, 0x359600) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000000c0)={0x7, 0x8}, 0x10) 21:57:17 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (fail_nth: 3) 21:57:17 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x1, 0x6, 0x5e, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x10) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x1000, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r3}}, 0x38) (async) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x101, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, r3}}, 0x30) 21:57:17 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) (async) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) (async) 21:57:17 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) (async) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)=0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) [ 2821.502973] RBP: 00007ffbd77b61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2821.510238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2821.517511] R13: 00007ffd09ef13cf R14: 00007ffbd77b6300 R15: 0000000000022000 [ 2821.558500] FAULT_INJECTION: forcing a failure. [ 2821.558500] name failslab, interval 1, probability 0, space 0, times 0 [ 2821.570474] CPU: 1 PID: 27087 Comm: syz-executor.1 Not tainted 4.14.292-syzkaller #0 [ 2821.578364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2821.587715] Call Trace: [ 2821.590310] dump_stack+0x1b2/0x281 [ 2821.593940] should_fail.cold+0x10a/0x149 [ 2821.598091] should_failslab+0xd6/0x130 [ 2821.602064] kmem_cache_alloc+0x28e/0x3c0 [ 2821.606217] get_empty_filp+0x86/0x3f0 [ 2821.610106] path_openat+0x84/0x2970 [ 2821.613841] ? get_pid_task+0x91/0x130 [ 2821.617728] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2821.622575] ? path_lookupat+0x780/0x780 [ 2821.626640] ? trace_hardirqs_on+0x10/0x10 [ 2821.630884] do_filp_open+0x179/0x3c0 [ 2821.634685] ? may_open_dev+0xe0/0xe0 [ 2821.638494] ? __alloc_fd+0x1be/0x490 [ 2821.642295] ? lock_downgrade+0x740/0x740 [ 2821.646438] ? do_raw_spin_unlock+0x164/0x220 [ 2821.650932] ? _raw_spin_unlock+0x29/0x40 [ 2821.655081] ? __alloc_fd+0x1be/0x490 [ 2821.658886] do_sys_open+0x296/0x410 [ 2821.662595] ? filp_open+0x60/0x60 [ 2821.666134] ? __do_page_fault+0x159/0xad0 [ 2821.670371] ? do_syscall_64+0x4c/0x640 [ 2821.674365] ? SyS_open+0x30/0x30 [ 2821.677818] do_syscall_64+0x1d5/0x640 [ 2821.681707] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2821.686887] RIP: 0033:0x7ffbd8e41409 [ 2821.690590] RSP: 002b:00007ffbd77b6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2821.698290] RAX: ffffffffffffffda RBX: 00007ffbd8f53f80 RCX: 00007ffbd8e41409 21:57:17 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x81) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x230412d, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@debug={'debug', 0x3d, 0x1}}, {@posixacl}, {@msize={'msize', 0x3d, 0x81c2}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@measure}, {@subj_role={'subj_role', 0x3d, 'wfdno'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]}}) 21:57:17 executing program 3: setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x5f) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000100)={0x9, 0x9, 0xffff, 0x8b}, &(0x7f0000000040)) socketpair(0x28, 0x3, 0x8, &(0x7f0000000080)={0xffffffffffffffff}) socketpair(0x22, 0x2, 0x2, &(0x7f0000000000)) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0xf, 0x1, 0x20, 0x5, 0x1, @multicast}, 0x10) [ 2821.705551] RDX: 0000000000000000 RSI: 0000000020000540 RDI: ffffffffffffff9c [ 2821.712817] RBP: 00007ffbd77b61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2821.720085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2821.727357] R13: 00007ffd09ef13cf R14: 00007ffbd77b6300 R15: 0000000000022000 21:57:18 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) (async) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) 21:57:18 executing program 2: setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x5f) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000100)={0x9, 0x9, 0xffff, 0x8b}, &(0x7f0000000040)) socketpair(0x28, 0x3, 0x8, &(0x7f0000000080)={0xffffffffffffffff}) socketpair(0x22, 0x2, 0x2, &(0x7f0000000000)) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0xf, 0x1, 0x20, 0x5, 0x1, @multicast}, 0x10) 21:57:18 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (fail_nth: 4) 21:57:18 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x81) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) (async) r1 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x230412d, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@debug={'debug', 0x3d, 0x1}}, {@posixacl}, {@msize={'msize', 0x3d, 0x81c2}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@measure}, {@subj_role={'subj_role', 0x3d, 'wfdno'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]}}) 21:57:18 executing program 3: setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x5f) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000100)={0x9, 0x9, 0xffff, 0x8b}, &(0x7f0000000040)) socketpair(0x28, 0x3, 0x8, &(0x7f0000000080)={0xffffffffffffffff}) socketpair(0x22, 0x2, 0x2, &(0x7f0000000000)) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0xf, 0x1, 0x20, 0x5, 0x1, @multicast}, 0x10) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x5f) (async) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000100)={0x9, 0x9, 0xffff, 0x8b}, &(0x7f0000000040)) (async) socketpair(0x28, 0x3, 0x8, &(0x7f0000000080)) (async) socketpair(0x22, 0x2, 0x2, &(0x7f0000000000)) (async) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0xf, 0x1, 0x20, 0x5, 0x1, @multicast}, 0x10) (async) [ 2822.698537] FAULT_INJECTION: forcing a failure. [ 2822.698537] name failslab, interval 1, probability 0, space 0, times 0 [ 2822.723763] CPU: 0 PID: 27114 Comm: syz-executor.1 Not tainted 4.14.292-syzkaller #0 [ 2822.731676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2822.741029] Call Trace: [ 2822.743629] dump_stack+0x1b2/0x281 [ 2822.747258] should_fail.cold+0x10a/0x149 [ 2822.751413] should_failslab+0xd6/0x130 [ 2822.755397] kmem_cache_alloc_trace+0x29a/0x3d0 [ 2822.760064] ? trace_hardirqs_on+0x10/0x10 [ 2822.764300] ? tty_kopen+0x1c0/0x1c0 [ 2822.768018] tty_open+0x11a/0x8b0 [ 2822.771468] ? lock_acquire+0x170/0x3f0 [ 2822.775429] ? tty_kopen+0x1c0/0x1c0 [ 2822.779128] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 2822.785794] ? tty_kopen+0x1c0/0x1c0 [ 2822.789509] chrdev_open+0x23c/0x6d0 [ 2822.793207] ? __register_chrdev+0x3d0/0x3d0 [ 2822.797600] do_dentry_open+0x44b/0xec0 [ 2822.801660] ? __register_chrdev+0x3d0/0x3d0 [ 2822.806088] ? __inode_permission+0xcd/0x2f0 [ 2822.810519] vfs_open+0x105/0x220 [ 2822.813970] path_openat+0x628/0x2970 [ 2822.817761] ? path_lookupat+0x780/0x780 [ 2822.821805] ? trace_hardirqs_on+0x10/0x10 [ 2822.826027] do_filp_open+0x179/0x3c0 [ 2822.829822] ? may_open_dev+0xe0/0xe0 [ 2822.833612] ? lock_downgrade+0x740/0x740 [ 2822.837756] ? do_raw_spin_unlock+0x164/0x220 [ 2822.842234] ? _raw_spin_unlock+0x29/0x40 [ 2822.846360] ? __alloc_fd+0x1be/0x490 [ 2822.850148] do_sys_open+0x296/0x410 [ 2822.853846] ? filp_open+0x60/0x60 [ 2822.857370] ? __do_page_fault+0x159/0xad0 [ 2822.861586] ? do_syscall_64+0x4c/0x640 [ 2822.865538] ? SyS_open+0x30/0x30 [ 2822.868975] do_syscall_64+0x1d5/0x640 [ 2822.872851] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2822.878033] RIP: 0033:0x7ffbd8e41409 [ 2822.881729] RSP: 002b:00007ffbd77b6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2822.889441] RAX: ffffffffffffffda RBX: 00007ffbd8f53f80 RCX: 00007ffbd8e41409 [ 2822.896704] RDX: 0000000000000000 RSI: 0000000020000540 RDI: ffffffffffffff9c [ 2822.903954] RBP: 00007ffbd77b61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2822.911203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2822.918452] R13: 00007ffd09ef13cf R14: 00007ffbd77b6300 R15: 0000000000022000 21:57:19 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async, rerun: 32) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (rerun: 32) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) r1 = syz_open_dev$audion(&(0x7f0000000100), 0x5, 0x359600) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) (async, rerun: 32) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000000c0)={0x7, 0x8}, 0x10) 21:57:19 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:57:19 executing program 2: setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x5f) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000100)={0x9, 0x9, 0xffff, 0x8b}, &(0x7f0000000040)) socketpair(0x28, 0x3, 0x8, &(0x7f0000000080)={0xffffffffffffffff}) socketpair(0x22, 0x2, 0x2, &(0x7f0000000000)) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0xf, 0x1, 0x20, 0x5, 0x1, @multicast}, 0x10) 21:57:19 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x81) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x230412d, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@debug={'debug', 0x3d, 0x1}}, {@posixacl}, {@msize={'msize', 0x3d, 0x81c2}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@measure}, {@subj_role={'subj_role', 0x3d, 'wfdno'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]}}) 21:57:19 executing program 3: setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x5f) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000100)={0x9, 0x9, 0xffff, 0x8b}, &(0x7f0000000040)) socketpair(0x28, 0x3, 0x8, &(0x7f0000000080)={0xffffffffffffffff}) socketpair(0x22, 0x2, 0x2, &(0x7f0000000000)) (async) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0xf, 0x1, 0x20, 0x5, 0x1, @multicast}, 0x10) 21:57:19 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (fail_nth: 5) 21:57:19 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) 21:57:19 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x18, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000040) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x98000, 0x0) ioctl$KDSETLED(r3, 0x4b32, 0x8) 21:57:19 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000040)=0xfffffff8, 0x4) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:57:19 executing program 2: setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x5f) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000100)={0x9, 0x9, 0xffff, 0x8b}, &(0x7f0000000040)) socketpair(0x28, 0x3, 0x8, &(0x7f0000000080)={0xffffffffffffffff}) socketpair(0x22, 0x2, 0x2, &(0x7f0000000000)) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0xf, 0x1, 0x20, 0x5, 0x1, @multicast}, 0x10) [ 2823.261244] FAULT_INJECTION: forcing a failure. [ 2823.261244] name failslab, interval 1, probability 0, space 0, times 0 [ 2823.309143] CPU: 1 PID: 27131 Comm: syz-executor.1 Not tainted 4.14.292-syzkaller #0 [ 2823.317059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2823.326600] Call Trace: [ 2823.329200] dump_stack+0x1b2/0x281 [ 2823.332829] should_fail.cold+0x10a/0x149 [ 2823.337041] should_failslab+0xd6/0x130 [ 2823.341022] kmem_cache_alloc_trace+0x29a/0x3d0 [ 2823.345759] ? trace_hardirqs_on+0x10/0x10 [ 2823.349994] ? tty_kopen+0x1c0/0x1c0 [ 2823.353703] tty_open+0x11a/0x8b0 [ 2823.357155] ? lock_acquire+0x170/0x3f0 [ 2823.361130] ? tty_kopen+0x1c0/0x1c0 [ 2823.364850] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 2823.371520] ? tty_kopen+0x1c0/0x1c0 [ 2823.375234] chrdev_open+0x23c/0x6d0 [ 2823.378943] ? __register_chrdev+0x3d0/0x3d0 [ 2823.383351] do_dentry_open+0x44b/0xec0 [ 2823.387324] ? __register_chrdev+0x3d0/0x3d0 [ 2823.391734] ? __inode_permission+0xcd/0x2f0 [ 2823.396141] vfs_open+0x105/0x220 [ 2823.399599] path_openat+0x628/0x2970 [ 2823.403405] ? path_lookupat+0x780/0x780 [ 2823.407469] ? trace_hardirqs_on+0x10/0x10 [ 2823.411709] do_filp_open+0x179/0x3c0 [ 2823.415619] ? may_open_dev+0xe0/0xe0 [ 2823.419429] ? lock_downgrade+0x740/0x740 [ 2823.423579] ? do_raw_spin_unlock+0x164/0x220 [ 2823.428071] ? _raw_spin_unlock+0x29/0x40 [ 2823.432216] ? __alloc_fd+0x1be/0x490 [ 2823.436026] do_sys_open+0x296/0x410 [ 2823.439751] ? filp_open+0x60/0x60 [ 2823.443294] ? __do_page_fault+0x159/0xad0 [ 2823.447534] ? do_syscall_64+0x4c/0x640 [ 2823.451526] ? SyS_open+0x30/0x30 [ 2823.454989] do_syscall_64+0x1d5/0x640 [ 2823.458882] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2823.464067] RIP: 0033:0x7ffbd8e41409 [ 2823.467771] RSP: 002b:00007ffbd77b6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2823.475478] RAX: ffffffffffffffda RBX: 00007ffbd8f53f80 RCX: 00007ffbd8e41409 [ 2823.482750] RDX: 0000000000000000 RSI: 0000000020000540 RDI: ffffffffffffff9c [ 2823.490022] RBP: 00007ffbd77b61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2823.497322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 21:57:19 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000040)=0xfffffff8, 0x4) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:57:19 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x18, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000040) (async, rerun: 32) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x98000, 0x0) (rerun: 32) ioctl$KDSETLED(r3, 0x4b32, 0x8) [ 2823.504593] R13: 00007ffd09ef13cf R14: 00007ffbd77b6300 R15: 0000000000022000 21:57:20 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r1 = syz_open_dev$audion(&(0x7f0000000100), 0x5, 0x359600) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000000c0)={0x7, 0x8}, 0x10) syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) syz_open_dev$audion(&(0x7f0000000100), 0x5, 0x359600) (async) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000000c0)={0x7, 0x8}, 0x10) (async) 21:57:20 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) 21:57:20 executing program 2: setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x5f) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000100)={0x9, 0x9, 0xffff, 0x8b}, &(0x7f0000000040)) socketpair(0x28, 0x3, 0x8, &(0x7f0000000080)) socketpair(0x22, 0x2, 0x2, &(0x7f0000000000)) 21:57:20 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x18, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000040) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x98000, 0x0) ioctl$KDSETLED(r3, 0x4b32, 0x8) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x18, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000040) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x98000, 0x0) (async) ioctl$KDSETLED(r3, 0x4b32, 0x8) (async) 21:57:20 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (fail_nth: 6) 21:57:20 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000040)=0xfffffff8, 0x4) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000040)=0xfffffff8, 0x4) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) [ 2824.172554] FAULT_INJECTION: forcing a failure. [ 2824.172554] name failslab, interval 1, probability 0, space 0, times 0 [ 2824.187864] CPU: 0 PID: 27194 Comm: syz-executor.1 Not tainted 4.14.292-syzkaller #0 [ 2824.195770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2824.205121] Call Trace: [ 2824.207715] dump_stack+0x1b2/0x281 [ 2824.211349] should_fail.cold+0x10a/0x149 [ 2824.215520] should_failslab+0xd6/0x130 [ 2824.219495] kmem_cache_alloc_trace+0x29a/0x3d0 [ 2824.224171] alloc_tty_struct+0x85/0x8c0 [ 2824.228238] ? __do_SAK+0x30/0x30 [ 2824.231687] ? tty_open+0x11a/0x8b0 [ 2824.235317] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2824.240772] tty_init_dev.part.0+0x1e/0x400 [ 2824.245093] tty_open+0x669/0x8b0 [ 2824.248551] ? tty_kopen+0x1c0/0x1c0 [ 2824.252272] ? tty_kopen+0x1c0/0x1c0 [ 2824.255983] chrdev_open+0x23c/0x6d0 [ 2824.259869] ? __register_chrdev+0x3d0/0x3d0 [ 2824.264279] do_dentry_open+0x44b/0xec0 [ 2824.268252] ? __register_chrdev+0x3d0/0x3d0 [ 2824.272659] ? __inode_permission+0xcd/0x2f0 [ 2824.277070] vfs_open+0x105/0x220 [ 2824.280561] path_openat+0x628/0x2970 [ 2824.284370] ? path_lookupat+0x780/0x780 [ 2824.288437] ? trace_hardirqs_on+0x10/0x10 [ 2824.292677] do_filp_open+0x179/0x3c0 [ 2824.296479] ? may_open_dev+0xe0/0xe0 [ 2824.300282] ? lock_downgrade+0x740/0x740 [ 2824.304432] ? do_raw_spin_unlock+0x164/0x220 [ 2824.308923] ? _raw_spin_unlock+0x29/0x40 [ 2824.313106] ? __alloc_fd+0x1be/0x490 [ 2824.316911] do_sys_open+0x296/0x410 [ 2824.320620] ? filp_open+0x60/0x60 [ 2824.324169] ? __do_page_fault+0x159/0xad0 [ 2824.328397] ? do_syscall_64+0x4c/0x640 [ 2824.332369] ? SyS_open+0x30/0x30 [ 2824.335819] do_syscall_64+0x1d5/0x640 [ 2824.339793] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2824.344977] RIP: 0033:0x7ffbd8e41409 [ 2824.348678] RSP: 002b:00007ffbd77b6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2824.356385] RAX: ffffffffffffffda RBX: 00007ffbd8f53f80 RCX: 00007ffbd8e41409 [ 2824.363837] RDX: 0000000000000000 RSI: 0000000020000540 RDI: ffffffffffffff9c 21:57:20 executing program 4: syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r0 = socket(0x2b, 0x2, 0x2100008) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f00000002c0)=0x576b7221, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x301880) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x5c67, 0x2, 0x5}) ioctl$KIOCSOUND(r2, 0x4b2f, 0x6) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000080)="41356ec6395ed35cb22b1e7bae861fcf") r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x80000000) ioctl$KDDELIO(r1, 0x4b35, 0x2) 21:57:20 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xdb3bd) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000000)=0x3ff, 0x4) 21:57:20 executing program 2: setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x5f) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000100)={0x9, 0x9, 0xffff, 0x8b}, &(0x7f0000000040)) socketpair(0x22, 0x2, 0x2, &(0x7f0000000000)) 21:57:20 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (fail_nth: 7) 21:57:20 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) [ 2824.371103] RBP: 00007ffbd77b61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2824.378371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2824.385639] R13: 00007ffd09ef13cf R14: 00007ffbd77b6300 R15: 0000000000022000 21:57:20 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xdb3bd) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000000)=0x3ff, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xdb3bd) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) (async) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)) (async) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000000)=0x3ff, 0x4) (async) [ 2824.481148] FAULT_INJECTION: forcing a failure. [ 2824.481148] name failslab, interval 1, probability 0, space 0, times 0 [ 2824.496151] CPU: 1 PID: 27223 Comm: syz-executor.1 Not tainted 4.14.292-syzkaller #0 [ 2824.504055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2824.513409] Call Trace: [ 2824.516001] dump_stack+0x1b2/0x281 [ 2824.519631] should_fail.cold+0x10a/0x149 [ 2824.523782] should_failslab+0xd6/0x130 [ 2824.527760] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2824.532866] __get_vm_area_node+0xed/0x340 [ 2824.537113] ? n_tty_open+0x16/0x160 [ 2824.540824] vzalloc+0x98/0x150 [ 2824.544101] ? n_tty_open+0x16/0x160 [ 2824.547813] n_tty_open+0x16/0x160 [ 2824.551350] ? n_tty_set_termios+0xcc0/0xcc0 [ 2824.556191] tty_ldisc_open+0x6c/0xb0 [ 2824.560007] tty_ldisc_setup+0x43/0xf0 [ 2824.563895] tty_init_dev.part.0+0x1a7/0x400 [ 2824.568398] tty_open+0x669/0x8b0 [ 2824.571849] ? tty_kopen+0x1c0/0x1c0 [ 2824.575561] ? tty_kopen+0x1c0/0x1c0 [ 2824.579269] chrdev_open+0x23c/0x6d0 [ 2824.582985] ? __register_chrdev+0x3d0/0x3d0 [ 2824.587393] do_dentry_open+0x44b/0xec0 [ 2824.591362] ? __register_chrdev+0x3d0/0x3d0 [ 2824.595768] ? __inode_permission+0xcd/0x2f0 [ 2824.600180] vfs_open+0x105/0x220 [ 2824.603635] path_openat+0x628/0x2970 [ 2824.607479] ? path_lookupat+0x780/0x780 [ 2824.611543] ? trace_hardirqs_on+0x10/0x10 [ 2824.615783] do_filp_open+0x179/0x3c0 [ 2824.619584] ? may_open_dev+0xe0/0xe0 [ 2824.623388] ? lock_downgrade+0x740/0x740 [ 2824.627536] ? do_raw_spin_unlock+0x164/0x220 [ 2824.632028] ? _raw_spin_unlock+0x29/0x40 [ 2824.636175] ? __alloc_fd+0x1be/0x490 [ 2824.639978] do_sys_open+0x296/0x410 [ 2824.643686] ? filp_open+0x60/0x60 [ 2824.647233] ? __do_page_fault+0x159/0xad0 [ 2824.651479] ? do_syscall_64+0x4c/0x640 [ 2824.655454] ? SyS_open+0x30/0x30 [ 2824.658902] do_syscall_64+0x1d5/0x640 [ 2824.662792] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2824.667976] RIP: 0033:0x7ffbd8e41409 [ 2824.671681] RSP: 002b:00007ffbd77b6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2824.679388] RAX: ffffffffffffffda RBX: 00007ffbd8f53f80 RCX: 00007ffbd8e41409 [ 2824.686682] RDX: 0000000000000000 RSI: 0000000020000540 RDI: ffffffffffffff9c [ 2824.693949] RBP: 00007ffbd77b61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2824.701216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2824.708480] R13: 00007ffd09ef13cf R14: 00007ffbd77b6300 R15: 0000000000022000 [ 2824.734800] syz-executor.1: vmalloc: allocation failure: 9088 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2824.747552] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2824.752764] CPU: 1 PID: 27223 Comm: syz-executor.1 Not tainted 4.14.292-syzkaller #0 [ 2824.760815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2824.770169] Call Trace: [ 2824.772760] dump_stack+0x1b2/0x281 [ 2824.776397] warn_alloc.cold+0x96/0x1cc [ 2824.780549] ? zone_watermark_ok_safe+0x220/0x220 [ 2824.785396] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2824.790859] ? __get_vm_area_node+0xed/0x340 [ 2824.795279] ? __get_vm_area_node+0x27d/0x340 [ 2824.799812] vzalloc+0x122/0x150 [ 2824.803181] n_tty_open+0x16/0x160 [ 2824.806727] ? n_tty_set_termios+0xcc0/0xcc0 [ 2824.811142] tty_ldisc_open+0x6c/0xb0 [ 2824.814946] tty_ldisc_setup+0x43/0xf0 [ 2824.818836] tty_init_dev.part.0+0x1a7/0x400 [ 2824.823246] tty_open+0x669/0x8b0 [ 2824.826704] ? tty_kopen+0x1c0/0x1c0 [ 2824.830416] ? tty_kopen+0x1c0/0x1c0 [ 2824.834127] chrdev_open+0x23c/0x6d0 [ 2824.837926] ? __register_chrdev+0x3d0/0x3d0 [ 2824.842364] do_dentry_open+0x44b/0xec0 [ 2824.846335] ? __register_chrdev+0x3d0/0x3d0 [ 2824.850740] ? __inode_permission+0xcd/0x2f0 [ 2824.855183] vfs_open+0x105/0x220 [ 2824.858638] path_openat+0x628/0x2970 [ 2824.862446] ? path_lookupat+0x780/0x780 [ 2824.866534] ? trace_hardirqs_on+0x10/0x10 [ 2824.870775] do_filp_open+0x179/0x3c0 [ 2824.874572] ? may_open_dev+0xe0/0xe0 [ 2824.878382] ? lock_downgrade+0x740/0x740 [ 2824.882563] ? do_raw_spin_unlock+0x164/0x220 [ 2824.887052] ? _raw_spin_unlock+0x29/0x40 [ 2824.891194] ? __alloc_fd+0x1be/0x490 [ 2824.894999] do_sys_open+0x296/0x410 [ 2824.898695] ? filp_open+0x60/0x60 [ 2824.902215] ? __do_page_fault+0x159/0xad0 [ 2824.906434] ? do_syscall_64+0x4c/0x640 [ 2824.910400] ? SyS_open+0x30/0x30 [ 2824.913834] do_syscall_64+0x1d5/0x640 [ 2824.917726] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2824.922918] RIP: 0033:0x7ffbd8e41409 [ 2824.926875] RSP: 002b:00007ffbd77b6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2824.934579] RAX: ffffffffffffffda RBX: 00007ffbd8f53f80 RCX: 00007ffbd8e41409 [ 2824.941830] RDX: 0000000000000000 RSI: 0000000020000540 RDI: ffffffffffffff9c [ 2824.949082] RBP: 00007ffbd77b61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2824.956331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2824.963592] R13: 00007ffd09ef13cf R14: 00007ffbd77b6300 R15: 0000000000022000 [ 2824.979088] Mem-Info: [ 2824.984940] active_anon:19142 inactive_anon:6721 isolated_anon:0 [ 2824.984940] active_file:5826 inactive_file:11375 isolated_file:0 [ 2824.984940] unevictable:0 dirty:134 writeback:0 unstable:0 [ 2824.984940] slab_reclaimable:31180 slab_unreclaimable:108711 [ 2824.984940] mapped:31575 shmem:7056 pagetables:579 bounce:0 [ 2824.984940] free:1333200 free_pcp:328 free_cma:0 [ 2825.027235] Node 0 active_anon:76568kB inactive_anon:26884kB active_file:23184kB inactive_file:45500kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:126300kB dirty:532kB writeback:0kB shmem:28224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2825.055718] Node 1 active_anon:0kB inactive_anon:0kB active_file:120kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2825.082843] Node 0 DMA free:15908kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2825.110031] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2825.115165] Node 0 DMA32 free:1402536kB min:36196kB low:45244kB high:54292kB active_anon:76568kB inactive_anon:26884kB active_file:23184kB inactive_file:45500kB unevictable:0kB writepending:532kB present:3129332kB managed:2788004kB mlocked:0kB kernel_stack:7456kB pagetables:2316kB bounce:0kB free_pcp:1276kB local_pcp:568kB free_cma:0kB [ 2825.145907] lowmem_reserve[]: 0 0 0 0 0 [ 2825.150574] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:468kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2825.176967] lowmem_reserve[]: 0 0 0 0 0 [ 2825.181053] Node 1 Normal free:4039408kB min:53696kB low:67120kB high:80544kB active_anon:0kB inactive_anon:0kB active_file:120kB inactive_file:0kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2825.209813] lowmem_reserve[]: 0 0 0 0 0 [ 2825.213973] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 2825.228592] Node 0 DMA32: 2266*4kB (UME) 6542*8kB (UME) 4740*16kB (UME) 2978*32kB (UME) 106*64kB (UME) 5*128kB (UME) 3*256kB (UME) 1*512kB (M) 160*1024kB (UE) 29*2048kB (UM) 253*4096kB (UM) = 1500760kB [ 2825.247483] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2825.258940] Node 1 Normal: 92*4kB (UME) 384*8kB (UME) 306*16kB (UME) 87*32kB (UME) 30*64kB (UME) 16*128kB (UM) 14*256kB (UM) 3*512kB (UE) 3*1024kB (UME) 3*2048kB (M) 979*4096kB (M) = 4039408kB [ 2825.277034] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2825.286039] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2825.295655] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2825.305115] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2825.314412] 24259 total pagecache pages [ 2825.319002] 0 pages in swap cache [ 2825.322532] Swap cache stats: add 0, delete 0, find 0/0 [ 2825.328823] Free swap = 0kB [ 2825.331930] Total swap = 0kB [ 2825.335009] 2097051 pages RAM [ 2825.339417] 0 pages HighMem/MovableOnly [ 2825.343468] 363892 pages reserved [ 2825.347888] 0 pages cma reserved [ 2825.351746] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 21:57:21 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) openat$md(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)=@fd={0x1, 0x0, 0x4, 0x10000, 0x5, {}, {0x3, 0x0, 0x7f, 0x0, 0x1f, 0x0, "c80579a5"}, 0xd0c, 0x4, {}, 0x3f}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r2 = syz_open_dev$audion(&(0x7f0000000180), 0x0, 0x80000) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000200)) 21:57:21 executing program 2: setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x5f) socketpair(0x22, 0x2, 0x2, &(0x7f0000000000)) 21:57:21 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:57:21 executing program 4: syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r0 = socket(0x2b, 0x2, 0x2100008) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f00000002c0)=0x576b7221, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x301880) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x5c67, 0x2, 0x5}) ioctl$KIOCSOUND(r2, 0x4b2f, 0x6) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000080)="41356ec6395ed35cb22b1e7bae861fcf") r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x80000000) ioctl$KDDELIO(r1, 0x4b35, 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) (async) socket(0x2b, 0x2, 0x2100008) (async) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f00000002c0)=0x576b7221, 0x4) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x301880) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x5c67, 0x2, 0x5}) (async) ioctl$KIOCSOUND(r2, 0x4b2f, 0x6) (async) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000080)="41356ec6395ed35cb22b1e7bae861fcf") (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KIOCSOUND(r3, 0x4b2f, 0x80000000) (async) ioctl$KDDELIO(r1, 0x4b35, 0x2) (async) 21:57:21 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x64ccc1, 0x0) 21:57:21 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xdb3bd) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) (async) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)) (async) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000000)=0x3ff, 0x4) 21:57:21 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:57:21 executing program 2: socketpair(0x22, 0x2, 0x2, &(0x7f0000000000)) 21:57:21 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) openat$md(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)=@fd={0x1, 0x0, 0x4, 0x10000, 0x5, {}, {0x3, 0x0, 0x7f, 0x0, 0x1f, 0x0, "c80579a5"}, 0xd0c, 0x4, {}, 0x3f}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r2 = syz_open_dev$audion(&(0x7f0000000180), 0x0, 0x80000) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000200)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) (async) openat$md(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)=@fd={0x1, 0x0, 0x4, 0x10000, 0x5, {}, {0x3, 0x0, 0x7f, 0x0, 0x1f, 0x0, "c80579a5"}, 0xd0c, 0x4, {}, 0x3f}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x3}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) syz_open_dev$audion(&(0x7f0000000180), 0x0, 0x80000) (async) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000200)) (async) 21:57:21 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x64ccc1, 0x0) 21:57:21 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) 21:57:21 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x312, 0x5, 0x6, 0x7f, 0x9}, 0x10) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x22aa03) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000180)={&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000100)=""/110, 0x6e}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000080)={0x0, 0x2}) 21:57:21 executing program 2: socketpair(0x0, 0x2, 0x2, &(0x7f0000000000)) 21:57:21 executing program 4: syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r0 = socket(0x2b, 0x2, 0x2100008) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f00000002c0)=0x576b7221, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x301880) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x5c67, 0x2, 0x5}) ioctl$KIOCSOUND(r2, 0x4b2f, 0x6) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000080)="41356ec6395ed35cb22b1e7bae861fcf") r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x80000000) ioctl$KDDELIO(r1, 0x4b35, 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) (async) socket(0x2b, 0x2, 0x2100008) (async) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f00000002c0)=0x576b7221, 0x4) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x301880) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x5c67, 0x2, 0x5}) (async) ioctl$KIOCSOUND(r2, 0x4b2f, 0x6) (async) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000080)="41356ec6395ed35cb22b1e7bae861fcf") (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KIOCSOUND(r3, 0x4b2f, 0x80000000) (async) ioctl$KDDELIO(r1, 0x4b35, 0x2) (async) 21:57:21 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x312, 0x5, 0x6, 0x7f, 0x9}, 0x10) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x22aa03) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000180)={&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000100)=""/110, 0x6e}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000080)={0x0, 0x2}) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x312, 0x5, 0x6, 0x7f, 0x9}, 0x10) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x22aa03) (async) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000180)={&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000100)=""/110, 0x6e}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000080)={0x0, 0x2}) (async) 21:57:21 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) 21:57:21 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x64ccc1, 0x0) 21:57:21 executing program 2: socketpair(0x0, 0x2, 0x2, &(0x7f0000000000)) 21:57:21 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) openat$md(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)=@fd={0x1, 0x0, 0x4, 0x10000, 0x5, {}, {0x3, 0x0, 0x7f, 0x0, 0x1f, 0x0, "c80579a5"}, 0xd0c, 0x4, {}, 0x3f}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r2 = syz_open_dev$audion(&(0x7f0000000180), 0x0, 0x80000) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000200)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) (async) openat$md(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)=@fd={0x1, 0x0, 0x4, 0x10000, 0x5, {}, {0x3, 0x0, 0x7f, 0x0, 0x1f, 0x0, "c80579a5"}, 0xd0c, 0x4, {}, 0x3f}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x3}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) syz_open_dev$audion(&(0x7f0000000180), 0x0, 0x80000) (async) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000200)) (async) 21:57:21 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) 21:57:21 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r1, 0x2, 0x70bd2a, 0x702, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x64}}, 0x8000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:57:21 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000440)={@any, 0x1000, 0x800, 0x2}) r1 = syz_open_pts(0xffffffffffffffff, 0x400000) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000400)={0x2, 0x1, 0x1f, 0xb, 0x154, &(0x7f0000000000)="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"}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) 21:57:21 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x312, 0x5, 0x6, 0x7f, 0x9}, 0x10) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async, rerun: 64) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x22aa03) (rerun: 64) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000180)={&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000100)=""/110, 0x6e}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000080)={0x0, 0x2}) 21:57:21 executing program 2: socketpair(0x0, 0x2, 0x2, &(0x7f0000000000)) 21:57:21 executing program 5: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x7}}, @fwd={0xf}, @enum={0xa, 0x8, 0x0, 0x6, 0x4, [{0x1, 0xf8000000}, {0x2, 0x3}, {0x8, 0x3}, {0x3, 0x80000000}, {0xf, 0x6}, {0xa, 0x5}, {0xa}, {0xd, 0x1f}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x1, 0x2}, {0xe, 0x2}, {0x9, 0x1}, {0x3, 0x4}, {0x8, 0x3}]}]}, {0x0, [0x0, 0x5f, 0x5f, 0x0, 0x61, 0x2e, 0x0]}}, &(0x7f0000000140)=""/177, 0xc5, 0xb1}, 0x20) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000000)=0x80000001, 0x4) bind$llc(r0, &(0x7f0000000240)={0x1a, 0x303, 0xf8, 0x81, 0x3, 0x20, @multicast}, 0x10) 21:57:21 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000440)={@any, 0x1000, 0x800, 0x2}) (async) r1 = syz_open_pts(0xffffffffffffffff, 0x400000) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000400)={0x2, 0x1, 0x1f, 0xb, 0x154, &(0x7f0000000000)="a266a058088603fc33837b7b33edad60d582726ccfa94c9bf1e83c37ca5133196ab6bb6700ed452b971a02aa99231c607647679b431abb6425573dbd5206ae512bdc06512b6a5a70f67dd04260a0dca3084c8188372634ac48b7ba28d723e46af4e92db7505b444bb999b39c121461289fe811006e2693041e633549ce0b81bbffb89eadcecc2b0416999455fceb452d98fcb2803ea286bca9d6dd82962f15a66fc77f04b9dc62a0920ec56c97348a2c8a2dc35fc1a7b79d54172b3ebf386c64677f8cfaf327284fe6ec8fef6e9de80c6e731be13eb38808ffa3fec1c20c34cf48e79aa0179ec19e39fd4667c774bdd2408fbc17896d2f44b75cd453968326990fc34a7e05511815744344c3179855fb5b2c901960ed1a30c953331fe68462d746825db82db8c771a917a29233dece39e6ea7ae5faa30536345d4974e5dda1496a5ccdfe6eb4fdb099f08b59ee8b0c3b319774421f382b1c0a0f91b9c2d242d551489a6880852e4177151fc6f407b75fb9bf1cc16b1fb9b73f47e7b32aa747ef235ba232a424f0aafa9fcb989758fa40c87aa5f277ac45944a821969be0a423b03f682bc8272937d752d1d66ba33bfff643b786000fd7213fad54110a81de00def624652d592fa173a0deb0b29948b0943a6335e8046aa7a3ded03c6d6b5b9b8976eefcc6c7b54d4a17038ffbf950299b8ed7be187028b476667e4800cfd87ae6e15d1ca876fec375c03f18d27bcca473c6cae9e90cbdfc1b34a9defae1f0ce3160e694c0c1226da7d7e1dd55191f41c89244d5b1ad5024833e5923998c8dca38f4c95cc60bbc98a45c78e4552c3ca520fb2f87bfad469dd12c2791bfc4692afa2d1f07dc923345ea0858bc4a770331857c3b46911cc20202ab44dea172720211675271cafb14b50d142f280d74608bd368af7e54d5f881602375d1d9e46aa251dcfcbd05cd21c3c111ac579099aad4b87857eb9e3b61edb342f56f48a9f9eb3e891f2c8bb45492badae7253240a467ff50163b5796896187a7056b916ab508ac2e153012aac4ac013d143ffb21be351b549ee2e6ff237feaa7ef2ce2ed43c726038f135bde9a31e552cd37bb5962a12db327492723f0c404e8742b0c6932031c7c866a1c5b81bc5ad43390c8c972b7a5631f0a8ff951b267e7b3fe0e285613d0423c464f9db733b45794c5aad559b1c324c641f3990ff80e71a1a25c9785dda155931fecd13e9de20568590b45242eedb33ea516ae353feb2d4a572480a477a9bb57be222d93dca38cd4780c8e560070b915a22c0b4e77fae1bb7d75e789072190488659a4a0f22068d914ba8aa82dbbd9111eb0987ef274ca2d3874c4b70fe9322edfe3e12f896f153f54afb41fe577304535ee875fc897394619cfb6bf969db983307d96a1391b84608ee1210eb180567d3cbae704094422c3a0109f457e6"}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) 21:57:21 executing program 0: ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000040)={0x0, 0x18c379d4de5bb161}) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0xfff, 0xf5, 0x1f, 0x1f}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) r3 = syz_open_dev$audion(&(0x7f0000000180), 0x20, 0x200) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000200)=@userptr={0x2, 0x3, 0x4, 0x2, 0x5, {0x77359400}, {0x1, 0x0, 0xf2, 0x81, 0x6, 0xf4, "1b716c11"}, 0x10000, 0x2, {&(0x7f0000000140)}, 0x80, 0x0, r3}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:21 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x20000) socketpair(0x1d, 0x1, 0xfffff000, &(0x7f00000000c0)={0xffffffffffffffff}) write$bt_hci(r1, &(0x7f0000000080)={0x1, @write_link_policy={{0x80d, 0x4}, {0xc8, 0xfffc}}}, 0x8) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x7fffffffffffffff, 0x0) 21:57:21 executing program 2: socketpair(0x22, 0x0, 0x2, &(0x7f0000000000)) 21:57:21 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async, rerun: 32) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r1, 0x2, 0x70bd2a, 0x702, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x64}}, 0x8000) (async, rerun: 32) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) (rerun: 32) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:57:21 executing program 5: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x7}}, @fwd={0xf}, @enum={0xa, 0x8, 0x0, 0x6, 0x4, [{0x1, 0xf8000000}, {0x2, 0x3}, {0x8, 0x3}, {0x3, 0x80000000}, {0xf, 0x6}, {0xa, 0x5}, {0xa}, {0xd, 0x1f}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x1, 0x2}, {0xe, 0x2}, {0x9, 0x1}, {0x3, 0x4}, {0x8, 0x3}]}]}, {0x0, [0x0, 0x5f, 0x5f, 0x0, 0x61, 0x2e, 0x0]}}, &(0x7f0000000140)=""/177, 0xc5, 0xb1}, 0x20) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000000)=0x80000001, 0x4) bind$llc(r0, &(0x7f0000000240)={0x1a, 0x303, 0xf8, 0x81, 0x3, 0x20, @multicast}, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x7}}, @fwd={0xf}, @enum={0xa, 0x8, 0x0, 0x6, 0x4, [{0x1, 0xf8000000}, {0x2, 0x3}, {0x8, 0x3}, {0x3, 0x80000000}, {0xf, 0x6}, {0xa, 0x5}, {0xa}, {0xd, 0x1f}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x1, 0x2}, {0xe, 0x2}, {0x9, 0x1}, {0x3, 0x4}, {0x8, 0x3}]}]}, {0x0, [0x0, 0x5f, 0x5f, 0x0, 0x61, 0x2e, 0x0]}}, &(0x7f0000000140)=""/177, 0xc5, 0xb1}, 0x20) (async) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000000)=0x80000001, 0x4) (async) bind$llc(r0, &(0x7f0000000240)={0x1a, 0x303, 0xf8, 0x81, 0x3, 0x20, @multicast}, 0x10) (async) 21:57:21 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000440)={@any, 0x1000, 0x800, 0x2}) r1 = syz_open_pts(0xffffffffffffffff, 0x400000) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000400)={0x2, 0x1, 0x1f, 0xb, 0x154, &(0x7f0000000000)="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"}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000440)={@any, 0x1000, 0x800, 0x2}) (async) syz_open_pts(0xffffffffffffffff, 0x400000) (async) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000400)={0x2, 0x1, 0x1f, 0xb, 0x154, &(0x7f0000000000)="a266a058088603fc33837b7b33edad60d582726ccfa94c9bf1e83c37ca5133196ab6bb6700ed452b971a02aa99231c607647679b431abb6425573dbd5206ae512bdc06512b6a5a70f67dd04260a0dca3084c8188372634ac48b7ba28d723e46af4e92db7505b444bb999b39c121461289fe811006e2693041e633549ce0b81bbffb89eadcecc2b0416999455fceb452d98fcb2803ea286bca9d6dd82962f15a66fc77f04b9dc62a0920ec56c97348a2c8a2dc35fc1a7b79d54172b3ebf386c64677f8cfaf327284fe6ec8fef6e9de80c6e731be13eb38808ffa3fec1c20c34cf48e79aa0179ec19e39fd4667c774bdd2408fbc17896d2f44b75cd453968326990fc34a7e05511815744344c3179855fb5b2c901960ed1a30c953331fe68462d746825db82db8c771a917a29233dece39e6ea7ae5faa30536345d4974e5dda1496a5ccdfe6eb4fdb099f08b59ee8b0c3b319774421f382b1c0a0f91b9c2d242d551489a6880852e4177151fc6f407b75fb9bf1cc16b1fb9b73f47e7b32aa747ef235ba232a424f0aafa9fcb989758fa40c87aa5f277ac45944a821969be0a423b03f682bc8272937d752d1d66ba33bfff643b786000fd7213fad54110a81de00def624652d592fa173a0deb0b29948b0943a6335e8046aa7a3ded03c6d6b5b9b8976eefcc6c7b54d4a17038ffbf950299b8ed7be187028b476667e4800cfd87ae6e15d1ca876fec375c03f18d27bcca473c6cae9e90cbdfc1b34a9defae1f0ce3160e694c0c1226da7d7e1dd55191f41c89244d5b1ad5024833e5923998c8dca38f4c95cc60bbc98a45c78e4552c3ca520fb2f87bfad469dd12c2791bfc4692afa2d1f07dc923345ea0858bc4a770331857c3b46911cc20202ab44dea172720211675271cafb14b50d142f280d74608bd368af7e54d5f881602375d1d9e46aa251dcfcbd05cd21c3c111ac579099aad4b87857eb9e3b61edb342f56f48a9f9eb3e891f2c8bb45492badae7253240a467ff50163b5796896187a7056b916ab508ac2e153012aac4ac013d143ffb21be351b549ee2e6ff237feaa7ef2ce2ed43c726038f135bde9a31e552cd37bb5962a12db327492723f0c404e8742b0c6932031c7c866a1c5b81bc5ad43390c8c972b7a5631f0a8ff951b267e7b3fe0e285613d0423c464f9db733b45794c5aad559b1c324c641f3990ff80e71a1a25c9785dda155931fecd13e9de20568590b45242eedb33ea516ae353feb2d4a572480a477a9bb57be222d93dca38cd4780c8e560070b915a22c0b4e77fae1bb7d75e789072190488659a4a0f22068d914ba8aa82dbbd9111eb0987ef274ca2d3874c4b70fe9322edfe3e12f896f153f54afb41fe577304535ee875fc897394619cfb6bf969db983307d96a1391b84608ee1210eb180567d3cbae704094422c3a0109f457e6"}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) 21:57:21 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x20000) socketpair(0x1d, 0x1, 0xfffff000, &(0x7f00000000c0)={0xffffffffffffffff}) write$bt_hci(r1, &(0x7f0000000080)={0x1, @write_link_policy={{0x80d, 0x4}, {0xc8, 0xfffc}}}, 0x8) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x7fffffffffffffff, 0x0) 21:57:21 executing program 2: socketpair(0x22, 0x0, 0x2, &(0x7f0000000000)) 21:57:21 executing program 5: syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x7}}, @fwd={0xf}, @enum={0xa, 0x8, 0x0, 0x6, 0x4, [{0x1, 0xf8000000}, {0x2, 0x3}, {0x8, 0x3}, {0x3, 0x80000000}, {0xf, 0x6}, {0xa, 0x5}, {0xa}, {0xd, 0x1f}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x1, 0x2}, {0xe, 0x2}, {0x9, 0x1}, {0x3, 0x4}, {0x8, 0x3}]}]}, {0x0, [0x0, 0x5f, 0x5f, 0x0, 0x61, 0x2e, 0x0]}}, &(0x7f0000000140)=""/177, 0xc5, 0xb1}, 0x20) (async) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000000)=0x80000001, 0x4) bind$llc(r0, &(0x7f0000000240)={0x1a, 0x303, 0xf8, 0x81, 0x3, 0x20, @multicast}, 0x10) 21:57:21 executing program 1: ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x1ff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x41042, 0x0) 21:57:21 executing program 2: socketpair(0x22, 0x0, 0x2, &(0x7f0000000000)) 21:57:21 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x20000) socketpair(0x1d, 0x1, 0xfffff000, &(0x7f00000000c0)={0xffffffffffffffff}) write$bt_hci(r1, &(0x7f0000000080)={0x1, @write_link_policy={{0x80d, 0x4}, {0xc8, 0xfffc}}}, 0x8) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async, rerun: 32) syz_open_dev$dri(&(0x7f0000000000), 0x7fffffffffffffff, 0x0) (rerun: 32) 21:57:22 executing program 0: ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000040)={0x0, 0x18c379d4de5bb161}) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0xfff, 0xf5, 0x1f, 0x1f}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) r3 = syz_open_dev$audion(&(0x7f0000000180), 0x20, 0x200) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000200)=@userptr={0x2, 0x3, 0x4, 0x2, 0x5, {0x77359400}, {0x1, 0x0, 0xf2, 0x81, 0x6, 0xf4, "1b716c11"}, 0x10000, 0x2, {&(0x7f0000000140)}, 0x80, 0x0, r3}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:22 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000040)=""/118) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:57:22 executing program 1: ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x1ff) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x41042, 0x0) 21:57:22 executing program 2: socketpair(0x22, 0x2, 0x0, &(0x7f0000000000)) 21:57:22 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:57:22 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r1, 0x2, 0x70bd2a, 0x702, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x64}}, 0x8000) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:57:22 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000040)=""/118) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000040)=""/118) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) 21:57:22 executing program 2: socketpair(0x22, 0x2, 0x0, &(0x7f0000000000)) 21:57:22 executing program 1: ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x1ff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x41042, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x1ff) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x41042, 0x0) (async) 21:57:22 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) socket$bt_cmtp(0x1f, 0x3, 0x5) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) 21:57:22 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000040)=""/118) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000040)=""/118) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) 21:57:22 executing program 2: socketpair(0x22, 0x2, 0x0, &(0x7f0000000000)) 21:57:23 executing program 0: ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000040)={0x0, 0x18c379d4de5bb161}) (async) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0xfff, 0xf5, 0x1f, 0x1f}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) r3 = syz_open_dev$audion(&(0x7f0000000180), 0x20, 0x200) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000200)=@userptr={0x2, 0x3, 0x4, 0x2, 0x5, {0x77359400}, {0x1, 0x0, 0xf2, 0x81, 0x6, 0xf4, "1b716c11"}, 0x10000, 0x2, {&(0x7f0000000140)}, 0x80, 0x0, r3}) (async, rerun: 32) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (rerun: 32) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:23 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x541140, 0x0) ioctl$KIOCSOUND(r2, 0x4b2f, 0x1) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000080)={0x2, 0x1, 0x1, 0x11, 0xaf, &(0x7f0000000300)="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"}) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f00000000c0)='\x00') 21:57:23 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) socket$bt_cmtp(0x1f, 0x3, 0x5) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:57:23 executing program 1: ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000000)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) 21:57:23 executing program 2: socketpair(0x22, 0x2, 0x2, 0x0) 21:57:23 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000040)=0x100003ff, 0x4) 21:57:23 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:57:23 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x541140, 0x0) ioctl$KIOCSOUND(r2, 0x4b2f, 0x1) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000080)={0x2, 0x1, 0x1, 0x11, 0xaf, &(0x7f0000000300)="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"}) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f00000000c0)='\x00') syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x541140, 0x0) (async) ioctl$KIOCSOUND(r2, 0x4b2f, 0x1) (async) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) (async) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000080)={0x2, 0x1, 0x1, 0x11, 0xaf, &(0x7f0000000300)="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"}) (async) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f00000000c0)='\x00') (async) 21:57:23 executing program 1: ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000000)) (async) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) 21:57:23 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000040)=0x100003ff, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000040)=0x100003ff, 0x4) (async) 21:57:23 executing program 2: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x7}}, @fwd={0xf}, @enum={0xa, 0x8, 0x0, 0x6, 0x4, [{0x1, 0xf8000000}, {0x2, 0x3}, {0x8, 0x3}, {0x3, 0x80000000}, {0xf, 0x6}, {0xa, 0x5}, {0xa}, {0xd, 0x1f}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x1, 0x2}, {0xe, 0x2}, {0x9, 0x1}, {0x3, 0x4}, {0x8, 0x3}]}]}, {0x0, [0x0, 0x5f, 0x5f, 0x0, 0x61, 0x2e, 0x0]}}, &(0x7f0000000140)=""/177, 0xc5, 0xb1}, 0x20) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000000)=0x80000001, 0x4) bind$llc(r0, &(0x7f0000000240)={0x1a, 0x303, 0xf8, 0x81, 0x3, 0x20, @multicast}, 0x10) 21:57:23 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:57:24 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:24 executing program 2: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x7}}, @fwd={0xf}, @enum={0xa, 0x8, 0x0, 0x6, 0x4, [{0x1, 0xf8000000}, {0x2, 0x3}, {0x8, 0x3}, {0x3, 0x80000000}, {0xf, 0x6}, {0xa, 0x5}, {0xa}, {0xd, 0x1f}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x1, 0x2}, {0xe, 0x2}, {0x9, 0x1}, {0x3, 0x4}, {0x8, 0x3}]}]}, {0x0, [0x0, 0x5f, 0x5f, 0x0, 0x61, 0x2e, 0x0]}}, &(0x7f0000000140)=""/177, 0xc5, 0xb1}, 0x20) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000000)=0x80000001, 0x4) bind$llc(r0, &(0x7f0000000240)={0x1a, 0x303, 0xf8, 0x81, 0x3, 0x20, @multicast}, 0x10) 21:57:24 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) 21:57:24 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x541140, 0x0) ioctl$KIOCSOUND(r2, 0x4b2f, 0x1) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000080)={0x2, 0x1, 0x1, 0x11, 0xaf, &(0x7f0000000300)="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"}) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f00000000c0)='\x00') syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x541140, 0x0) (async) ioctl$KIOCSOUND(r2, 0x4b2f, 0x1) (async) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) (async) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000080)={0x2, 0x1, 0x1, 0x11, 0xaf, &(0x7f0000000300)="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"}) (async) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f00000000c0)='\x00') (async) 21:57:24 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000040)=0x100003ff, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000040)=0x100003ff, 0x4) (async) 21:57:24 executing program 1: ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000000)) (async) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) 21:57:24 executing program 2: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x7}}, @fwd={0xf}, @enum={0xa, 0x8, 0x0, 0x6, 0x4, [{0x1, 0xf8000000}, {0x2, 0x3}, {0x8, 0x3}, {0x3, 0x80000000}, {0xf, 0x6}, {0xa, 0x5}, {0xa}, {0xd, 0x1f}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x1, 0x2}, {0xe, 0x2}, {0x9, 0x1}, {0x3, 0x4}, {0x8, 0x3}]}]}, {0x0, [0x0, 0x5f, 0x5f, 0x0, 0x61, 0x2e, 0x0]}}, &(0x7f0000000140)=""/177, 0xc5, 0xb1}, 0x20) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000000)=0x80000001, 0x4) bind$llc(r0, &(0x7f0000000240)={0x1a, 0x303, 0xf8, 0x81, 0x3, 0x20, @multicast}, 0x10) 21:57:24 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f00000002c0)=0x576b721d, 0x4) 21:57:24 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) bind$llc(r1, &(0x7f00000000c0)={0x1a, 0x18, 0xfe, 0x7f, 0x1, 0x5, @multicast}, 0x10) bind$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x301, 0x2, 0x0, 0x3, 0x4}, 0x10) 21:57:24 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x6c140, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0x79b7}) 21:57:24 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000000)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000040)=0x4, 0x4) 21:57:24 executing program 2: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x7}}, @fwd={0xf}, @enum={0xa, 0x8, 0x0, 0x6, 0x4, [{0x1, 0xf8000000}, {0x2, 0x3}, {0x8, 0x3}, {0x3, 0x80000000}, {0xf, 0x6}, {0xa, 0x5}, {0xa}, {0xd, 0x1f}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x1, 0x2}, {0xe, 0x2}, {0x9, 0x1}, {0x3, 0x4}, {0x8, 0x3}]}]}, {0x0, [0x0, 0x5f, 0x5f, 0x0, 0x61, 0x2e, 0x0]}}, &(0x7f0000000140)=""/177, 0xc5, 0xb1}, 0x20) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000000)=0x80000001, 0x4) 21:57:25 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1, 0x0, 0x2}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) 21:57:25 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000000)) (async, rerun: 64) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000040)=0x4, 0x4) 21:57:25 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f00000002c0)=0x576b721d, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f00000002c0)=0x576b721d, 0x4) (async) 21:57:25 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x6c140, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0x79b7}) 21:57:25 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) bind$llc(r1, &(0x7f00000000c0)={0x1a, 0x18, 0xfe, 0x7f, 0x1, 0x5, @multicast}, 0x10) bind$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x301, 0x2, 0x0, 0x3, 0x4}, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) (async) bind$llc(r1, &(0x7f00000000c0)={0x1a, 0x18, 0xfe, 0x7f, 0x1, 0x5, @multicast}, 0x10) (async) bind$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x301, 0x2, 0x0, 0x3, 0x4}, 0x10) (async) 21:57:25 executing program 2: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000000)=0x80000001, 0x4) 21:57:25 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x6c140, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0x79b7}) 21:57:25 executing program 2: syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x8, &(0x7f0000000000)=0x80000001, 0x4) 21:57:25 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f00000002c0)=0x576b721d, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f00000002c0)=0x576b721d, 0x4) (async) 21:57:25 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) bind$llc(r1, &(0x7f00000000c0)={0x1a, 0x18, 0xfe, 0x7f, 0x1, 0x5, @multicast}, 0x10) bind$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x301, 0x2, 0x0, 0x3, 0x4}, 0x10) 21:57:25 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async, rerun: 32) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) (rerun: 32) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000000)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000040)=0x4, 0x4) 21:57:25 executing program 2: syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x8, &(0x7f0000000000)=0x80000001, 0x4) 21:57:27 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1, 0x0, 0x2}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:27 executing program 1: ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x103800, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0x8}) 21:57:27 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x0}]}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000100)={r1, 0x0, &(0x7f00000000c0), &(0x7f0000000080)=[0x20], 0x26, 0x0, 0x42b, &(0x7f0000000100), &(0x7f0000000140)=[0xfffffffe]}) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:57:27 executing program 2: syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x8, &(0x7f0000000000)=0x80000001, 0x4) 21:57:27 executing program 3: ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x26f91) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x181d40) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x500, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x1, 0xff81, 0x7}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, &(0x7f00000000c0)="c6ff3b8b5577c5e00851ee6eb7fc43b9c5b5472a8ee567716f8a0f6497dfefc0cd2430f987d8df360b1f2473db9b152257330e232ee6b064681ba8e41b4c21a0b3bd7db6cff0755466dcd0385178b9ddb9f0dbaffe9fad6d1681e8776990a530428b2f80ed38712ff96a94211e4193c9f750313eb5a22874964b8411e95d6a3a064c61f25dd73e933e868aeb45a926d9d8249ba2629e8d0de92111c984b615749ab1cf7a66fce6") setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:57:27 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1d927d73823ae6e1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4094}, 0x4000000) 21:57:27 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000000)=0x80000001, 0x4) 21:57:27 executing program 1: ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x103800, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0x8}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x103800, 0x0) (async) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) (async) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0x8}) (async) 21:57:27 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x0}]}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000100)={r1, 0x0, &(0x7f00000000c0), &(0x7f0000000080)=[0x20], 0x26, 0x0, 0x42b, &(0x7f0000000100), &(0x7f0000000140)=[0xfffffffe]}) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:57:27 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1d927d73823ae6e1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4094}, 0x4000000) 21:57:27 executing program 3: ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x26f91) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x181d40) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x500, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x1, 0xff81, 0x7}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, &(0x7f00000000c0)="c6ff3b8b5577c5e00851ee6eb7fc43b9c5b5472a8ee567716f8a0f6497dfefc0cd2430f987d8df360b1f2473db9b152257330e232ee6b064681ba8e41b4c21a0b3bd7db6cff0755466dcd0385178b9ddb9f0dbaffe9fad6d1681e8776990a530428b2f80ed38712ff96a94211e4193c9f750313eb5a22874964b8411e95d6a3a064c61f25dd73e933e868aeb45a926d9d8249ba2629e8d0de92111c984b615749ab1cf7a66fce6") (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:57:27 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000000)=0x80000001, 0x4) 21:57:27 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, &(0x7f0000000040)="6af42fd112d35f337f049103cb06a7926b32abc8bd617e9c2559a1e62d48ce63667e9661") ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f00000000c0)=""/128) 21:57:27 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1d927d73823ae6e1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4094}, 0x4000000) syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r1) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x10) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1d927d73823ae6e1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4094}, 0x4000000) (async) 21:57:27 executing program 1: ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) (async, rerun: 64) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x103800, 0x0) (rerun: 64) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0x8}) 21:57:27 executing program 3: ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x26f91) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x181d40) (async) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x500, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x1, 0xff81, 0x7}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, &(0x7f00000000c0)="c6ff3b8b5577c5e00851ee6eb7fc43b9c5b5472a8ee567716f8a0f6497dfefc0cd2430f987d8df360b1f2473db9b152257330e232ee6b064681ba8e41b4c21a0b3bd7db6cff0755466dcd0385178b9ddb9f0dbaffe9fad6d1681e8776990a530428b2f80ed38712ff96a94211e4193c9f750313eb5a22874964b8411e95d6a3a064c61f25dd73e933e868aeb45a926d9d8249ba2629e8d0de92111c984b615749ab1cf7a66fce6") setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:57:27 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000000)=0x80000001, 0x4) 21:57:27 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x0}]}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000100)={r1, 0x0, &(0x7f00000000c0), &(0x7f0000000080)=[0x20], 0x26, 0x0, 0x42b, &(0x7f0000000100), &(0x7f0000000140)=[0xfffffffe]}) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:57:27 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000000)=0x80000001, 0x4) 21:57:27 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0), 0x4, 0x20080) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), 0xffffffffffffffff, 0x2}}, 0x18) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e2, &(0x7f0000000000)="f1334634a420f5ba9d1ac98c85ad37600de30e8e5bae9fccfc7f721a11a6897361674b405ab7fd02d74b80bcda36ee1e2ddb982cc6c0d40601c3aa75217ff2293b8ca0680b912c67aa60ef9285cd00a9c143ea05d8ae123c518d9fe1883de0d78220c33c476b999d57930cac4551ed364fc973e8a9c4e4a938e0868b67fb19e26ac2ba74169e52e8ae1838a4") write$bt_hci(r1, &(0x7f0000000180)={0x1, @pin_code_neg_reply={{0x40e, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0xa) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f00000002c0)=0x576b721d, 0x4) 21:57:27 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000100)={0x6d4, 0x8, 0x8, 0x3, 0x1a, "99ff59bc06098c54"}) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x1, @loopback}, r2}}, 0x30) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:57:27 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x1, 0x6}, {}, {0x3, 0x4ac3}]}) r1 = syz_open_pts(r0, 0x400000) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000080)) ioctl$TIOCNXCL(r1, 0x540d) 21:57:28 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="f0cedaf78a9975a6303d0892cbe539ab87c9031aa15d0ca811dcf608") r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x2, 0x8, "a4cb72", 0x2}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x1, 0x4a, 0x200, 0x88880}) 21:57:28 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x1, 0x6}, {}, {0x3, 0x4ac3}]}) r1 = syz_open_pts(r0, 0x400000) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000080)) (async) ioctl$TIOCNXCL(r1, 0x540d) 21:57:28 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, &(0x7f0000000040)="6af42fd112d35f337f049103cb06a7926b32abc8bd617e9c2559a1e62d48ce63667e9661") (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f00000000c0)=""/128) 21:57:28 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r1 = syz_open_dev$audion(&(0x7f00000000c0), 0x4, 0x20080) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), 0xffffffffffffffff, 0x2}}, 0x18) (async) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e2, &(0x7f0000000000)="f1334634a420f5ba9d1ac98c85ad37600de30e8e5bae9fccfc7f721a11a6897361674b405ab7fd02d74b80bcda36ee1e2ddb982cc6c0d40601c3aa75217ff2293b8ca0680b912c67aa60ef9285cd00a9c143ea05d8ae123c518d9fe1883de0d78220c33c476b999d57930cac4551ed364fc973e8a9c4e4a938e0868b67fb19e26ac2ba74169e52e8ae1838a4") write$bt_hci(r1, &(0x7f0000000180)={0x1, @pin_code_neg_reply={{0x40e, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0xa) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f00000002c0)=0x576b721d, 0x4) 21:57:28 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000100)={0x6d4, 0x8, 0x8, 0x3, 0x1a, "99ff59bc06098c54"}) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x1, @loopback}, r2}}, 0x30) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x111}}, 0x20) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) (async) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000100)={0x6d4, 0x8, 0x8, 0x3, 0x1a, "99ff59bc06098c54"}) (async) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x1, @loopback}, r2}}, 0x30) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) 21:57:28 executing program 2: syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x8, &(0x7f0000000000)=0x80000001, 0x4) 21:57:28 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="f0cedaf78a9975a6303d0892cbe539ab87c9031aa15d0ca811dcf608") r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x2, 0x8, "a4cb72", 0x2}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x1, 0x4a, 0x200, 0x88880}) 21:57:28 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x1, 0x6}, {}, {0x3, 0x4ac3}]}) (async) r1 = syz_open_pts(r0, 0x400000) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000080)) ioctl$TIOCNXCL(r1, 0x540d) 21:57:28 executing program 2: syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x8, &(0x7f0000000000)=0x80000001, 0x4) 21:57:28 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0), 0x4, 0x20080) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), 0xffffffffffffffff, 0x2}}, 0x18) (async) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e2, &(0x7f0000000000)="f1334634a420f5ba9d1ac98c85ad37600de30e8e5bae9fccfc7f721a11a6897361674b405ab7fd02d74b80bcda36ee1e2ddb982cc6c0d40601c3aa75217ff2293b8ca0680b912c67aa60ef9285cd00a9c143ea05d8ae123c518d9fe1883de0d78220c33c476b999d57930cac4551ed364fc973e8a9c4e4a938e0868b67fb19e26ac2ba74169e52e8ae1838a4") write$bt_hci(r1, &(0x7f0000000180)={0x1, @pin_code_neg_reply={{0x40e, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0xa) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f00000002c0)=0x576b721d, 0x4) 21:57:28 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="f0cedaf78a9975a6303d0892cbe539ab87c9031aa15d0ca811dcf608") (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x2, 0x8, "a4cb72", 0x2}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x1, 0x4a, 0x200, 0x88880}) 21:57:28 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000100)={0x6d4, 0x8, 0x8, 0x3, 0x1a, "99ff59bc06098c54"}) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x1, @loopback}, r2}}, 0x30) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x111}}, 0x20) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) (async) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000100)={0x6d4, 0x8, 0x8, 0x3, 0x1a, "99ff59bc06098c54"}) (async) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x1, @loopback}, r2}}, 0x30) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) 21:57:28 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x2000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0x46b2, 0x4, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r5}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000180)={r5}) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r1, r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) 21:57:28 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000000)) 21:57:29 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, &(0x7f0000000040)="6af42fd112d35f337f049103cb06a7926b32abc8bd617e9c2559a1e62d48ce63667e9661") (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f00000000c0)=""/128) 21:57:29 executing program 2: syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x8, &(0x7f0000000000)=0x80000001, 0x4) 21:57:29 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x7fffffff, 0x4) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x5, 0xfffffffffffff000, 0x80200000}, 0x0) 21:57:29 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000040)=0x1ff, 0x4) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x7f, "724390", "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"}}, 0x110) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:57:29 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x2000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0x46b2, 0x4, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r5}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000180)={r5}) (async) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r1, r2}}, 0x18) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) 21:57:29 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000000)) 21:57:29 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000000)) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000000)) (async) 21:57:29 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000040)=0x1ff, 0x4) (async) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x7f, "724390", "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"}}, 0x110) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:57:29 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x7fffffff, 0x4) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x5, 0xfffffffffffff000, 0x80200000}, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x7fffffff, 0x4) (async) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x5, 0xfffffffffffff000, 0x80200000}, 0x0) (async) 21:57:29 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x0, &(0x7f0000000000)=0x80000001, 0x4) 21:57:29 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x2000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0x46b2, 0x4, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r5}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000180)={r5}) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r1, r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x2000) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x111}}, 0x20) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0x46b2, 0x4, 0x8}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r5}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000180)={r5}) (async) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000140)) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r1, r2}}, 0x18) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) 21:57:29 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000040)=0x1ff, 0x4) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x7f, "724390", "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"}}, 0x110) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000040)=0x1ff, 0x4) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x7f, "724390", "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"}}, 0x110) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) 21:57:30 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x220103) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x76, 0x2, 0x4, 0x70000, 0x3, {0x0, 0x2710}, {0x5, 0xc, 0x0, 0x1f, 0x82, 0x6, "268d45ae"}, 0x401, 0x1, {&(0x7f00000000c0)=[{0x10001, 0x52c0, {0x4}, 0x256}, {0x100, 0x69, {0x21}, 0xfffffffe}]}, 0x5, 0x0, r1}) r2 = syz_open_pts(r1, 0x100) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000200)={0xd, 0x3}) 21:57:30 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000180)={@any, 0x7}) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x1f, "a7c4fc", "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"}}, 0x110) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x201, 0xf7, 0x5, 0x61, 0x8, @broadcast}, 0x10) 21:57:30 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x0, &(0x7f0000000000)=0x80000001, 0x4) 21:57:30 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x7fffffff, 0x4) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x5, 0xfffffffffffff000, 0x80200000}, 0x0) 21:57:30 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r3}}, 0x38) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000040)={0x8, 0x120, 0xfa00, {0x1, {0xb8c7, 0x2686, "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", 0x5, 0x0, 0x2c, 0x1, 0xfb, 0x5, 0x20, 0x1}, r3}}, 0x128) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:57:30 executing program 1: ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000000)={0x0, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x8, 0x8, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000080)={0x0, 0x1}) 21:57:30 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f00000002c0)=0x576b721d, 0x4) 21:57:30 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x0, &(0x7f0000000000)=0x80000001, 0x4) 21:57:30 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000180)={@any, 0x7}) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x1f, "a7c4fc", "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"}}, 0x110) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x201, 0xf7, 0x5, 0x61, 0x8, @broadcast}, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000180)={@any, 0x7}) (async) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x1f, "a7c4fc", "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"}}, 0x110) (async) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x201, 0xf7, 0x5, 0x61, 0x8, @broadcast}, 0x10) (async) 21:57:30 executing program 1: ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000000)={0x0, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x8, 0x8, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000000)={0x0, 0x9}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x8, 0x8, 0x2}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000080)={0x0, 0x1}) (async) 21:57:30 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r3}}, 0x38) (async) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000040)={0x8, 0x120, 0xfa00, {0x1, {0xb8c7, 0x2686, "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", 0x5, 0x0, 0x2c, 0x1, 0xfb, 0x5, 0x20, 0x1}, r3}}, 0x128) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:57:30 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f00000002c0)=0x576b721d, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f00000002c0)=0x576b721d, 0x4) (async) 21:57:31 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x220103) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x76, 0x2, 0x4, 0x70000, 0x3, {0x0, 0x2710}, {0x5, 0xc, 0x0, 0x1f, 0x82, 0x6, "268d45ae"}, 0x401, 0x1, {&(0x7f00000000c0)=[{0x10001, 0x52c0, {0x4}, 0x256}, {0x100, 0x69, {0x21}, 0xfffffffe}]}, 0x5, 0x0, r1}) (async, rerun: 32) r2 = syz_open_pts(r1, 0x100) (rerun: 32) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000200)={0xd, 0x3}) 21:57:31 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000180)={@any, 0x7}) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x1f, "a7c4fc", "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"}}, 0x110) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x201, 0xf7, 0x5, 0x61, 0x8, @broadcast}, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000180)={@any, 0x7}) (async) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x1f, "a7c4fc", "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"}}, 0x110) (async) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x201, 0xf7, 0x5, 0x61, 0x8, @broadcast}, 0x10) (async) 21:57:31 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x8, 0x0, 0x0) 21:57:31 executing program 1: ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000000)={0x0, 0x9}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x8, 0x8, 0x2}) (async, rerun: 32) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000080)={0x0, 0x1}) 21:57:31 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f00000002c0)=0x576b721d, 0x4) 21:57:31 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r3}}, 0x38) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000040)={0x8, 0x120, 0xfa00, {0x1, {0xb8c7, 0x2686, "8246a85e32696b7469fddb8536314e9220cbe3a9415d1f6a47a515409189d7fd82e1fefa24f2754be449a51b3571892d37765ed858200f5255abf5b1e463fbc020802e60a1101819b9a027ff3cb02d3b4bd8b49fafcd415c87be7e27c43a64c4f3e5552a97681293544d2688fcafc548e1af3a1de70af873f2564593e5170828d2cdbe3d56470e7a983594ca5fae11ceb0b99b45f4f1af30971fa6db683a5a861e838e8c19b12e3c86a6d82b664dadd235d44f39d090c8ee24acec0d5acf402dd2a8a553858ed1fcfe31e0ada00f367ef6267512b329743ab41c6b6b95b2f1778fdf1a2cd1edb2dbdf90088cbf139c00cae2eade9dfe0bef007d38ed0e6483fc", 0x5, 0x0, 0x2c, 0x1, 0xfb, 0x5, 0x20, 0x1}, r3}}, 0x128) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r3}}, 0x38) (async) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000040)={0x8, 0x120, 0xfa00, {0x1, {0xb8c7, 0x2686, "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", 0x5, 0x0, 0x2c, 0x1, 0xfb, 0x5, 0x20, 0x1}, r3}}, 0x128) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) 21:57:31 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000000)={@none, 0x0, 0x2, 0x7fff}) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:57:31 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x220103) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x76, 0x2, 0x4, 0x70000, 0x3, {0x0, 0x2710}, {0x5, 0xc, 0x0, 0x1f, 0x82, 0x6, "268d45ae"}, 0x401, 0x1, {&(0x7f00000000c0)=[{0x10001, 0x52c0, {0x4}, 0x256}, {0x100, 0x69, {0x21}, 0xfffffffe}]}, 0x5, 0x0, r1}) r2 = syz_open_pts(r1, 0x100) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000200)={0xd, 0x3}) syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x220103) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x76, 0x2, 0x4, 0x70000, 0x3, {0x0, 0x2710}, {0x5, 0xc, 0x0, 0x1f, 0x82, 0x6, "268d45ae"}, 0x401, 0x1, {&(0x7f00000000c0)=[{0x10001, 0x52c0, {0x4}, 0x256}, {0x100, 0x69, {0x21}, 0xfffffffe}]}, 0x5, 0x0, r1}) (async) syz_open_pts(r1, 0x100) (async) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000200)={0xd, 0x3}) (async) 21:57:31 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) 21:57:31 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x4, 0x51e0, 0x2, 0x8000, 0x9, "9f116513cc5c1fbb8272b65ede8171e2c743e1", 0x9, 0x7}) 21:57:31 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x8, 0x0, 0x0) 21:57:31 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000)=0x3fe, 0x4) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000180)=""/233) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)=@multiplanar_overlay={0x4, 0x3, 0x4, 0x4000, 0xfffffe01, {}, {0x1, 0xc, 0x5, 0x7c, 0x28, 0x40, "457ebf19"}, 0x8b, 0x3, {&(0x7f0000000080)=[{0xee30, 0xffffffff, {0x6}, 0x4}, {0x4, 0x8, {0x4}, 0x3}]}, 0x3, 0x0, r2}) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000040), 0x4) 21:57:31 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000000)={@none, 0x0, 0x2, 0x7fff}) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:57:31 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x4, 0x51e0, 0x2, 0x8000, 0x9, "9f116513cc5c1fbb8272b65ede8171e2c743e1", 0x9, 0x7}) 21:57:31 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x8, 0x0, 0x0) 21:57:31 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000)=0x3fe, 0x4) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000180)=""/233) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)=@multiplanar_overlay={0x4, 0x3, 0x4, 0x4000, 0xfffffe01, {}, {0x1, 0xc, 0x5, 0x7c, 0x28, 0x40, "457ebf19"}, 0x8b, 0x3, {&(0x7f0000000080)=[{0xee30, 0xffffffff, {0x6}, 0x4}, {0x4, 0x8, {0x4}, 0x3}]}, 0x3, 0x0, r2}) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000040), 0x4) 21:57:31 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) (async) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) (async) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) (async) 21:57:31 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000000)={@none, 0x0, 0x2, 0x7fff}) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:57:31 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x4, 0x51e0, 0x2, 0x8000, 0x9, "9f116513cc5c1fbb8272b65ede8171e2c743e1", 0x9, 0x7}) 21:57:32 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) r1 = syz_open_dev$audion(&(0x7f0000000100), 0x5, 0x2a080) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x220000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noextend}, {@access_uid={'access', 0x3d, 0xee01}}, {@afid={'afid', 0x3d, 0x1}}, {@access_user}, {@mmap}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@context={'context', 0x3d, 'user_u'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_user={'subj_user', 0x3d, '\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x180}}]}}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000003c0)=@multiplanar_fd={0x0, 0x2, 0x4, 0x70000, 0x0, {0x77359400}, {0x4, 0xc, 0x8, 0x7, 0x6, 0xf8, "f59c7f36"}, 0x800, 0x4, {&(0x7f0000000340)=[{0x80000001, 0x7540, {r2}, 0x7ff}, {0x4, 0x7a90, {r1}, 0xca81}]}, 0xa0, 0x0, r1}) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000540)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e24, @multicast2}}}, 0x90) 21:57:32 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000000), 0x4) 21:57:32 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000)=0x3fe, 0x4) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000180)=""/233) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)=@multiplanar_overlay={0x4, 0x3, 0x4, 0x4000, 0xfffffe01, {}, {0x1, 0xc, 0x5, 0x7c, 0x28, 0x40, "457ebf19"}, 0x8b, 0x3, {&(0x7f0000000080)=[{0xee30, 0xffffffff, {0x6}, 0x4}, {0x4, 0x8, {0x4}, 0x3}]}, 0x3, 0x0, r2}) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000040), 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000)=0x3fe, 0x4) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000180)=""/233) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)=@multiplanar_overlay={0x4, 0x3, 0x4, 0x4000, 0xfffffe01, {}, {0x1, 0xc, 0x5, 0x7c, 0x28, 0x40, "457ebf19"}, 0x8b, 0x3, {&(0x7f0000000080)=[{0xee30, 0xffffffff, {0x6}, 0x4}, {0x4, 0x8, {0x4}, 0x3}]}, 0x3, 0x0, r2}) (async) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000040), 0x4) (async) 21:57:32 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) (async) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) 21:57:32 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x21e, 0x3f, 0xff, 0x0, 0x2, @local}, 0x10) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @le_set_event_mask={{0x2001, 0x8}, {"d1fe431351e7e94a"}}}, 0xc) 21:57:32 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x5, 0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="57ebdfe9bf", 0x5, 0x4, &(0x7f0000000080)={0x0, 0x989680}) 21:57:32 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x21e, 0x3f, 0xff, 0x0, 0x2, @local}, 0x10) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @le_set_event_mask={{0x2001, 0x8}, {"d1fe431351e7e94a"}}}, 0xc) 21:57:32 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x5, 0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="57ebdfe9bf", 0x5, 0x4, &(0x7f0000000080)={0x0, 0x989680}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x5, 0x4) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="57ebdfe9bf", 0x5, 0x4, &(0x7f0000000080)={0x0, 0x989680}) (async) 21:57:32 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) syz_init_net_socket$llc(0x1a, 0x0, 0x0) 21:57:32 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000000), 0x4) 21:57:32 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x5, 0x4) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="57ebdfe9bf", 0x5, 0x4, &(0x7f0000000080)={0x0, 0x989680}) 21:57:32 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x21e, 0x3f, 0xff, 0x0, 0x2, @local}, 0x10) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @le_set_event_mask={{0x2001, 0x8}, {"d1fe431351e7e94a"}}}, 0xc) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x21e, 0x3f, 0xff, 0x0, 0x2, @local}, 0x10) (async) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @le_set_event_mask={{0x2001, 0x8}, {"d1fe431351e7e94a"}}}, 0xc) (async) 21:57:33 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) (async) r1 = syz_open_dev$audion(&(0x7f0000000100), 0x5, 0x2a080) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x220000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noextend}, {@access_uid={'access', 0x3d, 0xee01}}, {@afid={'afid', 0x3d, 0x1}}, {@access_user}, {@mmap}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@context={'context', 0x3d, 'user_u'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_user={'subj_user', 0x3d, '\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x180}}]}}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async, rerun: 32) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000003c0)=@multiplanar_fd={0x0, 0x2, 0x4, 0x70000, 0x0, {0x77359400}, {0x4, 0xc, 0x8, 0x7, 0x6, 0xf8, "f59c7f36"}, 0x800, 0x4, {&(0x7f0000000340)=[{0x80000001, 0x7540, {r2}, 0x7ff}, {0x4, 0x7a90, {r1}, 0xca81}]}, 0xa0, 0x0, r1}) (async, rerun: 32) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) (async, rerun: 32) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async, rerun: 32) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000540)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e24, @multicast2}}}, 0x90) 21:57:33 executing program 1: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f00000001c0)={0x0, 0x2, &(0x7f00000000c0)=[0x2, 0x1df2], &(0x7f0000000100)=[0x200], 0x40, 0x2, 0x69a, &(0x7f0000000140)=[0x7ff, 0x9], &(0x7f0000000180)=[0x2]}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, r0], 0x4}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) ioctl$KDSETLED(r2, 0x4b32, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) 21:57:33 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) syz_init_net_socket$llc(0x1a, 0x0, 0x0) 21:57:33 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000000), 0x4) 21:57:33 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x3, 0x4}, 0x6) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000000)=0x576b721a, 0x4) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x20000) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) 21:57:33 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x0, 0xfff, "59970d", 0xdc, 0xfa}) 21:57:33 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x0, 0xfff, "59970d", 0xdc, 0xfa}) 21:57:33 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) syz_init_net_socket$llc(0x1a, 0x0, 0x0) 21:57:33 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x3, 0x4}, 0x6) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000000)=0x576b721a, 0x4) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x20000) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) 21:57:33 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x8, 0x0, 0x0) 21:57:33 executing program 1: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f00000001c0)={0x0, 0x2, &(0x7f00000000c0)=[0x2, 0x1df2], &(0x7f0000000100)=[0x200], 0x40, 0x2, 0x69a, &(0x7f0000000140)=[0x7ff, 0x9], &(0x7f0000000180)=[0x2]}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, r0], 0x4}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) ioctl$KDSETLED(r2, 0x4b32, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f00000001c0)={0x0, 0x2, &(0x7f00000000c0)=[0x2, 0x1df2], &(0x7f0000000100)=[0x200], 0x40, 0x2, 0x69a, &(0x7f0000000140)=[0x7ff, 0x9], &(0x7f0000000180)=[0x2]}) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, r0], 0x4}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) (async) ioctl$KDSETLED(r2, 0x4b32, 0x4) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) 21:57:33 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:57:34 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) (async) r1 = syz_open_dev$audion(&(0x7f0000000100), 0x5, 0x2a080) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x220000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noextend}, {@access_uid={'access', 0x3d, 0xee01}}, {@afid={'afid', 0x3d, 0x1}}, {@access_user}, {@mmap}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@context={'context', 0x3d, 'user_u'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_user={'subj_user', 0x3d, '\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x180}}]}}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000003c0)=@multiplanar_fd={0x0, 0x2, 0x4, 0x70000, 0x0, {0x77359400}, {0x4, 0xc, 0x8, 0x7, 0x6, 0xf8, "f59c7f36"}, 0x800, 0x4, {&(0x7f0000000340)=[{0x80000001, 0x7540, {r2}, 0x7ff}, {0x4, 0x7a90, {r1}, 0xca81}]}, 0xa0, 0x0, r1}) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000540)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e24, @multicast2}}}, 0x90) 21:57:34 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x3, 0x4}, 0x6) (async) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000000)=0x576b721a, 0x4) (async) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x20000) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) 21:57:34 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x0, 0xfff, "59970d", 0xdc, 0xfa}) 21:57:34 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, &(0x7f0000000040)="6af42fd112d35f337f049103cb06a7926b32abc8bd617e9c2559a1e62d48ce63667e9661") ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f00000000c0)=""/128) 21:57:34 executing program 1: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async, rerun: 64) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f00000001c0)={0x0, 0x2, &(0x7f00000000c0)=[0x2, 0x1df2], &(0x7f0000000100)=[0x200], 0x40, 0x2, 0x69a, &(0x7f0000000140)=[0x7ff, 0x9], &(0x7f0000000180)=[0x2]}) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, r0], 0x4}) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) (async) ioctl$KDSETLED(r2, 0x4b32, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) 21:57:34 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x0, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:57:34 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f00000002c0)=0x574b721d, 0x4) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000000)=0x8, 0x4) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) bind$llc(r1, &(0x7f0000000200)={0x1a, 0x302, 0x1, 0x1, 0x82, 0xe0, @remote}, 0x10) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x904019, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@uname={'uname', 0x3d, '.'}}, {@version_u}, {@debug={'debug', 0x3d, 0x4}}, {@noextend}, {@posixacl}, {@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}], [{@dont_hash}]}}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x2, 0x2, 0x5}) 21:57:34 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000200)={0x0}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x418040, 0x0) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x3a9e1) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000040)={0x0, 0x0, 0x2}) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:57:34 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:57:34 executing program 1: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x510580, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)=@fd={0x2, 0x2, 0x4, 0x0, 0x0, {r0, r1/1000+60000}, {0x1, 0xc, 0x40, 0x4, 0x80, 0x7, "d77afafc"}, 0x20000009, 0x4, {}, 0x0, 0x0, r2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21:57:34 executing program 5: syz_open_dev$sg(&(0x7f0000000040), 0x6, 0x400000) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:57:34 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f00000002c0)=0x574b721d, 0x4) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000000)=0x8, 0x4) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) bind$llc(r1, &(0x7f0000000200)={0x1a, 0x302, 0x1, 0x1, 0x82, 0xe0, @remote}, 0x10) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x904019, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@uname={'uname', 0x3d, '.'}}, {@version_u}, {@debug={'debug', 0x3d, 0x4}}, {@noextend}, {@posixacl}, {@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}], [{@dont_hash}]}}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x2, 0x2, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f00000002c0)=0x574b721d, 0x4) (async) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000000)=0x8, 0x4) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) bind$llc(r1, &(0x7f0000000200)={0x1a, 0x302, 0x1, 0x1, 0x82, 0xe0, @remote}, 0x10) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x904019, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@uname={'uname', 0x3d, '.'}}, {@version_u}, {@debug={'debug', 0x3d, 0x4}}, {@noextend}, {@posixacl}, {@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}], [{@dont_hash}]}}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x2, 0x2, 0x5}) (async) 21:57:35 executing program 1: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x510580, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)=@fd={0x2, 0x2, 0x4, 0x0, 0x0, {r0, r1/1000+60000}, {0x1, 0xc, 0x40, 0x4, 0x80, 0x7, "d77afafc"}, 0x20000009, 0x4, {}, 0x0, 0x0, r2}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21:57:35 executing program 5: syz_open_dev$sg(&(0x7f0000000040), 0x6, 0x400000) (async) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:57:35 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f00000002c0)=0x574b721d, 0x4) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000000)=0x8, 0x4) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) bind$llc(r1, &(0x7f0000000200)={0x1a, 0x302, 0x1, 0x1, 0x82, 0xe0, @remote}, 0x10) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x904019, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@uname={'uname', 0x3d, '.'}}, {@version_u}, {@debug={'debug', 0x3d, 0x4}}, {@noextend}, {@posixacl}, {@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}], [{@dont_hash}]}}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x2, 0x2, 0x5}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f00000002c0)=0x574b721d, 0x4) (async) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000000)=0x8, 0x4) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) bind$llc(r1, &(0x7f0000000200)={0x1a, 0x302, 0x1, 0x1, 0x82, 0xe0, @remote}, 0x10) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x904019, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@uname={'uname', 0x3d, '.'}}, {@version_u}, {@debug={'debug', 0x3d, 0x4}}, {@noextend}, {@posixacl}, {@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}], [{@dont_hash}]}}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x2, 0x2, 0x5}) (async) 21:57:35 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, &(0x7f0000000040)="6af42fd112d35f337f049103cb06a7926b32abc8bd617e9c2559a1e62d48ce63667e9661") ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f00000000c0)=""/128) 21:57:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r3}}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000200), 0x1000, 0x4e03) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f00000004c0)={0x0}) ioctl$DRM_IOCTL_LOCK(r4, 0x4008642a, &(0x7f0000000180)={r5, 0x6}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000500)) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0), r3, 0x2}}, 0x18) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:35 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async) r1 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000200)={0x0}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x418040, 0x0) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x3a9e1) (async) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000040)={0x0, 0x0, 0x2}) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:57:35 executing program 1: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) (async) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x510580, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)=@fd={0x2, 0x2, 0x4, 0x0, 0x0, {r0, r1/1000+60000}, {0x1, 0xc, 0x40, 0x4, 0x80, 0x7, "d77afafc"}, 0x20000009, 0x4, {}, 0x0, 0x0, r2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21:57:35 executing program 5: syz_open_dev$sg(&(0x7f0000000040), 0x6, 0x400000) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) syz_open_dev$sg(&(0x7f0000000040), 0x6, 0x400000) (async) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) 21:57:35 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x2, 0x401, "5a0fea", 0x5, 0x6f}) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:57:35 executing program 1: openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x880) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0xdae280018d5328e0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) 21:57:35 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000040)={0x0, 0xe}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:57:35 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x2, 0x401, "5a0fea", 0x5, 0x6f}) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) syz_init_net_socket$llc(0x1a, 0x0, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x2, 0x401, "5a0fea", 0x5, 0x6f}) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) 21:57:35 executing program 1: openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x880) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0xdae280018d5328e0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) 21:57:35 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x2, 0x401, "5a0fea", 0x5, 0x6f}) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:57:35 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000040)={0x0, 0xe}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:57:36 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, &(0x7f0000000040)="6af42fd112d35f337f049103cb06a7926b32abc8bd617e9c2559a1e62d48ce63667e9661") ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f00000000c0)=""/128) 21:57:36 executing program 1: openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x880) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0xdae280018d5328e0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x880) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0xdae280018d5328e0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) 21:57:36 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000040)={0x0, 0xe}) (async, rerun: 32) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (rerun: 32) setsockopt$llc_int(r1, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:57:36 executing program 4: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000)=0x576b723d, 0x4) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x801) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) setsockopt$llc_int(r1, 0x10c, 0x5, &(0x7f0000000040)=0x7, 0x4) 21:57:36 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)) (async) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r3}}, 0x10) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f0000000200), 0x1000, 0x4e03) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f00000004c0)={0x0}) ioctl$DRM_IOCTL_LOCK(r4, 0x4008642a, &(0x7f0000000180)={r5, 0x6}) (async) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000500)) (async) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0), r3, 0x2}}, 0x18) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:36 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async) r1 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000200)={0x0}) (async) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x418040, 0x0) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x3a9e1) (async) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) (async) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000040)={0x0, 0x0, 0x2}) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:57:36 executing program 5: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:57:36 executing program 4: syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000)=0x576b723d, 0x4) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x801) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) setsockopt$llc_int(r1, 0x10c, 0x5, &(0x7f0000000040)=0x7, 0x4) 21:57:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x94001, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000040)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) 21:57:36 executing program 5: syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:57:36 executing program 4: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000)=0x576b723d, 0x4) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x801) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) setsockopt$llc_int(r1, 0x10c, 0x5, &(0x7f0000000040)=0x7, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000)=0x576b723d, 0x4) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x801) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) setsockopt$llc_int(r1, 0x10c, 0x5, &(0x7f0000000040)=0x7, 0x4) (async) 21:57:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x94001, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000040)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) 21:57:36 executing program 2: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x510580, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)=@fd={0x2, 0x2, 0x4, 0x0, 0x0, {r0, r1/1000+60000}, {0x1, 0xc, 0x40, 0x4, 0x80, 0x7, "d77afafc"}, 0x20000009, 0x4, {}, 0x0, 0x0, r2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21:57:36 executing program 5: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:57:36 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) setsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f0000000000)=0x3, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) write$bt_hci(r2, &(0x7f0000000040)={0x1, @le_create_conn={{0x200d, 0x19}, {0x2, 0x8, 0x4, 0x7f, @any, 0x53, 0xd8dc, 0x3f, 0x256, 0x759e, 0x6, 0x800}}}, 0x1d) 21:57:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x94001, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000040)) (async, rerun: 64) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (rerun: 64) 21:57:36 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x8000, 0x40, 0x4, 0x3, 0x3, "dc237654c4c2672b6771e2fe00cd4752054b68", 0x0, 0x3}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000040)=0x9, 0x4) 21:57:36 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)) (async) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r3}}, 0x10) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f0000000200), 0x1000, 0x4e03) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f00000004c0)={0x0}) ioctl$DRM_IOCTL_LOCK(r4, 0x4008642a, &(0x7f0000000180)={r5, 0x6}) (async) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000500)) (async) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0), r3, 0x2}}, 0x18) (async) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:37 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x8000, 0x40, 0x4, 0x3, 0x3, "dc237654c4c2672b6771e2fe00cd4752054b68", 0x0, 0x3}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000040)=0x9, 0x4) 21:57:37 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}}, 0x90) 21:57:37 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async, rerun: 32) setsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f0000000000)=0x3, 0x4) (async, rerun: 32) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) write$bt_hci(r2, &(0x7f0000000040)={0x1, @le_create_conn={{0x200d, 0x19}, {0x2, 0x8, 0x4, 0x7f, @any, 0x53, 0xd8dc, 0x3f, 0x256, 0x759e, 0x6, 0x800}}}, 0x1d) 21:57:37 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="f0cedaf78a9975a6303d0892cbe539ab87c9031aa15d0ca811dcf608") r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x2, 0x8, "a4cb72", 0x2}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x1, 0x4a, 0x200, 0x88880}) 21:57:37 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x385c02, 0x0) 21:57:37 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}}, 0x90) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}}, 0x90) (async) 21:57:37 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x8000, 0x40, 0x4, 0x3, 0x3, "dc237654c4c2672b6771e2fe00cd4752054b68", 0x0, 0x3}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000040)=0x9, 0x4) 21:57:37 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) setsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f0000000000)=0x3, 0x4) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) write$bt_hci(r2, &(0x7f0000000040)={0x1, @le_create_conn={{0x200d, 0x19}, {0x2, 0x8, 0x4, 0x7f, @any, 0x53, 0xd8dc, 0x3f, 0x256, 0x759e, 0x6, 0x800}}}, 0x1d) 21:57:37 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}}, 0x90) 21:57:37 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x385c02, 0x0) 21:57:37 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}}, 0x90) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}}, 0x90) (async) 21:57:37 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000040)={0x20, 0xf547, 0x8, 0x8, 0x15, "2cdd7918dd64161d"}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:37 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000280)={&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000300)=""/113, 0x71}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)=@multiplanar_userptr={0x5, 0x3, 0x4, 0x100000, 0x8, {r2, r3/1000+60000}, {0x4, 0x0, 0x1, 0x1, 0x7, 0x4, "4e4724c6"}, 0xffffffff, 0x2, {&(0x7f0000000140)=[{0x8, 0x4, {&(0x7f00000000c0)}, 0x3}, {0x1, 0xfffffffb, {&(0x7f0000000100)}, 0x6085}]}, 0x3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000003c0)=@mmap={0xe112, 0x2, 0x4, 0x1000, 0x6, {}, {0x5, 0x4, 0x80, 0x4, 0xb1, 0x3, "a02e449c"}, 0x81, 0x1, {}, 0x9, 0x0, r4}) setsockopt$llc_int(r4, 0x10c, 0x6, &(0x7f0000000380)=0xe2, 0x4) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r5, 0x800443d3, &(0x7f0000000040)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7, 0xb3a7, 0x9}) 21:57:37 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f00000001c0)={0x0, 0x25}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000140)=@multiplanar_userptr={0x1, 0x2, 0x4, 0x4, 0x0, {r2, r3/1000+10000}, {0x3, 0x2, 0x1, 0xff, 0x2, 0x5, "df4331c3"}, 0x100, 0x2, {&(0x7f00000000c0)=[{0xdc20, 0x2, {&(0x7f0000000040)}, 0x6}, {0x1, 0x8, {&(0x7f0000000080)}, 0x2008000}]}, 0x895}) 21:57:37 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000100)={0x6d4, 0x8, 0x8, 0x3, 0x1a, "99ff59bc06098c54"}) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x1, @loopback}, r2}}, 0x30) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:57:37 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x385c02, 0x0) 21:57:37 executing program 5: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:57:37 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000280)={&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000300)=""/113, 0x71}) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)=@multiplanar_userptr={0x5, 0x3, 0x4, 0x100000, 0x8, {r2, r3/1000+60000}, {0x4, 0x0, 0x1, 0x1, 0x7, 0x4, "4e4724c6"}, 0xffffffff, 0x2, {&(0x7f0000000140)=[{0x8, 0x4, {&(0x7f00000000c0)}, 0x3}, {0x1, 0xfffffffb, {&(0x7f0000000100)}, 0x6085}]}, 0x3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000500)) (async, rerun: 32) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000003c0)=@mmap={0xe112, 0x2, 0x4, 0x1000, 0x6, {}, {0x5, 0x4, 0x80, 0x4, 0xb1, 0x3, "a02e449c"}, 0x81, 0x1, {}, 0x9, 0x0, r4}) (async, rerun: 32) setsockopt$llc_int(r4, 0x10c, 0x6, &(0x7f0000000380)=0xe2, 0x4) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r5, 0x800443d3, &(0x7f0000000040)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7, 0xb3a7, 0x9}) 21:57:37 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f00000001c0)={0x0, 0x25}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000140)=@multiplanar_userptr={0x1, 0x2, 0x4, 0x4, 0x0, {r2, r3/1000+10000}, {0x3, 0x2, 0x1, 0xff, 0x2, 0x5, "df4331c3"}, 0x100, 0x2, {&(0x7f00000000c0)=[{0xdc20, 0x2, {&(0x7f0000000040)}, 0x6}, {0x1, 0x8, {&(0x7f0000000080)}, 0x2008000}]}, 0x895}) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f00000001c0)={0x0, 0x25}) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000140)=@multiplanar_userptr={0x1, 0x2, 0x4, 0x4, 0x0, {r2, r3/1000+10000}, {0x3, 0x2, 0x1, 0xff, 0x2, 0x5, "df4331c3"}, 0x100, 0x2, {&(0x7f00000000c0)=[{0xdc20, 0x2, {&(0x7f0000000040)}, 0x6}, {0x1, 0x8, {&(0x7f0000000080)}, 0x2008000}]}, 0x895}) (async) 21:57:37 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) 21:57:37 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f00000001c0)={0x0, 0x25}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000140)=@multiplanar_userptr={0x1, 0x2, 0x4, 0x4, 0x0, {r2, r3/1000+10000}, {0x3, 0x2, 0x1, 0xff, 0x2, 0x5, "df4331c3"}, 0x100, 0x2, {&(0x7f00000000c0)=[{0xdc20, 0x2, {&(0x7f0000000040)}, 0x6}, {0x1, 0x8, {&(0x7f0000000080)}, 0x2008000}]}, 0x895}) 21:57:37 executing program 5: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) 21:57:38 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) (async) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) 21:57:38 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000040)={0x20, 0xf547, 0x8, 0x8, 0x15, "2cdd7918dd64161d"}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000040)={0x20, 0xf547, 0x8, 0x8, 0x15, "2cdd7918dd64161d"}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) 21:57:38 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000280)={&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000300)=""/113, 0x71}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)=@multiplanar_userptr={0x5, 0x3, 0x4, 0x100000, 0x8, {r2, r3/1000+60000}, {0x4, 0x0, 0x1, 0x1, 0x7, 0x4, "4e4724c6"}, 0xffffffff, 0x2, {&(0x7f0000000140)=[{0x8, 0x4, {&(0x7f00000000c0)}, 0x3}, {0x1, 0xfffffffb, {&(0x7f0000000100)}, 0x6085}]}, 0x3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000003c0)=@mmap={0xe112, 0x2, 0x4, 0x1000, 0x6, {}, {0x5, 0x4, 0x80, 0x4, 0xb1, 0x3, "a02e449c"}, 0x81, 0x1, {}, 0x9, 0x0, r4}) setsockopt$llc_int(r4, 0x10c, 0x6, &(0x7f0000000380)=0xe2, 0x4) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r5, 0x800443d3, &(0x7f0000000040)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7, 0xb3a7, 0x9}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000280)={&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000300)=""/113, 0x71}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) clock_gettime(0x0, &(0x7f0000000080)) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)=@multiplanar_userptr={0x5, 0x3, 0x4, 0x100000, 0x8, {r2, r3/1000+60000}, {0x4, 0x0, 0x1, 0x1, 0x7, 0x4, "4e4724c6"}, 0xffffffff, 0x2, {&(0x7f0000000140)=[{0x8, 0x4, {&(0x7f00000000c0)}, 0x3}, {0x1, 0xfffffffb, {&(0x7f0000000100)}, 0x6085}]}, 0x3}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000003c0)=@mmap={0xe112, 0x2, 0x4, 0x1000, 0x6, {}, {0x5, 0x4, 0x80, 0x4, 0xb1, 0x3, "a02e449c"}, 0x81, 0x1, {}, 0x9, 0x0, r4}) (async) setsockopt$llc_int(r4, 0x10c, 0x6, &(0x7f0000000380)=0xe2, 0x4) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r5, 0x800443d3, &(0x7f0000000040)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7, 0xb3a7, 0x9}) (async) 21:57:38 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f00000001c0)={0x0, 0x25}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000140)=@multiplanar_userptr={0x1, 0x2, 0x4, 0x4, 0x0, {r2, r3/1000+10000}, {0x3, 0x2, 0x1, 0xff, 0x2, 0x5, "df4331c3"}, 0x100, 0x2, {&(0x7f00000000c0)=[{0xdc20, 0x2, {&(0x7f0000000040)}, 0x6}, {0x1, 0x8, {&(0x7f0000000080)}, 0x2008000}]}, 0x895}) 21:57:38 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000100)={0x6d4, 0x8, 0x8, 0x3, 0x1a, "99ff59bc06098c54"}) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x1, @loopback}, r2}}, 0x30) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:57:38 executing program 5: syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:57:38 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) (async) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) (async) 21:57:38 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r2}}, 0x38) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000), r2, 0x0, 0x2, 0x4}}, 0x20) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:57:38 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000040)=0x576b721d, 0x4) 21:57:38 executing program 2: syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x8, &(0x7f0000000000)=0x80000001, 0x4) 21:57:38 executing program 5: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0xfffffffffffffddf) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 21:57:38 executing program 1: modify_ldt$read_default(0x2, &(0x7f0000000080)=""/184, 0xb8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x668001, 0x0) 21:57:38 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r2}}, 0x38) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000), r2, 0x0, 0x2, 0x4}}, 0x20) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:57:39 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000040)={0x20, 0xf547, 0x8, 0x8, 0x15, "2cdd7918dd64161d"}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000040)={0x20, 0xf547, 0x8, 0x8, 0x15, "2cdd7918dd64161d"}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) 21:57:39 executing program 1: modify_ldt$read_default(0x2, &(0x7f0000000080)=""/184, 0xb8) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x668001, 0x0) 21:57:39 executing program 5: syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0xfffffffffffffddf) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 21:57:39 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000040)=0x576b721d, 0x4) 21:57:39 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:57:39 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r2}}, 0x38) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000), r2, 0x0, 0x2, 0x4}}, 0x20) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r2}}, 0x38) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000), r2, 0x0, 0x2, 0x4}}, 0x20) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) 21:57:39 executing program 5: syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0xfffffffffffffddf) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 21:57:39 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000040)=0x576b721d, 0x4) 21:57:39 executing program 1: modify_ldt$read_default(0x2, &(0x7f0000000080)=""/184, 0xb8) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x668001, 0x0) 21:57:39 executing program 2: setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x5f) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000100)={0x9, 0x9, 0xffff, 0x8b}, &(0x7f0000000040)) socketpair(0x28, 0x3, 0x8, &(0x7f0000000080)={0xffffffffffffffff}) socketpair(0x22, 0x2, 0x2, &(0x7f0000000000)) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0xf, 0x1, 0x20, 0x5, 0x1, @multicast}, 0x10) 21:57:39 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) pipe2$9p(&(0x7f0000000000), 0x0) 21:57:39 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000000)) 21:57:40 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000000)) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x0, 0x8, 0x4}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) 21:57:40 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x4, 0x1, 0x1, 0x0, 0x20}) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000040)=0x7f, 0x4) 21:57:40 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000000)) 21:57:40 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000000)) 21:57:40 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) pipe2$9p(&(0x7f0000000000), 0x0) 21:57:40 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) pipe2$9p(&(0x7f0000000000), 0x0) 21:57:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000000)) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x0, 0x8, 0x4}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) (async) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000000)) (async) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x0, 0x8, 0x4}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) 21:57:40 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x4, 0x1, 0x1, 0x0, 0x20}) (async) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000040)=0x7f, 0x4) 21:57:40 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) pipe2$9p(&(0x7f0000000000), 0x0) 21:57:40 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000000)) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000000)) (async) 21:57:40 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x1, 0x6, 0x5e, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x10) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x1000, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r3}}, 0x38) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x101, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, r3}}, 0x30) 21:57:41 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x2, 0x10000) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000000)=0x576b721d, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f00000000c0)) socket(0x10, 0x4, 0x0) 21:57:41 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:41 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x4, 0x1, 0x1, 0x0, 0x20}) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000040)=0x7f, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x4, 0x1, 0x1, 0x0, 0x20}) (async) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000040)=0x7f, 0x4) (async) 21:57:41 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_open_pts(0xffffffffffffffff, 0x501001) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f00000000c0)) syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f0000000040)) 21:57:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000000)) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x0, 0x8, 0x4}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) (async) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000000)) (async) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x0, 0x8, 0x4}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) 21:57:41 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x1, 0x6, 0x5e, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x10) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x1000, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r3}}, 0x38) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x101, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, r3}}, 0x30) 21:57:41 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) syz_open_pts(0xffffffffffffffff, 0x501001) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f00000000c0)) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) (async) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f0000000040)) 21:57:41 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:41 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x1, 0x6, 0x5e, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x10) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x1000, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r3}}, 0x38) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x101, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, r3}}, 0x30) 21:57:41 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000080)=0xfffffffe, 0x4) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x46b2, 0x4, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r3}) ioctl$KDDELIO(r1, 0x4b35, 0x401) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) 21:57:41 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x2, 0x10000) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000000)=0x576b721d, 0x4) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f00000000c0)) socket(0x10, 0x4, 0x0) 21:57:41 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x200000, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x8000, 0x3f}, {0x2, 0x9}, {0x1e, 0x2}]}) ioctl$KDDELIO(r0, 0x4b35, 0x7) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000080)) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) 21:57:41 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000080)=0xfffffffe, 0x4) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x46b2, 0x4, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r3}) ioctl$KDDELIO(r1, 0x4b35, 0x401) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000080)=0xfffffffe, 0x4) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x46b2, 0x4, 0x8}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r3}) (async) ioctl$KDDELIO(r1, 0x4b35, 0x401) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) (async) 21:57:41 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) syz_open_pts(0xffffffffffffffff, 0x501001) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f00000000c0)) syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) (async) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f0000000040)) 21:57:41 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x1, 0x6, 0x5e, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x10) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x1000, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r2}}, 0x38) 21:57:41 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x2, 0x10000) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000000)=0x576b721d, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f00000000c0)) (async) socket(0x10, 0x4, 0x0) 21:57:41 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x200000, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x8000, 0x3f}, {0x2, 0x9}, {0x1e, 0x2}]}) (async) ioctl$KDDELIO(r0, 0x4b35, 0x7) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000080)) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) 21:57:41 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000080)=0xfffffffe, 0x4) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x46b2, 0x4, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r3}) ioctl$KDDELIO(r1, 0x4b35, 0x401) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000080)=0xfffffffe, 0x4) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x46b2, 0x4, 0x8}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r3}) (async) ioctl$KDDELIO(r1, 0x4b35, 0x401) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) (async) 21:57:41 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x1, 0x6, 0x5e, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x10) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x1000, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111}}, 0x20) 21:57:42 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f00000000c0)={r1}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:42 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x200000000, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x4}}, 0xffffffa7) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r4}}, 0x38) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000540), r5, 0x2}}, 0x18) 21:57:42 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x75d400, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000300)=""/4096) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000080)={0x4, 0x9, 0x81, 0x101}) 21:57:42 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x200000, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x8000, 0x3f}, {0x2, 0x9}, {0x1e, 0x2}]}) (async) ioctl$KDDELIO(r0, 0x4b35, 0x7) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000080)) (async) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) 21:57:42 executing program 5: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000040)={0x2, @vbi={0x800, 0x8, 0x6, 0x32314752, [0x401, 0x4], [0x3, 0x2], 0x32}}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000000)=0x3ff, 0x4) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x40100, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) 21:57:42 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x1, 0x6, 0x5e, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x10) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x1000, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 21:57:42 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x75d400, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000300)=""/4096) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) (async) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000080)={0x4, 0x9, 0x81, 0x101}) 21:57:42 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x80000000}) ioctl$TIOCCONS(r0, 0x541d) 21:57:42 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x200000000, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x4}}, 0xffffffa7) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r4}}, 0x38) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000540), r5, 0x2}}, 0x18) 21:57:42 executing program 5: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000040)={0x2, @vbi={0x800, 0x8, 0x6, 0x32314752, [0x401, 0x4], [0x3, 0x2], 0x32}}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000000)=0x3ff, 0x4) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x40100, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000040)={0x2, @vbi={0x800, 0x8, 0x6, 0x32314752, [0x401, 0x4], [0x3, 0x2], 0x32}}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000000)=0x3ff, 0x4) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x40100, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) (async) 21:57:42 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x1, 0x6, 0x5e, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x10) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x1000, 0x0) 21:57:42 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x80000000}) ioctl$TIOCCONS(r0, 0x541d) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x80000000}) (async) ioctl$TIOCCONS(r0, 0x541d) (async) 21:57:43 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f00000000c0)={r1}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) (async) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f00000000c0)={r1}) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) 21:57:43 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x200000000, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x4}}, 0xffffffa7) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r4}}, 0x38) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000540), r5, 0x2}}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x200000000, &(0x7f00000000c0), 0x111, 0x4}}, 0xffffffa7) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r4}}, 0x38) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280), 0x106, 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000540), r5, 0x2}}, 0x18) (async) 21:57:43 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x75d400, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) (async) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000300)=""/4096) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000080)={0x4, 0x9, 0x81, 0x101}) 21:57:43 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x1, 0x6, 0x5e, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x10) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:57:43 executing program 5: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000040)={0x2, @vbi={0x800, 0x8, 0x6, 0x32314752, [0x401, 0x4], [0x3, 0x2], 0x32}}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async, rerun: 32) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000000)=0x3ff, 0x4) (async, rerun: 32) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x40100, 0x0) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) 21:57:43 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x80000000}) ioctl$TIOCCONS(r0, 0x541d) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x80000000}) (async) ioctl$TIOCCONS(r0, 0x541d) (async) 21:57:43 executing program 1: ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000100)={0x1, 0x7c, 0xff, 0x6}) 21:57:43 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000000)=0x4, 0x4) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) r2 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) bind$llc(r2, &(0x7f0000000080)={0x1a, 0x6, 0x3, 0xad, 0x1f, 0x1, @multicast}, 0x10) 21:57:43 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:57:43 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x1, 0x6, 0x5e, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x10) 21:57:43 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:57:43 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000000)=0x4, 0x4) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) r2 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) bind$llc(r2, &(0x7f0000000080)={0x1a, 0x6, 0x3, 0xad, 0x1f, 0x1, @multicast}, 0x10) 21:57:44 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f00000000c0)={r1}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) (async) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f00000000c0)={r1}) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) 21:57:44 executing program 1: ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) (async) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000100)={0x1, 0x7c, 0xff, 0x6}) 21:57:44 executing program 2: bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x1, 0x6, 0x5e, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x10) 21:57:44 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:57:44 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:57:44 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000000)=0x4, 0x4) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) (async) r2 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) bind$llc(r2, &(0x7f0000000080)={0x1a, 0x6, 0x3, 0xad, 0x1f, 0x1, @multicast}, 0x10) 21:57:44 executing program 1: ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) (async) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000100)={0x1, 0x7c, 0xff, 0x6}) 21:57:44 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:57:44 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:57:44 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) 21:57:44 executing program 2: bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x1, 0x6, 0x5e, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x10) 21:57:44 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) 21:57:45 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10009, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:45 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) 21:57:45 executing program 2: bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x1, 0x6, 0x5e, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x10) 21:57:45 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xffffffffffffc6ea) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) mq_timedreceive(r1, &(0x7f0000000000)=""/4096, 0x1000, 0x2, &(0x7f0000001000)={0x0, 0x989680}) 21:57:45 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 21:57:45 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:57:45 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x1, 0x6, 0x5e, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x10) 21:57:45 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xffffffffffffc6ea) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) mq_timedreceive(r1, &(0x7f0000000000)=""/4096, 0x1000, 0x2, &(0x7f0000001000)={0x0, 0x989680}) 21:57:45 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) 21:57:45 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) 21:57:45 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x0, &(0x7f0000000000)=0x3ff, 0x4) syz_init_net_socket$llc(0x1a, 0x0, 0x0) 21:57:45 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10009, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) syz_open_dev$vim2m(&(0x7f0000000080), 0x10009, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) 21:57:45 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x1, 0x6, 0x5e, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x10) 21:57:45 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xffffffffffffc6ea) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) mq_timedreceive(r1, &(0x7f0000000000)=""/4096, 0x1000, 0x2, &(0x7f0000001000)={0x0, 0x989680}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xffffffffffffc6ea) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) mq_timedreceive(r1, &(0x7f0000000000)=""/4096, 0x1000, 0x2, &(0x7f0000001000)={0x0, 0x989680}) (async) 21:57:45 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) 21:57:45 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x0, &(0x7f0000000000)=0x3ff, 0x4) (async) syz_init_net_socket$llc(0x1a, 0x0, 0x0) 21:57:45 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10009, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) syz_open_dev$vim2m(&(0x7f0000000080), 0x10009, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) 21:57:45 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 21:57:45 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x1, 0x6, 0x5e, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x10) 21:57:45 executing program 1: r0 = socket(0xb94b04715fc9f9fe, 0x80000, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0xa6f, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) 21:57:45 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x1ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x2}) 21:57:45 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x0, &(0x7f0000000000)=0x3ff, 0x4) (async) syz_init_net_socket$llc(0x1a, 0x0, 0x0) 21:57:45 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket(0x8, 0x4, 0x7ff) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x46b2, 0x4, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r4}) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0xffffffffffffff6e) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000000)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000940)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r4}) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000080)={0x0, 0x7, 0x8eb}) bind$llc(r0, &(0x7f0000000040)={0x1a, 0xfffe, 0x2, 0x3, 0x8, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) 21:57:45 executing program 2: syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x1, 0x6, 0x5e, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x10) 21:57:45 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) 21:57:45 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket(0x8, 0x4, 0x7ff) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x46b2, 0x4, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r4}) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0xffffffffffffff6e) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000000)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000940)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r4}) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000080)={0x0, 0x7, 0x8eb}) bind$llc(r0, &(0x7f0000000040)={0x1a, 0xfffe, 0x2, 0x3, 0x8, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) socket(0x8, 0x4, 0x7ff) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x46b2, 0x4, 0x8}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r4}) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0xffffffffffffff6e) (async) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000000)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000940)) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r4}) (async) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000080)={0x0, 0x7, 0x8eb}) (async) bind$llc(r0, &(0x7f0000000040)={0x1a, 0xfffe, 0x2, 0x3, 0x8, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) (async) 21:57:45 executing program 1: r0 = socket(0xb94b04715fc9f9fe, 0x80000, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0xa6f, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) 21:57:45 executing program 2: syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x1, 0x6, 0x5e, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x10) 21:57:45 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0xc8443) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:57:45 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) 21:57:45 executing program 1: r0 = socket(0xb94b04715fc9f9fe, 0x80000, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0xa6f, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) socket(0xb94b04715fc9f9fe, 0x80000, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0xa6f, 0x4) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) 21:57:45 executing program 2: syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x1, 0x6, 0x5e, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x10) 21:57:46 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) (async, rerun: 64) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async, rerun: 64) syz_open_dev$vim2m(&(0x7f00000000c0), 0x1ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x2}) 21:57:46 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r1 = socket(0x8, 0x4, 0x7ff) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x46b2, 0x4, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r4}) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0xffffffffffffff6e) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000000)) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000940)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r4}) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000080)={0x0, 0x7, 0x8eb}) bind$llc(r0, &(0x7f0000000040)={0x1a, 0xfffe, 0x2, 0x3, 0x8, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) 21:57:46 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0xc8443) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0xc8443) (async) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) 21:57:46 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, 0x0, 0x0) 21:57:46 executing program 1: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000000)={0xfff, 0x4, 0x9}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) 21:57:46 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) (async) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) (async) 21:57:46 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, 0x0, 0x0) 21:57:46 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x7, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x4a2302, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f00000000c0)=""/2) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x10080) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0x2, 0x3}, 0x6) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) 21:57:46 executing program 1: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000000)={0xfff, 0x4, 0x9}) (async, rerun: 32) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (rerun: 32) 21:57:46 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0xc8443) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:57:46 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x9fd5, 0x7ff}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x349000) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x22000004}, 0x10) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x6000, 0x0) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000200)={0x0, 0x1}) 21:57:46 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x1ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x2}) 21:57:46 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, 0x0, 0x0) 21:57:46 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x307, 0xb2, 0xf9, 0x2, 0xc5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) 21:57:46 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x9fd5, 0x7ff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x349000) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x22000004}, 0x10) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x6000, 0x0) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000200)={0x0, 0x1}) 21:57:46 executing program 1: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000000)={0xfff, 0x4, 0x9}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) 21:57:46 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x7, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x4a2302, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) (async) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f00000000c0)=""/2) (async) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x10080) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0x2, 0x3}, 0x6) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) 21:57:46 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x1, 0x6, 0x5e, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x10) 21:57:46 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000100)={0x56, 0x1e, &(0x7f0000000200)}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x4, 0x0, 0x6}) 21:57:46 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x307, 0xb2, 0xf9, 0x2, 0xc5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) 21:57:46 executing program 1: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000100)={&(0x7f00000000c0)=[r0, r1], 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x641, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) ioctl$KDADDIO(r2, 0x4b34, 0x80000021) 21:57:46 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x9fd5, 0x7ff}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x349000) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x22000004}, 0x10) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x6000, 0x0) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000200)={0x0, 0x1}) 21:57:46 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x1, 0x6, 0x5e, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x10) 21:57:46 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x7, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x4a2302, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f00000000c0)=""/2) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x10080) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0x2, 0x3}, 0x6) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) 21:57:46 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x307, 0xb2, 0xf9, 0x2, 0xc5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) 21:57:46 executing program 1: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000100)={&(0x7f00000000c0)=[r0, r1], 0x2}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async, rerun: 32) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x641, 0x0) (rerun: 32) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) (async) ioctl$KDADDIO(r2, 0x4b34, 0x80000021) 21:57:46 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x1, 0x6, 0x5e, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x10) 21:57:46 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, 0x2}}, 0x18) 21:57:46 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x1) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x84400) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000180)={0x0, 0x8, 0x7828, 0x848c0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x34e9, 0x80, 0x1, {0x3, @pix_mp={0xa2c, 0x8d9c, 0x3247504d, 0x7, 0xa, [{0x2, 0x7}, {0x6, 0x200}, {0x7, 0x2}, {0x4, 0x101}, {0x9, 0x5}, {0x7bcf, 0x4}, {0x1, 0x1}, {0x401, 0x1}], 0x4d, 0xff, 0x8, 0x0, 0x6}}, 0x3}) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:57:46 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x6, 0x5e, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x10) 21:57:47 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000100)={0x56, 0x1e, &(0x7f0000000200)}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x4, 0x0, 0x6}) 21:57:47 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x7f, 0x62f40) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000000040)="c23db891cfb5fd5955b0fe79d6e69627efe067788fb1dd76e87a4452854d67e17a7f8154676275eb0a99795a3b8e6095d25bb364974f9d4e9d2a16688d032b20dfa0bb6c31091fe51953033b4b243ac1c06e777f91185680a3ea8f762db40c938d7a25c9e259820f14dad38de5107c9bd837b1d534cc70b62cbaf2fbe0a2f73334c43b1715a65d50a364c7458bbbdd4b59765230499c4addd0a9c58f22018e4666dc0059cdd6d19b66ffa5196003efe450f8ee") setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:57:47 executing program 1: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000100)={&(0x7f00000000c0)=[r0, r1], 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x641, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) (async) ioctl$KDADDIO(r2, 0x4b34, 0x80000021) 21:57:47 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, 0x2}}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, 0x2}}, 0x18) (async) 21:57:47 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x5e, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x10) 21:57:47 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x1) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x84400) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000180)={0x0, 0x8, 0x7828, 0x848c0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x34e9, 0x80, 0x1, {0x3, @pix_mp={0xa2c, 0x8d9c, 0x3247504d, 0x7, 0xa, [{0x2, 0x7}, {0x6, 0x200}, {0x7, 0x2}, {0x4, 0x101}, {0x9, 0x5}, {0x7bcf, 0x4}, {0x1, 0x1}, {0x401, 0x1}], 0x4d, 0xff, 0x8, 0x0, 0x6}}, 0x3}) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x1) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x84400) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000180)={0x0, 0x8, 0x7828, 0x848c0}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x34e9, 0x80, 0x1, {0x3, @pix_mp={0xa2c, 0x8d9c, 0x3247504d, 0x7, 0xa, [{0x2, 0x7}, {0x6, 0x200}, {0x7, 0x2}, {0x4, 0x101}, {0x9, 0x5}, {0x7bcf, 0x4}, {0x1, 0x1}, {0x401, 0x1}], 0x4d, 0xff, 0x8, 0x0, 0x6}}, 0x3}) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) 21:57:47 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x10) 21:57:47 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 21:57:47 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x7f, 0x62f40) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000000040)="c23db891cfb5fd5955b0fe79d6e69627efe067788fb1dd76e87a4452854d67e17a7f8154676275eb0a99795a3b8e6095d25bb364974f9d4e9d2a16688d032b20dfa0bb6c31091fe51953033b4b243ac1c06e777f91185680a3ea8f762db40c938d7a25c9e259820f14dad38de5107c9bd837b1d534cc70b62cbaf2fbe0a2f73334c43b1715a65d50a364c7458bbbdd4b59765230499c4addd0a9c58f22018e4666dc0059cdd6d19b66ffa5196003efe450f8ee") setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:57:47 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x1) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x84400) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000180)={0x0, 0x8, 0x7828, 0x848c0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x34e9, 0x80, 0x1, {0x3, @pix_mp={0xa2c, 0x8d9c, 0x3247504d, 0x7, 0xa, [{0x2, 0x7}, {0x6, 0x200}, {0x7, 0x2}, {0x4, 0x101}, {0x9, 0x5}, {0x7bcf, 0x4}, {0x1, 0x1}, {0x401, 0x1}], 0x4d, 0xff, 0x8, 0x0, 0x6}}, 0x3}) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x1) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x84400) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000180)={0x0, 0x8, 0x7828, 0x848c0}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x34e9, 0x80, 0x1, {0x3, @pix_mp={0xa2c, 0x8d9c, 0x3247504d, 0x7, 0xa, [{0x2, 0x7}, {0x6, 0x200}, {0x7, 0x2}, {0x4, 0x101}, {0x9, 0x5}, {0x7bcf, 0x4}, {0x1, 0x1}, {0x401, 0x1}], 0x4d, 0xff, 0x8, 0x0, 0x6}}, 0x3}) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) 21:57:47 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, 0x2}}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, 0x2}}, 0x18) (async) 21:57:47 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x7f, 0x62f40) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000000040)="c23db891cfb5fd5955b0fe79d6e69627efe067788fb1dd76e87a4452854d67e17a7f8154676275eb0a99795a3b8e6095d25bb364974f9d4e9d2a16688d032b20dfa0bb6c31091fe51953033b4b243ac1c06e777f91185680a3ea8f762db40c938d7a25c9e259820f14dad38de5107c9bd837b1d534cc70b62cbaf2fbe0a2f73334c43b1715a65d50a364c7458bbbdd4b59765230499c4addd0a9c58f22018e4666dc0059cdd6d19b66ffa5196003efe450f8ee") setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) syz_open_dev$audion(&(0x7f0000000000), 0x7f, 0x62f40) (async) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000000040)="c23db891cfb5fd5955b0fe79d6e69627efe067788fb1dd76e87a4452854d67e17a7f8154676275eb0a99795a3b8e6095d25bb364974f9d4e9d2a16688d032b20dfa0bb6c31091fe51953033b4b243ac1c06e777f91185680a3ea8f762db40c938d7a25c9e259820f14dad38de5107c9bd837b1d534cc70b62cbaf2fbe0a2f73334c43b1715a65d50a364c7458bbbdd4b59765230499c4addd0a9c58f22018e4666dc0059cdd6d19b66ffa5196003efe450f8ee") (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) 21:57:48 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000100)={0x56, 0x1e, &(0x7f0000000200)}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x4, 0x0, 0x6}) 21:57:48 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) 21:57:48 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) 21:57:48 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x46b2, 0x4, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r4}) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x17, 0x5, 0x99, 0x9, 0x1, @multicast}, 0x10) r5 = syz_open_dev$audion(&(0x7f0000000000), 0x4, 0x260080) ioctl$KDADDIO(r5, 0x4b34, 0x3) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:57:48 executing program 4: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x566b721d, 0x4) 21:57:48 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000804}, 0x4048000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000500)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="000329bd7000fddbdf2502000000080002000500000085055c3d2c"], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x10) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @dev, @dev}, &(0x7f00000000c0)=0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)={0xcc, r5, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000800}, 0x801) 21:57:48 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x10) 21:57:48 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) 21:57:48 executing program 4: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x566b721d, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x566b721d, 0x4) (async) 21:57:48 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x46b2, 0x4, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r4}) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x17, 0x5, 0x99, 0x9, 0x1, @multicast}, 0x10) r5 = syz_open_dev$audion(&(0x7f0000000000), 0x4, 0x260080) ioctl$KDADDIO(r5, 0x4b34, 0x3) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x46b2, 0x4, 0x8}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r4}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r4}) (async) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x17, 0x5, 0x99, 0x9, 0x1, @multicast}, 0x10) (async) syz_open_dev$audion(&(0x7f0000000000), 0x4, 0x260080) (async) ioctl$KDADDIO(r5, 0x4b34, 0x3) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) 21:57:48 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000804}, 0x4048000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="000329bd7000fddbdf2502000000080002000500000085055c3d2c"], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x10) (async) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @dev, @dev}, &(0x7f00000000c0)=0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)={0xcc, r5, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000800}, 0x801) 21:57:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20000000009cc5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) mq_timedreceive(r2, &(0x7f00000000c0)=""/175, 0xaf, 0x6, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f0000000180), &(0x7f0000000200)}) 21:57:48 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x1, 0x6, 0x5e, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x10) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x1000, 0x0) 21:57:48 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000804}, 0x4048000) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000500)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="000329bd7000fddbdf2502000000080002000500000085055c3d2c"], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x10) (async) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @dev, @dev}, &(0x7f00000000c0)=0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)={0xcc, r5, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000800}, 0x801) 21:57:48 executing program 4: syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x566b721d, 0x4) 21:57:48 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x404601, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x1, 0x585200) read$usbmon(r1, &(0x7f0000000080)=""/217, 0xd9) ioctl$TIOCSBRK(r0, 0x5427) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x1cbbc0, 0x0) 21:57:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x400801) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) ioctl$KDSKBLED(r0, 0x4b65, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:57:48 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x404601, 0x0) (async) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x1, 0x585200) read$usbmon(r1, &(0x7f0000000080)=""/217, 0xd9) (async) ioctl$TIOCSBRK(r0, 0x5427) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x1cbbc0, 0x0) 21:57:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20000000009cc5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) mq_timedreceive(r2, &(0x7f00000000c0)=""/175, 0xaf, 0x6, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f0000000180), &(0x7f0000000200)}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) (async) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x20000000009cc5, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) mq_timedreceive(r2, &(0x7f00000000c0)=""/175, 0xaf, 0x6, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f0000000180), &(0x7f0000000200)}) (async) 21:57:48 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async, rerun: 32) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x46b2, 0x4, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r4}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r4}) (async) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x17, 0x5, 0x99, 0x9, 0x1, @multicast}, 0x10) (async) r5 = syz_open_dev$audion(&(0x7f0000000000), 0x4, 0x260080) ioctl$KDADDIO(r5, 0x4b34, 0x3) (async, rerun: 32) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (rerun: 32) 21:57:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async, rerun: 32) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) (rerun: 32) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x400801) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) ioctl$KDSKBLED(r0, 0x4b65, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:57:48 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) (fail_nth: 1) 21:57:48 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x404601, 0x0) (async) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x1, 0x585200) read$usbmon(r1, &(0x7f0000000080)=""/217, 0xd9) (async) ioctl$TIOCSBRK(r0, 0x5427) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x1cbbc0, 0x0) 21:57:48 executing program 5: syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000140)="120b6589868f1d1ac251acf4912737af8496c8e41ce5d961595e43ed4befdc6eb7588929f0321794e58e9043148cdc0f96d9363b2fb5050fe36b6665fd5d1d21c1521cebc7f647930a970dbd8b0f8b970202b01f8490f40b8f10a37a81de0e0a3d4a4afe3e923582c28f7ed59f099b94e3bddb73adb1217d438d7009051c880c27452fd339b0291bdebeb7fb037740220153a846906e3d30b9290edfb133ce058172ef16e1ef2c81871b1b368f3a97f6dd17668636c21a") ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000200)=""/78) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x1c}}, 0x24000885) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:57:48 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000080)=0x1) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x4, 0x0, 0x0, 0x0, @dev}, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x7c, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44850) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x320, 0x0, 0x3f, 0xfa, 0x6, @local}, 0x10) 21:57:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) (async, rerun: 32) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) (async, rerun: 32) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20000000009cc5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async, rerun: 64) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) mq_timedreceive(r2, &(0x7f00000000c0)=""/175, 0xaf, 0x6, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f0000000180), &(0x7f0000000200)}) 21:57:48 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x2, 0x8000, "6e6ad1", 0x89, 0x4}) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:57:48 executing program 5: syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000140)="120b6589868f1d1ac251acf4912737af8496c8e41ce5d961595e43ed4befdc6eb7588929f0321794e58e9043148cdc0f96d9363b2fb5050fe36b6665fd5d1d21c1521cebc7f647930a970dbd8b0f8b970202b01f8490f40b8f10a37a81de0e0a3d4a4afe3e923582c28f7ed59f099b94e3bddb73adb1217d438d7009051c880c27452fd339b0291bdebeb7fb037740220153a846906e3d30b9290edfb133ce058172ef16e1ef2c81871b1b368f3a97f6dd17668636c21a") (async) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000200)=""/78) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x1c}}, 0x24000885) (async, rerun: 64) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (rerun: 64) 21:57:48 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000080)=0x1) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x4, 0x0, 0x0, 0x0, @dev}, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x7c, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44850) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x320, 0x0, 0x3f, 0xfa, 0x6, @local}, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000080)=0x1) (async) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x4, 0x0, 0x0, 0x0, @dev}, 0x10) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x7c, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44850) (async) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x320, 0x0, 0x3f, 0xfa, 0x6, @local}, 0x10) (async) 21:57:48 executing program 1: ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000000)=""/90) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000580)="08678dd7927d861026bee17248111ec83e523c6fa1f1c44ca3f9dae9fad51e2a6e283136d67b046da52c3c935d3e33fe00ebf74dab7aa49ab09de112b6d2aff6de4ab2058576c4a9d638125c6f06c1549b8090c216c4c7e4016952d9d9ba6496f8783bf9714146cf4e9e9fab8aadb35ee954a1044bdccb4f8f1bc87b323d9b6abab3c5c4b2f6cd4aee7f095da6cddee435b1fc1fd810881099bfdfe510fd31435e7f50769b6b4c8f595943a5b1bf096e213766888861f30a1a4c615de1bc824872ab9e890b0a7e2efc79ae3a5ad4929f78653e3c6eae065701c10c01c0229428a3c70ffd2d9463afe97eafc041774ded0793a799bb8017cbb84881958dc78783c15be55b52809f44bf0ae138ef00448baa8c729e47dfb846c41eb13e0ca46d63624f27365cc6466382fa86438c4bccd3f6330fa618f14f51437ead16848d1ced049e5f8867367b4100a519b611d2ee5f4d93284357ef6df967a4274b3444cb9ec625540e7df4eb78b44f41d57dfbb01d0e612beb3cec460ff9df6cc81b6c49c0c6286ce896218919553bea37651d85272aa5f60751de1f918555aa0df55988a530e92832fab61c442c924e2eb048bdcb814dd275419afe422f2ff4aa851558ed8a37fe43e9c748004b6eb15d1a098727c4aade2f0711e0bef52022f0c2cafd0076bf96f44a0fe1bb318d32a5da33188a69351d26a44935f16c578c28abbdf524c6cc299b4bd844da0ee3fb3aea11d97bd6d6299c5f5eed2002f56bf2337fa6a7f379d083d81df029094c1fca1ca3837594ee3a3abb6d5f3d2a4ae301644dcb883703ef23d7c794c9a284396b27a441c7203a3fcced54e5e5e399631af6271ef7c7da6bbac0ddff93b749176f5d520d09f00294f5ff41408f728e383cab9b251f463f970166415aec3c3572c9074f6b4aabbd7618633bbb3ab7374ea00914136472dcaa7b7d1587f5c997b21913b6ad2326c0ab3ef7c19b1ead7f6c28e914dfb644bc4743b6876a4ce1cedb7e57397342412b3b4920b516d71b14e9e49ab57341db896e9126d55bcf3dfe7dc8bea1ae33b273de6e04d21f7a7a107342a20b767709b9acb991f0d88f4ab0fd3de8b42b165b2d55b2fc3fe25f276f40dcf76c594b27746034a7de8de999b02fc5c6c61e1f0c32b53f31de74f1ea164ddfecb0cb273da4eb67ce1f1c49bcda0b2479b13ad21bde9daaa3ef924d11231ac633af2802230596914d8d99a5f0c4d2531a3ab2c9843979b2997924c4b268872314cbb66f591839f0bb46a5c289f9d2c587776e1b5255e6aff3b6929e6ae94cf757233c6fe80b46dd4fde7dbcdfd0ed5f72f77461f89a20026bea0fef9af0e2e65ede5473487ace2933e23a4f6def54e9239931ed176fa78430fc96632b4d97f6eba1f9396bae14d26aa9ce6c12054b4f021fdd9de6d191bf6f4567e025e70b72224646df1cdaa5d82421164c0dc93f238a60d7f7c5db2eed538f3308be3f5a825241a2b64d5a713e7a443f2ecdd8cc5ae57e941ef605a46845889c820abca1f190c4c795dea327004e129aa57f1dbb2813053a355c5aca8fb1041088a04902b6e16ed5019f457ae882e8caa0300c5e04d70c2affd94ca1f5ef3aad9b9a5bb705d3c1e1a54254bd51d08aa32e11d133a3c798404b5e9452f45e1b84d00d6cfb361253ffa51f4178be76877f3523a355749c98eb5caa28d8333234c4605543ebe38690ef3b3c6354e1df6b7ec738b26040396be84575dd70ce6b7372acdea52bff8448b8782dae710ec58ae8d2999e179e4656eca5f7e1c7770e26e485a460a6546316844f7a914d0ed5f73b3077d7011e29cf6a6c9fc8199c9ac040c4cb79f128376a161cb40c1fe475bddc15d69abeb2bbc683e4e289a391f3901c5b42b7bd670f59bf6fa86497cb3ea157da8088855f923ef87908bc112cd26e8d14b5f25f5e338a7d43ee08135c808a945b399d87ea6b0d85312ff4f777286547f10f70e9557131585273398149d37d24474bc9217ecbf1e0eed8f894ef30447c8e445eb11f5493bf7def4afb21137a6541aa199174e84d251b84bceb1cad09d491583d6a8823c59b0e6240b925c1cbdab4252897061d385a7375b516ee5b032f3030c0d6740bf0db425daecd2c141036fca6b06bb277f2640bce135e64c5582952bce5966fc282c5d5b03ebf16558be3c35691c0184cd8777cea9b93b8f9e4e6d5215abe5ffd7d43b3e66ef14c7fd40fadb31f6215c269572e8b5c904fe10b2108636d90a954b5ffee92f65c0e3ac2fd2f618d07bf87edf7a64039230710a5817dc28bfba7a5d91e1454ae95364de9ba9adef516eabe0b82421f1df667ecb492539a9320da2b0dc4d38ba03372bc679315c9dccacfd3054f4e5818a2c7d170ff2f03ecbbb1429286bf91fff8e301caeafbabff87c5258ec81cd8bad9ac262403058aadd072e2be4ec560fea46e0477a9059eb74242954ec4745b0435a9606e66740fdd2d6ac7ffde9cc83307e678fe31410263649d0d4b3b3ad6b0a32b4798e04469a1e77e057698834c47d2d5ec448e4cf611593208aedf70fd8972f14b1aec3907417546a93c14b3df3e7c732377ab1f87829af8cbe6c2b990563d5cc0f281ed53de1fe75d7be284ddfd6a56dac9debaa67b0cd7ff405af7d05a6d6a351e48a19007e16bd50b3c71378d48f8fe4bd6f955c3aa24770f45bedd6e4b2ff68dad8614cf1d4e54d527364e3e016b25c8c968ed5845dca0aff1a65c2f312702d8c2d5cd8643da289374f8b3efe3e068294a80b7894b4ef03a0c8f7ba32bca518fdf9fee0a5dbb4fa2d2b725eb175a36ba7f3ca311973b8067f07eba5875ccd44c68b975870cb374eea037aedd4d092685b5b23e305bf95ba8eeb7945d22372af58c76a0b383b831ccc92b84d2d1b7a6acd98b5dfa15d0cc2b911c3f386380dec1d5e789609a7df7a3bd42b0b6af33bd25ce12619e48937f03af8969f52cd77753a8dcdf5df7a6e8a72920685e82516df7ee279ebf9196dac186b0983b622fae031c9ba03ceace59c5150b359071c3f618e29e33501f2e434d87270dcb4641dde521f8531323a8a1bbc32c2ccfbbca04053b60a677e4e0b8ab03b392de8ee37746d02cd67e029991a09e849cb93e6ce900082463d446cac71f39b531d6f6f486eaa60d0bb231f1270e4f613e10d979b40c2abd9505f51cc6d1e4f2d41b53030ec90e1ad0c4ebc349443a7b1eedca3234686132964057e0b9c33cf85051a41f7a26b4b99ff9e19d8ce2677fb68d40240214f037752779a846fae8a1e65d7ff8dbaab264382d6df78e1bf1f11be3a668f788c6739ecca32fcbbc181846e66010a1239adeef8e0810935e9f78bc70dba5d6a894aa3f43fb04f123e1ffd00c89caea4e3b57c9853d970d7244d2f76a104e743d5012acfa6ff27d39351295a781bddde251e9e0a997c86a57006665893e69b88904a97aee0bef8f647453836a2b7bbd85f38e3fc55e425b9a30e0b1fd3469ac560177a7e25501daec976edf0a23738b31a2982b453f1bd50491714379cff5405ce4fbd0b6d6a9016dcc2dcf8940cf0761923f8db25349f2ee083230d68778ccd731fb7315a08c733bea97ab5015cd0af73d2eb9d91a80742ebcf0e733310d48c5a66b43eb48d2d89972e322e25792b3e2b4df42d3e2c84b19b20d8dfdb8b6b35be75675d069ed5f7e99ab4a91b07bb460413cfbab7f171d6bf3c7f694ef879557d6d80f4a8864b8811534d5dfa7069a621f345ec2fb2cd0bb4f65d1a2c33077c3d99952de5509c39e8f840a5beaef104a24da73477767953a7ce5c944da3fe3abf4b288283c16cc1ae1695c9261b5bc6165e4067194f496b884dcb106bb9972abad914dd15c3804e14ac91c132de36dc9f1a2b491b1afc7eff8cdff50cd1a8c6ed0d6e94b7382685d2b9e3c89baacdb6154370ff45f7764c49af9fc8b5444d542c238b672930bf5f6a29a11bfb9ffbf9d04087a75af322c11bf8751e9bcfece121ba103ffa4e29fade3edc6de27b7f7eed2b21e74dc70e028fab0f4fc5b0c9edda049e437f0a99a2f0b8629e001c67fc175b71b6193b2329afab79914c3e5e31593d87c528c39db5a6444189ab369ad4a1175d1f1e814472000ccc11603aa1a8b9a945bd76b4227b95c35c3519a9fda2a2711c7bfd6e424b590aa67b1c3e277d7bdc2a617764323ae53c2cc2a547c627d8ae3419038cf756c939ed93738375e500ba5270276861778b755e83bd0a5e7ae0376178b6969ab49b442342c62a120bddc9e9d23842ee9fc028d75800daafcdd58b07f8014deda69c491287bf27336df0acf261ae3eedcd8171d63280711cac9d102fe15b5eea525d6539746286655c114abeacf76891fc4809e91755d483070ab46e6421a7ae6311f266796d36714dbeaa368f41ededdac55ca3a34cb636d311c2dfc3880e297a2623c5db058ce9db1bce9cdbbee06ed1c32a508aee1cedc21444cb197d30067974a4b774aa8fb2f54b654601ac3c1adb90323ae19a8b78ccf6bdc683da0b65bd9c6ea337b074dfbc2819de230ad3562bd60da3c182d7743b913b96e262e94af17754957bbb1ead33955992dc9f5f1508aa0687d813dd29a7d856a67232e474167de89f7ac6b4869c14756556d952d083acdbf9d1e1c73eb459750e5158a1a6965e2ccd250bff156f190e0d9bb97e0f8bbd220238a30afd59bc31141ba0e79a661b5c9231ec179bd775b1fd45b4eb9d0f0eef367c52a952f4764c83d9c7e3e7917927fef5f8fe9b6014694915ac583d712d05baf2243aec96913f997c86c82a278a552558f79a1a5306ad3a08f4376d8393c74fb17af186ba1b9365e7dee1b18ada4838fc5adb0e1f7c2474b567972ae4b84112a9e029fea0106d4c93d8aa3e9a86af71f0a2547952c19501358e63ae66760efca3442860f71799cff75e3dfcf5c75f9ee00fd108dd691900cfa5f09ee135b8ee30b255f34e5ae278a16de3c125156627f812b585e3412e042d36555009e9ca1da924c467391d30e162b51b9e298e535716001934aa9083d675c58adc8bc28aef627cc226ee0d4d271128a0c4c8b59ac585cc18f00e140eb13b74126f25eb69d04f4c4a928c1ee72aa3dc5f9028532221fca664b520be601ebc1cb683a7ba50700fd098bc70eb1c514a5389fec9ca3f8d7a295798ed33839137ab6485aba95087a5ca1436a773269e9557ee99baf8dd4ba247e05d97f4da406d5060de0984c35f8ed0ddd208c3da88a66d060a4cd72eba7fd06167bd4a46fc9e71b68503f72a42ceb6d9379b15a1588943b7edc48a3bea02302e037cb5a4658ed7cd0fc01027da7d0ced932d2224327dffac7a1395ed2d88b0754b3eb390f424ed78cf51674057c2738b827c9107b1ee28ac12fc689d01de1e04708f42fb53fc460b3774272224d9ed8444d5e62766395f107c53e057f6aa811a05cc47a029c6603db96edf4d62e962e5b0d854ba80f42fe838ed0e7ae4a703d2e6a701743df3f6bcd34cf44d0413c3d5290ea5bcb1676dc34cd1d477757c0ee5f7c58ee8b81ab86305abfbcc78208516b1452e47af422f45daa0f83b9273cd65ebbc59606c4370e4ed98aa2f599e4baae4c3d488b4085137f2472183b9487d7c3de6720cf034feaa8727529220debaccf808fcd3c373569bee0f591c833a58d13c3e385faa5cc0a14b818bc9fd5503b6e81f002b8c34608957ea08492425480afd1f41a6d99a152a812254b8871da2bf156b9c0034dccf1c1345f0e940fa26ecde4401923d4051c70288fb653056068efb882912e2b22a33010ed3c61") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000080)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x81, 0x0) 21:57:48 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x2, 0x8000, "6e6ad1", 0x89, 0x4}) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:57:48 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000780)={0x0, 0x4, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x9d) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x10800c8, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x9, 0xe8, 0x5}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x800) 21:57:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x400801) (async) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) ioctl$KDSKBLED(r0, 0x4b65, 0x0) (async) socket$bt_cmtp(0x1f, 0x3, 0x5) (async, rerun: 32) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (rerun: 32) 21:57:48 executing program 5: syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async, rerun: 64) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000140)="120b6589868f1d1ac251acf4912737af8496c8e41ce5d961595e43ed4befdc6eb7588929f0321794e58e9043148cdc0f96d9363b2fb5050fe36b6665fd5d1d21c1521cebc7f647930a970dbd8b0f8b970202b01f8490f40b8f10a37a81de0e0a3d4a4afe3e923582c28f7ed59f099b94e3bddb73adb1217d438d7009051c880c27452fd339b0291bdebeb7fb037740220153a846906e3d30b9290edfb133ce058172ef16e1ef2c81871b1b368f3a97f6dd17668636c21a") (async) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000200)=""/78) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x1c}}, 0x24000885) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:57:48 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000080)=0x1) (async) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x4, 0x0, 0x0, 0x0, @dev}, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x7c, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44850) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x320, 0x0, 0x3f, 0xfa, 0x6, @local}, 0x10) 21:57:48 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x2, 0x8000, "6e6ad1", 0x89, 0x4}) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:57:48 executing program 1: ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000000)=""/90) (async) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000580)="08678dd7927d861026bee17248111ec83e523c6fa1f1c44ca3f9dae9fad51e2a6e283136d67b046da52c3c935d3e33fe00ebf74dab7aa49ab09de112b6d2aff6de4ab2058576c4a9d638125c6f06c1549b8090c216c4c7e4016952d9d9ba6496f8783bf9714146cf4e9e9fab8aadb35ee954a1044bdccb4f8f1bc87b323d9b6abab3c5c4b2f6cd4aee7f095da6cddee435b1fc1fd810881099bfdfe510fd31435e7f50769b6b4c8f595943a5b1bf096e213766888861f30a1a4c615de1bc824872ab9e890b0a7e2efc79ae3a5ad4929f78653e3c6eae065701c10c01c0229428a3c70ffd2d9463afe97eafc041774ded0793a799bb8017cbb84881958dc78783c15be55b52809f44bf0ae138ef00448baa8c729e47dfb846c41eb13e0ca46d63624f27365cc6466382fa86438c4bccd3f6330fa618f14f51437ead16848d1ced049e5f8867367b4100a519b611d2ee5f4d93284357ef6df967a4274b3444cb9ec625540e7df4eb78b44f41d57dfbb01d0e612beb3cec460ff9df6cc81b6c49c0c6286ce896218919553bea37651d85272aa5f60751de1f918555aa0df55988a530e92832fab61c442c924e2eb048bdcb814dd275419afe422f2ff4aa851558ed8a37fe43e9c748004b6eb15d1a098727c4aade2f0711e0bef52022f0c2cafd0076bf96f44a0fe1bb318d32a5da33188a69351d26a44935f16c578c28abbdf524c6cc299b4bd844da0ee3fb3aea11d97bd6d6299c5f5eed2002f56bf2337fa6a7f379d083d81df029094c1fca1ca3837594ee3a3abb6d5f3d2a4ae301644dcb883703ef23d7c794c9a284396b27a441c7203a3fcced54e5e5e399631af6271ef7c7da6bbac0ddff93b749176f5d520d09f00294f5ff41408f728e383cab9b251f463f970166415aec3c3572c9074f6b4aabbd7618633bbb3ab7374ea00914136472dcaa7b7d1587f5c997b21913b6ad2326c0ab3ef7c19b1ead7f6c28e914dfb644bc4743b6876a4ce1cedb7e57397342412b3b4920b516d71b14e9e49ab57341db896e9126d55bcf3dfe7dc8bea1ae33b273de6e04d21f7a7a107342a20b767709b9acb991f0d88f4ab0fd3de8b42b165b2d55b2fc3fe25f276f40dcf76c594b27746034a7de8de999b02fc5c6c61e1f0c32b53f31de74f1ea164ddfecb0cb273da4eb67ce1f1c49bcda0b2479b13ad21bde9daaa3ef924d11231ac633af2802230596914d8d99a5f0c4d2531a3ab2c9843979b2997924c4b268872314cbb66f591839f0bb46a5c289f9d2c587776e1b5255e6aff3b6929e6ae94cf757233c6fe80b46dd4fde7dbcdfd0ed5f72f77461f89a20026bea0fef9af0e2e65ede5473487ace2933e23a4f6def54e9239931ed176fa78430fc96632b4d97f6eba1f9396bae14d26aa9ce6c12054b4f021fdd9de6d191bf6f4567e025e70b72224646df1cdaa5d82421164c0dc93f238a60d7f7c5db2eed538f3308be3f5a825241a2b64d5a713e7a443f2ecdd8cc5ae57e941ef605a46845889c820abca1f190c4c795dea327004e129aa57f1dbb2813053a355c5aca8fb1041088a04902b6e16ed5019f457ae882e8caa0300c5e04d70c2affd94ca1f5ef3aad9b9a5bb705d3c1e1a54254bd51d08aa32e11d133a3c798404b5e9452f45e1b84d00d6cfb361253ffa51f4178be76877f3523a355749c98eb5caa28d8333234c4605543ebe38690ef3b3c6354e1df6b7ec738b26040396be84575dd70ce6b7372acdea52bff8448b8782dae710ec58ae8d2999e179e4656eca5f7e1c7770e26e485a460a6546316844f7a914d0ed5f73b3077d7011e29cf6a6c9fc8199c9ac040c4cb79f128376a161cb40c1fe475bddc15d69abeb2bbc683e4e289a391f3901c5b42b7bd670f59bf6fa86497cb3ea157da8088855f923ef87908bc112cd26e8d14b5f25f5e338a7d43ee08135c808a945b399d87ea6b0d85312ff4f777286547f10f70e9557131585273398149d37d24474bc9217ecbf1e0eed8f894ef30447c8e445eb11f5493bf7def4afb21137a6541aa199174e84d251b84bceb1cad09d491583d6a8823c59b0e6240b925c1cbdab4252897061d385a7375b516ee5b032f3030c0d6740bf0db425daecd2c141036fca6b06bb277f2640bce135e64c5582952bce5966fc282c5d5b03ebf16558be3c35691c0184cd8777cea9b93b8f9e4e6d5215abe5ffd7d43b3e66ef14c7fd40fadb31f6215c269572e8b5c904fe10b2108636d90a954b5ffee92f65c0e3ac2fd2f618d07bf87edf7a64039230710a5817dc28bfba7a5d91e1454ae95364de9ba9adef516eabe0b82421f1df667ecb492539a9320da2b0dc4d38ba03372bc679315c9dccacfd3054f4e5818a2c7d170ff2f03ecbbb1429286bf91fff8e301caeafbabff87c5258ec81cd8bad9ac262403058aadd072e2be4ec560fea46e0477a9059eb74242954ec4745b0435a9606e66740fdd2d6ac7ffde9cc83307e678fe31410263649d0d4b3b3ad6b0a32b4798e04469a1e77e057698834c47d2d5ec448e4cf611593208aedf70fd8972f14b1aec3907417546a93c14b3df3e7c732377ab1f87829af8cbe6c2b990563d5cc0f281ed53de1fe75d7be284ddfd6a56dac9debaa67b0cd7ff405af7d05a6d6a351e48a19007e16bd50b3c71378d48f8fe4bd6f955c3aa24770f45bedd6e4b2ff68dad8614cf1d4e54d527364e3e016b25c8c968ed5845dca0aff1a65c2f312702d8c2d5cd8643da289374f8b3efe3e068294a80b7894b4ef03a0c8f7ba32bca518fdf9fee0a5dbb4fa2d2b725eb175a36ba7f3ca311973b8067f07eba5875ccd44c68b975870cb374eea037aedd4d092685b5b23e305bf95ba8eeb7945d22372af58c76a0b383b831ccc92b84d2d1b7a6acd98b5dfa15d0cc2b911c3f386380dec1d5e789609a7df7a3bd42b0b6af33bd25ce12619e48937f03af8969f52cd77753a8dcdf5df7a6e8a72920685e82516df7ee279ebf9196dac186b0983b622fae031c9ba03ceace59c5150b359071c3f618e29e33501f2e434d87270dcb4641dde521f8531323a8a1bbc32c2ccfbbca04053b60a677e4e0b8ab03b392de8ee37746d02cd67e029991a09e849cb93e6ce900082463d446cac71f39b531d6f6f486eaa60d0bb231f1270e4f613e10d979b40c2abd9505f51cc6d1e4f2d41b53030ec90e1ad0c4ebc349443a7b1eedca3234686132964057e0b9c33cf85051a41f7a26b4b99ff9e19d8ce2677fb68d40240214f037752779a846fae8a1e65d7ff8dbaab264382d6df78e1bf1f11be3a668f788c6739ecca32fcbbc181846e66010a1239adeef8e0810935e9f78bc70dba5d6a894aa3f43fb04f123e1ffd00c89caea4e3b57c9853d970d7244d2f76a104e743d5012acfa6ff27d39351295a781bddde251e9e0a997c86a57006665893e69b88904a97aee0bef8f647453836a2b7bbd85f38e3fc55e425b9a30e0b1fd3469ac560177a7e25501daec976edf0a23738b31a2982b453f1bd50491714379cff5405ce4fbd0b6d6a9016dcc2dcf8940cf0761923f8db25349f2ee083230d68778ccd731fb7315a08c733bea97ab5015cd0af73d2eb9d91a80742ebcf0e733310d48c5a66b43eb48d2d89972e322e25792b3e2b4df42d3e2c84b19b20d8dfdb8b6b35be75675d069ed5f7e99ab4a91b07bb460413cfbab7f171d6bf3c7f694ef879557d6d80f4a8864b8811534d5dfa7069a621f345ec2fb2cd0bb4f65d1a2c33077c3d99952de5509c39e8f840a5beaef104a24da73477767953a7ce5c944da3fe3abf4b288283c16cc1ae1695c9261b5bc6165e4067194f496b884dcb106bb9972abad914dd15c3804e14ac91c132de36dc9f1a2b491b1afc7eff8cdff50cd1a8c6ed0d6e94b7382685d2b9e3c89baacdb6154370ff45f7764c49af9fc8b5444d542c238b672930bf5f6a29a11bfb9ffbf9d04087a75af322c11bf8751e9bcfece121ba103ffa4e29fade3edc6de27b7f7eed2b21e74dc70e028fab0f4fc5b0c9edda049e437f0a99a2f0b8629e001c67fc175b71b6193b2329afab79914c3e5e31593d87c528c39db5a6444189ab369ad4a1175d1f1e814472000ccc11603aa1a8b9a945bd76b4227b95c35c3519a9fda2a2711c7bfd6e424b590aa67b1c3e277d7bdc2a617764323ae53c2cc2a547c627d8ae3419038cf756c939ed93738375e500ba5270276861778b755e83bd0a5e7ae0376178b6969ab49b442342c62a120bddc9e9d23842ee9fc028d75800daafcdd58b07f8014deda69c491287bf27336df0acf261ae3eedcd8171d63280711cac9d102fe15b5eea525d6539746286655c114abeacf76891fc4809e91755d483070ab46e6421a7ae6311f266796d36714dbeaa368f41ededdac55ca3a34cb636d311c2dfc3880e297a2623c5db058ce9db1bce9cdbbee06ed1c32a508aee1cedc21444cb197d30067974a4b774aa8fb2f54b654601ac3c1adb90323ae19a8b78ccf6bdc683da0b65bd9c6ea337b074dfbc2819de230ad3562bd60da3c182d7743b913b96e262e94af17754957bbb1ead33955992dc9f5f1508aa0687d813dd29a7d856a67232e474167de89f7ac6b4869c14756556d952d083acdbf9d1e1c73eb459750e5158a1a6965e2ccd250bff156f190e0d9bb97e0f8bbd220238a30afd59bc31141ba0e79a661b5c9231ec179bd775b1fd45b4eb9d0f0eef367c52a952f4764c83d9c7e3e7917927fef5f8fe9b6014694915ac583d712d05baf2243aec96913f997c86c82a278a552558f79a1a5306ad3a08f4376d8393c74fb17af186ba1b9365e7dee1b18ada4838fc5adb0e1f7c2474b567972ae4b84112a9e029fea0106d4c93d8aa3e9a86af71f0a2547952c19501358e63ae66760efca3442860f71799cff75e3dfcf5c75f9ee00fd108dd691900cfa5f09ee135b8ee30b255f34e5ae278a16de3c125156627f812b585e3412e042d36555009e9ca1da924c467391d30e162b51b9e298e535716001934aa9083d675c58adc8bc28aef627cc226ee0d4d271128a0c4c8b59ac585cc18f00e140eb13b74126f25eb69d04f4c4a928c1ee72aa3dc5f9028532221fca664b520be601ebc1cb683a7ba50700fd098bc70eb1c514a5389fec9ca3f8d7a295798ed33839137ab6485aba95087a5ca1436a773269e9557ee99baf8dd4ba247e05d97f4da406d5060de0984c35f8ed0ddd208c3da88a66d060a4cd72eba7fd06167bd4a46fc9e71b68503f72a42ceb6d9379b15a1588943b7edc48a3bea02302e037cb5a4658ed7cd0fc01027da7d0ced932d2224327dffac7a1395ed2d88b0754b3eb390f424ed78cf51674057c2738b827c9107b1ee28ac12fc689d01de1e04708f42fb53fc460b3774272224d9ed8444d5e62766395f107c53e057f6aa811a05cc47a029c6603db96edf4d62e962e5b0d854ba80f42fe838ed0e7ae4a703d2e6a701743df3f6bcd34cf44d0413c3d5290ea5bcb1676dc34cd1d477757c0ee5f7c58ee8b81ab86305abfbcc78208516b1452e47af422f45daa0f83b9273cd65ebbc59606c4370e4ed98aa2f599e4baae4c3d488b4085137f2472183b9487d7c3de6720cf034feaa8727529220debaccf808fcd3c373569bee0f591c833a58d13c3e385faa5cc0a14b818bc9fd5503b6e81f002b8c34608957ea08492425480afd1f41a6d99a152a812254b8871da2bf156b9c0034dccf1c1345f0e940fa26ecde4401923d4051c70288fb653056068efb882912e2b22a33010ed3c61") (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) (async) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000080)) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x81, 0x0) 21:57:48 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0}]}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f00000000c0)={r1, 0x1}) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) 21:57:48 executing program 1: ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000000)=""/90) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000580)="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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000080)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x81, 0x0) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000000)=""/90) (async) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000580)="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") (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) (async) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000080)) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x81, 0x0) (async) 21:57:48 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @dev, @remote}, &(0x7f0000000080)=0xc) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:57:48 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x108, 0x1, 0xff, 0x9c, 0x2, @random="cf8c59530988"}, 0x10) syz_open_dev$media(&(0x7f0000000000), 0xff, 0x1d1701) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000000c0)) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) socketpair(0x9, 0x800, 0x183, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x801}, 0x801) 21:57:48 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x338, 0xc6, 0x1, 0x8c, 0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x10) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 21:57:49 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0}]}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f00000000c0)={r1, 0x1}) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) 21:57:49 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000780)={0x0, 0x4, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x9d) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x10800c8, 0x0) (async) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x9, 0xe8, 0x5}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x800) 21:57:49 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x108, 0x1, 0xff, 0x9c, 0x2, @random="cf8c59530988"}, 0x10) (async) syz_open_dev$media(&(0x7f0000000000), 0xff, 0x1d1701) (async) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000000c0)) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) socketpair(0x9, 0x800, 0x183, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x801}, 0x801) 21:57:49 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0}]}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f00000000c0)={r1, 0x1}) (async) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) 21:57:49 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @dev, @remote}, &(0x7f0000000080)=0xc) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:57:49 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x338, 0xc6, 0x1, 0x8c, 0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x10) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x338, 0xc6, 0x1, 0x8c, 0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x10) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) 21:57:49 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x8003, 0x0) 21:57:49 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x108, 0x1, 0xff, 0x9c, 0x2, @random="cf8c59530988"}, 0x10) syz_open_dev$media(&(0x7f0000000000), 0xff, 0x1d1701) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000000c0)) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) socketpair(0x9, 0x800, 0x183, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x801}, 0x801) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x108, 0x1, 0xff, 0x9c, 0x2, @random="cf8c59530988"}, 0x10) (async) syz_open_dev$media(&(0x7f0000000000), 0xff, 0x1d1701) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000000c0)) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) socketpair(0x9, 0x800, 0x183, &(0x7f0000000100)) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x801}, 0x801) (async) 21:57:49 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x5, 0x0, 0x4, 0x0, 0x2}, 0x10) 21:57:49 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x8003, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x8003, 0x0) (async) 21:57:49 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async, rerun: 64) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @dev, @remote}, &(0x7f0000000080)=0xc) (rerun: 64) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:57:49 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x338, 0xc6, 0x1, 0x8c, 0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x10) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x338, 0xc6, 0x1, 0x8c, 0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x10) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) 21:57:49 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x8003, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x8003, 0x0) (async) 21:57:50 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000780)={0x0, 0x4, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x9d) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x10800c8, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x9, 0xe8, 0x5}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x800) syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000780)={0x0, 0x4, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x9d) (async) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x10800c8, 0x0) (async) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x9, 0xe8, 0x5}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x800) (async) 21:57:50 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x5, 0x0, 0x4, 0x0, 0x2}, 0x10) 21:57:50 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r1, 0xc01064c4, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0x1, 0x2}, 0x6) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000040)=0xffff0000, 0x4) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:57:50 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000000)="d950e0227832b218cadf0c9725d1301c95f84c0e3a57686918caf62805cedfd3f719da8a586e72c3d45c716136717674acd5f9b377301250de1b4f3e314f823609d63ac2f4af86151f322f23c370037da890634e746823734c0ca4c2f93dbf0e9ca8c4ab123c5e63de6d350fa2048e912c1a9a399ffd5a13dd9920d708829fd94f487c08185d3df9258f75085473695bda9d45f522dcacb22309f6c612fb85e372f9d44840623fb04c5d9d43ca8fb9130841a4764c56eeefc42dfe5ade1b68356dcdb2cf") r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x1513add702b0bd8c, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000140)) syz_open_dev$ttys(0xc, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x102000, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@fscache}, {@msize={'msize', 0x3d, 0x6ee9}}, {@access_uid}, {@version_u}, {@nodevmap}, {@privport}, {@msize={'msize', 0x3d, 0xe97f}}, {@mmap}]}}) 21:57:50 executing program 4: ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), &(0x7f0000000040)=[{}, {{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000100)={{0x80000000, r0, 0x7, [0x0, 0x9d]}, {0x80000000, 0x0, 0x6, [0x1, 0x1ff]}, 0x2, [0x601e, 0x1]}) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x22) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:57:50 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x41bb, 0x72, 0x8001, 0x58, 0x1, "adc80239acae7ced"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x0, 0x6d29}) 21:57:50 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r1, 0xc01064c4, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0x1, 0x2}, 0x6) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000040)=0xffff0000, 0x4) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r1, 0xc01064c4, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0x1, 0x2}, 0x6) (async) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000040)=0xffff0000, 0x4) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) 21:57:50 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x41bb, 0x72, 0x8001, 0x58, 0x1, "adc80239acae7ced"}) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) (async) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x0, 0x6d29}) 21:57:50 executing program 4: ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), &(0x7f0000000040)=[{}, {{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000100)={{0x80000000, r0, 0x7, [0x0, 0x9d]}, {0x80000000, 0x0, 0x6, [0x1, 0x1ff]}, 0x2, [0x601e, 0x1]}) (async, rerun: 64) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x22) (rerun: 64) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:57:50 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x5, 0x0, 0x4, 0x0, 0x2}, 0x10) 21:57:50 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000000)="d950e0227832b218cadf0c9725d1301c95f84c0e3a57686918caf62805cedfd3f719da8a586e72c3d45c716136717674acd5f9b377301250de1b4f3e314f823609d63ac2f4af86151f322f23c370037da890634e746823734c0ca4c2f93dbf0e9ca8c4ab123c5e63de6d350fa2048e912c1a9a399ffd5a13dd9920d708829fd94f487c08185d3df9258f75085473695bda9d45f522dcacb22309f6c612fb85e372f9d44840623fb04c5d9d43ca8fb9130841a4764c56eeefc42dfe5ade1b68356dcdb2cf") r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x1513add702b0bd8c, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000140)) syz_open_dev$ttys(0xc, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x102000, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@fscache}, {@msize={'msize', 0x3d, 0x6ee9}}, {@access_uid}, {@version_u}, {@nodevmap}, {@privport}, {@msize={'msize', 0x3d, 0xe97f}}, {@mmap}]}}) syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000000)="d950e0227832b218cadf0c9725d1301c95f84c0e3a57686918caf62805cedfd3f719da8a586e72c3d45c716136717674acd5f9b377301250de1b4f3e314f823609d63ac2f4af86151f322f23c370037da890634e746823734c0ca4c2f93dbf0e9ca8c4ab123c5e63de6d350fa2048e912c1a9a399ffd5a13dd9920d708829fd94f487c08185d3df9258f75085473695bda9d45f522dcacb22309f6c612fb85e372f9d44840623fb04c5d9d43ca8fb9130841a4764c56eeefc42dfe5ade1b68356dcdb2cf") (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x1513add702b0bd8c, 0x0) (async) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000140)) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x102000, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@fscache}, {@msize={'msize', 0x3d, 0x6ee9}}, {@access_uid}, {@version_u}, {@nodevmap}, {@privport}, {@msize={'msize', 0x3d, 0xe97f}}, {@mmap}]}}) (async) 21:57:50 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x313, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x10) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x3) 21:57:51 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) mq_notify(r1, &(0x7f0000000480)={0x0, 0x2e, 0x5}) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x20, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000000c0)={0x1, 0x5, 0x1, {0x3, @pix_mp={0x80000000, 0x1b49, 0x33424752, 0x2, 0xa, [{0xc79}, {0x7fff, 0x3a}, {0x2, 0x9d9}, {}, {0x6, 0x80000000}, {0x3, 0x9}, {0xae, 0xfffff001}, {0x2, 0x4}], 0x80, 0x23, 0x6, 0x2, 0x6}}, 0x6}) syz_open_dev$media(&(0x7f0000000200), 0x400, 0xa0c02) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0x3, 0x6, 0x4, {0x3, @pix_mp={0xff, 0x9, 0x20303159, 0x3, 0xb, [{0x5, 0x62}, {0xaa4f, 0x5}, {0x9, 0xffffffff}, {0x6, 0x866}, {0x1, 0x101}, {0x6, 0x7fff}, {0x7, 0x7}, {0x7f, 0xbbeb}], 0x4, 0x7, 0x5, 0x1, 0x4}}, 0x9}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:51 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r1, 0xc01064c4, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0x1, 0x2}, 0x6) (async) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000040)=0xffff0000, 0x4) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:57:51 executing program 4: ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), &(0x7f0000000040)=[{}, {{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000100)={{0x80000000, r0, 0x7, [0x0, 0x9d]}, {0x80000000, 0x0, 0x6, [0x1, 0x1ff]}, 0x2, [0x601e, 0x1]}) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x22) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), &(0x7f0000000040)}) (async) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000100)={{0x80000000, r0, 0x7, [0x0, 0x9d]}, {0x80000000, 0x0, 0x6, [0x1, 0x1ff]}, 0x2, [0x601e, 0x1]}) (async) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x22) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) 21:57:51 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x41bb, 0x72, 0x8001, 0x58, 0x1, "adc80239acae7ced"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x0, 0x6d29}) 21:57:51 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000000)="d950e0227832b218cadf0c9725d1301c95f84c0e3a57686918caf62805cedfd3f719da8a586e72c3d45c716136717674acd5f9b377301250de1b4f3e314f823609d63ac2f4af86151f322f23c370037da890634e746823734c0ca4c2f93dbf0e9ca8c4ab123c5e63de6d350fa2048e912c1a9a399ffd5a13dd9920d708829fd94f487c08185d3df9258f75085473695bda9d45f522dcacb22309f6c612fb85e372f9d44840623fb04c5d9d43ca8fb9130841a4764c56eeefc42dfe5ade1b68356dcdb2cf") r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x1513add702b0bd8c, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000140)) syz_open_dev$ttys(0xc, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x102000, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@fscache}, {@msize={'msize', 0x3d, 0x6ee9}}, {@access_uid}, {@version_u}, {@nodevmap}, {@privport}, {@msize={'msize', 0x3d, 0xe97f}}, {@mmap}]}}) syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000000)="d950e0227832b218cadf0c9725d1301c95f84c0e3a57686918caf62805cedfd3f719da8a586e72c3d45c716136717674acd5f9b377301250de1b4f3e314f823609d63ac2f4af86151f322f23c370037da890634e746823734c0ca4c2f93dbf0e9ca8c4ab123c5e63de6d350fa2048e912c1a9a399ffd5a13dd9920d708829fd94f487c08185d3df9258f75085473695bda9d45f522dcacb22309f6c612fb85e372f9d44840623fb04c5d9d43ca8fb9130841a4764c56eeefc42dfe5ade1b68356dcdb2cf") (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x1513add702b0bd8c, 0x0) (async) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000140)) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x102000, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@fscache}, {@msize={'msize', 0x3d, 0x6ee9}}, {@access_uid}, {@version_u}, {@nodevmap}, {@privport}, {@msize={'msize', 0x3d, 0xe97f}}, {@mmap}]}}) (async) 21:57:51 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x313, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x10) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x3) 21:57:51 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000000)=0xfcc2, 0x35) 21:57:51 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x313, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x10) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x3) 21:57:51 executing program 3: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000001, 0x80010, r1, 0x800) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000000)) 21:57:51 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000180)={0x2, 0x1, 0xf, 0x3, 0xa3, &(0x7f0000000300)="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"}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="cb0da8a4", @ANYRES16=0x0, @ANYBLOB="000125bd7000010000000300000008000200040000002c000180080003007f000001060001000a0000000800060002000000060005004e220000060001000a00000008000200060000000800030003000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x850) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:57:51 executing program 1: getresuid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x18, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x412}}, {@access_any}], [{@euid_eq={'euid', 0x3d, r0}}, {@fsmagic={'fsmagic', 0x3d, 0x800}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@fsname={'fsname', 0x3d, '}/)\','}}, {@smackfstransmute={'smackfstransmute', 0x3d, '+^-}\\'}}]}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x48100, 0x0) 21:57:51 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000000)=0xfcc2, 0x35) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000000)=0xfcc2, 0x35) (async) 21:57:52 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async, rerun: 32) mq_notify(r1, &(0x7f0000000480)={0x0, 0x2e, 0x5}) (async, rerun: 32) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x20, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000000c0)={0x1, 0x5, 0x1, {0x3, @pix_mp={0x80000000, 0x1b49, 0x33424752, 0x2, 0xa, [{0xc79}, {0x7fff, 0x3a}, {0x2, 0x9d9}, {}, {0x6, 0x80000000}, {0x3, 0x9}, {0xae, 0xfffff001}, {0x2, 0x4}], 0x80, 0x23, 0x6, 0x2, 0x6}}, 0x6}) (async) syz_open_dev$media(&(0x7f0000000200), 0x400, 0xa0c02) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0x3, 0x6, 0x4, {0x3, @pix_mp={0xff, 0x9, 0x20303159, 0x3, 0xb, [{0x5, 0x62}, {0xaa4f, 0x5}, {0x9, 0xffffffff}, {0x6, 0x866}, {0x1, 0x101}, {0x6, 0x7fff}, {0x7, 0x7}, {0x7f, 0xbbeb}], 0x4, 0x7, 0x5, 0x1, 0x4}}, 0x9}) (async, rerun: 32) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (rerun: 32) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:52 executing program 3: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000001, 0x80010, r1, 0x800) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000000)) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)) (async) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000001, 0x80010, r1, 0x800) (async) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000000)) (async) 21:57:52 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xa2c01, 0x0) 21:57:52 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000180)={0x2, 0x1, 0xf, 0x3, 0xa3, &(0x7f0000000300)="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"}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="cb0da8a4", @ANYRES16=0x0, @ANYBLOB="000125bd7000010000000300000008000200040000002c000180080003007f000001060001000a0000000800060002000000060005004e220000060001000a00000008000200060000000800030003000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x850) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000180)={0x2, 0x1, 0xf, 0x3, 0xa3, &(0x7f0000000300)="62cff29755c6baa9c87f27f1c93c0562d42762d935eae60570485716879e4ae5ba02b42c192e93fdcbf2a68b40c63c4f6cf6c885bbe97116036dbce30d11ef8fa8b07eb66469786515abcf3dd00947590707facae4c47b7a878f36a4c6831223bfff7df4d1404ca21994a717945020ad1b5d27ab546af101941819991aaa29c5273430cd7dbdacb96b813bc6463d698baf0436c314d54c4f04dadda081a2ffa44fd56c0fdbdc8f114caac8bcbb8724ebedc70bc3f6b17f47d876630175cb9973c8f3a6eec1fc0236cd4109d8594a35f2673ca1741f6a9b34a63b8b5dee14b6241782ca9a92182e0377b0adca5038d8615db399d9fc6d2557d00033300517087f4b3eb456e8767869a8d3031d54af47c56f983f395f85b695dcdc685c82887849530384ba0f790c7f84fab933554a9ddd3a190e55dd7c6857bfea81cc0b90da62d2cb79e89c61c6a82a8b628e1fdc48ba23f77a5f07c26e8beb063cb03d577368ab13441dcd6cc8625b39b0f9bf7780e9de0a540901552bababc3a1b14cf0fe029156755af4163d284a54c505fd32af8232958f7ec977dc0feda0c5f41c6fba29154b6979a34dccbe99dd1735661dfd443a6bc3ac01e1db1faa7dd47605f8bc1cfb2ccca64ff7c98d9b7b1c1789230ea6f2d709b68d0435e992e117ca96f000524f1e062cb7f37551316fea1f25bc9ed1fc29167371b9772e88518b9483128d980aecb56c82b7f754b69e576947e10092b8e9333644e8d3ef8ec05a2e74b3709c3c9e1d601a2b93e607ada379616344a648f9f6eed096949b2152bd381833c4e39e0fa63235f5e865dc035d3e341d33866bece14551d1fb90f4b398e2afa7ebab8a168ed026c26b370b13f806ed42b9478f0eec7a07b37139abb25037970a5c3bec93366d379552f69e524fe178883f6af85adc3044652c40960637d316ecc25832b14bf3e741ddf2bbbcde95fe63c9c2310f164e3e1fc8544dcf82deb97941bd43b76094ec4d83f5b3529469c725a6d87a22d7211141f95da6b51536c2b2e836db22a587733abda16acea75e08007bb05785e21b010343792b0f0f6cc12460eea76938f24f01cac3d8510e461ba8fe7b6015b0ab1d01fed0ca1aa0cc34e155c8855ed7f432471ea1319898b378aaa5d7d8dd123dcab65f3921930b928e17885b2813948907fe990c4ccf1c0d71f095229738e9a29f5b4cb9650f3362563c9c7fc41f42c9bcc93ba364f8d0ec92f66c5a43c94fed55dc574713746f7a8f658c0c4b14c8fbf31433f53364e6a58134e79654fae913ea9fec12e11f1e5b7252eb1135724278920a0e57cbf99456af5ea7e54fad1153b556cdc8f8f76d1cec71cc75d5752ce3ba0682238efdc941553a6220c898c161e918f92fb85404e05ac528382eef7dcb374e6a44b26bba126872351bcb6aa16efe5049ab4230c2c3cdc32991"}) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="cb0da8a4", @ANYRES16=0x0, @ANYBLOB="000125bd7000010000000300000008000200040000002c000180080003007f000001060001000a0000000800060002000000060005004e220000060001000a00000008000200060000000800030003000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x850) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) 21:57:52 executing program 1: getresuid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x18, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x412}}, {@access_any}], [{@euid_eq={'euid', 0x3d, r0}}, {@fsmagic={'fsmagic', 0x3d, 0x800}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@fsname={'fsname', 0x3d, '}/)\','}}, {@smackfstransmute={'smackfstransmute', 0x3d, '+^-}\\'}}]}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x48100, 0x0) 21:57:52 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000000)=0xfcc2, 0x35) 21:57:52 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000180)={0x2, 0x1, 0xf, 0x3, 0xa3, &(0x7f0000000300)="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"}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="cb0da8a4", @ANYRES16=0x0, @ANYBLOB="000125bd7000010000000300000008000200040000002c000180080003007f000001060001000a0000000800060002000000060005004e220000060001000a00000008000200060000000800030003000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x850) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000180)={0x2, 0x1, 0xf, 0x3, 0xa3, &(0x7f0000000300)="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"}) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="cb0da8a4", @ANYRES16=0x0, @ANYBLOB="000125bd7000010000000300000008000200040000002c000180080003007f000001060001000a0000000800060002000000060005004e220000060001000a00000008000200060000000800030003000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x850) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) 21:57:52 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xa2c01, 0x0) 21:57:52 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x5eda, 0x0) syz_open_pts(r0, 0x624082) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x40080) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:57:52 executing program 1: getresuid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x18, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x412}}, {@access_any}], [{@euid_eq={'euid', 0x3d, r0}}, {@fsmagic={'fsmagic', 0x3d, 0x800}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@fsname={'fsname', 0x3d, '}/)\','}}, {@smackfstransmute={'smackfstransmute', 0x3d, '+^-}\\'}}]}}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x48100, 0x0) 21:57:52 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x5eda, 0x0) syz_open_pts(r0, 0x624082) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x40080) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) syz_open_dev$audion(&(0x7f0000000040), 0x5eda, 0x0) (async) syz_open_pts(r0, 0x624082) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x40080) (async) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r2, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) 21:57:52 executing program 3: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000001, 0x80010, r1, 0x800) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000000)) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)) (async) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000001, 0x80010, r1, 0x800) (async) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000000)) (async) 21:57:54 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) (async, rerun: 32) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (rerun: 32) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async, rerun: 32) mq_notify(r1, &(0x7f0000000480)={0x0, 0x2e, 0x5}) (rerun: 32) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x20, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000000c0)={0x1, 0x5, 0x1, {0x3, @pix_mp={0x80000000, 0x1b49, 0x33424752, 0x2, 0xa, [{0xc79}, {0x7fff, 0x3a}, {0x2, 0x9d9}, {}, {0x6, 0x80000000}, {0x3, 0x9}, {0xae, 0xfffff001}, {0x2, 0x4}], 0x80, 0x23, 0x6, 0x2, 0x6}}, 0x6}) syz_open_dev$media(&(0x7f0000000200), 0x400, 0xa0c02) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0x3, 0x6, 0x4, {0x3, @pix_mp={0xff, 0x9, 0x20303159, 0x3, 0xb, [{0x5, 0x62}, {0xaa4f, 0x5}, {0x9, 0xffffffff}, {0x6, 0x866}, {0x1, 0x101}, {0x6, 0x7fff}, {0x7, 0x7}, {0x7f, 0xbbeb}], 0x4, 0x7, 0x5, 0x1, 0x4}}, 0x9}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:54 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xa2c01, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xa2c01, 0x0) (async) 21:57:54 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000080), 0x800, 0x10243) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f00000000c0)=0x1, 0x4) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000040)) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000001c0)=@multiplanar_mmap={0x1000, 0x0, 0x4, 0x4000, 0x800, {0x77359400}, {0x5, 0x0, 0x0, 0x3, 0x1f, 0xfb, "4cda4093"}, 0x3, 0x1, {&(0x7f0000000140)=[{0x7fffffff, 0xcea4, {0x46e}, 0x1ff}, {0x7ff, 0x80, {0x2}, 0x8}]}, 0x9}) 21:57:54 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x200, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000040)) 21:57:54 executing program 4: ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:57:54 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x5eda, 0x0) syz_open_pts(r0, 0x624082) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x40080) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) syz_open_dev$audion(&(0x7f0000000040), 0x5eda, 0x0) (async) syz_open_pts(r0, 0x624082) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x40080) (async) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r2, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) 21:57:54 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000080), 0x800, 0x10243) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f00000000c0)=0x1, 0x4) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000040)) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000001c0)=@multiplanar_mmap={0x1000, 0x0, 0x4, 0x4000, 0x800, {0x77359400}, {0x5, 0x0, 0x0, 0x3, 0x1f, 0xfb, "4cda4093"}, 0x3, 0x1, {&(0x7f0000000140)=[{0x7fffffff, 0xcea4, {0x46e}, 0x1ff}, {0x7ff, 0x80, {0x2}, 0x8}]}, 0x9}) 21:57:54 executing program 4: ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) (async) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:57:54 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0xc0880, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x33a, 0x0, 0x0, 0x0, 0x0, @dev}, 0x72) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{}, {}]}) ioctl$TIOCCONS(r1, 0x541d) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "c352a067877e2ce0"}) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000080)) 21:57:54 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:57:54 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x200, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000040)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x200, 0x0) (async) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) (async) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000040)) (async) 21:57:54 executing program 4: ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:57:54 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x81, 0x80000000, 0xffffffe1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)={r2}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x40000) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000500)) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000340)={0x80000000, &(0x7f0000000280), &(0x7f00000002c0)}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000200)=@multiplanar_mmap={0x1f, 0x1, 0x4, 0x40, 0x9, {}, {0x2, 0x1, 0x12, 0x9, 0x3f, 0xe0, "e0b4ca31"}, 0x9, 0x1, {&(0x7f0000000380)=[{0xffff, 0x4, {0x8}, 0x400}, {0x7c91, 0x0, {0x78}, 0x8}]}, 0x80000001}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:54 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000080), 0x800, 0x10243) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f00000000c0)=0x1, 0x4) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000040)) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000001c0)=@multiplanar_mmap={0x1000, 0x0, 0x4, 0x4000, 0x800, {0x77359400}, {0x5, 0x0, 0x0, 0x3, 0x1f, 0xfb, "4cda4093"}, 0x3, 0x1, {&(0x7f0000000140)=[{0x7fffffff, 0xcea4, {0x46e}, 0x1ff}, {0x7ff, 0x80, {0x2}, 0x8}]}, 0x9}) 21:57:54 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0xc0880, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x33a, 0x0, 0x0, 0x0, 0x0, @dev}, 0x72) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{}, {}]}) ioctl$TIOCCONS(r1, 0x541d) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "c352a067877e2ce0"}) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000080)) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0xc0880, 0x0) (async) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x33a, 0x0, 0x0, 0x0, 0x0, @dev}, 0x72) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) (async) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) (async) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{}, {}]}) (async) ioctl$TIOCCONS(r1, 0x541d) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "c352a067877e2ce0"}) (async) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000080)) (async) 21:57:54 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:57:54 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x200, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000040)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x200, 0x0) (async) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) (async) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000040)) (async) 21:57:54 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) syz_open_pts(r1, 0x4000) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x3, 0xc0, 0x2, 0x5, 0x5, @local}, 0xb1) 21:57:54 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:57:54 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x581300) 21:57:54 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) (async) syz_open_pts(r1, 0x4000) (async) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x3, 0xc0, 0x2, 0x5, 0x5, @local}, 0xb1) 21:57:54 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0xc0880, 0x0) (async) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x33a, 0x0, 0x0, 0x0, 0x0, @dev}, 0x72) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) (async) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{}, {}]}) ioctl$TIOCCONS(r1, 0x541d) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "c352a067877e2ce0"}) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000080)) 21:57:54 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000)=0x3ff, 0x4) r2 = syz_open_dev$audion(&(0x7f0000000040), 0xffffffffffffffff, 0x101000) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) 21:57:54 executing program 1: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) 21:57:55 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x81, 0x80000000, 0xffffffe1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)={r2}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x40000) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000500)) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000340)={0x80000000, &(0x7f0000000280), &(0x7f00000002c0)}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000200)=@multiplanar_mmap={0x1f, 0x1, 0x4, 0x40, 0x9, {}, {0x2, 0x1, 0x12, 0x9, 0x3f, 0xe0, "e0b4ca31"}, 0x9, 0x1, {&(0x7f0000000380)=[{0xffff, 0x4, {0x8}, 0x400}, {0x7c91, 0x0, {0x78}, 0x8}]}, 0x80000001}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x81, 0x80000000, 0xffffffe1}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)={r2}) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x40000) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000340)={0x80000000, &(0x7f0000000280), &(0x7f00000002c0)}) (async) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000200)=@multiplanar_mmap={0x1f, 0x1, 0x4, 0x40, 0x9, {}, {0x2, 0x1, 0x12, 0x9, 0x3f, 0xe0, "e0b4ca31"}, 0x9, 0x1, {&(0x7f0000000380)=[{0xffff, 0x4, {0x8}, 0x400}, {0x7c91, 0x0, {0x78}, 0x8}]}, 0x80000001}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) 21:57:55 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x581300) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x581300) (async) 21:57:55 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) 21:57:55 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) (async) syz_open_pts(r1, 0x4000) (async) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x3, 0xc0, 0x2, 0x5, 0x5, @local}, 0xb1) 21:57:55 executing program 1: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) 21:57:55 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000)=0x3ff, 0x4) (async, rerun: 64) r2 = syz_open_dev$audion(&(0x7f0000000040), 0xffffffffffffffff, 0x101000) (rerun: 64) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) 21:57:55 executing program 1: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) 21:57:55 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)) (async) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) (async) 21:57:55 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000000)) rt_sigtimedwait(&(0x7f0000000040)={[0x8000000000000000]}, &(0x7f0000000080), &(0x7f0000000100)={0x0, 0x989680}, 0x8) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x6, 0x4) 21:57:55 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x581300) 21:57:55 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000)=0x3ff, 0x4) (async) r2 = syz_open_dev$audion(&(0x7f0000000040), 0xffffffffffffffff, 0x101000) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) 21:57:55 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)) (async) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) (async) 21:57:56 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x81, 0x80000000, 0xffffffe1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)={r2}) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) (async) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x40000) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000500)) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000340)={0x80000000, &(0x7f0000000280), &(0x7f00000002c0)}) (async) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000200)=@multiplanar_mmap={0x1f, 0x1, 0x4, 0x40, 0x9, {}, {0x2, 0x1, 0x12, 0x9, 0x3f, 0xe0, "e0b4ca31"}, 0x9, 0x1, {&(0x7f0000000380)=[{0xffff, 0x4, {0x8}, 0x400}, {0x7c91, 0x0, {0x78}, 0x8}]}, 0x80000001}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:57:56 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x484000, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) ioctl$KDADDIO(r0, 0x4b34, 0x3f) 21:57:56 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) bind$llc(r1, &(0x7f0000000480)={0x1a, 0x5, 0x9, 0x1, 0x1, 0x5, @remote}, 0x10) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000400)={0x2, 0x1, 0x0, 0x3, 0xd5, &(0x7f0000000000)="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"}) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000440)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540), 0x2000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_loose}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@cache_fscache}, {@privport}], [{@uid_eq}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@fowner_gt={'fowner>', 0xee00}}]}}) 21:57:56 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000180)=""/206) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)=0x6, 0x4) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f0000000040)={0xccccfa9, &(0x7f00000002c0)}) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000006, 0x810, r1, 0x5) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000000100)=@overlay={0xf6, 0x2, 0x4, 0x40, 0x5, {0x77359400}, {0x4, 0x0, 0x28, 0x0, 0x8c, 0x5, "2f4089f3"}, 0x800, 0x3, {}, 0x1000, 0x0, r1}) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x10500) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000500)) ioctl$ASHMEM_GET_PIN_STATUS(r5, 0x7709, 0x0) 21:57:56 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) rt_sigtimedwait(&(0x7f0000000040)={[0x8000000000000000]}, &(0x7f0000000080), &(0x7f0000000100)={0x0, 0x989680}, 0x8) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x6, 0x4) 21:57:56 executing program 2: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) 21:57:56 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x484000, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) (async) ioctl$KDADDIO(r0, 0x4b34, 0x3f) 21:57:56 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async, rerun: 64) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) bind$llc(r1, &(0x7f0000000480)={0x1a, 0x5, 0x9, 0x1, 0x1, 0x5, @remote}, 0x10) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000400)={0x2, 0x1, 0x0, 0x3, 0xd5, &(0x7f0000000000)="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"}) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000440)) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540), 0x2000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_loose}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@cache_fscache}, {@privport}], [{@uid_eq}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@fowner_gt={'fowner>', 0xee00}}]}}) (rerun: 32) 21:57:56 executing program 2: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) (async) 21:57:56 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000000)) (async) rt_sigtimedwait(&(0x7f0000000040)={[0x8000000000000000]}, &(0x7f0000000080), &(0x7f0000000100)={0x0, 0x989680}, 0x8) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x6, 0x4) 21:57:56 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000180)=""/206) (async, rerun: 32) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)=0x6, 0x4) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f0000000040)={0xccccfa9, &(0x7f00000002c0)}) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000006, 0x810, r1, 0x5) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000500)) (async, rerun: 64) ioctl$vim2m_VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000000100)=@overlay={0xf6, 0x2, 0x4, 0x40, 0x5, {0x77359400}, {0x4, 0x0, 0x28, 0x0, 0x8c, 0x5, "2f4089f3"}, 0x800, 0x3, {}, 0x1000, 0x0, r1}) (async, rerun: 64) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x10500) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$ASHMEM_GET_PIN_STATUS(r5, 0x7709, 0x0) 21:57:56 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x484000, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) ioctl$KDADDIO(r0, 0x4b34, 0x3f) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x484000, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) (async) ioctl$KDADDIO(r0, 0x4b34, 0x3f) (async) 21:57:57 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f00000000c0)="32264f43ddd6d944d32567acc92e69d2e040944bd1941593096f4779ac1ab91ea365284b4fe1fafa04e0922aed82f6fdcf795ff803f81451778f37114f3dba9b27f441be272c204de8800ec32088b71c07fdd6a94df53286f15d7687af2c319e4f37b87733028788b6c844f6a1739aa9c192a49ee1a0ff4ae59c3f46af6dbd7e7cc635d7c37223f83f6d37500f508f5c7ed4355e10982a2e6f12747fe1e21ff1bc3482c0109ce6f796a5b91b9203d1") ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)) 21:57:57 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x7, 0x200080) ioctl$TIOCNXCL(r1, 0x540d) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:57:57 executing program 2: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) (async) 21:57:57 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000180)=""/206) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)=0x6, 0x4) (async) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f0000000040)={0xccccfa9, &(0x7f00000002c0)}) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000006, 0x810, r1, 0x5) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000000100)=@overlay={0xf6, 0x2, 0x4, 0x40, 0x5, {0x77359400}, {0x4, 0x0, 0x28, 0x0, 0x8c, 0x5, "2f4089f3"}, 0x800, 0x3, {}, 0x1000, 0x0, r1}) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x10500) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000500)) ioctl$ASHMEM_GET_PIN_STATUS(r5, 0x7709, 0x0) 21:57:57 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x2, 0x4c, "3f9f99", 0x1f, 0x80}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x100, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000100)={0x80, 0x8, 0x4, {0x3, @pix={0x2, 0xfffffbff, 0x0, 0x9, 0x1, 0xffff, 0x0, 0x4, 0x0, 0x2, 0x2, 0x7}}, 0x7}) 21:57:57 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async, rerun: 64) bind$llc(r1, &(0x7f0000000480)={0x1a, 0x5, 0x9, 0x1, 0x1, 0x5, @remote}, 0x10) (async, rerun: 64) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000400)={0x2, 0x1, 0x0, 0x3, 0xd5, &(0x7f0000000000)="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"}) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000440)) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) (async) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540), 0x2000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_loose}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@cache_fscache}, {@privport}], [{@uid_eq}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@fowner_gt={'fowner>', 0xee00}}]}}) 21:57:57 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socketpair(0x3, 0x5, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @local, @loopback}, &(0x7f0000000180)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @remote, @multicast1}, &(0x7f0000000200)=0xc) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa0, r2, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc0}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x81}, 0x4020010) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:57:57 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) setsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000080)=0x3, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) ioctl$KDDISABIO(r2, 0x4b37) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000040)={0x7, 0xf8, 0x6e7f}) 21:57:57 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x30d, 0x0, 0x0, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x10) 21:57:57 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x7, 0x200080) ioctl$TIOCNXCL(r1, 0x540d) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:57:57 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x2, 0x4c, "3f9f99", 0x1f, 0x80}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x100, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000100)={0x80, 0x8, 0x4, {0x3, @pix={0x2, 0xfffffbff, 0x0, 0x9, 0x1, 0xffff, 0x0, 0x4, 0x0, 0x2, 0x2, 0x7}}, 0x7}) 21:57:57 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x30d, 0x0, 0x0, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x30d, 0x0, 0x0, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x10) (async) 21:57:58 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f00000000c0)="32264f43ddd6d944d32567acc92e69d2e040944bd1941593096f4779ac1ab91ea365284b4fe1fafa04e0922aed82f6fdcf795ff803f81451778f37114f3dba9b27f441be272c204de8800ec32088b71c07fdd6a94df53286f15d7687af2c319e4f37b87733028788b6c844f6a1739aa9c192a49ee1a0ff4ae59c3f46af6dbd7e7cc635d7c37223f83f6d37500f508f5c7ed4355e10982a2e6f12747fe1e21ff1bc3482c0109ce6f796a5b91b9203d1") ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)) syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) (async) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f00000000c0)="32264f43ddd6d944d32567acc92e69d2e040944bd1941593096f4779ac1ab91ea365284b4fe1fafa04e0922aed82f6fdcf795ff803f81451778f37114f3dba9b27f441be272c204de8800ec32088b71c07fdd6a94df53286f15d7687af2c319e4f37b87733028788b6c844f6a1739aa9c192a49ee1a0ff4ae59c3f46af6dbd7e7cc635d7c37223f83f6d37500f508f5c7ed4355e10982a2e6f12747fe1e21ff1bc3482c0109ce6f796a5b91b9203d1") (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)) (async) 21:57:58 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x2, 0x4c, "3f9f99", 0x1f, 0x80}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x100, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000100)={0x80, 0x8, 0x4, {0x3, @pix={0x2, 0xfffffbff, 0x0, 0x9, 0x1, 0xffff, 0x0, 0x4, 0x0, 0x2, 0x2, 0x7}}, 0x7}) 21:57:58 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) setsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000080)=0x3, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) ioctl$KDDISABIO(r2, 0x4b37) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000040)={0x7, 0xf8, 0x6e7f}) 21:57:58 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socketpair(0x3, 0x5, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @local, @loopback}, &(0x7f0000000180)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @remote, @multicast1}, &(0x7f0000000200)=0xc) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa0, r2, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc0}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x81}, 0x4020010) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:57:58 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x7, 0x200080) ioctl$TIOCNXCL(r1, 0x540d) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:57:58 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x30d, 0x0, 0x0, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x10) 21:57:58 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}}}, 0x90) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 21:57:58 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x80, 0xff, @dev}, 0x10) 21:57:58 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) socket$inet(0x2, 0x6, 0xfffffffb) 21:57:58 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) setsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000080)=0x3, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) ioctl$KDDISABIO(r2, 0x4b37) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000040)={0x7, 0xf8, 0x6e7f}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) setsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000080)=0x3, 0x4) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) (async) ioctl$KDDISABIO(r2, 0x4b37) (async) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000040)={0x7, 0xf8, 0x6e7f}) (async) 21:57:58 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async, rerun: 64) socketpair(0x3, 0x5, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) (async, rerun: 64) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) (async, rerun: 32) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @local, @loopback}, &(0x7f0000000180)=0xc) (async, rerun: 32) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @remote, @multicast1}, &(0x7f0000000200)=0xc) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa0, r2, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc0}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x81}, 0x4020010) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:57:58 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x80, 0xff, @dev}, 0x10) 21:57:59 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async, rerun: 32) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (rerun: 32) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async, rerun: 32) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (rerun: 32) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f00000000c0)="32264f43ddd6d944d32567acc92e69d2e040944bd1941593096f4779ac1ab91ea365284b4fe1fafa04e0922aed82f6fdcf795ff803f81451778f37114f3dba9b27f441be272c204de8800ec32088b71c07fdd6a94df53286f15d7687af2c319e4f37b87733028788b6c844f6a1739aa9c192a49ee1a0ff4ae59c3f46af6dbd7e7cc635d7c37223f83f6d37500f508f5c7ed4355e10982a2e6f12747fe1e21ff1bc3482c0109ce6f796a5b91b9203d1") (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)) 21:57:59 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) socket$inet(0x2, 0x6, 0xfffffffb) 21:57:59 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}}}, 0x90) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$KDSKBLED(r0, 0x4b65, 0x0) (async) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}}}, 0x90) (async) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) (async) 21:57:59 executing program 5: syz_init_net_socket$llc(0x1a, 0x0, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3, 0x4) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x44840) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000080)) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) 21:57:59 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x80, 0xff, @dev}, 0x10) 21:57:59 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x5, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:57:59 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x5, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:57:59 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) socket$inet(0x2, 0x6, 0xfffffffb) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) socket$inet(0x2, 0x6, 0xfffffffb) (async) 21:57:59 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x5, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:57:59 executing program 5: syz_init_net_socket$llc(0x1a, 0x0, 0x0) (async) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3, 0x4) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x44840) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000080)) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) 21:57:59 executing program 2: bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000001300)={0x94, 0x80000001, 0x800, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000001340)={r2}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r1}}, 0x38) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000001380)={0x13, 0x10, 0xfa00, {&(0x7f0000001080), r1, 0x1}}, 0x18) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f00000012c0)=0xffffffff, 0xffffffffffffff61) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000940)) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000080)="225948f4050d9cd9bedc9689228ceac8ba551fbc7f46213db49a1092ac081207a6a4aef313b46d2b459f7ae8c40aa2019227cb5a516cafffb8546b4cb1cd4ab9b0ca50350ad7db2582b61d71cf8bad53f048220531678aba90732d696b21605e110dd121367e7b364284aecd7cc7481e62c73099be9a77481b18edeb0814e4d931f6ea7ef45d244bd9e14b8a0b99c2578026b6a74429eac1e38f73b0dff6f370933b4b68a56e408178e5744713e793860690cfc2364d004271796abded78cd1dd154591423ae5ff0f1cd1be1088347299bd4b5340634f138b38cc341482038a4cebe580606e623f96ba7bfd53e5849d39635d2b3fd221105ddc91584cf606fca4bdde3f7657559f07133f439c565fcabfde86a271eb671f9c00261d726a1f765e7dde54d7782952d688613c2586c75e78d56f06cd207b75068873d2698892e0bf203e8bf7dac8e1f7a3861a4f878f3a4d6b84199bf5832676383a2b222e724d85aea7347e4f1b8debdcfb60c9360b50f83f57011c9092706c839462a5c73d45391991bc8b16af1432f48756ffd3cfe67a8eb1b9c2342f2d8b4ac1016781c4b31d361c95bc18f6a9133daa8391c281e0cf069f33cf5f30f0be0b380d4b4103241dfb36ef5e6f05ddee13a7f6f6affd574efc0f6812d3dbdc7a10f383886ba9d9b1853e84b0a0e4fb6be9014950faaab73436b1f4e4ca96b85e36443cb8d6bd77640678d140bd0ac8eaf02fb99e18d74cbab52ae5943975b28b6b984c75e7f127931bacd66f2e2b68689f654bb50d3f18339755676a71af713aa75cafa3971ee5bfba8663834f2dbefcf0221768a1bf486c6fbdd88c4709a7c0b0c191a20879d16fd1ead46a75c31f144f90dc53f0cafdf2e79a6f38d062f6c79cd616314a5685cb432e883c536346ca542220b34fe74667b5df46d356069aa979a95263c47f6af32f8212674ff67758fd11ee0a2256f3b79f567fbc34c4afb056144145a7c86301ac28a2abb7029518f8e81fc9cfd2e95080f4c2d905e3879f6ce2687834ed9076ada3feadf518996a9ed9944d148111dc2cefb2c74f4cf33453241f38c021b3fae8fd3c4bc8c2ae36b58ac56b221f2de060f2ac3620b131d0719bfe912afaa461f0466d208a2884df6d29b8d4ba5a8ae4ee7eed39be41b6a124c389ddb8877c042927b5d5dca1462ba694b085383458490cd5c645b45f8b8b8e486f1d7fae63f64aaf242fd1d600bafff46de7f1d329bfe6846cbfd1855f2f3a5d03467367196bd13c61e75233497f38d8fb9d08a8cf6b2a59ebb8a7d869df4e269bb946209676a631d7119c380e4e2f83e8d9f30ebcd687392e07ea666caf8328440c7c7feca25ed3d4bec7b2b07cabc6dd7750f8b0a268ad35334e276f18bd6b8dd6f7051c02e23d8fd9782a168c26c3d23c482b581f38677632dd12a3d43b90312601d79e57f8c2abcbcdf86030dee6b5d1bab0f0ba8a2ccc8b7cc980a96eb2d6166e562d191750511b4c0eaf458868929e8e7239a0716869410c56a2a5d2f0b2147e841c1023632f9e1eb9adafa26e1474887fbbb2b61e1c806c850f8c7fd35d9742bf985ec1de2673507d4a7bab47d687e4cc69191130436da584617c534c7a55e92966455cbce38adb39fdee94761210758baab0c13896e396d36de0dbd87c92bbfe5889f19ddd2ad656c559f1559f4d689e9d06247ebe1e1b33f8cf0fc135f153c46e9eb15b9393daf98abc406f7c34d77a62c44cce0ca521ce7a4d42c20817cdd6c403c0e0d998a684f1b34ade1eddbe4d7cc1d22900d5e012c380257927a6aba31e87a14aceb629447ba0f629aa637d058f2dbe687ed0906da8b655102c6d9a2db29ce33cc8738e01d279918e8c95f957a6be0dea2956fed39e1c37f0e0c77c1ef8e75460066e5995b1417f674dd6959050390fd62a6edb11ee00c3b196d4a63c6aa4bff259e5530acbb507453e7fa6609009517e144734825dbc1799d8f172992e696f7e50cd962a63cea60c2124b0741e44b449f691dc91db12a21e53da97f18fc3d8870e7394dcff04858c5db4c70437655fb7e3818a51e253a260630eebcc84e7b558ae8fe42bfef8b37da937c48d7455132e0b65292a18b51943a5efabe0e643f0beb56ee86b4db3164e5f00b09d31fe5dbc99817100544fe9d697650e54b412f3a94aad0dee50e3141e431aa56889a5b0cf52b92c95f40ec93a2616d359b7ee018317469340da547d22977d665ac01b4a187006aaed1a9fe51f55839b056a98fb9db3a171055fb4d01a2d28f2d43e214eca92d3810d79fce1b08d5fae33e848fbbba1f8674b52bce779935185a6f6e4c17c7dc6aed3b43a77ed6bacd5d389b759a2895045e3d7d624aa386773bc49afc1d8bf5d2438d036cf68109fa8cc8431a7d3d8154b7a318d80c692dc4a53b445e1f5076b08a4597ed7e313a0646f630933863b33fec4cd9dab88e857cb44e59617f8b6441445a842452dc382513ac2d11206b8e69f1708bd3b2b642b7b46a1a77c97a24c42464c198b92d11aff1917238c3ae77fe8466a45957913fff3ab6ae881a1c755d106ad60a45a1fa6ef13f74af144632da2b742346e457f0d81461df4bc1e3839050d9e1d16754a55542a5e910c23a1169baca0557df3fd13c107d73cc20c6393c43495852e07b0d8dc115bef7c1d80cc27fcae60168c140a553d6196a17a9c32560ff1a7dd13e72d7f4843da1199f00bd8815d45b9047354f47c81979182f97833e4000fc70571a4867ca39e0fd83718e2e58a4fae0d3eb62ff8f59417d242b337298b053f27ab4918a4f864383bda5a75c45960b41652ca110468b48757dd6fc64c80d537848a6ae0f9be551468c64c7e78144e4e665273f66f7f871b089885886a39bacb8ef5fc1d0b1a8a2e7b1b3729314ad1a5e957a82f367e66eb7fcc71c1ca9a0cb608880fcc788310313031ab81cfff60ee5d81d42453691a690ca98c47cb6c5b8814352afe678a1eb3618d109442c0b45b75860af29618bc4da5a51226ffec8a3c0568fb68852acae60ca961822527b9a37112563155b70cbedec6bd521bfb77aa4c92e7541d1b6319c8b12f8330647eda64814d784f638df291a09ae8e31132650e881e6a5f157d2555247a8d83a8d029f43e6488c49de268a2bbb8265cd26bf03b5cdcea1841f14fc9caa9fe89e6728ec27930e00f89c9d0a602892e29fed15e1fb3289d9acbc25700b82353ae22a58f6fec0e272aa9702dd3b5ea855eaed3b65ef5fb408aa1276af32de40fb9e7ca816e5b304fc140fc7f35d613eb82b012b4c989cc07824fb1fd16a3cb369f5845959e505354a20eab18e78445f12a02449ea1efe30ef7348b1111e338a350789776ec3fa061900ef6b655bdcf56e06c4c573c80851409c9a4e735158d68814572035ff55ca6d36dac7cad627a682f85dc03b318017a28a0a84111fc7964a44059bd194a242d7211c7714201c63d215d7af414c9d567d6d06fa1a3a84c3789488f2652225926419bd77998e8e8bf2318c6e7dacd1a85e4a419fff96ed3a4c4cce8e80435b21a5baef37bec0c20b9f031c38665fff87933e9ab53c0b1db0a7b6fb7d5c174b7a51f325d455088ec0753bdf9baf114727acac8a94864eca8c00f9e5ce0e50525f4462ec8f9adb6551d8acf26e23ca763d54825792859805bd844f3643917839ac06046c709ca867a17c7748fca1009414d03072303ef3402ce057840aae125e6528e8e5f93b9a76ba2dd1b44167ce85cbb7c2a3d61c19cd70091c21235aed4bfbb8270a514a3a6e747f29dfb8a8b5fc1d539f39eecae58e44a6780743995974c54e34309a4faae4444d10fd86df234388ba790c5390e52a618fdd5a8f08a1fbc6b80832e0556c5cf3c241374848f5d9ade410c81e422fa6b0de6dcbc480a30fe703ce152e8c6b6c0efa04c67258afb99cf25bec8bc3d0b8f511e7f0c3817a36837dcb1dc3cf46b9abe2badc4b66defef16ba9c67a269db067fa033d7fdf9659d3718bd315bf42d1305a26b9e884dc1ff3e36477e82c457b4def3fd4df96b6d97736f02062f3ad2be75d7164183ec4021358c229dd7b1edda183a7cf3efb61e307be67334f6c9d9c9517ce92eafa0dc667103a5e952b19da7258a97acb271ad281dfc68997347d57869b0b476dbbf6adc320b446dbbc86edd76a0482399eadea473e3d51c8660f44a1e4cac2f261978a643996e542b982351a4cd6886b4ad92a5d89a9e472ae6cdb996754a3cd5810f33c635256a532ad42e5071a616c489ebf46e3bfd892f569d629a93b2d07f500bab2710e53274e5302b753ffa09807faf190bd0fd301acdf338a0ae89731101fd1b3f184c638fe530a323f6bad426e8b70620b29215f09b529a3988771ba2bb03fb71db22ad2acad7d1e7c28b5392bdffdc4aed39b35a8ee501b500c783a3e963e6cb6d0a65c6d105dd29e58efc12f8a3e54067e977fe509df52dd63427f4f42888fb349fcb99d372a9c8ffc9da13b4d6d0bc9fccaf970906ab31e4b189d969d58270437590f2f3a3bdcd5d24ed9e6f5a3b4c88d24e38424276a4fb200233932c2bb77b06e8fbca63b25f969d57004bffdb24c1e9021dc303d63ec0018ef39cfa5e21f2d80018c7cdce4b58977fdbba30cac636da4a1dfa022c20ee7d2092144bb13e51dada37883ae7ca2b17ec6606ac608e6a1a9a2d133984fc750867fbc4a83ac0aca6263e7d640c36865789fd30ce689bb23651ba45a47cc7477b4f63747395472d348638eb0660710644bf15e3b97428633e1b73e18bc7722439b0de8e47cf0209b5e5e0660e4610241cff9b57519bc38d39475a227bc408d7ba4569f2d7baafdcdf8bd1d9670d9561ae22216a916f91a865fbcfb6f6884c348e4217d5a41506f40e4f63eecde5af2f32aae536f158e17259a4cbc5a21984d3aea8d9de908fc77f26a9f0161c6ab111ef1fc851c398023aaffdb2d583c52f48b54d07ecb260dedabb3bb3bb6a3960d66cc3f0a0c5184a9a9c4b57ee30278f0fdf732f468672d60aa496028cd788cc6912070b60c8bf95037e614b2bd25934664a3e05eeaceff9ecce46225074ee4264fbcd058e6a80c56ee3c11d0c270a8170b33d0b0c64849db12c897c9e6404fe6d5e3fc94f78d1d134b663dcd64d910433e6b41f218ed0851da5a300a40cf0f76c2dba308da753afff39c0b3e39ebef4a9972df1886290b40ff0c92c9ac5afcab3bbd12e10f8f87d41e2c017346390961c7d50ed2556133ac45590b69798de5ad79820f007a1fef230a768ce58e072f666a2e694492dccb5fbd81075d1a2dbff03dfb1917dc3d0f7a0e7150a9e0b4a30f549e413f0dacedca1f649d1357f5cb4f912c8f1debd6ef09b8a4234ca569c2e1250362dd623356bc02b8f3efb9c0d74a3ed6de28971d2fba848dcd845037c73ec7b55aa379c703aabfc7a2bbeee31efd1cd4a89f5c9d1b1d2eedc093636a3ae53e3ff5a0fec8c739d6efc88dada625318e09ee73bc72abb67fb3a838eba84f36b8df05414f0a733bc1eedec07be17bc1c205ccabb820d4aafb7d2c63a3909760fd4197ee8b867f04625783e27ffc5455c23946ebfe0fe52ea51ab0ec1179ce735f31f4591b64025a1c82bbb1da4d4a6eacb933496998e7668dfc972425f0af2849876bf47d6a3f8b82697cedcaef0a703664e3de5e4e159ff333242f195abb3a94949a4793873adc72cc8fe61aba0abef276b5ea5507c67329dc600c7bdbb91433b2aaea5e3c4630eeafe2102a005cb50cd457d2f2f14b7b564f744e11510e1234cb74c7309394212524") 21:57:59 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x0) (async) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}}}, 0x90) (async) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 21:58:00 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f00000000c0)="39d88e3630398d3eb2c4b26ee61e24dd6ebaddf7987ed0ef43cf4e05b04f2c387feb4ea4287a95cc5e186c08a88d28129b0458672d8397b6f8de44bef53acb52c8e02288632ec399979e8429571a14422a899206fcfbcf94f3adcc63e620ee1976096c7ee9a55b63f5198c7fc299e35ff707d8a00cd5a97e86977b78c6711a0dc5b2da3602604d837fa1354148b87346599782ccdff904236026e6a77238e331d5a78bc24b4c9a546ddaef715058acb51cbae2b44bcc671a") ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x58, 0x8, 0x4, 0x3f, 0x8, "5a1229b4f8dc2541"}) 21:58:00 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) r2 = syz_open_dev$audion(&(0x7f0000000040), 0xfffffffffffffff9, 0x135402) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000080)={0x7ff, [0x1b3b1710, 0x100], 0x9}, 0x10) openat$cgroup_pressure(r1, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) 21:58:00 executing program 5: syz_init_net_socket$llc(0x1a, 0x0, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3, 0x4) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x44840) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000080)) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3, 0x4) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x44840) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000080)) (async) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) (async) 21:58:00 executing program 2: bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000001300)={0x94, 0x80000001, 0x800, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000001340)={r2}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r1}}, 0x38) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000001380)={0x13, 0x10, 0xfa00, {&(0x7f0000001080), r1, 0x1}}, 0x18) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f00000012c0)=0xffffffff, 0xffffffffffffff61) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000940)) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000080)="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") bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111}}, 0x20) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000001300)={0x94, 0x80000001, 0x800}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000001340)={r2}) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r1}}, 0x38) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) (async) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000001380)={0x13, 0x10, 0xfa00, {&(0x7f0000001080), r1, 0x1}}, 0x18) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f00000012c0)=0xffffffff, 0xffffffffffffff61) (async) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000940)) (async) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000080)="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") (async) 21:58:00 executing program 1: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f00000001c0)) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x21}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x4044001) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28002, 0x0) 21:58:00 executing program 0: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) syz_open_dev$audion(&(0x7f0000000040), 0x1, 0x240a0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, r0, r1, r2, 0x0, r3], 0x9}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0xfffffffffffffff9) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) openat$mice(0xffffffffffffff9c, &(0x7f0000000280), 0x3d11c0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000001c0)={0x40, 0x1, 0x1, 0x0, 0x3}) 21:58:00 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) r2 = syz_open_dev$audion(&(0x7f0000000040), 0xfffffffffffffff9, 0x135402) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000080)={0x7ff, [0x1b3b1710, 0x100], 0x9}, 0x10) (async) openat$cgroup_pressure(r1, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) 21:58:00 executing program 1: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f00000001c0)) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x21}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x4044001) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28002, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f00000001c0)) (async) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r0) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x10) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x21}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x4044001) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28002, 0x0) (async) 21:58:00 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:58:00 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f00000000c0)="39d88e3630398d3eb2c4b26ee61e24dd6ebaddf7987ed0ef43cf4e05b04f2c387feb4ea4287a95cc5e186c08a88d28129b0458672d8397b6f8de44bef53acb52c8e02288632ec399979e8429571a14422a899206fcfbcf94f3adcc63e620ee1976096c7ee9a55b63f5198c7fc299e35ff707d8a00cd5a97e86977b78c6711a0dc5b2da3602604d837fa1354148b87346599782ccdff904236026e6a77238e331d5a78bc24b4c9a546ddaef715058acb51cbae2b44bcc671a") ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x58, 0x8, 0x4, 0x3f, 0x8, "5a1229b4f8dc2541"}) 21:58:00 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) r2 = syz_open_dev$audion(&(0x7f0000000040), 0xfffffffffffffff9, 0x135402) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000080)={0x7ff, [0x1b3b1710, 0x100], 0x9}, 0x10) openat$cgroup_pressure(r1, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) 21:58:00 executing program 2: bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000001300)={0x94, 0x80000001, 0x800, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000001340)={r2}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r1}}, 0x38) (async, rerun: 64) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000001380)={0x13, 0x10, 0xfa00, {&(0x7f0000001080), r1, 0x1}}, 0x18) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f00000012c0)=0xffffffff, 0xffffffffffffff61) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000940)) (async) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000080)="225948f4050d9cd9bedc9689228ceac8ba551fbc7f46213db49a1092ac081207a6a4aef313b46d2b459f7ae8c40aa2019227cb5a516cafffb8546b4cb1cd4ab9b0ca50350ad7db2582b61d71cf8bad53f048220531678aba90732d696b21605e110dd121367e7b364284aecd7cc7481e62c73099be9a77481b18edeb0814e4d931f6ea7ef45d244bd9e14b8a0b99c2578026b6a74429eac1e38f73b0dff6f370933b4b68a56e408178e5744713e793860690cfc2364d004271796abded78cd1dd154591423ae5ff0f1cd1be1088347299bd4b5340634f138b38cc341482038a4cebe580606e623f96ba7bfd53e5849d39635d2b3fd221105ddc91584cf606fca4bdde3f7657559f07133f439c565fcabfde86a271eb671f9c00261d726a1f765e7dde54d7782952d688613c2586c75e78d56f06cd207b75068873d2698892e0bf203e8bf7dac8e1f7a3861a4f878f3a4d6b84199bf5832676383a2b222e724d85aea7347e4f1b8debdcfb60c9360b50f83f57011c9092706c839462a5c73d45391991bc8b16af1432f48756ffd3cfe67a8eb1b9c2342f2d8b4ac1016781c4b31d361c95bc18f6a9133daa8391c281e0cf069f33cf5f30f0be0b380d4b4103241dfb36ef5e6f05ddee13a7f6f6affd574efc0f6812d3dbdc7a10f383886ba9d9b1853e84b0a0e4fb6be9014950faaab73436b1f4e4ca96b85e36443cb8d6bd77640678d140bd0ac8eaf02fb99e18d74cbab52ae5943975b28b6b984c75e7f127931bacd66f2e2b68689f654bb50d3f18339755676a71af713aa75cafa3971ee5bfba8663834f2dbefcf0221768a1bf486c6fbdd88c4709a7c0b0c191a20879d16fd1ead46a75c31f144f90dc53f0cafdf2e79a6f38d062f6c79cd616314a5685cb432e883c536346ca542220b34fe74667b5df46d356069aa979a95263c47f6af32f8212674ff67758fd11ee0a2256f3b79f567fbc34c4afb056144145a7c86301ac28a2abb7029518f8e81fc9cfd2e95080f4c2d905e3879f6ce2687834ed9076ada3feadf518996a9ed9944d148111dc2cefb2c74f4cf33453241f38c021b3fae8fd3c4bc8c2ae36b58ac56b221f2de060f2ac3620b131d0719bfe912afaa461f0466d208a2884df6d29b8d4ba5a8ae4ee7eed39be41b6a124c389ddb8877c042927b5d5dca1462ba694b085383458490cd5c645b45f8b8b8e486f1d7fae63f64aaf242fd1d600bafff46de7f1d329bfe6846cbfd1855f2f3a5d03467367196bd13c61e75233497f38d8fb9d08a8cf6b2a59ebb8a7d869df4e269bb946209676a631d7119c380e4e2f83e8d9f30ebcd687392e07ea666caf8328440c7c7feca25ed3d4bec7b2b07cabc6dd7750f8b0a268ad35334e276f18bd6b8dd6f7051c02e23d8fd9782a168c26c3d23c482b581f38677632dd12a3d43b90312601d79e57f8c2abcbcdf86030dee6b5d1bab0f0ba8a2ccc8b7cc980a96eb2d6166e562d191750511b4c0eaf458868929e8e7239a0716869410c56a2a5d2f0b2147e841c1023632f9e1eb9adafa26e1474887fbbb2b61e1c806c850f8c7fd35d9742bf985ec1de2673507d4a7bab47d687e4cc69191130436da584617c534c7a55e92966455cbce38adb39fdee94761210758baab0c13896e396d36de0dbd87c92bbfe5889f19ddd2ad656c559f1559f4d689e9d06247ebe1e1b33f8cf0fc135f153c46e9eb15b9393daf98abc406f7c34d77a62c44cce0ca521ce7a4d42c20817cdd6c403c0e0d998a684f1b34ade1eddbe4d7cc1d22900d5e012c380257927a6aba31e87a14aceb629447ba0f629aa637d058f2dbe687ed0906da8b655102c6d9a2db29ce33cc8738e01d279918e8c95f957a6be0dea2956fed39e1c37f0e0c77c1ef8e75460066e5995b1417f674dd6959050390fd62a6edb11ee00c3b196d4a63c6aa4bff259e5530acbb507453e7fa6609009517e144734825dbc1799d8f172992e696f7e50cd962a63cea60c2124b0741e44b449f691dc91db12a21e53da97f18fc3d8870e7394dcff04858c5db4c70437655fb7e3818a51e253a260630eebcc84e7b558ae8fe42bfef8b37da937c48d7455132e0b65292a18b51943a5efabe0e643f0beb56ee86b4db3164e5f00b09d31fe5dbc99817100544fe9d697650e54b412f3a94aad0dee50e3141e431aa56889a5b0cf52b92c95f40ec93a2616d359b7ee018317469340da547d22977d665ac01b4a187006aaed1a9fe51f55839b056a98fb9db3a171055fb4d01a2d28f2d43e214eca92d3810d79fce1b08d5fae33e848fbbba1f8674b52bce779935185a6f6e4c17c7dc6aed3b43a77ed6bacd5d389b759a2895045e3d7d624aa386773bc49afc1d8bf5d2438d036cf68109fa8cc8431a7d3d8154b7a318d80c692dc4a53b445e1f5076b08a4597ed7e313a0646f630933863b33fec4cd9dab88e857cb44e59617f8b6441445a842452dc382513ac2d11206b8e69f1708bd3b2b642b7b46a1a77c97a24c42464c198b92d11aff1917238c3ae77fe8466a45957913fff3ab6ae881a1c755d106ad60a45a1fa6ef13f74af144632da2b742346e457f0d81461df4bc1e3839050d9e1d16754a55542a5e910c23a1169baca0557df3fd13c107d73cc20c6393c43495852e07b0d8dc115bef7c1d80cc27fcae60168c140a553d6196a17a9c32560ff1a7dd13e72d7f4843da1199f00bd8815d45b9047354f47c81979182f97833e4000fc70571a4867ca39e0fd83718e2e58a4fae0d3eb62ff8f59417d242b337298b053f27ab4918a4f864383bda5a75c45960b41652ca110468b48757dd6fc64c80d537848a6ae0f9be551468c64c7e78144e4e665273f66f7f871b089885886a39bacb8ef5fc1d0b1a8a2e7b1b3729314ad1a5e957a82f367e66eb7fcc71c1ca9a0cb608880fcc788310313031ab81cfff60ee5d81d42453691a690ca98c47cb6c5b8814352afe678a1eb3618d109442c0b45b75860af29618bc4da5a51226ffec8a3c0568fb68852acae60ca961822527b9a37112563155b70cbedec6bd521bfb77aa4c92e7541d1b6319c8b12f8330647eda64814d784f638df291a09ae8e31132650e881e6a5f157d2555247a8d83a8d029f43e6488c49de268a2bbb8265cd26bf03b5cdcea1841f14fc9caa9fe89e6728ec27930e00f89c9d0a602892e29fed15e1fb3289d9acbc25700b82353ae22a58f6fec0e272aa9702dd3b5ea855eaed3b65ef5fb408aa1276af32de40fb9e7ca816e5b304fc140fc7f35d613eb82b012b4c989cc07824fb1fd16a3cb369f5845959e505354a20eab18e78445f12a02449ea1efe30ef7348b1111e338a350789776ec3fa061900ef6b655bdcf56e06c4c573c80851409c9a4e735158d68814572035ff55ca6d36dac7cad627a682f85dc03b318017a28a0a84111fc7964a44059bd194a242d7211c7714201c63d215d7af414c9d567d6d06fa1a3a84c3789488f2652225926419bd77998e8e8bf2318c6e7dacd1a85e4a419fff96ed3a4c4cce8e80435b21a5baef37bec0c20b9f031c38665fff87933e9ab53c0b1db0a7b6fb7d5c174b7a51f325d455088ec0753bdf9baf114727acac8a94864eca8c00f9e5ce0e50525f4462ec8f9adb6551d8acf26e23ca763d54825792859805bd844f3643917839ac06046c709ca867a17c7748fca1009414d03072303ef3402ce057840aae125e6528e8e5f93b9a76ba2dd1b44167ce85cbb7c2a3d61c19cd70091c21235aed4bfbb8270a514a3a6e747f29dfb8a8b5fc1d539f39eecae58e44a6780743995974c54e34309a4faae4444d10fd86df234388ba790c5390e52a618fdd5a8f08a1fbc6b80832e0556c5cf3c241374848f5d9ade410c81e422fa6b0de6dcbc480a30fe703ce152e8c6b6c0efa04c67258afb99cf25bec8bc3d0b8f511e7f0c3817a36837dcb1dc3cf46b9abe2badc4b66defef16ba9c67a269db067fa033d7fdf9659d3718bd315bf42d1305a26b9e884dc1ff3e36477e82c457b4def3fd4df96b6d97736f02062f3ad2be75d7164183ec4021358c229dd7b1edda183a7cf3efb61e307be67334f6c9d9c9517ce92eafa0dc667103a5e952b19da7258a97acb271ad281dfc68997347d57869b0b476dbbf6adc320b446dbbc86edd76a0482399eadea473e3d51c8660f44a1e4cac2f261978a643996e542b982351a4cd6886b4ad92a5d89a9e472ae6cdb996754a3cd5810f33c635256a532ad42e5071a616c489ebf46e3bfd892f569d629a93b2d07f500bab2710e53274e5302b753ffa09807faf190bd0fd301acdf338a0ae89731101fd1b3f184c638fe530a323f6bad426e8b70620b29215f09b529a3988771ba2bb03fb71db22ad2acad7d1e7c28b5392bdffdc4aed39b35a8ee501b500c783a3e963e6cb6d0a65c6d105dd29e58efc12f8a3e54067e977fe509df52dd63427f4f42888fb349fcb99d372a9c8ffc9da13b4d6d0bc9fccaf970906ab31e4b189d969d58270437590f2f3a3bdcd5d24ed9e6f5a3b4c88d24e38424276a4fb200233932c2bb77b06e8fbca63b25f969d57004bffdb24c1e9021dc303d63ec0018ef39cfa5e21f2d80018c7cdce4b58977fdbba30cac636da4a1dfa022c20ee7d2092144bb13e51dada37883ae7ca2b17ec6606ac608e6a1a9a2d133984fc750867fbc4a83ac0aca6263e7d640c36865789fd30ce689bb23651ba45a47cc7477b4f63747395472d348638eb0660710644bf15e3b97428633e1b73e18bc7722439b0de8e47cf0209b5e5e0660e4610241cff9b57519bc38d39475a227bc408d7ba4569f2d7baafdcdf8bd1d9670d9561ae22216a916f91a865fbcfb6f6884c348e4217d5a41506f40e4f63eecde5af2f32aae536f158e17259a4cbc5a21984d3aea8d9de908fc77f26a9f0161c6ab111ef1fc851c398023aaffdb2d583c52f48b54d07ecb260dedabb3bb3bb6a3960d66cc3f0a0c5184a9a9c4b57ee30278f0fdf732f468672d60aa496028cd788cc6912070b60c8bf95037e614b2bd25934664a3e05eeaceff9ecce46225074ee4264fbcd058e6a80c56ee3c11d0c270a8170b33d0b0c64849db12c897c9e6404fe6d5e3fc94f78d1d134b663dcd64d910433e6b41f218ed0851da5a300a40cf0f76c2dba308da753afff39c0b3e39ebef4a9972df1886290b40ff0c92c9ac5afcab3bbd12e10f8f87d41e2c017346390961c7d50ed2556133ac45590b69798de5ad79820f007a1fef230a768ce58e072f666a2e694492dccb5fbd81075d1a2dbff03dfb1917dc3d0f7a0e7150a9e0b4a30f549e413f0dacedca1f649d1357f5cb4f912c8f1debd6ef09b8a4234ca569c2e1250362dd623356bc02b8f3efb9c0d74a3ed6de28971d2fba848dcd845037c73ec7b55aa379c703aabfc7a2bbeee31efd1cd4a89f5c9d1b1d2eedc093636a3ae53e3ff5a0fec8c739d6efc88dada625318e09ee73bc72abb67fb3a838eba84f36b8df05414f0a733bc1eedec07be17bc1c205ccabb820d4aafb7d2c63a3909760fd4197ee8b867f04625783e27ffc5455c23946ebfe0fe52ea51ab0ec1179ce735f31f4591b64025a1c82bbb1da4d4a6eacb933496998e7668dfc972425f0af2849876bf47d6a3f8b82697cedcaef0a703664e3de5e4e159ff333242f195abb3a94949a4793873adc72cc8fe61aba0abef276b5ea5507c67329dc600c7bdbb91433b2aaea5e3c4630eeafe2102a005cb50cd457d2f2f14b7b564f744e11510e1234cb74c7309394212524") 21:58:00 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x0, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) 21:58:00 executing program 1: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f00000001c0)) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x21}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x4044001) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28002, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f00000001c0)) (async) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r0) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x10) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x21}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x4044001) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28002, 0x0) (async) 21:58:00 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f00000000c0)="39d88e3630398d3eb2c4b26ee61e24dd6ebaddf7987ed0ef43cf4e05b04f2c387feb4ea4287a95cc5e186c08a88d28129b0458672d8397b6f8de44bef53acb52c8e02288632ec399979e8429571a14422a899206fcfbcf94f3adcc63e620ee1976096c7ee9a55b63f5198c7fc299e35ff707d8a00cd5a97e86977b78c6711a0dc5b2da3602604d837fa1354148b87346599782ccdff904236026e6a77238e331d5a78bc24b4c9a546ddaef715058acb51cbae2b44bcc671a") ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x58, 0x8, 0x4, 0x3f, 0x8, "5a1229b4f8dc2541"}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f00000000c0)="39d88e3630398d3eb2c4b26ee61e24dd6ebaddf7987ed0ef43cf4e05b04f2c387feb4ea4287a95cc5e186c08a88d28129b0458672d8397b6f8de44bef53acb52c8e02288632ec399979e8429571a14422a899206fcfbcf94f3adcc63e620ee1976096c7ee9a55b63f5198c7fc299e35ff707d8a00cd5a97e86977b78c6711a0dc5b2da3602604d837fa1354148b87346599782ccdff904236026e6a77238e331d5a78bc24b4c9a546ddaef715058acb51cbae2b44bcc671a") (async) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x58, 0x8, 0x4, 0x3f, 0x8, "5a1229b4f8dc2541"}) (async) 21:58:00 executing program 4: ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000000)={0x186, 0x8, &(0x7f0000000300)}) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:58:00 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:58:04 executing program 0: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) (async) syz_open_dev$audion(&(0x7f0000000040), 0x1, 0x240a0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, r0, r1, r2, 0x0, r3], 0x9}) (async) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0xfffffffffffffff9) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000280), 0x3d11c0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000001c0)={0x40, 0x1, 0x1, 0x0, 0x3}) 21:58:04 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:58:04 executing program 4: ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000000)={0x186, 0x8, &(0x7f0000000300)}) (async) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:58:04 executing program 2: syz_init_net_socket$llc(0x1a, 0x1, 0x0) socketpair(0x1, 0x1, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) 21:58:04 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) 21:58:04 executing program 1: ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000000)={0x0, 0x3}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x171101, 0x0) r0 = syz_open_dev$audion(&(0x7f00000000c0), 0x5, 0x41) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x101000) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000080)) 21:58:04 executing program 4: ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000000)={0x186, 0x8, &(0x7f0000000300)}) (async) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:58:04 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x4) 21:58:04 executing program 1: ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000000)={0x0, 0x3}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x171101, 0x0) r0 = syz_open_dev$audion(&(0x7f00000000c0), 0x5, 0x41) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x101000) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000080)) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000000)={0x0, 0x3}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x171101, 0x0) (async) syz_open_dev$audion(&(0x7f00000000c0), 0x5, 0x41) (async) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x101000) (async) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000080)) (async) 21:58:04 executing program 2: syz_init_net_socket$llc(0x1a, 0x1, 0x0) socketpair(0x1, 0x1, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) socketpair(0x1, 0x1, 0x3, &(0x7f0000000000)) (async) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) (async) 21:58:04 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000000), 0xffff, 0x80000) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000140)={0xb, &(0x7f0000000180)=[{}, {@none}, {@none}, {@none}, {@none}, {@fixed}, {}, {@none}, {@fixed}, {@fixed}, {@none}]}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:58:04 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:58:08 executing program 0: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) (async) syz_open_dev$audion(&(0x7f0000000040), 0x1, 0x240a0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, r0, r1, r2, 0x0, r3], 0x9}) (async) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0xfffffffffffffff9) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000280), 0x3d11c0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000001c0)={0x40, 0x1, 0x1, 0x0, 0x3}) 21:58:08 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000000), 0xffff, 0x80000) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000140)={0xb, &(0x7f0000000180)=[{}, {@none}, {@none}, {@none}, {@none}, {@fixed}, {}, {@none}, {@fixed}, {@fixed}, {@none}]}) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:58:08 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x77c, 0x521001) 21:58:08 executing program 1: ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000000)={0x0, 0x3}) (async, rerun: 32) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x171101, 0x0) (rerun: 32) r0 = syz_open_dev$audion(&(0x7f00000000c0), 0x5, 0x41) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x101000) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000080)) 21:58:08 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x4) 21:58:08 executing program 2: syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) socketpair(0x1, 0x1, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) 21:58:08 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000000), 0xffff, 0x80000) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000140)={0xb, &(0x7f0000000180)=[{}, {@none}, {@none}, {@none}, {@none}, {@fixed}, {}, {@none}, {@fixed}, {@fixed}, {@none}]}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:58:08 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x77c, 0x521001) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) syz_open_dev$video4linux(&(0x7f0000000000), 0x77c, 0x521001) (async) 21:58:08 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40002) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) 21:58:08 executing program 1: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x1, 0x5, "e26946", 0x3f, 0x8}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x40d}, {0xa, 0x4e22, 0x0, @local, 0x20}, r0, 0xce08}}, 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x2a642, 0x0) 21:58:08 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x4) 21:58:08 executing program 4: ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000080)) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000100)={0xad, 0x0, &(0x7f0000000300)}) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x40002, 0x0) ioctl$KDDELIO(r2, 0x4b35, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000180)={0x8000, 0xa2c, 0x6, 0x5, 0x81, "66992d538a145783a3753323fa5145487a8d46", 0x65, 0x3ff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) ioctl$TIOCMIWAIT(r5, 0x545c, 0x0) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000940)) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000000240)) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x8, 0x40, 0xfff, 0x80000}) r6 = syz_open_pts(r3, 0x400) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000700)={0x6, 0x101, 0x54, 0x1e, 0xa, "315b6fc10308f750"}) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000000200)={0x800, 0x5, 0x100, 0x2f5b, 0x7, "f02f3ddb26b4b33a"}) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x4002) 21:58:11 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000000c0)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x1e, 0xfffffffa}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:58:11 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40002) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40002) (async) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) (async) 21:58:11 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x77c, 0x521001) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) syz_open_dev$video4linux(&(0x7f0000000000), 0x77c, 0x521001) (async) 21:58:11 executing program 1: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x1, 0x5, "e26946", 0x3f, 0x8}) (async, rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) (rerun: 32) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x40d}, {0xa, 0x4e22, 0x0, @local, 0x20}, r0, 0xce08}}, 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x2a642, 0x0) 21:58:11 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x4, 0x4) 21:58:11 executing program 4: ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000080)) (async) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000100)={0xad, 0x0, &(0x7f0000000300)}) (async) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x40002, 0x0) ioctl$KDDELIO(r2, 0x4b35, 0x8) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) (async) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000180)={0x8000, 0xa2c, 0x6, 0x5, 0x81, "66992d538a145783a3753323fa5145487a8d46", 0x65, 0x3ff}) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) ioctl$TIOCMIWAIT(r5, 0x545c, 0x0) (async) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000940)) (async) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000000240)) (async) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x8, 0x40, 0xfff, 0x80000}) (async) r6 = syz_open_pts(r3, 0x400) (async) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000700)={0x6, 0x101, 0x54, 0x1e, 0xa, "315b6fc10308f750"}) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000000200)={0x800, 0x5, 0x100, 0x2f5b, 0x7, "f02f3ddb26b4b33a"}) (async) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x4002) 21:58:11 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40002) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40002) (async) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) (async) 21:58:11 executing program 4: ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000080)) (async, rerun: 32) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000100)={0xad, 0x0, &(0x7f0000000300)}) (rerun: 32) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x40002, 0x0) ioctl$KDDELIO(r2, 0x4b35, 0x8) (async, rerun: 64) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (rerun: 64) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) (async) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000180)={0x8000, 0xa2c, 0x6, 0x5, 0x81, "66992d538a145783a3753323fa5145487a8d46", 0x65, 0x3ff}) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async, rerun: 64) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) (rerun: 64) ioctl$TIOCMIWAIT(r5, 0x545c, 0x0) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000940)) (async) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000000240)) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x8, 0x40, 0xfff, 0x80000}) r6 = syz_open_pts(r3, 0x400) (async, rerun: 64) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000700)={0x6, 0x101, 0x54, 0x1e, 0xa, "315b6fc10308f750"}) (rerun: 64) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000000200)={0x800, 0x5, 0x100, 0x2f5b, 0x7, "f02f3ddb26b4b33a"}) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x4002) 21:58:11 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x4, 0x4) 21:58:11 executing program 1: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x1, 0x5, "e26946", 0x3f, 0x8}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x40d}, {0xa, 0x4e22, 0x0, @local, 0x20}, r0, 0xce08}}, 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x2a642, 0x0) 21:58:11 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0x101, 0x5, 0x8001, 0x9, 0x8001, 0xffffffffffffffff}) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x81, 0x240c00) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000200)={0x3f, 0x4, 0x1, {0x2, @pix={0x8, 0xffffffff, 0x41564e57, 0x0, 0xabbc, 0x800, 0xd38131954acf4024, 0x966, 0x1, 0x6, 0x2, 0x1}}, 0x9}) 21:58:11 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x118, 0x0, 0x44, 0x9, 0x3, @broadcast}, 0x10) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) setsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f0000000040)=0x9, 0x4) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000140)=0x2) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x0, @mcast1, 0x1}, r2}}, 0x30) 21:58:12 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000000c0)) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x1e, 0xfffffffa}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:58:12 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async, rerun: 64) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0x101, 0x5, 0x8001, 0x9, 0x8001, 0xffffffffffffffff}) (rerun: 64) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) (async, rerun: 32) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x81, 0x240c00) (rerun: 32) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000200)={0x3f, 0x4, 0x1, {0x2, @pix={0x8, 0xffffffff, 0x41564e57, 0x0, 0xabbc, 0x800, 0xd38131954acf4024, 0x966, 0x1, 0x6, 0x2, 0x1}}, 0x9}) 21:58:12 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x4, 0x4) 21:58:12 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x18d580, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDSKBLED(r0, 0x4b65, 0x200) 21:58:12 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x118, 0x0, 0x44, 0x9, 0x3, @broadcast}, 0x10) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) setsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f0000000040)=0x9, 0x4) (async, rerun: 64) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000140)=0x2) (async) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x0, @mcast1, 0x1}, r2}}, 0x30) 21:58:12 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 21:58:12 executing program 5: ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000080)={0x0, 0x1}) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000040)=0x7) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:58:12 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x18d580, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDSKBLED(r0, 0x4b65, 0x200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x18d580, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) ioctl$KDSKBLED(r0, 0x4b65, 0x200) (async) 21:58:12 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 21:58:12 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x118, 0x0, 0x44, 0x9, 0x3, @broadcast}, 0x10) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) setsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f0000000040)=0x9, 0x4) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000140)=0x2) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x0, @mcast1, 0x1}, r2}}, 0x30) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x118, 0x0, 0x44, 0x9, 0x3, @broadcast}, 0x10) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x13f, 0x2}}, 0x20) (async) setsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f0000000040)=0x9, 0x4) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000140)=0x2) (async) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x0, @mcast1, 0x1}, r2}}, 0x30) (async) 21:58:12 executing program 5: ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000080)={0x0, 0x1}) (async, rerun: 64) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async, rerun: 64) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000040)=0x7) (async, rerun: 32) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (rerun: 32) 21:58:12 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0x101, 0x5, 0x8001, 0x9, 0x8001, 0xffffffffffffffff}) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x81, 0x240c00) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000200)={0x3f, 0x4, 0x1, {0x2, @pix={0x8, 0xffffffff, 0x41564e57, 0x0, 0xabbc, 0x800, 0xd38131954acf4024, 0x966, 0x1, 0x6, 0x2, 0x1}}, 0x9}) 21:58:13 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000000c0)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x1e, 0xfffffffa}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:58:13 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 21:58:13 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x18d580, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDSKBLED(r0, 0x4b65, 0x200) 21:58:13 executing program 2: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x303, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) 21:58:13 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x3, 0x4d0000) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x7e, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, 0x6}}}, 0x30) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:58:13 executing program 5: ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000080)={0x0, 0x1}) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async, rerun: 64) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000040)=0x7) (async, rerun: 64) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (rerun: 64) 21:58:13 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x5, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{@none}, {@none}, {@fixed}, {@none}, {}]}) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000000c0)={@any, 0x9}) 21:58:13 executing program 2: syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x303, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) 21:58:13 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x3, 0x4d0000) (async) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x7e, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, 0x6}}}, 0x30) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:58:13 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x9) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) ioctl$TIOCCONS(r1, 0x541d) r2 = syz_open_pts(r0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000000)) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0xe6040, 0x0) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f00000000c0)) 21:58:13 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x5, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{@none}, {@none}, {@fixed}, {@none}, {}]}) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000000c0)={@any, 0x9}) syz_init_net_socket$llc(0x1a, 0x5, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{@none}, {@none}, {@fixed}, {@none}, {}]}) (async) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000000c0)={@any, 0x9}) (async) 21:58:13 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000480)={0x2, 0x0, 0x2, 0x9, 0x144, &(0x7f0000000080)="c4e6793b9a987e4eaf80cc140ae4224456470c6508e082cdb4fc1ba241eb7f1eca88063df55a2471a99fdd3456d20f4e252b8834553df0215f9d07640718f78f3a169550f728bedd7d99a11aef40b96b613b97d2149e6add24935e235e5e37fde8ce0a90793d5757e3231a271e8f27d5c180b2958e49f2d38d1d7b171d09e89b6484f48d33d472eabf0c33618a609ed5d24021e29453e694f021bafe3db84faf25b3a0d7da461a4dd0bb3d3461649a33f0517bf0fdfb1a8987c467446acdd5446b9a2ddd9bfb5b4ec0c26183b2b6cb81e72a931d3e38d071cb756601a877bfee7c7ec8204d93ee8aedb57855ae19f3cb498e55110442d3afc041b4787df5646600640a14e254cdf615eb4bcaa1e1e65c193d31b1397d79421a02958116fdff813f8ba12ce9220e974fcb6833784f5657073ee3bc7ab0467d7ac67ae7ba939bc3ad1700c7bdfab306b352c2b18b5ac4eec4b75a79df988fb281af4f9984684e83479248033eb560c1b3af045c5d223a06bc0bb95cf20230bf811fe5bf692063baf1192ed7d2456945b853729ccd45a07d204731617552fee3dd00b259bfc992c73fb33264334508b6e3ab66107c7d8e8e36215543cffe53f0e95981f4667329a349ed21ca49547f105eeafebc8663c4b8e8eb39565b5a7b3f413d987c13b587edd3d736489488d33a15001c9e95a2fe3917be471ff0c3928cfe7644cb341aee2be48f0101f6bf87e62d5bdbc2e5e7bd4b21e540c4a1f9568fff8af458f486ab71d3183242083280daf00ef3dcc098dd1a323a1392782809a2bb3996dc722995544605b6ea1412757aebf1c04daac3a38d69077dfe0cb75331230e26137e2c2089d43ef3f5125de73e334ec35a7da7aca5ca54f750e4c08314becf514548dd40048ec349afb71674d95e5f543c91796f89e6794d8314c366c9e2c0b77ab4c5d4db94b597298934307c7d7e1ba1997835f303d68646039e232c4942cec56fb37b775d40b2cf802755361304809f848d49eb23fc82b0143c270c2dda011bc66efe283ddd796d2ace453a4c759e23ddb28a592df4b9cb9b7b1cc45bd0ff5a57e45123ecb79621650a1062483baba52fcf4edf7c607ffefd10480eaa949f4590bb2b29e64ec3dbc0fc471751610da60fc008929b6636717bd9a44c5056109c5480875998fa5a612567b3f657348e45f666f5dfe29b17bb2ce7c236bba06a3e430e29a4f2741c5f52d9ae691d6ed9c7f565883ac706ef2c728c9f0140c9d0da587d28eb316b80e073f258d2df2602ca959e354743727fc360fe93ee9fd8460ecf2d3c1ca0e7410a7ec8ca1a1ba57143d478b49993ee2f77c118e6b12bcc18a009e8fb7c854bdac4fb6360d7dc4e9f2be7a9b93883179da4d2b1e6d756f9c3e9c0e8483a0452d355f57e81e060a076cf6066ec1e6f6e3eefbf29b1233bfece5dec7079ca"}) 21:58:14 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x3, 0x1, 0x0, 0x10}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), r2, 0x5}}, 0x18) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:58:14 executing program 2: syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x303, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) 21:58:14 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x3, 0x4d0000) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x7e, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, 0x6}}}, 0x30) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:58:14 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x9) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) ioctl$TIOCCONS(r1, 0x541d) r2 = syz_open_pts(r0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000000)) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0xe6040, 0x0) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f00000000c0)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$KDADDIO(r0, 0x4b34, 0x9) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) (async) ioctl$TIOCCONS(r1, 0x541d) (async) syz_open_pts(r0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) (async) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000000)) (async) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0xe6040, 0x0) (async) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f00000000c0)) (async) 21:58:14 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x5, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{@none}, {@none}, {@fixed}, {@none}, {}]}) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000000c0)={@any, 0x9}) syz_init_net_socket$llc(0x1a, 0x5, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{@none}, {@none}, {@fixed}, {@none}, {}]}) (async) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000000c0)={@any, 0x9}) (async) 21:58:14 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000480)={0x2, 0x0, 0x2, 0x9, 0x144, &(0x7f0000000080)="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"}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) (async) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000480)={0x2, 0x0, 0x2, 0x9, 0x144, &(0x7f0000000080)="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"}) (async) 21:58:14 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000005c0)={0x0, 0x7, 0x0, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000340)=[{}], 0x3, 0x0, &(0x7f00000003c0)=[{}, {}, {}], 0x3, 0x0, &(0x7f0000000540)=[{}, {}, {}]}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) ioctl$KDDISABIO(r2, 0x4b37) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) r3 = gettid() ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$KDDISABIO(r2, 0x4b37) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8a, 0xff, 0x6, 0x0, 0x7, r3}) 21:58:14 executing program 2: ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000000)) r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000240)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0x8) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000200)={0x3, 0xf001, 0x2}) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x187d83, 0x0) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f00000000c0)="25ef6dbf0fb5e7d9f2b6c806f70d2c8d1072e57dd482767805e522eaaf48c97e6b7797e7980a443643bedb8a418dc921c08729377be70576761d3a0576e3a7d98fbe19f07217c95c6e9d5133ea79398fe81e12dbf79cf12db8acfee4707cbc70ddc62a4d308bc3034cce212ab90f84f6b74d18bc797e32dc9739b50064d481a44963188e36fe1ea92fcfd2f33624ee49ce2ff513ec31a8939dfa896ea0ee75e9abc6435d45420578679e3785ae74fbf82cd138c994507e9b8f09942539791a553b5923872f924381784b334f2e4d3d32546daba93eeb10ee677a") 21:58:14 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x3865d10938faa1b2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000000)=0x6, 0x4) 21:58:14 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x3, 0x1, 0x0, 0x10}) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), r2, 0x5}}, 0x18) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:58:14 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x9) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) ioctl$TIOCCONS(r1, 0x541d) (async) r2 = syz_open_pts(r0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) (async) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000000)) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0xe6040, 0x0) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f00000000c0)) 21:58:14 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x3865d10938faa1b2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000000)=0x6, 0x4) 21:58:14 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000005c0)={0x0, 0x7, 0x0, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000340)=[{}], 0x3, 0x0, &(0x7f00000003c0)=[{}, {}, {}], 0x3, 0x0, &(0x7f0000000540)=[{}, {}, {}]}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) ioctl$KDDISABIO(r2, 0x4b37) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) r3 = gettid() ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$KDDISABIO(r2, 0x4b37) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8a, 0xff, 0x6, 0x0, 0x7, r3}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000005c0)={0x0, 0x7, 0x0, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000340)=[{}], 0x3, 0x0, &(0x7f00000003c0)=[{}, {}, {}], 0x3, 0x0, &(0x7f0000000540)=[{}, {}, {}]}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) (async) ioctl$KDDISABIO(r2, 0x4b37) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) gettid() (async) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) (async) ioctl$KDDISABIO(r2, 0x4b37) (async) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8a, 0xff, 0x6, 0x0, 0x7, r3}) (async) 21:58:14 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000480)={0x2, 0x0, 0x2, 0x9, 0x144, &(0x7f0000000080)="c4e6793b9a987e4eaf80cc140ae4224456470c6508e082cdb4fc1ba241eb7f1eca88063df55a2471a99fdd3456d20f4e252b8834553df0215f9d07640718f78f3a169550f728bedd7d99a11aef40b96b613b97d2149e6add24935e235e5e37fde8ce0a90793d5757e3231a271e8f27d5c180b2958e49f2d38d1d7b171d09e89b6484f48d33d472eabf0c33618a609ed5d24021e29453e694f021bafe3db84faf25b3a0d7da461a4dd0bb3d3461649a33f0517bf0fdfb1a8987c467446acdd5446b9a2ddd9bfb5b4ec0c26183b2b6cb81e72a931d3e38d071cb756601a877bfee7c7ec8204d93ee8aedb57855ae19f3cb498e55110442d3afc041b4787df5646600640a14e254cdf615eb4bcaa1e1e65c193d31b1397d79421a02958116fdff813f8ba12ce9220e974fcb6833784f5657073ee3bc7ab0467d7ac67ae7ba939bc3ad1700c7bdfab306b352c2b18b5ac4eec4b75a79df988fb281af4f9984684e83479248033eb560c1b3af045c5d223a06bc0bb95cf20230bf811fe5bf692063baf1192ed7d2456945b853729ccd45a07d204731617552fee3dd00b259bfc992c73fb33264334508b6e3ab66107c7d8e8e36215543cffe53f0e95981f4667329a349ed21ca49547f105eeafebc8663c4b8e8eb39565b5a7b3f413d987c13b587edd3d736489488d33a15001c9e95a2fe3917be471ff0c3928cfe7644cb341aee2be48f0101f6bf87e62d5bdbc2e5e7bd4b21e540c4a1f9568fff8af458f486ab71d3183242083280daf00ef3dcc098dd1a323a1392782809a2bb3996dc722995544605b6ea1412757aebf1c04daac3a38d69077dfe0cb75331230e26137e2c2089d43ef3f5125de73e334ec35a7da7aca5ca54f750e4c08314becf514548dd40048ec349afb71674d95e5f543c91796f89e6794d8314c366c9e2c0b77ab4c5d4db94b597298934307c7d7e1ba1997835f303d68646039e232c4942cec56fb37b775d40b2cf802755361304809f848d49eb23fc82b0143c270c2dda011bc66efe283ddd796d2ace453a4c759e23ddb28a592df4b9cb9b7b1cc45bd0ff5a57e45123ecb79621650a1062483baba52fcf4edf7c607ffefd10480eaa949f4590bb2b29e64ec3dbc0fc471751610da60fc008929b6636717bd9a44c5056109c5480875998fa5a612567b3f657348e45f666f5dfe29b17bb2ce7c236bba06a3e430e29a4f2741c5f52d9ae691d6ed9c7f565883ac706ef2c728c9f0140c9d0da587d28eb316b80e073f258d2df2602ca959e354743727fc360fe93ee9fd8460ecf2d3c1ca0e7410a7ec8ca1a1ba57143d478b49993ee2f77c118e6b12bcc18a009e8fb7c854bdac4fb6360d7dc4e9f2be7a9b93883179da4d2b1e6d756f9c3e9c0e8483a0452d355f57e81e060a076cf6066ec1e6f6e3eefbf29b1233bfece5dec7079ca"}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) (async) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000480)={0x2, 0x0, 0x2, 0x9, 0x144, &(0x7f0000000080)="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"}) (async) 21:58:14 executing program 2: ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000000)) r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000240)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0x8) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000200)={0x3, 0xf001, 0x2}) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x187d83, 0x0) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f00000000c0)="25ef6dbf0fb5e7d9f2b6c806f70d2c8d1072e57dd482767805e522eaaf48c97e6b7797e7980a443643bedb8a418dc921c08729377be70576761d3a0576e3a7d98fbe19f07217c95c6e9d5133ea79398fe81e12dbf79cf12db8acfee4707cbc70ddc62a4d308bc3034cce212ab90f84f6b74d18bc797e32dc9739b50064d481a44963188e36fe1ea92fcfd2f33624ee49ce2ff513ec31a8939dfa896ea0ee75e9abc6435d45420578679e3785ae74fbf82cd138c994507e9b8f09942539791a553b5923872f924381784b334f2e4d3d32546daba93eeb10ee677a") ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000000)) (async) syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000240)) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0x8) (async) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000200)={0x3, 0xf001, 0x2}) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x187d83, 0x0) (async) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f00000000c0)="25ef6dbf0fb5e7d9f2b6c806f70d2c8d1072e57dd482767805e522eaaf48c97e6b7797e7980a443643bedb8a418dc921c08729377be70576761d3a0576e3a7d98fbe19f07217c95c6e9d5133ea79398fe81e12dbf79cf12db8acfee4707cbc70ddc62a4d308bc3034cce212ab90f84f6b74d18bc797e32dc9739b50064d481a44963188e36fe1ea92fcfd2f33624ee49ce2ff513ec31a8939dfa896ea0ee75e9abc6435d45420578679e3785ae74fbf82cd138c994507e9b8f09942539791a553b5923872f924381784b334f2e4d3d32546daba93eeb10ee677a") (async) 21:58:14 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x3, 0x1, 0x0, 0x10}) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), r2, 0x5}}, 0x18) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:58:14 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f00000000c0)="951f9e501f6f13230d7354eefe49dd585ab55291d7a0cab0b54cd0846fbec67ee398d43426326b79bf1c2b") ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0xffffff87}) syz_open_dev$audion(&(0x7f0000000100), 0x7, 0x131100) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f0000000080)=0x41, 0x4) 21:58:14 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x3865d10938faa1b2, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000000)=0x6, 0x4) 21:58:14 executing program 2: ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000000)) (async) r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000240)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0x8) (async) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000200)={0x3, 0xf001, 0x2}) (async, rerun: 32) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x187d83, 0x0) (rerun: 32) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f00000000c0)="25ef6dbf0fb5e7d9f2b6c806f70d2c8d1072e57dd482767805e522eaaf48c97e6b7797e7980a443643bedb8a418dc921c08729377be70576761d3a0576e3a7d98fbe19f07217c95c6e9d5133ea79398fe81e12dbf79cf12db8acfee4707cbc70ddc62a4d308bc3034cce212ab90f84f6b74d18bc797e32dc9739b50064d481a44963188e36fe1ea92fcfd2f33624ee49ce2ff513ec31a8939dfa896ea0ee75e9abc6435d45420578679e3785ae74fbf82cd138c994507e9b8f09942539791a553b5923872f924381784b334f2e4d3d32546daba93eeb10ee677a") 21:58:14 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) syz_open_dev$vim2m(&(0x7f0000000300), 0x5, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)=@overlay={0x1, 0x5, 0x4, 0x70000, 0x4, {0x77359400}, {0x2, 0x0, 0x7a, 0xa4, 0x6, 0xff, "d01541cd"}, 0xd, 0x3, {}, 0x10001, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$audion(&(0x7f0000000040), 0xfb7a, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000200)={0xfffffffb, 0x2, 0x4, {0x2, @sdr={0x3247504d, 0x6}}, 0x10000}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000340)=@fd={0x9, 0x3, 0x4, 0x4000, 0x6, {0x77359400}, {0xc256aec2b472d97c, 0x0, 0x2, 0x3, 0x7f, 0x6, "3de066ed"}, 0x9, 0x4, {}, 0xffffffff, 0x0, r2}) 21:58:14 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000005c0)={0x0, 0x7, 0x0, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000340)=[{}], 0x3, 0x0, &(0x7f00000003c0)=[{}, {}, {}], 0x3, 0x0, &(0x7f0000000540)=[{}, {}, {}]}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) ioctl$KDDISABIO(r2, 0x4b37) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) r3 = gettid() ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$KDDISABIO(r2, 0x4b37) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8a, 0xff, 0x6, 0x0, 0x7, r3}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000005c0)={0x0, 0x7, 0x0, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000340)=[{}], 0x3, 0x0, &(0x7f00000003c0)=[{}, {}, {}], 0x3, 0x0, &(0x7f0000000540)=[{}, {}, {}]}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) (async) ioctl$KDDISABIO(r2, 0x4b37) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) gettid() (async) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) (async) ioctl$KDDISABIO(r2, 0x4b37) (async) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8a, 0xff, 0x6, 0x0, 0x7, r3}) (async) 21:58:14 executing program 5: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) bind$llc(r2, &(0x7f0000000100)={0x1a, 0x30d, 0x5, 0x0, 0x6, 0x7}, 0x10) setsockopt$llc_int(r1, 0x10c, 0x0, &(0x7f0000000000)=0x81, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000040)=""/69) 21:58:14 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f00000000c0)="951f9e501f6f13230d7354eefe49dd585ab55291d7a0cab0b54cd0846fbec67ee398d43426326b79bf1c2b") ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0xffffff87}) (async) syz_open_dev$audion(&(0x7f0000000100), 0x7, 0x131100) (async) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) (async) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f0000000080)=0x41, 0x4) 21:58:14 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000040)) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 21:58:14 executing program 5: syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) bind$llc(r2, &(0x7f0000000100)={0x1a, 0x30d, 0x5, 0x0, 0x6, 0x7}, 0x10) (async, rerun: 64) setsockopt$llc_int(r1, 0x10c, 0x0, &(0x7f0000000000)=0x81, 0x4) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000040)=""/69) (rerun: 64) 21:58:14 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f00000000c0)="951f9e501f6f13230d7354eefe49dd585ab55291d7a0cab0b54cd0846fbec67ee398d43426326b79bf1c2b") ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0xffffff87}) syz_open_dev$audion(&(0x7f0000000100), 0x7, 0x131100) (async) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f0000000080)=0x41, 0x4) 21:58:14 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:58:14 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async, rerun: 64) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000040)) (rerun: 64) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 21:58:14 executing program 2: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x305, 0xb0, 0x8, 0x4, 0xfa, @broadcast}, 0xf) 21:58:14 executing program 1: r0 = socket(0x2, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x64}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x80, 0x0) 21:58:14 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000040)) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 21:58:15 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000300), 0x5, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)=@overlay={0x1, 0x5, 0x4, 0x70000, 0x4, {0x77359400}, {0x2, 0x0, 0x7a, 0xa4, 0x6, 0xff, "d01541cd"}, 0xd, 0x3, {}, 0x10001, 0x0, 0xffffffffffffffff}) (async) r3 = syz_open_dev$audion(&(0x7f0000000040), 0xfb7a, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000200)={0xfffffffb, 0x2, 0x4, {0x2, @sdr={0x3247504d, 0x6}}, 0x10000}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000340)=@fd={0x9, 0x3, 0x4, 0x4000, 0x6, {0x77359400}, {0xc256aec2b472d97c, 0x0, 0x2, 0x3, 0x7f, 0x6, "3de066ed"}, 0x9, 0x4, {}, 0xffffffff, 0x0, r2}) 21:58:15 executing program 2: syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async, rerun: 32) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x305, 0xb0, 0x8, 0x4, 0xfa, @broadcast}, 0xf) 21:58:15 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:58:15 executing program 5: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) bind$llc(r2, &(0x7f0000000100)={0x1a, 0x30d, 0x5, 0x0, 0x6, 0x7}, 0x10) setsockopt$llc_int(r1, 0x10c, 0x0, &(0x7f0000000000)=0x81, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000040)=""/69) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) bind$llc(r2, &(0x7f0000000100)={0x1a, 0x30d, 0x5, 0x0, 0x6, 0x7}, 0x10) (async) setsockopt$llc_int(r1, 0x10c, 0x0, &(0x7f0000000000)=0x81, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000040)=""/69) (async) 21:58:15 executing program 1: r0 = socket(0x2, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x64}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x80, 0x0) 21:58:15 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000000)=0x176b721d, 0x4) 21:58:15 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000000)=0x3ff, 0x4) 21:58:15 executing program 1: r0 = socket(0x2, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x64}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) (async, rerun: 64) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x80, 0x0) (rerun: 64) 21:58:15 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000000)=0x176b721d, 0x4) 21:58:15 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) 21:58:15 executing program 2: syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x305, 0xb0, 0x8, 0x4, 0xfa, @broadcast}, 0xf) 21:58:15 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000000)=0x3ff, 0x4) 21:58:16 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) syz_open_dev$vim2m(&(0x7f0000000300), 0x5, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)=@overlay={0x1, 0x5, 0x4, 0x70000, 0x4, {0x77359400}, {0x2, 0x0, 0x7a, 0xa4, 0x6, 0xff, "d01541cd"}, 0xd, 0x3, {}, 0x10001, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$audion(&(0x7f0000000040), 0xfb7a, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000200)={0xfffffffb, 0x2, 0x4, {0x2, @sdr={0x3247504d, 0x6}}, 0x10000}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000340)=@fd={0x9, 0x3, 0x4, 0x4000, 0x6, {0x77359400}, {0xc256aec2b472d97c, 0x0, 0x2, 0x3, 0x7f, 0x6, "3de066ed"}, 0x9, 0x4, {}, 0xffffffff, 0x0, r2}) syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000300), 0x5, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)=@overlay={0x1, 0x5, 0x4, 0x70000, 0x4, {0x77359400}, {0x2, 0x0, 0x7a, 0xa4, 0x6, 0xff, "d01541cd"}, 0xd, 0x3, {}, 0x10001}) (async) syz_open_dev$audion(&(0x7f0000000040), 0xfb7a, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000200)={0xfffffffb, 0x2, 0x4, {0x2, @sdr={0x3247504d, 0x6}}, 0x10000}) (async) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000340)=@fd={0x9, 0x3, 0x4, 0x4000, 0x6, {0x77359400}, {0xc256aec2b472d97c, 0x0, 0x2, 0x3, 0x7f, 0x6, "3de066ed"}, 0x9, 0x4, {}, 0xffffffff, 0x0, r2}) (async) 21:58:16 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000000)=0x176b721d, 0x4) 21:58:16 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x801, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000040)="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") 21:58:16 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x3, 0x8, 0xffff9350, 0x80}) set_robust_list(&(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000080)={&(0x7f0000000040)}}, 0x18) 21:58:16 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000000)=0x3ff, 0x4) 21:58:16 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000940)) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000940)) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000080)) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000000c0)) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000000)) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x8001) 21:58:16 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x801, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000040)="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") openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x801, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) (async) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000040)="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") (async) 21:58:16 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000040)=0xe2d, 0x4) 21:58:16 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}]}) 21:58:16 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000940)) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000940)) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000080)) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000000c0)) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000000)) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x8001) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000940)) (async) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000940)) (async) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000080)) (async) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000000c0)) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000000)) (async) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x8001) (async) 21:58:16 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x3, 0x8, 0xffff9350, 0x80}) (async, rerun: 64) set_robust_list(&(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000080)={&(0x7f0000000040)}}, 0x18) (rerun: 64) 21:58:16 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000040)=0xe2d, 0x4) 21:58:17 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:58:17 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}]}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}]}) (async) 21:58:17 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x3, 0x8, 0xffff9350, 0x80}) set_robust_list(&(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000080)={&(0x7f0000000040)}}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x3, 0x8, 0xffff9350, 0x80}) (async) set_robust_list(&(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000080)={&(0x7f0000000040)}}, 0x18) (async) 21:58:17 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x801, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000040)="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") openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x801, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) (async) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000040)="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") (async) 21:58:17 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000940)) (async) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000940)) (async) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000080)) (async) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000000c0)) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000000)) (async) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x8001) 21:58:17 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000040)=0xe2d, 0x4) 21:58:17 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}]}) 21:58:17 executing program 5: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x800) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000040)=0xff, 0x4) bind$llc(r0, &(0x7f0000000000)={0x1a, 0xfffe, 0xff, 0x4d, 0x5f, 0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x10) mq_notify(r0, &(0x7f0000000200)={0x0, 0x25, 0x3, @thr={&(0x7f0000000080)="d0ca3d35712f1e4d631152cf50259520743a7b4d6b2dc05cb9608451e4611a71c20a9d0537a7b9808c470cb9465ea026031492a2569aa383a5cd735a0bcc71503822545a9d6089c5a55176c94867212defa22f38fda896233d91a48a", &(0x7f0000000100)="4ffd1faa2acdbbdfd69250816026a571e3556a3efa38aff9f9778e81fa40eb99ff6be5fe7f0e9a54eefb77ece170352c36af853e7dbae5a2158bf77a6ca99ca79cd52d89adedef7c803a2adbbb9e350cc12161e2ad799508ebfb5f12b7c02d5a0c014e0c22cb38fe4e1de8571a73b38babfd7d490c82113969083ad9aa76d207a0c6585ad844631b5860291de94b47d8eed6e3f1c7ec4bca424ab5cff9ab8b20f11555cc5e3e65805b1f5c8adf5c7e662cbe2ac2d89e23af006a4c9dc25366654ccadc35d8933bb01d43b30e12e8d7098523794cf57708"}}) 21:58:17 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) 21:58:17 executing program 2: r0 = socket(0x23, 0x2, 0x0) bind$bt_hci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000100)=0x6, 0x4) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000080)=@userptr={0x1f, 0x0, 0x4, 0x100, 0x9, {}, {0x2, 0x8, 0x2, 0x3, 0x66, 0x4, "10449e22"}, 0x9, 0x2, {}, 0x64}) 21:58:17 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@posixacl}, {@uname={'uname', 0x3d, '/dev/ttyS3\x00'}}, {@access_uid={'access', 0x3d, r1}}, {@version_u}, {@version_u}, {@msize={'msize', 0x3d, 0x3}}, {@msize={'msize', 0x3d, 0x81}}, {@uname={'uname', 0x3d, '-:\''}}], [{@fowner_gt={'fowner>', 0xee01}}, {@dont_appraise}, {@fowner_gt={'fowner>', 0xee00}}]}}) 21:58:17 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 21:58:18 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:58:18 executing program 5: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x800) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000040)=0xff, 0x4) bind$llc(r0, &(0x7f0000000000)={0x1a, 0xfffe, 0xff, 0x4d, 0x5f, 0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x10) mq_notify(r0, &(0x7f0000000200)={0x0, 0x25, 0x3, @thr={&(0x7f0000000080)="d0ca3d35712f1e4d631152cf50259520743a7b4d6b2dc05cb9608451e4611a71c20a9d0537a7b9808c470cb9465ea026031492a2569aa383a5cd735a0bcc71503822545a9d6089c5a55176c94867212defa22f38fda896233d91a48a", &(0x7f0000000100)="4ffd1faa2acdbbdfd69250816026a571e3556a3efa38aff9f9778e81fa40eb99ff6be5fe7f0e9a54eefb77ece170352c36af853e7dbae5a2158bf77a6ca99ca79cd52d89adedef7c803a2adbbb9e350cc12161e2ad799508ebfb5f12b7c02d5a0c014e0c22cb38fe4e1de8571a73b38babfd7d490c82113969083ad9aa76d207a0c6585ad844631b5860291de94b47d8eed6e3f1c7ec4bca424ab5cff9ab8b20f11555cc5e3e65805b1f5c8adf5c7e662cbe2ac2d89e23af006a4c9dc25366654ccadc35d8933bb01d43b30e12e8d7098523794cf57708"}}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x800) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000040)=0xff, 0x4) (async) bind$llc(r0, &(0x7f0000000000)={0x1a, 0xfffe, 0xff, 0x4d, 0x5f, 0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x10) (async) mq_notify(r0, &(0x7f0000000200)={0x0, 0x25, 0x3, @thr={&(0x7f0000000080)="d0ca3d35712f1e4d631152cf50259520743a7b4d6b2dc05cb9608451e4611a71c20a9d0537a7b9808c470cb9465ea026031492a2569aa383a5cd735a0bcc71503822545a9d6089c5a55176c94867212defa22f38fda896233d91a48a", &(0x7f0000000100)="4ffd1faa2acdbbdfd69250816026a571e3556a3efa38aff9f9778e81fa40eb99ff6be5fe7f0e9a54eefb77ece170352c36af853e7dbae5a2158bf77a6ca99ca79cd52d89adedef7c803a2adbbb9e350cc12161e2ad799508ebfb5f12b7c02d5a0c014e0c22cb38fe4e1de8571a73b38babfd7d490c82113969083ad9aa76d207a0c6585ad844631b5860291de94b47d8eed6e3f1c7ec4bca424ab5cff9ab8b20f11555cc5e3e65805b1f5c8adf5c7e662cbe2ac2d89e23af006a4c9dc25366654ccadc35d8933bb01d43b30e12e8d7098523794cf57708"}}) (async) 21:58:18 executing program 2: r0 = socket(0x23, 0x2, 0x0) bind$bt_hci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000100)=0x6, 0x4) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000080)=@userptr={0x1f, 0x0, 0x4, 0x100, 0x9, {}, {0x2, 0x8, 0x2, 0x3, 0x66, 0x4, "10449e22"}, 0x9, 0x2, {}, 0x64}) socket(0x23, 0x2, 0x0) (async) bind$bt_hci(r0, 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000100)=0x6, 0x4) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000080)=@userptr={0x1f, 0x0, 0x4, 0x100, 0x9, {}, {0x2, 0x8, 0x2, 0x3, 0x66, 0x4, "10449e22"}, 0x9, 0x2, {}, 0x64}) (async) 21:58:18 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@posixacl}, {@uname={'uname', 0x3d, '/dev/ttyS3\x00'}}, {@access_uid={'access', 0x3d, r1}}, {@version_u}, {@version_u}, {@msize={'msize', 0x3d, 0x3}}, {@msize={'msize', 0x3d, 0x81}}, {@uname={'uname', 0x3d, '-:\''}}], [{@fowner_gt={'fowner>', 0xee01}}, {@dont_appraise}, {@fowner_gt={'fowner>', 0xee00}}]}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async) socket$bt_cmtp(0x1f, 0x3, 0x5) (async) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@posixacl}, {@uname={'uname', 0x3d, '/dev/ttyS3\x00'}}, {@access_uid={'access', 0x3d, r1}}, {@version_u}, {@version_u}, {@msize={'msize', 0x3d, 0x3}}, {@msize={'msize', 0x3d, 0x81}}, {@uname={'uname', 0x3d, '-:\''}}], [{@fowner_gt={'fowner>', 0xee01}}, {@dont_appraise}, {@fowner_gt={'fowner>', 0xee00}}]}}) (async) 21:58:18 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) 21:58:18 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) syz_init_net_socket$llc(0x1a, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async) 21:58:18 executing program 2: r0 = socket(0x23, 0x2, 0x0) bind$bt_hci(r0, 0x0, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000100)=0x6, 0x4) (async) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000080)=@userptr={0x1f, 0x0, 0x4, 0x100, 0x9, {}, {0x2, 0x8, 0x2, 0x3, 0x66, 0x4, "10449e22"}, 0x9, 0x2, {}, 0x64}) 21:58:18 executing program 5: syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x800) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000040)=0xff, 0x4) (async) bind$llc(r0, &(0x7f0000000000)={0x1a, 0xfffe, 0xff, 0x4d, 0x5f, 0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x10) (async) mq_notify(r0, &(0x7f0000000200)={0x0, 0x25, 0x3, @thr={&(0x7f0000000080)="d0ca3d35712f1e4d631152cf50259520743a7b4d6b2dc05cb9608451e4611a71c20a9d0537a7b9808c470cb9465ea026031492a2569aa383a5cd735a0bcc71503822545a9d6089c5a55176c94867212defa22f38fda896233d91a48a", &(0x7f0000000100)="4ffd1faa2acdbbdfd69250816026a571e3556a3efa38aff9f9778e81fa40eb99ff6be5fe7f0e9a54eefb77ece170352c36af853e7dbae5a2158bf77a6ca99ca79cd52d89adedef7c803a2adbbb9e350cc12161e2ad799508ebfb5f12b7c02d5a0c014e0c22cb38fe4e1de8571a73b38babfd7d490c82113969083ad9aa76d207a0c6585ad844631b5860291de94b47d8eed6e3f1c7ec4bca424ab5cff9ab8b20f11555cc5e3e65805b1f5c8adf5c7e662cbe2ac2d89e23af006a4c9dc25366654ccadc35d8933bb01d43b30e12e8d7098523794cf57708"}}) 21:58:18 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) syz_init_net_socket$llc(0x1a, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async) 21:58:18 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) 21:58:18 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@posixacl}, {@uname={'uname', 0x3d, '/dev/ttyS3\x00'}}, {@access_uid={'access', 0x3d, r1}}, {@version_u}, {@version_u}, {@msize={'msize', 0x3d, 0x3}}, {@msize={'msize', 0x3d, 0x81}}, {@uname={'uname', 0x3d, '-:\''}}], [{@fowner_gt={'fowner>', 0xee01}}, {@dont_appraise}, {@fowner_gt={'fowner>', 0xee00}}]}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async) socket$bt_cmtp(0x1f, 0x3, 0x5) (async) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@posixacl}, {@uname={'uname', 0x3d, '/dev/ttyS3\x00'}}, {@access_uid={'access', 0x3d, r1}}, {@version_u}, {@version_u}, {@msize={'msize', 0x3d, 0x3}}, {@msize={'msize', 0x3d, 0x81}}, {@uname={'uname', 0x3d, '-:\''}}], [{@fowner_gt={'fowner>', 0xee01}}, {@dont_appraise}, {@fowner_gt={'fowner>', 0xee00}}]}}) (async) 21:58:18 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:58:18 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000040)) 21:58:18 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x9) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@mmap={0x852, 0x3, 0x4, 0x8, 0x5, {r1, r2/1000+60000}, {0x1, 0x8, 0x12, 0xff, 0x1, 0x5, "851675ca"}, 0x8, 0x1, {}, 0x3}) 21:58:18 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f00000002c0)=0x576b721d, 0x4) 21:58:18 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x303, 0x81, 0xd4, 0xff, 0xd4, @local}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080), 0x6) 21:58:18 executing program 1: clock_gettime(0x6, &(0x7f0000000040)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x280200, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000180)={0x3, 0x3, 0x3, 0x0, 0x7e}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x98001, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x401, 0xffffffff, 0xfffffffeffffffff, 0x7}, &(0x7f00000001c0)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000140)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x484400, 0x0) 21:58:18 executing program 3: mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x8010c0, &(0x7f0000000340)=ANY=[@ANYBLOB="7472056e733d66642c7266646e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',version=9p2000.L,version=9p2000,loose,cachetag=\\9,cachetag=],uid=', @ANYRESDEC=0x0, @ANYBLOB=',subj_type=@+${&).[[+,measure,measure,obj_role=/dev/input/mice\x00,\x00']) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x82) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x2, @win={{0x7fffffff, 0x3ff, 0x1, 0x8}, 0x5, 0x7ff, &(0x7f00000000c0)={{0xee, 0x3, 0x8, 0x3f}, &(0x7f0000000080)={{0x8001, 0x1, 0x1000, 0x62}, &(0x7f0000000040)={{0xfffffe00, 0x80000001, 0x5, 0x6}}}}, 0x1, &(0x7f0000000100)="17356e4434323f40b0ef0bd08ca8dfd39cf905e8d3644b7e844a1dbff873d3e46f23758027e8ef010d6af47fede3ab8f3fae6b664498059be52efd525c31ce25f7d22ab9fe044f3b6acccac376b30f65bd84d41616f8a9e9bdcd70eabf259535c3406313869babb2262d1c3722c11b4b4d15c601230291d13e02c24b1f67ba5e1e76b803ab100fd1e877ea37c2f63b4f3e3fe4ed2f9342ac29c9ac360955b90069493ba1184f94f1c6a6", 0x1}}) 21:58:18 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000040)) syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000040)) (async) 21:58:18 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x303, 0x81, 0xd4, 0xff, 0xd4, @local}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080), 0x6) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) (async) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x303, 0x81, 0xd4, 0xff, 0xd4, @local}, 0x10) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080), 0x6) (async) 21:58:18 executing program 1: clock_gettime(0x6, &(0x7f0000000040)) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x280200, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000180)={0x3, 0x3, 0x3, 0x0, 0x7e}) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x98001, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x401, 0xffffffff, 0xfffffffeffffffff, 0x7}, &(0x7f00000001c0)) (async) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000140)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x484400, 0x0) 21:58:18 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f00000002c0)=0x576b721d, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f00000002c0)=0x576b721d, 0x4) (async) 21:58:18 executing program 3: mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x8010c0, &(0x7f0000000340)=ANY=[@ANYBLOB="7472056e733d66642c7266646e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',version=9p2000.L,version=9p2000,loose,cachetag=\\9,cachetag=],uid=', @ANYRESDEC=0x0, @ANYBLOB=',subj_type=@+${&).[[+,measure,measure,obj_role=/dev/input/mice\x00,\x00']) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x82) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x2, @win={{0x7fffffff, 0x3ff, 0x1, 0x8}, 0x5, 0x7ff, &(0x7f00000000c0)={{0xee, 0x3, 0x8, 0x3f}, &(0x7f0000000080)={{0x8001, 0x1, 0x1000, 0x62}, &(0x7f0000000040)={{0xfffffe00, 0x80000001, 0x5, 0x6}}}}, 0x1, &(0x7f0000000100)="17356e4434323f40b0ef0bd08ca8dfd39cf905e8d3644b7e844a1dbff873d3e46f23758027e8ef010d6af47fede3ab8f3fae6b664498059be52efd525c31ce25f7d22ab9fe044f3b6acccac376b30f65bd84d41616f8a9e9bdcd70eabf259535c3406313869babb2262d1c3722c11b4b4d15c601230291d13e02c24b1f67ba5e1e76b803ab100fd1e877ea37c2f63b4f3e3fe4ed2f9342ac29c9ac360955b90069493ba1184f94f1c6a6", 0x1}}) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x8010c0, &(0x7f0000000340)=ANY=[@ANYBLOB="7472056e733d66642c7266646e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',version=9p2000.L,version=9p2000,loose,cachetag=\\9,cachetag=],uid=', @ANYRESDEC=0x0, @ANYBLOB=',subj_type=@+${&).[[+,measure,measure,obj_role=/dev/input/mice\x00,\x00']) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x82) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x2, @win={{0x7fffffff, 0x3ff, 0x1, 0x8}, 0x5, 0x7ff, &(0x7f00000000c0)={{0xee, 0x3, 0x8, 0x3f}, &(0x7f0000000080)={{0x8001, 0x1, 0x1000, 0x62}, &(0x7f0000000040)={{0xfffffe00, 0x80000001, 0x5, 0x6}}}}, 0x1, &(0x7f0000000100)="17356e4434323f40b0ef0bd08ca8dfd39cf905e8d3644b7e844a1dbff873d3e46f23758027e8ef010d6af47fede3ab8f3fae6b664498059be52efd525c31ce25f7d22ab9fe044f3b6acccac376b30f65bd84d41616f8a9e9bdcd70eabf259535c3406313869babb2262d1c3722c11b4b4d15c601230291d13e02c24b1f67ba5e1e76b803ab100fd1e877ea37c2f63b4f3e3fe4ed2f9342ac29c9ac360955b90069493ba1184f94f1c6a6", 0x1}}) (async) 21:58:18 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x303, 0x81, 0xd4, 0xff, 0xd4, @local}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080), 0x6) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) (async) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x303, 0x81, 0xd4, 0xff, 0xd4, @local}, 0x10) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080), 0x6) (async) 21:58:18 executing program 1: clock_gettime(0x6, &(0x7f0000000040)) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x280200, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000180)={0x3, 0x3, 0x3, 0x0, 0x7e}) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x98001, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x401, 0xffffffff, 0xfffffffeffffffff, 0x7}, &(0x7f00000001c0)) (async) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)) (async) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000140)) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x484400, 0x0) 21:58:19 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x9) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@mmap={0x852, 0x3, 0x4, 0x8, 0x5, {r1, r2/1000+60000}, {0x1, 0x8, 0x12, 0xff, 0x1, 0x5, "851675ca"}, 0x8, 0x1, {}, 0x3}) 21:58:19 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000040)) syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000040)) (async) 21:58:19 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) ioctl$KDSETLED(r1, 0x4b32, 0x3) 21:58:19 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f00000002c0)=0x576b721d, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f00000002c0)=0x576b721d, 0x4) (async) 21:58:19 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000080)={0x53, ""/83}) r1 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) 21:58:19 executing program 3: mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x8010c0, &(0x7f0000000340)=ANY=[@ANYBLOB="7472056e733d66642c7266646e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',version=9p2000.L,version=9p2000,loose,cachetag=\\9,cachetag=],uid=', @ANYRESDEC=0x0, @ANYBLOB=',subj_type=@+${&).[[+,measure,measure,obj_role=/dev/input/mice\x00,\x00']) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x82) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x2, @win={{0x7fffffff, 0x3ff, 0x1, 0x8}, 0x5, 0x7ff, &(0x7f00000000c0)={{0xee, 0x3, 0x8, 0x3f}, &(0x7f0000000080)={{0x8001, 0x1, 0x1000, 0x62}, &(0x7f0000000040)={{0xfffffe00, 0x80000001, 0x5, 0x6}}}}, 0x1, &(0x7f0000000100)="17356e4434323f40b0ef0bd08ca8dfd39cf905e8d3644b7e844a1dbff873d3e46f23758027e8ef010d6af47fede3ab8f3fae6b664498059be52efd525c31ce25f7d22ab9fe044f3b6acccac376b30f65bd84d41616f8a9e9bdcd70eabf259535c3406313869babb2262d1c3722c11b4b4d15c601230291d13e02c24b1f67ba5e1e76b803ab100fd1e877ea37c2f63b4f3e3fe4ed2f9342ac29c9ac360955b90069493ba1184f94f1c6a6", 0x1}}) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x8010c0, &(0x7f0000000340)=ANY=[@ANYBLOB="7472056e733d66642c7266646e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',version=9p2000.L,version=9p2000,loose,cachetag=\\9,cachetag=],uid=', @ANYRESDEC=0x0, @ANYBLOB=',subj_type=@+${&).[[+,measure,measure,obj_role=/dev/input/mice\x00,\x00']) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x82) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x2, @win={{0x7fffffff, 0x3ff, 0x1, 0x8}, 0x5, 0x7ff, &(0x7f00000000c0)={{0xee, 0x3, 0x8, 0x3f}, &(0x7f0000000080)={{0x8001, 0x1, 0x1000, 0x62}, &(0x7f0000000040)={{0xfffffe00, 0x80000001, 0x5, 0x6}}}}, 0x1, &(0x7f0000000100)="17356e4434323f40b0ef0bd08ca8dfd39cf905e8d3644b7e844a1dbff873d3e46f23758027e8ef010d6af47fede3ab8f3fae6b664498059be52efd525c31ce25f7d22ab9fe044f3b6acccac376b30f65bd84d41616f8a9e9bdcd70eabf259535c3406313869babb2262d1c3722c11b4b4d15c601230291d13e02c24b1f67ba5e1e76b803ab100fd1e877ea37c2f63b4f3e3fe4ed2f9342ac29c9ac360955b90069493ba1184f94f1c6a6", 0x1}}) (async) 21:58:19 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:58:19 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) 21:58:19 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x0, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x5) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:58:19 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000080)={0x53, ""/83}) (async) r1 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) 21:58:19 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000280), &(0x7f0000000100)) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000240)=0x1, 0x4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10c010, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="4a63616368653d6d6d61702c63616368653d667363616368652c63616368657461673d2d242f2c2c63076368653d6e6f6e67f37d92f0828b2a3d616e792c686173682c726f6f74636f6e746578743d73797361646d5f032c646566636f6e746578743d73797374656d5f752c646566636f6e746578743d757365725f752c6d61736b3d4d41595f455845432c646566636f6e746578743d757365725f752c70657205000000646972656374696f2c00"]) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:58:19 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x9) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@mmap={0x852, 0x3, 0x4, 0x8, 0x5, {r1, r2/1000+60000}, {0x1, 0x8, 0x12, 0xff, 0x1, 0x5, "851675ca"}, 0x8, 0x1, {}, 0x3}) 21:58:19 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:58:19 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async, rerun: 32) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (rerun: 32) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) (async) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) (async) ioctl$KDSETLED(r1, 0x4b32, 0x3) 21:58:19 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000280), &(0x7f0000000100)) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000240)=0x1, 0x4) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10c010, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="4a63616368653d6d6d61702c63616368653d667363616368652c63616368657461673d2d242f2c2c63076368653d6e6f6e67f37d92f0828b2a3d616e792c686173682c726f6f74636f6e746578743d73797361646d5f032c646566636f6e746578743d73797374656d5f752c646566636f6e746578743d757365725f752c6d61736b3d4d41595f455845432c646566636f6e746578743d757365725f752c70657205000000646972656374696f2c00"]) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:58:19 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x10) (async, rerun: 64) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x0, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x5) (async, rerun: 64) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:58:19 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000280), &(0x7f0000000100)) (async) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000240)=0x1, 0x4) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10c010, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="4a63616368653d6d6d61702c63616368653d667363616368652c63616368657461673d2d242f2c2c63076368653d6e6f6e67f37d92f0828b2a3d616e792c686173682c726f6f74636f6e746578743d73797361646d5f032c646566636f6e746578743d73797374656d5f752c646566636f6e746578743d757365725f752c6d61736b3d4d41595f455845432c646566636f6e746578743d757365725f752c70657205000000646972656374696f2c00"]) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:58:19 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x116310) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000000)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:58:19 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000080)={0x53, ""/83}) (async) r1 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) 21:58:19 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x0, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x5) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r1) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x10) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x0, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x5) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) 21:58:19 executing program 4: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000000)=0x576b721d, 0x1) 21:58:19 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x800) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x20, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',posixacl,cachetag=&-{\'^,cache=loose,hash,dont_hash,subj_type=mptcp_pm\x00,fowner>', @ANYRESDEC=0xee00, @ANYBLOB=',subj_user=-{,hash,Ueasure,mask=MAY_EXEC,\x00']) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r6, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r6, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x13, 0x20, 0x6, 0xf1, 0x1f, @multicast}, 0x10) 21:58:19 executing program 5: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000040)=0x3ff, 0x4) socketpair(0x9, 0xa, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x400, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x200040c1) 21:58:20 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0xcc800, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000180)) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000100)=@mmap={0x80, 0x2, 0x4, 0x3b4059fcd628ea8f, 0x7, {r3, r4/1000+10000}, {0x2, 0x0, 0x7, 0x8, 0x0, 0x9, "d39f502c"}, 0x400, 0x1, {}, 0x1, 0x0, r1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:58:20 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x116310) (async) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000000)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:58:20 executing program 5: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000040)=0x3ff, 0x4) (async) socketpair(0x9, 0xa, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x400, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x200040c1) 21:58:20 executing program 4: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000000)=0x576b721d, 0x1) 21:58:20 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) (async) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x800) (async) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x20, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',posixacl,cachetag=&-{\'^,cache=loose,hash,dont_hash,subj_type=mptcp_pm\x00,fowner>', @ANYRESDEC=0xee00, @ANYBLOB=',subj_user=-{,hash,Ueasure,mask=MAY_EXEC,\x00']) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r6, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x10) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r6, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x13, 0x20, 0x6, 0xf1, 0x1f, @multicast}, 0x10) 21:58:20 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) (async) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) (async) ioctl$KDSETLED(r1, 0x4b32, 0x3) 21:58:20 executing program 4: syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async, rerun: 32) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000000)=0x576b721d, 0x1) 21:58:20 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x116310) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000000)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x116310) (async) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000000)) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) 21:58:20 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async, rerun: 32) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (rerun: 32) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) (async) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x800) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x20, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',posixacl,cachetag=&-{\'^,cache=loose,hash,dont_hash,subj_type=mptcp_pm\x00,fowner>', @ANYRESDEC=0xee00, @ANYBLOB=',subj_user=-{,hash,Ueasure,mask=MAY_EXEC,\x00']) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r6, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x10) (async, rerun: 64) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r6, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x13, 0x20, 0x6, 0xf1, 0x1f, @multicast}, 0x10) 21:58:20 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0xcc800, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000180)) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000100)=@mmap={0x80, 0x2, 0x4, 0x3b4059fcd628ea8f, 0x7, {r3, r4/1000+10000}, {0x2, 0x0, 0x7, 0x8, 0x0, 0x9, "d39f502c"}, 0x400, 0x1, {}, 0x1, 0x0, r1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:58:20 executing program 5: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000040)=0x3ff, 0x4) socketpair(0x9, 0xa, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x400, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x200040c1) 21:58:20 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x804}) mq_open(&(0x7f0000000080)='{\x00', 0x1, 0x29, &(0x7f00000000c0)={0x3, 0x7f, 0x2858, 0x6}) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:58:20 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x113, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x8001, @mcast2, 0x3}, r0}}, 0x30) 21:58:20 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x324, 0xf8, 0x0, 0x8c, 0x2, @random="4fcedd709594"}, 0x10) socketpair(0x27, 0x5, 0x2, &(0x7f0000000040)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:58:20 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x81}, 0x10) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x306, 0x4, 0x20, 0x5, 0x80, @multicast}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, 0x0) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e22, @private=0xa010102}}}, 0x90) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x6, 0x80000) write$bt_hci(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0400ff01000000000000f8"], 0xb) syz_init_net_socket$llc(0x1a, 0x4, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000180)={0x0, 0x0, "8d749c", 0x8c, 0x1}) 21:58:20 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x804}) (async) mq_open(&(0x7f0000000080)='{\x00', 0x1, 0x29, &(0x7f00000000c0)={0x3, 0x7f, 0x2858, 0x6}) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:58:20 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2540f09b9ae45eeaa71f628c142c0000006a123ae69e416d939ab3249a27a50e26fdf90370405e49608344335039e204d96fc6eeaacd010de3313e5357bbb92ba4c236434ed1b8b5b626", @ANYRES16=0x0, @ANYBLOB="00082dbd7000ffdbdf25050000000400018008000200010000000c000180080003000a010101"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) ioctl$KDSKBLED(r1, 0x4b65, 0x10000) 21:58:20 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x113, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x8001, @mcast2, 0x3}, r0}}, 0x30) 21:58:20 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0xcc800, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000180)) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000100)=@mmap={0x80, 0x2, 0x4, 0x3b4059fcd628ea8f, 0x7, {r3, r4/1000+10000}, {0x2, 0x0, 0x7, 0x8, 0x0, 0x9, "d39f502c"}, 0x400, 0x1, {}, 0x1, 0x0, r1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0xcc800, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000180)) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000100)=@mmap={0x80, 0x2, 0x4, 0x3b4059fcd628ea8f, 0x7, {r3, r4/1000+10000}, {0x2, 0x0, 0x7, 0x8, 0x0, 0x9, "d39f502c"}, 0x400, 0x1, {}, 0x1, 0x0, r1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) 21:58:20 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) (rerun: 64) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x324, 0xf8, 0x0, 0x8c, 0x2, @random="4fcedd709594"}, 0x10) socketpair(0x27, 0x5, 0x2, &(0x7f0000000040)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:58:20 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x804}) mq_open(&(0x7f0000000080)='{\x00', 0x1, 0x29, &(0x7f00000000c0)={0x3, 0x7f, 0x2858, 0x6}) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:58:20 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x81}, 0x10) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x306, 0x4, 0x20, 0x5, 0x80, @multicast}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, 0x0) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e22, @private=0xa010102}}}, 0x90) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x6, 0x80000) write$bt_hci(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0400ff01000000000000f8"], 0xb) syz_init_net_socket$llc(0x1a, 0x4, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000180)={0x0, 0x0, "8d749c", 0x8c, 0x1}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x81}, 0x10) (async) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x306, 0x4, 0x20, 0x5, 0x80, @multicast}, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$HCIINQUIRY(r1, 0x800448f0, 0x0) (async) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000040)) (async) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e22, @private=0xa010102}}}, 0x90) (async) syz_open_dev$audion(&(0x7f0000000140), 0x6, 0x80000) (async) write$bt_hci(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0400ff01000000000000f8"], 0xb) (async) syz_init_net_socket$llc(0x1a, 0x4, 0x0) (async) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000180)={0x0, 0x0, "8d749c", 0x8c, 0x1}) (async) 21:58:20 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x113, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x8001, @mcast2, 0x3}, r0}}, 0x30) 21:58:20 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2540f09b9ae45eeaa71f628c142c0000006a123ae69e416d939ab3249a27a50e26fdf90370405e49608344335039e204d96fc6eeaacd010de3313e5357bbb92ba4c236434ed1b8b5b626", @ANYRES16=0x0, @ANYBLOB="00082dbd7000ffdbdf25050000000400018008000200010000000c000180080003000a010101"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) ioctl$KDSKBLED(r1, 0x4b65, 0x10000) 21:58:20 executing program 0: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000200)=0x400) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$md(0xffffffffffffff9c, &(0x7f00000002c0), 0x101080, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x401) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000140)=@multiplanar_fd={0xa0, 0x2, 0x4, 0x2, 0x4, {}, {0x4, 0x8, 0x2, 0x5, 0x5, 0x80, "b399f3ce"}, 0x7, 0x4, {&(0x7f00000000c0)=[{0x6f1e, 0xd6b4, {}, 0x6}, {0x9, 0x2, {}, 0x4}]}, 0x401}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000240)) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000280)=0x2) 21:58:20 executing program 4: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000080)=0x576b721d, 0x4) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)=@overlay={0x6, 0x3, 0x4, 0x10000, 0x10000, {0x77359400}, {0x1, 0xc, 0x0, 0x0, 0xfc, 0xd2, "0493b3e9"}, 0x9, 0x3, {}, 0x7}) 21:58:20 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x81}, 0x10) (async) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x306, 0x4, 0x20, 0x5, 0x80, @multicast}, 0x10) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, 0x0) (async) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000040)) (async) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e22, @private=0xa010102}}}, 0x90) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x6, 0x80000) write$bt_hci(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0400ff01000000000000f8"], 0xb) (async) syz_init_net_socket$llc(0x1a, 0x4, 0x0) (async) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000180)={0x0, 0x0, "8d749c", 0x8c, 0x1}) 21:58:20 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x324, 0xf8, 0x0, 0x8c, 0x2, @random="4fcedd709594"}, 0x10) socketpair(0x27, 0x5, 0x2, &(0x7f0000000040)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x324, 0xf8, 0x0, 0x8c, 0x2, @random="4fcedd709594"}, 0x10) (async) socketpair(0x27, 0x5, 0x2, &(0x7f0000000040)) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) 21:58:20 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2540f09b9ae45eeaa71f628c142c0000006a123ae69e416d939ab3249a27a50e26fdf90370405e49608344335039e204d96fc6eeaacd010de3313e5357bbb92ba4c236434ed1b8b5b626", @ANYRES16=0x0, @ANYBLOB="00082dbd7000ffdbdf25050000000400018008000200010000000c000180080003000a010101"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) ioctl$KDSKBLED(r1, 0x4b65, 0x10000) 21:58:20 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x3000000, 0x0, 0x8001, 0xffffffd6, 0x81, "dd0598601ebab805715b26e678f36ecf3bf6ed", 0x7}) 21:58:20 executing program 4: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000080)=0x576b721d, 0x4) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)=@overlay={0x6, 0x3, 0x4, 0x10000, 0x10000, {0x77359400}, {0x1, 0xc, 0x0, 0x0, 0xfc, 0xd2, "0493b3e9"}, 0x9, 0x3, {}, 0x7}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000080)=0x576b721d, 0x4) (async) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)=@overlay={0x6, 0x3, 0x4, 0x10000, 0x10000, {0x77359400}, {0x1, 0xc, 0x0, 0x0, 0xfc, 0xd2, "0493b3e9"}, 0x9, 0x3, {}, 0x7}) (async) 21:58:21 executing program 3: syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) socketpair(0x1d, 0x357cb1b394db3e12, 0x9, &(0x7f0000000000)) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000940)) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000300)) getresuid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r6, &(0x7f00000004c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000540), 0xffffffffffffffff, 0x8}}, 0x18) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000500)) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x810, r6, 0x5) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2808001, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="1361a0bf68f8733d5b2b9cd72e8edffda36bd0cffd1e090a1e9aa3e4d7801a887d", @ANYRESDEC=r2, @ANYBLOB=',dfltuid=', @ANYRESHEX=0xee00, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0, @ANYBLOB="2c657582a5ff003ecc5a62f57cb400b76cdf82f30facbf466ac387c596beb5eea06c444c34463c683359809dcc87b17908d65e0eeb174ea2c926f98b2017037b273645c0b86980594b81faaf8d02112c3fe9e068df1176e1b64955bb88e7965a2b8106a03d1312cfdded713d33f67cb95b17bd00000000000000000000000000000200000000000000", @ANYRESDEC=r3, @ANYBLOB=',subj_user=/dev/input/mice\x00,uid=', @ANYRESDEC=r5, @ANYBLOB=',smackfsdef={/!%C!,fsmagic=0xfffffffffffffffb,\x00']) ioctl$ASHMEM_GET_SIZE(r6, 0x7704, 0x0) 21:58:21 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:58:21 executing program 2: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x20, 0x6, @remote}, 0x10) 21:58:21 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x3000000, 0x0, 0x8001, 0xffffffd6, 0x81, "dd0598601ebab805715b26e678f36ecf3bf6ed", 0x7}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) (async) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x3000000, 0x0, 0x8001, 0xffffffd6, 0x81, "dd0598601ebab805715b26e678f36ecf3bf6ed", 0x7}) (async) 21:58:21 executing program 4: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async, rerun: 32) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000080)=0x576b721d, 0x4) (async, rerun: 32) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)=@overlay={0x6, 0x3, 0x4, 0x10000, 0x10000, {0x77359400}, {0x1, 0xc, 0x0, 0x0, 0xfc, 0xd2, "0493b3e9"}, 0x9, 0x3, {}, 0x7}) 21:58:21 executing program 0: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000200)=0x400) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$md(0xffffffffffffff9c, &(0x7f00000002c0), 0x101080, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x401) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000140)=@multiplanar_fd={0xa0, 0x2, 0x4, 0x2, 0x4, {}, {0x4, 0x8, 0x2, 0x5, 0x5, 0x80, "b399f3ce"}, 0x7, 0x4, {&(0x7f00000000c0)=[{0x6f1e, 0xd6b4, {}, 0x6}, {0x9, 0x2, {}, 0x4}]}, 0x401}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000240)) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000280)=0x2) 21:58:21 executing program 3: syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async, rerun: 32) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) (rerun: 32) socketpair(0x1d, 0x357cb1b394db3e12, 0x9, &(0x7f0000000000)) (async) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) (async) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000940)) (async, rerun: 64) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000300)) (rerun: 64) getresuid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r6, &(0x7f00000004c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000540), 0xffffffffffffffff, 0x8}}, 0x18) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000500)) (async, rerun: 64) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x810, r6, 0x5) (rerun: 64) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2808001, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="1361a0bf68f8733d5b2b9cd72e8edffda36bd0cffd1e090a1e9aa3e4d7801a887d", @ANYRESDEC=r2, @ANYBLOB=',dfltuid=', @ANYRESHEX=0xee00, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0, @ANYBLOB="2c657582a5ff003ecc5a62f57cb400b76cdf82f30facbf466ac387c596beb5eea06c444c34463c683359809dcc87b17908d65e0eeb174ea2c926f98b2017037b273645c0b86980594b81faaf8d02112c3fe9e068df1176e1b64955bb88e7965a2b8106a03d1312cfdded713d33f67cb95b17bd00000000000000000000000000000200000000000000", @ANYRESDEC=r3, @ANYBLOB=',subj_user=/dev/input/mice\x00,uid=', @ANYRESDEC=r5, @ANYBLOB=',smackfsdef={/!%C!,fsmagic=0xfffffffffffffffb,\x00']) (async) ioctl$ASHMEM_GET_SIZE(r6, 0x7704, 0x0) 21:58:21 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) 21:58:21 executing program 2: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x20, 0x6, @remote}, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x20, 0x6, @remote}, 0x10) (async) 21:58:21 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x3000000, 0x0, 0x8001, 0xffffffd6, 0x81, "dd0598601ebab805715b26e678f36ecf3bf6ed", 0x7}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) (async) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x3000000, 0x0, 0x8001, 0xffffffd6, 0x81, "dd0598601ebab805715b26e678f36ecf3bf6ed", 0x7}) (async) 21:58:21 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) ioctl$TIOCCONS(r1, 0x541d) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x334, 0x3, 0x1f, 0x2, 0x3f, @broadcast}, 0x10) r2 = syz_open_dev$audion(&(0x7f0000000040), 0x5f4b, 0x8200) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000080)={r3, 0x8001}) 21:58:21 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:58:21 executing program 2: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x20, 0x6, @remote}, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x20, 0x6, @remote}, 0x10) (async) 21:58:21 executing program 0: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000200)=0x400) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$md(0xffffffffffffff9c, &(0x7f00000002c0), 0x101080, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x401) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000140)=@multiplanar_fd={0xa0, 0x2, 0x4, 0x2, 0x4, {}, {0x4, 0x8, 0x2, 0x5, 0x5, 0x80, "b399f3ce"}, 0x7, 0x4, {&(0x7f00000000c0)=[{0x6f1e, 0xd6b4, {}, 0x6}, {0x9, 0x2, {}, 0x4}]}, 0x401}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000240)) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000280)=0x2) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000200)=0x400) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) openat$md(0xffffffffffffff9c, &(0x7f00000002c0), 0x101080, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x401) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000140)=@multiplanar_fd={0xa0, 0x2, 0x4, 0x2, 0x4, {}, {0x4, 0x8, 0x2, 0x5, 0x5, 0x80, "b399f3ce"}, 0x7, 0x4, {&(0x7f00000000c0)=[{0x6f1e, 0xd6b4, {}, 0x6}, {0x9, 0x2, {}, 0x4}]}, 0x401}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000240)) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000280)=0x2) (async) 21:58:21 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) ioctl$TIOCCONS(r1, 0x541d) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x334, 0x3, 0x1f, 0x2, 0x3f, @broadcast}, 0x10) r2 = syz_open_dev$audion(&(0x7f0000000040), 0x5f4b, 0x8200) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000080)={r3, 0x8001}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) (async) ioctl$TIOCCONS(r1, 0x541d) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x334, 0x3, 0x1f, 0x2, 0x3f, @broadcast}, 0x10) (async) syz_open_dev$audion(&(0x7f0000000040), 0x5f4b, 0x8200) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000080)={r3, 0x8001}) (async) 21:58:21 executing program 1: bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x1b, 0xff, 0x0, 0x2, 0x1, @local}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r2}}, 0x38) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r2}}, 0xc) 21:58:21 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @ib={0x1b, 0x214, 0x3, {"7b565f272f63f45900ca74979df3850d"}, 0x8, 0x6, 0x9}}}, 0x90) 21:58:21 executing program 3: syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) socketpair(0x1d, 0x357cb1b394db3e12, 0x9, &(0x7f0000000000)) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000940)) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000300)) getresuid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r6, &(0x7f00000004c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000540), 0xffffffffffffffff, 0x8}}, 0x18) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000500)) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x810, r6, 0x5) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2808001, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="1361a0bf68f8733d5b2b9cd72e8edffda36bd0cffd1e090a1e9aa3e4d7801a887d", @ANYRESDEC=r2, @ANYBLOB=',dfltuid=', @ANYRESHEX=0xee00, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0, @ANYBLOB="2c657582a5ff003ecc5a62f57cb400b76cdf82f30facbf466ac387c596beb5eea06c444c34463c683359809dcc87b17908d65e0eeb174ea2c926f98b2017037b273645c0b86980594b81faaf8d02112c3fe9e068df1176e1b64955bb88e7965a2b8106a03d1312cfdded713d33f67cb95b17bd00000000000000000000000000000200000000000000", @ANYRESDEC=r3, @ANYBLOB=',subj_user=/dev/input/mice\x00,uid=', @ANYRESDEC=r5, @ANYBLOB=',smackfsdef={/!%C!,fsmagic=0xfffffffffffffffb,\x00']) ioctl$ASHMEM_GET_SIZE(r6, 0x7704, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) (async) socketpair(0x1d, 0x357cb1b394db3e12, 0x9, &(0x7f0000000000)) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) (async) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) (async) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000940)) (async) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000300)) (async) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r6, &(0x7f00000004c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000540), 0xffffffffffffffff, 0x8}}, 0x18) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000500)) (async) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x810, r6, 0x5) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2808001, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="1361a0bf68f8733d5b2b9cd72e8edffda36bd0cffd1e090a1e9aa3e4d7801a887d", @ANYRESDEC=r2, @ANYBLOB=',dfltuid=', @ANYRESHEX=0xee00, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0, @ANYBLOB="2c657582a5ff003ecc5a62f57cb400b76cdf82f30facbf466ac387c596beb5eea06c444c34463c683359809dcc87b17908d65e0eeb174ea2c926f98b2017037b273645c0b86980594b81faaf8d02112c3fe9e068df1176e1b64955bb88e7965a2b8106a03d1312cfdded713d33f67cb95b17bd00000000000000000000000000000200000000000000", @ANYRESDEC=r3, @ANYBLOB=',subj_user=/dev/input/mice\x00,uid=', @ANYRESDEC=r5, @ANYBLOB=',smackfsdef={/!%C!,fsmagic=0xfffffffffffffffb,\x00']) (async) ioctl$ASHMEM_GET_SIZE(r6, 0x7704, 0x0) (async) 21:58:22 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async, rerun: 64) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (rerun: 64) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) (async) ioctl$TIOCCONS(r1, 0x541d) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x334, 0x3, 0x1f, 0x2, 0x3f, @broadcast}, 0x10) (async) r2 = syz_open_dev$audion(&(0x7f0000000040), 0x5f4b, 0x8200) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000080)={r3, 0x8001}) 21:58:22 executing program 2: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4}, 0xc) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x10) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x3, &(0x7f0000000000)=0x2, 0x4) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) r0 = syz_open_dev$audion(&(0x7f00000000c0), 0xfd4e, 0x200) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000180)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) 21:58:22 executing program 1: bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x1b, 0xff, 0x0, 0x2, 0x1, @local}, 0x10) (async, rerun: 64) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (rerun: 64) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r2}}, 0x38) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r2}}, 0xc) 21:58:22 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @ib={0x1b, 0x214, 0x3, {"7b565f272f63f45900ca74979df3850d"}, 0x8, 0x6, 0x9}}}, 0x90) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x13f, 0xa}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @ib={0x1b, 0x214, 0x3, {"7b565f272f63f45900ca74979df3850d"}, 0x8, 0x6, 0x9}}}, 0x90) (async) 21:58:22 executing program 2: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4}, 0xc) (async) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x10) (async) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x3, &(0x7f0000000000)=0x2, 0x4) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) (async) r0 = syz_open_dev$audion(&(0x7f00000000c0), 0xfd4e, 0x200) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000180)) (async) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) 21:58:22 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:58:22 executing program 2: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4}, 0xc) (async) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x10) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x3, &(0x7f0000000000)=0x2, 0x4) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) (async) r0 = syz_open_dev$audion(&(0x7f00000000c0), 0xfd4e, 0x200) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000180)) (async) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) 21:58:22 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x5, 0x4}) 21:58:22 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @ib={0x1b, 0x214, 0x3, {"7b565f272f63f45900ca74979df3850d"}, 0x8, 0x6, 0x9}}}, 0x90) 21:58:22 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) 21:58:22 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000000)) 21:58:22 executing program 1: bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x1b, 0xff, 0x0, 0x2, 0x1, @local}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r2}}, 0x38) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r2}}, 0xc) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x1b, 0xff, 0x0, 0x2, 0x1, @local}, 0x10) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r2}}, 0x38) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r2}}, 0xc) (async) 21:58:22 executing program 4: r0 = socket(0x11, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f00000002c0)=0x576b7220, 0x4) 21:58:22 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000000)) 21:58:23 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:58:23 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000040)=0x101, 0x4) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x4e, 0x3, 0x1, 0x0, 0x18}) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x60c0, 0xad13, 0xfff7, 0x4}}) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000140)={0x3e, 0x7fff, 0x1, 0x80000000, 0x0, "6ff85bc1b0c990cfbd5739259e79dc02e8994f", 0x5, 0x4}) 21:58:23 executing program 4: r0 = socket(0x11, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f00000002c0)=0x576b7220, 0x4) 21:58:23 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) (async) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000000)) 21:58:23 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:58:23 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x5, 0x4}) 21:58:23 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000040)=0x101, 0x4) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x4e, 0x3, 0x1, 0x0, 0x18}) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x60c0, 0xad13, 0xfff7, 0x4}}) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000140)={0x3e, 0x7fff, 0x1, 0x80000000, 0x0, "6ff85bc1b0c990cfbd5739259e79dc02e8994f", 0x5, 0x4}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x0, 0x0) (async) setsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000040)=0x101, 0x4) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x4e, 0x3, 0x1, 0x0, 0x18}) (async) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x60c0, 0xad13, 0xfff7, 0x4}}) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000140)={0x3e, 0x7fff, 0x1, 0x80000000, 0x0, "6ff85bc1b0c990cfbd5739259e79dc02e8994f", 0x5, 0x4}) (async) 21:58:23 executing program 4: r0 = socket(0x11, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f00000002c0)=0x576b7220, 0x4) 21:58:23 executing program 2: socket$bt_cmtp(0x1f, 0x3, 0x5) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) 21:58:23 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x9a800, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) write$cgroup_pressure(r0, &(0x7f00000000c0)={'some', 0x20, 0x7ff, 0x20, 0x4}, 0x2f) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x44240, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0xb38, 0x4a, 0x1, 0x7, 0x11, "2de97ab4089e4109"}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f00000001c0)={0x9, &(0x7f0000000100)=[{@fixed}, {@fixed}, {@fixed}, {}, {}, {@none}, {@fixed}, {@none}, {@none}]}) 21:58:23 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) 21:58:23 executing program 2: socket$bt_cmtp(0x1f, 0x3, 0x5) (async, rerun: 32) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (rerun: 32) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) 21:58:23 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f00000002c0)=0x9, 0x4) 21:58:23 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x9a800, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) write$cgroup_pressure(r0, &(0x7f00000000c0)={'some', 0x20, 0x7ff, 0x20, 0x4}, 0x2f) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x44240, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0xb38, 0x4a, 0x1, 0x7, 0x11, "2de97ab4089e4109"}) (async, rerun: 32) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f00000001c0)={0x9, &(0x7f0000000100)=[{@fixed}, {@fixed}, {@fixed}, {}, {}, {@none}, {@fixed}, {@none}, {@none}]}) 21:58:23 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) 21:58:23 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x9a800, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) write$cgroup_pressure(r0, &(0x7f00000000c0)={'some', 0x20, 0x7ff, 0x20, 0x4}, 0x2f) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x44240, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0xb38, 0x4a, 0x1, 0x7, 0x11, "2de97ab4089e4109"}) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f00000001c0)={0x9, &(0x7f0000000100)=[{@fixed}, {@fixed}, {@fixed}, {}, {}, {@none}, {@fixed}, {@none}, {@none}]}) 21:58:23 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000040)=0x101, 0x4) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x4e, 0x3, 0x1, 0x0, 0x18}) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x60c0, 0xad13, 0xfff7, 0x4}}) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000140)={0x3e, 0x7fff, 0x1, 0x80000000, 0x0, "6ff85bc1b0c990cfbd5739259e79dc02e8994f", 0x5, 0x4}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x0, 0x0) (async) setsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000040)=0x101, 0x4) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x4e, 0x3, 0x1, 0x0, 0x18}) (async) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x60c0, 0xad13, 0xfff7, 0x4}}) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000140)={0x3e, 0x7fff, 0x1, 0x80000000, 0x0, "6ff85bc1b0c990cfbd5739259e79dc02e8994f", 0x5, 0x4}) (async) 21:58:24 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x5, 0x4}) 21:58:24 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f00000002c0)=0x9, 0x4) 21:58:24 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) 21:58:24 executing program 3: ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000000)={@none, 0x4d, 0x81, 0xdd9e}) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) 21:58:24 executing program 2: socket$bt_cmtp(0x1f, 0x3, 0x5) (async) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) 21:58:24 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000140)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000080)=""/180, 0xb4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000000), 0xfdb9) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) 21:58:24 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f00000002c0)=0x9, 0x4) 21:58:24 executing program 3: ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000000)={@none, 0x4d, 0x81, 0xdd9e}) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000000)={@none, 0x4d, 0x81, 0xdd9e}) (async) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) (async) socket$bt_cmtp(0x1f, 0x3, 0x5) (async) 21:58:24 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) 21:58:24 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x3bdc01, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000140)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r2}}, 0x38) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2, 0xfffffffb}}, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000180)={0x100, 0x200}) 21:58:24 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000140)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000080)=""/180, 0xb4}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000000), 0xfdb9) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) 21:58:24 executing program 4: ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000000)=ANY=[@ANYBLOB='W\x00'/86]) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:58:25 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x2, {0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00', 0xa16}}}, 0x38) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:58:25 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) 21:58:25 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x3bdc01, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000140)) (async, rerun: 64) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r2}}, 0x38) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2, 0xfffffffb}}, 0x10) (async, rerun: 64) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (rerun: 64) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) (async) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000180)={0x100, 0x200}) 21:58:25 executing program 3: ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000000)={@none, 0x4d, 0x81, 0xdd9e}) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) 21:58:25 executing program 4: ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000000)=ANY=[@ANYBLOB='W\x00'/86]) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000000)=ANY=[@ANYBLOB='W\x00'/86]) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) 21:58:25 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000140)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000080)=""/180, 0xb4}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000000), 0xfdb9) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) 21:58:25 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xc000, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f00000000c0)={0xd, 0x1}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000280)={0x5d, ""/93}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) getresuid(&(0x7f0000000240)=0x0, &(0x7f0000000100), &(0x7f0000000140)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x82894c7cb00a3b32, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}, {@version_u}, {@debug={'debug', 0x3d, 0x2f41a3da}}], [{@audit}, {@fowner_eq={'fowner', 0x3d, r3}}, {@obj_role={'obj_role', 0x3d, '/dev/ttyS3\x00'}}]}}) ioctl$KDDISABIO(r1, 0x4b37) 21:58:25 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x5, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x300, 0x0, 0x86, 0x8, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:58:25 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000000)=0xd59, 0x4) 21:58:25 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x5, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x300, 0x0, 0x86, 0x8, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:58:25 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xc000, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f00000000c0)={0xd, 0x1}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) (async) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000280)={0x5d, ""/93}) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) (async) getresuid(&(0x7f0000000240)=0x0, &(0x7f0000000100), &(0x7f0000000140)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x82894c7cb00a3b32, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}, {@version_u}, {@debug={'debug', 0x3d, 0x2f41a3da}}], [{@audit}, {@fowner_eq={'fowner', 0x3d, r3}}, {@obj_role={'obj_role', 0x3d, '/dev/ttyS3\x00'}}]}}) (async) ioctl$KDDISABIO(r1, 0x4b37) 21:58:25 executing program 4: ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000000)=ANY=[@ANYBLOB='W\x00'/86]) (async) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:58:26 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x2, {0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00', 0xa16}}}, 0x38) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:58:26 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x5, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x300, 0x0, 0x86, 0x8, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:58:26 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000000)=0xd59, 0x4) 21:58:26 executing program 4: setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) r0 = syz_open_pts(0xffffffffffffffff, 0x111040) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 21:58:26 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x3bdc01, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000140)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r2}}, 0x38) (async) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2, 0xfffffffb}}, 0x10) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) (async) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000180)={0x100, 0x200}) 21:58:26 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xc000, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f00000000c0)={0xd, 0x1}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000280)={0x5d, ""/93}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) getresuid(&(0x7f0000000240)=0x0, &(0x7f0000000100), &(0x7f0000000140)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x82894c7cb00a3b32, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}, {@version_u}, {@debug={'debug', 0x3d, 0x2f41a3da}}], [{@audit}, {@fowner_eq={'fowner', 0x3d, r3}}, {@obj_role={'obj_role', 0x3d, '/dev/ttyS3\x00'}}]}}) ioctl$KDDISABIO(r1, 0x4b37) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xc000, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) (async) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f00000000c0)={0xd, 0x1}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) (async) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000280)={0x5d, ""/93}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) (async) getresuid(&(0x7f0000000240), &(0x7f0000000100), &(0x7f0000000140)) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x82894c7cb00a3b32, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}, {@version_u}, {@debug={'debug', 0x3d, 0x2f41a3da}}], [{@audit}, {@fowner_eq={'fowner', 0x3d, r3}}, {@obj_role={'obj_role', 0x3d, '/dev/ttyS3\x00'}}]}}) (async) ioctl$KDDISABIO(r1, 0x4b37) (async) 21:58:26 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3fe, 0x4) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000080)={r2, 0x5b}) syz_open_dev$audion(&(0x7f0000000040), 0x5, 0x6000) 21:58:26 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000000)=0xd59, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000000)=0xd59, 0x4) (async) 21:58:26 executing program 4: setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) r0 = syz_open_pts(0xffffffffffffffff, 0x111040) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 21:58:26 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x0, 0x200801) syz_open_dev$audion(&(0x7f00000000c0), 0x4, 0x500) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000080)={0x0, 0x20}) 21:58:26 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3fe, 0x4) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000080)={r2, 0x5b}) syz_open_dev$audion(&(0x7f0000000040), 0x5, 0x6000) 21:58:26 executing program 4: setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) r0 = syz_open_pts(0xffffffffffffffff, 0x111040) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 21:58:27 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x2, {0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00', 0xa16}}}, 0x38) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x2, {0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00', 0xa16}}}, 0x38) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) 21:58:27 executing program 1: ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f00000000c0)) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000000)={0xa5, 0x8, 0x4, 0x401}) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000080)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x280903, 0x0) 21:58:27 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) (async) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x0, 0x200801) (async) syz_open_dev$audion(&(0x7f00000000c0), 0x4, 0x500) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000080)={0x0, 0x20}) 21:58:27 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)}) 21:58:27 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3fe, 0x4) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000080)={r2, 0x5b}) syz_open_dev$audion(&(0x7f0000000040), 0x5, 0x6000) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3fe, 0x4) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000080)={r2, 0x5b}) (async) syz_open_dev$audion(&(0x7f0000000040), 0x5, 0x6000) (async) 21:58:27 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18040000", @ANYRES16=0x0, @ANYBLOB="00022abd9921"], 0x18}, 0x1, 0x0, 0x0, 0x41}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80e0}, 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000380)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x1, 0x0, 0x7f, 0x9, "9e11067e72c067298d3871705420b214444874053bb972d9c221e72450c244"}}}, 0x27) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000100)={0x40, 0x1, 0x2}) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000010) 21:58:27 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)}) (async) 21:58:27 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x0, 0x200801) syz_open_dev$audion(&(0x7f00000000c0), 0x4, 0x500) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000080)={0x0, 0x20}) 21:58:27 executing program 1: ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f00000000c0)) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000000)={0xa5, 0x8, 0x4, 0x401}) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000080)) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x280903, 0x0) 21:58:27 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x18a883) 21:58:27 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18040000", @ANYRES16=0x0, @ANYBLOB="00022abd9921"], 0x18}, 0x1, 0x0, 0x0, 0x41}, 0x40) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80e0}, 0x1) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) (async) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000380)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x1, 0x0, 0x7f, 0x9, "9e11067e72c067298d3871705420b214444874053bb972d9c221e72450c244"}}}, 0x27) (async) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000100)={0x40, 0x1, 0x2}) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async, rerun: 32) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000010) (rerun: 32) 21:58:27 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x18a883) 21:58:28 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x21d4b288, 0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)=@userptr={0x9, 0x3, 0x4, 0x2, 0x0, {}, {0x3, 0x8, 0x4, 0x25, 0x76, 0x1, "3ad04c53"}, 0x2, 0x2, {&(0x7f00000000c0)}, 0x7ff}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={0x0, 0x3c}) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f00000002c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, 0x800}}, 0x18) 21:58:28 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)}) 21:58:28 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000000)=0x7) 21:58:28 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x18a883) 21:58:28 executing program 1: ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x6) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f00000000c0)) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000000)={0xa5, 0x8, 0x4, 0x401}) (async) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000080)) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x280903, 0x0) 21:58:28 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18040000", @ANYRES16=0x0, @ANYBLOB="00022abd9921"], 0x18}, 0x1, 0x0, 0x0, 0x41}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80e0}, 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000380)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x1, 0x0, 0x7f, 0x9, "9e11067e72c067298d3871705420b214444874053bb972d9c221e72450c244"}}}, 0x27) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000100)={0x40, 0x1, 0x2}) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000010) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18040000", @ANYRES16=0x0, @ANYBLOB="00022abd9921"], 0x18}, 0x1, 0x0, 0x0, 0x41}, 0x40) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80e0}, 0x1) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) write$bt_hci(0xffffffffffffffff, &(0x7f0000000380)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x1, 0x0, 0x7f, 0x9, "9e11067e72c067298d3871705420b214444874053bb972d9c221e72450c244"}}}, 0x27) (async) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000100)={0x40, 0x1, 0x2}) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000010) (async) 21:58:28 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) ioctl$TIOCCONS(r0, 0x541d) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x2c) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x9, 0x7}, {0x0, 0x4}, {0x4000, 0x5}, {0x0, 0x1}]}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000080)) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0x70, 0x2, 0x8, 0xfff, 0x1a, "e145e2e09014feb0"}) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) 21:58:28 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000200)={&(0x7f00000000c0), &(0x7f0000000100)=""/204, 0xcc}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000040)={0x80000001, 0x4, 0x3f, 0x3}, &(0x7f0000000080)) pipe2$9p(&(0x7f0000000000), 0x80) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) 21:58:28 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x1052c1, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x80000000) 21:58:28 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async, rerun: 32) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000000)=0x7) (rerun: 32) 21:58:28 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$TIOCCONS(r0, 0x541d) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x2c) (async) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x9, 0x7}, {0x0, 0x4}, {0x4000, 0x5}, {0x0, 0x1}]}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000080)) (async) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0x70, 0x2, 0x8, 0xfff, 0x1a, "e145e2e09014feb0"}) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) 21:58:28 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000000)=0x7) 21:58:28 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x21d4b288, 0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)=@userptr={0x9, 0x3, 0x4, 0x2, 0x0, {}, {0x3, 0x8, 0x4, 0x25, 0x76, 0x1, "3ad04c53"}, 0x2, 0x2, {&(0x7f00000000c0)}, 0x7ff}) (async, rerun: 32) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={0x0, 0x3c}) (async, rerun: 32) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f00000002c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, 0x800}}, 0x18) 21:58:28 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @private}, &(0x7f0000000040)=0xc) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) 21:58:28 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000200)={&(0x7f00000000c0), &(0x7f0000000100)=""/204, 0xcc}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000040)={0x80000001, 0x4, 0x3f, 0x3}, &(0x7f0000000080)) pipe2$9p(&(0x7f0000000000), 0x80) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000200)={&(0x7f00000000c0), &(0x7f0000000100)=""/204, 0xcc}) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000040)={0x80000001, 0x4, 0x3f, 0x3}, &(0x7f0000000080)) (async) pipe2$9p(&(0x7f0000000000), 0x80) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) 21:58:28 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x1052c1, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x80000000) 21:58:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) ioctl$TIOCNXCL(r0, 0x540d) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x40, @broadcast}, 0x10) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) setsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f0000000000)=0x4, 0x4) 21:58:28 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$TIOCCONS(r0, 0x541d) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x2c) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x9, 0x7}, {0x0, 0x4}, {0x4000, 0x5}, {0x0, 0x1}]}) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000080)) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0x70, 0x2, 0x8, 0xfff, 0x1a, "e145e2e09014feb0"}) (async) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) 21:58:28 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket(0x3e, 0x800, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, r4, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x32}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4048081}, 0x4) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:58:28 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @private}, &(0x7f0000000040)=0xc) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @private}, &(0x7f0000000040)=0xc) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) (async) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) (async) 21:58:28 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000200)={&(0x7f00000000c0), &(0x7f0000000100)=""/204, 0xcc}) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000040)={0x80000001, 0x4, 0x3f, 0x3}, &(0x7f0000000080)) (async) pipe2$9p(&(0x7f0000000000), 0x80) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) 21:58:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) ioctl$TIOCNXCL(r0, 0x540d) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x40, @broadcast}, 0x10) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) setsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f0000000000)=0x4, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) (async) ioctl$TIOCNXCL(r0, 0x540d) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x40, @broadcast}, 0x10) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) setsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f0000000000)=0x4, 0x4) (async) 21:58:28 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x1052c1, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x80000000) 21:58:29 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket(0x3e, 0x800, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, r4, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x32}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4048081}, 0x4) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) socket(0x3e, 0x800, 0x0) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r2) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x10) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, r4, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x32}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4048081}, 0x4) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) 21:58:29 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x21d4b288, 0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)=@userptr={0x9, 0x3, 0x4, 0x2, 0x0, {}, {0x3, 0x8, 0x4, 0x25, 0x76, 0x1, "3ad04c53"}, 0x2, 0x2, {&(0x7f00000000c0)}, 0x7ff}) (async) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={0x0, 0x3c}) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f00000002c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, 0x800}}, 0x18) 21:58:29 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x17, 0x3, 0x1, 0x5, 0x4, @remote}, 0x10) 21:58:29 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0xd0, 0x40) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x2010, r0, 0x1f) 21:58:29 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @private}, &(0x7f0000000040)=0xc) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @private}, &(0x7f0000000040)=0xc) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) (async) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) (async) 21:58:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) ioctl$TIOCNXCL(r0, 0x540d) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x40, @broadcast}, 0x10) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) setsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f0000000000)=0x4, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) (async) ioctl$TIOCNXCL(r0, 0x540d) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x40, @broadcast}, 0x10) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) setsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f0000000000)=0x4, 0x4) (async) 21:58:29 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket(0x3e, 0x800, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, r4, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x32}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4048081}, 0x4) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) socket(0x3e, 0x800, 0x0) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000500)) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r2) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x10) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, r4, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x32}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4048081}, 0x4) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) 21:58:29 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0xd0, 0x40) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x2010, r0, 0x1f) 21:58:29 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x17, 0x3, 0x1, 0x5, 0x4, @remote}, 0x10) 21:58:29 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x5, &(0x7f0000000040)=0x6, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x0, 0x1, 0x3}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x4000}) 21:58:29 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x80, 0x0, @dev}, 0x10) 21:58:29 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f00000002c0)=0x576b721d, 0x4) 21:58:29 executing program 5: clock_gettime(0x5, &(0x7f0000000040)) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000)=0x3ff, 0x4) 21:58:29 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0xd0, 0x40) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x2010, r0, 0x1f) 21:58:29 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x80, 0x0, @dev}, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x80, 0x0, @dev}, 0x10) (async) 21:58:29 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x17, 0x3, 0x1, 0x5, 0x4, @remote}, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x17, 0x3, 0x1, 0x5, 0x4, @remote}, 0x10) (async) 21:58:29 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f00000002c0)=0x576b721d, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f00000002c0)=0x576b721d, 0x4) (async) 21:58:29 executing program 5: clock_gettime(0x5, &(0x7f0000000040)) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000)=0x3ff, 0x4) 21:58:29 executing program 1: ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000040)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000000)) 21:58:29 executing program 5: clock_gettime(0x5, &(0x7f0000000040)) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000)=0x3ff, 0x4) 21:58:29 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x80, 0x0, @dev}, 0x10) 21:58:30 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x5, &(0x7f0000000040)=0x6, 0x4) (async, rerun: 64) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async, rerun: 64) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x0, 0x1, 0x3}) (async, rerun: 64) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x4000}) (rerun: 64) 21:58:30 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8002) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000040)='-\x00') setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:58:30 executing program 1: ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000040)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000000)) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000040)) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000000)) (async) 21:58:30 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000)=0x3ff, 0x4) 21:58:30 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f00000002c0)=0x576b721d, 0x4) 21:58:30 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @dev, @multicast1}, &(0x7f00000000c0)=0xc) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}]}, 0x40}}, 0x0) 21:58:30 executing program 1: ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000040)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000000)) 21:58:30 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8002) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000040)='-\x00') setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8002) (async) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000040)='-\x00') (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) 21:58:30 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000)=0x3ff, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000)=0x3ff, 0x4) (async) 21:58:30 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 21:58:30 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x5, &(0x7f0000000040)=0x6, 0x4) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x0, 0x1, 0x3}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x4000}) 21:58:30 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @dev, @multicast1}, &(0x7f00000000c0)=0xc) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}]}, 0x40}}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @dev, @multicast1}, &(0x7f00000000c0)=0xc) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}]}, 0x40}}, 0x0) (async) 21:58:30 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000)=0x3ff, 0x4) 21:58:30 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x2000, 0x0) 21:58:30 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 21:58:30 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) 21:58:30 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8002) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000040)='-\x00') setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8002) (async) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000040)='-\x00') (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) 21:58:30 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @dev, @multicast1}, &(0x7f00000000c0)=0xc) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}]}, 0x40}}, 0x0) 21:58:30 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x2000, 0x0) 21:58:30 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 21:58:30 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) syz_init_net_socket$llc(0x1a, 0x0, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) 21:58:30 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) ioctl$KDSKBLED(r1, 0x4b65, 0x1f) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:58:31 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000380), 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000000c0)=@fd={0x6, 0x3, 0x4, 0x100, 0x0, {r2, r3/1000+60000}, {0x1, 0x2, 0x7, 0xff, 0x3f, 0x81, "42f19800"}, 0x5, 0x4, {}, 0x3f, 0x0, r4}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000200)={0x7, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r5, 0xc0406429, &(0x7f0000000340)={r6, 0x1, &(0x7f0000000240)=[0x6], &(0x7f0000000280)=[0x9, 0x0, 0x4, 0x7], 0x22, 0x4, 0x9, &(0x7f00000002c0)=[0xfffffc00, 0x6, 0x2, 0xd3], &(0x7f0000000300)=[0x4b89b152, 0x400, 0x800, 0x800, 0x40, 0x0, 0x6]}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000500)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:58:31 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x8000000, 0xe6ea, 0x2, {0x3, @pix_mp={0x9, 0x0, 0x33424752, 0x8, 0x5, [{0x8, 0x5}, {0x0, 0x81}, {0x1ff, 0x11c8}, {0x8000, 0x5}, {0x6, 0x4553dc55}, {0x1, 0x160}, {0xfffffffb, 0xa57}, {0x7, 0x2}], 0x1, 0x1, 0x6, 0x2, 0x7}}, 0x9}) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000440)=0xa0f, 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000400)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r2, 0x2}}, 0x18) 21:58:31 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) syz_init_net_socket$llc(0x1a, 0x0, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) 21:58:31 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x2000, 0x0) 21:58:31 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) (async) ioctl$KDSKBLED(r1, 0x4b65, 0x1f) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:58:31 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) syz_open_dev$dri(&(0x7f0000000140), 0xfffffffffffffffb, 0xa81a1) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x46b2, 0x4, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000180)={r2}) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000100)) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000500)) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000040)={r5}) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r6, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000500)) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000080)={r5, 0x6}) 21:58:31 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) syz_open_dev$dri(&(0x7f0000000140), 0xfffffffffffffffb, 0xa81a1) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x46b2, 0x4, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000180)={r2}) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000100)) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000500)) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000040)={r5}) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r6, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000500)) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000080)={r5, 0x6}) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) syz_open_dev$dri(&(0x7f0000000140), 0xfffffffffffffffb, 0xa81a1) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x46b2, 0x4, 0x8}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000180)={r2}) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000100)) (async) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000040)={r5}) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r6, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000080)={r5, 0x6}) (async) 21:58:31 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x4, 0x1, 0x1, 0x0, 0x40}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 21:58:31 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000380), 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000000c0)=@fd={0x6, 0x3, 0x4, 0x100, 0x0, {r2, r3/1000+60000}, {0x1, 0x2, 0x7, 0xff, 0x3f, 0x81, "42f19800"}, 0x5, 0x4, {}, 0x3f, 0x0, r4}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000200)={0x7, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r5, 0xc0406429, &(0x7f0000000340)={r6, 0x1, &(0x7f0000000240)=[0x6], &(0x7f0000000280)=[0x9, 0x0, 0x4, 0x7], 0x22, 0x4, 0x9, &(0x7f00000002c0)=[0xfffffc00, 0x6, 0x2, 0xd3], &(0x7f0000000300)=[0x4b89b152, 0x400, 0x800, 0x800, 0x40, 0x0, 0x6]}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000500)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) syz_open_dev$vim2m(&(0x7f0000000380), 0x6, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) clock_gettime(0x0, &(0x7f0000000040)) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000000c0)=@fd={0x6, 0x3, 0x4, 0x100, 0x0, {r2, r3/1000+60000}, {0x1, 0x2, 0x7, 0xff, 0x3f, 0x81, "42f19800"}, 0x5, 0x4, {}, 0x3f, 0x0, r4}) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000200)={0x7, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$DRM_IOCTL_DMA(r5, 0xc0406429, &(0x7f0000000340)={r6, 0x1, &(0x7f0000000240)=[0x6], &(0x7f0000000280)=[0x9, 0x0, 0x4, 0x7], 0x22, 0x4, 0x9, &(0x7f00000002c0)=[0xfffffc00, 0x6, 0x2, 0xd3], &(0x7f0000000300)=[0x4b89b152, 0x400, 0x800, 0x800, 0x40, 0x0, 0x6]}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000140)) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) 21:58:31 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) (async) ioctl$KDSKBLED(r1, 0x4b65, 0x1f) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:58:31 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x88002) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{}, {}, {}]}) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x204000, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) 21:58:31 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) syz_open_dev$dri(&(0x7f0000000140), 0xfffffffffffffffb, 0xa81a1) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x46b2, 0x4, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000180)={r2}) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000100)) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000500)) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000040)={r5}) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r6, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000500)) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000080)={r5, 0x6}) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) syz_open_dev$dri(&(0x7f0000000140), 0xfffffffffffffffb, 0xa81a1) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x46b2, 0x4, 0x8}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000180)={r2}) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000100)) (async) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000040)={r5}) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r6, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f0000000080)={r5, 0x6}) (async) 21:58:31 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) (async, rerun: 32) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (rerun: 32) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async, rerun: 32) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x4, 0x1, 0x1, 0x0, 0x40}) (async, rerun: 64) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (rerun: 64) 21:58:31 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x8000000, 0xe6ea, 0x2, {0x3, @pix_mp={0x9, 0x0, 0x33424752, 0x8, 0x5, [{0x8, 0x5}, {0x0, 0x81}, {0x1ff, 0x11c8}, {0x8000, 0x5}, {0x6, 0x4553dc55}, {0x1, 0x160}, {0xfffffffb, 0xa57}, {0x7, 0x2}], 0x1, 0x1, 0x6, 0x2, 0x7}}, 0x9}) (async) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000440)=0xa0f, 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000400)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r2, 0x2}}, 0x18) 21:58:31 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x88002) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{}, {}, {}]}) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x204000, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) 21:58:31 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000380), 0x6, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000000c0)=@fd={0x6, 0x3, 0x4, 0x100, 0x0, {r2, r3/1000+60000}, {0x1, 0x2, 0x7, 0xff, 0x3f, 0x81, "42f19800"}, 0x5, 0x4, {}, 0x3f, 0x0, r4}) (async) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000200)={0x7, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r5, 0xc0406429, &(0x7f0000000340)={r6, 0x1, &(0x7f0000000240)=[0x6], &(0x7f0000000280)=[0x9, 0x0, 0x4, 0x7], 0x22, 0x4, 0x9, &(0x7f00000002c0)=[0xfffffc00, 0x6, 0x2, 0xd3], &(0x7f0000000300)=[0x4b89b152, 0x400, 0x800, 0x800, 0x40, 0x0, 0x6]}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000140)) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:58:31 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x6) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r3}}, 0x38) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8b}, r3}}, 0x30) 21:58:31 executing program 3: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x46b2, 0x4, 0x8, 0x0, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r3, 0xc01064c4, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, r4, 0x0, r5, r6, 0x0], 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket(0x15, 0x5, 0x5) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000500)) setsockopt$bt_hci_HCI_TIME_STAMP(r7, 0x0, 0x3, 0x0, 0x1e) 21:58:31 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x8000000, 0xe6ea, 0x2, {0x3, @pix_mp={0x9, 0x0, 0x33424752, 0x8, 0x5, [{0x8, 0x5}, {0x0, 0x81}, {0x1ff, 0x11c8}, {0x8000, 0x5}, {0x6, 0x4553dc55}, {0x1, 0x160}, {0xfffffffb, 0xa57}, {0x7, 0x2}], 0x1, 0x1, 0x6, 0x2, 0x7}}, 0x9}) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000440)=0xa0f, 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000400)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r2, 0x2}}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x8000000, 0xe6ea, 0x2, {0x3, @pix_mp={0x9, 0x0, 0x33424752, 0x8, 0x5, [{0x8, 0x5}, {0x0, 0x81}, {0x1ff, 0x11c8}, {0x8000, 0x5}, {0x6, 0x4553dc55}, {0x1, 0x160}, {0xfffffffb, 0xa57}, {0x7, 0x2}], 0x1, 0x1, 0x6, 0x2, 0x7}}, 0x9}) (async) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000440)=0xa0f, 0x4) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000380), 0x2, 0xa}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000400)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r2, 0x2}}, 0x18) (async) 21:58:31 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x88002) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{}, {}, {}]}) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x204000, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) 21:58:31 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x4, 0x1, 0x1, 0x0, 0x40}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x4, 0x1, 0x1, 0x0, 0x40}) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) 21:58:31 executing program 3: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x46b2, 0x4, 0x8, 0x0, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r3, 0xc01064c4, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, r4, 0x0, r5, r6, 0x0], 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket(0x15, 0x5, 0x5) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000500)) setsockopt$bt_hci_HCI_TIME_STAMP(r7, 0x0, 0x3, 0x0, 0x1e) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x46b2, 0x4, 0x8}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r3, 0xc01064c4, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, r4, 0x0, r5, r6, 0x0], 0x9}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) socket(0x15, 0x5, 0x5) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000500)) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r7, 0x0, 0x3, 0x0, 0x1e) (async) 21:58:31 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x6) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r3}}, 0x38) (async) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8b}, r3}}, 0x30) 21:58:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0xde3}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) 21:58:31 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x6, 0x2) r1 = syz_open_dev$audion(&(0x7f00000000c0), 0x5, 0x101) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:58:32 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x6) (async, rerun: 32) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r3}}, 0x38) (async, rerun: 32) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8b}, r3}}, 0x30) (rerun: 32) 21:58:32 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xffffffffffff8001) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000080)='}{4\x00') 21:58:32 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000000)) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0c00, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x4bb1) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000040)=0xa, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) setsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000000080)=0xfff, 0x4) 21:58:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) (async) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0xde3}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) 21:58:32 executing program 3: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x46b2, 0x4, 0x8, 0x0, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r3, 0xc01064c4, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, r4, 0x0, r5, r6, 0x0], 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket(0x15, 0x5, 0x5) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000500)) setsockopt$bt_hci_HCI_TIME_STAMP(r7, 0x0, 0x3, 0x0, 0x1e) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000500)) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x46b2, 0x4, 0x8}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r3, 0xc01064c4, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, r4, 0x0, r5, r6, 0x0], 0x9}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) socket(0x15, 0x5, 0x5) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000500)) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r7, 0x0, 0x3, 0x0, 0x1e) (async) 21:58:32 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) (async) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xffffffffffff8001) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000080)='}{4\x00') 21:58:32 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:58:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) (async) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0xde3}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) 21:58:32 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000000)=""/240) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:58:32 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) (async) 21:58:32 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000000)) (async) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0c00, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x4bb1) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000040)=0xa, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) setsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000000080)=0xfff, 0x4) 21:58:32 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x6, 0x2) r1 = syz_open_dev$audion(&(0x7f00000000c0), 0x5, 0x101) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 21:58:32 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x584000, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x581000, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 21:58:32 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xffffffffffff8001) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000080)='}{4\x00') syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xffffffffffff8001) (async) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000080)='}{4\x00') (async) 21:58:32 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000000)=""/240) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:58:32 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) 21:58:32 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000000)) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0c00, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x4bb1) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000040)=0xa, 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) setsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000000080)=0xfff, 0x4) syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000000)) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0c00, 0x0) (async) ioctl$KDDELIO(r1, 0x4b35, 0x4bb1) (async) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000040)=0xa, 0x4) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) setsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000000080)=0xfff, 0x4) (async) 21:58:32 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000200)=""/57) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000100)=""/255) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000040)={0x0, 0x30}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x24000, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) ioctl$TIOCSBRK(r3, 0x5427) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f00000002c0)=0x576b721d, 0x4) r4 = syz_open_dev$audion(&(0x7f0000000000), 0x9, 0x200a00) ioctl$TIOCGISO7816(r4, 0x80285442, &(0x7f00000000c0)) 21:58:32 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000240)) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x3, @pix={0x1, 0x1, 0x20363059, 0x7, 0x81, 0x17, 0x5, 0x1, 0x0, 0x0, 0x1, 0x2}}) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000000)=0x5) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$llc_int(r2, 0x10c, 0x3, &(0x7f0000000200)=0x5f0, 0x4) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x7ff) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x3b, 0x8, @dev}, 0x10) 21:58:32 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x6, 0x2) r1 = syz_open_dev$audion(&(0x7f00000000c0), 0x5, 0x101) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x6, 0x2) (async) syz_open_dev$audion(&(0x7f00000000c0), 0x5, 0x101) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) (async) 21:58:32 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000200)=""/57) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000100)=""/255) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000040)={0x0, 0x30}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x24000, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) ioctl$TIOCSBRK(r3, 0x5427) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f00000002c0)=0x576b721d, 0x4) r4 = syz_open_dev$audion(&(0x7f0000000000), 0x9, 0x200a00) ioctl$TIOCGISO7816(r4, 0x80285442, &(0x7f00000000c0)) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000200)=""/57) (async) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) (async) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000100)=""/255) (async) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000040)={0x0, 0x30}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x24000, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) (async) ioctl$TIOCSBRK(r3, 0x5427) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f00000002c0)=0x576b721d, 0x4) (async) syz_open_dev$audion(&(0x7f0000000000), 0x9, 0x200a00) (async) ioctl$TIOCGISO7816(r4, 0x80285442, &(0x7f00000000c0)) (async) 21:58:33 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x584000, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x581000, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x584000, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x581000, 0x0) (async) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) (async) 21:58:33 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000000)=""/240) (async, rerun: 64) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (rerun: 64) 21:58:33 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000240)) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x3, @pix={0x1, 0x1, 0x20363059, 0x7, 0x81, 0x17, 0x5, 0x1, 0x0, 0x0, 0x1, 0x2}}) (async) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000000)=0x5) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$llc_int(r2, 0x10c, 0x3, &(0x7f0000000200)=0x5f0, 0x4) (async) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x7ff) (async) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x3b, 0x8, @dev}, 0x10) 21:58:33 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r1) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000600)={&(0x7f00000004c0), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r4, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x20000001) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000400)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)={0x14, r3, 0x300, 0x70bd29, 0x25dfdbfb}, 0xc}, 0x1, 0x0, 0x0, 0x240440c0}, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r1) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x90, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x87}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x20008044) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x119000, 0x0) ioctl$TCSETAF(r6, 0x5408, &(0x7f0000000180)={0xfff7, 0x3, 0x800, 0x7, 0x2, "053a612ecdfa0764"}) ioctl$KDDISABIO(r6, 0x4b37) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000040)="779b4099b688e0dfb3935264a1ba655658ac9eaa7316720d21bf8f1dde7c521bf7b19d8a1cf46eb1eff3de0083da945cab840b2e4e32b6e8ee55c74e5aaa81e5f69332ca619e5e03ed2f100742a0c44e6b73e0e382027ef9a785f872eb8cc43b9d66348f4e367a34efc4ec5b55d0ec6a74929385c6c9d76faaa2e5ad0318b0d61dcce05401eea8a2b6c57b1e1c4bd4c76586d3571ed81a66f577a98cb7d53016f6bfece7cfb3c09b77ac7c9f491cce0a865c7ef6921a930b8fe738eeb96b414d6d0e6a77fe2fa3491680") socket(0x10, 0x1, 0x8) 21:58:33 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x42, 0x82200) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f00000000c0)) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000040)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:58:33 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000200)=""/57) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000100)=""/255) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000040)={0x0, 0x30}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x24000, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) ioctl$TIOCSBRK(r3, 0x5427) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f00000002c0)=0x576b721d, 0x4) r4 = syz_open_dev$audion(&(0x7f0000000000), 0x9, 0x200a00) ioctl$TIOCGISO7816(r4, 0x80285442, &(0x7f00000000c0)) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000200)=""/57) (async) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) (async) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000100)=""/255) (async) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000040)={0x0, 0x30}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x24000, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) (async) ioctl$TIOCSBRK(r3, 0x5427) (async) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f00000002c0)=0x576b721d, 0x4) (async) syz_open_dev$audion(&(0x7f0000000000), 0x9, 0x200a00) (async) ioctl$TIOCGISO7816(r4, 0x80285442, &(0x7f00000000c0)) (async) 21:58:33 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r1) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x10) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000600)={&(0x7f00000004c0), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r4, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x20000001) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000400)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)={0x14, r3, 0x300, 0x70bd29, 0x25dfdbfb}, 0xc}, 0x1, 0x0, 0x0, 0x240440c0}, 0x10) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r1) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x90, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x87}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x20008044) (async) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x119000, 0x0) ioctl$TCSETAF(r6, 0x5408, &(0x7f0000000180)={0xfff7, 0x3, 0x800, 0x7, 0x2, "053a612ecdfa0764"}) (async) ioctl$KDDISABIO(r6, 0x4b37) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000040)="779b4099b688e0dfb3935264a1ba655658ac9eaa7316720d21bf8f1dde7c521bf7b19d8a1cf46eb1eff3de0083da945cab840b2e4e32b6e8ee55c74e5aaa81e5f69332ca619e5e03ed2f100742a0c44e6b73e0e382027ef9a785f872eb8cc43b9d66348f4e367a34efc4ec5b55d0ec6a74929385c6c9d76faaa2e5ad0318b0d61dcce05401eea8a2b6c57b1e1c4bd4c76586d3571ed81a66f577a98cb7d53016f6bfece7cfb3c09b77ac7c9f491cce0a865c7ef6921a930b8fe738eeb96b414d6d0e6a77fe2fa3491680") (async) socket(0x10, 0x1, 0x8) 21:58:33 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x584000, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x581000, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 21:58:33 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000240)) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x3, @pix={0x1, 0x1, 0x20363059, 0x7, 0x81, 0x17, 0x5, 0x1, 0x0, 0x0, 0x1, 0x2}}) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000000)=0x5) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$llc_int(r2, 0x10c, 0x3, &(0x7f0000000200)=0x5f0, 0x4) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x7ff) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x3b, 0x8, @dev}, 0x10) syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000240)) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x3, @pix={0x1, 0x1, 0x20363059, 0x7, 0x81, 0x17, 0x5, 0x1, 0x0, 0x0, 0x1, 0x2}}) (async) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000000)=0x5) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) setsockopt$llc_int(r2, 0x10c, 0x3, &(0x7f0000000200)=0x5f0, 0x4) (async) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x7ff) (async) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x3b, 0x8, @dev}, 0x10) (async) 21:58:33 executing program 4: write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x18, 0x0, [0x7, 0x3, 0x8, 0x6, 0x83, 0x7, 0xbd, 0x3, 0x486c12bb, 0x20, 0x81, 0x1ff, 0x400, 0x10000, 0x6, 0x6]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x8, 0x8, 0xc85, 0x8, 0x200, 0x80000000, 0x5, 0x80000000, 0x1, 0x10001, 0x0, 0x623aee03, 0x3]}, {0x1a, 0x0, [0x80000000, 0xfffffff6, 0x7fffffff, 0x7, 0x1, 0x100, 0x5c, 0x1, 0x7fffffff, 0x2, 0x7b0, 0x1f, 0xf754, 0xfffffffe, 0x5, 0x4]}, {0x0, 0x0, [0xffffffff, 0x7ff, 0xfc000, 0x7fff, 0x2, 0xffffffff, 0x401, 0xba2, 0x9, 0x1ff, 0x0, 0xb2, 0x4, 0x3, 0x4, 0x200]}, {0xc, 0x0, [0xe22, 0x40ffff, 0x3ff, 0x3, 0x0, 0x1, 0x8, 0x3, 0xb, 0x7f, 0xd5, 0x2, 0x5, 0x6, 0x7, 0x4]}], 0xffffffffffffffff, 0x1, 0x1, 0x168}}, 0x20) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket(0x29, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x1) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x3) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000500)) socket$inet(0x2, 0x6, 0x100) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) r6 = syz_open_dev$audion(&(0x7f00000004c0), 0x91, 0x208801) ioctl$DRM_IOCTL_DMA(r6, 0xc0406429, &(0x7f0000000640)={0x0, 0x9, &(0x7f0000000540)=[0x0, 0x6, 0x1c, 0xb6f7, 0x1ffc0000, 0x1ff, 0x108a, 0xfffeffff, 0x101], &(0x7f0000000580)=[0x33, 0x80000000, 0x10000, 0x8001, 0x6, 0x3, 0x4, 0x20, 0x5], 0x2, 0x1, 0x3f, &(0x7f00000005c0)=[0x0], &(0x7f0000000600)}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000500)) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000480)={0xb, 0x10, 0xfa00, {&(0x7f0000000180), r7, 0x1}}, 0x18) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000000)={0x8003, 0x0, 0xfff7, 0x4, 0x19, "004a2cf0888bcbc3"}) 21:58:33 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400002, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000040)="b3e494de532ef94f5933d85be5975fd08b876b8681a3a7844836a3549a72d19ef002a2eeb4eb5440aebdbfb21b2d9ec9a3724b454c94ff0877e66d2afa9e914e1c8e29dbecebd027f75b96d0b818ceb2ae985e5a671c2ecc2bc0e1972549b538fdb7ce04db437dd1adc7333473cb67481beb6e1d1a365949d1d9bd4b1210662a15426f698dc761875edcff20ce0832cba54e093bda2938fa33e2f4479ae5b7ce7bd73f2a0a6161f58eb6704f2b28c79d3cadf4f101183cf1b73b0d5b357a06") ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x1b, 0x10, 0x1c, &(0x7f0000000100)="111027ad5ea1afa7da6255cbab3ab33d10c8b39f3457b496261a2f2654e7fe76e67f9e2faf909fb7c78261ce22cc29aef55ccc8f4d145e0fafc19239172c7d2dd25d80be1654533c8e37422b528d33e104bd8d826f2898af1939d2dc021c6413d97989cf6d6cee89f6cdcbed7550606bd64ea9c470c053e294547ad20dfaf0451a0efa2c15ea267cbacd8287d4e55387eae5f02f4242d43183911dd177cc1e2a6c2fd2373dd3d5746db0b598195f0c464af6f9617077ef7d8cffdf833f40a1c4666fc452b8c30e74d058c7b1afebeee971a1aa4e6ad2518cf4794026e44d61e82c29a9d99fb367cd6892c6daa123774d05387b036c6d9f3a4e5bab31cdb7dad7b2fe2e730e90cf4f2d196d05e790b265711015f714eec4b6adf7383260b76bc4e4f701bafcffdd65a5b39fb0096bd19722f5ab1badacc293a0da9f96724fcecba58c945de4031f343f50e4e6ae1b12c4305a26cac2c136d005d476e36b1e434a0f79628ef98c0485db2f4d5bbccd269372180c238e2051826849fbc43dce8338c6bce50995fb47bf6916f822565530939ab581cbcb05ecc86a6eb8d7c882a3133a05138ef8e5b42077cf261cdaeeb38b5466ce64855961fe4f5a9c86c011baa317030ec8131e104dd7f31b0d506a00835b8bb9798ab67bdd79ac9c45835cb3221ee46d129786bebfa90eaf9a6fb6271e343e390f03b4f5d736f6592861ff00766dd441aecf12bba9752985e32b009acf1e4ce4e54189680e7a387acefb764623b59d39dc95519cb8a7af0f742317f3781f1a7108ee646a473b4b476f3e82a18ed91e8b4d3c68561a2e158ec48be2626d1a45a6c240767a9e9d621376068b5224d45808846b726811335b9f221e1f5c5312c21897e5ad232a9f0a55a242bb430d121047bcb42dd81804ca171e90667d7895934c331df40af780fb4f0f4ed38203f01a73971f1e417a00ac9a0b64fc63a7d0c88883b79194cd5949ac28393f028c05de353cd073e257cb1b4811d6207c91f2c1c77f886601a5a252c5290740b01b9156b8ce63b03235abfc34712bd7e49d070e13af546cb74151c6e026668ee0944e077577e3d8296388ec8e73876e464a6d6735b126be8f48a854acc424cdc5003fe39f9ca950fe386742ea29bae95fb7c460eba3afe6dd9131e7d5f4c285001fa2c8f310bb5631d2d90125e993b5cfa6c65521f8badca2a575d9465c7c66ba146b48b8b5530fc6a8b80a68fb07b9f1c434ea4f1c732f2816096b8d00d989e3414b147d1596c313c8de3ebb5e0e14526503bd2cf56876c178f3a4608a6d5f32220429f130373d284a4765e1fd2a6197b25d17e5365856ee474f7690052aa84673213357810fbc1670fca7a469f560d274a41102c45d21f54aa1c7df85e05959434dd8ca5d7ad0266abb9b741c7e38d34ad0132183d34f799da463d3fcf3ceea1f"}) 21:58:33 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x42, 0x82200) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f00000000c0)) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000040)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$audion(&(0x7f0000000080), 0x42, 0x82200) (async) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000040)) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) 21:58:33 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000000c0)) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000100)="dcb867be436abff3d5eb73423c34cc77cf04d6cc31cf99bde8a8161f6d78a9c1de728d92a1b5d1f7e0d1f31486a9f6ace83bfa9ca0a6ba3c2530dfb0433a4e033024f1c4dd70af1d4ca8cd6aea80424f5d0a4a0637270568879a776cacd1675f28f84036ec74c39d6b2902ad5b24e6c9591d29daea309ceaa8155c97da452f9981c79093b0f57f8eba995da5c303bbfbe3d2a1bcb500f094dd4c01465ed9d751af5dbda74f86f941") r4 = syz_open_dev$audion(&(0x7f0000000000), 0x10000, 0x1) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0x18) 21:58:33 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x3ff, 0x4) (async) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000500)) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r1) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x10) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000600)={&(0x7f00000004c0), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r4, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x20000001) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000400)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)={0x14, r3, 0x300, 0x70bd29, 0x25dfdbfb}, 0xc}, 0x1, 0x0, 0x0, 0x240440c0}, 0x10) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r1) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x90, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x87}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x20008044) (async) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) (async) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x119000, 0x0) ioctl$TCSETAF(r6, 0x5408, &(0x7f0000000180)={0xfff7, 0x3, 0x800, 0x7, 0x2, "053a612ecdfa0764"}) (async) ioctl$KDDISABIO(r6, 0x4b37) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) (async) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000040)="779b4099b688e0dfb3935264a1ba655658ac9eaa7316720d21bf8f1dde7c521bf7b19d8a1cf46eb1eff3de0083da945cab840b2e4e32b6e8ee55c74e5aaa81e5f69332ca619e5e03ed2f100742a0c44e6b73e0e382027ef9a785f872eb8cc43b9d66348f4e367a34efc4ec5b55d0ec6a74929385c6c9d76faaa2e5ad0318b0d61dcce05401eea8a2b6c57b1e1c4bd4c76586d3571ed81a66f577a98cb7d53016f6bfece7cfb3c09b77ac7c9f491cce0a865c7ef6921a930b8fe738eeb96b414d6d0e6a77fe2fa3491680") (async, rerun: 32) socket(0x10, 0x1, 0x8) (rerun: 32) 21:58:33 executing program 0: r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) syz_open_pts(r0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10000001ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x1}) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000200)=0x1) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x200009, 0x5, 0x4, {0x1, @sliced={0x7eb7, [0x7fff, 0x4, 0x0, 0x8f7, 0x4, 0xd996, 0x7fff, 0x8, 0x7, 0x0, 0xbffb, 0x3, 0x7ff, 0x6, 0x0, 0x8, 0xbe, 0x401, 0xa, 0x6, 0x9, 0x5, 0xffdd, 0x7, 0x2003, 0xfff, 0x0, 0x0, 0x3, 0x7c61, 0x6, 0x3, 0x92, 0x2, 0x8a08, 0x7f, 0x614e, 0x5, 0x81, 0x4, 0x800, 0x5b2, 0xfc00, 0x9, 0x40, 0xad, 0xfffd, 0x1], 0x81}}, 0x7ff}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000300)={0x4, 0x20, 0x4, {0x0, @pix={0x7, 0x1, 0x47504a50, 0x7, 0xe8c, 0x73, 0x1, 0x200, 0x1, 0x3, 0x0, 0x5}}, 0x8}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000540)={0x400, 0x3, 0x1, {0x2, @pix_mp={0x97, 0x0, 0x32314d54, 0x3, 0x2, [{0x6, 0xe30c}, {0x9, 0x13}, {0xfffff792, 0xcd}, {0xdca, 0xef2}, {0xa00000, 0x7}, {0x8, 0x98f}, {0x8, 0x6}, {0x8, 0x8}], 0x1, 0x61, 0x0, 0x0, 0x5}}, 0x44000000}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000500)) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r6, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r7}}, 0x38) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x100, @private0, 0xb3}, {0xa, 0x4e22, 0x10004, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, r7, 0xd0d}}, 0x48) syz_open_dev$ptys(0xc, 0x3, 0x1) 21:58:33 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = syz_open_dev$audion(&(0x7f0000000080), 0x42, 0x82200) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f00000000c0)) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000040)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:58:33 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) (async) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000000c0)) (async) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000100)="dcb867be436abff3d5eb73423c34cc77cf04d6cc31cf99bde8a8161f6d78a9c1de728d92a1b5d1f7e0d1f31486a9f6ace83bfa9ca0a6ba3c2530dfb0433a4e033024f1c4dd70af1d4ca8cd6aea80424f5d0a4a0637270568879a776cacd1675f28f84036ec74c39d6b2902ad5b24e6c9591d29daea309ceaa8155c97da452f9981c79093b0f57f8eba995da5c303bbfbe3d2a1bcb500f094dd4c01465ed9d751af5dbda74f86f941") r4 = syz_open_dev$audion(&(0x7f0000000000), 0x10000, 0x1) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0x18) 21:58:33 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400002, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000040)="b3e494de532ef94f5933d85be5975fd08b876b8681a3a7844836a3549a72d19ef002a2eeb4eb5440aebdbfb21b2d9ec9a3724b454c94ff0877e66d2afa9e914e1c8e29dbecebd027f75b96d0b818ceb2ae985e5a671c2ecc2bc0e1972549b538fdb7ce04db437dd1adc7333473cb67481beb6e1d1a365949d1d9bd4b1210662a15426f698dc761875edcff20ce0832cba54e093bda2938fa33e2f4479ae5b7ce7bd73f2a0a6161f58eb6704f2b28c79d3cadf4f101183cf1b73b0d5b357a06") ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x1b, 0x10, 0x1c, &(0x7f0000000100)="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"}) 21:58:33 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket(0x1d, 0x3, 0xffff011a) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000840) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:58:34 executing program 5: ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0x7, 0x6, 0x800, 0x4, 0x17, "1ed273bb2bc54b78"}) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000080)=0x3ff, 0x4) 21:58:34 executing program 4: write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x18, 0x0, [0x7, 0x3, 0x8, 0x6, 0x83, 0x7, 0xbd, 0x3, 0x486c12bb, 0x20, 0x81, 0x1ff, 0x400, 0x10000, 0x6, 0x6]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x8, 0x8, 0xc85, 0x8, 0x200, 0x80000000, 0x5, 0x80000000, 0x1, 0x10001, 0x0, 0x623aee03, 0x3]}, {0x1a, 0x0, [0x80000000, 0xfffffff6, 0x7fffffff, 0x7, 0x1, 0x100, 0x5c, 0x1, 0x7fffffff, 0x2, 0x7b0, 0x1f, 0xf754, 0xfffffffe, 0x5, 0x4]}, {0x0, 0x0, [0xffffffff, 0x7ff, 0xfc000, 0x7fff, 0x2, 0xffffffff, 0x401, 0xba2, 0x9, 0x1ff, 0x0, 0xb2, 0x4, 0x3, 0x4, 0x200]}, {0xc, 0x0, [0xe22, 0x40ffff, 0x3ff, 0x3, 0x0, 0x1, 0x8, 0x3, 0xb, 0x7f, 0xd5, 0x2, 0x5, 0x6, 0x7, 0x4]}], 0xffffffffffffffff, 0x1, 0x1, 0x168}}, 0x20) (async) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket(0x29, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x1) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x3) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000002c0)=0x576b721d, 0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000500)) socket$inet(0x2, 0x6, 0x100) (async) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x0) (async) r6 = syz_open_dev$audion(&(0x7f00000004c0), 0x91, 0x208801) ioctl$DRM_IOCTL_DMA(r6, 0xc0406429, &(0x7f0000000640)={0x0, 0x9, &(0x7f0000000540)=[0x0, 0x6, 0x1c, 0xb6f7, 0x1ffc0000, 0x1ff, 0x108a, 0xfffeffff, 0x101], &(0x7f0000000580)=[0x33, 0x80000000, 0x10000, 0x8001, 0x6, 0x3, 0x4, 0x20, 0x5], 0x2, 0x1, 0x3f, &(0x7f00000005c0)=[0x0], &(0x7f0000000600)}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000500)) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000480)={0xb, 0x10, 0xfa00, {&(0x7f0000000180), r7, 0x1}}, 0x18) (async, rerun: 64) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) (async, rerun: 64) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000000)={0x8003, 0x0, 0xfff7, 0x4, 0x19, "004a2cf0888bcbc3"}) 21:58:34 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000000c0)) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000100)="dcb867be436abff3d5eb73423c34cc77cf04d6cc31cf99bde8a8161f6d78a9c1de728d92a1b5d1f7e0d1f31486a9f6ace83bfa9ca0a6ba3c2530dfb0433a4e033024f1c4dd70af1d4ca8cd6aea80424f5d0a4a0637270568879a776cacd1675f28f84036ec74c39d6b2902ad5b24e6c9591d29daea309ceaa8155c97da452f9981c79093b0f57f8eba995da5c303bbfbe3d2a1bcb500f094dd4c01465ed9d751af5dbda74f86f941") r4 = syz_open_dev$audion(&(0x7f0000000000), 0x10000, 0x1) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000940)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) (async) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000940)) (async) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000000c0)) (async) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000100)="dcb867be436abff3d5eb73423c34cc77cf04d6cc31cf99bde8a8161f6d78a9c1de728d92a1b5d1f7e0d1f31486a9f6ace83bfa9ca0a6ba3c2530dfb0433a4e033024f1c4dd70af1d4ca8cd6aea80424f5d0a4a0637270568879a776cacd1675f28f84036ec74c39d6b2902ad5b24e6c9591d29daea309ceaa8155c97da452f9981c79093b0f57f8eba995da5c303bbfbe3d2a1bcb500f094dd4c01465ed9d751af5dbda74f86f941") (async) syz_open_dev$audion(&(0x7f0000000000), 0x10000, 0x1) (async) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0x18) (async) 21:58:34 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket(0x1d, 0x3, 0xffff011a) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000840) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 21:58:34 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400002, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000040)="b3e494de532ef94f5933d85be5975fd08b876b8681a3a7844836a3549a72d19ef002a2eeb4eb5440aebdbfb21b2d9ec9a3724b454c94ff0877e66d2afa9e914e1c8e29dbecebd027f75b96d0b818ceb2ae985e5a671c2ecc2bc0e1972549b538fdb7ce04db437dd1adc7333473cb67481beb6e1d1a365949d1d9bd4b1210662a15426f698dc761875edcff20ce0832cba54e093bda2938fa33e2f4479ae5b7ce7bd73f2a0a6161f58eb6704f2b28c79d3cadf4f101183cf1b73b0d5b357a06") ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x1b, 0x10, 0x1c, &(0x7f0000000100)="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"}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400002, 0x0) (async) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000040)="b3e494de532ef94f5933d85be5975fd08b876b8681a3a7844836a3549a72d19ef002a2eeb4eb5440aebdbfb21b2d9ec9a3724b454c94ff0877e66d2afa9e914e1c8e29dbecebd027f75b96d0b818ceb2ae985e5a671c2ecc2bc0e1972549b538fdb7ce04db437dd1adc7333473cb67481beb6e1d1a365949d1d9bd4b1210662a15426f698dc761875edcff20ce0832cba54e093bda2938fa33e2f4479ae5b7ce7bd73f2a0a6161f58eb6704f2b28c79d3cadf4f101183cf1b73b0d5b357a06") (async) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x1b, 0x10, 0x1c, &(0x7f0000000100)="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"}) (async) 21:58:34 executing program 5: ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0x7, 0x6, 0x800, 0x4, 0x17, "1ed273bb2bc54b78"}) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000080)=0x3ff, 0x4) 21:58:34 executing program 1: syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x1a9401, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = syz_open_pts(r0, 0x181000) ioctl$TIOCNXCL(r1, 0x540d) [ 2898.819241] BUG: unable to handle kernel NULL pointer dereference at 0000000000000020 [ 2898.827250] IP: vb2_vmalloc_put+0x9/0x60 [ 2898.831300] PGD a75d9067 P4D a75d9067 PUD 5b026067 PMD 0 [ 2898.836864] Oops: 0002 [#1] PREEMPT SMP KASAN [ 2898.841346] Modules linked in: [ 2898.844531] CPU: 0 PID: 31314 Comm: syz-executor.0 Not tainted 4.14.292-syzkaller #0 [ 2898.852387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2898.861726] task: ffff8880616ee040 task.stack: ffff888093570000 [ 2898.867777] RIP: 0010:vb2_vmalloc_put+0x9/0x60 [ 2898.872403] RSP: 0018:ffff888093577900 EFLAGS: 00010246 [ 2898.877862] RAX: 0000000000040000 RBX: ffff8880aac38540 RCX: ffffc90007ff4000 [ 2898.885131] RDX: 0000000000040000 RSI: ffffffff84c20ac9 RDI: 0000000000000000 [ 2898.892380] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2898.899758] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2898.907020] R13: ffff8880aac38554 R14: 0000000000000000 R15: ffffffff84c20ac0 [ 2898.914328] FS: 00007f559a27b700(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000 [ 2898.922536] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2898.928393] CR2: 0000000000000020 CR3: 0000000059dda000 CR4: 00000000003406f0 [ 2898.935650] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2898.942897] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2898.950147] Call Trace: [ 2898.952744] __vb2_buf_mem_free+0xfa/0x1d0 [ 2898.957004] __vb2_queue_free+0x60d/0x7a0 [ 2898.961153] vb2_core_reqbufs+0x1cc/0x910 [ 2898.965300] ? vb2_core_streamoff+0xd0/0xd0 [ 2898.969600] ? trace_hardirqs_on+0x10/0x10 [ 2898.973814] vb2_ioctl_reqbufs+0x1b6/0x320 [ 2898.978031] v4l_reqbufs+0x98/0xc0 [ 2898.981557] __video_do_ioctl+0x65b/0x6a0 [ 2898.985693] ? video_ioctl2+0x30/0x30 [ 2898.989474] ? __might_fault+0x177/0x1b0 [ 2898.993511] ? video_ioctl2+0x30/0x30 [ 2898.997304] video_usercopy+0xfd/0xe70 [ 2899.001188] ? v4l_g_ctrl+0x390/0x390 [ 2899.004983] ? trace_hardirqs_on+0x10/0x10 [ 2899.009215] ? lock_downgrade+0x740/0x740 [ 2899.013347] v4l2_ioctl+0x1bb/0x2f0 [ 2899.016985] ? v4l2_open+0x2f0/0x2f0 [ 2899.020693] do_vfs_ioctl+0x75a/0xff0 [ 2899.024488] ? lock_acquire+0x170/0x3f0 [ 2899.028443] ? ioctl_preallocate+0x1a0/0x1a0 [ 2899.032832] ? __fget+0x265/0x3e0 [ 2899.036266] ? do_vfs_ioctl+0xff0/0xff0 [ 2899.040219] ? security_file_ioctl+0x83/0xb0 [ 2899.044627] SyS_ioctl+0x7f/0xb0 [ 2899.047970] ? do_vfs_ioctl+0xff0/0xff0 [ 2899.051928] do_syscall_64+0x1d5/0x640 [ 2899.055794] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2899.060962] RIP: 0033:0x7f559b948409 [ 2899.064653] RSP: 002b:00007f559a27b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2899.072333] RAX: ffffffffffffffda RBX: 00007f559ba5b120 RCX: 00007f559b948409 [ 2899.079577] RDX: 00000000200001c0 RSI: 00000000c0145608 RDI: 0000000000000003 [ 2899.086832] RBP: 00007f559b9a3367 R08: 0000000000000000 R09: 0000000000000000 [ 2899.094080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2899.101339] R13: 00007ffe3656eeff R14: 00007f559a27b300 R15: 0000000000022000 [ 2899.108598] Code: e9 ca fc ff ff e8 88 f3 bc fc e9 96 fc ff ff e8 ae f5 bc fc e9 fd fe ff ff 66 0f 1f 84 00 00 00 00 00 55 48 89 fd e8 f7 3c 93 fc ff 4d 20 0f 88 3d c3 5f 02 74 06 5d e9 e5 3c 93 fc e8 e0 3c [ 2899.127785] RIP: vb2_vmalloc_put+0x9/0x60 RSP: ffff888093577900 [ 2899.133817] CR2: 0000000000000020 [ 2899.137247] ---[ end trace 4b24e1580361d411 ]--- [ 2899.141978] Kernel panic - not syncing: Fatal exception [ 2899.147551] Kernel Offset: disabled [ 2899.151196] Rebooting in 86400 seconds..