msg$NL80211_CMD_CONNECT(r6, &(0x7f0000013980)={&(0x7f0000013840), 0xc, &(0x7f0000013940)={&(0x7f0000013880)={0xa0, r8, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x44}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3f}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x6b, 0x115, "aaec76352b3afce6c5e7a6ba24d54d4fdba88a8514d360666079bc6dcd2624d8051b58c4763f0600b51016d618456cccadccc0e52e744c7ad1ca57eedb7bcc871337d08d5761b17a5f68a1b68e3566eaa1264a96a0af6d45c370fdb4f98cb38889f3263ebffb45"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xa0}}, 0x24008801) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000013140)={0x3c8, r9, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xe7, 0x4}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_FILS_ERP_REALM={0xb7, 0xfa, "e755aefe823672e72618b4eb858aa4f3c7fea8535d7b8fb2f150dc39233fa42b5474330e047f9cfe8ae96fae24c44ae940a887c00a5822fc43316912ab76ac5288c63ec083c395f90c867aec2cd9c58ecc352c298aaa259e98c22d283567c19a752d26f83f36ff4387546a21de9bc434b781dd46f55543c7b3131c5880842b93db0f39cabd4ad3a64fc16548416a4d3f2bd80af0dd666e03cfe015a5b569d52463b03493e882501e8e8a0a3daf18fdd477c2bf"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "18783be1"}, @NL80211_ATTR_FILS_ERP_RRK={0xa2, 0xfc, "ec4a315a3c5bfc7b17a06b983990139d8bff3390155cabf80d6761e1fb82f89edd36d816ecbbea3954bef3a209afdc3c4a0116d1616a1f9a41f7df82594507f8d1ba4189e5ff02bcf25a3ac2fa3490042879b5fc922435ef180429e132c223847ec6a20bfc732997879bde75d13ed744fe3d670a0daf161373bd6cadec24765360f379e810e4842c45c45d8b4cdc918a777bf0981f23a4109db7ce51f150"}, @NL80211_ATTR_FILS_ERP_REALM={0xc0, 0xfa, "61edf10b52ed29ca4ca19ee03e416606356785d98e1bdbe40097de807ea28fd1b5b15dfe24bfd6b6ba2ae20ef39e6198326bd97f6e64b3cba17d4f6de041d62b1524fac150c84b2c7317b152238a09f80459643f0c353fe24b8572bb8e2e3415b38969e6197cd1980f7d726c3655ad20ae5e32383232463aefcd8f93bca718ad7a122cd71de61048c90405033ab1f0c737bd7343666dc236d50a4a0c421c1d876799ffa37ee5ab97a2b1272595830b33a2afb33fd315f95b30fd4d2f"}, @NL80211_ATTR_FILS_ERP_REALM={0x42, 0xfa, "9ab6d3559bf625008020e483dd66f01a34313f8adc68636e04a1f23f3d8de8f37c32ccfded067eae7ee77d60bd74990481afdf2d1a0b89ce1204729d93a5"}, @NL80211_ATTR_FILS_ERP_REALM={0x68, 0xfa, "b577a44fcc29fa8805fbf5842c9636a7615dd950213bdfc82ad6b45a2cd0c2cfc463a50af0007dc1d4f8e460280a50ac8514763ded78080025db845f459f0e3a9adff52b28750b780303534a8cbc5cc5f67125b34eb195aadf731ae2f52973c4b61d2841"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2d8e}], @NL80211_ATTR_IE={0x98, 0x2a, [@gcr_ga={0xbd, 0x6, @broadcast}, @measure_req={0x26, 0x7e, {0x7f, 0x3f, 0x81, "02fc809744dcb2865521c93cfb04e7d57017de308166512521bc7ab6c9dc80113a855ea9567f4c501470c7dd478f9e2bcbe03fae33eb439ad92ef254bead4d36a81d343696791d9f5e56bd9ac922da5388ef332ce51840ab4fa309109ff8088ebe29ac7f464c86a74fa1bfeaa3739bc1740a1af0153f19d33b7e27"}}, @measure_req={0x26, 0x5, {0xfd, 0x20, 0x1, "6e1f"}}, @channel_switch={0x25, 0x3, {0x1, 0x0, 0xce}}]}, @NL80211_ATTR_IE={0x2e, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @channel_switch={0x25, 0x3, {0x0, 0x2}}, @link_id={0x65, 0x12, {@random="4555deaa858f", @device_b}}, @mesh_chsw={0x76, 0x6, {0x8b, 0xeb, 0xc, 0x1}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x6, 0x5, 0x5}}]}]}, 0x3c8}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) (async) r10 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async, rerun: 32) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) (rerun: 32) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r12, &(0x7f0000013800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000137c0)={&(0x7f0000013740)={0x50, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x40}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000040}, 0x4) (async) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000013540)={0x1fc, r11, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1e0, 0x3, 0x0, 0x1, [{0xa4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x9e, 0x1, "a65c75e9bde18e91f69241fd9d61dae12042615a879c37cb0d7f30507a6f4150bc0878a46a33796ce20775f1fd4cdc21d4257259b221d542a34c4289b95c0536982633d05415850968218a6df84a33316b4d2bc36f49881c03b0f4822a7ef2bad438376164ae65788453e5268a9b0d8e9c517f9d8887183e756897245e702c408e6cf496c04deff5906f55cdc4b9c028e61cc282820655a59a9b"}}, {0x108, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x103, 0x2, "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"}}, {0x30, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x2c, 0x2, "a705b9405d27fcad128525073eb2dad811ce49e48eaac5f7dd48e06615760b5e4f379b60111b1f22"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async, rerun: 32) ioctl$vim2m_VIDIOC_G_FMT(r10, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x6, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x1}, {0x2}]}}) (rerun: 32) 13:05:49 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "84ed25f331eab2d57306d08822179f2b3af0de54fa30ff0a587dfdb1394f9ae4", 0x519487d7}) 13:05:49 executing program 2: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0x5421, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x154, r5, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x4d}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0xf4, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xeb, 0x1, "af12612a733dd95b571c9108e75c933a654e56b42ece91b0df4cdd9d060470003c5108550f824d2b095e9dc1712e508eb7f6d0b839eadbaae5e080cc48fc60b8c6e7415a191fa8c48c774fd519ed713277656cbb79a5e54f2dbcae9809b51c11553b44909187f378b903f39d276236cbdeea11dad28cdf0c62c6ce8e62e03c3f91c7c6cac138e80e5e00660e30836c377f7df64b66b1f787f385fb831bea329d2b19291d4f556aac6b0077893dab98844e48f2230e7b3c3aa2a868a70fff2d3fb1b29524413c4e877efa14ce8b5a00b3f0ba8f78150ee7e0519d120d0645bc0b6a8030925953dc"}, @NL80211_BAND_60GHZ={0x4}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x5d}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x154}, 0x1, 0x0, 0x0, 0x48000}, 0x4008041) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)) (async) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) (async) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)) (async) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) (async) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r2, 0x5421, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x154, r5, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x4d}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0xf4, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xeb, 0x1, "af12612a733dd95b571c9108e75c933a654e56b42ece91b0df4cdd9d060470003c5108550f824d2b095e9dc1712e508eb7f6d0b839eadbaae5e080cc48fc60b8c6e7415a191fa8c48c774fd519ed713277656cbb79a5e54f2dbcae9809b51c11553b44909187f378b903f39d276236cbdeea11dad28cdf0c62c6ce8e62e03c3f91c7c6cac138e80e5e00660e30836c377f7df64b66b1f787f385fb831bea329d2b19291d4f556aac6b0077893dab98844e48f2230e7b3c3aa2a868a70fff2d3fb1b29524413c4e877efa14ce8b5a00b3f0ba8f78150ee7e0519d120d0645bc0b6a8030925953dc"}, @NL80211_BAND_60GHZ={0x4}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x5d}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x154}, 0x1, 0x0, 0x0, 0x48000}, 0x4008041) (async) 13:05:49 executing program 5: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x7fffffff, 0x1, 0x0, "84ed25f331eab2d57306d08822179f2b3af0de54fa30ff0a587dfdb1394f9ae4", 0x519487d7}) 13:05:49 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x9, 0x41414770, 0x2, @discrete={0x2, 0x7fff}}) 13:05:49 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffffd, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) 13:05:49 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x7fffffff, 0x0, 0x0, "84ed25f331eab2d57306d08822179f2b3af0de54fa30ff0a587dfdb1394f9ae4", 0x519487d7}) 13:05:49 executing program 5: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x7fffffff, 0x1, 0x0, "84ed25f331eab2d57306d08822179f2b3af0de54fa30ff0a587dfdb1394f9ae4", 0x519487d7}) 13:05:49 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x9, 0x41414770, 0x2, @discrete={0x2, 0x7fff}}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x9, 0x41414770, 0x2, @discrete={0x2, 0x7fff}}) 13:05:49 executing program 2: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) (async) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) (async) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) (async, rerun: 64) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async, rerun: 64) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0x5421, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x154, r5, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x4d}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0xf4, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xeb, 0x1, "af12612a733dd95b571c9108e75c933a654e56b42ece91b0df4cdd9d060470003c5108550f824d2b095e9dc1712e508eb7f6d0b839eadbaae5e080cc48fc60b8c6e7415a191fa8c48c774fd519ed713277656cbb79a5e54f2dbcae9809b51c11553b44909187f378b903f39d276236cbdeea11dad28cdf0c62c6ce8e62e03c3f91c7c6cac138e80e5e00660e30836c377f7df64b66b1f787f385fb831bea329d2b19291d4f556aac6b0077893dab98844e48f2230e7b3c3aa2a868a70fff2d3fb1b29524413c4e877efa14ce8b5a00b3f0ba8f78150ee7e0519d120d0645bc0b6a8030925953dc"}, @NL80211_BAND_60GHZ={0x4}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x5d}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x154}, 0x1, 0x0, 0x0, 0x48000}, 0x4008041) 13:05:49 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x6, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x8}, 0x1) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c5fc3b764d6a5496f8d30e569391d1e792f029fe9005a0ed3a9eea367ffe149528606c542d1b3f7b6136a2ec0280ec0d36a6e8c8fb066f510ada97387dc71d295dbcd302e6c057d1110c3d4e3c54254b2e07a10085680e06b337dc41e5bb8933ab210c0e25f2669d0ff6a999a0e8e8a99394e8f3124588f8a53c1a30f9fc1056e04d9abd838bba4ab6da2fd780d4f73a7278f63c187e33b0a1619d903f7dc8d687c", @ANYRES16=r4, @ANYBLOB="000229bd7000fddbdf25670000000c00990007000000130000000800c300a6cc00005500c500d73404037570bd6ea4347c16c81afac62855b8c7e4f224dc8e7014d2232b193ea65865567630b6a9c64279d8e7692b141262256e04903f1954e32500227ee107542db8e9f13cf5d915996ff1753feaedab0000002d00c500ff5855cd6e70277fd557975c8e5d7a22258f198cac40a122627c0c32b207d2ba0e007a6ea44f23d705000000"], 0xb0}, 0x1, 0x0, 0x0, 0x20000089}, 0x8040) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, &(0x7f0000000580)={0x0, @sdr={0x36314d59, 0x7e2}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x5, 0x6, 0x2, {0x0, @pix_mp={0x6, 0x6, 0x32344d59, 0x9, 0xa, [{0x3f, 0x7}, {0x2, 0x5083}, {0x773d0ab9}, {0x5, 0x3f}, {0x2, 0xffff}, {0x8001, 0x6}, {0xfffeffff, 0x2}, {0x61b, 0x1}], 0xff, 0x1, 0x6, 0x2, 0x4}}, 0x6}) 13:05:49 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x7fffffff, 0x0, 0x0, "84ed25f331eab2d57306d08822179f2b3af0de54fa30ff0a587dfdb1394f9ae4", 0x519487d7}) 13:05:49 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async, rerun: 32) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffffd, 0x2) (rerun: 32) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) 13:05:49 executing program 5: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x7fffffff, 0x1, 0x0, "84ed25f331eab2d57306d08822179f2b3af0de54fa30ff0a587dfdb1394f9ae4", 0x519487d7}) 13:05:49 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x7fffffff, 0x0, 0x0, "84ed25f331eab2d57306d08822179f2b3af0de54fa30ff0a587dfdb1394f9ae4", 0x519487d7}) 13:05:49 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x9, 0x41414770, 0x2, @discrete={0x2, 0x7fff}}) 13:05:49 executing program 5: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x7fffffff, 0x1, 0x0, "84ed25f331eab2d57306d08822179f2b3af0de54fa30ff0a587dfdb1394f9ae4", 0x519487d7}) 13:05:49 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffffd, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffffd, 0x2) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) (async) 13:05:49 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x6, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x8}, 0x1) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c5fc3b764d6a5496f8d30e569391d1e792f029fe9005a0ed3a9eea367ffe149528606c542d1b3f7b6136a2ec0280ec0d36a6e8c8fb066f510ada97387dc71d295dbcd302e6c057d1110c3d4e3c54254b2e07a10085680e06b337dc41e5bb8933ab210c0e25f2669d0ff6a999a0e8e8a99394e8f3124588f8a53c1a30f9fc1056e04d9abd838bba4ab6da2fd780d4f73a7278f63c187e33b0a1619d903f7dc8d687c", @ANYRES16=r4, @ANYBLOB="000229bd7000fddbdf25670000000c00990007000000130000000800c300a6cc00005500c500d73404037570bd6ea4347c16c81afac62855b8c7e4f224dc8e7014d2232b193ea65865567630b6a9c64279d8e7692b141262256e04903f1954e32500227ee107542db8e9f13cf5d915996ff1753feaedab0000002d00c500ff5855cd6e70277fd557975c8e5d7a22258f198cac40a122627c0c32b207d2ba0e007a6ea44f23d705000000"], 0xb0}, 0x1, 0x0, 0x0, 0x20000089}, 0x8040) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, &(0x7f0000000580)={0x0, @sdr={0x36314d59, 0x7e2}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x5, 0x6, 0x2, {0x0, @pix_mp={0x6, 0x6, 0x32344d59, 0x9, 0xa, [{0x3f, 0x7}, {0x2, 0x5083}, {0x773d0ab9}, {0x5, 0x3f}, {0x2, 0xffff}, {0x8001, 0x6}, {0xfffeffff, 0x2}, {0x61b, 0x1}], 0xff, 0x1, 0x6, 0x2, 0x4}}, 0x6}) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$inet_sctp(0x2, 0x6, 0x84) (async) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x8}, 0x1) (async) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)) (async) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) (async) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) (async) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c5fc3b764d6a5496f8d30e569391d1e792f029fe9005a0ed3a9eea367ffe149528606c542d1b3f7b6136a2ec0280ec0d36a6e8c8fb066f510ada97387dc71d295dbcd302e6c057d1110c3d4e3c54254b2e07a10085680e06b337dc41e5bb8933ab210c0e25f2669d0ff6a999a0e8e8a99394e8f3124588f8a53c1a30f9fc1056e04d9abd838bba4ab6da2fd780d4f73a7278f63c187e33b0a1619d903f7dc8d687c", @ANYRES16=r4, @ANYBLOB="000229bd7000fddbdf25670000000c00990007000000130000000800c300a6cc00005500c500d73404037570bd6ea4347c16c81afac62855b8c7e4f224dc8e7014d2232b193ea65865567630b6a9c64279d8e7692b141262256e04903f1954e32500227ee107542db8e9f13cf5d915996ff1753feaedab0000002d00c500ff5855cd6e70277fd557975c8e5d7a22258f198cac40a122627c0c32b207d2ba0e007a6ea44f23d705000000"], 0xb0}, 0x1, 0x0, 0x0, 0x20000089}, 0x8040) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, &(0x7f0000000580)={0x0, @sdr={0x36314d59, 0x7e2}}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x5, 0x6, 0x2, {0x0, @pix_mp={0x6, 0x6, 0x32344d59, 0x9, 0xa, [{0x3f, 0x7}, {0x2, 0x5083}, {0x773d0ab9}, {0x5, 0x3f}, {0x2, 0xffff}, {0x8001, 0x6}, {0xfffeffff, 0x2}, {0x61b, 0x1}], 0xff, 0x1, 0x6, 0x2, 0x4}}, 0x6}) (async) 13:05:49 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x7fffffff, 0x1, 0x0, "84ed25f331eab2d57306d08822179f2b3af0de54fa30ff0a587dfdb1394f9ae4"}) 13:05:49 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x3, 0x2, 0x1, 0x0, 0x1}) 13:05:49 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x1, @pix={0x1, 0x2, 0x30314142, 0x9, 0x1, 0x6, 0x3, 0x3, 0x1, 0x0, 0x0, 0x4}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 13:05:49 executing program 5: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x7fffffff, 0x1, 0x0, "84ed25f331eab2d57306d08822179f2b3af0de54fa30ff0a587dfdb1394f9ae4", 0x519487d7}) 13:05:49 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x6, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x8}, 0x1) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c5fc3b764d6a5496f8d30e569391d1e792f029fe9005a0ed3a9eea367ffe149528606c542d1b3f7b6136a2ec0280ec0d36a6e8c8fb066f510ada97387dc71d295dbcd302e6c057d1110c3d4e3c54254b2e07a10085680e06b337dc41e5bb8933ab210c0e25f2669d0ff6a999a0e8e8a99394e8f3124588f8a53c1a30f9fc1056e04d9abd838bba4ab6da2fd780d4f73a7278f63c187e33b0a1619d903f7dc8d687c", @ANYRES16=r4, @ANYBLOB="000229bd7000fddbdf25670000000c00990007000000130000000800c300a6cc00005500c500d73404037570bd6ea4347c16c81afac62855b8c7e4f224dc8e7014d2232b193ea65865567630b6a9c64279d8e7692b141262256e04903f1954e32500227ee107542db8e9f13cf5d915996ff1753feaedab0000002d00c500ff5855cd6e70277fd557975c8e5d7a22258f198cac40a122627c0c32b207d2ba0e007a6ea44f23d705000000"], 0xb0}, 0x1, 0x0, 0x0, 0x20000089}, 0x8040) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, &(0x7f0000000580)={0x0, @sdr={0x36314d59, 0x7e2}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x5, 0x6, 0x2, {0x0, @pix_mp={0x6, 0x6, 0x32344d59, 0x9, 0xa, [{0x3f, 0x7}, {0x2, 0x5083}, {0x773d0ab9}, {0x5, 0x3f}, {0x2, 0xffff}, {0x8001, 0x6}, {0xfffeffff, 0x2}, {0x61b, 0x1}], 0xff, 0x1, 0x6, 0x2, 0x4}}, 0x6}) 13:05:49 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x3, 0x2, 0x1, 0x0, 0x1}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x3, 0x2, 0x1, 0x0, 0x1}) (async) 13:05:49 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="050affffff0000c64fb968ebff01", @ANYRES16=r2, @ANYBLOB="10002abd7000fddbdf254b00000008000300", @ANYRES32=0x0, @ANYBLOB="0800dc00020000000400ff000600f7000c070000080077004001000017002a00760640002500ff0372060303030303033e010300"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:49 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x1, @pix={0x1, 0x2, 0x30314142, 0x9, 0x1, 0x6, 0x3, 0x3, 0x1, 0x0, 0x0, 0x4}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x1, @pix={0x1, 0x2, 0x30314142, 0x9, 0x1, 0x6, 0x3, 0x3, 0x1, 0x0, 0x0, 0x4}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 13:05:49 executing program 5: syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x7fffffff, 0x1, 0x0, "84ed25f331eab2d57306d08822179f2b3af0de54fa30ff0a587dfdb1394f9ae4", 0x519487d7}) 13:05:49 executing program 4: socket$inet_sctp(0x2, 0x5, 0x84) (async) r0 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x6, 0x84) (async) r1 = socket$inet_sctp(0x2, 0x6, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x8}, 0x1) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)) (async) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c5fc3b764d6a5496f8d30e569391d1e792f029fe9005a0ed3a9eea367ffe149528606c542d1b3f7b6136a2ec0280ec0d36a6e8c8fb066f510ada97387dc71d295dbcd302e6c057d1110c3d4e3c54254b2e07a10085680e06b337dc41e5bb8933ab210c0e25f2669d0ff6a999a0e8e8a99394e8f3124588f8a53c1a30f9fc1056e04d9abd838bba4ab6da2fd780d4f73a7278f63c187e33b0a1619d903f7dc8d687c", @ANYRES16=r4, @ANYBLOB="000229bd7000fddbdf25670000000c00990007000000130000000800c300a6cc00005500c500d73404037570bd6ea4347c16c81afac62855b8c7e4f224dc8e7014d2232b193ea65865567630b6a9c64279d8e7692b141262256e04903f1954e32500227ee107542db8e9f13cf5d915996ff1753feaedab0000002d00c500ff5855cd6e70277fd557975c8e5d7a22258f198cac40a122627c0c32b207d2ba0e007a6ea44f23d705000000"], 0xb0}, 0x1, 0x0, 0x0, 0x20000089}, 0x8040) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, &(0x7f0000000580)={0x0, @sdr={0x36314d59, 0x7e2}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x5, 0x6, 0x2, {0x0, @pix_mp={0x6, 0x6, 0x32344d59, 0x9, 0xa, [{0x3f, 0x7}, {0x2, 0x5083}, {0x773d0ab9}, {0x5, 0x3f}, {0x2, 0xffff}, {0x8001, 0x6}, {0xfffeffff, 0x2}, {0x61b, 0x1}], 0xff, 0x1, 0x6, 0x2, 0x4}}, 0x6}) 13:05:50 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="050affffff0000c64fb968ebff01", @ANYRES16=r2, @ANYBLOB="10002abd7000fddbdf254b00000008000300", @ANYRES32=0x0, @ANYBLOB="0800dc00020000000400ff000600f7000c070000080077004001000017002a00760640002500ff0372060303030303033e010300"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="050affffff0000c64fb968ebff01", @ANYRES16=r2, @ANYBLOB="10002abd7000fddbdf254b00000008000300", @ANYRES32=0x0, @ANYBLOB="0800dc00020000000400ff000600f7000c070000080077004001000017002a00760640002500ff0372060303030303033e010300"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async) 13:05:50 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x3, 0x2, 0x1, 0x0, 0x1}) 13:05:50 executing program 5: syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x7fffffff, 0x1, 0x0, "84ed25f331eab2d57306d08822179f2b3af0de54fa30ff0a587dfdb1394f9ae4", 0x519487d7}) 13:05:50 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x1, @pix={0x1, 0x2, 0x30314142, 0x9, 0x1, 0x6, 0x3, 0x3, 0x1, 0x0, 0x0, 0x4}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 13:05:50 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x6, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x8}, 0x1) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c5fc3b764d6a5496f8d30e569391d1e792f029fe9005a0ed3a9eea367ffe149528606c542d1b3f7b6136a2ec0280ec0d36a6e8c8fb066f510ada97387dc71d295dbcd302e6c057d1110c3d4e3c54254b2e07a10085680e06b337dc41e5bb8933ab210c0e25f2669d0ff6a999a0e8e8a99394e8f3124588f8a53c1a30f9fc1056e04d9abd838bba4ab6da2fd780d4f73a7278f63c187e33b0a1619d903f7dc8d687c", @ANYRES16=r4, @ANYBLOB="000229bd7000fddbdf25670000000c00990007000000130000000800c300a6cc00005500c500d73404037570bd6ea4347c16c81afac62855b8c7e4f224dc8e7014d2232b193ea65865567630b6a9c64279d8e7692b141262256e04903f1954e32500227ee107542db8e9f13cf5d915996ff1753feaedab0000002d00c500ff5855cd6e70277fd557975c8e5d7a22258f198cac40a122627c0c32b207d2ba0e007a6ea44f23d705000000"], 0xb0}, 0x1, 0x0, 0x0, 0x20000089}, 0x8040) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, &(0x7f0000000580)={0x0, @sdr={0x36314d59, 0x7e2}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x5, 0x6, 0x2, {0x0, @pix_mp={0x6, 0x6, 0x32344d59, 0x9, 0xa, [{0x3f, 0x7}, {0x2, 0x5083}, {0x773d0ab9}, {0x5, 0x3f}, {0x2, 0xffff}, {0x8001, 0x6}, {0xfffeffff, 0x2}, {0x61b, 0x1}], 0xff, 0x1, 0x6, 0x2, 0x4}}, 0x6}) 13:05:50 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0xb406, 0x2, 0x3, {0x0, @sliced={0x800, [0xfffa, 0x20e9, 0x1f, 0x9, 0x6, 0x2, 0x3, 0x8, 0x0, 0x9, 0x8, 0x1, 0x40, 0x9, 0x2, 0x6, 0x40, 0x1, 0x57, 0x51d5, 0x2, 0x0, 0x4, 0x2d14, 0x7, 0xe53, 0x6, 0x9, 0x5, 0x8, 0x7ff, 0x30, 0x8001, 0x2, 0x101, 0x271e, 0x1, 0x400, 0x2, 0x2, 0x0, 0x4, 0x7, 0x2, 0x8, 0x336c, 0x80, 0x1], 0x3}}, 0x6}) 13:05:50 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="050affffff0000c64fb968ebff01", @ANYRES16=r2, @ANYBLOB="10002abd7000fddbdf254b00000008000300", @ANYRES32=0x0, @ANYBLOB="0800dc00020000000400ff000600f7000c070000080077004001000017002a00760640002500ff0372060303030303033e010300"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:50 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 13:05:50 executing program 5: syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x7fffffff, 0x1, 0x0, "84ed25f331eab2d57306d08822179f2b3af0de54fa30ff0a587dfdb1394f9ae4", 0x519487d7}) 13:05:50 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x34565559, 0x0, 0x0, [], 0x0, 0x2}}) 13:05:50 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0xb406, 0x2, 0x3, {0x0, @sliced={0x800, [0xfffa, 0x20e9, 0x1f, 0x9, 0x6, 0x2, 0x3, 0x8, 0x0, 0x9, 0x8, 0x1, 0x40, 0x9, 0x2, 0x6, 0x40, 0x1, 0x57, 0x51d5, 0x2, 0x0, 0x4, 0x2d14, 0x7, 0xe53, 0x6, 0x9, 0x5, 0x8, 0x7ff, 0x30, 0x8001, 0x2, 0x101, 0x271e, 0x1, 0x400, 0x2, 0x2, 0x0, 0x4, 0x7, 0x2, 0x8, 0x336c, 0x80, 0x1], 0x3}}, 0x6}) 13:05:50 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) prctl$PR_CAPBSET_DROP(0x18, 0x1d) 13:05:50 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x6, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x8}, 0x1) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c5fc3b764d6a5496f8d30e569391d1e792f029fe9005a0ed3a9eea367ffe149528606c542d1b3f7b6136a2ec0280ec0d36a6e8c8fb066f510ada97387dc71d295dbcd302e6c057d1110c3d4e3c54254b2e07a10085680e06b337dc41e5bb8933ab210c0e25f2669d0ff6a999a0e8e8a99394e8f3124588f8a53c1a30f9fc1056e04d9abd838bba4ab6da2fd780d4f73a7278f63c187e33b0a1619d903f7dc8d687c", @ANYRES16=r4, @ANYBLOB="000229bd7000fddbdf25670000000c00990007000000130000000800c300a6cc00005500c500d73404037570bd6ea4347c16c81afac62855b8c7e4f224dc8e7014d2232b193ea65865567630b6a9c64279d8e7692b141262256e04903f1954e32500227ee107542db8e9f13cf5d915996ff1753feaedab0000002d00c500ff5855cd6e70277fd557975c8e5d7a22258f198cac40a122627c0c32b207d2ba0e007a6ea44f23d705000000"], 0xb0}, 0x1, 0x0, 0x0, 0x20000089}, 0x8040) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, &(0x7f0000000580)={0x0, @sdr={0x36314d59, 0x7e2}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x5, 0x6, 0x2, {0x0, @pix_mp={0x6, 0x6, 0x32344d59, 0x9, 0xa, [{0x3f, 0x7}, {0x2, 0x5083}, {0x773d0ab9}, {0x5, 0x3f}, {0x2, 0xffff}, {0x8001, 0x6}, {0xfffeffff, 0x2}, {0x61b, 0x1}], 0xff, 0x1, 0x6, 0x2, 0x4}}, 0x6}) 13:05:50 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 13:05:50 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 13:05:50 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x34565559, 0x0, 0x0, [], 0x0, 0x2}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x34565559, 0x0, 0x0, [], 0x0, 0x2}}) (async) 13:05:50 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0xb406, 0x2, 0x3, {0x0, @sliced={0x800, [0xfffa, 0x20e9, 0x1f, 0x9, 0x6, 0x2, 0x3, 0x8, 0x0, 0x9, 0x8, 0x1, 0x40, 0x9, 0x2, 0x6, 0x40, 0x1, 0x57, 0x51d5, 0x2, 0x0, 0x4, 0x2d14, 0x7, 0xe53, 0x6, 0x9, 0x5, 0x8, 0x7ff, 0x30, 0x8001, 0x2, 0x101, 0x271e, 0x1, 0x400, 0x2, 0x2, 0x0, 0x4, 0x7, 0x2, 0x8, 0x336c, 0x80, 0x1], 0x3}}, 0x6}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0xb406, 0x2, 0x3, {0x0, @sliced={0x800, [0xfffa, 0x20e9, 0x1f, 0x9, 0x6, 0x2, 0x3, 0x8, 0x0, 0x9, 0x8, 0x1, 0x40, 0x9, 0x2, 0x6, 0x40, 0x1, 0x57, 0x51d5, 0x2, 0x0, 0x4, 0x2d14, 0x7, 0xe53, 0x6, 0x9, 0x5, 0x8, 0x7ff, 0x30, 0x8001, 0x2, 0x101, 0x271e, 0x1, 0x400, 0x2, 0x2, 0x0, 0x4, 0x7, 0x2, 0x8, 0x336c, 0x80, 0x1], 0x3}}, 0x6}) (async) 13:05:50 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async) prctl$PR_CAPBSET_DROP(0x18, 0x1d) 13:05:50 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 13:05:50 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 13:05:50 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x34565559, 0x0, 0x0, [], 0x0, 0x2}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x34565559, 0x0, 0x0, [], 0x0, 0x2}}) 13:05:50 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x6, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x8}, 0x1) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c5fc3b764d6a5496f8d30e569391d1e792f029fe9005a0ed3a9eea367ffe149528606c542d1b3f7b6136a2ec0280ec0d36a6e8c8fb066f510ada97387dc71d295dbcd302e6c057d1110c3d4e3c54254b2e07a10085680e06b337dc41e5bb8933ab210c0e25f2669d0ff6a999a0e8e8a99394e8f3124588f8a53c1a30f9fc1056e04d9abd838bba4ab6da2fd780d4f73a7278f63c187e33b0a1619d903f7dc8d687c", @ANYRES16=r4, @ANYBLOB="000229bd7000fddbdf25670000000c00990007000000130000000800c300a6cc00005500c500d73404037570bd6ea4347c16c81afac62855b8c7e4f224dc8e7014d2232b193ea65865567630b6a9c64279d8e7692b141262256e04903f1954e32500227ee107542db8e9f13cf5d915996ff1753feaedab0000002d00c500ff5855cd6e70277fd557975c8e5d7a22258f198cac40a122627c0c32b207d2ba0e007a6ea44f23d705000000"], 0xb0}, 0x1, 0x0, 0x0, 0x20000089}, 0x8040) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, &(0x7f0000000580)={0x0, @sdr={0x36314d59, 0x7e2}}) 13:05:50 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async, rerun: 32) prctl$PR_CAPBSET_DROP(0x18, 0x1d) (rerun: 32) 13:05:50 executing program 4: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_COOKIE={0xc}]}, 0x30}}, 0x0) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000003c0), &(0x7f0000000400)=0x4) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, r0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'gretap0\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6erspan0\x00'}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x40408b0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x0, 0x308, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:50 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x130, r3, 0x0, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x11b, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @erp={0x2a, 0x1, {0x0, 0x1}}, @perr={0x84, 0x10f, {0x6f, 0x11, [@not_ext={{}, @broadcast, 0x936, "", 0x24}, @not_ext={{}, @broadcast, 0x0, "", 0x3a}, @not_ext={{}, @device_a, 0x6, "", 0x12}, @ext={{}, @device_b, 0x4, @device_a, 0x36}, @not_ext={{}, @device_b, 0x3, "", 0x22}, @not_ext={{}, @broadcast, 0x6, "", 0x40}, @ext={{}, @device_b, 0x1, @broadcast, 0x5}, @ext={{}, @device_b, 0x2, @device_b, 0x7}, @ext={{}, @device_a, 0x4, @device_b, 0x4}, @not_ext={{}, @broadcast, 0x7ff, "", 0x1f}, @ext={{}, @device_b, 0x9, @device_b, 0xc}, @not_ext={{}, @device_b, 0x4, "", 0x41}, @not_ext={{}, @broadcast, 0xffff, "", 0x1c}, @ext={{}, @device_a, 0x16f, @broadcast, 0x27}, @ext={{}, @device_b, 0x80000001, @device_b, 0x4}, @ext={{}, @broadcast, 0x7, @device_a, 0x1}, @not_ext={{}, @device_b, 0xa200, "", 0x33}]}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4008045}, 0x40040) 13:05:50 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 13:05:50 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x10001, 0x3}) 13:05:50 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "84ed25f331eab2d57306d08822179f2b3af0de54fa30ff0a587dfdb1394f9ae4", 0x519487d7}) 13:05:50 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) (async) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x130, r3, 0x0, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x11b, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @erp={0x2a, 0x1, {0x0, 0x1}}, @perr={0x84, 0x10f, {0x6f, 0x11, [@not_ext={{}, @broadcast, 0x936, "", 0x24}, @not_ext={{}, @broadcast, 0x0, "", 0x3a}, @not_ext={{}, @device_a, 0x6, "", 0x12}, @ext={{}, @device_b, 0x4, @device_a, 0x36}, @not_ext={{}, @device_b, 0x3, "", 0x22}, @not_ext={{}, @broadcast, 0x6, "", 0x40}, @ext={{}, @device_b, 0x1, @broadcast, 0x5}, @ext={{}, @device_b, 0x2, @device_b, 0x7}, @ext={{}, @device_a, 0x4, @device_b, 0x4}, @not_ext={{}, @broadcast, 0x7ff, "", 0x1f}, @ext={{}, @device_b, 0x9, @device_b, 0xc}, @not_ext={{}, @device_b, 0x4, "", 0x41}, @not_ext={{}, @broadcast, 0xffff, "", 0x1c}, @ext={{}, @device_a, 0x16f, @broadcast, 0x27}, @ext={{}, @device_b, 0x80000001, @device_b, 0x4}, @ext={{}, @broadcast, 0x7, @device_a, 0x1}, @not_ext={{}, @device_b, 0xa200, "", 0x33}]}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4008045}, 0x40040) 13:05:50 executing program 1: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000080)={0xf}, 0xf) write$P9_RSTATu(r0, &(0x7f0000000300)={0x74, 0x7d, 0x1, {{0x0, 0x54, 0xffff, 0x3, {0x10, 0x4}, 0x10100000, 0xffffff52, 0x8000, 0xe11, 0xb, '/dev/vim2m\x00', 0xb, '/dev/vim2m\x00', 0xb, '/dev/vim2m\x00'}, 0xb, '/dev/vim2m\x00', 0xee00, 0xee00, 0xffffffffffffffff}}, 0x74) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0x5421, &(0x7f0000000580)={0x0, @win={{0x4, 0x0, 0x8, 0x10001}, 0x6, 0x3, &(0x7f0000000200)={{0x7f, 0x1, 0x27f, 0x1000}, &(0x7f00000001c0)={{0x1, 0x200, 0x7ff, 0x2}, &(0x7f0000000180)={{0x100, 0x81, 0xfffffffe, 0x9}}}}, 0x6, &(0x7f0000000240)="d2627e88fa9f90bdfff24b25ff9514948a863ddced393117c33f322cc21bd986a157e721714b52246798cb6f15fd3a01b62615af0e413adeae6523d297a2bd4a9d070edc973a45a6c14f729b656ff0dede8e6942c3dd5076f7ef2a0a1b03b5c667e37b1d927b43ae1b4d89cb1de9f8cffec90e97b95ce07cda7da7f6f8fa292439550c3867aaf03f51cc1ba229f600"}}) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3f}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000040)={0x0, 0x10001, 0x8000, &(0x7f0000000000)=0x4}) 13:05:50 executing program 4: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_COOKIE={0xc}]}, 0x30}}, 0x0) (async) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000003c0), &(0x7f0000000400)=0x4) (async) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, r0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'gretap0\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6erspan0\x00'}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x40408b0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x0, 0x308, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:50 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x10001, 0x3}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x10001, 0x3}) (async) 13:05:50 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x6, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x8}, 0x1) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c5fc3b764d6a5496f8d30e569391d1e792f029fe9005a0ed3a9eea367ffe149528606c542d1b3f7b6136a2ec0280ec0d36a6e8c8fb066f510ada97387dc71d295dbcd302e6c057d1110c3d4e3c54254b2e07a10085680e06b337dc41e5bb8933ab210c0e25f2669d0ff6a999a0e8e8a99394e8f3124588f8a53c1a30f9fc1056e04d9abd838bba4ab6da2fd780d4f73a7278f63c187e33b0a1619d903f7dc8d687c", @ANYRES16=r4, @ANYBLOB="000229bd7000fddbdf25670000000c00990007000000130000000800c300a6cc00005500c500d73404037570bd6ea4347c16c81afac62855b8c7e4f224dc8e7014d2232b193ea65865567630b6a9c64279d8e7692b141262256e04903f1954e32500227ee107542db8e9f13cf5d915996ff1753feaedab0000002d00c500ff5855cd6e70277fd557975c8e5d7a22258f198cac40a122627c0c32b207d2ba0e007a6ea44f23d705000000"], 0xb0}, 0x1, 0x0, 0x0, 0x20000089}, 0x8040) 13:05:50 executing program 1: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000080)={0xf}, 0xf) (async) write$P9_RSTATu(r0, &(0x7f0000000300)={0x74, 0x7d, 0x1, {{0x0, 0x54, 0xffff, 0x3, {0x10, 0x4}, 0x10100000, 0xffffff52, 0x8000, 0xe11, 0xb, '/dev/vim2m\x00', 0xb, '/dev/vim2m\x00', 0xb, '/dev/vim2m\x00'}, 0xb, '/dev/vim2m\x00', 0xee00, 0xee00, 0xffffffffffffffff}}, 0x74) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0x5421, &(0x7f0000000580)={0x0, @win={{0x4, 0x0, 0x8, 0x10001}, 0x6, 0x3, &(0x7f0000000200)={{0x7f, 0x1, 0x27f, 0x1000}, &(0x7f00000001c0)={{0x1, 0x200, 0x7ff, 0x2}, &(0x7f0000000180)={{0x100, 0x81, 0xfffffffe, 0x9}}}}, 0x6, &(0x7f0000000240)="d2627e88fa9f90bdfff24b25ff9514948a863ddced393117c33f322cc21bd986a157e721714b52246798cb6f15fd3a01b62615af0e413adeae6523d297a2bd4a9d070edc973a45a6c14f729b656ff0dede8e6942c3dd5076f7ef2a0a1b03b5c667e37b1d927b43ae1b4d89cb1de9f8cffec90e97b95ce07cda7da7f6f8fa292439550c3867aaf03f51cc1ba229f600"}}) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3f}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001) (async) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000040)={0x0, 0x10001, 0x8000, &(0x7f0000000000)=0x4}) 13:05:50 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "84ed25f331eab2d57306d08822179f2b3af0de54fa30ff0a587dfdb1394f9ae4", 0x519487d7}) 13:05:50 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x130, r3, 0x0, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x11b, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @erp={0x2a, 0x1, {0x0, 0x1}}, @perr={0x84, 0x10f, {0x6f, 0x11, [@not_ext={{}, @broadcast, 0x936, "", 0x24}, @not_ext={{}, @broadcast, 0x0, "", 0x3a}, @not_ext={{}, @device_a, 0x6, "", 0x12}, @ext={{}, @device_b, 0x4, @device_a, 0x36}, @not_ext={{}, @device_b, 0x3, "", 0x22}, @not_ext={{}, @broadcast, 0x6, "", 0x40}, @ext={{}, @device_b, 0x1, @broadcast, 0x5}, @ext={{}, @device_b, 0x2, @device_b, 0x7}, @ext={{}, @device_a, 0x4, @device_b, 0x4}, @not_ext={{}, @broadcast, 0x7ff, "", 0x1f}, @ext={{}, @device_b, 0x9, @device_b, 0xc}, @not_ext={{}, @device_b, 0x4, "", 0x41}, @not_ext={{}, @broadcast, 0xffff, "", 0x1c}, @ext={{}, @device_a, 0x16f, @broadcast, 0x27}, @ext={{}, @device_b, 0x80000001, @device_b, 0x4}, @ext={{}, @broadcast, 0x7, @device_a, 0x1}, @not_ext={{}, @device_b, 0xa200, "", 0x33}]}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4008045}, 0x40040) (rerun: 32) 13:05:50 executing program 4: syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_COOKIE={0xc}]}, 0x30}}, 0x0) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000003c0), &(0x7f0000000400)=0x4) (async) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000003c0), &(0x7f0000000400)=0x4) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, r0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'gretap0\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6erspan0\x00'}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x40408b0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x0, 0x308, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:50 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x10001, 0x3}) 13:05:50 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x6, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x8}, 0x1) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) 13:05:50 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "84ed25f331eab2d57306d08822179f2b3af0de54fa30ff0a587dfdb1394f9ae4", 0x519487d7}) 13:05:50 executing program 1: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000080)={0xf}, 0xf) (async) write$P9_RSTATu(r0, &(0x7f0000000300)={0x74, 0x7d, 0x1, {{0x0, 0x54, 0xffff, 0x3, {0x10, 0x4}, 0x10100000, 0xffffff52, 0x8000, 0xe11, 0xb, '/dev/vim2m\x00', 0xb, '/dev/vim2m\x00', 0xb, '/dev/vim2m\x00'}, 0xb, '/dev/vim2m\x00', 0xee00, 0xee00, 0xffffffffffffffff}}, 0x74) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0x5421, &(0x7f0000000580)={0x0, @win={{0x4, 0x0, 0x8, 0x10001}, 0x6, 0x3, &(0x7f0000000200)={{0x7f, 0x1, 0x27f, 0x1000}, &(0x7f00000001c0)={{0x1, 0x200, 0x7ff, 0x2}, &(0x7f0000000180)={{0x100, 0x81, 0xfffffffe, 0x9}}}}, 0x6, &(0x7f0000000240)="d2627e88fa9f90bdfff24b25ff9514948a863ddced393117c33f322cc21bd986a157e721714b52246798cb6f15fd3a01b62615af0e413adeae6523d297a2bd4a9d070edc973a45a6c14f729b656ff0dede8e6942c3dd5076f7ef2a0a1b03b5c667e37b1d927b43ae1b4d89cb1de9f8cffec90e97b95ce07cda7da7f6f8fa292439550c3867aaf03f51cc1ba229f600"}}) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3f}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000040)={0x0, 0x10001, 0x8000, &(0x7f0000000000)=0x4}) 13:05:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x47ee6f9c61d9cf2e}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0xc021}, 0x8004011) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:05:51 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x1, 0x1, 0x1ff, 0x80800}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:51 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x7fffffff, 0x0, 0x0, "84ed25f331eab2d57306d08822179f2b3af0de54fa30ff0a587dfdb1394f9ae4", 0x519487d7}) 13:05:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) socketpair(0x6, 0x4, 0x7fffffff, &(0x7f0000000000)) 13:05:51 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x5, 0x0, 0x4, 0x0, 0xff}) 13:05:51 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x1, 0x1, 0x1ff, 0x80800}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x47ee6f9c61d9cf2e}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0xc021}, 0x8004011) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:05:51 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x6, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x8}, 0x1) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) 13:05:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) socketpair(0x6, 0x4, 0x7fffffff, &(0x7f0000000000)) 13:05:51 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x7fffffff, 0x0, 0x0, "84ed25f331eab2d57306d08822179f2b3af0de54fa30ff0a587dfdb1394f9ae4", 0x519487d7}) 13:05:51 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x5, 0x0, 0x4, 0x0, 0xff}) 13:05:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x47ee6f9c61d9cf2e}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0xc021}, 0x8004011) (async, rerun: 64) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (rerun: 64) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:05:51 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x1, 0x1, 0x1ff, 0x80800}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) socketpair(0x6, 0x4, 0x7fffffff, &(0x7f0000000000)) 13:05:51 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x7fffffff, 0x0, 0x0, "84ed25f331eab2d57306d08822179f2b3af0de54fa30ff0a587dfdb1394f9ae4", 0x519487d7}) 13:05:51 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x6, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x8}, 0x1) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) 13:05:51 executing program 4: setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e22, @empty}], 0x60) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000000)={0x3, @win={{0xfff, 0x275, 0x8, 0x4}, 0x6, 0x6bfd665f, &(0x7f0000000100)={{0x200, 0x2, 0x23f, 0x4}}, 0x9b, &(0x7f0000000140)="4dfac2d2eadc6ff9971686bf3518689cbdd2536e1c279101e547", 0x4}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000340)=@multiplanar_mmap={0x7, 0x3, 0x4, 0x70000, 0x1800000, {r2, r3/1000+60000}, {0x6, 0x1, 0x81, 0x7f, 0x95, 0x3, "3ad79af0"}, 0x9, 0x1, {&(0x7f00000002c0)=[{0x8001, 0x1000, {0x3}, 0x1}, {0x0, 0x1, {0x1}, 0x80000000}]}, 0x80000001}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000200), &(0x7f0000000240)=0x4) 13:05:51 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async, rerun: 64) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x5, 0x0, 0x4, 0x0, 0xff}) (rerun: 64) 13:05:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:05:51 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1d4, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xc}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x8, 0x4, 0x1, 0x1]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3e9}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x20}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1f}]}, @NL80211_ATTR_CQM={0x50, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3ff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3cb}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffff886}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x6, 0x8b, 0xfffffffe, 0x0, 0x7, 0x7]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1f}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffff001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}]}, @NL80211_ATTR_CQM={0xa0, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x58}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x0, 0x23340000, 0x8, 0x2425ffde, 0x80, 0x6, 0xbdbd]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xb4f}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x8, 0x7fff, 0x1, 0x7, 0x1d0, 0x10001, 0x3, 0x3, 0x0, 0x1]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x80000000, 0x5, 0x1f, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9cc}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x20, 0x3]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xad4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0xd37, 0xffffffff, 0x40cb, 0x1c0, 0x5, 0x6, 0x1000]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x80]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x21d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xffff0001}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffff10}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c010) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000340)={0x7fffffff, 0xbc6d7d6a541d8eef, 0x0, "9de11e136006f065763f8f703098d8483c30e6513c9da50a20a40dbd55f1065a", 0x41414770}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf}, 0xf) write$P9_RXATTRWALK(r2, &(0x7f0000000300)={0xf, 0x1f, 0x2, 0x3}, 0xf) 13:05:51 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x7fffffff, 0x1, 0x0, "84ed25f331eab2d57306d08822179f2b3af0de54fa30ff0a587dfdb1394f9ae4"}) 13:05:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:05:51 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x6, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x8}, 0x1) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) socket$nl_generic(0x10, 0x3, 0x10) 13:05:51 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1d4, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xc}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x8, 0x4, 0x1, 0x1]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3e9}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x20}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1f}]}, @NL80211_ATTR_CQM={0x50, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3ff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3cb}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffff886}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x6, 0x8b, 0xfffffffe, 0x0, 0x7, 0x7]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1f}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffff001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}]}, @NL80211_ATTR_CQM={0xa0, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x58}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x0, 0x23340000, 0x8, 0x2425ffde, 0x80, 0x6, 0xbdbd]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xb4f}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x8, 0x7fff, 0x1, 0x7, 0x1d0, 0x10001, 0x3, 0x3, 0x0, 0x1]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x80000000, 0x5, 0x1f, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9cc}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x20, 0x3]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xad4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0xd37, 0xffffffff, 0x40cb, 0x1c0, 0x5, 0x6, 0x1000]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x80]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x21d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xffff0001}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffff10}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c010) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000340)={0x7fffffff, 0xbc6d7d6a541d8eef, 0x0, "9de11e136006f065763f8f703098d8483c30e6513c9da50a20a40dbd55f1065a", 0x41414770}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf}, 0xf) (async) write$P9_RXATTRWALK(r2, &(0x7f0000000300)={0xf, 0x1f, 0x2, 0x3}, 0xf) 13:05:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) 13:05:51 executing program 4: setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e22, @empty}], 0x60) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000000)={0x3, @win={{0xfff, 0x275, 0x8, 0x4}, 0x6, 0x6bfd665f, &(0x7f0000000100)={{0x200, 0x2, 0x23f, 0x4}}, 0x9b, &(0x7f0000000140)="4dfac2d2eadc6ff9971686bf3518689cbdd2536e1c279101e547", 0x4}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) clock_gettime(0x0, &(0x7f0000000280)) (async) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000340)=@multiplanar_mmap={0x7, 0x3, 0x4, 0x70000, 0x1800000, {r2, r3/1000+60000}, {0x6, 0x1, 0x81, 0x7f, 0x95, 0x3, "3ad79af0"}, 0x9, 0x1, {&(0x7f00000002c0)=[{0x8001, 0x1000, {0x3}, 0x1}, {0x0, 0x1, {0x1}, 0x80000000}]}, 0x80000001}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000200), &(0x7f0000000240)=0x4) 13:05:51 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_COOKIE={0xc}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00@\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fbdbdf2502000000060002000000000006001a004e200000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0xc04) 13:05:51 executing program 5: setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e22, @empty}], 0x60) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000000)={0x3, @win={{0xfff, 0x275, 0x8, 0x4}, 0x6, 0x6bfd665f, &(0x7f0000000100)={{0x200, 0x2, 0x23f, 0x4}}, 0x9b, &(0x7f0000000140)="4dfac2d2eadc6ff9971686bf3518689cbdd2536e1c279101e547", 0x4}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000340)=@multiplanar_mmap={0x7, 0x3, 0x4, 0x70000, 0x1800000, {r2, r3/1000+60000}, {0x6, 0x1, 0x81, 0x7f, 0x95, 0x3, "3ad79af0"}, 0x9, 0x1, {&(0x7f00000002c0)=[{0x8001, 0x1000, {0x3}, 0x1}, {0x0, 0x1, {0x1}, 0x80000000}]}, 0x80000001}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000200), &(0x7f0000000240)=0x4) 13:05:51 executing program 4: setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e22, @empty}], 0x60) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000000)={0x3, @win={{0xfff, 0x275, 0x8, 0x4}, 0x6, 0x6bfd665f, &(0x7f0000000100)={{0x200, 0x2, 0x23f, 0x4}}, 0x9b, &(0x7f0000000140)="4dfac2d2eadc6ff9971686bf3518689cbdd2536e1c279101e547", 0x4}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) clock_gettime(0x0, &(0x7f0000000280)) (async) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000340)=@multiplanar_mmap={0x7, 0x3, 0x4, 0x70000, 0x1800000, {r2, r3/1000+60000}, {0x6, 0x1, 0x81, 0x7f, 0x95, 0x3, "3ad79af0"}, 0x9, 0x1, {&(0x7f00000002c0)=[{0x8001, 0x1000, {0x3}, 0x1}, {0x0, 0x1, {0x1}, 0x80000000}]}, 0x80000001}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000200), &(0x7f0000000240)=0x4) 13:05:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) 13:05:51 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1d4, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xc}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x8, 0x4, 0x1, 0x1]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3e9}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x20}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1f}]}, @NL80211_ATTR_CQM={0x50, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3ff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3cb}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffff886}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x6, 0x8b, 0xfffffffe, 0x0, 0x7, 0x7]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1f}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffff001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}]}, @NL80211_ATTR_CQM={0xa0, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x58}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x0, 0x23340000, 0x8, 0x2425ffde, 0x80, 0x6, 0xbdbd]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xb4f}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x8, 0x7fff, 0x1, 0x7, 0x1d0, 0x10001, 0x3, 0x3, 0x0, 0x1]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x80000000, 0x5, 0x1f, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9cc}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x20, 0x3]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xad4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0xd37, 0xffffffff, 0x40cb, 0x1c0, 0x5, 0x6, 0x1000]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x80]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x21d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xffff0001}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffff10}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c010) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000340)={0x7fffffff, 0xbc6d7d6a541d8eef, 0x0, "9de11e136006f065763f8f703098d8483c30e6513c9da50a20a40dbd55f1065a", 0x41414770}) (async) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf}, 0xf) write$P9_RXATTRWALK(r2, &(0x7f0000000300)={0xf, 0x1f, 0x2, 0x3}, 0xf) 13:05:51 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x6, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x8}, 0x1) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) 13:05:51 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async, rerun: 32) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_COOKIE={0xc}]}, 0x30}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00@\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fbdbdf2502000000060002000000000006001a004e200000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0xc04) 13:05:51 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x6, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x8}, 0x1) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) 13:05:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) 13:05:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40040200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r3, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x5a}}}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "bba120cba7a3b24e0cb05b52f2"}, @NL80211_KEY_SEQ={0x7, 0x4, "f8b481"}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0xc044) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d89fcb7fa623291373217603", @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000000000000c007a800800040000000000"], 0x34}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xb56}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r4, 0x5452, &(0x7f0000000000)={0x0, @sliced={0xfff, [0x3, 0x2, 0xffff, 0x5, 0x9, 0x269, 0xffff, 0xffff, 0xffff, 0x16, 0x5, 0x9, 0x1f, 0x3, 0x1, 0x0, 0x3, 0xa833, 0x0, 0x11d1, 0x6, 0x0, 0x5, 0xffff, 0x8, 0x400, 0x5, 0x800, 0x0, 0xfff8, 0x4, 0xfffd, 0x5e3, 0x1, 0x81, 0x7, 0x3a1, 0x7, 0x0, 0x9, 0x331, 0x6, 0x7, 0x77, 0x400, 0x7, 0x1000, 0xf19], 0x101}}) 13:05:51 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x3, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000680)=@multiplanar_fd={0x0, 0x3, 0x4, 0x1000, 0x804, {0x0, 0xea60}, {0x1, 0x8, 0x0, 0x9, 0x1, 0x9, "7f54c0f7"}, 0x7, 0x4, {&(0x7f00000004c0)=[{0x3, 0x8, {}, 0x6}, {0x81, 0x4, {}, 0x6}]}, 0xffb}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x978, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x0, @sliced={0x7fff, [0x396, 0x80, 0x1f, 0xbb6b, 0xc1ec, 0x9de, 0x8001, 0x7ff, 0xe3, 0x7, 0xff, 0x14, 0x6, 0x7ff, 0x6, 0x4, 0x81, 0x1f, 0x4, 0xfffe, 0x7, 0x3, 0xfff7, 0x4e, 0xfffc, 0x2, 0xb5f, 0x7, 0xffff, 0xf180, 0x20ee, 0x8, 0x3, 0x4, 0x3651, 0x1000, 0x3, 0xa244, 0x2, 0x3ae, 0x3, 0x9, 0x5, 0xa495, 0xde8, 0x7ff, 0x3, 0xda58], 0x7f}}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000780)=@mmap={0x16, 0x1, 0x4, 0x4000, 0x7fff, {}, {0x2, 0x8, 0x8, 0x1, 0x0, 0xfb, "349787ca"}, 0x1, 0x1, {}, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@fd={0x4, 0x1, 0x4, 0x800, 0x2, {0x77359400}, {0x2, 0x1, 0x5, 0x7f, 0x3f, 0x2, "02840ad0"}, 0xb01, 0x4, {}, 0x5}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x1ff, 0x3, 0x4, {0x0, @win={{0x2, 0xf02, 0x8, 0xff}, 0x0, 0x2, &(0x7f00000002c0)={{0x19, 0x3, 0x6db, 0x101}, &(0x7f0000000280)={{0x2728, 0xfffff800, 0x4, 0x8}, &(0x7f0000000240)={{0x0, 0x9, 0xfffffffc, 0x1}}}}, 0x800, &(0x7f0000000300)="e7fb5884ca95b9114554d1380ff6be71249528ed278d94d3b9b6324008e5306219adab9cc744c8055e8e2abca1e5c5a65202c66249c0e0ef016ecce8bf7875b9ed4d53d4c00b5121c5cac14a2dfae3bf511c35a46d52eb0b7e626678d9c5cae617948859894dc10f0240c6a4f6b5e0df8bc28ef9ae853697e9c54e8c95c8ae539639b004b1653b8dd9ceef3d7f8732b202ec3245d58891bb", 0xfa}}, 0x100}) 13:05:51 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x6, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x8}, 0x1) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) 13:05:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) 13:05:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r2) (async) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40040200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r3, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x5a}}}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "bba120cba7a3b24e0cb05b52f2"}, @NL80211_KEY_SEQ={0x7, 0x4, "f8b481"}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0xc044) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d89fcb7fa623291373217603", @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000000000000c007a800800040000000000"], 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xb56}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) (async) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r4, 0x5452, &(0x7f0000000000)={0x0, @sliced={0xfff, [0x3, 0x2, 0xffff, 0x5, 0x9, 0x269, 0xffff, 0xffff, 0xffff, 0x16, 0x5, 0x9, 0x1f, 0x3, 0x1, 0x0, 0x3, 0xa833, 0x0, 0x11d1, 0x6, 0x0, 0x5, 0xffff, 0x8, 0x400, 0x5, 0x800, 0x0, 0xfff8, 0x4, 0xfffd, 0x5e3, 0x1, 0x81, 0x7, 0x3a1, 0x7, 0x0, 0x9, 0x331, 0x6, 0x7, 0x77, 0x400, 0x7, 0x1000, 0xf19], 0x101}}) 13:05:51 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x1, 0x1, 0x1ff, 0x80800}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:51 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async, rerun: 32) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_COOKIE={0xc}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00@\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fbdbdf2502000000060002000000000006001a004e200000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0xc04) 13:05:51 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x3, @pix_mp}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000680)=@multiplanar_fd={0x0, 0x3, 0x4, 0x1000, 0x804, {0x0, 0xea60}, {0x1, 0x8, 0x0, 0x9, 0x1, 0x9, "7f54c0f7"}, 0x7, 0x4, {&(0x7f00000004c0)=[{0x3, 0x8, {}, 0x6}, {0x81, 0x4, {}, 0x6}]}, 0xffb}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x978, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x0, @sliced={0x7fff, [0x396, 0x80, 0x1f, 0xbb6b, 0xc1ec, 0x9de, 0x8001, 0x7ff, 0xe3, 0x7, 0xff, 0x14, 0x6, 0x7ff, 0x6, 0x4, 0x81, 0x1f, 0x4, 0xfffe, 0x7, 0x3, 0xfff7, 0x4e, 0xfffc, 0x2, 0xb5f, 0x7, 0xffff, 0xf180, 0x20ee, 0x8, 0x3, 0x4, 0x3651, 0x1000, 0x3, 0xa244, 0x2, 0x3ae, 0x3, 0x9, 0x5, 0xa495, 0xde8, 0x7ff, 0x3, 0xda58], 0x7f}}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000780)=@mmap={0x16, 0x1, 0x4, 0x4000, 0x7fff, {}, {0x2, 0x8, 0x8, 0x1, 0x0, 0xfb, "349787ca"}, 0x1, 0x1, {}, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@fd={0x4, 0x1, 0x4, 0x800, 0x2, {0x77359400}, {0x2, 0x1, 0x5, 0x7f, 0x3f, 0x2, "02840ad0"}, 0xb01, 0x4, {}, 0x5}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x1ff, 0x3, 0x4, {0x0, @win={{0x2, 0xf02, 0x8, 0xff}, 0x0, 0x2, &(0x7f00000002c0)={{0x19, 0x3, 0x6db, 0x101}, &(0x7f0000000280)={{0x2728, 0xfffff800, 0x4, 0x8}, &(0x7f0000000240)={{0x0, 0x9, 0xfffffffc, 0x1}}}}, 0x800, &(0x7f0000000300)="e7fb5884ca95b9114554d1380ff6be71249528ed278d94d3b9b6324008e5306219adab9cc744c8055e8e2abca1e5c5a65202c66249c0e0ef016ecce8bf7875b9ed4d53d4c00b5121c5cac14a2dfae3bf511c35a46d52eb0b7e626678d9c5cae617948859894dc10f0240c6a4f6b5e0df8bc28ef9ae853697e9c54e8c95c8ae539639b004b1653b8dd9ceef3d7f8732b202ec3245d58891bb", 0xfa}}, 0x100}) 13:05:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) select(0x40, &(0x7f0000000140)={0xff, 0x4, 0x6, 0x4d, 0x100000004, 0x2, 0x3, 0x3}, &(0x7f0000000180)={0x7, 0x100, 0x0, 0x8, 0x2, 0x5, 0x8, 0xffffffffce7b218b}, &(0x7f00000001c0)={0x252, 0x3, 0x10f, 0x8000, 0x22c000000000, 0x4, 0x2, 0x4ee9}, &(0x7f0000000200)) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @remote}, &(0x7f0000000280)=0x10) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc1, 0x3a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x20040080) 13:05:52 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x3, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000680)=@multiplanar_fd={0x0, 0x3, 0x4, 0x1000, 0x804, {0x0, 0xea60}, {0x1, 0x8, 0x0, 0x9, 0x1, 0x9, "7f54c0f7"}, 0x7, 0x4, {&(0x7f00000004c0)=[{0x3, 0x8, {}, 0x6}, {0x81, 0x4, {}, 0x6}]}, 0xffb}) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x978, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x0, @sliced={0x7fff, [0x396, 0x80, 0x1f, 0xbb6b, 0xc1ec, 0x9de, 0x8001, 0x7ff, 0xe3, 0x7, 0xff, 0x14, 0x6, 0x7ff, 0x6, 0x4, 0x81, 0x1f, 0x4, 0xfffe, 0x7, 0x3, 0xfff7, 0x4e, 0xfffc, 0x2, 0xb5f, 0x7, 0xffff, 0xf180, 0x20ee, 0x8, 0x3, 0x4, 0x3651, 0x1000, 0x3, 0xa244, 0x2, 0x3ae, 0x3, 0x9, 0x5, 0xa495, 0xde8, 0x7ff, 0x3, 0xda58], 0x7f}}) (async) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000780)=@mmap={0x16, 0x1, 0x4, 0x4000, 0x7fff, {}, {0x2, 0x8, 0x8, 0x1, 0x0, 0xfb, "349787ca"}, 0x1, 0x1, {}, 0x3}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) (async) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@fd={0x4, 0x1, 0x4, 0x800, 0x2, {0x77359400}, {0x2, 0x1, 0x5, 0x7f, 0x3f, 0x2, "02840ad0"}, 0xb01, 0x4, {}, 0x5}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x1ff, 0x3, 0x4, {0x0, @win={{0x2, 0xf02, 0x8, 0xff}, 0x0, 0x2, &(0x7f00000002c0)={{0x19, 0x3, 0x6db, 0x101}, &(0x7f0000000280)={{0x2728, 0xfffff800, 0x4, 0x8}, &(0x7f0000000240)={{0x0, 0x9, 0xfffffffc, 0x1}}}}, 0x800, &(0x7f0000000300)="e7fb5884ca95b9114554d1380ff6be71249528ed278d94d3b9b6324008e5306219adab9cc744c8055e8e2abca1e5c5a65202c66249c0e0ef016ecce8bf7875b9ed4d53d4c00b5121c5cac14a2dfae3bf511c35a46d52eb0b7e626678d9c5cae617948859894dc10f0240c6a4f6b5e0df8bc28ef9ae853697e9c54e8c95c8ae539639b004b1653b8dd9ceef3d7f8732b202ec3245d58891bb", 0xfa}}, 0x100}) 13:05:52 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x6, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x8}, 0x1) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) 13:05:52 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x0, @sdr={0x33424752, 0x80000001}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:52 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x3, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000680)=@multiplanar_fd={0x0, 0x3, 0x4, 0x1000, 0x804, {0x0, 0xea60}, {0x1, 0x8, 0x0, 0x9, 0x1, 0x9, "7f54c0f7"}, 0x7, 0x4, {&(0x7f00000004c0)=[{0x3, 0x8, {}, 0x6}, {0x81, 0x4, {}, 0x6}]}, 0xffb}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x978, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x0, @sliced={0x7fff, [0x396, 0x80, 0x1f, 0xbb6b, 0xc1ec, 0x9de, 0x8001, 0x7ff, 0xe3, 0x7, 0xff, 0x14, 0x6, 0x7ff, 0x6, 0x4, 0x81, 0x1f, 0x4, 0xfffe, 0x7, 0x3, 0xfff7, 0x4e, 0xfffc, 0x2, 0xb5f, 0x7, 0xffff, 0xf180, 0x20ee, 0x8, 0x3, 0x4, 0x3651, 0x1000, 0x3, 0xa244, 0x2, 0x3ae, 0x3, 0x9, 0x5, 0xa495, 0xde8, 0x7ff, 0x3, 0xda58], 0x7f}}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000780)=@mmap={0x16, 0x1, 0x4, 0x4000, 0x7fff, {}, {0x2, 0x8, 0x8, 0x1, 0x0, 0xfb, "349787ca"}, 0x1, 0x1, {}, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@fd={0x4, 0x1, 0x4, 0x800, 0x2, {0x77359400}, {0x2, 0x1, 0x5, 0x7f, 0x3f, 0x2, "02840ad0"}, 0xb01, 0x4, {}, 0x5}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x1ff, 0x3, 0x4, {0x0, @win={{0x2, 0xf02, 0x8, 0xff}, 0x0, 0x2, &(0x7f00000002c0)={{0x19, 0x3, 0x6db, 0x101}, &(0x7f0000000280)={{0x2728, 0xfffff800, 0x4, 0x8}, &(0x7f0000000240)={{0x0, 0x9, 0xfffffffc, 0x1}}}}, 0x800, &(0x7f0000000300)="e7fb5884ca95b9114554d1380ff6be71249528ed278d94d3b9b6324008e5306219adab9cc744c8055e8e2abca1e5c5a65202c66249c0e0ef016ecce8bf7875b9ed4d53d4c00b5121c5cac14a2dfae3bf511c35a46d52eb0b7e626678d9c5cae617948859894dc10f0240c6a4f6b5e0df8bc28ef9ae853697e9c54e8c95c8ae539639b004b1653b8dd9ceef3d7f8732b202ec3245d58891bb", 0xfa}}, 0x100}) 13:05:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40040200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r3, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x5a}}}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "bba120cba7a3b24e0cb05b52f2"}, @NL80211_KEY_SEQ={0x7, 0x4, "f8b481"}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0xc044) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d89fcb7fa623291373217603", @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000000000000c007a800800040000000000"], 0x34}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xb56}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) (async) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r4, 0x5452, &(0x7f0000000000)={0x0, @sliced={0xfff, [0x3, 0x2, 0xffff, 0x5, 0x9, 0x269, 0xffff, 0xffff, 0xffff, 0x16, 0x5, 0x9, 0x1f, 0x3, 0x1, 0x0, 0x3, 0xa833, 0x0, 0x11d1, 0x6, 0x0, 0x5, 0xffff, 0x8, 0x400, 0x5, 0x800, 0x0, 0xfff8, 0x4, 0xfffd, 0x5e3, 0x1, 0x81, 0x7, 0x3a1, 0x7, 0x0, 0x9, 0x331, 0x6, 0x7, 0x77, 0x400, 0x7, 0x1000, 0xf19], 0x101}}) 13:05:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) select(0x40, &(0x7f0000000140)={0xff, 0x4, 0x6, 0x4d, 0x100000004, 0x2, 0x3, 0x3}, &(0x7f0000000180)={0x7, 0x100, 0x0, 0x8, 0x2, 0x5, 0x8, 0xffffffffce7b218b}, &(0x7f00000001c0)={0x252, 0x3, 0x10f, 0x8000, 0x22c000000000, 0x4, 0x2, 0x4ee9}, &(0x7f0000000200)) (async) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @remote}, &(0x7f0000000280)=0x10) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc1, 0x3a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x20040080) 13:05:52 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x0, @sdr={0x33424752, 0x80000001}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x0, @sdr={0x33424752, 0x80000001}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:52 executing program 4: sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="7c7e49c64cdaaae1ab5b", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fbdbdf25010000000800050064010102140006006272696467655f736c6176655f30000008000500e000000108000400ac14143514000200fe80000000000000000000000000000a14000600626f6e645f736c6176655f3000000000080005000a0101001400060076657468315f746f5f6272696467650014000300fc00"/146], 0x98}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000040) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0xf2c, 0x3, 0x2}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x8) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000780)=@multiplanar_mmap={0xffff, 0x1, 0x4, 0x400, 0x3, {r2, r3/1000+60000}, {0x0, 0xc, 0x4, 0x4, 0x9c, 0x3, "f2ee3f2c"}, 0x7, 0x1, {&(0x7f0000000700)=[{0x9, 0xd8, {0x100000000}, 0xd095}, {0xff, 0x8, {0x4}, 0x3ff}]}, 0xfb6a}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000180)={0xffff5a2f, 0x0, 0xefc40988b085f6db, "dcce83520cb0d9bc410ebbc77bcda1e68b16154a298f4101dbc9a8bf4f6a5e99", 0x32314d54}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x1, @sliced={0x400, [0x4, 0x3, 0x329, 0x3ff, 0x0, 0x5, 0x401, 0xfff, 0x9, 0x7, 0xfffe, 0x6, 0x1, 0x7, 0xb48, 0x308, 0x6, 0xf22, 0x6d4, 0x400, 0x2, 0x1, 0x73, 0xd605, 0x6, 0x8, 0x101, 0xc8, 0xff, 0x3f, 0x400, 0x3, 0x2, 0x1, 0x3a, 0x0, 0x9, 0x6, 0x4, 0xad6, 0x4, 0x9, 0x5, 0x0, 0x8, 0x101, 0xff, 0xffff], 0xffffffff}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x7}}) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000300)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000680)=@multiplanar_userptr={0xffffffff, 0x1, 0x4, 0x0, 0xe2f4, {0x0, 0xea60}, {0x1, 0x1, 0x92, 0x0, 0xff, 0x3f, "82d2f712"}, 0x10001, 0x2, {&(0x7f0000000480)=[{0x7ff, 0x41bffb74, {&(0x7f0000000280)}, 0x9}, {0x3, 0x3, {&(0x7f00000002c0)}, 0x10001}]}, 0x3}) 13:05:52 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x3, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000680)=@multiplanar_fd={0x0, 0x3, 0x4, 0x1000, 0x804, {0x0, 0xea60}, {0x1, 0x8, 0x0, 0x9, 0x1, 0x9, "7f54c0f7"}, 0x7, 0x4, {&(0x7f00000004c0)=[{0x3, 0x8, {}, 0x6}, {0x81, 0x4, {}, 0x6}]}, 0xffb}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x978, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x0, @sliced={0x7fff, [0x396, 0x80, 0x1f, 0xbb6b, 0xc1ec, 0x9de, 0x8001, 0x7ff, 0xe3, 0x7, 0xff, 0x14, 0x6, 0x7ff, 0x6, 0x4, 0x81, 0x1f, 0x4, 0xfffe, 0x7, 0x3, 0xfff7, 0x4e, 0xfffc, 0x2, 0xb5f, 0x7, 0xffff, 0xf180, 0x20ee, 0x8, 0x3, 0x4, 0x3651, 0x1000, 0x3, 0xa244, 0x2, 0x3ae, 0x3, 0x9, 0x5, 0xa495, 0xde8, 0x7ff, 0x3, 0xda58], 0x7f}}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000780)=@mmap={0x16, 0x1, 0x4, 0x4000, 0x7fff, {}, {0x2, 0x8, 0x8, 0x1, 0x0, 0xfb, "349787ca"}, 0x1, 0x1, {}, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@fd={0x4, 0x1, 0x4, 0x800, 0x2, {0x77359400}, {0x2, 0x1, 0x5, 0x7f, 0x3f, 0x2, "02840ad0"}, 0xb01, 0x4, {}, 0x5}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x1ff, 0x3, 0x4, {0x0, @win={{0x2, 0xf02, 0x8, 0xff}, 0x0, 0x2, &(0x7f00000002c0)={{0x19, 0x3, 0x6db, 0x101}, &(0x7f0000000280)={{0x2728, 0xfffff800, 0x4, 0x8}, &(0x7f0000000240)={{0x0, 0x9, 0xfffffffc, 0x1}}}}, 0x800, &(0x7f0000000300)="e7fb5884ca95b9114554d1380ff6be71249528ed278d94d3b9b6324008e5306219adab9cc744c8055e8e2abca1e5c5a65202c66249c0e0ef016ecce8bf7875b9ed4d53d4c00b5121c5cac14a2dfae3bf511c35a46d52eb0b7e626678d9c5cae617948859894dc10f0240c6a4f6b5e0df8bc28ef9ae853697e9c54e8c95c8ae539639b004b1653b8dd9ceef3d7f8732b202ec3245d58891bb", 0xfa}}, 0x100}) 13:05:52 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @raw_data="caaf7edf1eef4cd2e13268addb36cfd9bc7ab8b2445a5a46163ebe6be280c4f3e3fcddd95a4fecae9105fa37eb614702a2b08fdecd5e0a07fb70e9d6c7c9ff3b0260875a7f862d598b32d54253b0e6e9f67d90052c34ca804a6e63e5bc084d651a5ef72916b6cc19d7d973aa4d03a299e7d7039262d045d9a18b4b8fadfd5626a132696baa8c7d3d2a33452d5e6da36ea4397608189eb6ef616dda1eb8479f03a3feddca207a6e70009e4935c7b661db20ee0374431e8706a8d9cf8ee29d5cd6c82c4f06448e7206"}) 13:05:52 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x6, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x8}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) 13:05:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) select(0x40, &(0x7f0000000140)={0xff, 0x4, 0x6, 0x4d, 0x100000004, 0x2, 0x3, 0x3}, &(0x7f0000000180)={0x7, 0x100, 0x0, 0x8, 0x2, 0x5, 0x8, 0xffffffffce7b218b}, &(0x7f00000001c0)={0x252, 0x3, 0x10f, 0x8000, 0x22c000000000, 0x4, 0x2, 0x4ee9}, &(0x7f0000000200)) (async) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @remote}, &(0x7f0000000280)=0x10) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc1, 0x3a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x20040080) 13:05:52 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x3, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000680)=@multiplanar_fd={0x0, 0x3, 0x4, 0x1000, 0x804, {0x0, 0xea60}, {0x1, 0x8, 0x0, 0x9, 0x1, 0x9, "7f54c0f7"}, 0x7, 0x4, {&(0x7f00000004c0)=[{0x3, 0x8, {}, 0x6}, {0x81, 0x4, {}, 0x6}]}, 0xffb}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x978, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x0, @sliced={0x7fff, [0x396, 0x80, 0x1f, 0xbb6b, 0xc1ec, 0x9de, 0x8001, 0x7ff, 0xe3, 0x7, 0xff, 0x14, 0x6, 0x7ff, 0x6, 0x4, 0x81, 0x1f, 0x4, 0xfffe, 0x7, 0x3, 0xfff7, 0x4e, 0xfffc, 0x2, 0xb5f, 0x7, 0xffff, 0xf180, 0x20ee, 0x8, 0x3, 0x4, 0x3651, 0x1000, 0x3, 0xa244, 0x2, 0x3ae, 0x3, 0x9, 0x5, 0xa495, 0xde8, 0x7ff, 0x3, 0xda58], 0x7f}}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000780)=@mmap={0x16, 0x1, 0x4, 0x4000, 0x7fff, {}, {0x2, 0x8, 0x8, 0x1, 0x0, 0xfb, "349787ca"}, 0x1, 0x1, {}, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@fd={0x4, 0x1, 0x4, 0x800, 0x2, {0x77359400}, {0x2, 0x1, 0x5, 0x7f, 0x3f, 0x2, "02840ad0"}, 0xb01, 0x4, {}, 0x5}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x1ff, 0x3, 0x4, {0x0, @win={{0x2, 0xf02, 0x8, 0xff}, 0x0, 0x2, &(0x7f00000002c0)={{0x19, 0x3, 0x6db, 0x101}, &(0x7f0000000280)={{0x2728, 0xfffff800, 0x4, 0x8}, &(0x7f0000000240)={{0x0, 0x9, 0xfffffffc, 0x1}}}}, 0x800, &(0x7f0000000300)="e7fb5884ca95b9114554d1380ff6be71249528ed278d94d3b9b6324008e5306219adab9cc744c8055e8e2abca1e5c5a65202c66249c0e0ef016ecce8bf7875b9ed4d53d4c00b5121c5cac14a2dfae3bf511c35a46d52eb0b7e626678d9c5cae617948859894dc10f0240c6a4f6b5e0df8bc28ef9ae853697e9c54e8c95c8ae539639b004b1653b8dd9ceef3d7f8732b202ec3245d58891bb", 0xfa}}, 0x100}) 13:05:52 executing program 4: sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="7c7e49c64cdaaae1ab5b", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fbdbdf25010000000800050064010102140006006272696467655f736c6176655f30000008000500e000000108000400ac14143514000200fe80000000000000000000000000000a14000600626f6e645f736c6176655f3000000000080005000a0101001400060076657468315f746f5f6272696467650014000300fc00"/146], 0x98}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000040) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0xf2c, 0x3, 0x2}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x8) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000780)=@multiplanar_mmap={0xffff, 0x1, 0x4, 0x400, 0x3, {r2, r3/1000+60000}, {0x0, 0xc, 0x4, 0x4, 0x9c, 0x3, "f2ee3f2c"}, 0x7, 0x1, {&(0x7f0000000700)=[{0x9, 0xd8, {0x100000000}, 0xd095}, {0xff, 0x8, {0x4}, 0x3ff}]}, 0xfb6a}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000180)={0xffff5a2f, 0x0, 0xefc40988b085f6db, "dcce83520cb0d9bc410ebbc77bcda1e68b16154a298f4101dbc9a8bf4f6a5e99", 0x32314d54}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x1, @sliced={0x400, [0x4, 0x3, 0x329, 0x3ff, 0x0, 0x5, 0x401, 0xfff, 0x9, 0x7, 0xfffe, 0x6, 0x1, 0x7, 0xb48, 0x308, 0x6, 0xf22, 0x6d4, 0x400, 0x2, 0x1, 0x73, 0xd605, 0x6, 0x8, 0x101, 0xc8, 0xff, 0x3f, 0x400, 0x3, 0x2, 0x1, 0x3a, 0x0, 0x9, 0x6, 0x4, 0xad6, 0x4, 0x9, 0x5, 0x0, 0x8, 0x101, 0xff, 0xffff], 0xffffffff}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x7}}) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000300)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000680)=@multiplanar_userptr={0xffffffff, 0x1, 0x4, 0x0, 0xe2f4, {0x0, 0xea60}, {0x1, 0x1, 0x92, 0x0, 0xff, 0x3f, "82d2f712"}, 0x10001, 0x2, {&(0x7f0000000480)=[{0x7ff, 0x41bffb74, {&(0x7f0000000280)}, 0x9}, {0x3, 0x3, {&(0x7f00000002c0)}, 0x10001}]}, 0x3}) 13:05:52 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @raw_data="caaf7edf1eef4cd2e13268addb36cfd9bc7ab8b2445a5a46163ebe6be280c4f3e3fcddd95a4fecae9105fa37eb614702a2b08fdecd5e0a07fb70e9d6c7c9ff3b0260875a7f862d598b32d54253b0e6e9f67d90052c34ca804a6e63e5bc084d651a5ef72916b6cc19d7d973aa4d03a299e7d7039262d045d9a18b4b8fadfd5626a132696baa8c7d3d2a33452d5e6da36ea4397608189eb6ef616dda1eb8479f03a3feddca207a6e70009e4935c7b661db20ee0374431e8706a8d9cf8ee29d5cd6c82c4f06448e7206"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @raw_data="caaf7edf1eef4cd2e13268addb36cfd9bc7ab8b2445a5a46163ebe6be280c4f3e3fcddd95a4fecae9105fa37eb614702a2b08fdecd5e0a07fb70e9d6c7c9ff3b0260875a7f862d598b32d54253b0e6e9f67d90052c34ca804a6e63e5bc084d651a5ef72916b6cc19d7d973aa4d03a299e7d7039262d045d9a18b4b8fadfd5626a132696baa8c7d3d2a33452d5e6da36ea4397608189eb6ef616dda1eb8479f03a3feddca207a6e70009e4935c7b661db20ee0374431e8706a8d9cf8ee29d5cd6c82c4f06448e7206"}) (async) 13:05:52 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000000c0)=@multiplanar_overlay={0x1b, 0x1, 0x4, 0x800, 0x8714, {0x77359400}, {0x5, 0x8, 0x3f, 0x1, 0x3, 0x1, "351ed6a8"}, 0x100, 0x3, {&(0x7f0000000040)=[{0x8, 0x3, {0x40}, 0x4}, {0x0, 0xb14c, {0x7}, 0xffff}]}, 0xc2a, 0x0, r1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000a00)=@multiplanar_fd={0x1ff, 0x2, 0x4, 0x8, 0x77d, {r6, r7/1000+60000}, {0x3, 0x0, 0x0, 0xf9, 0x7f, 0x0, "78806d17"}, 0x1, 0x4, {&(0x7f0000000180)=[{0x7, 0x6, {}, 0x2}, {0x69, 0x861, {}, 0x7}]}, 0x8, 0x0, r4}) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r8, 0x5421, 0x0) 13:05:52 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x0, @sdr={0x33424752, 0x80000001}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x0, @sdr={0x33424752, 0x80000001}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:52 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x6, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) 13:05:52 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x3, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000680)=@multiplanar_fd={0x0, 0x3, 0x4, 0x1000, 0x804, {0x0, 0xea60}, {0x1, 0x8, 0x0, 0x9, 0x1, 0x9, "7f54c0f7"}, 0x7, 0x4, {&(0x7f00000004c0)=[{0x3, 0x8, {}, 0x6}, {0x81, 0x4, {}, 0x6}]}, 0xffb}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x978, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x0, @sliced={0x7fff, [0x396, 0x80, 0x1f, 0xbb6b, 0xc1ec, 0x9de, 0x8001, 0x7ff, 0xe3, 0x7, 0xff, 0x14, 0x6, 0x7ff, 0x6, 0x4, 0x81, 0x1f, 0x4, 0xfffe, 0x7, 0x3, 0xfff7, 0x4e, 0xfffc, 0x2, 0xb5f, 0x7, 0xffff, 0xf180, 0x20ee, 0x8, 0x3, 0x4, 0x3651, 0x1000, 0x3, 0xa244, 0x2, 0x3ae, 0x3, 0x9, 0x5, 0xa495, 0xde8, 0x7ff, 0x3, 0xda58], 0x7f}}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000780)=@mmap={0x16, 0x1, 0x4, 0x4000, 0x7fff, {}, {0x2, 0x8, 0x8, 0x1, 0x0, 0xfb, "349787ca"}, 0x1, 0x1, {}, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@fd={0x4, 0x1, 0x4, 0x800, 0x2, {0x77359400}, {0x2, 0x1, 0x5, 0x7f, 0x3f, 0x2, "02840ad0"}, 0xb01, 0x4, {}, 0x5}) 13:05:52 executing program 4: sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="7c7e49c64cdaaae1ab5b", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fbdbdf25010000000800050064010102140006006272696467655f736c6176655f30000008000500e000000108000400ac14143514000200fe80000000000000000000000000000a14000600626f6e645f736c6176655f3000000000080005000a0101001400060076657468315f746f5f6272696467650014000300fc00"/146], 0x98}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000040) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0xf2c, 0x3, 0x2}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x8) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000780)=@multiplanar_mmap={0xffff, 0x1, 0x4, 0x400, 0x3, {r2, r3/1000+60000}, {0x0, 0xc, 0x4, 0x4, 0x9c, 0x3, "f2ee3f2c"}, 0x7, 0x1, {&(0x7f0000000700)=[{0x9, 0xd8, {0x100000000}, 0xd095}, {0xff, 0x8, {0x4}, 0x3ff}]}, 0xfb6a}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000180)={0xffff5a2f, 0x0, 0xefc40988b085f6db, "dcce83520cb0d9bc410ebbc77bcda1e68b16154a298f4101dbc9a8bf4f6a5e99", 0x32314d54}) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x1, @sliced={0x400, [0x4, 0x3, 0x329, 0x3ff, 0x0, 0x5, 0x401, 0xfff, 0x9, 0x7, 0xfffe, 0x6, 0x1, 0x7, 0xb48, 0x308, 0x6, 0xf22, 0x6d4, 0x400, 0x2, 0x1, 0x73, 0xd605, 0x6, 0x8, 0x101, 0xc8, 0xff, 0x3f, 0x400, 0x3, 0x2, 0x1, 0x3a, 0x0, 0x9, 0x6, 0x4, 0xad6, 0x4, 0x9, 0x5, 0x0, 0x8, 0x101, 0xff, 0xffff], 0xffffffff}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x7}}) (async) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000300)=0x1) (async) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000680)=@multiplanar_userptr={0xffffffff, 0x1, 0x4, 0x0, 0xe2f4, {0x0, 0xea60}, {0x1, 0x1, 0x92, 0x0, 0xff, 0x3f, "82d2f712"}, 0x10001, 0x2, {&(0x7f0000000480)=[{0x7ff, 0x41bffb74, {&(0x7f0000000280)}, 0x9}, {0x3, 0x3, {&(0x7f00000002c0)}, 0x10001}]}, 0x3}) 13:05:52 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @raw_data="caaf7edf1eef4cd2e13268addb36cfd9bc7ab8b2445a5a46163ebe6be280c4f3e3fcddd95a4fecae9105fa37eb614702a2b08fdecd5e0a07fb70e9d6c7c9ff3b0260875a7f862d598b32d54253b0e6e9f67d90052c34ca804a6e63e5bc084d651a5ef72916b6cc19d7d973aa4d03a299e7d7039262d045d9a18b4b8fadfd5626a132696baa8c7d3d2a33452d5e6da36ea4397608189eb6ef616dda1eb8479f03a3feddca207a6e70009e4935c7b661db20ee0374431e8706a8d9cf8ee29d5cd6c82c4f06448e7206"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @raw_data="caaf7edf1eef4cd2e13268addb36cfd9bc7ab8b2445a5a46163ebe6be280c4f3e3fcddd95a4fecae9105fa37eb614702a2b08fdecd5e0a07fb70e9d6c7c9ff3b0260875a7f862d598b32d54253b0e6e9f67d90052c34ca804a6e63e5bc084d651a5ef72916b6cc19d7d973aa4d03a299e7d7039262d045d9a18b4b8fadfd5626a132696baa8c7d3d2a33452d5e6da36ea4397608189eb6ef616dda1eb8479f03a3feddca207a6e70009e4935c7b661db20ee0374431e8706a8d9cf8ee29d5cd6c82c4f06448e7206"}) (async) 13:05:52 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) (async, rerun: 64) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (rerun: 64) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000000c0)=@multiplanar_overlay={0x1b, 0x1, 0x4, 0x800, 0x8714, {0x77359400}, {0x5, 0x8, 0x3f, 0x1, 0x3, 0x1, "351ed6a8"}, 0x100, 0x3, {&(0x7f0000000040)=[{0x8, 0x3, {0x40}, 0x4}, {0x0, 0xb14c, {0x7}, 0xffff}]}, 0xc2a, 0x0, r1}) (async, rerun: 64) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async, rerun: 64) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000a00)=@multiplanar_fd={0x1ff, 0x2, 0x4, 0x8, 0x77d, {r6, r7/1000+60000}, {0x3, 0x0, 0x0, 0xf9, 0x7f, 0x0, "78806d17"}, 0x1, 0x4, {&(0x7f0000000180)=[{0x7, 0x6, {}, 0x2}, {0x69, 0x861, {}, 0x7}]}, 0x8, 0x0, r4}) (async) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r8, 0x5421, 0x0) 13:05:52 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0x88, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x40001) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40404004}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf253f0000001c005e8008000900018000000800090006000000080007009102000044005e800800090002000000080005001d00210008000200ff01000008000600fe00000008000200c3000000080002000200000008000200010000000800030002000000"], 0x74}}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042dbd7000ffdbdf252e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00c80008021100000100100400d0000400930008003500070000000a00060008021100000000001e009400004014d7db0000000000000800fc0005000000010080000000010000a443e6ccee9ab092"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000010) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000340)={0x1c, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", ""]}, 0x1c}}, 0x4002011) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x60, r6, 0x8, 0xb9e, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x20000080) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:52 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x3, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000680)=@multiplanar_fd={0x0, 0x3, 0x4, 0x1000, 0x804, {0x0, 0xea60}, {0x1, 0x8, 0x0, 0x9, 0x1, 0x9, "7f54c0f7"}, 0x7, 0x4, {&(0x7f00000004c0)=[{0x3, 0x8, {}, 0x6}, {0x81, 0x4, {}, 0x6}]}, 0xffb}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x978, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x0, @sliced={0x7fff, [0x396, 0x80, 0x1f, 0xbb6b, 0xc1ec, 0x9de, 0x8001, 0x7ff, 0xe3, 0x7, 0xff, 0x14, 0x6, 0x7ff, 0x6, 0x4, 0x81, 0x1f, 0x4, 0xfffe, 0x7, 0x3, 0xfff7, 0x4e, 0xfffc, 0x2, 0xb5f, 0x7, 0xffff, 0xf180, 0x20ee, 0x8, 0x3, 0x4, 0x3651, 0x1000, 0x3, 0xa244, 0x2, 0x3ae, 0x3, 0x9, 0x5, 0xa495, 0xde8, 0x7ff, 0x3, 0xda58], 0x7f}}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000780)=@mmap={0x16, 0x1, 0x4, 0x4000, 0x7fff, {}, {0x2, 0x8, 0x8, 0x1, 0x0, 0xfb, "349787ca"}, 0x1, 0x1, {}, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) 13:05:52 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) 13:05:52 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x7, 0x1, 0x2, {0x2, @win={{0x1, 0x401, 0x0, 0x80}, 0x1, 0xf74, &(0x7f0000000080)={{0x1043b43f, 0x8cc, 0x8, 0x7ff}, &(0x7f0000000040)={{0x4, 0x7, 0x400, 0x2}, &(0x7f0000000000)={{0x5000, 0x2, 0x3ff}}}}, 0x3, &(0x7f00000000c0)="076b247641eca7b6246b97d874d41f16d47a2429c45114bb44105107674d64b2f03090f31f294260ac8345dcb0a67efa48fceb7abcb98029fe50ccb3393f4b83002d204e5d574ee0f41abeaad70afe4e31db2753e79e37c0279cb0a8d2f56b443829dcf0ec91f4ef9d4bef6deb5153680e51508c21e919b9cc67d87667d0d4e5485347f77d550b2eb0e6d4bf01be2fcd151bf916a9ce3cb76b1b1cf2afd82628b109f967ec8d3122074b10b66755e10eacb794371d0116be122d", 0x40}}, 0x7}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:52 executing program 3: socketpair(0x27, 0x2, 0x20, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x83171d2ada3f8145}, 0x1) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000340), &(0x7f0000000380)=0x8) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000080)={'custom0\x00'}) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x5, 0x0, 0x0, 0x0, 0x2f29c2c2f6da9951, [{0x0, 0x349}, {0x0, 0x4000000}, {}, {}, {0x3}, {0x0, 0x23}, {}, {0x5, 0x40000}], 0xfd, 0x0, 0x0, 0x0, 0x2}}) 13:05:52 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x3, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000680)=@multiplanar_fd={0x0, 0x3, 0x4, 0x1000, 0x804, {0x0, 0xea60}, {0x1, 0x8, 0x0, 0x9, 0x1, 0x9, "7f54c0f7"}, 0x7, 0x4, {&(0x7f00000004c0)=[{0x3, 0x8, {}, 0x6}, {0x81, 0x4, {}, 0x6}]}, 0xffb}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x978, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x0, @sliced={0x7fff, [0x396, 0x80, 0x1f, 0xbb6b, 0xc1ec, 0x9de, 0x8001, 0x7ff, 0xe3, 0x7, 0xff, 0x14, 0x6, 0x7ff, 0x6, 0x4, 0x81, 0x1f, 0x4, 0xfffe, 0x7, 0x3, 0xfff7, 0x4e, 0xfffc, 0x2, 0xb5f, 0x7, 0xffff, 0xf180, 0x20ee, 0x8, 0x3, 0x4, 0x3651, 0x1000, 0x3, 0xa244, 0x2, 0x3ae, 0x3, 0x9, 0x5, 0xa495, 0xde8, 0x7ff, 0x3, 0xda58], 0x7f}}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) 13:05:52 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0x88, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x40001) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40404004}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf253f0000001c005e8008000900018000000800090006000000080007009102000044005e800800090002000000080005001d00210008000200ff01000008000600fe00000008000200c3000000080002000200000008000200010000000800030002000000"], 0x74}}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042dbd7000ffdbdf252e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00c80008021100000100100400d0000400930008003500070000000a00060008021100000000001e009400004014d7db0000000000000800fc0005000000010080000000010000a443e6ccee9ab092"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042dbd7000ffdbdf252e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00c80008021100000100100400d0000400930008003500070000000a00060008021100000000001e009400004014d7db0000000000000800fc0005000000010080000000010000a443e6ccee9ab092"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000010) (async) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000010) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000340)={0x1c, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", ""]}, 0x1c}}, 0x4002011) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x60, r6, 0x8, 0xb9e, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x20000080) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x60, r6, 0x8, 0xb9e, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x20000080) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:52 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x7, 0x1, 0x2, {0x2, @win={{0x1, 0x401, 0x0, 0x80}, 0x1, 0xf74, &(0x7f0000000080)={{0x1043b43f, 0x8cc, 0x8, 0x7ff}, &(0x7f0000000040)={{0x4, 0x7, 0x400, 0x2}, &(0x7f0000000000)={{0x5000, 0x2, 0x3ff}}}}, 0x3, &(0x7f00000000c0)="076b247641eca7b6246b97d874d41f16d47a2429c45114bb44105107674d64b2f03090f31f294260ac8345dcb0a67efa48fceb7abcb98029fe50ccb3393f4b83002d204e5d574ee0f41abeaad70afe4e31db2753e79e37c0279cb0a8d2f56b443829dcf0ec91f4ef9d4bef6deb5153680e51508c21e919b9cc67d87667d0d4e5485347f77d550b2eb0e6d4bf01be2fcd151bf916a9ce3cb76b1b1cf2afd82628b109f967ec8d3122074b10b66755e10eacb794371d0116be122d", 0x40}}, 0x7}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:52 executing program 0: setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) 13:05:52 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000000c0)=@multiplanar_overlay={0x1b, 0x1, 0x4, 0x800, 0x8714, {0x77359400}, {0x5, 0x8, 0x3f, 0x1, 0x3, 0x1, "351ed6a8"}, 0x100, 0x3, {&(0x7f0000000040)=[{0x8, 0x3, {0x40}, 0x4}, {0x0, 0xb14c, {0x7}, 0xffff}]}, 0xc2a, 0x0, r1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000a00)=@multiplanar_fd={0x1ff, 0x2, 0x4, 0x8, 0x77d, {r6, r7/1000+60000}, {0x3, 0x0, 0x0, 0xf9, 0x7f, 0x0, "78806d17"}, 0x1, 0x4, {&(0x7f0000000180)=[{0x7, 0x6, {}, 0x2}, {0x69, 0x861, {}, 0x7}]}, 0x8, 0x0, r4}) (async) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r8, 0x5421, 0x0) 13:05:52 executing program 3: socketpair(0x27, 0x2, 0x20, &(0x7f00000001c0)={0xffffffffffffffff}) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x83171d2ada3f8145}, 0x1) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000340), &(0x7f0000000380)=0x8) (async) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000080)={'custom0\x00'}) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x5, 0x0, 0x0, 0x0, 0x2f29c2c2f6da9951, [{0x0, 0x349}, {0x0, 0x4000000}, {}, {}, {0x3}, {0x0, 0x23}, {}, {0x5, 0x40000}], 0xfd, 0x0, 0x0, 0x0, 0x2}}) 13:05:52 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x3, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000680)=@multiplanar_fd={0x0, 0x3, 0x4, 0x1000, 0x804, {0x0, 0xea60}, {0x1, 0x8, 0x0, 0x9, 0x1, 0x9, "7f54c0f7"}, 0x7, 0x4, {&(0x7f00000004c0)=[{0x3, 0x8, {}, 0x6}, {0x81, 0x4, {}, 0x6}]}, 0xffb}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x978, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x0, @sliced={0x7fff, [0x396, 0x80, 0x1f, 0xbb6b, 0xc1ec, 0x9de, 0x8001, 0x7ff, 0xe3, 0x7, 0xff, 0x14, 0x6, 0x7ff, 0x6, 0x4, 0x81, 0x1f, 0x4, 0xfffe, 0x7, 0x3, 0xfff7, 0x4e, 0xfffc, 0x2, 0xb5f, 0x7, 0xffff, 0xf180, 0x20ee, 0x8, 0x3, 0x4, 0x3651, 0x1000, 0x3, 0xa244, 0x2, 0x3ae, 0x3, 0x9, 0x5, 0xa495, 0xde8, 0x7ff, 0x3, 0xda58], 0x7f}}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) 13:05:52 executing program 0: setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) 13:05:52 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x7, 0x1, 0x2, {0x2, @win={{0x1, 0x401, 0x0, 0x80}, 0x1, 0xf74, &(0x7f0000000080)={{0x1043b43f, 0x8cc, 0x8, 0x7ff}, &(0x7f0000000040)={{0x4, 0x7, 0x400, 0x2}, &(0x7f0000000000)={{0x5000, 0x2, 0x3ff}}}}, 0x3, &(0x7f00000000c0)="076b247641eca7b6246b97d874d41f16d47a2429c45114bb44105107674d64b2f03090f31f294260ac8345dcb0a67efa48fceb7abcb98029fe50ccb3393f4b83002d204e5d574ee0f41abeaad70afe4e31db2753e79e37c0279cb0a8d2f56b443829dcf0ec91f4ef9d4bef6deb5153680e51508c21e919b9cc67d87667d0d4e5485347f77d550b2eb0e6d4bf01be2fcd151bf916a9ce3cb76b1b1cf2afd82628b109f967ec8d3122074b10b66755e10eacb794371d0116be122d", 0x40}}, 0x7}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x7, 0x1, 0x2, {0x2, @win={{0x1, 0x401, 0x0, 0x80}, 0x1, 0xf74, &(0x7f0000000080)={{0x1043b43f, 0x8cc, 0x8, 0x7ff}, &(0x7f0000000040)={{0x4, 0x7, 0x400, 0x2}, &(0x7f0000000000)={{0x5000, 0x2, 0x3ff}}}}, 0x3, &(0x7f00000000c0)="076b247641eca7b6246b97d874d41f16d47a2429c45114bb44105107674d64b2f03090f31f294260ac8345dcb0a67efa48fceb7abcb98029fe50ccb3393f4b83002d204e5d574ee0f41abeaad70afe4e31db2753e79e37c0279cb0a8d2f56b443829dcf0ec91f4ef9d4bef6deb5153680e51508c21e919b9cc67d87667d0d4e5485347f77d550b2eb0e6d4bf01be2fcd151bf916a9ce3cb76b1b1cf2afd82628b109f967ec8d3122074b10b66755e10eacb794371d0116be122d", 0x40}}, 0x7}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) 13:05:52 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0x88, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x40001) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40404004}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf253f0000001c005e8008000900018000000800090006000000080007009102000044005e800800090002000000080005001d00210008000200ff01000008000600fe00000008000200c3000000080002000200000008000200010000000800030002000000"], 0x74}}, 0x4000000) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042dbd7000ffdbdf252e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00c80008021100000100100400d0000400930008003500070000000a00060008021100000000001e009400004014d7db0000000000000800fc0005000000010080000000010000a443e6ccee9ab092"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000010) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r5) (async) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000340)={0x1c, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", ""]}, 0x1c}}, 0x4002011) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r7) (async) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x60, r6, 0x8, 0xb9e, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x20000080) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:05:52 executing program 3: socketpair(0x27, 0x2, 0x20, &(0x7f00000001c0)={0xffffffffffffffff}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x83171d2ada3f8145}, 0x1) (async) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000340), &(0x7f0000000380)=0x8) (async) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000080)={'custom0\x00'}) (async) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x5, 0x0, 0x0, 0x0, 0x2f29c2c2f6da9951, [{0x0, 0x349}, {0x0, 0x4000000}, {}, {}, {0x3}, {0x0, 0x23}, {}, {0x5, 0x40000}], 0xfd, 0x0, 0x0, 0x0, 0x2}}) 13:05:52 executing program 0: setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) 13:05:53 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x1, @vbi={0x1f, 0x1, 0x0, 0xe3f8bef8, [0x269], [0x8000, 0x1000], 0x2}}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 13:05:53 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:05:53 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x3, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000680)=@multiplanar_fd={0x0, 0x3, 0x4, 0x1000, 0x804, {0x0, 0xea60}, {0x1, 0x8, 0x0, 0x9, 0x1, 0x9, "7f54c0f7"}, 0x7, 0x4, {&(0x7f00000004c0)=[{0x3, 0x8, {}, 0x6}, {0x81, 0x4, {}, 0x6}]}, 0xffb}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x978, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x0, @sliced={0x7fff, [0x396, 0x80, 0x1f, 0xbb6b, 0xc1ec, 0x9de, 0x8001, 0x7ff, 0xe3, 0x7, 0xff, 0x14, 0x6, 0x7ff, 0x6, 0x4, 0x81, 0x1f, 0x4, 0xfffe, 0x7, 0x3, 0xfff7, 0x4e, 0xfffc, 0x2, 0xb5f, 0x7, 0xffff, 0xf180, 0x20ee, 0x8, 0x3, 0x4, 0x3651, 0x1000, 0x3, 0xa244, 0x2, 0x3ae, 0x3, 0x9, 0x5, 0xa495, 0xde8, 0x7ff, 0x3, 0xda58], 0x7f}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) 13:05:53 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix={0x9, 0x1ff, 0x32314d56, 0x0, 0x4, 0x4, 0x4, 0x0, 0x1, 0x3, 0x1, 0x7}}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@multiplanar_overlay={0x6, 0x6, 0x4, 0xe000, 0x2, {r1, r2/1000+10000}, {0x2, 0x2, 0x4, 0x81, 0x3f, 0x8, "0d8d9657"}, 0x0, 0x3, {&(0x7f00000001c0)=[{0x400, 0x8, {0x103b}}, {0x401, 0x40, {0x1000}}]}, 0x7}) bind$l2tp(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, 0x10) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x3}, {0x55}, @device_a, @device_a, @broadcast, {0x1, 0x3}, @device_b}, @a_msdu=[{@broadcast, @device_b, 0xa9, "f1fec9cb8c1902fd1f974aff4fda04b3aa251f5b58588eb874123199c67891f79692486ada35e91172dec73941343b9611db15884d47a9f4fff006883a9de66f3e5cf90d590c8f98f31c43a4c13fcee848f9492e6875c0a3e42487409d19f10252ed8619d7da3921bc540656cceb54e4306fd88a2f8e8d678ab9cce059f29a0d50183e764032b3fcbc004519f59a79c5ed837863b7a2170debd98ff7734795f94f61b22c3084622443"}]}, 0xd6) 13:05:53 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RAUTH(r1, &(0x7f0000000040)={0x14, 0x67, 0x1, {0x10, 0x2, 0x4}}, 0x14) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:05:53 executing program 0: r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) 13:05:53 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x1, @vbi={0x1f, 0x1, 0x0, 0xe3f8bef8, [0x269], [0x8000, 0x1000], 0x2}}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x1, @vbi={0x1f, 0x1, 0x0, 0xe3f8bef8, [0x269], [0x8000, 0x1000], 0x2}}) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) 13:05:53 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:05:53 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RAUTH(r1, &(0x7f0000000040)={0x14, 0x67, 0x1, {0x10, 0x2, 0x4}}, 0x14) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) pipe2$9p(&(0x7f0000000000), 0x80) (async) write$P9_RAUTH(r1, &(0x7f0000000040)={0x14, 0x67, 0x1, {0x10, 0x2, 0x4}}, 0x14) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) (async) 13:05:53 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x3, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000680)=@multiplanar_fd={0x0, 0x3, 0x4, 0x1000, 0x804, {0x0, 0xea60}, {0x1, 0x8, 0x0, 0x9, 0x1, 0x9, "7f54c0f7"}, 0x7, 0x4, {&(0x7f00000004c0)=[{0x3, 0x8, {}, 0x6}, {0x81, 0x4, {}, 0x6}]}, 0xffb}) syz_open_dev$vim2m(&(0x7f0000000000), 0x978, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) [ 616.606875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 13:05:53 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:05:53 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x1, @vbi={0x1f, 0x1, 0x0, 0xe3f8bef8, [0x269], [0x8000, 0x1000], 0x2}}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x1, @vbi={0x1f, 0x1, 0x0, 0xe3f8bef8, [0x269], [0x8000, 0x1000], 0x2}}) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) 13:05:53 executing program 0: r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) 13:05:53 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RAUTH(r1, &(0x7f0000000040)={0x14, 0x67, 0x1, {0x10, 0x2, 0x4}}, 0x14) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:05:53 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) 13:05:53 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix={0x9, 0x1ff, 0x32314d56, 0x0, 0x4, 0x4, 0x4, 0x0, 0x1, 0x3, 0x1, 0x7}}) (async) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@multiplanar_overlay={0x6, 0x6, 0x4, 0xe000, 0x2, {r1, r2/1000+10000}, {0x2, 0x2, 0x4, 0x81, 0x3f, 0x8, "0d8d9657"}, 0x0, 0x3, {&(0x7f00000001c0)=[{0x400, 0x8, {0x103b}}, {0x401, 0x40, {0x1000}}]}, 0x7}) (async, rerun: 64) bind$l2tp(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, 0x10) (async, rerun: 64) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x3}, {0x55}, @device_a, @device_a, @broadcast, {0x1, 0x3}, @device_b}, @a_msdu=[{@broadcast, @device_b, 0xa9, "f1fec9cb8c1902fd1f974aff4fda04b3aa251f5b58588eb874123199c67891f79692486ada35e91172dec73941343b9611db15884d47a9f4fff006883a9de66f3e5cf90d590c8f98f31c43a4c13fcee848f9492e6875c0a3e42487409d19f10252ed8619d7da3921bc540656cceb54e4306fd88a2f8e8d678ab9cce059f29a0d50183e764032b3fcbc004519f59a79c5ed837863b7a2170debd98ff7734795f94f61b22c3084622443"}]}, 0xd6) 13:05:53 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x3, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000680)=@multiplanar_fd={0x0, 0x3, 0x4, 0x1000, 0x804, {0x0, 0xea60}, {0x1, 0x8, 0x0, 0x9, 0x1, 0x9, "7f54c0f7"}, 0x7, 0x4, {&(0x7f00000004c0)=[{0x3, 0x8, {}, 0x6}, {0x81, 0x4, {}, 0x6}]}, 0xffb}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) 13:05:53 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) socket$pppoe(0x18, 0x1, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 13:05:53 executing program 0: r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) 13:05:53 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000180)={0x1, 0x29, 0x2, 0x80}) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x6}, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="60030000", @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf253900000008000900", @ANYRES32=r3, @ANYBLOB="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"], 0x360}, 0x1, 0x0, 0x0, 0x8004}, 0x40081) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x3, 0x7, 0x7fffffff, 0x80080}) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000002c0)=@multiplanar_fd={0x8001, 0x0, 0x4, 0x401, 0x0, {r5, r6/1000+60000}, {0x4, 0x1, 0x6, 0x7, 0x40, 0x1, "c7d50fb7"}, 0xffffffff, 0x4, {&(0x7f0000000200)=[{0x3, 0x9, {}, 0xe291320}, {0x9, 0x8}]}, 0x7, 0x0, r2}) 13:05:53 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:05:53 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000080)=""/190, 0xbe, 0x1, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x17a3c0731efb1414}, 0x0) 13:05:53 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000180)={0x1, 0x29, 0x2, 0x80}) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x6}, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="60030000", @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf253900000008000900", @ANYRES32=r3, @ANYBLOB="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"], 0x360}, 0x1, 0x0, 0x0, 0x8004}, 0x40081) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x3, 0x7, 0x7fffffff, 0x80080}) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000002c0)=@multiplanar_fd={0x8001, 0x0, 0x4, 0x401, 0x0, {r5, r6/1000+60000}, {0x4, 0x1, 0x6, 0x7, 0x40, 0x1, "c7d50fb7"}, 0xffffffff, 0x4, {&(0x7f0000000200)=[{0x3, 0x9, {}, 0xe291320}, {0x9, 0x8}]}, 0x7, 0x0, r2}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000180)={0x1, 0x29, 0x2, 0x80}) (async) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x6}, 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="60030000", @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf253900000008000900", @ANYRES32=r3, @ANYBLOB="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"], 0x360}, 0x1, 0x0, 0x0, 0x8004}, 0x40081) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x3, 0x7, 0x7fffffff, 0x80080}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) clock_gettime(0x0, &(0x7f00000001c0)) (async) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000002c0)=@multiplanar_fd={0x8001, 0x0, 0x4, 0x401, 0x0, {r5, r6/1000+60000}, {0x4, 0x1, 0x6, 0x7, 0x40, 0x1, "c7d50fb7"}, 0xffffffff, 0x4, {&(0x7f0000000200)=[{0x3, 0x9, {}, 0xe291320}, {0x9, 0x8}]}, 0x7, 0x0, r2}) (async) 13:05:53 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) socket$pppoe(0x18, 0x1, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) socket$pppoe(0x18, 0x1, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) 13:05:53 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x3, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) 13:05:53 executing program 0: socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) [ 617.092114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 13:05:53 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000080)=""/190, 0xbe, 0x1, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x17a3c0731efb1414}, 0x0) 13:05:53 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async, rerun: 64) socket$pppoe(0x18, 0x1, 0x0) (async, rerun: 64) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 13:05:53 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix={0x9, 0x1ff, 0x32314d56, 0x0, 0x4, 0x4, 0x4, 0x0, 0x1, 0x3, 0x1, 0x7}}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@multiplanar_overlay={0x6, 0x6, 0x4, 0xe000, 0x2, {r1, r2/1000+10000}, {0x2, 0x2, 0x4, 0x81, 0x3f, 0x8, "0d8d9657"}, 0x0, 0x3, {&(0x7f00000001c0)=[{0x400, 0x8, {0x103b}}, {0x401, 0x40, {0x1000}}]}, 0x7}) bind$l2tp(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, 0x10) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x3}, {0x55}, @device_a, @device_a, @broadcast, {0x1, 0x3}, @device_b}, @a_msdu=[{@broadcast, @device_b, 0xa9, "f1fec9cb8c1902fd1f974aff4fda04b3aa251f5b58588eb874123199c67891f79692486ada35e91172dec73941343b9611db15884d47a9f4fff006883a9de66f3e5cf90d590c8f98f31c43a4c13fcee848f9492e6875c0a3e42487409d19f10252ed8619d7da3921bc540656cceb54e4306fd88a2f8e8d678ab9cce059f29a0d50183e764032b3fcbc004519f59a79c5ed837863b7a2170debd98ff7734795f94f61b22c3084622443"}]}, 0xd6) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix={0x9, 0x1ff, 0x32314d56, 0x0, 0x4, 0x4, 0x4, 0x0, 0x1, 0x3, 0x1, 0x7}}) (async) clock_gettime(0x0, &(0x7f0000000180)) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@multiplanar_overlay={0x6, 0x6, 0x4, 0xe000, 0x2, {r1, r2/1000+10000}, {0x2, 0x2, 0x4, 0x81, 0x3f, 0x8, "0d8d9657"}, 0x0, 0x3, {&(0x7f00000001c0)=[{0x400, 0x8, {0x103b}}, {0x401, 0x40, {0x1000}}]}, 0x7}) (async) bind$l2tp(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, 0x10) (async) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x3}, {0x55}, @device_a, @device_a, @broadcast, {0x1, 0x3}, @device_b}, @a_msdu=[{@broadcast, @device_b, 0xa9, "f1fec9cb8c1902fd1f974aff4fda04b3aa251f5b58588eb874123199c67891f79692486ada35e91172dec73941343b9611db15884d47a9f4fff006883a9de66f3e5cf90d590c8f98f31c43a4c13fcee848f9492e6875c0a3e42487409d19f10252ed8619d7da3921bc540656cceb54e4306fd88a2f8e8d678ab9cce059f29a0d50183e764032b3fcbc004519f59a79c5ed837863b7a2170debd98ff7734795f94f61b22c3084622443"}]}, 0xd6) (async) 13:05:53 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000180)={0x1, 0x29, 0x2, 0x80}) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x6}, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="60030000", @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf253900000008000900", @ANYRES32=r3, @ANYBLOB="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"], 0x360}, 0x1, 0x0, 0x0, 0x8004}, 0x40081) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x3, 0x7, 0x7fffffff, 0x80080}) (async) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000002c0)=@multiplanar_fd={0x8001, 0x0, 0x4, 0x401, 0x0, {r5, r6/1000+60000}, {0x4, 0x1, 0x6, 0x7, 0x40, 0x1, "c7d50fb7"}, 0xffffffff, 0x4, {&(0x7f0000000200)=[{0x3, 0x9, {}, 0xe291320}, {0x9, 0x8}]}, 0x7, 0x0, r2}) 13:05:53 executing program 0: socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) 13:05:53 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x3, @pix_mp}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) 13:05:53 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async, rerun: 64) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (rerun: 64) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000080)=""/190, 0xbe, 0x1, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x17a3c0731efb1414}, 0x0) 13:05:54 executing program 0: socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) 13:05:54 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x3, @pix_mp}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) 13:05:54 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socketpair(0x1, 0xa, 0x400000, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000240)={0xff, 0x0, 0x3, 0x0, 0xd5}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r3, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x2c}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8000}]}, 0x38}}, 0x1) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0x0, 0x10004}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0xfffffffe}]}}) 13:05:54 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x4}]}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) [ 617.536983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 13:05:54 executing program 2: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) [ 617.583451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 13:05:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) 13:05:54 executing program 2: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) 13:05:54 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0xa, [{}, {0x0, 0x1}, {0x0, 0x6}, {}, {0xfffffffa}, {}, {}, {0x0, 0x9}]}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x2) 13:05:54 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x4}]}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:05:54 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socketpair(0x1, 0xa, 0x400000, &(0x7f0000000080)) (async) socketpair(0x1, 0xa, 0x400000, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000240)={0xff, 0x0, 0x3, 0x0, 0xd5}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000240)={0xff, 0x0, 0x3, 0x0, 0xd5}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r3, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x2c}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8000}]}, 0x38}}, 0x1) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0x0, 0x10004}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0xfffffffe}]}}) 13:05:54 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) 13:05:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) 13:05:54 executing program 2: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) 13:05:54 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x4}]}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:05:54 executing program 5: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) 13:05:54 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x3) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 13:05:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) 13:05:54 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socketpair(0x1, 0xa, 0x400000, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vim2m(&(0x7f0000000200), 0x1, 0x2) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000240)={0xff, 0x0, 0x3, 0x0, 0xd5}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000240)={0xff, 0x0, 0x3, 0x0, 0xd5}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r3, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x2c}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8000}]}, 0x38}}, 0x1) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0x0, 0x10004}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0xfffffffe}]}}) 13:05:54 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x61}}}}, ["", "", "", "", "", "", ""]}, 0x20}}, 0x4040041) 13:05:54 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0xa, [{}, {0x0, 0x1}, {0x0, 0x6}, {}, {0xfffffffa}, {}, {}, {0x0, 0x9}]}}) (async, rerun: 32) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x2) (rerun: 32) 13:05:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100), 0x0) 13:05:54 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x3) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 13:05:54 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) (async) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x61}}}}, ["", "", "", "", "", "", ""]}, 0x20}}, 0x4040041) 13:05:54 executing program 5: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) 13:05:54 executing program 3: write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7) 13:05:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100), 0x0) 13:05:54 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0xa, [{}, {0x0, 0x1}, {0x0, 0x6}, {}, {0xfffffffa}, {}, {}, {0x0, 0x9}]}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0xa, [{}, {0x0, 0x1}, {0x0, 0x6}, {}, {0xfffffffa}, {}, {}, {0x0, 0x9}]}}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x2) (async) 13:05:54 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x61}}}}, ["", "", "", "", "", "", ""]}, 0x20}}, 0x4040041) 13:05:54 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x3) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 13:05:54 executing program 5: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) 13:05:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100), 0x0) 13:05:54 executing program 3: write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7) 13:05:54 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) 13:05:54 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x4b, 0x5}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:54 executing program 3: write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7) 13:05:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @broadcast}], 0x10) 13:05:54 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x4b, 0x5}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:54 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000811}, 0x2400c005) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00'}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5421, 0x0) 13:05:54 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000600", @ANYRES16=0x0, @ANYBLOB="000429bd7000ffdbdf255a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x8011) 13:05:55 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) 13:05:55 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000600", @ANYRES16=0x0, @ANYBLOB="000429bd7000ffdbdf255a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x8011) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000600", @ANYRES16=0x0, @ANYBLOB="000429bd7000ffdbdf255a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x8011) (async) 13:05:55 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000811}, 0x2400c005) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 32) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00'}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5421, 0x0) 13:05:55 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x4, @pix={0x4, 0x18cc, 0x31364d59, 0xf, 0x100, 0x0, 0x3, 0xae40, 0x0, 0x6, 0x2, 0x4}}) 13:05:55 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000811}, 0x2400c005) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00'}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5421, 0x0) 13:05:55 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x4b, 0x5}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:55 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000600", @ANYRES16=0x0, @ANYBLOB="000429bd7000ffdbdf255a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x8011) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000600", @ANYRES16=0x0, @ANYBLOB="000429bd7000ffdbdf255a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x8011) (async) 13:05:55 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) 13:05:55 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x4, @pix={0x4, 0x18cc, 0x31364d59, 0xf, 0x100, 0x0, 0x3, 0xae40, 0x0, 0x6, 0x2, 0x4}}) 13:05:55 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000811}, 0x2400c005) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00'}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5421, 0x0) 13:05:55 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000811}, 0x2400c005) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00'}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5421, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000811}, 0x2400c005) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00'}) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5421, 0x0) (async) 13:05:55 executing program 1: seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:55 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) 13:05:55 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="90800000", @ANYRES16=0x0, @ANYBLOB="000426bd7000ffdbdf250200000008000500e000000114000300fc01000000000000000000000000000008000400ac1414bb14000300fe80000000000000000000000000002f08000400ac14142e14000200fe8000000000000000000000000000bb14000200fc0200000000000000000000000000071400060067726574617030000000000000000000"], 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) 13:05:55 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x4, @pix={0x4, 0x18cc, 0x31364d59, 0xf, 0x100, 0x0, 0x3, 0xae40, 0x0, 0x6, 0x2, 0x4}}) 13:05:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x4}]}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:05:55 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="90800000", @ANYRES16=0x0, @ANYBLOB="000426bd7000ffdbdf250200000008000500e000000114000300fc01000000000000000000000000000008000400ac1414bb14000300fe80000000000000000000000000002f08000400ac14142e14000200fe8000000000000000000000000000bb14000200fc0200000000000000000000000000071400060067726574617030000000000000000000"], 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) 13:05:55 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) 13:05:55 executing program 1: seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:55 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:05:55 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @win={{0x8, 0x1ff, 0x7, 0x9}, 0x4, 0x800, &(0x7f0000000080)={{0x8, 0x3, 0x72521cb1, 0xa94}, &(0x7f0000000040)={{0x9, 0x20, 0x1, 0xcc05}, &(0x7f0000000000)={{0x8001, 0x40, 0x5, 0x9}}}}, 0x41be, &(0x7f00000000c0)="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", 0x3}}) 13:05:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x4}]}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:05:55 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) 13:05:55 executing program 1: seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async) 13:05:55 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="90800000", @ANYRES16=0x0, @ANYBLOB="000426bd7000ffdbdf250200000008000500e000000114000300fc01000000000000000000000000000008000400ac1414bb14000300fe80000000000000000000000000002f08000400ac14142e14000200fe8000000000000000000000000000bb14000200fc0200000000000000000000000000071400060067726574617030000000000000000000"], 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) 13:05:55 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:05:55 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @win={{0x8, 0x1ff, 0x7, 0x9}, 0x4, 0x800, &(0x7f0000000080)={{0x8, 0x3, 0x72521cb1, 0xa94}, &(0x7f0000000040)={{0x9, 0x20, 0x1, 0xcc05}, &(0x7f0000000000)={{0x8001, 0x40, 0x5, 0x9}}}}, 0x41be, &(0x7f00000000c0)="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", 0x3}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @win={{0x8, 0x1ff, 0x7, 0x9}, 0x4, 0x800, &(0x7f0000000080)={{0x8, 0x3, 0x72521cb1, 0xa94}, &(0x7f0000000040)={{0x9, 0x20, 0x1, 0xcc05}, &(0x7f0000000000)={{0x8001, 0x40, 0x5, 0x9}}}}, 0x41be, &(0x7f00000000c0)="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", 0x3}}) (async) 13:05:55 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) 13:05:55 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0xfffffffe, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x3}, {}, {0x0, 0xffffffff}, {}, {}, {0x0, 0x1000000}]}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x2, @vbi={0x270, 0xc3, 0x100, 0x34324948, [0x2, 0x100], [0x54ab, 0x8000], 0x2}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x1}) 13:05:55 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x1}]}}) 13:05:55 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:05:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x4}]}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:05:55 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @win={{0x8, 0x1ff, 0x7, 0x9}, 0x4, 0x800, &(0x7f0000000080)={{0x8, 0x3, 0x72521cb1, 0xa94}, &(0x7f0000000040)={{0x9, 0x20, 0x1, 0xcc05}, &(0x7f0000000000)={{0x8001, 0x40, 0x5, 0x9}}}}, 0x41be, &(0x7f00000000c0)="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", 0x3}}) 13:05:55 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) 13:05:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x4}]}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:05:55 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0xfffffffe, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x3}, {}, {0x0, 0xffffffff}, {}, {}, {0x0, 0x1000000}]}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x2, @vbi={0x270, 0xc3, 0x100, 0x34324948, [0x2, 0x100], [0x54ab, 0x8000], 0x2}}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x1}) 13:05:55 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x1}]}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x1}]}}) (async) 13:05:55 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x7, 0x7e051518, 0x2, 0x8, 0x9, 0x1, 0x3b500452, 0x1, 0x1, 0x2, 0x5}}) 13:05:55 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x1, @sliced={0x8, [0x529, 0x9, 0x37, 0x5, 0x101, 0x6, 0x4, 0x3, 0x800, 0x0, 0x7fff, 0x5, 0x4, 0x5, 0x800, 0x7fff, 0x8, 0x3, 0x3ff, 0x20, 0x7, 0x1f, 0x7, 0x8d, 0x5, 0xfffa, 0x401, 0x9, 0xffff, 0xe7c, 0x0, 0x9, 0x1, 0xff, 0x1b, 0x9, 0x40, 0x8, 0x100, 0x200, 0x0, 0x4, 0x9, 0xff, 0x6, 0x3ff, 0x9, 0xd0], 0x4}}) 13:05:55 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) 13:05:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x4}]}}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:05:55 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0xfffffffe, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x3}, {}, {0x0, 0xffffffff}, {}, {}, {0x0, 0x1000000}]}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x2, @vbi={0x270, 0xc3, 0x100, 0x34324948, [0x2, 0x100], [0x54ab, 0x8000], 0x2}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x1}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0xfffffffe, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x3}, {}, {0x0, 0xffffffff}, {}, {}, {0x0, 0x1000000}]}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x2, @vbi={0x270, 0xc3, 0x100, 0x34324948, [0x2, 0x100], [0x54ab, 0x8000], 0x2}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x1}) (async) 13:05:55 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x1}]}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x1}]}}) (async) 13:05:55 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x7, 0x7e051518, 0x2, 0x8, 0x9, 0x1, 0x3b500452, 0x1, 0x1, 0x2, 0x5}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x7, 0x7e051518, 0x2, 0x8, 0x9, 0x1, 0x3b500452, 0x1, 0x1, 0x2, 0x5}}) (async) 13:05:55 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x0, 0x1, 0x2, 0x0, 0x2}) 13:05:55 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x1, @sliced={0x8, [0x529, 0x9, 0x37, 0x5, 0x101, 0x6, 0x4, 0x3, 0x800, 0x0, 0x7fff, 0x5, 0x4, 0x5, 0x800, 0x7fff, 0x8, 0x3, 0x3ff, 0x20, 0x7, 0x1f, 0x7, 0x8d, 0x5, 0xfffa, 0x401, 0x9, 0xffff, 0xe7c, 0x0, 0x9, 0x1, 0xff, 0x1b, 0x9, 0x40, 0x8, 0x100, 0x200, 0x0, 0x4, 0x9, 0xff, 0x6, 0x3ff, 0x9, 0xd0], 0x4}}) 13:05:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x4}]}}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:05:56 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x3, @pix_mp={0x0, 0x0, 0x36314d59, 0x0, 0x7, [{}, {0x0, 0x4}, {}, {0x401}], 0x0, 0x0, 0x0, 0x1, 0x6}}) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000140)={0x8, 0x4, 0x1, 0x5, 0x2, 0x6, 0x59, 0x1, 0xfe, 0x8, 0x8, 0x1, 0x0, 0x4}, 0xe) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="01e75b00", @ANYRES16=r2, @ANYBLOB="000428bd7000fcdbdf252500000008003500020000000800350004000000"], 0x24}}, 0x4008002) socketpair(0x25, 0x5, 0x10001, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000500)={'wpan4\x00'}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r5, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 13:05:56 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x1, @sliced={0x8, [0x529, 0x9, 0x37, 0x5, 0x101, 0x6, 0x4, 0x3, 0x800, 0x0, 0x7fff, 0x5, 0x4, 0x5, 0x800, 0x7fff, 0x8, 0x3, 0x3ff, 0x20, 0x7, 0x1f, 0x7, 0x8d, 0x5, 0xfffa, 0x401, 0x9, 0xffff, 0xe7c, 0x0, 0x9, 0x1, 0xff, 0x1b, 0x9, 0x40, 0x8, 0x100, 0x200, 0x0, 0x4, 0x9, 0xff, 0x6, 0x3ff, 0x9, 0xd0], 0x4}}) (rerun: 64) 13:05:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_SSID={0x15, 0x34, @random="93388aaa8e929b9ccdf5660a6a3b123fd4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xbb, 0x401, 0x34324948, 0x9, 0x3, 0x9, 0x7, 0x40000, 0x1, 0x0, 0x1, 0x7}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000380)=@userptr={0x40000000, 0x0, 0x4, 0x0, 0x3, {0x0, 0x2710}, {0x1, 0x2, 0x9, 0x9, 0x80, 0xea, "f8437f47"}, 0x3, 0x2, {&(0x7f0000000340)}, 0x9}) ioctl$vim2m_VIDIOC_G_FMT(r3, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x55595659, 0x0, 0x0, [{}, {}, {0xffffffff}, {}, {0x0, 0x400000}], 0x0, 0x10}}) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000140)=0x1, 0x4) 13:05:56 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x4}]}}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:05:56 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x7, 0x7e051518, 0x2, 0x8, 0x9, 0x1, 0x3b500452, 0x1, 0x1, 0x2, 0x5}}) 13:05:56 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x0, 0x1, 0x2, 0x0, 0x2}) 13:05:56 executing program 3: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_COOKIE={0xc}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x4, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40810}, 0x40800) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x3, 0x9, 0x101, 0x80800}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0xfffffffe}]}}) 13:05:56 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x0, 0x1, 0x2, 0x0, 0x2}) 13:05:56 executing program 2: ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x2, 0x0, 0x75, 0x4800}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:05:57 executing program 3: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_COOKIE={0xc}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x4, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40810}, 0x40800) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x3, 0x9, 0x101, 0x80800}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0xfffffffe}]}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0xfffffffe}]}}) 13:05:57 executing program 2: ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x2, 0x0, 0x75, 0x4800}) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:05:57 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x0, 0x2, 0x0, 0x2}) [ 625.227241] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.232917] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.676840] oom_reaper: reaped process 11392 (syz-executor.4), now anon-rss:0kB, file-rss:14336kB, shmem-rss:16kB [ 626.713566] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 626.729246] in:imklog cpuset=/ mems_allowed=0-1 [ 626.734143] CPU: 1 PID: 7799 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 626.741505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 626.750863] Call Trace: [ 626.753461] dump_stack+0x1fc/0x2ef [ 626.757097] dump_header+0x15d/0xc3f [ 626.760818] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 626.765925] ? ___ratelimit+0x319/0x590 [ 626.769907] oom_kill_process.cold+0x10/0x692 [ 626.774409] ? check_preemption_disabled+0x41/0x280 [ 626.779434] ? has_intersects_mems_allowed+0x1d6/0x290 [ 626.784713] out_of_memory+0x1072/0x1390 [ 626.788871] ? oom_killer_disable+0x270/0x270 [ 626.793355] ? mutex_trylock+0x15f/0x1a0 [ 626.797421] __alloc_pages_nodemask+0x23a2/0x2890 [ 626.802248] ? find_get_entry+0x4cd/0x8a0 [ 626.806383] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 626.811221] alloc_pages_current+0x193/0x2a0 [ 626.815645] filemap_fault+0x146e/0x2180 [ 626.819696] ext4_filemap_fault+0x84/0xb0 [ 626.823826] __do_fault+0x10b/0x4b0 [ 626.827451] __handle_mm_fault+0x273b/0x41c0 [ 626.831845] ? vm_insert_page+0x9c0/0x9c0 [ 626.835976] ? lock_downgrade+0x720/0x720 [ 626.840111] ? check_preemption_disabled+0x41/0x280 [ 626.845113] handle_mm_fault+0x436/0xb10 [ 626.849163] __do_page_fault+0x68e/0xd60 [ 626.853234] ? trace_hardirqs_off_caller+0x6e/0x210 [ 626.858257] ? spurious_fault+0x840/0x840 [ 626.862391] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 626.867222] ? page_fault+0x8/0x30 [ 626.870746] page_fault+0x1e/0x30 [ 626.874180] RIP: 0033:0x7f22356de22d [ 626.877877] Code: Bad RIP value. [ 626.881220] RSP: 002b:00007f223307a580 EFLAGS: 00010293 [ 626.886563] RAX: 0000000000000078 RBX: 0000000000000000 RCX: 00007f22356de22d [ 626.893818] RDX: 0000000000001fa0 RSI: 00007f223307ada0 RDI: 0000000000000004 [ 626.901069] RBP: 000055e596dc19d0 R08: 0000000000000000 R09: 0000000000000000 [ 626.908320] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007f223307ada0 [ 626.915579] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f223307ae20 [ 626.927814] Mem-Info: [ 626.930252] active_anon:20642 inactive_anon:4854 isolated_anon:0 [ 626.930252] active_file:16 inactive_file:17 isolated_file:0 [ 626.930252] unevictable:0 dirty:0 writeback:0 unstable:0 [ 626.930252] slab_reclaimable:21100 slab_unreclaimable:111814 [ 626.930252] mapped:22688 shmem:5410 pagetables:612 bounce:0 [ 626.930252] free:13824 free_pcp:220 free_cma:0 [ 626.931729] syz-executor.4: vmalloc: allocation failure, allocated 1791717376 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 626.968872] Node 0 active_anon:82556kB inactive_anon:19416kB active_file:64kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:90752kB dirty:0kB writeback:0kB shmem:21640kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 34816kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 626.983831] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 627.009724] Node 1 active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 627.014795] CPU: 0 PID: 11392 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 627.040978] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 627.045211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 627.045216] Call Trace: [ 627.045239] dump_stack+0x1fc/0x2ef [ 627.045256] warn_alloc.cold+0x7b/0x18f [ 627.045273] ? zone_watermark_ok_safe+0x260/0x260 [ 627.045308] __vmalloc_area_node+0x4fd/0x780 [ 627.080624] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 627.080776] ? __vmalloc_node_range+0x180/0x180 [ 627.083329] Node 0 DMA32 free:17820kB min:35996kB low:44992kB high:53988kB active_anon:82556kB inactive_anon:19416kB active_file:64kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7776kB pagetables:2448kB bounce:0kB free_pcp:632kB local_pcp:336kB free_cma:0kB [ 627.086945] ? _raw_spin_unlock+0x29/0x40 [ 627.086958] ? __get_vm_area_node+0x2e2/0x3a0 [ 627.086975] __vmalloc_node_range+0xed/0x180 [ 627.086990] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 627.087007] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 627.090976] lowmem_reserve[]: 0 0 1 1 1 [ 627.095805] vmalloc_user+0x70/0xe0 [ 627.095820] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 627.095833] vb2_vmalloc_alloc+0xb3/0x2f0 [ 627.095847] __vb2_queue_alloc+0x472/0xe60 [ 627.095873] vb2_core_create_bufs+0x273/0x7e0 [ 627.095887] ? __vb2_queue_free+0x870/0x870 [ 627.095900] ? __video_do_ioctl+0x632/0xcd0 [ 627.095920] ? pi_state_update_owner+0x450/0x450 [ 627.106955] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 627.109974] ? __mutex_lock+0x368/0x1190 [ 627.169139] lowmem_reserve[]: 0 0 0 0 0 [ 627.173466] vb2_create_bufs+0x332/0x620 [ 627.182318] Node 1 Normal free:26608kB min:53876kB low:67344kB high:80812kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 627.186297] ? mark_held_locks+0xf0/0xf0 [ 627.186312] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 627.186324] ? futex_wait_queue_me+0x404/0x5e0 [ 627.186340] ? pi_state_update_owner+0x450/0x450 [ 627.190663] lowmem_reserve[]: 0 0 0 0 0 [ 627.195067] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 627.195083] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 627.195111] v4l_create_bufs+0xb2/0x160 [ 627.195132] __video_do_ioctl+0x49a/0xcd0 [ 627.195153] ? v4l_querycap+0x340/0x340 [ 627.195175] ? __might_fault+0x192/0x1d0 [ 627.195192] ? v4l_querycap+0x340/0x340 [ 627.212229] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB [ 627.225860] video_usercopy+0x13f/0xfa0 [ 627.225880] ? v4l_enumstd+0x60/0x60 [ 627.225894] ? do_futex+0x171/0x1880 [ 627.225909] ? mark_held_locks+0xf0/0xf0 [ 627.225927] ? debug_check_no_obj_freed+0x201/0x490 [ 627.225950] ? video_usercopy+0xfa0/0xfa0 [ 627.225963] v4l2_ioctl+0x147/0x1a0 [ 627.225975] ? video_devdata+0xa0/0xa0 [ 627.225991] do_vfs_ioctl+0xcdb/0x12e0 [ 627.241152] Node 0 DMA32: 1159*4kB (UME) 576*8kB (UME) 230*16kB (UME) 67*32kB (UMEH) 21*64kB (UMH) 1*128kB (H) 1*256kB (H) 0*512kB 1*1024kB (H) 0*2048kB 0*4096kB = 17820kB [ 627.265658] ? lock_downgrade+0x720/0x720 [ 627.265674] ? check_preemption_disabled+0x41/0x280 [ 627.265687] ? ioctl_preallocate+0x200/0x200 [ 627.265705] ? __fget+0x356/0x510 [ 627.265721] ? do_dup2+0x450/0x450 [ 627.265741] ? __se_sys_futex+0x298/0x3b0 [ 627.265759] ksys_ioctl+0x9b/0xc0 [ 627.265775] __x64_sys_ioctl+0x6f/0xb0 [ 627.265790] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 627.265803] do_syscall_64+0xf9/0x620 [ 627.265821] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 627.265833] RIP: 0033:0x7f90be27e0f9 [ 627.265847] Code: Bad RIP value. [ 627.265854] RSP: 002b:00007f90bc7f0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 627.265866] RAX: ffffffffffffffda RBX: 00007f90be39df80 RCX: 00007f90be27e0f9 [ 627.265875] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000006 [ 627.265883] RBP: 00007f90be2d9ae9 R08: 0000000000000000 R09: 0000000000000000 [ 627.265890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 627.265898] R13: 00007fff4bccdd2f R14: 00007f90bc7f0300 R15: 0000000000022000 [ 627.266403] Mem-Info: [ 627.266438] active_anon:20642 inactive_anon:4854 isolated_anon:0 [ 627.266438] active_file:16 inactive_file:17 isolated_file:0 [ 627.266438] unevictable:0 dirty:0 writeback:0 unstable:0 [ 627.266438] slab_reclaimable:21100 slab_unreclaimable:111814 [ 627.266438] mapped:22688 shmem:5410 pagetables:612 bounce:0 [ 627.266438] free:13824 free_pcp:220 free_cma:0 [ 627.266468] Node 0 active_anon:82556kB inactive_anon:19416kB active_file:64kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:90752kB dirty:0kB writeback:0kB shmem:21640kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 34816kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 627.266496] Node 1 active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 627.266501] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 627.266533] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 627.266553] Node 0 DMA32 free:17820kB min:35996kB low:44992kB high:53988kB active_anon:82556kB inactive_anon:19416kB active_file:64kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7776kB pagetables:2448kB bounce:0kB free_pcp:632kB local_pcp:296kB free_cma:0kB [ 627.266587] lowmem_reserve[]: 0 0 1 1 1 [ 627.266606] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 627.266637] lowmem_reserve[]: 0 0 0 0 0 [ 627.266655] Node 1 Normal free:26608kB min:53876kB low:67344kB high:80812kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 627.266687] lowmem_reserve[]: 0 0 0 0 0 [ 627.266705] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB [ 627.266790] Node 0 DMA32: 1159*4kB (UME) 576*8kB (UME) 230*16kB (UME) 67*32kB (UMEH) 21*64kB (UMH) 1*128kB (H) 1*256kB (H) 0*512kB 1*1024kB (H) 0*2048kB 0*4096kB = 17820kB [ 627.266864] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 627.266918] Node 1 Normal: 2*4kB (ME) 3*8kB (M) 3*16kB (UME) 3*32kB (UM) 3*64kB (ME) 5*128kB (UME) 0*256kB 2*512kB (M) 2*1024kB (M) 1*2048kB (U) 5*4096kB (M) = 26608kB [ 627.267006] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 627.267016] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 627.267027] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 627.267038] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 627.267043] 5443 total pagecache pages [ 627.267056] 0 pages in swap cache [ 627.267065] Swap cache stats: add 0, delete 0, find 0/0 [ 627.267070] Free swap = 0kB [ 627.267074] Total swap = 0kB [ 627.267208] 2097051 pages RAM [ 627.292946] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 627.295064] 0 pages HighMem/MovableOnly [ 627.312228] Node 1 Normal: 2*4kB (ME) 3*8kB (M) 3*16kB (UME) 3*32kB (UM) 3*64kB (ME) 5*128kB (UME) 0*256kB 2*512kB (M) 2*1024kB (M) 1*2048kB (U) 5*4096kB (M) = 26608kB [ 627.312443] 369649 pages reserved [ 627.316565] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 627.320554] 0 pages cma reserved [ 627.350945] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 627.873872] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 627.889640] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 627.898307] 5443 total pagecache pages [ 627.902285] 0 pages in swap cache [ 627.910400] Swap cache stats: add 0, delete 0, find 0/0 [ 627.915824] Free swap = 0kB [ 627.918834] Total swap = 0kB [ 627.921933] 2097051 pages RAM [ 627.929929] 0 pages HighMem/MovableOnly [ 627.933904] 369649 pages reserved [ 627.937415] 0 pages cma reserved [ 627.940891] Unreclaimable slab info: [ 627.949849] Name Used Total [ 627.957196] pid_2 119KB 152KB [ 627.962637] batadv_tl_cache 4KB 12KB [ 627.972739] TIPC 10KB 15KB [ 627.978167] SCTPv6 14KB 18KB [ 627.990617] SCTP 98KB 170KB [ 627.996246] DCCPv6 17KB 22KB [ 628.001617] DCCP 16KB 21KB [ 628.012029] RXRPC 11KB 13KB [ 628.017486] rxrpc_call_jar 78KB 94KB [ 628.022855] bridge_fdb_cache 9KB 15KB [ 628.033317] fib6_nodes 157KB 160KB [ 628.039950] ip6_dst_cache 79KB 326KB [ 628.050270] RAWv6 70KB 74KB [ 628.055688] UDPv6 26KB 30KB [ 628.061060] TCPv6 27KB 42KB [ 628.071458] nf_conntrack 3KB 18KB [ 628.078400] t10_alua_lu_gp_cache 0KB 3KB [ 628.091279] sd_ext_cdb 0KB 7KB [ 628.100364] scsi_sense_cache 1056KB 1060KB [ 628.111465] virtio_scsi_cmd 16KB 16KB [ 628.120676] sgpool-128 8KB 8KB [ 628.131329] sgpool-64 4KB 12KB [ 628.140367] sgpool-32 2KB 15KB [ 628.150843] sgpool-16 1KB 7KB [ 628.159860] sgpool-8 0KB 7KB [ 628.170027] mqueue_inode_cache 10KB 22KB [ 628.179085] bio_post_read_ctx 14KB 15KB [ 628.193884] bio-2 14KB 15KB [ 628.202711] jfs_mp 7KB 7KB [ 628.213137] cifs_small_rq 15KB 16KB [ 628.219571] cifs_request 67KB 67KB [ 628.230369] cifs_mpx_ids 0KB 7KB [ 628.235875] nfs_commit_data 3KB 14KB [ 628.241245] nfs_write_data 34KB 44KB [ 628.251387] ext4_system_zone 1KB 7KB [ 628.256837] bio-1 1KB 7KB [ 628.262320] pid_namespace 2KB 7KB [ 628.273103] rpc_buffers 17KB 25KB [ 628.278656] rpc_tasks 2KB 7KB [ 628.291162] UNIX 56KB 82KB [ 628.297251] tcp_bind_bucket 1KB 4KB [ 628.302632] ip_fib_trie 23KB 27KB [ 628.312826] ip_fib_alias 112KB 118KB [ 628.318404] ip_dst_cache 10KB 48KB [ 628.323773] RAW 42KB 52KB [ 628.334241] UDP 25KB 47KB [ 628.339708] TCP 11KB 22KB [ 628.352185] hugetlbfs_inode_cache 3KB 15KB [ 628.358586] fscache_cookie_jar 1KB 11KB [ 628.364045] eventpoll_pwq 13KB 47KB [ 628.374351] eventpoll_epi 25KB 66KB [ 628.379768] inotify_inode_mark 31KB 55KB [ 628.391575] request_queue 199KB 199KB [ 628.397628] blkdev_requests 1KB 3KB [ 628.403005] blkdev_ioc 9KB 15KB [ 628.413170] bio-0 100KB 101KB [ 628.418789] biovec-max 1278KB 1278KB [ 628.424156] biovec-64 18KB 23KB [ 628.434372] biovec-16 0KB 3KB [ 628.441330] bio_integrity_payload 1KB 8KB [ 628.452025] khugepaged_mm_slot 18KB 34KB [ 628.458229] uid_cache 0KB 4KB [ 628.463598] dmaengine-unmap-2 0KB 3KB [ 628.473798] skbuff_fclone_cache 203KB 476KB [ 628.479386] skbuff_head_cache 2160KB 3101KB [ 628.490107] configfs_dir_cache 3KB 11KB [ 628.497630] file_lock_cache 156KB 202KB [ 628.503006] file_lock_ctx 9KB 11KB [ 628.509175] fsnotify_mark_connector 16KB 31KB [ 628.515120] net_namespace 52KB 52KB [ 628.520485] shmem_inode_cache 8363KB 8543KB [ 628.525947] task_delay_info 258KB 411KB [ 628.531318] taskstats 141KB 210KB [ 628.536988] proc_dir_entry 694KB 697KB [ 628.542971] pde_opener 12KB 66KB [ 628.548972] seq_file 248KB 543KB [ 628.554966] sigqueue 18KB 55KB [ 628.560707] kernfs_node_cache 18234KB 18246KB [ 628.566122] mnt_cache 173KB 188KB [ 628.571488] filp 5215KB 7665KB [ 628.577355] names_cache 131495KB 131533KB [ 628.583319] iint_cache 80KB 87KB [ 628.589248] key_jar 4KB 11KB [ 628.596959] uts_namespace 2KB 7KB [ 628.602335] nsproxy 13KB 19KB [ 628.607795] vm_area_struct 3454KB 5294KB [ 628.613700] mm_struct 819KB 1150KB [ 628.620157] fs_cache 142KB 388KB [ 628.626527] files_cache 555KB 896KB [ 628.632305] signal_cache 1188KB 1868KB [ 628.644559] sighand_cache 538KB 610KB [ 628.649976] task_struct 8004KB 8061KB [ 628.655386] cred_jar 967KB 2108KB [ 628.660755] anon_vma_chain 1111KB 1803KB [ 628.684565] anon_vma 145KB 269KB [ 628.689954] pid 59KB 264KB [ 628.724550] Acpi-Operand 156KB 202KB [ 628.729945] Acpi-ParseExt 8KB 11KB [ 628.735445] Acpi-Parse 41KB 47KB [ 628.740814] Acpi-State 52KB 63KB [ 628.746588] Acpi-Namespace 21KB 27KB [ 628.751958] numa_policy 0KB 3KB [ 628.757402] debug_objects_cache 2213KB 2213KB [ 628.762940] trace_event_file 297KB 298KB [ 628.768396] ftrace_event_field 398KB 401KB [ 628.773850] pool_workqueue 121KB 124KB [ 628.779317] page->ptl 744KB 1047KB [ 628.784824] kmalloc-2097152 2050KB 2050KB [ 628.790194] kmalloc-524288 2056KB 2056KB [ 628.829247] kmalloc-262144 1290KB 1290KB [ 628.835357] kmalloc-131072 650KB 650KB [ 628.840726] kmalloc-65536 1848KB 1914KB [ 628.862033] kmalloc-32768 1650KB 1650KB [ 628.872832] kmalloc-16384 940KB 940KB [ 628.878831] kmalloc-8192 3960KB 4001KB [ 628.884234] kmalloc-4096 18071KB 18126KB [ 628.896078] kmalloc-2048 13002KB 14101KB [ 628.903841] kmalloc-1024 6653KB 7756KB [ 628.916247] kmalloc-512 6304KB 7766KB [ 628.921628] kmalloc-256 5034KB 5565KB [ 628.930252] kmalloc-128 1108KB 1488KB [ 628.938869] kmalloc-96 2875KB 4020KB [ 628.944245] kmalloc-64 3441KB 4264KB [ 628.952988] kmalloc-32 1794KB 2445KB [ 628.961416] kmalloc-192 1494KB 2300KB [ 628.969769] kmem_cache 177KB 183KB [ 628.978182] Out of memory (oom_kill_allocating_task): Kill process 7799 (in:imklog) score 0 or sacrifice child [ 628.997854] Killed process 7786 (rsyslogd) total-vm:254332kB, anon-rss:616kB, file-rss:0kB, shmem-rss:0kB [ 629.014626] oom_reaper: reaped process 7786 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 13:06:06 executing program 2: ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x2, 0x0, 0x75, 0x4800}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x2, 0x0, 0x75, 0x4800}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) 13:06:06 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:06:08 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x3, @pix_mp={0x0, 0x0, 0x36314d59, 0x0, 0x7, [{}, {0x0, 0x4}, {}, {0x401}], 0x0, 0x0, 0x0, 0x1, 0x6}}) (async) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000140)={0x8, 0x4, 0x1, 0x5, 0x2, 0x6, 0x59, 0x1, 0xfe, 0x8, 0x8, 0x1, 0x0, 0x4}, 0xe) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="01e75b00", @ANYRES16=r2, @ANYBLOB="000428bd7000fcdbdf252500000008003500020000000800350004000000"], 0x24}}, 0x4008002) (async) socketpair(0x25, 0x5, 0x10001, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000500)={'wpan4\x00'}) (async) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r5, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 13:06:08 executing program 3: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_COOKIE={0xc}]}, 0x30}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_COOKIE={0xc}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x4, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40810}, 0x40800) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x3, 0x9, 0x101, 0x80800}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0xfffffffe}]}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0xfffffffe}]}}) 13:06:08 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x0, 0x2, 0x0, 0x2}) 13:06:08 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 13:06:08 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:06:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_SSID={0x15, 0x34, @random="93388aaa8e929b9ccdf5660a6a3b123fd4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async, rerun: 64) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (rerun: 64) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xbb, 0x401, 0x34324948, 0x9, 0x3, 0x9, 0x7, 0x40000, 0x1, 0x0, 0x1, 0x7}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) (async) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000380)=@userptr={0x40000000, 0x0, 0x4, 0x0, 0x3, {0x0, 0x2710}, {0x1, 0x2, 0x9, 0x9, 0x80, 0xea, "f8437f47"}, 0x3, 0x2, {&(0x7f0000000340)}, 0x9}) ioctl$vim2m_VIDIOC_G_FMT(r3, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x55595659, 0x0, 0x0, [{}, {}, {0xffffffff}, {}, {0x0, 0x400000}], 0x0, 0x10}}) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000180)) (async) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000140)=0x1, 0x4) 13:06:08 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x0, 0x2, 0x0, 0x2}) 13:06:08 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) (async) 13:06:08 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:06:08 executing program 3: write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000400)={0x15, 0x65, 0xffff, 0x1, 0x8, '9P2000.L'}, 0x15) socketpair(0xb, 0x80000, 0x2, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10682bbd708f104a4ca6b96e4cd202000000", @ANYRES32=r0, @ANYRESOCT=r2], 0x54}, 0x1, 0x0, 0x0, 0x44}, 0x4) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000004c0)=@multiplanar_overlay={0x4, 0x3, 0x4, 0x70000, 0x8001, {0x77359400}, {0x2, 0x2, 0x5f, 0x6, 0x9, 0x0, "c08ca271"}, 0x4, 0x3, {&(0x7f0000000440)=[{0x101, 0x8, {0x6}, 0x8}, {0x5, 0x6, {0x6}, 0x3be}]}, 0x8, 0x0, r3}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000080)={0xffff, 0x0, 0x1, "5aa11e6368caeab793aadf64445e405c4564c0cdeea6036eb04992025a500fe4", 0x30314247}) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:06:08 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x3, @pix_mp={0x0, 0x0, 0x36314d59, 0x0, 0x7, [{}, {0x0, 0x4}, {}, {0x401}], 0x0, 0x0, 0x0, 0x1, 0x6}}) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000140)={0x8, 0x4, 0x1, 0x5, 0x2, 0x6, 0x59, 0x1, 0xfe, 0x8, 0x8, 0x1, 0x0, 0x4}, 0xe) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="01e75b00", @ANYRES16=r2, @ANYBLOB="000428bd7000fcdbdf252500000008003500020000000800350004000000"], 0x24}}, 0x4008002) socketpair(0x25, 0x5, 0x10001, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000500)={'wpan4\x00'}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r5, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x3, @pix_mp={0x0, 0x0, 0x36314d59, 0x0, 0x7, [{}, {0x0, 0x4}, {}, {0x401}], 0x0, 0x0, 0x0, 0x1, 0x6}}) (async) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)) (async) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000140)={0x8, 0x4, 0x1, 0x5, 0x2, 0x6, 0x59, 0x1, 0xfe, 0x8, 0x8, 0x1, 0x0, 0x4}, 0xe) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="01e75b00", @ANYRES16=r2, @ANYBLOB="000428bd7000fcdbdf252500000008003500020000000800350004000000"], 0x24}}, 0x4008002) (async) socketpair(0x25, 0x5, 0x10001, &(0x7f0000000180)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000500)={'wpan4\x00'}) (async) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r5, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async) 13:06:08 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:06:08 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x0, 0x0, 0x2}) 13:06:08 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) (async) 13:06:08 executing program 3: write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000400)={0x15, 0x65, 0xffff, 0x1, 0x8, '9P2000.L'}, 0x15) socketpair(0xb, 0x80000, 0x2, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) (async, rerun: 64) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10682bbd708f104a4ca6b96e4cd202000000", @ANYRES32=r0, @ANYRESOCT=r2], 0x54}, 0x1, 0x0, 0x0, 0x44}, 0x4) (async, rerun: 64) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000004c0)=@multiplanar_overlay={0x4, 0x3, 0x4, 0x70000, 0x8001, {0x77359400}, {0x2, 0x2, 0x5f, 0x6, 0x9, 0x0, "c08ca271"}, 0x4, 0x3, {&(0x7f0000000440)=[{0x101, 0x8, {0x6}, 0x8}, {0x5, 0x6, {0x6}, 0x3be}]}, 0x8, 0x0, r3}) (async) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000080)={0xffff, 0x0, 0x1, "5aa11e6368caeab793aadf64445e405c4564c0cdeea6036eb04992025a500fe4", 0x30314247}) (async) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:06:08 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:06:08 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x0, 0x0, 0x2}) 13:06:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_SSID={0x15, 0x34, @random="93388aaa8e929b9ccdf5660a6a3b123fd4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xbb, 0x401, 0x34324948, 0x9, 0x3, 0x9, 0x7, 0x40000, 0x1, 0x0, 0x1, 0x7}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000380)=@userptr={0x40000000, 0x0, 0x4, 0x0, 0x3, {0x0, 0x2710}, {0x1, 0x2, 0x9, 0x9, 0x80, 0xea, "f8437f47"}, 0x3, 0x2, {&(0x7f0000000340)}, 0x9}) ioctl$vim2m_VIDIOC_G_FMT(r3, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x55595659, 0x0, 0x0, [{}, {}, {0xffffffff}, {}, {0x0, 0x400000}], 0x0, 0x10}}) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000140)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) (async) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_SSID={0x15, 0x34, @random="93388aaa8e929b9ccdf5660a6a3b123fd4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) (async) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xbb, 0x401, 0x34324948, 0x9, 0x3, 0x9, 0x7, 0x40000, 0x1, 0x0, 0x1, 0x7}}) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000380)=@userptr={0x40000000, 0x0, 0x4, 0x0, 0x3, {0x0, 0x2710}, {0x1, 0x2, 0x9, 0x9, 0x80, 0xea, "f8437f47"}, 0x3, 0x2, {&(0x7f0000000340)}, 0x9}) (async) ioctl$vim2m_VIDIOC_G_FMT(r3, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x55595659, 0x0, 0x0, [{}, {}, {0xffffffff}, {}, {0x0, 0x400000}], 0x0, 0x10}}) (async) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000180)) (async) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000140)=0x1, 0x4) (async) 13:06:08 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2, @pix={0x6, 0x1, 0x30395056, 0x5, 0xf78a, 0x76, 0x5, 0x80000000, 0x1, 0x7, 0x0, 0x7}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x2673, 0x20}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x8, 0x3, 0x2, 0x0, 0x8}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x2, 0x401, 0x10000007, 0x104000}) 13:06:08 executing program 3: write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000400)={0x15, 0x65, 0xffff, 0x1, 0x8, '9P2000.L'}, 0x15) socketpair(0xb, 0x80000, 0x2, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10682bbd708f104a4ca6b96e4cd202000000", @ANYRES32=r0, @ANYRESOCT=r2], 0x54}, 0x1, 0x0, 0x0, 0x44}, 0x4) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10682bbd708f104a4ca6b96e4cd202000000", @ANYRES32=r0, @ANYRESOCT=r2], 0x54}, 0x1, 0x0, 0x0, 0x44}, 0x4) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000004c0)=@multiplanar_overlay={0x4, 0x3, 0x4, 0x70000, 0x8001, {0x77359400}, {0x2, 0x2, 0x5f, 0x6, 0x9, 0x0, "c08ca271"}, 0x4, 0x3, {&(0x7f0000000440)=[{0x101, 0x8, {0x6}, 0x8}, {0x5, 0x6, {0x6}, 0x3be}]}, 0x8, 0x0, r3}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000004c0)=@multiplanar_overlay={0x4, 0x3, 0x4, 0x70000, 0x8001, {0x77359400}, {0x2, 0x2, 0x5f, 0x6, 0x9, 0x0, "c08ca271"}, 0x4, 0x3, {&(0x7f0000000440)=[{0x101, 0x8, {0x6}, 0x8}, {0x5, 0x6, {0x6}, 0x3be}]}, 0x8, 0x0, r3}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000080)={0xffff, 0x0, 0x1, "5aa11e6368caeab793aadf64445e405c4564c0cdeea6036eb04992025a500fe4", 0x30314247}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000080)={0xffff, 0x0, 0x1, "5aa11e6368caeab793aadf64445e405c4564c0cdeea6036eb04992025a500fe4", 0x30314247}) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:06:08 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:06:08 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x0, 0x0, 0x2}) [ 637.238991] oom_reaper: reaped process 11544 (syz-executor.4), now anon-rss:0kB, file-rss:14336kB, shmem-rss:4kB [ 637.261022] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 637.272726] in:imklog cpuset=/ mems_allowed=0-1 [ 637.277465] CPU: 1 PID: 11450 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 637.284914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 637.294272] Call Trace: [ 637.296874] dump_stack+0x1fc/0x2ef [ 637.300511] dump_header+0x15d/0xc3f [ 637.304234] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 637.309342] ? ___ratelimit+0x319/0x590 [ 637.313326] oom_kill_process.cold+0x10/0x692 [ 637.317831] ? check_preemption_disabled+0x41/0x280 [ 637.322857] ? has_intersects_mems_allowed+0x1d6/0x290 [ 637.328145] out_of_memory+0x1072/0x1390 [ 637.332224] ? oom_killer_disable+0x270/0x270 [ 637.336741] ? mutex_trylock+0x15f/0x1a0 [ 637.340792] __alloc_pages_nodemask+0x23a2/0x2890 [ 637.345644] ? find_get_entry+0x4cd/0x8a0 [ 637.349780] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 637.354663] alloc_pages_current+0x193/0x2a0 [ 637.359059] filemap_fault+0x146e/0x2180 [ 637.363112] ext4_filemap_fault+0x84/0xb0 [ 637.367262] __do_fault+0x10b/0x4b0 [ 637.370973] __handle_mm_fault+0x273b/0x41c0 [ 637.375421] ? vm_insert_page+0x9c0/0x9c0 [ 637.379560] ? lock_downgrade+0x720/0x720 [ 637.383700] ? check_preemption_disabled+0x41/0x280 [ 637.388706] handle_mm_fault+0x436/0xb10 [ 637.392774] __do_page_fault+0x68e/0xd60 [ 637.396851] ? trace_hardirqs_off_caller+0x6e/0x210 [ 637.401858] ? spurious_fault+0x840/0x840 [ 637.405994] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 637.410822] ? page_fault+0x8/0x30 [ 637.414347] page_fault+0x1e/0x30 [ 637.417853] RIP: 0033:0x7f7e3157b22d [ 637.421576] Code: Bad RIP value. [ 637.424941] RSP: 002b:00007f7e2ef17580 EFLAGS: 00010293 [ 637.430288] RAX: 0000000000000077 RBX: 0000000000000000 RCX: 00007f7e3157b22d [ 637.437547] RDX: 0000000000001fa0 RSI: 00007f7e2ef17da0 RDI: 0000000000000004 [ 637.444809] RBP: 0000564c390a39d0 R08: 0000000000000000 R09: 0000000000000000 [ 637.452063] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007f7e2ef17da0 [ 637.459315] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f7e2ef19458 [ 637.468697] Mem-Info: [ 637.471152] active_anon:19042 inactive_anon:4854 isolated_anon:0 [ 637.471152] active_file:55 inactive_file:14 isolated_file:0 [ 637.471152] unevictable:0 dirty:4 writeback:0 unstable:0 [ 637.471152] slab_reclaimable:20975 slab_unreclaimable:109937 [ 637.471152] mapped:22725 shmem:5410 pagetables:582 bounce:0 [ 637.471152] free:13756 free_pcp:153 free_cma:0 [ 637.483991] syz-executor.4: vmalloc: allocation failure, allocated 1807278080 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 637.506170] Node 0 active_anon:76152kB inactive_anon:19416kB active_file:200kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:90896kB dirty:16kB writeback:0kB shmem:21640kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 30720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 637.529469] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 637.552493] Node 1 active_anon:16kB inactive_anon:0kB active_file:20kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 637.555082] CPU: 0 PID: 11544 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 637.583332] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 637.586482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 637.586488] Call Trace: [ 637.586510] dump_stack+0x1fc/0x2ef [ 637.586529] warn_alloc.cold+0x7b/0x18f [ 637.619694] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 637.621990] ? zone_watermark_ok_safe+0x260/0x260 [ 637.625315] Node 0 DMA32 free:17536kB min:35996kB low:44992kB high:53988kB active_anon:76252kB inactive_anon:19416kB active_file:332kB inactive_file:304kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7712kB pagetables:2324kB bounce:0kB free_pcp:360kB local_pcp:112kB free_cma:0kB [ 637.628192] __vmalloc_area_node+0x4fd/0x780 [ 637.632133] lowmem_reserve[]: 0 0 1 1 1 [ 637.637145] ? __vmalloc_node_range+0x180/0x180 [ 637.637159] ? _raw_spin_unlock+0x29/0x40 [ 637.637171] ? __get_vm_area_node+0x2e2/0x3a0 [ 637.637188] __vmalloc_node_range+0xed/0x180 [ 637.637204] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 637.637218] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 637.637229] vmalloc_user+0x70/0xe0 [ 637.637247] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 637.643915] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 637.671119] vb2_vmalloc_alloc+0xb3/0x2f0 [ 637.671134] __vb2_queue_alloc+0x472/0xe60 [ 637.671158] vb2_core_create_bufs+0x273/0x7e0 [ 637.671171] ? __vb2_queue_free+0x870/0x870 [ 637.671189] ? __video_do_ioctl+0x632/0xcd0 [ 637.680362] lowmem_reserve[]: 0 0 0 0 0 [ 637.684410] ? pi_state_update_owner+0x450/0x450 [ 637.684425] ? __mutex_lock+0x368/0x1190 [ 637.684442] vb2_create_bufs+0x332/0x620 [ 637.684459] ? mark_held_locks+0xf0/0xf0 [ 637.688584] Node 1 Normal free:26596kB min:53876kB low:67344kB high:80812kB active_anon:16kB inactive_anon:0kB active_file:20kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:252kB local_pcp:4kB free_cma:0kB [ 637.693075] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 637.702275] lowmem_reserve[]: 0 0 0 0 0 [ 637.707151] ? futex_wait_queue_me+0x404/0x5e0 [ 637.707165] ? pi_state_update_owner+0x450/0x450 [ 637.707179] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 637.707194] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 637.707213] v4l_create_bufs+0xb2/0x160 [ 637.707228] __video_do_ioctl+0x49a/0xcd0 [ 637.707246] ? v4l_querycap+0x340/0x340 [ 637.707265] ? __might_fault+0x192/0x1d0 [ 637.707279] ? v4l_querycap+0x340/0x340 [ 637.707293] video_usercopy+0x13f/0xfa0 [ 637.707314] ? v4l_enumstd+0x60/0x60 [ 637.707327] ? do_futex+0x171/0x1880 [ 637.707341] ? mark_held_locks+0xf0/0xf0 [ 637.707358] ? debug_check_no_obj_freed+0x201/0x490 [ 637.707381] ? video_usercopy+0xfa0/0xfa0 [ 637.707392] v4l2_ioctl+0x147/0x1a0 [ 637.707404] ? video_devdata+0xa0/0xa0 [ 637.707419] do_vfs_ioctl+0xcdb/0x12e0 [ 637.707433] ? lock_downgrade+0x720/0x720 [ 637.707448] ? check_preemption_disabled+0x41/0x280 [ 637.707462] ? ioctl_preallocate+0x200/0x200 [ 637.707480] ? __fget+0x356/0x510 [ 637.707495] ? do_dup2+0x450/0x450 [ 637.707508] ? __se_sys_futex+0x298/0x3b0 [ 637.707528] ksys_ioctl+0x9b/0xc0 [ 637.707543] __x64_sys_ioctl+0x6f/0xb0 [ 637.707557] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 637.707570] do_syscall_64+0xf9/0x620 [ 637.707588] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 637.707599] RIP: 0033:0x7f90be27e0f9 [ 637.707614] Code: Bad RIP value. [ 637.707621] RSP: 002b:00007f90bc7f0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 637.707633] RAX: ffffffffffffffda RBX: 00007f90be39df80 RCX: 00007f90be27e0f9 [ 637.707641] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000006 [ 637.707648] RBP: 00007f90be2d9ae9 R08: 0000000000000000 R09: 0000000000000000 [ 637.707655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 637.707663] R13: 00007fff4bccdd2f R14: 00007f90bc7f0300 R15: 0000000000022000 [ 637.712714] Mem-Info: [ 637.717512] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 637.754462] active_anon:19042 inactive_anon:4854 isolated_anon:0 [ 637.754462] active_file:55 inactive_file:14 isolated_file:0 [ 637.754462] unevictable:0 dirty:4 writeback:0 unstable:0 [ 637.754462] slab_reclaimable:20975 slab_unreclaimable:109937 [ 637.754462] mapped:22725 shmem:5410 pagetables:582 bounce:0 [ 637.754462] free:13756 free_pcp:158 free_cma:0 [ 637.756813] Node 0 DMA32: 1282*4kB (UME) 627*8kB (UME) 153*16kB (UME) 62*32kB (UMEH) 17*64kB (UMH) 1*128kB (H) 1*256kB (H) 1*512kB (H) 1*1024kB (H) 0*2048kB 0*4096kB = 17584kB [ 637.761177] Node 0 active_anon:76152kB inactive_anon:19416kB active_file:200kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:90896kB dirty:16kB writeback:0kB shmem:21640kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 30720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 637.765675] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 637.765730] Node 1 Normal: 3*4kB (UM) 4*8kB (M) 4*16kB (UME) 5*32kB (UME) 3*64kB (M) 6*128kB (UME) 1*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (UM) 4*4096kB (M) = 26572kB [ 637.780141] Node 1 active_anon:16kB inactive_anon:0kB active_file:20kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 637.783523] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 637.793413] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 637.817276] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 637.828246] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 637.829307] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 637.836254] Node 0 DMA32 free:17584kB min:35996kB low:44992kB high:53988kB active_anon:76148kB inactive_anon:19416kB active_file:60kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7712kB pagetables:2320kB bounce:0kB free_pcp:412kB local_pcp:280kB free_cma:0kB [ 637.839172] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 637.848277] lowmem_reserve[]: 0 0 1 1 1 [ 637.848444] 5440 total pagecache pages [ 637.852661] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 637.856664] 0 pages in swap cache [ 637.856671] Swap cache stats: add 0, delete 0, find 0/0 [ 637.856676] Free swap = 0kB [ 637.856681] Total swap = 0kB [ 637.856690] 2097051 pages RAM [ 637.856695] 0 pages HighMem/MovableOnly [ 637.856699] 369649 pages reserved [ 637.856704] 0 pages cma reserved [ 637.856710] Unreclaimable slab info: [ 637.864676] lowmem_reserve[]: 0 0 0 0 0 [ 637.866623] Name Used Total [ 637.878053] Node 1 Normal free:26572kB min:53876kB low:67344kB high:80812kB active_anon:12kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:252kB local_pcp:248kB free_cma:0kB [ 637.882058] pid_2 98KB 152KB [ 637.889230] lowmem_reserve[]: 0 0 0 0 0 [ 637.891625] batadv_tl_cache 4KB 12KB [ 637.899332] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 637.902935] TIPC 10KB 15KB [ 637.911322] Node 0 DMA32: 1282*4kB (UME) 633*8kB (UME) 153*16kB (UME) 62*32kB (UMEH) 17*64kB (UMH) 1*128kB (H) 1*256kB (H) 1*512kB (H) 1*1024kB (H) 0*2048kB 0*4096kB = 17632kB [ 637.913814] SCTPv6 14KB 18KB [ 637.921019] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 637.923505] SCTP 54KB 112KB [ 637.931955] Node 1 Normal: 3*4kB (UM) 4*8kB (M) 4*16kB (UME) 5*32kB (UME) 3*64kB (M) 6*128kB (UME) 1*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (UM) 4*4096kB (M) = 26572kB [ 637.935053] DCCPv6 17KB 22KB [ 637.935068] DCCP 16KB 21KB [ 637.935111] RXRPC 11KB 13KB [ 637.943487] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 637.951147] rxrpc_call_jar 78KB 94KB [ 637.955030] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 637.955820] bridge_fdb_cache 9KB 15KB [ 637.963643] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 637.975602] fib6_nodes 157KB 160KB [ 637.979424] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 637.987946] ip6_dst_cache 77KB 326KB [ 637.992883] 5440 total pagecache pages [ 638.002513] RAWv6 70KB 74KB [ 638.006032] 0 pages in swap cache [ 638.022091] UDPv6 26KB 30KB [ 638.057668] Swap cache stats: add 0, delete 0, find 0/0 [ 638.068748] TCPv6 24KB 42KB [ 638.100238] Free swap = 0kB [ 638.103448] nf_conntrack 4KB 18KB [ 638.129254] Total swap = 0kB [ 638.146633] t10_alua_lu_gp_cache 0KB 3KB [ 638.146649] sd_ext_cdb 0KB 7KB [ 638.146658] scsi_sense_cache 1056KB 1060KB [ 638.146667] virtio_scsi_cmd 16KB 16KB [ 638.146679] sgpool-128 8KB 8KB [ 638.162302] 2097051 pages RAM [ 638.196565] sgpool-64 4KB 12KB [ 638.207879] 0 pages HighMem/MovableOnly [ 638.247133] sgpool-32 2KB 15KB [ 638.253971] 369649 pages reserved [ 638.282881] sgpool-16 1KB 7KB [ 638.293097] 0 pages cma reserved [ 638.300930] sgpool-8 0KB 7KB [ 638.616561] mqueue_inode_cache 10KB 22KB [ 638.622037] bio_post_read_ctx 14KB 15KB [ 638.633073] bio-2 14KB 15KB [ 638.639376] jfs_mp 7KB 7KB [ 638.648764] cifs_small_rq 15KB 16KB [ 638.654983] cifs_request 67KB 67KB [ 638.660371] cifs_mpx_ids 0KB 7KB [ 638.670690] nfs_commit_data 3KB 14KB [ 638.676938] nfs_write_data 34KB 44KB [ 638.682424] ext4_system_zone 1KB 7KB [ 638.691765] bio-1 1KB 7KB [ 638.698115] pid_namespace 2KB 7KB [ 638.703492] rpc_buffers 17KB 25KB [ 638.712876] rpc_tasks 2KB 7KB [ 638.719212] UNIX 91KB 105KB [ 638.728742] tcp_bind_bucket 1KB 4KB [ 638.736807] ip_fib_trie 23KB 27KB [ 638.742208] ip_fib_alias 112KB 118KB [ 638.747747] ip_dst_cache 10KB 48KB [ 638.753112] RAW 42KB 52KB [ 638.758576] UDP 30KB 47KB [ 638.764515] TCP 8KB 16KB [ 638.769888] hugetlbfs_inode_cache 3KB 15KB [ 638.775664] fscache_cookie_jar 1KB 11KB [ 638.781123] eventpoll_pwq 15KB 47KB [ 638.786566] eventpoll_epi 28KB 66KB [ 638.791934] inotify_inode_mark 26KB 55KB [ 638.797467] request_queue 199KB 199KB [ 638.802836] blkdev_requests 1KB 3KB [ 638.808294] blkdev_ioc 10KB 15KB [ 638.813664] bio-0 308KB 311KB [ 638.819121] biovec-max 1328KB 1328KB [ 638.824537] biovec-64 185KB 189KB [ 638.829907] biovec-16 10KB 15KB [ 638.837415] bio_integrity_payload 1KB 8KB [ 638.843494] khugepaged_mm_slot 14KB 34KB [ 638.849011] uid_cache 0KB 4KB [ 638.854472] dmaengine-unmap-2 0KB 3KB [ 638.859843] skbuff_fclone_cache 153KB 431KB [ 638.865447] skbuff_head_cache 2827KB 3101KB [ 638.870818] configfs_dir_cache 3KB 11KB [ 638.876378] file_lock_cache 126KB 202KB [ 638.881745] file_lock_ctx 9KB 11KB [ 638.887195] fsnotify_mark_connector 13KB 31KB [ 638.893114] net_namespace 52KB 52KB [ 638.898529] shmem_inode_cache 8292KB 8536KB [ 638.903933] task_delay_info 226KB 411KB [ 638.909299] taskstats 113KB 210KB [ 638.914711] proc_dir_entry 694KB 697KB [ 638.920076] pde_opener 8KB 62KB [ 638.925483] seq_file 223KB 539KB [ 638.930847] sigqueue 21KB 55KB [ 638.938505] kernfs_node_cache 18234KB 18246KB [ 638.944087] mnt_cache 173KB 188KB [ 638.949475] filp 5228KB 7657KB [ 638.954900] names_cache 129901KB 129939KB [ 638.960270] iint_cache 83KB 87KB [ 638.965714] key_jar 4KB 11KB [ 638.971084] uts_namespace 2KB 7KB [ 638.976571] nsproxy 5KB 15KB [ 638.982026] vm_area_struct 3275KB 5236KB [ 638.987489] mm_struct 713KB 1124KB [ 638.992860] fs_cache 118KB 384KB [ 638.998280] files_cache 475KB 870KB [ 639.003668] signal_cache 1060KB 1825KB [ 639.009076] sighand_cache 518KB 596KB [ 639.014578] task_struct 7354KB 7410KB [ 639.019946] cred_jar 958KB 2100KB [ 639.025420] anon_vma_chain 1068KB 1803KB [ 639.030895] anon_vma 150KB 269KB [ 639.036406] pid 53KB 264KB [ 639.043743] Acpi-Operand 156KB 202KB [ 639.049277] Acpi-ParseExt 8KB 11KB [ 639.054695] Acpi-Parse 41KB 47KB [ 639.060065] Acpi-State 52KB 63KB [ 639.065502] Acpi-Namespace 21KB 27KB [ 639.070874] numa_policy 0KB 3KB [ 639.076509] debug_objects_cache 2210KB 2213KB [ 639.082139] trace_event_file 297KB 298KB [ 639.088418] ftrace_event_field 398KB 401KB [ 639.093918] pool_workqueue 121KB 124KB [ 639.099283] page->ptl 681KB 1047KB [ 639.104761] kmalloc-2097152 2050KB 2050KB [ 639.110220] kmalloc-524288 2056KB 2056KB [ 639.115644] kmalloc-262144 1290KB 1290KB [ 639.121045] kmalloc-131072 650KB 650KB [ 639.126548] kmalloc-65536 1848KB 1914KB [ 639.131912] kmalloc-32768 1650KB 1650KB [ 639.137328] kmalloc-16384 940KB 940KB [ 639.144639] kmalloc-8192 3960KB 4001KB [ 639.150106] kmalloc-4096 18096KB 18134KB [ 639.155713] kmalloc-2048 12958KB 14031KB [ 639.161079] kmalloc-1024 7044KB 7756KB [ 639.166499] kmalloc-512 7553KB 7766KB [ 639.171869] kmalloc-256 5189KB 5557KB [ 639.177344] kmalloc-128 1050KB 1488KB [ 639.182718] kmalloc-96 2987KB 4020KB [ 639.188149] kmalloc-64 3452KB 4264KB [ 639.193549] kmalloc-32 1794KB 2445KB [ 639.199001] kmalloc-192 1484KB 2292KB [ 639.204435] kmem_cache 177KB 183KB [ 639.209806] Out of memory (oom_kill_allocating_task): Kill process 11450 (in:imklog) score 0 or sacrifice child [ 639.220144] Killed process 11436 (rsyslogd) total-vm:254332kB, anon-rss:528kB, file-rss:0kB, shmem-rss:0kB [ 639.232369] oom_reaper: reaped process 11436 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 13:06:16 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2, @pix={0x6, 0x1, 0x30395056, 0x5, 0xf78a, 0x76, 0x5, 0x80000000, 0x1, 0x7, 0x0, 0x7}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x2673, 0x20}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x8, 0x3, 0x2, 0x0, 0x8}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x2, 0x401, 0x10000007, 0x104000}) 13:06:16 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2}) 13:06:16 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:06:16 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:06:16 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x5, 0x3, 0x3, 0x0, 0x3f}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000440)={0x1, @vbi={0x80000001, 0x9, 0x1ff, 0x34424752, [0x7fffffff, 0xfffffff8], [0xe08, 0x4], 0x1}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000065bd7000fcdbdf2590000000041358dfae1ff4000400f4009dbe529ef58852d835d31d287117ea901caf0c"], 0x20}}, 0x4000) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000000c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x8, 0x7, {0x0, 0xea60}, {0x4, 0x1, 0x66, 0x1, 0x6, 0xdb, "441c8eb4"}, 0x7, 0x1, {&(0x7f0000000040)=[{0x7, 0x7ff, {0xe0dc}, 0x481c}, {0x2, 0x6, {0x6}, 0x80000000}]}, 0x75}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x8, 0x4f19fd21a4b648c5, 0x2, "71d5cbdb69e3dab91dd6c582e900b243e53ef3072de7969f3559408ac885df4d", 0x30314742}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000003c0)=@multiplanar_overlay={0x8, 0x0, 0x4, 0x0, 0x8, {r4, r5/1000+10000}, {0x1, 0xc, 0x1, 0xff, 0x4, 0x4, "5ccbbc85"}, 0x7, 0x3, {&(0x7f0000000340)=[{0x4b, 0x5, {0x6}, 0x5}, {0x800, 0x3, {0xd9c}, 0x3ff}]}, 0x3, 0x0, r0}) 13:06:17 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:06:17 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2, @pix={0x6, 0x1, 0x30395056, 0x5, 0xf78a, 0x76, 0x5, 0x80000000, 0x1, 0x7, 0x0, 0x7}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2, @pix={0x6, 0x1, 0x30395056, 0x5, 0xf78a, 0x76, 0x5, 0x80000000, 0x1, 0x7, 0x0, 0x7}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x2673, 0x20}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x8, 0x3, 0x2, 0x0, 0x8}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x2, 0x401, 0x10000007, 0x104000}) 13:06:19 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)=@fd={0x9, 0x3, 0x4, 0x2, 0x2, {}, {0x3, 0x2, 0x4, 0xeb, 0xff, 0x0, "25030385"}, 0x7ff, 0x4, {}, 0x8}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x1, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x0, 0x3, 0x3, 0x0, 0xfd}) ioctl$vim2m_VIDIOC_G_FMT(r2, 0x5452, &(0x7f0000000580)={0x3, @pix_mp={0x7fffffff, 0x700, 0x3136452a, 0x5, 0x2, [{}, {}, {0x200}, {0x8}, {}, {0x0, 0x200000}, {0xfffffffe}]}}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x2, @sliced={0x479, [0x0, 0x20, 0x0, 0x200, 0x4f, 0x5, 0x8, 0x722, 0x2, 0x101, 0xffe0, 0xfff7, 0x3, 0x4, 0x7, 0x29ec, 0x407, 0x0, 0x675e, 0x1, 0x3, 0x8, 0x0, 0x8, 0x40, 0x9, 0x7f, 0x3, 0x1f, 0x1ff, 0x5, 0x6, 0x4, 0x1000, 0x401, 0x1ff, 0x96, 0x1, 0x3a, 0x0, 0x927b, 0x9, 0x9bb, 0x7, 0x1, 0xec, 0x5704, 0x1f], 0xffffff01}}) 13:06:19 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2}) 13:06:19 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x2) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:06:19 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x5, 0x3, 0x3, 0x0, 0x3f}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000440)={0x1, @vbi={0x80000001, 0x9, 0x1ff, 0x34424752, [0x7fffffff, 0xfffffff8], [0xe08, 0x4], 0x1}}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000065bd7000fcdbdf2590000000041358dfae1ff4000400f4009dbe529ef58852d835d31d287117ea901caf0c"], 0x20}}, 0x4000) (async, rerun: 64) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async, rerun: 64) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000000c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x8, 0x7, {0x0, 0xea60}, {0x4, 0x1, 0x66, 0x1, 0x6, 0xdb, "441c8eb4"}, 0x7, 0x1, {&(0x7f0000000040)=[{0x7, 0x7ff, {0xe0dc}, 0x481c}, {0x2, 0x6, {0x6}, 0x80000000}]}, 0x75}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x8, 0x4f19fd21a4b648c5, 0x2, "71d5cbdb69e3dab91dd6c582e900b243e53ef3072de7969f3559408ac885df4d", 0x30314742}) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) (rerun: 32) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000003c0)=@multiplanar_overlay={0x8, 0x0, 0x4, 0x0, 0x8, {r4, r5/1000+10000}, {0x1, 0xc, 0x1, 0xff, 0x4, 0x4, "5ccbbc85"}, 0x7, 0x3, {&(0x7f0000000340)=[{0x4b, 0x5, {0x6}, 0x5}, {0x800, 0x3, {0xd9c}, 0x3ff}]}, 0x3, 0x0, r0}) 13:06:19 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:06:19 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) 13:06:19 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)=@fd={0x9, 0x3, 0x4, 0x2, 0x2, {}, {0x3, 0x2, 0x4, 0xeb, 0xff, 0x0, "25030385"}, 0x7ff, 0x4, {}, 0x8}) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x1, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x0, 0x3, 0x3, 0x0, 0xfd}) (async) ioctl$vim2m_VIDIOC_G_FMT(r2, 0x5452, &(0x7f0000000580)={0x3, @pix_mp={0x7fffffff, 0x700, 0x3136452a, 0x5, 0x2, [{}, {}, {0x200}, {0x8}, {}, {0x0, 0x200000}, {0xfffffffe}]}}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) (async) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x2, @sliced={0x479, [0x0, 0x20, 0x0, 0x200, 0x4f, 0x5, 0x8, 0x722, 0x2, 0x101, 0xffe0, 0xfff7, 0x3, 0x4, 0x7, 0x29ec, 0x407, 0x0, 0x675e, 0x1, 0x3, 0x8, 0x0, 0x8, 0x40, 0x9, 0x7f, 0x3, 0x1f, 0x1ff, 0x5, 0x6, 0x4, 0x1000, 0x401, 0x1ff, 0x96, 0x1, 0x3a, 0x0, 0x927b, 0x9, 0x9bb, 0x7, 0x1, 0xec, 0x5704, 0x1f], 0xffffff01}}) 13:06:19 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 13:06:19 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x2) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:06:19 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r2) (async) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) 13:06:19 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)=@fd={0x9, 0x3, 0x4, 0x2, 0x2, {}, {0x3, 0x2, 0x4, 0xeb, 0xff, 0x0, "25030385"}, 0x7ff, 0x4, {}, 0x8}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x1, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x0, 0x3, 0x3, 0x0, 0xfd}) ioctl$vim2m_VIDIOC_G_FMT(r2, 0x5452, &(0x7f0000000580)={0x3, @pix_mp={0x7fffffff, 0x700, 0x3136452a, 0x5, 0x2, [{}, {}, {0x200}, {0x8}, {}, {0x0, 0x200000}, {0xfffffffe}]}}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x2, @sliced={0x479, [0x0, 0x20, 0x0, 0x200, 0x4f, 0x5, 0x8, 0x722, 0x2, 0x101, 0xffe0, 0xfff7, 0x3, 0x4, 0x7, 0x29ec, 0x407, 0x0, 0x675e, 0x1, 0x3, 0x8, 0x0, 0x8, 0x40, 0x9, 0x7f, 0x3, 0x1f, 0x1ff, 0x5, 0x6, 0x4, 0x1000, 0x401, 0x1ff, 0x96, 0x1, 0x3a, 0x0, 0x927b, 0x9, 0x9bb, 0x7, 0x1, 0xec, 0x5704, 0x1f], 0xffffff01}}) 13:06:19 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x5, 0x3, 0x3, 0x0, 0x3f}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000440)={0x1, @vbi={0x80000001, 0x9, 0x1ff, 0x34424752, [0x7fffffff, 0xfffffff8], [0xe08, 0x4], 0x1}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000065bd7000fcdbdf2590000000041358dfae1ff4000400f4009dbe529ef58852d835d31d287117ea901caf0c"], 0x20}}, 0x4000) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000000c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x8, 0x7, {0x0, 0xea60}, {0x4, 0x1, 0x66, 0x1, 0x6, 0xdb, "441c8eb4"}, 0x7, 0x1, {&(0x7f0000000040)=[{0x7, 0x7ff, {0xe0dc}, 0x481c}, {0x2, 0x6, {0x6}, 0x80000000}]}, 0x75}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x8, 0x4f19fd21a4b648c5, 0x2, "71d5cbdb69e3dab91dd6c582e900b243e53ef3072de7969f3559408ac885df4d", 0x30314742}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000003c0)=@multiplanar_overlay={0x8, 0x0, 0x4, 0x0, 0x8, {r4, r5/1000+10000}, {0x1, 0xc, 0x1, 0xff, 0x4, 0x4, "5ccbbc85"}, 0x7, 0x3, {&(0x7f0000000340)=[{0x4b, 0x5, {0x6}, 0x5}, {0x800, 0x3, {0xd9c}, 0x3ff}]}, 0x3, 0x0, r0}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x5, 0x3, 0x3, 0x0, 0x3f}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000440)={0x1, @vbi={0x80000001, 0x9, 0x1ff, 0x34424752, [0x7fffffff, 0xfffffff8], [0xe08, 0x4], 0x1}}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000065bd7000fcdbdf2590000000041358dfae1ff4000400f4009dbe529ef58852d835d31d287117ea901caf0c"], 0x20}}, 0x4000) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000000c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x8, 0x7, {0x0, 0xea60}, {0x4, 0x1, 0x66, 0x1, 0x6, 0xdb, "441c8eb4"}, 0x7, 0x1, {&(0x7f0000000040)=[{0x7, 0x7ff, {0xe0dc}, 0x481c}, {0x2, 0x6, {0x6}, 0x80000000}]}, 0x75}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x8, 0x4f19fd21a4b648c5, 0x2, "71d5cbdb69e3dab91dd6c582e900b243e53ef3072de7969f3559408ac885df4d", 0x30314742}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) clock_gettime(0x0, &(0x7f0000000200)) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000003c0)=@multiplanar_overlay={0x8, 0x0, 0x4, 0x0, 0x8, {r4, r5/1000+10000}, {0x1, 0xc, 0x1, 0xff, 0x4, 0x4, "5ccbbc85"}, 0x7, 0x3, {&(0x7f0000000340)=[{0x4b, 0x5, {0x6}, 0x5}, {0x800, 0x3, {0xd9c}, 0x3ff}]}, 0x3, 0x0, r0}) (async) 13:06:19 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 13:06:19 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)=@fd={0x9, 0x3, 0x4, 0x2, 0x2, {}, {0x3, 0x2, 0x4, 0xeb, 0xff, 0x0, "25030385"}, 0x7ff, 0x4, {}, 0x8}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x1, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x1, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x0, 0x3, 0x3, 0x0, 0xfd}) ioctl$vim2m_VIDIOC_G_FMT(r2, 0x5452, &(0x7f0000000580)={0x3, @pix_mp={0x7fffffff, 0x700, 0x3136452a, 0x5, 0x2, [{}, {}, {0x200}, {0x8}, {}, {0x0, 0x200000}, {0xfffffffe}]}}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x2, @sliced={0x479, [0x0, 0x20, 0x0, 0x200, 0x4f, 0x5, 0x8, 0x722, 0x2, 0x101, 0xffe0, 0xfff7, 0x3, 0x4, 0x7, 0x29ec, 0x407, 0x0, 0x675e, 0x1, 0x3, 0x8, 0x0, 0x8, 0x40, 0x9, 0x7f, 0x3, 0x1f, 0x1ff, 0x5, 0x6, 0x4, 0x1000, 0x401, 0x1ff, 0x96, 0x1, 0x3a, 0x0, 0x927b, 0x9, 0x9bb, 0x7, 0x1, 0xec, 0x5704, 0x1f], 0xffffff01}}) 13:06:19 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4081) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000580)={0x1, @win={{0x25a, 0x1, 0x9, 0x1}, 0x6, 0x80000000, &(0x7f0000000400)={{0xc0, 0x1, 0x46, 0x5}, &(0x7f00000003c0)={{0x0, 0x7, 0x1, 0x1}, &(0x7f0000000380)={{0x9, 0x8, 0x80000001, 0x1}}}}, 0x1, &(0x7f0000000480)="647a63c7959e8a452f2d41d05dac9943f13e26a4f5dbffbf0710a9dcd15da7d85228ce72b753bfa6b4f79838938cbb35f750b277827403481332942113146dee845c", 0x9}}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, r3, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x7e}}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x8}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x3}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x2}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa6}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x3000}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1b}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6c}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3f}]}, 0x6c}}, 0x11) socketpair(0x27, 0x3, 0x7, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x3b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000074}, 0x40080) sysinfo(&(0x7f0000000680)=""/207) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f00000008c0)={0xf, 0x1f, 0x2, 0x9}, 0xf) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) socketpair(0x10, 0x800, 0x7f, &(0x7f0000000880)) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r7, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x40, 0x68}}}}, [@NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3f}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40841) 13:06:19 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)=@fd={0x9, 0x3, 0x4, 0x2, 0x2, {}, {0x3, 0x2, 0x4, 0xeb, 0xff, 0x0, "25030385"}, 0x7ff, 0x4, {}, 0x8}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x1, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x0, 0x3, 0x3, 0x0, 0xfd}) ioctl$vim2m_VIDIOC_G_FMT(r2, 0x5452, &(0x7f0000000580)={0x3, @pix_mp={0x7fffffff, 0x700, 0x3136452a, 0x5, 0x2, [{}, {}, {0x200}, {0x8}, {}, {0x0, 0x200000}, {0xfffffffe}]}}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x2, @sliced={0x479, [0x0, 0x20, 0x0, 0x200, 0x4f, 0x5, 0x8, 0x722, 0x2, 0x101, 0xffe0, 0xfff7, 0x3, 0x4, 0x7, 0x29ec, 0x407, 0x0, 0x675e, 0x1, 0x3, 0x8, 0x0, 0x8, 0x40, 0x9, 0x7f, 0x3, 0x1f, 0x1ff, 0x5, 0x6, 0x4, 0x1000, 0x401, 0x1ff, 0x96, 0x1, 0x3a, 0x0, 0x927b, 0x9, 0x9bb, 0x7, 0x1, 0xec, 0x5704, 0x1f], 0xffffff01}}) 13:06:19 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'veth0_macvtap\x00'}}) 13:06:19 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async, rerun: 32) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) (rerun: 32) 13:06:19 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 13:06:19 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4081) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000580)={0x1, @win={{0x25a, 0x1, 0x9, 0x1}, 0x6, 0x80000000, &(0x7f0000000400)={{0xc0, 0x1, 0x46, 0x5}, &(0x7f00000003c0)={{0x0, 0x7, 0x1, 0x1}, &(0x7f0000000380)={{0x9, 0x8, 0x80000001, 0x1}}}}, 0x1, &(0x7f0000000480)="647a63c7959e8a452f2d41d05dac9943f13e26a4f5dbffbf0710a9dcd15da7d85228ce72b753bfa6b4f79838938cbb35f750b277827403481332942113146dee845c", 0x9}}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, r3, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x7e}}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x8}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x3}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x2}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa6}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x3000}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1b}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6c}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3f}]}, 0x6c}}, 0x11) socketpair(0x27, 0x3, 0x7, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x3b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000074}, 0x40080) (async) sysinfo(&(0x7f0000000680)=""/207) (async, rerun: 64) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f00000008c0)={0xf, 0x1f, 0x2, 0x9}, 0xf) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) socketpair(0x10, 0x800, 0x7f, &(0x7f0000000880)) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r7, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x40, 0x68}}}}, [@NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3f}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40841) 13:06:19 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x3) 13:06:19 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4081) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000580)={0x1, @win={{0x25a, 0x1, 0x9, 0x1}, 0x6, 0x80000000, &(0x7f0000000400)={{0xc0, 0x1, 0x46, 0x5}, &(0x7f00000003c0)={{0x0, 0x7, 0x1, 0x1}, &(0x7f0000000380)={{0x9, 0x8, 0x80000001, 0x1}}}}, 0x1, &(0x7f0000000480)="647a63c7959e8a452f2d41d05dac9943f13e26a4f5dbffbf0710a9dcd15da7d85228ce72b753bfa6b4f79838938cbb35f750b277827403481332942113146dee845c", 0x9}}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, r3, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x7e}}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x8}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x3}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x2}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa6}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x3000}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1b}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6c}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3f}]}, 0x6c}}, 0x11) socketpair(0x27, 0x3, 0x7, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x3b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000074}, 0x40080) sysinfo(&(0x7f0000000680)=""/207) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f00000008c0)={0xf, 0x1f, 0x2, 0x9}, 0xf) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) socketpair(0x10, 0x800, 0x7f, &(0x7f0000000880)) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r7, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x40, 0x68}}}}, [@NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3f}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40841) 13:06:19 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x10}}}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x12, 0x13, [{0x5}, {0x18, 0x1}, {0x24, 0x1}, {0x1b}, {0x16, 0x1}, {}, {0x68}, {0x6c, 0x1}, {0x60}, {0xc, 0x1}, {0x2, 0x1}, {0x48, 0x1}, {0x24}, {0xb, 0x1}]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x2e, 0xac, "ee2e77a2bc7ff47e9897ab1edf9da052ba7883daf4690d345fc68f8731ac2a27d6cdbad9c0563fe39995"}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8800) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) 13:06:19 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'veth0_macvtap\x00'}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)) (async) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) (async) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'veth0_macvtap\x00'}}) (async) 13:06:19 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x0, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:06:19 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x3) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x3) (async) 13:06:19 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4081) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000580)={0x1, @win={{0x25a, 0x1, 0x9, 0x1}, 0x6, 0x80000000, &(0x7f0000000400)={{0xc0, 0x1, 0x46, 0x5}, &(0x7f00000003c0)={{0x0, 0x7, 0x1, 0x1}, &(0x7f0000000380)={{0x9, 0x8, 0x80000001, 0x1}}}}, 0x1, &(0x7f0000000480)="647a63c7959e8a452f2d41d05dac9943f13e26a4f5dbffbf0710a9dcd15da7d85228ce72b753bfa6b4f79838938cbb35f750b277827403481332942113146dee845c", 0x9}}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, r3, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x7e}}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x8}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x3}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x2}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa6}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x3000}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1b}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6c}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3f}]}, 0x6c}}, 0x11) socketpair(0x27, 0x3, 0x7, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x3b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000074}, 0x40080) sysinfo(&(0x7f0000000680)=""/207) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f00000008c0)={0xf, 0x1f, 0x2, 0x9}, 0xf) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) socketpair(0x10, 0x800, 0x7f, &(0x7f0000000880)) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r7, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x40, 0x68}}}}, [@NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3f}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40841) 13:06:19 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) (async, rerun: 64) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x10}}}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x12, 0x13, [{0x5}, {0x18, 0x1}, {0x24, 0x1}, {0x1b}, {0x16, 0x1}, {}, {0x68}, {0x6c, 0x1}, {0x60}, {0xc, 0x1}, {0x2, 0x1}, {0x48, 0x1}, {0x24}, {0xb, 0x1}]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x2e, 0xac, "ee2e77a2bc7ff47e9897ab1edf9da052ba7883daf4690d345fc68f8731ac2a27d6cdbad9c0563fe39995"}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8800) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) 13:06:19 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x0, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:06:19 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4081) (async, rerun: 64) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000580)={0x1, @win={{0x25a, 0x1, 0x9, 0x1}, 0x6, 0x80000000, &(0x7f0000000400)={{0xc0, 0x1, 0x46, 0x5}, &(0x7f00000003c0)={{0x0, 0x7, 0x1, 0x1}, &(0x7f0000000380)={{0x9, 0x8, 0x80000001, 0x1}}}}, 0x1, &(0x7f0000000480)="647a63c7959e8a452f2d41d05dac9943f13e26a4f5dbffbf0710a9dcd15da7d85228ce72b753bfa6b4f79838938cbb35f750b277827403481332942113146dee845c", 0x9}}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, r3, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x7e}}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x8}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x3}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x2}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa6}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x3000}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1b}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6c}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3f}]}, 0x6c}}, 0x11) (async) socketpair(0x27, 0x3, 0x7, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x3b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000074}, 0x40080) sysinfo(&(0x7f0000000680)=""/207) (async, rerun: 32) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f00000008c0)={0xf, 0x1f, 0x2, 0x9}, 0xf) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r5) (async) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (rerun: 64) socketpair(0x10, 0x800, 0x7f, &(0x7f0000000880)) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r7, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x40, 0x68}}}}, [@NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3f}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40841) (rerun: 64) 13:06:19 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x3) 13:06:20 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x0, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:06:20 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x5, 0x3, 0x3, 0x0, 0x3f}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000440)={0x1, @vbi={0x80000001, 0x9, 0x1ff, 0x34424752, [0x7fffffff, 0xfffffff8], [0xe08, 0x4], 0x1}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000065bd7000fcdbdf2590000000041358dfae1ff4000400f4009dbe529ef58852d835d31d287117ea901caf0c"], 0x20}}, 0x4000) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000000c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x8, 0x7, {0x0, 0xea60}, {0x4, 0x1, 0x66, 0x1, 0x6, 0xdb, "441c8eb4"}, 0x7, 0x1, {&(0x7f0000000040)=[{0x7, 0x7ff, {0xe0dc}, 0x481c}, {0x2, 0x6, {0x6}, 0x80000000}]}, 0x75}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x8, 0x4f19fd21a4b648c5, 0x2, "71d5cbdb69e3dab91dd6c582e900b243e53ef3072de7969f3559408ac885df4d", 0x30314742}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000003c0)=@multiplanar_overlay={0x8, 0x0, 0x4, 0x0, 0x8, {r4, r5/1000+10000}, {0x1, 0xc, 0x1, 0xff, 0x4, 0x4, "5ccbbc85"}, 0x7, 0x3, {&(0x7f0000000340)=[{0x4b, 0x5, {0x6}, 0x5}, {0x800, 0x3, {0xd9c}, 0x3ff}]}, 0x3, 0x0, r0}) 13:06:20 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'veth0_macvtap\x00'}}) 13:06:20 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x3, [{}, {0x10}, {}, {0x0, 0xfe66}, {}, {}, {0x0, 0x200}], 0x0, 0x0, 0x8}}) 13:06:20 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) (async) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x10}}}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x12, 0x13, [{0x5}, {0x18, 0x1}, {0x24, 0x1}, {0x1b}, {0x16, 0x1}, {}, {0x68}, {0x6c, 0x1}, {0x60}, {0xc, 0x1}, {0x2, 0x1}, {0x48, 0x1}, {0x24}, {0xb, 0x1}]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x2e, 0xac, "ee2e77a2bc7ff47e9897ab1edf9da052ba7883daf4690d345fc68f8731ac2a27d6cdbad9c0563fe39995"}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8800) (async, rerun: 64) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) 13:06:20 executing program 5: write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000400)={0x15, 0x65, 0xffff, 0x1, 0x8, '9P2000.L'}, 0x15) socketpair(0xb, 0x80000, 0x2, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10682bbd708f104a4ca6b96e4cd202000000", @ANYRES32=r0, @ANYRESOCT=r2], 0x54}, 0x1, 0x0, 0x0, 0x44}, 0x4) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000004c0)=@multiplanar_overlay={0x4, 0x3, 0x4, 0x70000, 0x8001, {0x77359400}, {0x2, 0x2, 0x5f, 0x6, 0x9, 0x0, "c08ca271"}, 0x4, 0x3, {&(0x7f0000000440)=[{0x101, 0x8, {0x6}, 0x8}, {0x5, 0x6, {0x6}, 0x3be}]}, 0x8, 0x0, r3}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000080)={0xffff, 0x0, 0x1, "5aa11e6368caeab793aadf64445e405c4564c0cdeea6036eb04992025a500fe4", 0x30314247}) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:06:20 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x0, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:06:20 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x3, [{}, {0x10}, {}, {0x0, 0xfe66}, {}, {}, {0x0, 0x200}], 0x0, 0x0, 0x8}}) 13:06:20 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x3, 0x7fff, 0x3}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {0x9}]}}) 13:06:20 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 13:06:20 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x1}}) 13:06:20 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x0, 0x0, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:06:20 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x3, [{}, {0x10}, {}, {0x0, 0xfe66}, {}, {}, {0x0, 0x200}], 0x0, 0x0, 0x8}}) 13:06:20 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x8000, 0x1, 0x1, "3af1cd02d7ed74f959aed2ab47fd2aaebeef453b955d110682a63635d354636d", 0x31303453}) 13:06:20 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async, rerun: 64) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x3, 0x7fff, 0x3}) (async, rerun: 64) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {0x9}]}}) (rerun: 64) 13:06:20 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 13:06:20 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x0, 0x0, 0x0, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:06:20 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000140)=@multiplanar_userptr={0x1, 0x3, 0x4, 0x1000, 0x8, {0x0, 0x2710}, {0x1, 0x1, 0x5, 0x3, 0x8, 0x70, "fa6d4804"}, 0x7, 0x2, {&(0x7f00000000c0)=[{0xf9c, 0x7, {&(0x7f0000000040)}, 0x1f}, {0x4, 0x8001, {&(0x7f0000000080)}, 0x1b57}]}, 0x6}) 13:06:20 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x1}}) 13:06:20 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 13:06:20 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x8000, 0x1, 0x1, "3af1cd02d7ed74f959aed2ab47fd2aaebeef453b955d110682a63635d354636d", 0x31303453}) 13:06:20 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000140)=@multiplanar_userptr={0x1, 0x3, 0x4, 0x1000, 0x8, {0x0, 0x2710}, {0x1, 0x1, 0x5, 0x3, 0x8, 0x70, "fa6d4804"}, 0x7, 0x2, {&(0x7f00000000c0)=[{0xf9c, 0x7, {&(0x7f0000000040)}, 0x1f}, {0x4, 0x8001, {&(0x7f0000000080)}, 0x1b57}]}, 0x6}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000140)=@multiplanar_userptr={0x1, 0x3, 0x4, 0x1000, 0x8, {0x0, 0x2710}, {0x1, 0x1, 0x5, 0x3, 0x8, 0x70, "fa6d4804"}, 0x7, 0x2, {&(0x7f00000000c0)=[{0xf9c, 0x7, {&(0x7f0000000040)}, 0x1f}, {0x4, 0x8001, {&(0x7f0000000080)}, 0x1b57}]}, 0x6}) (async) 13:06:20 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:06:20 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x8000, 0x1, 0x1, "3af1cd02d7ed74f959aed2ab47fd2aaebeef453b955d110682a63635d354636d", 0x31303453}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x8000, 0x1, 0x1, "3af1cd02d7ed74f959aed2ab47fd2aaebeef453b955d110682a63635d354636d", 0x31303453}) (async) 13:06:20 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x1}}) 13:06:20 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 13:06:20 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x3, 0x7fff, 0x3}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {0x9}]}}) 13:06:20 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:06:20 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:06:20 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x3, @vbi={0x2, 0x4, 0x8ad, 0x30395056, [0x0, 0x7], [0x3ff, 0x400], 0x1}}) 13:06:20 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000140)=@multiplanar_userptr={0x1, 0x3, 0x4, 0x1000, 0x8, {0x0, 0x2710}, {0x1, 0x1, 0x5, 0x3, 0x8, 0x70, "fa6d4804"}, 0x7, 0x2, {&(0x7f00000000c0)=[{0xf9c, 0x7, {&(0x7f0000000040)}, 0x1f}, {0x4, 0x8001, {&(0x7f0000000080)}, 0x1b57}]}, 0x6}) 13:06:20 executing program 5: prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 13:06:20 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x3, @vbi={0x2, 0x4, 0x8ad, 0x30395056, [0x0, 0x7], [0x3ff, 0x400], 0x1}}) 13:06:20 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:06:20 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x3, 0x4, 0x101, 0x84800}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:06:20 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) 13:06:20 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d4fa5037"}, 0x0, 0x2, {0x0}}) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000440)={0x2, @pix={0x6, 0x344, 0x52424752, 0x7, 0x4, 0x100, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000001c0)={0x8, 0x3f, 0x4, {0x1, @win={{0x8, 0x40800, 0x9, 0x7ff}, 0x0, 0x6, &(0x7f0000000180)={{0x8, 0x1, 0x46e8, 0x1000}, &(0x7f0000000140)={{0x7f, 0x38b7, 0x8}, &(0x7f0000000100)={{0x10000000, 0xa44, 0x3f, 0x80000000}}}}, 0x40, &(0x7f0000000680)="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", 0x9c}}, 0x80000001}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000001680)={0x3ff, 0x9b}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x61}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x400}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000054) 13:06:20 executing program 5: prctl$PR_MCE_KILL(0x21, 0x0, 0x1) 13:06:20 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x3, @vbi={0x2, 0x4, 0x8ad, 0x30395056, [0x0, 0x7], [0x3ff, 0x400], 0x1}}) 13:06:20 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x3, 0x4, 0x101, 0x84800}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x3, 0x4, 0x101, 0x84800}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:06:20 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d4fa5037"}, 0x0, 0x2, {0x0}}) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000440)={0x2, @pix={0x6, 0x344, 0x52424752, 0x7, 0x4, 0x100, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000001c0)={0x8, 0x3f, 0x4, {0x1, @win={{0x8, 0x40800, 0x9, 0x7ff}, 0x0, 0x6, &(0x7f0000000180)={{0x8, 0x1, 0x46e8, 0x1000}, &(0x7f0000000140)={{0x7f, 0x38b7, 0x8}, &(0x7f0000000100)={{0x10000000, 0xa44, 0x3f, 0x80000000}}}}, 0x40, &(0x7f0000000680)="7d76a7b0b3efa359a256988ce68721077a3d3dce63ea388ff1aa3f52c78deb4998dbe9fad353043276bc2c914b4c18d0d3c0573fd0e098ab87831b1c2a5008324c5b32fb368d2718483e17fb15669658cb41de6079731d64bc6ba8e30dc4f891b119e22271de10717a2a50894ed4782cb1320a9b8d465582aae04d2715659e7e26e801e3966aa13f9561770d75a4381a3da94956074f763f89de8abf5fcefdc45021aa7d0059e1044c3690eac7670f2dc9381bfd8e605b6afd3511ccf47cae373850c1617eb7c20bf2e765503be641a5acca71e3a8d3cfb608ad126ad08d4fb2a7847e81fca4cc558256bb3ab7410f73cf02b709a155c470fec89c0ce21dc394ae61c1ade42ba78f6419a415453277fd4a201e421bb3774492e4dd1956e818ac1d5597c5fae3c14d03e2ba61573da7ddcdaf4adf394eaa204e71c74c2ec5b2b75927d670aef5ffb17ffb107ee317d7b1ef296367dd29ac7de793c2b75d9cdb7c75a09d4779c6d428b7ebff6ce1ac9cf56f0ec59c19a4a814692cc1848fb0cd65843bd3c6c06e9f07d8d0d102c8b5dba2bfce97ac28ddc9d384666accd0591eff6297fa5e5a1ff91b216d6543fa7d4ce467b636243c376b0cf38985e97cffc6c238b8bb8195478da38201c51cb706f9eb0731ff8a6b9651474cc3cfd295915be9f0755bc6dc5f736e0c09d502b712cc5323acdc0876d5dfe3201434fb8909bff9367013802c16f62189fd45e407d9183fd818f90aac1b2b49ad95b57924412f1d5d44e71f4f0b8c98865ded06ea5c79e15bce39fb5bb901db2c212003f42e53aab0287e1edd8465e1ea9ca57335dc62affa8186bfa18e1801cde71c80bd1a5f542796d9175680834ed38020a93f7ea455bab26e0032b156c6d2f63dc6f9ccf535d1580999ef1ed71ed096be0cd1a881a026db7aa3a7581a278af4edfb53d0e728fef1cacd3a50f611129b617f3266b1e94040f874d27784b687ca517207f30ffefd49d9a7024da9e5364412d3bdf42c77f5435449c8ebca3783cf28db8156851fd3091595f50cd5e7a8c4d14476cdab98933acc6315539ffc4d97c834d1b5d61d74cd29dd6258d92b1ab1fefb6299368832526ea2e18880f4569bc93960b51150909a7978c16f261e3112e6f05f65e6dce8cf2890f21ec2954598c7bd943a0f2065da4f36a0270f8331e85bd74403a123ad67321f74a1f463aa86a98891f8701011bb2e6bea491d7c1a71fc62b33517a97445d9f5cbcec51533b1997791572bc1ab517868e4f3fe5aa88d579504a1a9c3e41b3842e7993e259098e3ecd18460dac8fc4c2899a60a99229a72d0122a82d6516258a7f6e6cddea5d453be1c0ee32789dd88713ba6a03ca18636321fa4e97e0dc2e5f34cab621212f8c9a2838a5ab0b3c80914b867f2a30854d1f1905df844ee6bb53d73bee0594d1290a29d95cd0e308e9827830e6fc06ab3dac3b11e993dd4aaf16614cd64cdb59f9a7afb295b6f41edd404ea6e2b02f51cb7803f5aa119818f25e40e12b673e100e57b81bb4fd751439504f0658dcf9e1a9b7fd0608d32cd42e3c60b800b309865e3e4e104fdd893c0e85f366ac27d61ef6bb061a93849280bc5db871692cb12cfea21a3e25375ee5c65280057674c7321b784d40a388790e44dd322e6ce2b7bc8904cc3584b5aec633a15c64d7b28c1350c18c833335a5b4ebbeeb7b1a7d7813e1b30eb717ea96d2b79af287a35a15ec67d923dc0639ddaf8deba22916d7233df4d30fe14d9bad7175bd51123ca33a8d0059a4b042b808b2d6cb16cd28e7d97f65024c17786f735b838ef8d6ad0f2f5ae92c3094e7e0d4f28036b9f07c4f68abb25e2b6c01c9687ad52f4b4bdb39b12c872586f27a151b295379cefb4a6afd11ef739d6c579752297241af1e4fa5f38b2445b492c53e3111ea6aa579062da66664e6c35a67d02fff71f451ee5ab26e19661467e188c2f2a0263c9e7b65f19192b28cc6672f9c8e3a283874aad34c4def9bf4a878abe3b4416ec5747c3edace43bdf4cbfe32b9e61e01bedfb316aff13d6a0d54f657bf8c21e83aeb6bab125af6bbd9d11394445168abaa637d52ec1487ea1ce65021af3ef4620447eed906953f83e0fe969820fef5261c3ad21ec15008b7451d1a8d8bdd61059436f4f495acc8bbcd61eabdff37dd8560558766cb1170ac6624e444ed7598e602fd65b4876c7486dafd1ec7608ebd79a3e123f44667cc1ed4486a03f29596da09e9f17cfc694db6bf6e2cad75419bca9ef03e258af04a20f8897cf0a67e0d8d498d8d23e4771c954e1f1163a8472aa452ab9c651cc8d412a008bcee452adf15e341383b261c57b115c6fda87ce1dff064d3812b85435d0ac6826078b7b5809879299012116c4c3744005d761107fd91addbdd4928cc780bbafac4d15f9e044a6276d06610265f6bb81d94d3e0fb9aa7eb919793812151a1b1f4649826d51db6541bdcaa0419133a044b0b878084f546e219ce539038a0a7d121a22f012f43c2684a97b4c67de90d738aa1d03c42111252090ea770b90d8a4850a52053b4238c60db7ff4eedf0323ab2d3cdedbb02d33e88a90bfda73d45daab6f358a5001ca91bcd07fb17746caf1ec595f5b1640b542b2c2694b78979975b6fb0e4b6382856d16c1925ff0a554c6d1ff1dc7402018c86202a8c433f6048c5d30702489ac7516e4317ebcdc88b323e0c1a7656bffffe613f2c71fc52a38d38083102b3963549bf602dec18a732c0a832e9f7dad127d23787693605ac9081fbe6d59bb732e2684726d20aef8f316edf0562a4f15f1008ac50c192d4398c63d3999667c69111c74656f7892513d3de682914012660fd463afeff18e7f3a507e27ce6ff4bd1f3cacb5e489911e3f69573cf646c152f20f2a21b6137b5f3d7f66279e2515c5e3a4bfdcdb411026764d75b5be4f981bc5fcdffde2e5c1976c91019fb5eec0dc012317bc753a7550a07b55c414f1447aa2638d3fdebd95b102ba1bc295321d31269af8b1010cc4170454709461da01c83bd88bc58d2e4377fa6cb615154df521ce80489ebe4a1f8c7b64b45e4aa6790f6146b4282376e4399d75f8aa8100d1bfd8a09e862ac18eb3a0952fb64a5b6545f50d439ed85a8dc62c83b4a15338065d85e715fc4ab4dbd2231eea10d4a7dd2d1e73503e39beec3b391d1678bf3a7cfd064f359e49bf7bf2bea923ac1321349a68186aac7828cdc722eaa50c8a1cbc6b6f9667fcb010085242ae9184ff307f7397391969897615599ffa1903890b3fa296993698281715e156f8003f74dc34cf70615dd95614532540926dbcff40bce9f72b3d9cc7832653ca0cd5b1582df710317045b3a1af3dff5b1d8e70e7050438b6c8e736bb2b247442d9f3c6df98f73e434cbb899c791854efa8d97be66716440001e542c5db1b34aa341e8ae20309f7f40c08f2aabbf25cd2560f2393d5f77adaf30385a8d5ed2a038e62510adc1612751b5261f0753a254d164b2ac595bee7ca63230531384b331af354b4bf1a7827764d4a17a40fe7d1d6af7c1b81f8318aa3345882bcf69a75ee5dfed72024a67cfced6227656884a52b922aa6bd3f5a98ee030e6c8a3ab240f42c6dd3ab07cacfe8920fdd90116ad15b626cfeddbaa4ae991bac8789386f096f8cea6f2ed92130a3215f42b2555baea793329aa6f14546ece5c7cc51e86691632715fefd11a6cbbe5adb2c8e550260a34934a4214cea164cdd252a3d33cd7c69b25984b6a957f748e1e99d49378b62f3a80091ebf55edae2022997caad9f8ea2645d97ca7e82db40e0fec827877287c5abd4d379a3e00a1b0cc87e2c1f0b92d7271b2415d85099dd6732e2433d87efe51f51f784280e3dad6dcd546eb48c3e7abdaaad04c75df9c05629b03375af459fd1096a02b43c46a7bfec0962c39c63358a0dc7c2fa0893d1585d7bf8a12f37eae7077fd8f1e37f1c9b738de9f41c243a5a497501238450a532a2e6c71800dfc3a9cec00cb26450b6fe8e59926ce38eef467341a6bbe8c222e959e5467673a8268605a9aaabd62880d8bfa8022d481958ca4045bbda8bad5e569140f51fb0887b09339f1bb97d166225578c3d97a7450f35cd33d5a0bf81506647afa1538c6c7783b6e390f64bee917e7912b55f18e25bf3e8756e20c5cf3c40db7fab1ed2e0210f215cd886677a077e7dc64b4edb3d939b5d2c0170b4117a61c0692d6a1f67af6597032919110661c49dee0d67b1c9c9d9e531907b67518a68f769cd86087be6543890141a0b5efba698ef8c4fa9597abe5cec6d0bac3053afb196c4551f6eba45aea19cb974e386d5de0551e5cb33c64d39125bef03599a6ffd6303231a693a86850e0bc00a4fb4c838d31f124b1bd3185d8ddb84d9db9e011533697a3eba3d6c62f43ad8468bf77a6b16dbe0eb6205245e25ce5127d315e300251186d274ac8271fe8416737ab16dc31c7aa85fa5b5e9dddfa7e68865a97103e89da86803a77c33abee794f589dfceed1e7105cfcf961f2e4bdb126ee0ff0c12b67100dc0768d8e8e66b367b1b4040d2d6811b03608360e1e6e7f5225d5e2aa0c1b4eae7e86c7407e78ec8700efa08bfd9dfae7891909e94dac811159e84b62e72598caa572ca6bd126ee564a53b300c1166d15abe043eb020f97f64b3ffa6ec077fed76e054e91d5904e16c73c1b2ddeb6d0e7f795d569c47aed53524ab9b72143d8d4b1531744bd3a692cb1c667c36b178f629427e53389d569bacaa5dd796c48ce58ebecdc82604117cb809a8a0a78f705dd74454b3324ee436b17e454f663b70b18d6490da33617b2d0446f8870e9192dab0dcff6f77321096618ac53538a357b88234e83a9e9910c363f6338cb9554803658491bbdda67d63c7142f7e134485bb98283fe0b9d8f93d9a7c7cf99c359b02a658bb6d34a69f161c6084644024c199a2b3f3bd629d8eb95b44a2d6ee7a3c393bdb354fb151f386ed76736502c5129675e0ccfed7a44f770a2d8615d17473e7a25985a3fd9f2ecbd938a2f32abe0e94e36ba02a0c4897612fecabcc0ba0e523b6b0a627b9346445f9028fc855b48d638975d2dd893dd8bf4b517e8a7c489f5a19e8b3949d438a2bab619bed191f1200b49e85f7548a4e1c8b5713dcd05bbf228d2a948c9f06bed481e304b21cfcd177398b9f3edd0de6326f1ecc25a4749833edf238220ff251b0b6bb36cec730d3497e694540403342c581be1e527739d81965b3cac11856e6be7d540796b340f923a74c4ab0ff7b2ad6234ecae0dbc1433bebea7e124d9eeb766ef8ac7f4aa4a2c24d6e8fdb45861dc6b1233cc63bfaaacbe4f141d1a7d0f61503f264e150b900bc73b39e700e98f6e900bd45508373cad2660bfffb4aa2b6be68092998dc52755fef0b327e9a58c5a9e7197975d9bbd901f566dc8200e44db9ce7e074c8dc09bcd1c2334ae1f37fce454f31b3fa22562f6051a0477b8414eee4dc0079cfcd5d539a1468f60b70c38fec0e6a1a80e8fe06ccec8cd46284e09b2d07afdffd440492602e213a1e593e81b5853a5e2ad8a0b50f096d22b867bd31b670aaa4e49d1f1e3492f668405b6952ccd2d377d704036fc8becbc8deda6ceef7fef85a517041f56c8238bf0c539c39ec815f4bf2633aed0680c0f7d0fe3b1dc54689e311c4c72d0a08cc4b183b8bbefbd677fab10ed8f539f4cce070d661c8f418668757983a32d00dd3be06ac8946a0b477f1e36a8cc6641056f7c167c0cbe0d302b58a5093f530a95fca9c433d0512ad4f2c5de67652ba89a786725296ed20a7", 0x9c}}, 0x80000001}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000001680)={0x3ff, 0x9b}) (async) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x61}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x400}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000054) 13:06:20 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:06:20 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2}) 13:06:20 executing program 5: prctl$PR_MCE_KILL(0x21, 0x0, 0x1) 13:06:20 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r2, 0x5421, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x1) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000000c0)={0x1, @sdr={0x30324c4a, 0x7e3f}}) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x76, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x9, 0xfffffff8, 0x4e564058, 0x6, 0x247, 0xdb, 0x4, 0x100, 0x1, 0x2, 0x0, 0x2}}) 13:06:20 executing program 5: prctl$PR_MCE_KILL(0x21, 0x0, 0x1) 13:06:20 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x3, 0x4, 0x101, 0x84800}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x3, 0x4, 0x101, 0x84800}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) 13:06:20 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x104, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x2}, {0xfd}, {0x7, 0x7}, {0xd1}, {0x4, 0x6}, {0x2, 0x1}, {0x3, 0x2}, {0x20, 0x6}, {0x6}, {0x80, 0x5}], "d427ecce2a6e5bbc"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x89, 0x5}, {0x40, 0x6}, {0x3f, 0x2}, {0x0, 0x6}, {0x7}, {0x7f}], "a004d9d92938e2d7"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x1}, {0x6, 0x3}, {0x6, 0x1}, {0x45, 0x6}, {0x5, 0x1}, {0x1, 0x5}, {0x2, 0x2}, {0x9, 0x1}, {0x7, 0x1}, {0x4, 0x2}, {0x5}, {0xbc, 0x7}], "baabc20dff20ec65"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x3f, 0x3}, {0x6, 0x5}, {0x8, 0x3}, {0xc0}, {0xfc, 0x3}, {0x3d, 0x2}, {0x81, 0x5}, {0x3, 0x5}, {0x7, 0x7}], "87012b026cb8cd95"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x40, 0x3}, {0xfb, 0x7}, {0xfe}, {0x7f, 0x7}, {0x40, 0x5}, {0x7, 0x4}, {0xff, 0x4}, {0x6, 0x3}, {0x1, 0x3}, {0x62, 0x5}, {0x1, 0x5}], "dfae082c53ee05a0"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x5, 0x1}, {0x2, 0x2}, {0x7}, {0x31, 0x4}, {0x3, 0x1}, {0xed}, {0xd, 0x6}], "9e7abdb7dffa0c8f"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x0, 0x6}, {0x0, 0x3}, {0x8, 0x2}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x5}, {0x40, 0x2}, {0x9, 0x4}, {0x3, 0x5}, {0x37, 0x6}, {0x4, 0x3}, {0x81, 0x6}, {0x2, 0x4}, {0xb5, 0x4}, {0x4, 0x5}], "6d2a8a0748496481"}}]}, 0x104}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0xc}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x4c}}, 0x40001) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)={0x9a0, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x3f4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x9, 0x9, 0x4, 0x60, 0xc, 0xc, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x48, 0x6, 0x2, 0x6, 0x24, 0x5, 0x48, 0x30, 0x24, 0x7, 0x0, 0x36, 0x30, 0x36, 0x2, 0x4, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3c, 0x401, 0x86e4, 0x5, 0xfff, 0x400, 0x5, 0xfe8e]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x5, 0x60, 0x3116, 0x5b0, 0x7, 0x7, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x49, 0x5, 0x48, 0x6c, 0x2, 0x3, 0x3]}, @NL80211_TXRATE_HT={0x21, 0x2, [{}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x2}, {0x4, 0x2}, {0x0, 0x6}, {0x2, 0x5}, {0x2}, {0x0, 0x4}, {0x5, 0xa}, {0x1, 0x7}, {0x0, 0x5}, {0x2, 0x2}, {0x6, 0x2}, {0x2, 0x6}, {0x1, 0x2}, {0x6, 0x4}, {0x6, 0x4}, {0x0, 0x9}, {0x7, 0x7}, {0x3, 0x3}, {0x2, 0x9}, {0x1, 0xa}, {0x1, 0xa}, {0x0, 0x3}, {0x2, 0x9}, {0x0, 0x9}, {0x1, 0x5}, {0x6, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x36, 0x36, 0x6c, 0x2, 0xb, 0x0, 0x12, 0x4, 0xb, 0x1, 0x9, 0x60, 0x5, 0x24, 0x9, 0x3, 0x0, 0x1, 0xc5, 0x18, 0x18, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfa, 0x9, 0x0, 0x8, 0x7f, 0xfc00, 0x8, 0xffff]}}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4a, 0x9782, 0x7ff, 0x3, 0x5, 0x5, 0x6d6, 0x7]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x24, 0x9, 0x6c, 0x48, 0x5, 0xc, 0x2, 0xc, 0x18, 0x9, 0x6c, 0x1, 0x4e, 0x3, 0x3, 0x18, 0xb, 0x6]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xb, 0x4, 0x12, 0x65, 0x3, 0x16, 0x5, 0x12, 0x4, 0x3, 0xb, 0x60, 0x48, 0x6c, 0x12, 0x12, 0x2, 0x6, 0x67, 0x60, 0x16, 0x16, 0x4, 0x3, 0x60, 0x13, 0x0, 0x12, 0x4, 0x3, 0x28]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9db, 0x3, 0x7, 0x0, 0x5, 0x9, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x71ef, 0xa6, 0x5, 0x3, 0x7, 0x1, 0x1ff, 0xfffa]}}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x1, 0x9}, {0x6, 0x1}, {0x1, 0x8}, {0x3, 0x9}, {0x6, 0x1}, {}, {0x3}, {0x2, 0x4}, {0x6, 0x3}, {0x1, 0x3}, {0x5, 0x2}, {0x7, 0x4}, {0x6, 0x6}, {0x7, 0x5}, {0x6, 0xa}, {0x1, 0x2}, {0x3, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x37}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0x9, 0xcbf0, 0x1, 0x5, 0x8, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffc1, 0x1, 0x9, 0xf02e, 0x53f, 0xfff8, 0x7, 0x401]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x8, 0x369d, 0x20, 0x1000, 0x4, 0x8c8, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x7, 0x50ec, 0xc5e4, 0x3, 0x8, 0x37c]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x400, 0x1f, 0x8, 0x2, 0x3f, 0x8, 0x2]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0xb, 0x12, 0x1, 0x3, 0x24, 0x6c, 0x4, 0x9, 0x48, 0x12, 0x24, 0x16, 0x6c, 0x4, 0x6c, 0xc, 0x1, 0x9, 0x18, 0x6, 0x12, 0x6c, 0x2, 0x6, 0x3, 0x48, 0x1, 0x68]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x5, 0x8}, {0x2, 0x9}, {0x7, 0x9}, {0x6, 0x4}, {0x1, 0xa}, {0x6, 0x6}, {0x0, 0x2}, {0x0, 0x9}, {0x5, 0x5}, {0x4, 0x5}, {}, {0x1, 0x2}, {0x7, 0x2}, {0x3, 0x7}, {0x6, 0x3}, {0x5, 0xa}, {0x5, 0x8}, {0x2, 0x9}, {0x0, 0x8}, {0x5, 0x9}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x8}, {0x1, 0xa}, {0x0, 0x3}, {0x4, 0x3}, {0x7, 0x8}, {0x2, 0x5}, {0x4, 0x2}, {0x7, 0x2}, {0x6, 0x8}, {0x7, 0x3}, {0x1, 0x7}, {0x6}, {0x6, 0x4}, {0x2, 0x1}, {0x4, 0x8}, {0x6, 0x2}, {0x5, 0x6}, {0x6}, {0x3, 0x3}, {0x4, 0x3}, {0x7, 0xa}, {0x7, 0x4}, {0x4, 0x7}, {0x6, 0x1}, {}, {0x6}, {0x2, 0x5}, {0x1, 0x9}, {0x0, 0x8}, {0x4, 0x1}, {0x7}]}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x80, 0x5, 0x200, 0xe18, 0xb1, 0x9, 0x1ba8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x16, 0x24, 0xc, 0x24, 0x6c, 0x9, 0x4, 0x9, 0x3, 0x24, 0x12, 0x24, 0x1, 0x1b, 0x12, 0x6, 0xc, 0xc, 0x18, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf6, 0x4, 0x3, 0x0, 0x1000, 0xe76, 0x49a, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0x1, 0x12, 0x1b, 0x1b, 0x5, 0x6c, 0x6c, 0xb, 0xb, 0x60, 0x2, 0x1, 0x1, 0x5, 0x5, 0x36, 0x3, 0x5a, 0xb, 0x48, 0x30, 0x4, 0x5, 0x1, 0xc, 0x6c, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x1, 0xff, 0x27e, 0x30, 0x8, 0x400]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff79, 0x8001, 0x8, 0x6ed6, 0x3, 0x8, 0x2, 0xfff7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x9, 0xc, 0x60, 0x48, 0xc, 0x78, 0x48, 0x4, 0x6, 0x5, 0x16, 0x6c, 0x24, 0x24, 0x4, 0x60, 0x60, 0x5, 0x3, 0x0, 0x5]}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x51, 0x2, [{0x4, 0x8}, {}, {0x1, 0xa}, {0x6, 0x7}, {0x0, 0x5}, {0x5, 0x3}, {0x4, 0x4}, {0x6, 0xa}, {0x3, 0x8}, {0x2, 0x1}, {0x0, 0x4}, {}, {0x4, 0xa}, {0x6, 0x2}, {0x1, 0x4}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x4, 0x6}, {0x5}, {0x0, 0x8}, {0x0, 0x2}, {0x3}, {0x7, 0xa}, {0x4, 0xa}, {0x7}, {0x7, 0x2}, {0x4, 0x6}, {0x6, 0x7}, {0x7, 0x1}, {0x1, 0x6}, {0x4, 0x4}, {0x0, 0x6}, {0x2, 0x5}, {0x3, 0x9}, {0x0, 0x6}, {0x7, 0x8}, {0x3, 0x3}, {0x0, 0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x9}, {0x6, 0x9}, {0x3, 0x3}, {0x6, 0x9}, {0x2, 0x8}, {0x5, 0x9}, {0x4, 0x3}, {0x7, 0x3}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x6}, {0x2, 0x5}, {0x1, 0x9}, {0x2, 0x8}, {0x1, 0x1}, {0x6, 0xa}, {0x4, 0x2}, {0x1, 0x9}, {0x3, 0x4}, {0x2, 0x3}, {0x2, 0xa}, {0x7}, {0x1}, {0x3, 0x1}, {0x6, 0x6}, {0x4}, {0x3, 0x2}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x8}, {0x1, 0x1}, {0x5, 0x8}, {0x5, 0x6}, {0x1, 0x4}, {}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xff, 0x200, 0x6, 0xffdf, 0x6, 0xfffe, 0x7ff]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xec8, 0x3, 0x70, 0x5, 0x4, 0x6, 0x1]}}]}]}, @NL80211_ATTR_TX_RATES={0x8c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x5, 0x3}, {0x7, 0x4}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x90, 0xc, 0x30, 0x1, 0x48, 0x0, 0x6c, 0x16, 0x6c, 0x66, 0x16, 0x3, 0x12, 0x30, 0x18, 0x48, 0x24, 0x7c, 0x12, 0x66, 0x9, 0x3, 0x24, 0x60, 0xc, 0x12, 0x12, 0x36, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x7, 0x2, 0x8000, 0x7ff, 0x5, 0xd90d]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x4}, {0x1, 0xa}, {0x3, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xf9, 0xb8e1, 0x7fff, 0x3800, 0x5, 0x7, 0x400]}}]}]}, @NL80211_ATTR_TX_RATES={0x390, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0xffc1, 0x100, 0x7, 0x3, 0xdc4, 0xfe0f, 0x4b]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x2, 0x1b, 0x1, 0x0, 0x60, 0x0, 0x36, 0x30, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x8, 0x5, 0x8, 0x20, 0x73]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xc4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x5, 0x1}, {0x2, 0x9}, {0x6, 0x5}, {0x3, 0x3}, {0x2, 0x4}, {0x0, 0x1a}, {0x4}, {0x3, 0x2}, {0x5, 0xa}, {0x6, 0x9}, {0x1, 0x2}, {0x1}, {0x3, 0x6}, {0x2, 0x6}, {0x1, 0x5}, {0x3, 0x6}, {0x0, 0x2}, {0x5, 0x2}, {0x2, 0x9}, {0x7}, {0x1}, {0x2, 0x8}, {0x1, 0x2}, {0x6, 0x2}, {0x5, 0x6}, {0x1, 0x6}, {0x4, 0x8}, {0x5, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5d15, 0x1f, 0x4, 0x0, 0x8000, 0x800, 0x2, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x30, 0x6, 0x5, 0x1b, 0x60, 0xc, 0x60, 0x9, 0x16, 0x24, 0x3, 0x24, 0x6, 0x60, 0x36, 0x30, 0xc, 0xc, 0x16, 0x9]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x5, 0x1}, {0x2, 0xa}, {0x2, 0x9}, {0x0, 0x8}, {0x2, 0x9}, {0x2, 0x5}, {0x7, 0x5}, {0x5, 0x8}, {0x3, 0x3}, {0x3, 0x9}, {0x1, 0x3}, {0x7, 0x7}, {0x7, 0x4}, {0x1, 0x2}, {0x0, 0x7}, {}, {0x1, 0x4}, {0x6, 0x5}, {0x4, 0x5}, {0x5, 0x8}, {0x0, 0x2}, {0x4, 0x5}, {0x1, 0x6}, {0x2, 0xa}, {0x0, 0x8}, {0x3}, {}, {0x4, 0x8}, {0x4, 0x9}, {0x1, 0x2}, {0x7, 0x4}, {0x0, 0x7}, {0x2, 0x5}, {0x4, 0x4}, {0x4, 0x7}, {0x7, 0x6}, {0x4, 0x3}, {0x1, 0x8}, {0x1, 0x3}, {0x7, 0x1}, {0x7, 0x9}, {0x5, 0x4}, {0x4, 0x8}, {0x1, 0x2}, {0x5, 0x3}, {0x5, 0x9}, {0x7, 0x2}, {0x2, 0x4}, {0x6, 0x7}, {0x2, 0x1d}, {0x7, 0x7}, {0x0, 0x9}, {0x2, 0x5}, {0x7, 0xa}, {0x6, 0x4}, {0x2, 0x7}, {0x4, 0x3}, {0x4, 0x6}, {0x6, 0x3}, {0x5, 0x1}, {0x6, 0x3}, {0x6, 0x2}, {0x7, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0xfffd, 0xff45, 0x0, 0x0, 0x7, 0x0, 0xfff7]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6c, 0x12, 0x60, 0x11]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x6a, 0x1, 0x5, 0x1, 0x4, 0x401, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x7f, 0xfaf9, 0x9, 0x4, 0xff80, 0x8885]}}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xd7c9, 0x9ee, 0x0, 0x100, 0x5, 0x20, 0x1000, 0x2]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x5, 0x2}, {0x7}, {0x2, 0x5}, {0x6, 0x8}, {0x7, 0x3}, {0x3, 0x6}, {0x5, 0x4}, {0x0, 0xa}, {0x1, 0x3}, {0x7, 0x8}, {0x1, 0x1}, {0x4, 0x4}, {0x3, 0x2}, {0x1, 0x9}, {0x0, 0x6}, {0x2, 0x4}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x6}, {0x2, 0x8}, {0x4, 0xa}, {0x1, 0x4}, {0x0, 0x3}, {0x2, 0xa}, {0x6, 0x8}, {0x2, 0x4}, {0x5, 0x2}, {0x6, 0x3}, {0x7, 0x4}, {0x5, 0x6}, {0x1, 0x7}, {0x6, 0x9}, {0x5, 0x2}, {0x0, 0xa}, {0x0, 0x6}, {0x4, 0x7}, {0x7, 0x2}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x48, 0x60, 0x9, 0x3, 0x16, 0x0, 0x5, 0xc092a21105898e3e, 0xc, 0x9, 0x16, 0x6c, 0x48, 0x1, 0x9, 0x1]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x7, 0x9cc2, 0x7, 0x6, 0x128]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x2, 0x3, 0xfff7, 0x3, 0x1, 0x9, 0xb1a]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x1, 0x2, 0xf801, 0x100, 0x8001, 0x5]}}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x76, 0x7, 0x1000, 0xfff, 0x200, 0x4, 0xfff7, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x1, 0x3f, 0x6, 0x5a29, 0x7, 0x7ff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1ff, 0x80, 0x9, 0x5813, 0x90, 0x4, 0xe1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x2, 0x9}, {0x6}, {0x3, 0x1}, {0x2, 0x9}, {0x1, 0x2}, {0x2, 0x7}, {0x3, 0x3}, {0x0, 0x6}, {0x1, 0x1}, {0x4, 0x4}, {0x3}, {0x1, 0x6}, {0x3, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x0, 0x6}, {0x4, 0x3}, {0x7, 0x5}, {0x6, 0x7}, {0x3}, {0x7, 0x3}, {0x3, 0xa}, {0x2, 0x5}, {0x0, 0x6}, {0x5}, {0x0, 0x9}, {0x6, 0x2}, {0x2, 0x8}, {0x1, 0x5}, {0x5, 0x4}, {0x5, 0x1}, {0x7, 0x5}, {0x2, 0xa}, {0x3, 0x8}, {0x3, 0x5}, {0x6, 0x9}, {0x4, 0x3}, {0x1, 0x8}, {0x1, 0xa}, {0x7, 0x1d}, {0x7, 0x1}, {0x2, 0x7}, {0x2, 0x4}, {0x5, 0x16}, {0x1, 0x5}, {0x4, 0x5}, {0x1, 0x5}, {0x1, 0xa}, {0x2, 0x7}, {0x1, 0x2}, {0x1, 0x3}, {0x4, 0x1}, {0x0, 0xa}, {}, {0x1, 0x6}, {0x6, 0x7}, {0x2, 0x5}, {0x2, 0x3}, {0x1, 0x9}, {0x0, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3e35, 0x5, 0x9, 0x1, 0x3ff, 0x58ef, 0x7, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xaba, 0x9, 0x1, 0x3, 0xb05, 0xb0, 0x20, 0xff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x98, 0x6, 0x859, 0x5, 0xfff9, 0x0, 0x10, 0x800]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xbf, 0x200, 0x400, 0x1, 0x7ab, 0x7fff, 0x1]}}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x4, 0x48, 0x24, 0x6c, 0x9, 0x2, 0x4, 0x6c, 0xb, 0x12, 0x36, 0x36, 0x30, 0x0, 0x6, 0x16, 0x48, 0x60, 0x6c, 0x12, 0x36, 0x2, 0x18, 0x16, 0x1b, 0xb, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x33a, 0x1ff, 0x1, 0x7, 0x9, 0x2, 0x128]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x9, 0x1, 0x2, 0x7f, 0x6, 0x6, 0x8000]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x99fcf7aaeb194b64, 0x9, 0x3, 0x1b, 0x0, 0x1, 0x9, 0xc, 0x18, 0x5, 0x1b, 0x4, 0xc, 0x1b, 0x60, 0xc, 0x1, 0x5, 0x36, 0x16, 0x16, 0xc, 0x3, 0xb, 0x16, 0x18, 0x12, 0x12, 0x1]}]}]}, @NL80211_ATTR_TX_RATES={0x174, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0xa3, 0x0, 0x101, 0x2, 0x1, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x975, 0x1, 0xb637, 0x1, 0x7, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x81, 0x100, 0xf801, 0xff, 0x2, 0x6, 0x7f]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x5, 0x5, 0x36, 0x6, 0x5, 0x9, 0x48, 0x9, 0x6c, 0x0, 0x60, 0x5, 0x12, 0x24, 0x68cffd7f130d2a70, 0xb, 0x3, 0xc, 0xc, 0xc, 0x48, 0xc, 0x5]}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1, 0x30, 0x6c, 0x16, 0xf2e4f248183dbf3, 0x45, 0x30, 0x5, 0xc0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x0, 0x101, 0x3, 0x4, 0x9, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfffd, 0x80, 0x8, 0x5a84, 0x3, 0xd]}}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x24, 0x36, 0x4c, 0x60, 0x3, 0x3c, 0x3, 0x0, 0x60, 0x24, 0x1b, 0x2, 0x6c, 0x5]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x5, 0xa}, {0x5, 0x9}, {0x0, 0x4}, {0x4, 0x2}, {0x4, 0x9}, {0x7, 0x1}, {0x3, 0x1}, {0x5, 0x6}, {0x3, 0x4}, {0x4, 0x4}, {0x2, 0x9}, {0x2, 0x8}, {0x5, 0xa}, {0x7, 0xa}, {0x7, 0x5}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x3}, {0x4, 0x3}, {0x3, 0x2}, {0x6, 0x9}, {0x0, 0x3}, {0x0, 0xa}, {0x7}, {0x6, 0x5}, {0x2, 0xa}, {0x7, 0x8}, {0x2, 0x5}, {0x2, 0x8}, {0x4, 0x3}]}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x5, 0x0, 0x3f, 0x200, 0x200, 0x101]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x2, 0x5}, {0x3}, {0x2}, {0x3, 0x5}, {0x2, 0x3}, {0x3, 0x4}, {0x1, 0x3}, {0x5, 0x3}, {0x4, 0x2}, {0x2, 0x7}, {0x0, 0x2}, {0x7, 0x1}, {0x5, 0x1}, {0x4, 0xa}, {0x6, 0x7}, {0x0, 0xa}, {0x6, 0x1}, {0x7, 0xa}, {0x0, 0x4}, {0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0x7, 0x8000, 0xe91, 0x8, 0x0, 0x7]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb95c, 0x1, 0x7, 0x5, 0xf6f1, 0xfffe, 0x7, 0x2]}}]}]}]}, 0x9a0}, 0x1, 0x0, 0x0, 0x24004810}, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000001080)=0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r1) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x28, r5, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x6b}, @void, @val={0xc, 0x99, {0x1, 0x3b}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x84) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000200)={0x1ff, 0xcc6, 0x4, {0x3, @vbi={0x7, 0x1ff, 0x1, 0x52424752, [0x3, 0x8], [0x401, 0x100], 0x3}}, 0x1ff}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:06:20 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d4fa5037"}, 0x0, 0x2, {0x0}}) (async) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000440)={0x2, @pix={0x6, 0x344, 0x52424752, 0x7, 0x4, 0x100, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1}}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000001c0)={0x8, 0x3f, 0x4, {0x1, @win={{0x8, 0x40800, 0x9, 0x7ff}, 0x0, 0x6, &(0x7f0000000180)={{0x8, 0x1, 0x46e8, 0x1000}, &(0x7f0000000140)={{0x7f, 0x38b7, 0x8}, &(0x7f0000000100)={{0x10000000, 0xa44, 0x3f, 0x80000000}}}}, 0x40, &(0x7f0000000680)="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", 0x9c}}, 0x80000001}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000001680)={0x3ff, 0x9b}) (async) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x61}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x400}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000054) 13:06:20 executing program 0: prctl$PR_MCE_KILL(0x21, 0x0, 0x1) 13:06:20 executing program 5: prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 13:06:20 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r2, 0x5421, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x1) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000080)) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000000c0)={0x1, @sdr={0x30324c4a, 0x7e3f}}) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x76, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x9, 0xfffffff8, 0x4e564058, 0x6, 0x247, 0xdb, 0x4, 0x100, 0x1, 0x2, 0x0, 0x2}}) 13:06:20 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x1}}) 13:06:21 executing program 0: prctl$PR_MCE_KILL(0x21, 0x0, 0x1) 13:06:21 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:06:21 executing program 5: prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 13:06:21 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) (async, rerun: 64) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x104, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x2}, {0xfd}, {0x7, 0x7}, {0xd1}, {0x4, 0x6}, {0x2, 0x1}, {0x3, 0x2}, {0x20, 0x6}, {0x6}, {0x80, 0x5}], "d427ecce2a6e5bbc"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x89, 0x5}, {0x40, 0x6}, {0x3f, 0x2}, {0x0, 0x6}, {0x7}, {0x7f}], "a004d9d92938e2d7"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x1}, {0x6, 0x3}, {0x6, 0x1}, {0x45, 0x6}, {0x5, 0x1}, {0x1, 0x5}, {0x2, 0x2}, {0x9, 0x1}, {0x7, 0x1}, {0x4, 0x2}, {0x5}, {0xbc, 0x7}], "baabc20dff20ec65"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x3f, 0x3}, {0x6, 0x5}, {0x8, 0x3}, {0xc0}, {0xfc, 0x3}, {0x3d, 0x2}, {0x81, 0x5}, {0x3, 0x5}, {0x7, 0x7}], "87012b026cb8cd95"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x40, 0x3}, {0xfb, 0x7}, {0xfe}, {0x7f, 0x7}, {0x40, 0x5}, {0x7, 0x4}, {0xff, 0x4}, {0x6, 0x3}, {0x1, 0x3}, {0x62, 0x5}, {0x1, 0x5}], "dfae082c53ee05a0"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x5, 0x1}, {0x2, 0x2}, {0x7}, {0x31, 0x4}, {0x3, 0x1}, {0xed}, {0xd, 0x6}], "9e7abdb7dffa0c8f"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x0, 0x6}, {0x0, 0x3}, {0x8, 0x2}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x5}, {0x40, 0x2}, {0x9, 0x4}, {0x3, 0x5}, {0x37, 0x6}, {0x4, 0x3}, {0x81, 0x6}, {0x2, 0x4}, {0xb5, 0x4}, {0x4, 0x5}], "6d2a8a0748496481"}}]}, 0x104}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) (async, rerun: 64) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0xc}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x4c}}, 0x40001) (rerun: 64) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)={0x9a0, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x3f4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x9, 0x9, 0x4, 0x60, 0xc, 0xc, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x48, 0x6, 0x2, 0x6, 0x24, 0x5, 0x48, 0x30, 0x24, 0x7, 0x0, 0x36, 0x30, 0x36, 0x2, 0x4, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3c, 0x401, 0x86e4, 0x5, 0xfff, 0x400, 0x5, 0xfe8e]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x5, 0x60, 0x3116, 0x5b0, 0x7, 0x7, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x49, 0x5, 0x48, 0x6c, 0x2, 0x3, 0x3]}, @NL80211_TXRATE_HT={0x21, 0x2, [{}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x2}, {0x4, 0x2}, {0x0, 0x6}, {0x2, 0x5}, {0x2}, {0x0, 0x4}, {0x5, 0xa}, {0x1, 0x7}, {0x0, 0x5}, {0x2, 0x2}, {0x6, 0x2}, {0x2, 0x6}, {0x1, 0x2}, {0x6, 0x4}, {0x6, 0x4}, {0x0, 0x9}, {0x7, 0x7}, {0x3, 0x3}, {0x2, 0x9}, {0x1, 0xa}, {0x1, 0xa}, {0x0, 0x3}, {0x2, 0x9}, {0x0, 0x9}, {0x1, 0x5}, {0x6, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x36, 0x36, 0x6c, 0x2, 0xb, 0x0, 0x12, 0x4, 0xb, 0x1, 0x9, 0x60, 0x5, 0x24, 0x9, 0x3, 0x0, 0x1, 0xc5, 0x18, 0x18, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfa, 0x9, 0x0, 0x8, 0x7f, 0xfc00, 0x8, 0xffff]}}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4a, 0x9782, 0x7ff, 0x3, 0x5, 0x5, 0x6d6, 0x7]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x24, 0x9, 0x6c, 0x48, 0x5, 0xc, 0x2, 0xc, 0x18, 0x9, 0x6c, 0x1, 0x4e, 0x3, 0x3, 0x18, 0xb, 0x6]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xb, 0x4, 0x12, 0x65, 0x3, 0x16, 0x5, 0x12, 0x4, 0x3, 0xb, 0x60, 0x48, 0x6c, 0x12, 0x12, 0x2, 0x6, 0x67, 0x60, 0x16, 0x16, 0x4, 0x3, 0x60, 0x13, 0x0, 0x12, 0x4, 0x3, 0x28]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9db, 0x3, 0x7, 0x0, 0x5, 0x9, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x71ef, 0xa6, 0x5, 0x3, 0x7, 0x1, 0x1ff, 0xfffa]}}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x1, 0x9}, {0x6, 0x1}, {0x1, 0x8}, {0x3, 0x9}, {0x6, 0x1}, {}, {0x3}, {0x2, 0x4}, {0x6, 0x3}, {0x1, 0x3}, {0x5, 0x2}, {0x7, 0x4}, {0x6, 0x6}, {0x7, 0x5}, {0x6, 0xa}, {0x1, 0x2}, {0x3, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x37}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0x9, 0xcbf0, 0x1, 0x5, 0x8, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffc1, 0x1, 0x9, 0xf02e, 0x53f, 0xfff8, 0x7, 0x401]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x8, 0x369d, 0x20, 0x1000, 0x4, 0x8c8, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x7, 0x50ec, 0xc5e4, 0x3, 0x8, 0x37c]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x400, 0x1f, 0x8, 0x2, 0x3f, 0x8, 0x2]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0xb, 0x12, 0x1, 0x3, 0x24, 0x6c, 0x4, 0x9, 0x48, 0x12, 0x24, 0x16, 0x6c, 0x4, 0x6c, 0xc, 0x1, 0x9, 0x18, 0x6, 0x12, 0x6c, 0x2, 0x6, 0x3, 0x48, 0x1, 0x68]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x5, 0x8}, {0x2, 0x9}, {0x7, 0x9}, {0x6, 0x4}, {0x1, 0xa}, {0x6, 0x6}, {0x0, 0x2}, {0x0, 0x9}, {0x5, 0x5}, {0x4, 0x5}, {}, {0x1, 0x2}, {0x7, 0x2}, {0x3, 0x7}, {0x6, 0x3}, {0x5, 0xa}, {0x5, 0x8}, {0x2, 0x9}, {0x0, 0x8}, {0x5, 0x9}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x8}, {0x1, 0xa}, {0x0, 0x3}, {0x4, 0x3}, {0x7, 0x8}, {0x2, 0x5}, {0x4, 0x2}, {0x7, 0x2}, {0x6, 0x8}, {0x7, 0x3}, {0x1, 0x7}, {0x6}, {0x6, 0x4}, {0x2, 0x1}, {0x4, 0x8}, {0x6, 0x2}, {0x5, 0x6}, {0x6}, {0x3, 0x3}, {0x4, 0x3}, {0x7, 0xa}, {0x7, 0x4}, {0x4, 0x7}, {0x6, 0x1}, {}, {0x6}, {0x2, 0x5}, {0x1, 0x9}, {0x0, 0x8}, {0x4, 0x1}, {0x7}]}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x80, 0x5, 0x200, 0xe18, 0xb1, 0x9, 0x1ba8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x16, 0x24, 0xc, 0x24, 0x6c, 0x9, 0x4, 0x9, 0x3, 0x24, 0x12, 0x24, 0x1, 0x1b, 0x12, 0x6, 0xc, 0xc, 0x18, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf6, 0x4, 0x3, 0x0, 0x1000, 0xe76, 0x49a, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0x1, 0x12, 0x1b, 0x1b, 0x5, 0x6c, 0x6c, 0xb, 0xb, 0x60, 0x2, 0x1, 0x1, 0x5, 0x5, 0x36, 0x3, 0x5a, 0xb, 0x48, 0x30, 0x4, 0x5, 0x1, 0xc, 0x6c, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x1, 0xff, 0x27e, 0x30, 0x8, 0x400]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff79, 0x8001, 0x8, 0x6ed6, 0x3, 0x8, 0x2, 0xfff7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x9, 0xc, 0x60, 0x48, 0xc, 0x78, 0x48, 0x4, 0x6, 0x5, 0x16, 0x6c, 0x24, 0x24, 0x4, 0x60, 0x60, 0x5, 0x3, 0x0, 0x5]}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x51, 0x2, [{0x4, 0x8}, {}, {0x1, 0xa}, {0x6, 0x7}, {0x0, 0x5}, {0x5, 0x3}, {0x4, 0x4}, {0x6, 0xa}, {0x3, 0x8}, {0x2, 0x1}, {0x0, 0x4}, {}, {0x4, 0xa}, {0x6, 0x2}, {0x1, 0x4}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x4, 0x6}, {0x5}, {0x0, 0x8}, {0x0, 0x2}, {0x3}, {0x7, 0xa}, {0x4, 0xa}, {0x7}, {0x7, 0x2}, {0x4, 0x6}, {0x6, 0x7}, {0x7, 0x1}, {0x1, 0x6}, {0x4, 0x4}, {0x0, 0x6}, {0x2, 0x5}, {0x3, 0x9}, {0x0, 0x6}, {0x7, 0x8}, {0x3, 0x3}, {0x0, 0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x9}, {0x6, 0x9}, {0x3, 0x3}, {0x6, 0x9}, {0x2, 0x8}, {0x5, 0x9}, {0x4, 0x3}, {0x7, 0x3}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x6}, {0x2, 0x5}, {0x1, 0x9}, {0x2, 0x8}, {0x1, 0x1}, {0x6, 0xa}, {0x4, 0x2}, {0x1, 0x9}, {0x3, 0x4}, {0x2, 0x3}, {0x2, 0xa}, {0x7}, {0x1}, {0x3, 0x1}, {0x6, 0x6}, {0x4}, {0x3, 0x2}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x8}, {0x1, 0x1}, {0x5, 0x8}, {0x5, 0x6}, {0x1, 0x4}, {}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xff, 0x200, 0x6, 0xffdf, 0x6, 0xfffe, 0x7ff]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xec8, 0x3, 0x70, 0x5, 0x4, 0x6, 0x1]}}]}]}, @NL80211_ATTR_TX_RATES={0x8c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x5, 0x3}, {0x7, 0x4}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x90, 0xc, 0x30, 0x1, 0x48, 0x0, 0x6c, 0x16, 0x6c, 0x66, 0x16, 0x3, 0x12, 0x30, 0x18, 0x48, 0x24, 0x7c, 0x12, 0x66, 0x9, 0x3, 0x24, 0x60, 0xc, 0x12, 0x12, 0x36, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x7, 0x2, 0x8000, 0x7ff, 0x5, 0xd90d]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x4}, {0x1, 0xa}, {0x3, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xf9, 0xb8e1, 0x7fff, 0x3800, 0x5, 0x7, 0x400]}}]}]}, @NL80211_ATTR_TX_RATES={0x390, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0xffc1, 0x100, 0x7, 0x3, 0xdc4, 0xfe0f, 0x4b]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x2, 0x1b, 0x1, 0x0, 0x60, 0x0, 0x36, 0x30, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x8, 0x5, 0x8, 0x20, 0x73]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xc4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x5, 0x1}, {0x2, 0x9}, {0x6, 0x5}, {0x3, 0x3}, {0x2, 0x4}, {0x0, 0x1a}, {0x4}, {0x3, 0x2}, {0x5, 0xa}, {0x6, 0x9}, {0x1, 0x2}, {0x1}, {0x3, 0x6}, {0x2, 0x6}, {0x1, 0x5}, {0x3, 0x6}, {0x0, 0x2}, {0x5, 0x2}, {0x2, 0x9}, {0x7}, {0x1}, {0x2, 0x8}, {0x1, 0x2}, {0x6, 0x2}, {0x5, 0x6}, {0x1, 0x6}, {0x4, 0x8}, {0x5, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5d15, 0x1f, 0x4, 0x0, 0x8000, 0x800, 0x2, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x30, 0x6, 0x5, 0x1b, 0x60, 0xc, 0x60, 0x9, 0x16, 0x24, 0x3, 0x24, 0x6, 0x60, 0x36, 0x30, 0xc, 0xc, 0x16, 0x9]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x5, 0x1}, {0x2, 0xa}, {0x2, 0x9}, {0x0, 0x8}, {0x2, 0x9}, {0x2, 0x5}, {0x7, 0x5}, {0x5, 0x8}, {0x3, 0x3}, {0x3, 0x9}, {0x1, 0x3}, {0x7, 0x7}, {0x7, 0x4}, {0x1, 0x2}, {0x0, 0x7}, {}, {0x1, 0x4}, {0x6, 0x5}, {0x4, 0x5}, {0x5, 0x8}, {0x0, 0x2}, {0x4, 0x5}, {0x1, 0x6}, {0x2, 0xa}, {0x0, 0x8}, {0x3}, {}, {0x4, 0x8}, {0x4, 0x9}, {0x1, 0x2}, {0x7, 0x4}, {0x0, 0x7}, {0x2, 0x5}, {0x4, 0x4}, {0x4, 0x7}, {0x7, 0x6}, {0x4, 0x3}, {0x1, 0x8}, {0x1, 0x3}, {0x7, 0x1}, {0x7, 0x9}, {0x5, 0x4}, {0x4, 0x8}, {0x1, 0x2}, {0x5, 0x3}, {0x5, 0x9}, {0x7, 0x2}, {0x2, 0x4}, {0x6, 0x7}, {0x2, 0x1d}, {0x7, 0x7}, {0x0, 0x9}, {0x2, 0x5}, {0x7, 0xa}, {0x6, 0x4}, {0x2, 0x7}, {0x4, 0x3}, {0x4, 0x6}, {0x6, 0x3}, {0x5, 0x1}, {0x6, 0x3}, {0x6, 0x2}, {0x7, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0xfffd, 0xff45, 0x0, 0x0, 0x7, 0x0, 0xfff7]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6c, 0x12, 0x60, 0x11]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x6a, 0x1, 0x5, 0x1, 0x4, 0x401, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x7f, 0xfaf9, 0x9, 0x4, 0xff80, 0x8885]}}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xd7c9, 0x9ee, 0x0, 0x100, 0x5, 0x20, 0x1000, 0x2]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x5, 0x2}, {0x7}, {0x2, 0x5}, {0x6, 0x8}, {0x7, 0x3}, {0x3, 0x6}, {0x5, 0x4}, {0x0, 0xa}, {0x1, 0x3}, {0x7, 0x8}, {0x1, 0x1}, {0x4, 0x4}, {0x3, 0x2}, {0x1, 0x9}, {0x0, 0x6}, {0x2, 0x4}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x6}, {0x2, 0x8}, {0x4, 0xa}, {0x1, 0x4}, {0x0, 0x3}, {0x2, 0xa}, {0x6, 0x8}, {0x2, 0x4}, {0x5, 0x2}, {0x6, 0x3}, {0x7, 0x4}, {0x5, 0x6}, {0x1, 0x7}, {0x6, 0x9}, {0x5, 0x2}, {0x0, 0xa}, {0x0, 0x6}, {0x4, 0x7}, {0x7, 0x2}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x48, 0x60, 0x9, 0x3, 0x16, 0x0, 0x5, 0xc092a21105898e3e, 0xc, 0x9, 0x16, 0x6c, 0x48, 0x1, 0x9, 0x1]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x7, 0x9cc2, 0x7, 0x6, 0x128]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x2, 0x3, 0xfff7, 0x3, 0x1, 0x9, 0xb1a]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x1, 0x2, 0xf801, 0x100, 0x8001, 0x5]}}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x76, 0x7, 0x1000, 0xfff, 0x200, 0x4, 0xfff7, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x1, 0x3f, 0x6, 0x5a29, 0x7, 0x7ff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1ff, 0x80, 0x9, 0x5813, 0x90, 0x4, 0xe1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x2, 0x9}, {0x6}, {0x3, 0x1}, {0x2, 0x9}, {0x1, 0x2}, {0x2, 0x7}, {0x3, 0x3}, {0x0, 0x6}, {0x1, 0x1}, {0x4, 0x4}, {0x3}, {0x1, 0x6}, {0x3, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x0, 0x6}, {0x4, 0x3}, {0x7, 0x5}, {0x6, 0x7}, {0x3}, {0x7, 0x3}, {0x3, 0xa}, {0x2, 0x5}, {0x0, 0x6}, {0x5}, {0x0, 0x9}, {0x6, 0x2}, {0x2, 0x8}, {0x1, 0x5}, {0x5, 0x4}, {0x5, 0x1}, {0x7, 0x5}, {0x2, 0xa}, {0x3, 0x8}, {0x3, 0x5}, {0x6, 0x9}, {0x4, 0x3}, {0x1, 0x8}, {0x1, 0xa}, {0x7, 0x1d}, {0x7, 0x1}, {0x2, 0x7}, {0x2, 0x4}, {0x5, 0x16}, {0x1, 0x5}, {0x4, 0x5}, {0x1, 0x5}, {0x1, 0xa}, {0x2, 0x7}, {0x1, 0x2}, {0x1, 0x3}, {0x4, 0x1}, {0x0, 0xa}, {}, {0x1, 0x6}, {0x6, 0x7}, {0x2, 0x5}, {0x2, 0x3}, {0x1, 0x9}, {0x0, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3e35, 0x5, 0x9, 0x1, 0x3ff, 0x58ef, 0x7, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xaba, 0x9, 0x1, 0x3, 0xb05, 0xb0, 0x20, 0xff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x98, 0x6, 0x859, 0x5, 0xfff9, 0x0, 0x10, 0x800]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xbf, 0x200, 0x400, 0x1, 0x7ab, 0x7fff, 0x1]}}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x4, 0x48, 0x24, 0x6c, 0x9, 0x2, 0x4, 0x6c, 0xb, 0x12, 0x36, 0x36, 0x30, 0x0, 0x6, 0x16, 0x48, 0x60, 0x6c, 0x12, 0x36, 0x2, 0x18, 0x16, 0x1b, 0xb, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x33a, 0x1ff, 0x1, 0x7, 0x9, 0x2, 0x128]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x9, 0x1, 0x2, 0x7f, 0x6, 0x6, 0x8000]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x99fcf7aaeb194b64, 0x9, 0x3, 0x1b, 0x0, 0x1, 0x9, 0xc, 0x18, 0x5, 0x1b, 0x4, 0xc, 0x1b, 0x60, 0xc, 0x1, 0x5, 0x36, 0x16, 0x16, 0xc, 0x3, 0xb, 0x16, 0x18, 0x12, 0x12, 0x1]}]}]}, @NL80211_ATTR_TX_RATES={0x174, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0xa3, 0x0, 0x101, 0x2, 0x1, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x975, 0x1, 0xb637, 0x1, 0x7, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x81, 0x100, 0xf801, 0xff, 0x2, 0x6, 0x7f]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x5, 0x5, 0x36, 0x6, 0x5, 0x9, 0x48, 0x9, 0x6c, 0x0, 0x60, 0x5, 0x12, 0x24, 0x68cffd7f130d2a70, 0xb, 0x3, 0xc, 0xc, 0xc, 0x48, 0xc, 0x5]}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1, 0x30, 0x6c, 0x16, 0xf2e4f248183dbf3, 0x45, 0x30, 0x5, 0xc0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x0, 0x101, 0x3, 0x4, 0x9, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfffd, 0x80, 0x8, 0x5a84, 0x3, 0xd]}}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x24, 0x36, 0x4c, 0x60, 0x3, 0x3c, 0x3, 0x0, 0x60, 0x24, 0x1b, 0x2, 0x6c, 0x5]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x5, 0xa}, {0x5, 0x9}, {0x0, 0x4}, {0x4, 0x2}, {0x4, 0x9}, {0x7, 0x1}, {0x3, 0x1}, {0x5, 0x6}, {0x3, 0x4}, {0x4, 0x4}, {0x2, 0x9}, {0x2, 0x8}, {0x5, 0xa}, {0x7, 0xa}, {0x7, 0x5}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x3}, {0x4, 0x3}, {0x3, 0x2}, {0x6, 0x9}, {0x0, 0x3}, {0x0, 0xa}, {0x7}, {0x6, 0x5}, {0x2, 0xa}, {0x7, 0x8}, {0x2, 0x5}, {0x2, 0x8}, {0x4, 0x3}]}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x5, 0x0, 0x3f, 0x200, 0x200, 0x101]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x2, 0x5}, {0x3}, {0x2}, {0x3, 0x5}, {0x2, 0x3}, {0x3, 0x4}, {0x1, 0x3}, {0x5, 0x3}, {0x4, 0x2}, {0x2, 0x7}, {0x0, 0x2}, {0x7, 0x1}, {0x5, 0x1}, {0x4, 0xa}, {0x6, 0x7}, {0x0, 0xa}, {0x6, 0x1}, {0x7, 0xa}, {0x0, 0x4}, {0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0x7, 0x8000, 0xe91, 0x8, 0x0, 0x7]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb95c, 0x1, 0x7, 0x5, 0xf6f1, 0xfffe, 0x7, 0x2]}}]}]}]}, 0x9a0}, 0x1, 0x0, 0x0, 0x24004810}, 0x0) (async, rerun: 64) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (rerun: 64) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000001080)=0x3) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r4) (async) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r1) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x28, r5, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x6b}, @void, @val={0xc, 0x99, {0x1, 0x3b}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x84) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000200)={0x1ff, 0xcc6, 0x4, {0x3, @vbi={0x7, 0x1ff, 0x1, 0x52424752, [0x3, 0x8], [0x401, 0x100], 0x3}}, 0x1ff}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:06:21 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x1}}) 13:06:21 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r2, 0x5421, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x1) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000080)) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000000c0)={0x1, @sdr={0x30324c4a, 0x7e3f}}) (async) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x76, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x9, 0xfffffff8, 0x4e564058, 0x6, 0x247, 0xdb, 0x4, 0x100, 0x1, 0x2, 0x0, 0x2}}) 13:06:21 executing program 0: prctl$PR_MCE_KILL(0x21, 0x0, 0x1) 13:06:21 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x1}}) 13:06:21 executing program 5: prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 13:06:21 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async, rerun: 64) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (rerun: 64) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000000)) (async, rerun: 64) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (rerun: 64) 13:06:21 executing program 0: prctl$PR_MCE_KILL(0x21, 0x0, 0x0) 13:06:21 executing program 2: socketpair(0x2a, 0x2, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0x5421, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x1, 0x9, 0x0, 0x880}) 13:06:21 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5a0b, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f00000001c0)) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@multiplanar_overlay={0x40000000, 0x0, 0x4, 0x20, 0xff, {r1, r2/1000+60000}, {0x3, 0x7, 0x6, 0xfd, 0x26, 0x33, "9c01b7db"}, 0xe2, 0x3, {&(0x7f0000000080)=[{0x7ff, 0x7, {0x79}, 0x8001}, {0x3196, 0x20, {0x80000000}, 0x21}]}, 0x2}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x1}], 0x1}}) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000280)) 13:06:21 executing program 5: prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 13:06:21 executing program 0: prctl$PR_MCE_KILL(0x21, 0x0, 0x0) 13:06:21 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) (async) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x104, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x2}, {0xfd}, {0x7, 0x7}, {0xd1}, {0x4, 0x6}, {0x2, 0x1}, {0x3, 0x2}, {0x20, 0x6}, {0x6}, {0x80, 0x5}], "d427ecce2a6e5bbc"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x89, 0x5}, {0x40, 0x6}, {0x3f, 0x2}, {0x0, 0x6}, {0x7}, {0x7f}], "a004d9d92938e2d7"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x1}, {0x6, 0x3}, {0x6, 0x1}, {0x45, 0x6}, {0x5, 0x1}, {0x1, 0x5}, {0x2, 0x2}, {0x9, 0x1}, {0x7, 0x1}, {0x4, 0x2}, {0x5}, {0xbc, 0x7}], "baabc20dff20ec65"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x3f, 0x3}, {0x6, 0x5}, {0x8, 0x3}, {0xc0}, {0xfc, 0x3}, {0x3d, 0x2}, {0x81, 0x5}, {0x3, 0x5}, {0x7, 0x7}], "87012b026cb8cd95"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x40, 0x3}, {0xfb, 0x7}, {0xfe}, {0x7f, 0x7}, {0x40, 0x5}, {0x7, 0x4}, {0xff, 0x4}, {0x6, 0x3}, {0x1, 0x3}, {0x62, 0x5}, {0x1, 0x5}], "dfae082c53ee05a0"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x5, 0x1}, {0x2, 0x2}, {0x7}, {0x31, 0x4}, {0x3, 0x1}, {0xed}, {0xd, 0x6}], "9e7abdb7dffa0c8f"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x0, 0x6}, {0x0, 0x3}, {0x8, 0x2}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x5}, {0x40, 0x2}, {0x9, 0x4}, {0x3, 0x5}, {0x37, 0x6}, {0x4, 0x3}, {0x81, 0x6}, {0x2, 0x4}, {0xb5, 0x4}, {0x4, 0x5}], "6d2a8a0748496481"}}]}, 0x104}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0xc}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x4c}}, 0x40001) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)={0x9a0, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x3f4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x9, 0x9, 0x4, 0x60, 0xc, 0xc, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x48, 0x6, 0x2, 0x6, 0x24, 0x5, 0x48, 0x30, 0x24, 0x7, 0x0, 0x36, 0x30, 0x36, 0x2, 0x4, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3c, 0x401, 0x86e4, 0x5, 0xfff, 0x400, 0x5, 0xfe8e]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x5, 0x60, 0x3116, 0x5b0, 0x7, 0x7, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x49, 0x5, 0x48, 0x6c, 0x2, 0x3, 0x3]}, @NL80211_TXRATE_HT={0x21, 0x2, [{}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x2}, {0x4, 0x2}, {0x0, 0x6}, {0x2, 0x5}, {0x2}, {0x0, 0x4}, {0x5, 0xa}, {0x1, 0x7}, {0x0, 0x5}, {0x2, 0x2}, {0x6, 0x2}, {0x2, 0x6}, {0x1, 0x2}, {0x6, 0x4}, {0x6, 0x4}, {0x0, 0x9}, {0x7, 0x7}, {0x3, 0x3}, {0x2, 0x9}, {0x1, 0xa}, {0x1, 0xa}, {0x0, 0x3}, {0x2, 0x9}, {0x0, 0x9}, {0x1, 0x5}, {0x6, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x36, 0x36, 0x6c, 0x2, 0xb, 0x0, 0x12, 0x4, 0xb, 0x1, 0x9, 0x60, 0x5, 0x24, 0x9, 0x3, 0x0, 0x1, 0xc5, 0x18, 0x18, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfa, 0x9, 0x0, 0x8, 0x7f, 0xfc00, 0x8, 0xffff]}}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4a, 0x9782, 0x7ff, 0x3, 0x5, 0x5, 0x6d6, 0x7]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x24, 0x9, 0x6c, 0x48, 0x5, 0xc, 0x2, 0xc, 0x18, 0x9, 0x6c, 0x1, 0x4e, 0x3, 0x3, 0x18, 0xb, 0x6]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xb, 0x4, 0x12, 0x65, 0x3, 0x16, 0x5, 0x12, 0x4, 0x3, 0xb, 0x60, 0x48, 0x6c, 0x12, 0x12, 0x2, 0x6, 0x67, 0x60, 0x16, 0x16, 0x4, 0x3, 0x60, 0x13, 0x0, 0x12, 0x4, 0x3, 0x28]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9db, 0x3, 0x7, 0x0, 0x5, 0x9, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x71ef, 0xa6, 0x5, 0x3, 0x7, 0x1, 0x1ff, 0xfffa]}}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x1, 0x9}, {0x6, 0x1}, {0x1, 0x8}, {0x3, 0x9}, {0x6, 0x1}, {}, {0x3}, {0x2, 0x4}, {0x6, 0x3}, {0x1, 0x3}, {0x5, 0x2}, {0x7, 0x4}, {0x6, 0x6}, {0x7, 0x5}, {0x6, 0xa}, {0x1, 0x2}, {0x3, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x37}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0x9, 0xcbf0, 0x1, 0x5, 0x8, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffc1, 0x1, 0x9, 0xf02e, 0x53f, 0xfff8, 0x7, 0x401]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x8, 0x369d, 0x20, 0x1000, 0x4, 0x8c8, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x7, 0x50ec, 0xc5e4, 0x3, 0x8, 0x37c]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x400, 0x1f, 0x8, 0x2, 0x3f, 0x8, 0x2]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0xb, 0x12, 0x1, 0x3, 0x24, 0x6c, 0x4, 0x9, 0x48, 0x12, 0x24, 0x16, 0x6c, 0x4, 0x6c, 0xc, 0x1, 0x9, 0x18, 0x6, 0x12, 0x6c, 0x2, 0x6, 0x3, 0x48, 0x1, 0x68]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x5, 0x8}, {0x2, 0x9}, {0x7, 0x9}, {0x6, 0x4}, {0x1, 0xa}, {0x6, 0x6}, {0x0, 0x2}, {0x0, 0x9}, {0x5, 0x5}, {0x4, 0x5}, {}, {0x1, 0x2}, {0x7, 0x2}, {0x3, 0x7}, {0x6, 0x3}, {0x5, 0xa}, {0x5, 0x8}, {0x2, 0x9}, {0x0, 0x8}, {0x5, 0x9}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x8}, {0x1, 0xa}, {0x0, 0x3}, {0x4, 0x3}, {0x7, 0x8}, {0x2, 0x5}, {0x4, 0x2}, {0x7, 0x2}, {0x6, 0x8}, {0x7, 0x3}, {0x1, 0x7}, {0x6}, {0x6, 0x4}, {0x2, 0x1}, {0x4, 0x8}, {0x6, 0x2}, {0x5, 0x6}, {0x6}, {0x3, 0x3}, {0x4, 0x3}, {0x7, 0xa}, {0x7, 0x4}, {0x4, 0x7}, {0x6, 0x1}, {}, {0x6}, {0x2, 0x5}, {0x1, 0x9}, {0x0, 0x8}, {0x4, 0x1}, {0x7}]}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x80, 0x5, 0x200, 0xe18, 0xb1, 0x9, 0x1ba8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x16, 0x24, 0xc, 0x24, 0x6c, 0x9, 0x4, 0x9, 0x3, 0x24, 0x12, 0x24, 0x1, 0x1b, 0x12, 0x6, 0xc, 0xc, 0x18, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf6, 0x4, 0x3, 0x0, 0x1000, 0xe76, 0x49a, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0x1, 0x12, 0x1b, 0x1b, 0x5, 0x6c, 0x6c, 0xb, 0xb, 0x60, 0x2, 0x1, 0x1, 0x5, 0x5, 0x36, 0x3, 0x5a, 0xb, 0x48, 0x30, 0x4, 0x5, 0x1, 0xc, 0x6c, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x1, 0xff, 0x27e, 0x30, 0x8, 0x400]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff79, 0x8001, 0x8, 0x6ed6, 0x3, 0x8, 0x2, 0xfff7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x9, 0xc, 0x60, 0x48, 0xc, 0x78, 0x48, 0x4, 0x6, 0x5, 0x16, 0x6c, 0x24, 0x24, 0x4, 0x60, 0x60, 0x5, 0x3, 0x0, 0x5]}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x51, 0x2, [{0x4, 0x8}, {}, {0x1, 0xa}, {0x6, 0x7}, {0x0, 0x5}, {0x5, 0x3}, {0x4, 0x4}, {0x6, 0xa}, {0x3, 0x8}, {0x2, 0x1}, {0x0, 0x4}, {}, {0x4, 0xa}, {0x6, 0x2}, {0x1, 0x4}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x4, 0x6}, {0x5}, {0x0, 0x8}, {0x0, 0x2}, {0x3}, {0x7, 0xa}, {0x4, 0xa}, {0x7}, {0x7, 0x2}, {0x4, 0x6}, {0x6, 0x7}, {0x7, 0x1}, {0x1, 0x6}, {0x4, 0x4}, {0x0, 0x6}, {0x2, 0x5}, {0x3, 0x9}, {0x0, 0x6}, {0x7, 0x8}, {0x3, 0x3}, {0x0, 0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x9}, {0x6, 0x9}, {0x3, 0x3}, {0x6, 0x9}, {0x2, 0x8}, {0x5, 0x9}, {0x4, 0x3}, {0x7, 0x3}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x6}, {0x2, 0x5}, {0x1, 0x9}, {0x2, 0x8}, {0x1, 0x1}, {0x6, 0xa}, {0x4, 0x2}, {0x1, 0x9}, {0x3, 0x4}, {0x2, 0x3}, {0x2, 0xa}, {0x7}, {0x1}, {0x3, 0x1}, {0x6, 0x6}, {0x4}, {0x3, 0x2}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x8}, {0x1, 0x1}, {0x5, 0x8}, {0x5, 0x6}, {0x1, 0x4}, {}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xff, 0x200, 0x6, 0xffdf, 0x6, 0xfffe, 0x7ff]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xec8, 0x3, 0x70, 0x5, 0x4, 0x6, 0x1]}}]}]}, @NL80211_ATTR_TX_RATES={0x8c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x5, 0x3}, {0x7, 0x4}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x90, 0xc, 0x30, 0x1, 0x48, 0x0, 0x6c, 0x16, 0x6c, 0x66, 0x16, 0x3, 0x12, 0x30, 0x18, 0x48, 0x24, 0x7c, 0x12, 0x66, 0x9, 0x3, 0x24, 0x60, 0xc, 0x12, 0x12, 0x36, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x7, 0x2, 0x8000, 0x7ff, 0x5, 0xd90d]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x4}, {0x1, 0xa}, {0x3, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xf9, 0xb8e1, 0x7fff, 0x3800, 0x5, 0x7, 0x400]}}]}]}, @NL80211_ATTR_TX_RATES={0x390, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0xffc1, 0x100, 0x7, 0x3, 0xdc4, 0xfe0f, 0x4b]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x2, 0x1b, 0x1, 0x0, 0x60, 0x0, 0x36, 0x30, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x8, 0x5, 0x8, 0x20, 0x73]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xc4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x5, 0x1}, {0x2, 0x9}, {0x6, 0x5}, {0x3, 0x3}, {0x2, 0x4}, {0x0, 0x1a}, {0x4}, {0x3, 0x2}, {0x5, 0xa}, {0x6, 0x9}, {0x1, 0x2}, {0x1}, {0x3, 0x6}, {0x2, 0x6}, {0x1, 0x5}, {0x3, 0x6}, {0x0, 0x2}, {0x5, 0x2}, {0x2, 0x9}, {0x7}, {0x1}, {0x2, 0x8}, {0x1, 0x2}, {0x6, 0x2}, {0x5, 0x6}, {0x1, 0x6}, {0x4, 0x8}, {0x5, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5d15, 0x1f, 0x4, 0x0, 0x8000, 0x800, 0x2, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x30, 0x6, 0x5, 0x1b, 0x60, 0xc, 0x60, 0x9, 0x16, 0x24, 0x3, 0x24, 0x6, 0x60, 0x36, 0x30, 0xc, 0xc, 0x16, 0x9]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x5, 0x1}, {0x2, 0xa}, {0x2, 0x9}, {0x0, 0x8}, {0x2, 0x9}, {0x2, 0x5}, {0x7, 0x5}, {0x5, 0x8}, {0x3, 0x3}, {0x3, 0x9}, {0x1, 0x3}, {0x7, 0x7}, {0x7, 0x4}, {0x1, 0x2}, {0x0, 0x7}, {}, {0x1, 0x4}, {0x6, 0x5}, {0x4, 0x5}, {0x5, 0x8}, {0x0, 0x2}, {0x4, 0x5}, {0x1, 0x6}, {0x2, 0xa}, {0x0, 0x8}, {0x3}, {}, {0x4, 0x8}, {0x4, 0x9}, {0x1, 0x2}, {0x7, 0x4}, {0x0, 0x7}, {0x2, 0x5}, {0x4, 0x4}, {0x4, 0x7}, {0x7, 0x6}, {0x4, 0x3}, {0x1, 0x8}, {0x1, 0x3}, {0x7, 0x1}, {0x7, 0x9}, {0x5, 0x4}, {0x4, 0x8}, {0x1, 0x2}, {0x5, 0x3}, {0x5, 0x9}, {0x7, 0x2}, {0x2, 0x4}, {0x6, 0x7}, {0x2, 0x1d}, {0x7, 0x7}, {0x0, 0x9}, {0x2, 0x5}, {0x7, 0xa}, {0x6, 0x4}, {0x2, 0x7}, {0x4, 0x3}, {0x4, 0x6}, {0x6, 0x3}, {0x5, 0x1}, {0x6, 0x3}, {0x6, 0x2}, {0x7, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0xfffd, 0xff45, 0x0, 0x0, 0x7, 0x0, 0xfff7]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6c, 0x12, 0x60, 0x11]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x6a, 0x1, 0x5, 0x1, 0x4, 0x401, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x7f, 0xfaf9, 0x9, 0x4, 0xff80, 0x8885]}}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xd7c9, 0x9ee, 0x0, 0x100, 0x5, 0x20, 0x1000, 0x2]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x5, 0x2}, {0x7}, {0x2, 0x5}, {0x6, 0x8}, {0x7, 0x3}, {0x3, 0x6}, {0x5, 0x4}, {0x0, 0xa}, {0x1, 0x3}, {0x7, 0x8}, {0x1, 0x1}, {0x4, 0x4}, {0x3, 0x2}, {0x1, 0x9}, {0x0, 0x6}, {0x2, 0x4}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x6}, {0x2, 0x8}, {0x4, 0xa}, {0x1, 0x4}, {0x0, 0x3}, {0x2, 0xa}, {0x6, 0x8}, {0x2, 0x4}, {0x5, 0x2}, {0x6, 0x3}, {0x7, 0x4}, {0x5, 0x6}, {0x1, 0x7}, {0x6, 0x9}, {0x5, 0x2}, {0x0, 0xa}, {0x0, 0x6}, {0x4, 0x7}, {0x7, 0x2}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x48, 0x60, 0x9, 0x3, 0x16, 0x0, 0x5, 0xc092a21105898e3e, 0xc, 0x9, 0x16, 0x6c, 0x48, 0x1, 0x9, 0x1]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x7, 0x9cc2, 0x7, 0x6, 0x128]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x2, 0x3, 0xfff7, 0x3, 0x1, 0x9, 0xb1a]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x1, 0x2, 0xf801, 0x100, 0x8001, 0x5]}}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x76, 0x7, 0x1000, 0xfff, 0x200, 0x4, 0xfff7, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x1, 0x3f, 0x6, 0x5a29, 0x7, 0x7ff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1ff, 0x80, 0x9, 0x5813, 0x90, 0x4, 0xe1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x2, 0x9}, {0x6}, {0x3, 0x1}, {0x2, 0x9}, {0x1, 0x2}, {0x2, 0x7}, {0x3, 0x3}, {0x0, 0x6}, {0x1, 0x1}, {0x4, 0x4}, {0x3}, {0x1, 0x6}, {0x3, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x0, 0x6}, {0x4, 0x3}, {0x7, 0x5}, {0x6, 0x7}, {0x3}, {0x7, 0x3}, {0x3, 0xa}, {0x2, 0x5}, {0x0, 0x6}, {0x5}, {0x0, 0x9}, {0x6, 0x2}, {0x2, 0x8}, {0x1, 0x5}, {0x5, 0x4}, {0x5, 0x1}, {0x7, 0x5}, {0x2, 0xa}, {0x3, 0x8}, {0x3, 0x5}, {0x6, 0x9}, {0x4, 0x3}, {0x1, 0x8}, {0x1, 0xa}, {0x7, 0x1d}, {0x7, 0x1}, {0x2, 0x7}, {0x2, 0x4}, {0x5, 0x16}, {0x1, 0x5}, {0x4, 0x5}, {0x1, 0x5}, {0x1, 0xa}, {0x2, 0x7}, {0x1, 0x2}, {0x1, 0x3}, {0x4, 0x1}, {0x0, 0xa}, {}, {0x1, 0x6}, {0x6, 0x7}, {0x2, 0x5}, {0x2, 0x3}, {0x1, 0x9}, {0x0, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3e35, 0x5, 0x9, 0x1, 0x3ff, 0x58ef, 0x7, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xaba, 0x9, 0x1, 0x3, 0xb05, 0xb0, 0x20, 0xff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x98, 0x6, 0x859, 0x5, 0xfff9, 0x0, 0x10, 0x800]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xbf, 0x200, 0x400, 0x1, 0x7ab, 0x7fff, 0x1]}}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x4, 0x48, 0x24, 0x6c, 0x9, 0x2, 0x4, 0x6c, 0xb, 0x12, 0x36, 0x36, 0x30, 0x0, 0x6, 0x16, 0x48, 0x60, 0x6c, 0x12, 0x36, 0x2, 0x18, 0x16, 0x1b, 0xb, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x33a, 0x1ff, 0x1, 0x7, 0x9, 0x2, 0x128]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x9, 0x1, 0x2, 0x7f, 0x6, 0x6, 0x8000]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x99fcf7aaeb194b64, 0x9, 0x3, 0x1b, 0x0, 0x1, 0x9, 0xc, 0x18, 0x5, 0x1b, 0x4, 0xc, 0x1b, 0x60, 0xc, 0x1, 0x5, 0x36, 0x16, 0x16, 0xc, 0x3, 0xb, 0x16, 0x18, 0x12, 0x12, 0x1]}]}]}, @NL80211_ATTR_TX_RATES={0x174, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0xa3, 0x0, 0x101, 0x2, 0x1, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x975, 0x1, 0xb637, 0x1, 0x7, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x81, 0x100, 0xf801, 0xff, 0x2, 0x6, 0x7f]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x5, 0x5, 0x36, 0x6, 0x5, 0x9, 0x48, 0x9, 0x6c, 0x0, 0x60, 0x5, 0x12, 0x24, 0x68cffd7f130d2a70, 0xb, 0x3, 0xc, 0xc, 0xc, 0x48, 0xc, 0x5]}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1, 0x30, 0x6c, 0x16, 0xf2e4f248183dbf3, 0x45, 0x30, 0x5, 0xc0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x0, 0x101, 0x3, 0x4, 0x9, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfffd, 0x80, 0x8, 0x5a84, 0x3, 0xd]}}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x24, 0x36, 0x4c, 0x60, 0x3, 0x3c, 0x3, 0x0, 0x60, 0x24, 0x1b, 0x2, 0x6c, 0x5]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x5, 0xa}, {0x5, 0x9}, {0x0, 0x4}, {0x4, 0x2}, {0x4, 0x9}, {0x7, 0x1}, {0x3, 0x1}, {0x5, 0x6}, {0x3, 0x4}, {0x4, 0x4}, {0x2, 0x9}, {0x2, 0x8}, {0x5, 0xa}, {0x7, 0xa}, {0x7, 0x5}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x3}, {0x4, 0x3}, {0x3, 0x2}, {0x6, 0x9}, {0x0, 0x3}, {0x0, 0xa}, {0x7}, {0x6, 0x5}, {0x2, 0xa}, {0x7, 0x8}, {0x2, 0x5}, {0x2, 0x8}, {0x4, 0x3}]}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x5, 0x0, 0x3f, 0x200, 0x200, 0x101]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x2, 0x5}, {0x3}, {0x2}, {0x3, 0x5}, {0x2, 0x3}, {0x3, 0x4}, {0x1, 0x3}, {0x5, 0x3}, {0x4, 0x2}, {0x2, 0x7}, {0x0, 0x2}, {0x7, 0x1}, {0x5, 0x1}, {0x4, 0xa}, {0x6, 0x7}, {0x0, 0xa}, {0x6, 0x1}, {0x7, 0xa}, {0x0, 0x4}, {0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0x7, 0x8000, 0xe91, 0x8, 0x0, 0x7]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb95c, 0x1, 0x7, 0x5, 0xf6f1, 0xfffe, 0x7, 0x2]}}]}]}]}, 0x9a0}, 0x1, 0x0, 0x0, 0x24004810}, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000001080)=0x3) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r4) (async) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r1) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x28, r5, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x6b}, @void, @val={0xc, 0x99, {0x1, 0x3b}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x84) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000200)={0x1ff, 0xcc6, 0x4, {0x3, @vbi={0x7, 0x1ff, 0x1, 0x52424752, [0x3, 0x8], [0x401, 0x100], 0x3}}, 0x1ff}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:06:21 executing program 5: prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 13:06:21 executing program 0: prctl$PR_MCE_KILL(0x21, 0x0, 0x0) 13:06:21 executing program 2: socketpair(0x2a, 0x2, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) (async) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0x5421, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x1, 0x9, 0x0, 0x880}) 13:06:21 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5a0b, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f00000001c0)) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@multiplanar_overlay={0x40000000, 0x0, 0x4, 0x20, 0xff, {r1, r2/1000+60000}, {0x3, 0x7, 0x6, 0xfd, 0x26, 0x33, "9c01b7db"}, 0xe2, 0x3, {&(0x7f0000000080)=[{0x7ff, 0x7, {0x79}, 0x8001}, {0x3196, 0x20, {0x80000000}, 0x21}]}, 0x2}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x1}], 0x1}}) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000280)) syz_open_dev$vim2m(&(0x7f0000000000), 0x5a0b, 0x2) (async) clock_gettime(0x0, &(0x7f0000000040)) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f00000001c0)) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@multiplanar_overlay={0x40000000, 0x0, 0x4, 0x20, 0xff, {r1, r2/1000+60000}, {0x3, 0x7, 0x6, 0xfd, 0x26, 0x33, "9c01b7db"}, 0xe2, 0x3, {&(0x7f0000000080)=[{0x7ff, 0x7, {0x79}, 0x8001}, {0x3196, 0x20, {0x80000000}, 0x21}]}, 0x2}) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x1}], 0x1}}) (async) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000280)) (async) 13:06:21 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5a0b, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f00000001c0)) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@multiplanar_overlay={0x40000000, 0x0, 0x4, 0x20, 0xff, {r1, r2/1000+60000}, {0x3, 0x7, 0x6, 0xfd, 0x26, 0x33, "9c01b7db"}, 0xe2, 0x3, {&(0x7f0000000080)=[{0x7ff, 0x7, {0x79}, 0x8001}, {0x3196, 0x20, {0x80000000}, 0x21}]}, 0x2}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x1}], 0x1}}) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000280)) 13:06:21 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async, rerun: 32) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (rerun: 32) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (async, rerun: 32) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000000)) (rerun: 32) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:06:21 executing program 5: prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 13:06:21 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5a0b, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f00000001c0)) (async, rerun: 64) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@multiplanar_overlay={0x40000000, 0x0, 0x4, 0x20, 0xff, {r1, r2/1000+60000}, {0x3, 0x7, 0x6, 0xfd, 0x26, 0x33, "9c01b7db"}, 0xe2, 0x3, {&(0x7f0000000080)=[{0x7ff, 0x7, {0x79}, 0x8001}, {0x3196, 0x20, {0x80000000}, 0x21}]}, 0x2}) (async, rerun: 64) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x1}], 0x1}}) (async, rerun: 64) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000280)) (rerun: 64) 13:06:21 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x6, [{}, {}, {}, {}, {}, {0xffffffff}], 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1000, 0x6, 0x5, "e799faeb5a47c3bd1f1e564c166bdba2ca4a120dd6331dd96057aca53b5bd61d", 0x32314d59}) 13:06:21 executing program 2: socketpair(0x2a, 0x2, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0x5421, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x1, 0x9, 0x0, 0x880}) 13:06:21 executing program 0: prctl$PR_MCE_KILL(0x21, 0x0, 0x0) 13:06:21 executing program 5: prctl$PR_MCE_KILL(0x21, 0x0, 0x0) 13:06:21 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:06:21 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x6, [{}, {}, {}, {}, {}, {0xffffffff}], 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1000, 0x6, 0x5, "e799faeb5a47c3bd1f1e564c166bdba2ca4a120dd6331dd96057aca53b5bd61d", 0x32314d59}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x6, [{}, {}, {}, {}, {}, {0xffffffff}], 0x0, 0x0, 0x0, 0x0, 0x5}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1000, 0x6, 0x5, "e799faeb5a47c3bd1f1e564c166bdba2ca4a120dd6331dd96057aca53b5bd61d", 0x32314d59}) (async) 13:06:21 executing program 0: prctl$PR_MCE_KILL(0x21, 0x0, 0x0) 13:06:21 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) 13:06:21 executing program 5: prctl$PR_MCE_KILL(0x21, 0x0, 0x0) 13:06:21 executing program 0: prctl$PR_MCE_KILL(0x21, 0x0, 0x0) 13:06:21 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:06:21 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x6, [{}, {}, {}, {}, {}, {0xffffffff}], 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1000, 0x6, 0x5, "e799faeb5a47c3bd1f1e564c166bdba2ca4a120dd6331dd96057aca53b5bd61d", 0x32314d59}) 13:06:21 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x80}]}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x94b0, 0x7a}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x38}}, 0xc101) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0xae58c65082ac5c42, @pix={0x20, 0x0, 0x30314742, 0x6, 0x100, 0xe97e, 0xa, 0x7afe, 0x1, 0x7, 0x0, 0x1}}) 13:06:21 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:06:21 executing program 5: prctl$PR_MCE_KILL(0x21, 0x0, 0x0) 13:06:21 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r2, 0x5421, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x1) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000000c0)={0x1, @sdr={0x30324c4a, 0x7e3f}}) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x76, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x9, 0xfffffff8, 0x4e564058, 0x6, 0x247, 0xdb, 0x4, 0x100, 0x1, 0x2, 0x0, 0x2}}) 13:06:21 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:06:21 executing program 3: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x47504a4d, 0x0, 0x0, [{}, {0xfffffffd}]}}) 13:06:21 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x80}]}}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x94b0, 0x7a}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x38}}, 0xc101) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0xae58c65082ac5c42, @pix={0x20, 0x0, 0x30314742, 0x6, 0x100, 0xe97e, 0xa, 0x7afe, 0x1, 0x7, 0x0, 0x1}}) 13:06:21 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d4fa5037"}, 0x0, 0x2, {0x0}}) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000440)={0x2, @pix={0x6, 0x344, 0x52424752, 0x7, 0x4, 0x100, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000001c0)={0x8, 0x3f, 0x4, {0x1, @win={{0x8, 0x40800, 0x9, 0x7ff}, 0x0, 0x6, &(0x7f0000000180)={{0x8, 0x1, 0x46e8, 0x1000}, &(0x7f0000000140)={{0x7f, 0x38b7, 0x8}, &(0x7f0000000100)={{0x10000000, 0xa44, 0x3f, 0x80000000}}}}, 0x40, &(0x7f0000000680)="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", 0x9c}}, 0x80000001}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000001680)={0x3ff, 0x9b}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x61}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x400}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000054) 13:06:21 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x210001}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x200, 0x70bd26, 0x6, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x60}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x8894}, 0x20000800) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) 13:06:21 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) 13:06:21 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x210001}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x200, 0x70bd26, 0x6, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x60}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x8894}, 0x20000800) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) 13:06:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_SSID={0x15, 0x34, @random="93388aaa8e929b9ccdf5660a6a3b123fd4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xbb, 0x401, 0x34324948, 0x9, 0x3, 0x9, 0x7, 0x40000, 0x1, 0x0, 0x1, 0x7}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000380)=@userptr={0x40000000, 0x0, 0x4, 0x0, 0x3, {0x0, 0x2710}, {0x1, 0x2, 0x9, 0x9, 0x80, 0xea, "f8437f47"}, 0x3, 0x2, {&(0x7f0000000340)}, 0x9}) ioctl$vim2m_VIDIOC_G_FMT(r3, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x55595659, 0x0, 0x0, [{}, {}, {0xffffffff}, {}, {0x0, 0x400000}], 0x0, 0x10}}) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000140)=0x1, 0x4) 13:06:21 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d4fa5037"}, 0x0, 0x2, {0x0}}) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000440)={0x2, @pix={0x6, 0x344, 0x52424752, 0x7, 0x4, 0x100, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000001c0)={0x8, 0x3f, 0x4, {0x1, @win={{0x8, 0x40800, 0x9, 0x7ff}, 0x0, 0x6, &(0x7f0000000180)={{0x8, 0x1, 0x46e8, 0x1000}, &(0x7f0000000140)={{0x7f, 0x38b7, 0x8}, &(0x7f0000000100)={{0x10000000, 0xa44, 0x3f, 0x80000000}}}}, 0x40, &(0x7f0000000680)="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", 0x9c}}, 0x80000001}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000001680)={0x3ff, 0x9b}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x61}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x400}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000054) 13:06:21 executing program 3: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x47504a4d, 0x0, 0x0, [{}, {0xfffffffd}]}}) 13:06:21 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2$9p(&(0x7f0000000040), 0x80000) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:06:21 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x80}]}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x94b0, 0x7a}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x38}}, 0xc101) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0xae58c65082ac5c42, @pix={0x20, 0x0, 0x30314742, 0x6, 0x100, 0xe97e, 0xa, 0x7afe, 0x1, 0x7, 0x0, 0x1}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0xae58c65082ac5c42, @pix={0x20, 0x0, 0x30314742, 0x6, 0x100, 0xe97e, 0xa, 0x7afe, 0x1, 0x7, 0x0, 0x1}}) 13:06:21 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x210001}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x200, 0x70bd26, 0x6, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x60}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x8894}, 0x20000800) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) 13:06:21 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d4fa5037"}, 0x0, 0x2, {0x0}}) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000440)={0x2, @pix={0x6, 0x344, 0x52424752, 0x7, 0x4, 0x100, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000001c0)={0x8, 0x3f, 0x4, {0x1, @win={{0x8, 0x40800, 0x9, 0x7ff}, 0x0, 0x6, &(0x7f0000000180)={{0x8, 0x1, 0x46e8, 0x1000}, &(0x7f0000000140)={{0x7f, 0x38b7, 0x8}, &(0x7f0000000100)={{0x10000000, 0xa44, 0x3f, 0x80000000}}}}, 0x40, &(0x7f0000000680)="7d76a7b0b3efa359a256988ce68721077a3d3dce63ea388ff1aa3f52c78deb4998dbe9fad353043276bc2c914b4c18d0d3c0573fd0e098ab87831b1c2a5008324c5b32fb368d2718483e17fb15669658cb41de6079731d64bc6ba8e30dc4f891b119e22271de10717a2a50894ed4782cb1320a9b8d465582aae04d2715659e7e26e801e3966aa13f9561770d75a4381a3da94956074f763f89de8abf5fcefdc45021aa7d0059e1044c3690eac7670f2dc9381bfd8e605b6afd3511ccf47cae373850c1617eb7c20bf2e765503be641a5acca71e3a8d3cfb608ad126ad08d4fb2a7847e81fca4cc558256bb3ab7410f73cf02b709a155c470fec89c0ce21dc394ae61c1ade42ba78f6419a415453277fd4a201e421bb3774492e4dd1956e818ac1d5597c5fae3c14d03e2ba61573da7ddcdaf4adf394eaa204e71c74c2ec5b2b75927d670aef5ffb17ffb107ee317d7b1ef296367dd29ac7de793c2b75d9cdb7c75a09d4779c6d428b7ebff6ce1ac9cf56f0ec59c19a4a814692cc1848fb0cd65843bd3c6c06e9f07d8d0d102c8b5dba2bfce97ac28ddc9d384666accd0591eff6297fa5e5a1ff91b216d6543fa7d4ce467b636243c376b0cf38985e97cffc6c238b8bb8195478da38201c51cb706f9eb0731ff8a6b9651474cc3cfd295915be9f0755bc6dc5f736e0c09d502b712cc5323acdc0876d5dfe3201434fb8909bff9367013802c16f62189fd45e407d9183fd818f90aac1b2b49ad95b57924412f1d5d44e71f4f0b8c98865ded06ea5c79e15bce39fb5bb901db2c212003f42e53aab0287e1edd8465e1ea9ca57335dc62affa8186bfa18e1801cde71c80bd1a5f542796d9175680834ed38020a93f7ea455bab26e0032b156c6d2f63dc6f9ccf535d1580999ef1ed71ed096be0cd1a881a026db7aa3a7581a278af4edfb53d0e728fef1cacd3a50f611129b617f3266b1e94040f874d27784b687ca517207f30ffefd49d9a7024da9e5364412d3bdf42c77f5435449c8ebca3783cf28db8156851fd3091595f50cd5e7a8c4d14476cdab98933acc6315539ffc4d97c834d1b5d61d74cd29dd6258d92b1ab1fefb6299368832526ea2e18880f4569bc93960b51150909a7978c16f261e3112e6f05f65e6dce8cf2890f21ec2954598c7bd943a0f2065da4f36a0270f8331e85bd74403a123ad67321f74a1f463aa86a98891f8701011bb2e6bea491d7c1a71fc62b33517a97445d9f5cbcec51533b1997791572bc1ab517868e4f3fe5aa88d579504a1a9c3e41b3842e7993e259098e3ecd18460dac8fc4c2899a60a99229a72d0122a82d6516258a7f6e6cddea5d453be1c0ee32789dd88713ba6a03ca18636321fa4e97e0dc2e5f34cab621212f8c9a2838a5ab0b3c80914b867f2a30854d1f1905df844ee6bb53d73bee0594d1290a29d95cd0e308e9827830e6fc06ab3dac3b11e993dd4aaf16614cd64cdb59f9a7afb295b6f41edd404ea6e2b02f51cb7803f5aa119818f25e40e12b673e100e57b81bb4fd751439504f0658dcf9e1a9b7fd0608d32cd42e3c60b800b309865e3e4e104fdd893c0e85f366ac27d61ef6bb061a93849280bc5db871692cb12cfea21a3e25375ee5c65280057674c7321b784d40a388790e44dd322e6ce2b7bc8904cc3584b5aec633a15c64d7b28c1350c18c833335a5b4ebbeeb7b1a7d7813e1b30eb717ea96d2b79af287a35a15ec67d923dc0639ddaf8deba22916d7233df4d30fe14d9bad7175bd51123ca33a8d0059a4b042b808b2d6cb16cd28e7d97f65024c17786f735b838ef8d6ad0f2f5ae92c3094e7e0d4f28036b9f07c4f68abb25e2b6c01c9687ad52f4b4bdb39b12c872586f27a151b295379cefb4a6afd11ef739d6c579752297241af1e4fa5f38b2445b492c53e3111ea6aa579062da66664e6c35a67d02fff71f451ee5ab26e19661467e188c2f2a0263c9e7b65f19192b28cc6672f9c8e3a283874aad34c4def9bf4a878abe3b4416ec5747c3edace43bdf4cbfe32b9e61e01bedfb316aff13d6a0d54f657bf8c21e83aeb6bab125af6bbd9d11394445168abaa637d52ec1487ea1ce65021af3ef4620447eed906953f83e0fe969820fef5261c3ad21ec15008b7451d1a8d8bdd61059436f4f495acc8bbcd61eabdff37dd8560558766cb1170ac6624e444ed7598e602fd65b4876c7486dafd1ec7608ebd79a3e123f44667cc1ed4486a03f29596da09e9f17cfc694db6bf6e2cad75419bca9ef03e258af04a20f8897cf0a67e0d8d498d8d23e4771c954e1f1163a8472aa452ab9c651cc8d412a008bcee452adf15e341383b261c57b115c6fda87ce1dff064d3812b85435d0ac6826078b7b5809879299012116c4c3744005d761107fd91addbdd4928cc780bbafac4d15f9e044a6276d06610265f6bb81d94d3e0fb9aa7eb919793812151a1b1f4649826d51db6541bdcaa0419133a044b0b878084f546e219ce539038a0a7d121a22f012f43c2684a97b4c67de90d738aa1d03c42111252090ea770b90d8a4850a52053b4238c60db7ff4eedf0323ab2d3cdedbb02d33e88a90bfda73d45daab6f358a5001ca91bcd07fb17746caf1ec595f5b1640b542b2c2694b78979975b6fb0e4b6382856d16c1925ff0a554c6d1ff1dc7402018c86202a8c433f6048c5d30702489ac7516e4317ebcdc88b323e0c1a7656bffffe613f2c71fc52a38d38083102b3963549bf602dec18a732c0a832e9f7dad127d23787693605ac9081fbe6d59bb732e2684726d20aef8f316edf0562a4f15f1008ac50c192d4398c63d3999667c69111c74656f7892513d3de682914012660fd463afeff18e7f3a507e27ce6ff4bd1f3cacb5e489911e3f69573cf646c152f20f2a21b6137b5f3d7f66279e2515c5e3a4bfdcdb411026764d75b5be4f981bc5fcdffde2e5c1976c91019fb5eec0dc012317bc753a7550a07b55c414f1447aa2638d3fdebd95b102ba1bc295321d31269af8b1010cc4170454709461da01c83bd88bc58d2e4377fa6cb615154df521ce80489ebe4a1f8c7b64b45e4aa6790f6146b4282376e4399d75f8aa8100d1bfd8a09e862ac18eb3a0952fb64a5b6545f50d439ed85a8dc62c83b4a15338065d85e715fc4ab4dbd2231eea10d4a7dd2d1e73503e39beec3b391d1678bf3a7cfd064f359e49bf7bf2bea923ac1321349a68186aac7828cdc722eaa50c8a1cbc6b6f9667fcb010085242ae9184ff307f7397391969897615599ffa1903890b3fa296993698281715e156f8003f74dc34cf70615dd95614532540926dbcff40bce9f72b3d9cc7832653ca0cd5b1582df710317045b3a1af3dff5b1d8e70e7050438b6c8e736bb2b247442d9f3c6df98f73e434cbb899c791854efa8d97be66716440001e542c5db1b34aa341e8ae20309f7f40c08f2aabbf25cd2560f2393d5f77adaf30385a8d5ed2a038e62510adc1612751b5261f0753a254d164b2ac595bee7ca63230531384b331af354b4bf1a7827764d4a17a40fe7d1d6af7c1b81f8318aa3345882bcf69a75ee5dfed72024a67cfced6227656884a52b922aa6bd3f5a98ee030e6c8a3ab240f42c6dd3ab07cacfe8920fdd90116ad15b626cfeddbaa4ae991bac8789386f096f8cea6f2ed92130a3215f42b2555baea793329aa6f14546ece5c7cc51e86691632715fefd11a6cbbe5adb2c8e550260a34934a4214cea164cdd252a3d33cd7c69b25984b6a957f748e1e99d49378b62f3a80091ebf55edae2022997caad9f8ea2645d97ca7e82db40e0fec827877287c5abd4d379a3e00a1b0cc87e2c1f0b92d7271b2415d85099dd6732e2433d87efe51f51f784280e3dad6dcd546eb48c3e7abdaaad04c75df9c05629b03375af459fd1096a02b43c46a7bfec0962c39c63358a0dc7c2fa0893d1585d7bf8a12f37eae7077fd8f1e37f1c9b738de9f41c243a5a497501238450a532a2e6c71800dfc3a9cec00cb26450b6fe8e59926ce38eef467341a6bbe8c222e959e5467673a8268605a9aaabd62880d8bfa8022d481958ca4045bbda8bad5e569140f51fb0887b09339f1bb97d166225578c3d97a7450f35cd33d5a0bf81506647afa1538c6c7783b6e390f64bee917e7912b55f18e25bf3e8756e20c5cf3c40db7fab1ed2e0210f215cd886677a077e7dc64b4edb3d939b5d2c0170b4117a61c0692d6a1f67af6597032919110661c49dee0d67b1c9c9d9e531907b67518a68f769cd86087be6543890141a0b5efba698ef8c4fa9597abe5cec6d0bac3053afb196c4551f6eba45aea19cb974e386d5de0551e5cb33c64d39125bef03599a6ffd6303231a693a86850e0bc00a4fb4c838d31f124b1bd3185d8ddb84d9db9e011533697a3eba3d6c62f43ad8468bf77a6b16dbe0eb6205245e25ce5127d315e300251186d274ac8271fe8416737ab16dc31c7aa85fa5b5e9dddfa7e68865a97103e89da86803a77c33abee794f589dfceed1e7105cfcf961f2e4bdb126ee0ff0c12b67100dc0768d8e8e66b367b1b4040d2d6811b03608360e1e6e7f5225d5e2aa0c1b4eae7e86c7407e78ec8700efa08bfd9dfae7891909e94dac811159e84b62e72598caa572ca6bd126ee564a53b300c1166d15abe043eb020f97f64b3ffa6ec077fed76e054e91d5904e16c73c1b2ddeb6d0e7f795d569c47aed53524ab9b72143d8d4b1531744bd3a692cb1c667c36b178f629427e53389d569bacaa5dd796c48ce58ebecdc82604117cb809a8a0a78f705dd74454b3324ee436b17e454f663b70b18d6490da33617b2d0446f8870e9192dab0dcff6f77321096618ac53538a357b88234e83a9e9910c363f6338cb9554803658491bbdda67d63c7142f7e134485bb98283fe0b9d8f93d9a7c7cf99c359b02a658bb6d34a69f161c6084644024c199a2b3f3bd629d8eb95b44a2d6ee7a3c393bdb354fb151f386ed76736502c5129675e0ccfed7a44f770a2d8615d17473e7a25985a3fd9f2ecbd938a2f32abe0e94e36ba02a0c4897612fecabcc0ba0e523b6b0a627b9346445f9028fc855b48d638975d2dd893dd8bf4b517e8a7c489f5a19e8b3949d438a2bab619bed191f1200b49e85f7548a4e1c8b5713dcd05bbf228d2a948c9f06bed481e304b21cfcd177398b9f3edd0de6326f1ecc25a4749833edf238220ff251b0b6bb36cec730d3497e694540403342c581be1e527739d81965b3cac11856e6be7d540796b340f923a74c4ab0ff7b2ad6234ecae0dbc1433bebea7e124d9eeb766ef8ac7f4aa4a2c24d6e8fdb45861dc6b1233cc63bfaaacbe4f141d1a7d0f61503f264e150b900bc73b39e700e98f6e900bd45508373cad2660bfffb4aa2b6be68092998dc52755fef0b327e9a58c5a9e7197975d9bbd901f566dc8200e44db9ce7e074c8dc09bcd1c2334ae1f37fce454f31b3fa22562f6051a0477b8414eee4dc0079cfcd5d539a1468f60b70c38fec0e6a1a80e8fe06ccec8cd46284e09b2d07afdffd440492602e213a1e593e81b5853a5e2ad8a0b50f096d22b867bd31b670aaa4e49d1f1e3492f668405b6952ccd2d377d704036fc8becbc8deda6ceef7fef85a517041f56c8238bf0c539c39ec815f4bf2633aed0680c0f7d0fe3b1dc54689e311c4c72d0a08cc4b183b8bbefbd677fab10ed8f539f4cce070d661c8f418668757983a32d00dd3be06ac8946a0b477f1e36a8cc6641056f7c167c0cbe0d302b58a5093f530a95fca9c433d0512ad4f2c5de67652ba89a786725296ed20a7", 0x9c}}, 0x80000001}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000001680)={0x3ff, 0x9b}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x61}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x400}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000054) 13:06:22 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2$9p(&(0x7f0000000040), 0x80000) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) pipe2$9p(&(0x7f0000000040), 0x80000) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) 13:06:22 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000000)=0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:06:22 executing program 3: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x47504a4d, 0x0, 0x0, [{}, {0xfffffffd}]}}) 13:06:22 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d4fa5037"}, 0x0, 0x2, {0x0}}) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000440)={0x2, @pix={0x6, 0x344, 0x52424752, 0x7, 0x4, 0x100, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000001c0)={0x8, 0x3f, 0x4, {0x1, @win={{0x8, 0x40800, 0x9, 0x7ff}, 0x0, 0x6, &(0x7f0000000180)={{0x8, 0x1, 0x46e8, 0x1000}, &(0x7f0000000140)={{0x7f, 0x38b7, 0x8}, &(0x7f0000000100)={{0x10000000, 0xa44, 0x3f, 0x80000000}}}}, 0x40, &(0x7f0000000680)="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", 0x9c}}, 0x80000001}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000001680)={0x3ff, 0x9b}) 13:06:22 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f00000000c0)) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0x0, 0x76}) syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x1, @raw_data="5c03cc05a811f411aef61d5f99630bead214210c7aa01a3dc605e2cfcd8f4d14a68f48fc6b2f6be1f3d56f6fb3d7fa2d3dcfbdfcee2c8b4799b31a70ed19fb862b426af0357650208ff0fe6d0bf1bb9adda367c1a005d290d94c4e079e0f0eaabee8549410af52775f16acfcb87c7827a0c06bac7dd8c68a6e873f2e03413a67b2ff7632ecedd35dae9d2a71e35d2cee7789dade0b87ad85dd29d819583af71fac37c55a432c6ec7f26038ef1efd77c13af2476db3e54935b7233dd12aac4b6e994de930ca592691"}) [ 650.558275] oom_reaper: reaped process 12043 (syz-executor.0), now anon-rss:0kB, file-rss:14336kB, shmem-rss:56kB [ 650.594556] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 650.616141] systemd-journal cpuset=/ mems_allowed=0-1 [ 650.621369] CPU: 0 PID: 4692 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 650.629266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 650.638619] Call Trace: [ 650.641213] dump_stack+0x1fc/0x2ef [ 650.644857] dump_header+0x15d/0xc3f [ 650.648576] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 650.653693] ? ___ratelimit+0x319/0x590 [ 650.657679] oom_kill_process.cold+0x10/0x692 [ 650.662174] ? check_preemption_disabled+0x41/0x280 [ 650.667190] ? has_intersects_mems_allowed+0x1d6/0x290 [ 650.672463] out_of_memory+0x1072/0x1390 [ 650.676608] ? oom_killer_disable+0x270/0x270 [ 650.681090] ? mutex_trylock+0x15f/0x1a0 [ 650.685141] __alloc_pages_nodemask+0x23a2/0x2890 [ 650.689967] ? find_get_entry+0x4cd/0x8a0 [ 650.694108] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 650.698957] alloc_pages_current+0x193/0x2a0 [ 650.703374] filemap_fault+0x146e/0x2180 [ 650.707434] ext4_filemap_fault+0x84/0xb0 [ 650.711582] __do_fault+0x10b/0x4b0 [ 650.715204] __handle_mm_fault+0x273b/0x41c0 [ 650.719601] ? vm_insert_page+0x9c0/0x9c0 [ 650.723745] ? check_preemption_disabled+0x41/0x280 [ 650.728766] handle_mm_fault+0x436/0xb10 [ 650.732837] __do_page_fault+0x68e/0xd60 [ 650.737119] ? trace_hardirqs_off_caller+0x6e/0x210 [ 650.742128] ? spurious_fault+0x840/0x840 [ 650.746280] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 650.751124] ? page_fault+0x8/0x30 [ 650.754651] page_fault+0x1e/0x30 [ 650.758088] RIP: 0033:0x7f9387a382e3 [ 650.761787] Code: Bad RIP value. [ 650.765131] RSP: 002b:00007ffcdd895638 EFLAGS: 00010246 [ 650.770475] RAX: 0000000000000001 RBX: 000055b66ef5b1e0 RCX: 00007f9387a382e3 [ 650.777726] RDX: 0000000000000013 RSI: 00007ffcdd895640 RDI: 0000000000000008 [ 650.785065] RBP: 00007ffcdd895830 R08: 00007ffcdd9c4000 R09: 000000a4be7a29f5 [ 650.792315] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcdd895640 [ 650.799654] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005f5c242cae7d0 [ 650.807149] Mem-Info: [ 650.809570] active_anon:19045 inactive_anon:4854 isolated_anon:0 [ 650.809570] active_file:0 inactive_file:10 isolated_file:0 [ 650.809570] unevictable:0 dirty:25 writeback:0 unstable:0 [ 650.809570] slab_reclaimable:20946 slab_unreclaimable:108744 [ 650.809570] mapped:22774 shmem:5410 pagetables:582 bounce:0 [ 650.809570] free:13827 free_pcp:986 free_cma:0 [ 650.822965] syz-executor.0: vmalloc: allocation failure, allocated 1808740352 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 650.845340] Node 0 active_anon:75120kB inactive_anon:19412kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:91052kB dirty:0kB writeback:0kB shmem:21636kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 28672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 650.865472] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 650.884254] Node 1 active_anon:1040kB inactive_anon:4kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 650.896080] CPU: 1 PID: 12043 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 650.917283] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 650.923258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 650.923263] Call Trace: [ 650.923284] dump_stack+0x1fc/0x2ef [ 650.923302] warn_alloc.cold+0x7b/0x18f [ 650.923322] ? zone_watermark_ok_safe+0x260/0x260 [ 650.950527] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 650.958780] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 650.958816] __vmalloc_area_node+0x4fd/0x780 [ 650.958836] ? __vmalloc_node_range+0x180/0x180 [ 650.962576] Node 0 DMA32 free:17768kB min:35996kB low:44992kB high:53988kB active_anon:75120kB inactive_anon:19412kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7584kB pagetables:2200kB bounce:0kB free_pcp:1636kB local_pcp:92kB free_cma:0kB [ 650.965106] ? _raw_spin_unlock+0x29/0x40 [ 650.965122] ? __get_vm_area_node+0x2e2/0x3a0 [ 650.965141] __vmalloc_node_range+0xed/0x180 [ 650.965155] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 650.965173] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 650.969121] lowmem_reserve[]: 0 0 1 1 1 [ 650.973962] vmalloc_user+0x70/0xe0 [ 650.973976] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 650.973989] vb2_vmalloc_alloc+0xb3/0x2f0 [ 650.974004] __vb2_queue_alloc+0x472/0xe60 [ 650.974031] vb2_core_create_bufs+0x273/0x7e0 [ 650.981327] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 650.983946] ? __vb2_queue_free+0x870/0x870 [ 650.983961] ? __video_do_ioctl+0x632/0xcd0 [ 650.983979] ? pi_state_update_owner+0x450/0x450 [ 650.983994] ? __mutex_lock+0x368/0x1190 [ 650.984010] vb2_create_bufs+0x332/0x620 [ 650.984029] ? mark_held_locks+0xf0/0xf0 [ 650.988410] lowmem_reserve[]: 0 0 0 0 0 [ 650.993066] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 650.993081] ? futex_wait_queue_me+0x404/0x5e0 [ 650.993095] ? pi_state_update_owner+0x450/0x450 [ 650.993113] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 651.024064] Node 1 Normal free:26664kB min:53876kB low:67344kB high:80812kB active_anon:1040kB inactive_anon:4kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:128kB pagetables:124kB bounce:0kB free_pcp:2284kB local_pcp:1544kB free_cma:0kB [ 651.026135] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 651.030596] lowmem_reserve[]: 0 0 0 0 0 [ 651.035002] v4l_create_bufs+0xb2/0x160 [ 651.035020] __video_do_ioctl+0x49a/0xcd0 [ 651.035040] ? v4l_querycap+0x340/0x340 [ 651.035059] ? __might_fault+0x192/0x1d0 [ 651.035077] ? v4l_querycap+0x340/0x340 [ 651.039457] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 651.044812] video_usercopy+0x13f/0xfa0 [ 651.044833] ? v4l_enumstd+0x60/0x60 [ 651.044847] ? do_futex+0x171/0x1880 [ 651.044866] ? mark_held_locks+0xf0/0xf0 [ 651.050981] Node 0 DMA32: 1314*4kB (UME) 532*8kB (ME) 182*16kB (ME) 65*32kB (MEH) 21*64kB (UMH) 1*128kB (H) 1*256kB (H) 1*512kB (H) 1*1024kB (H) 0*2048kB 0*4096kB = 17768kB [ 651.052462] ? debug_check_no_obj_freed+0x201/0x490 [ 651.056814] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 651.060899] ? video_usercopy+0xfa0/0xfa0 [ 651.066533] Node 1 Normal: 52*4kB (UME) 53*8kB (ME) 41*16kB (UME) 35*32kB (ME) 29*64kB (UME) 21*128kB (ME) 9*256kB (ME) 2*512kB (ME) 2*1024kB (UE) 1*2048kB (E) 3*4096kB (M) = 26664kB [ 651.069592] v4l2_ioctl+0x147/0x1a0 [ 651.098954] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 651.099730] ? video_devdata+0xa0/0xa0 [ 651.104078] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 651.108790] do_vfs_ioctl+0xcdb/0x12e0 [ 651.112826] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 651.116871] ? lock_downgrade+0x720/0x720 [ 651.116887] ? check_preemption_disabled+0x41/0x280 [ 651.116901] ? ioctl_preallocate+0x200/0x200 [ 651.116919] ? __fget+0x356/0x510 [ 651.116936] ? do_dup2+0x450/0x450 [ 651.123720] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 651.124940] ? __se_sys_futex+0x298/0x3b0 [ 651.130019] 5441 total pagecache pages [ 651.134591] ksys_ioctl+0x9b/0xc0 [ 651.134609] __x64_sys_ioctl+0x6f/0xb0 [ 651.134623] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 651.134636] do_syscall_64+0xf9/0x620 [ 651.134656] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 651.140768] 0 pages in swap cache [ 651.144469] RIP: 0033:0x7f68c24140f9 [ 651.144485] Code: Bad RIP value. [ 651.144492] RSP: 002b:00007f68c0986168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 651.144503] RAX: ffffffffffffffda RBX: 00007f68c2533f80 RCX: 00007f68c24140f9 [ 651.144510] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000006 [ 651.144521] RBP: 00007f68c246fae9 R08: 0000000000000000 R09: 0000000000000000 [ 651.144528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.144540] R13: 00007fff6155d44f R14: 00007f68c0986300 R15: 0000000000022000 [ 651.176502] Swap cache stats: add 0, delete 0, find 0/0 [ 651.192540] Mem-Info: [ 651.208744] Free swap = 0kB [ 651.222913] active_anon:19040 inactive_anon:4854 isolated_anon:0 [ 651.222913] active_file:15 inactive_file:16 isolated_file:0 [ 651.222913] unevictable:0 dirty:0 writeback:0 unstable:0 [ 651.222913] slab_reclaimable:20947 slab_unreclaimable:108772 [ 651.222913] mapped:22763 shmem:5410 pagetables:581 bounce:0 [ 651.222913] free:13827 free_pcp:977 free_cma:0 [ 651.232265] Total swap = 0kB [ 651.254332] Node 0 active_anon:75120kB inactive_anon:19412kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:91052kB dirty:0kB writeback:0kB shmem:21636kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 28672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 651.273935] 2097051 pages RAM [ 651.291104] Node 1 active_anon:1040kB inactive_anon:4kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 651.304761] 0 pages HighMem/MovableOnly [ 651.316043] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 651.331303] 369649 pages reserved [ 651.342227] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 651.342419] 0 pages cma reserved [ 651.351032] Node 0 DMA32 free:17768kB min:35996kB low:44992kB high:53988kB active_anon:75120kB inactive_anon:19412kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7584kB pagetables:2200kB bounce:0kB free_pcp:1616kB local_pcp:1544kB free_cma:0kB [ 651.351067] lowmem_reserve[]: 0 0 1 1 1 [ 651.351086] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 651.351113] lowmem_reserve[]: 0 0 0 0 0 [ 651.351133] Node 1 Normal free:26664kB min:53876kB low:67344kB high:80812kB active_anon:1040kB inactive_anon:4kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:128kB pagetables:124kB bounce:0kB free_pcp:2284kB local_pcp:740kB free_cma:0kB [ 651.363450] Unreclaimable slab info: [ 651.373374] lowmem_reserve[]: 0 0 0 0 0 [ 651.379548] Name Used Total [ 651.380076] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 651.389555] pid_2 102KB 152KB [ 651.396336] Node 0 DMA32: 1314*4kB (UME) 532*8kB (ME) 182*16kB (ME) 65*32kB (MEH) 21*64kB (UMH) 1*128kB (H) 1*256kB (H) 1*512kB (H) 1*1024kB (H) 0*2048kB 0*4096kB = 17768kB [ 651.406747] batadv_tl_cache 4KB 12KB [ 651.417499] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 651.429201] TIPC 10KB 15KB [ 651.441990] Node 1 Normal: 52*4kB (UME) 53*8kB (ME) 41*16kB (UME) 35*32kB (ME) 29*64kB (UME) 21*128kB (ME) 9*256kB (ME) 2*512kB (ME) 2*1024kB (UE) 1*2048kB (E) 3*4096kB (M) = 26664kB [ 651.446562] SCTPv6 14KB 18KB [ 651.486086] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 651.518658] SCTP 0KB 62KB [ 651.546065] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 651.575431] DCCPv6 17KB 22KB [ 651.588853] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 651.619385] DCCP 16KB 21KB [ 651.647854] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 651.682606] RXRPC 11KB 13KB [ 651.694128] 5441 total pagecache pages [ 651.709038] rxrpc_call_jar 78KB 94KB [ 651.728321] 0 pages in swap cache [ 651.746705] bridge_fdb_cache 9KB 15KB [ 651.766786] Swap cache stats: add 0, delete 0, find 0/0 [ 651.778890] fib6_nodes 157KB 160KB [ 651.781795] Free swap = 0kB [ 651.788376] ip6_dst_cache 80KB 326KB [ 651.801838] Total swap = 0kB [ 651.803037] RAWv6 70KB 74KB [ 651.808080] 2097051 pages RAM [ 651.820863] UDPv6 26KB 30KB [ 651.829614] 0 pages HighMem/MovableOnly [ 651.831309] TCPv6 33KB 42KB [ 651.834777] 369649 pages reserved [ 651.834781] 0 pages cma reserved [ 651.899548] nf_conntrack 5KB 18KB [ 651.905038] t10_alua_lu_gp_cache 0KB 3KB [ 651.910688] sd_ext_cdb 0KB 7KB [ 651.920968] scsi_sense_cache 1056KB 1060KB [ 651.926390] virtio_scsi_cmd 16KB 16KB [ 651.931763] sgpool-128 8KB 8KB [ 651.942311] sgpool-64 4KB 12KB [ 651.947735] sgpool-32 2KB 15KB [ 651.957977] sgpool-16 1KB 7KB [ 651.963388] sgpool-8 0KB 7KB [ 651.968760] mqueue_inode_cache 10KB 22KB [ 651.979187] bio_post_read_ctx 14KB 15KB [ 651.984674] bio-2 14KB 15KB [ 651.990037] jfs_mp 7KB 7KB [ 652.000163] cifs_small_rq 15KB 16KB [ 652.005583] cifs_request 67KB 67KB [ 652.011292] cifs_mpx_ids 0KB 7KB [ 652.021422] nfs_commit_data 3KB 14KB [ 652.026898] nfs_write_data 34KB 44KB [ 652.032297] ext4_system_zone 1KB 7KB [ 652.043143] bio-1 1KB 7KB [ 652.048519] pid_namespace 2KB 7KB [ 652.057902] rpc_buffers 17KB 25KB [ 652.064191] rpc_tasks 2KB 7KB [ 652.069562] UNIX 125KB 127KB [ 652.079083] tcp_bind_bucket 1KB 4KB [ 652.085346] ip_fib_trie 23KB 27KB [ 652.090715] ip_fib_alias 112KB 118KB [ 652.100030] ip_dst_cache 10KB 48KB [ 652.106367] RAW 42KB 52KB [ 652.111778] UDP 35KB 47KB [ 652.121410] TCP 11KB 16KB [ 652.127629] hugetlbfs_inode_cache 3KB 15KB [ 652.137514] fscache_cookie_jar 1KB 11KB [ 652.144283] eventpoll_pwq 16KB 47KB [ 652.149654] eventpoll_epi 37KB 66KB [ 652.158949] inotify_inode_mark 24KB 55KB [ 652.165323] request_queue 199KB 199KB [ 652.170693] blkdev_requests 1KB 3KB [ 652.180028] blkdev_ioc 13KB 19KB [ 652.186263] bio-0 519KB 521KB [ 652.191628] biovec-max 1361KB 1361KB [ 652.201105] biovec-64 351KB 354KB [ 652.207318] biovec-16 20KB 26KB [ 652.212686] bio_integrity_payload 1KB 8KB [ 652.222673] khugepaged_mm_slot 17KB 34KB [ 652.229027] uid_cache 0KB 4KB [ 652.238428] dmaengine-unmap-2 0KB 3KB [ 652.244644] skbuff_fclone_cache 190KB 408KB [ 652.250689] skbuff_head_cache 4293KB 4293KB [ 652.260185] configfs_dir_cache 3KB 11KB [ 652.272290] file_lock_cache 122KB 202KB [ 652.281644] file_lock_ctx 9KB 11KB [ 652.287903] fsnotify_mark_connector 13KB 31KB [ 652.297858] net_namespace 52KB 52KB [ 652.304090] shmem_inode_cache 8290KB 8536KB [ 652.309452] task_delay_info 225KB 411KB [ 652.318967] taskstats 111KB 210KB [ 652.325377] proc_dir_entry 694KB 697KB [ 652.330745] pde_opener 6KB 58KB [ 652.340402] seq_file 214KB 539KB [ 652.349556] sigqueue 42KB 55KB [ 652.358919] kernfs_node_cache 18234KB 18246KB [ 652.365168] mnt_cache 173KB 188KB [ 652.370533] filp 5340KB 7657KB [ 652.380037] names_cache 125506KB 125545KB [ 652.386323] iint_cache 87KB 87KB [ 652.391690] key_jar 4KB 11KB [ 652.401138] uts_namespace 2KB 7KB [ 652.407400] nsproxy 3KB 15KB [ 652.412773] vm_area_struct 3141KB 5212KB [ 652.422237] mm_struct 656KB 1124KB [ 652.430933] fs_cache 120KB 384KB [ 652.440477] files_cache 435KB 851KB [ 652.446694] signal_cache 1012KB 1804KB [ 652.452567] sighand_cache 568KB 596KB [ 652.461920] task_struct 7051KB 7107KB [ 652.468224] cred_jar 1012KB 2100KB [ 652.477537] anon_vma_chain 1029KB 1803KB [ 652.483841] anon_vma 161KB 269KB [ 652.489237] pid 50KB 264KB [ 652.498890] Acpi-Operand 156KB 202KB [ 652.505158] Acpi-ParseExt 8KB 11KB [ 652.510525] Acpi-Parse 41KB 47KB [ 652.520034] Acpi-State 52KB 63KB [ 652.529938] Acpi-Namespace 21KB 27KB [ 652.539340] numa_policy 0KB 3KB [ 652.549627] debug_objects_cache 2251KB 2252KB [ 652.562366] trace_event_file 297KB 298KB [ 652.571179] ftrace_event_field 398KB 401KB [ 652.581889] pool_workqueue 121KB 124KB [ 652.589811] page->ptl 634KB 1047KB [ 652.599348] kmalloc-2097152 2050KB 2050KB [ 652.605897] kmalloc-524288 2056KB 2056KB [ 652.611343] kmalloc-262144 1290KB 1290KB [ 652.621349] kmalloc-131072 650KB 650KB [ 652.628248] kmalloc-65536 1848KB 1914KB [ 652.637696] kmalloc-32768 1650KB 1650KB [ 652.643957] kmalloc-16384 940KB 940KB [ 652.649535] kmalloc-8192 3960KB 4001KB [ 652.661499] kmalloc-4096 18908KB 18946KB [ 652.668563] kmalloc-2048 13529KB 13903KB [ 652.678741] kmalloc-1024 7738KB 7756KB [ 652.685017] kmalloc-512 8820KB 8820KB [ 652.690391] kmalloc-256 5434KB 5501KB [ 652.700259] kmalloc-128 1018KB 1488KB [ 652.706509] kmalloc-96 3370KB 4020KB [ 652.711994] kmalloc-64 3500KB 4264KB [ 652.721871] kmalloc-32 1820KB 2445KB [ 652.729475] kmalloc-192 1478KB 2292KB [ 652.739500] kmem_cache 177KB 183KB [ 652.749502] Out of memory (oom_kill_allocating_task): Kill process 4692 (systemd-journal) score 0 or sacrifice child [ 652.763560] Killed process 4692 (systemd-journal) total-vm:46096kB, anon-rss:512kB, file-rss:0kB, shmem-rss:3056kB [ 652.775532] oom_reaper: reaped process 4692 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:3192kB [ 652.899657] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 652.909084] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 652.937781] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 652.946180] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 652.957502] systemd[1]: Stopped Journal Service. [ 652.975369] systemd[1]: Starting Journal Service... [ 653.293802] systemd-journald[12100]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 653.769602] systemd[1]: Started Journal Service. 13:06:32 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2$9p(&(0x7f0000000040), 0x80000) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:06:32 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000000)=0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000000)=0x2) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async) 13:06:32 executing program 3: sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x101}]}, 0x1c}}, 0x20040) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:06:32 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f00000000c0)) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0x0, 0x76}) syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x1, @raw_data="5c03cc05a811f411aef61d5f99630bead214210c7aa01a3dc605e2cfcd8f4d14a68f48fc6b2f6be1f3d56f6fb3d7fa2d3dcfbdfcee2c8b4799b31a70ed19fb862b426af0357650208ff0fe6d0bf1bb9adda367c1a005d290d94c4e079e0f0eaabee8549410af52775f16acfcb87c7827a0c06bac7dd8c68a6e873f2e03413a67b2ff7632ecedd35dae9d2a71e35d2cee7789dade0b87ad85dd29d819583af71fac37c55a432c6ec7f26038ef1efd77c13af2476db3e54935b7233dd12aac4b6e994de930ca592691"}) 13:06:32 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d4fa5037"}, 0x0, 0x2, {0x0}}) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000440)={0x2, @pix={0x6, 0x344, 0x52424752, 0x7, 0x4, 0x100, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000001c0)={0x8, 0x3f, 0x4, {0x1, @win={{0x8, 0x40800, 0x9, 0x7ff}, 0x0, 0x6, &(0x7f0000000180)={{0x8, 0x1, 0x46e8, 0x1000}, &(0x7f0000000140)={{0x7f, 0x38b7, 0x8}, &(0x7f0000000100)={{0x10000000, 0xa44, 0x3f, 0x80000000}}}}, 0x40, &(0x7f0000000680)="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", 0x9c}}, 0x80000001}) 13:06:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_SSID={0x15, 0x34, @random="93388aaa8e929b9ccdf5660a6a3b123fd4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xbb, 0x401, 0x34324948, 0x9, 0x3, 0x9, 0x7, 0x40000, 0x1, 0x0, 0x1, 0x7}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000380)=@userptr={0x40000000, 0x0, 0x4, 0x0, 0x3, {0x0, 0x2710}, {0x1, 0x2, 0x9, 0x9, 0x80, 0xea, "f8437f47"}, 0x3, 0x2, {&(0x7f0000000340)}, 0x9}) ioctl$vim2m_VIDIOC_G_FMT(r3, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x55595659, 0x0, 0x0, [{}, {}, {0xffffffff}, {}, {0x0, 0x400000}], 0x0, 0x10}}) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000140)=0x1, 0x4) 13:06:33 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d4fa5037"}, 0x0, 0x2, {0x0}}) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000440)={0x2, @pix={0x6, 0x344, 0x52424752, 0x7, 0x4, 0x100, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1}}) 13:06:33 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x33d, 0xce25ce7db943775e, 0x1, "dfe52c0a73b204d45eeaaaf489e64346b74ef777ea8f43912743957d264f4a75", 0x30324c4a}) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0xe48, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000080)=0x2) 13:06:33 executing program 3: sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x101}]}, 0x1c}}, 0x20040) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:06:33 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f00000000c0)) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0x0, 0x76}) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x1, @raw_data="5c03cc05a811f411aef61d5f99630bead214210c7aa01a3dc605e2cfcd8f4d14a68f48fc6b2f6be1f3d56f6fb3d7fa2d3dcfbdfcee2c8b4799b31a70ed19fb862b426af0357650208ff0fe6d0bf1bb9adda367c1a005d290d94c4e079e0f0eaabee8549410af52775f16acfcb87c7827a0c06bac7dd8c68a6e873f2e03413a67b2ff7632ecedd35dae9d2a71e35d2cee7789dade0b87ad85dd29d819583af71fac37c55a432c6ec7f26038ef1efd77c13af2476db3e54935b7233dd12aac4b6e994de930ca592691"}) 13:06:33 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x33d, 0xce25ce7db943775e, 0x1, "dfe52c0a73b204d45eeaaaf489e64346b74ef777ea8f43912743957d264f4a75", 0x30324c4a}) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0xe48, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000080)=0x2) 13:06:33 executing program 3: sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x101}]}, 0x1c}}, 0x20040) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:06:33 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d4fa5037"}, 0x0, 0x2, {0x0}}) syz_open_dev$vim2m(&(0x7f00000002c0), 0xffffffffffffffff, 0x2) 13:06:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000d84a612d9b57725072716c13f8cca9a8359c1a5f219a8577fd39b88c0c7cd9d3444feb1b6c8de5607fb2a466122380afa23c0e5dfd47aa0e2de9e630c65e4564f11620f13bbcafb4d3f38c403803441e6bc", @ANYRES16=r2, @ANYBLOB="000129bd7000fedbdf25650000000800020000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4004085) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r3, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f00000001c0)=@userptr={0x5, 0x1, 0x4, 0x100, 0x5b68, {0x77359400}, {0x3, 0x1, 0xf4, 0x0, 0x8c, 0x6, "0b10d7de"}, 0x8dc, 0x2, {&(0x7f0000000180)}, 0x8001}) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x101, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0xcd6d, 0x3, 0x3, "b6e7364b11c1f12a6b1d7c8cb29809fce3545b00ed1e5d32a44b5829afd67cdc", 0x32314142}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) 13:06:34 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async, rerun: 64) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (rerun: 64) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x33d, 0xce25ce7db943775e, 0x1, "dfe52c0a73b204d45eeaaaf489e64346b74ef777ea8f43912743957d264f4a75", 0x30324c4a}) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0xe48, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000080)=0x2) [ 661.691471] oom_reaper: reaped process 12113 (syz-executor.0), now anon-rss:0kB, file-rss:14332kB, shmem-rss:56kB [ 661.719075] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 661.743935] in:imklog cpuset=/ mems_allowed=0-1 [ 661.748647] CPU: 0 PID: 11564 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 661.756183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 661.765532] Call Trace: [ 661.768138] dump_stack+0x1fc/0x2ef [ 661.771768] dump_header+0x15d/0xc3f [ 661.775470] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 661.780554] ? ___ratelimit+0x319/0x590 [ 661.784531] oom_kill_process.cold+0x10/0x692 [ 661.789019] ? check_preemption_disabled+0x41/0x280 [ 661.794027] ? has_intersects_mems_allowed+0x1d6/0x290 [ 661.799288] out_of_memory+0x1072/0x1390 [ 661.803335] ? oom_killer_disable+0x270/0x270 [ 661.807823] ? mutex_trylock+0x15f/0x1a0 [ 661.811870] __alloc_pages_nodemask+0x23a2/0x2890 [ 661.816701] ? find_get_entry+0x4cd/0x8a0 [ 661.820837] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 661.825681] alloc_pages_current+0x193/0x2a0 [ 661.830072] filemap_fault+0x146e/0x2180 [ 661.834123] ext4_filemap_fault+0x84/0xb0 [ 661.838252] __do_fault+0x10b/0x4b0 [ 661.841875] __handle_mm_fault+0x273b/0x41c0 [ 661.846301] ? vm_insert_page+0x9c0/0x9c0 [ 661.850434] ? lock_downgrade+0x720/0x720 [ 661.854612] ? check_preemption_disabled+0x41/0x280 [ 661.859655] handle_mm_fault+0x436/0xb10 [ 661.863728] __do_page_fault+0x68e/0xd60 [ 661.867841] ? trace_hardirqs_off_caller+0x6e/0x210 [ 661.872870] ? spurious_fault+0x840/0x840 [ 661.877003] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 661.881831] ? page_fault+0x8/0x30 [ 661.885368] page_fault+0x1e/0x30 [ 661.888804] RIP: 0033:0x7f8e66a9222d [ 661.892507] Code: Bad RIP value. [ 661.895852] RSP: 002b:00007f8e6442e580 EFLAGS: 00010293 [ 661.901205] RAX: 0000000000000078 RBX: 0000000000000000 RCX: 00007f8e66a9222d [ 661.908471] RDX: 0000000000001fa0 RSI: 00007f8e6442eda0 RDI: 0000000000000004 [ 661.915728] RBP: 0000558bd17369d0 R08: 00007f8e65c0b940 R09: 0000000004000001 [ 661.923002] R10: 0000000000000001 R11: 0000000000000293 R12: 00007f8e6442eda0 [ 661.930361] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f8e6442edd8 [ 661.942726] syz-executor.0: vmalloc: allocation failure, allocated 1799856128 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 661.948393] Mem-Info: [ 661.956615] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 661.961410] active_anon:20096 inactive_anon:6882 isolated_anon:0 [ 661.961410] active_file:16 inactive_file:16 isolated_file:0 [ 661.961410] unevictable:0 dirty:0 writeback:0 unstable:0 [ 661.961410] slab_reclaimable:20849 slab_unreclaimable:108065 [ 661.961410] mapped:22311 shmem:7458 pagetables:597 bounce:0 [ 661.961410] free:13807 free_pcp:863 free_cma:0 [ 661.967694] CPU: 1 PID: 12113 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 662.002804] Node 0 active_anon:78828kB inactive_anon:19324kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 32768kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 662.005324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 662.005336] Call Trace: [ 662.037794] Node 1 active_anon:1556kB inactive_anon:8204kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1376kB dirty:0kB writeback:0kB shmem:8204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 662.042308] dump_stack+0x1fc/0x2ef [ 662.044932] Node 0 DMA free:10880kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 662.071667] warn_alloc.cold+0x7b/0x18f [ 662.071686] ? zone_watermark_ok_safe+0x260/0x260 [ 662.071699] ? retint_kernel+0x2d/0x2d [ 662.071734] __vmalloc_area_node+0x4fd/0x780 [ 662.071754] ? __vmalloc_node_range+0x180/0x180 [ 662.071767] ? _raw_spin_unlock+0x29/0x40 [ 662.071782] ? __get_vm_area_node+0x2e2/0x3a0 [ 662.080574] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 662.101687] __vmalloc_node_range+0xed/0x180 [ 662.101703] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 662.101718] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 662.101730] vmalloc_user+0x70/0xe0 [ 662.101743] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 662.101757] vb2_vmalloc_alloc+0xb3/0x2f0 [ 662.101773] __vb2_queue_alloc+0x472/0xe60 [ 662.101799] vb2_core_create_bufs+0x273/0x7e0 [ 662.101814] ? __vb2_queue_free+0x870/0x870 [ 662.110486] Node 0 DMA32 free:17848kB min:35996kB low:44992kB high:53988kB active_anon:78804kB inactive_anon:19324kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7584kB pagetables:2168kB bounce:0kB free_pcp:1824kB local_pcp:220kB free_cma:0kB [ 662.110622] ? __video_do_ioctl+0x632/0xcd0 [ 662.114549] lowmem_reserve[]: 0 0 1 1 1 [ 662.118879] ? pi_state_update_owner+0x450/0x450 [ 662.128190] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 662.132162] ? __mutex_lock+0x368/0x1190 [ 662.137220] lowmem_reserve[]: 0 0 0 0 0 [ 662.141550] vb2_create_bufs+0x332/0x620 [ 662.157306] Node 1 Normal free:26492kB min:53876kB low:67344kB high:80812kB active_anon:1556kB inactive_anon:8204kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:220kB bounce:0kB free_pcp:1620kB local_pcp:1308kB free_cma:0kB [ 662.159126] ? mark_held_locks+0xf0/0xf0 [ 662.167771] lowmem_reserve[]: 0 0 0 0 0 [ 662.171961] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 662.177160] Node 0 DMA: 2*4kB (M) 1*8kB (U) 1*16kB (U) 1*32kB (M) 1*64kB (M) 2*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 10880kB [ 662.205273] ? futex_wait_queue_me+0x404/0x5e0 [ 662.205290] ? pi_state_update_owner+0x450/0x450 [ 662.205306] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 662.205327] v4l_create_bufs+0xb2/0x160 [ 662.205344] __video_do_ioctl+0x49a/0xcd0 [ 662.205364] ? v4l_querycap+0x340/0x340 [ 662.205381] ? __might_fault+0x192/0x1d0 [ 662.205397] ? v4l_querycap+0x340/0x340 [ 662.205414] video_usercopy+0x13f/0xfa0 [ 662.205436] ? v4l_enumstd+0x60/0x60 [ 662.205451] ? do_futex+0x171/0x1880 [ 662.205469] ? mark_held_locks+0xf0/0xf0 [ 662.205489] ? debug_check_no_obj_freed+0x201/0x490 [ 662.205513] ? video_usercopy+0xfa0/0xfa0 [ 662.205525] v4l2_ioctl+0x147/0x1a0 [ 662.205538] ? video_devdata+0xa0/0xa0 [ 662.205555] do_vfs_ioctl+0xcdb/0x12e0 [ 662.205578] ? lock_downgrade+0x720/0x720 [ 662.205593] ? check_preemption_disabled+0x41/0x280 [ 662.205608] ? ioctl_preallocate+0x200/0x200 [ 662.205627] ? __fget+0x356/0x510 [ 662.205644] ? do_dup2+0x450/0x450 [ 662.205659] ? __se_sys_futex+0x298/0x3b0 [ 662.205682] ksys_ioctl+0x9b/0xc0 [ 662.205698] __x64_sys_ioctl+0x6f/0xb0 [ 662.205713] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 662.205727] do_syscall_64+0xf9/0x620 [ 662.205747] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 662.205760] RIP: 0033:0x7f68c24140f9 [ 662.205775] Code: Bad RIP value. [ 662.205783] RSP: 002b:00007f68c0986168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 662.205798] RAX: ffffffffffffffda RBX: 00007f68c2533f80 RCX: 00007f68c24140f9 [ 662.205805] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000006 [ 662.205813] RBP: 00007f68c246fae9 R08: 0000000000000000 R09: 0000000000000000 [ 662.205819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 662.205826] R13: 00007fff6155d44f R14: 00007f68c0986300 R15: 0000000000022000 [ 662.216318] Mem-Info: [ 662.228003] Node 0 DMA32: 1256*4kB (UME) 556*8kB (UME) 173*16kB (UME) 69*32kB (UMEH) 24*64kB (UMH) 1*128kB (H) 1*256kB (H) 1*512kB (H) 1*1024kB (H) 0*2048kB 0*4096kB = 17904kB [ 662.252108] active_anon:20096 inactive_anon:6882 isolated_anon:0 [ 662.252108] active_file:16 inactive_file:16 isolated_file:0 [ 662.252108] unevictable:0 dirty:0 writeback:0 unstable:0 [ 662.252108] slab_reclaimable:20849 slab_unreclaimable:108065 [ 662.252108] mapped:22311 shmem:7458 pagetables:597 bounce:0 [ 662.252108] free:13807 free_pcp:860 free_cma:0 [ 662.261299] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 662.292872] Node 0 active_anon:78828kB inactive_anon:19324kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 32768kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 662.303426] Node 1 Normal: 149*4kB (UME) 115*8kB (ME) 75*16kB (UME) 53*32kB (UME) 29*64kB (UME) 12*128kB (M) 1*256kB (M) 0*512kB 2*1024kB (UM) 0*2048kB 4*4096kB (UME) = 26492kB [ 662.320934] Node 1 active_anon:1556kB inactive_anon:8204kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1376kB dirty:0kB writeback:0kB shmem:8204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 662.331457] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 662.339862] Node 0 DMA free:10880kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 662.340965] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 662.345061] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 662.345083] Node 0 DMA32 free:17848kB min:35996kB low:44992kB high:53988kB active_anon:78804kB inactive_anon:19324kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7584kB pagetables:2168kB bounce:0kB free_pcp:1816kB local_pcp:1604kB free_cma:0kB [ 662.345122] lowmem_reserve[]: 0 0 1 1 1 [ 662.356728] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 662.362810] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 662.366149] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 662.369703] lowmem_reserve[]: 0 0 0 0 0 [ 662.379005] 7490 total pagecache pages [ 662.386115] Node 1 Normal free:26492kB min:53876kB low:67344kB high:80812kB active_anon:1556kB inactive_anon:8204kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:220kB bounce:0kB free_pcp:1620kB local_pcp:312kB free_cma:0kB [ 662.397368] 0 pages in swap cache [ 662.401789] lowmem_reserve[]: 0 0 0 0 0 [ 662.403174] Swap cache stats: add 0, delete 0, find 0/0 [ 662.411408] Node 0 DMA: 2*4kB (M) 1*8kB (U) 1*16kB (U) 1*32kB (M) 1*64kB (M) 2*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 10880kB [ 662.420004] Free swap = 0kB [ 662.429618] Node 0 DMA32: 1256*4kB (UME) 556*8kB (UME) 173*16kB (UME) 69*32kB (UMEH) 24*64kB (UMH) 1*128kB (H) 1*256kB (H) 1*512kB (H) 1*1024kB (H) 0*2048kB 0*4096kB = 17904kB [ 662.431826] Total swap = 0kB [ 662.435555] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 662.435610] Node 1 Normal: 149*4kB (UME) 115*8kB (ME) 75*16kB (UME) 53*32kB (UME) 29*64kB (UME) 12*128kB (M) 1*256kB (M) 0*512kB 2*1024kB (UM) 0*2048kB 4*4096kB (UME) = 26492kB [ 662.446716] 2097051 pages RAM [ 662.446722] 0 pages HighMem/MovableOnly [ 662.446726] 369649 pages reserved [ 662.446734] 0 pages cma reserved [ 662.460824] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 662.466744] Unreclaimable slab info: [ 662.468668] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 662.475920] Name Used Total [ 662.475932] pid_2 89KB 152KB [ 662.494704] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 662.505584] batadv_tl_cache 4KB 12KB [ 662.546699] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 662.577389] TIPC 10KB 15KB [ 662.601757] 7490 total pagecache pages [ 662.624123] SCTPv6 14KB 18KB [ 662.634064] 0 pages in swap cache [ 662.659255] SCTP 0KB 15KB [ 662.660920] Swap cache stats: add 0, delete 0, find 0/0 [ 662.665983] DCCPv6 17KB 22KB [ 662.665997] DCCP 16KB 21KB [ 662.666040] RXRPC 11KB 13KB [ 662.666050] rxrpc_call_jar 78KB 94KB [ 662.666063] bridge_fdb_cache 9KB 15KB [ 662.666078] fib6_nodes 157KB 160KB [ 662.666087] ip6_dst_cache 83KB 326KB [ 662.666099] RAWv6 70KB 74KB [ 662.716670] Free swap = 0kB [ 662.735622] UDPv6 33KB 37KB [ 662.735636] TCPv6 33KB 48KB [ 662.735655] nf_conntrack 5KB 18KB [ 662.735717] t10_alua_lu_gp_cache 0KB 3KB [ 662.761291] Total swap = 0kB [ 662.784518] sd_ext_cdb 0KB 7KB [ 662.800204] 2097051 pages RAM [ 662.812248] scsi_sense_cache 1056KB 1060KB [ 662.839150] 0 pages HighMem/MovableOnly [ 662.845267] virtio_scsi_cmd 16KB 16KB [ 662.869156] 369649 pages reserved [ 662.872353] sgpool-128 8KB 8KB [ 662.882815] 0 pages cma reserved [ 662.886920] sgpool-64 4KB 12KB [ 663.068513] sgpool-32 2KB 15KB [ 663.073936] sgpool-16 1KB 7KB [ 663.079300] sgpool-8 0KB 7KB [ 663.084738] mqueue_inode_cache 10KB 22KB [ 663.090195] bio_post_read_ctx 14KB 15KB [ 663.095688] bio-2 14KB 15KB [ 663.101565] jfs_mp 7KB 7KB [ 663.107052] cifs_small_rq 15KB 16KB [ 663.112582] cifs_request 67KB 67KB [ 663.117946] cifs_mpx_ids 0KB 7KB [ 663.123392] nfs_commit_data 3KB 14KB [ 663.128758] nfs_write_data 34KB 44KB [ 663.134218] ext4_system_zone 1KB 7KB [ 663.139609] bio-1 1KB 7KB [ 663.145105] pid_namespace 2KB 7KB [ 663.150512] rpc_buffers 17KB 25KB [ 663.155928] rpc_tasks 2KB 7KB [ 663.161287] UNIX 148KB 150KB [ 663.166718] tcp_bind_bucket 1KB 4KB [ 663.172089] ip_fib_trie 23KB 27KB [ 663.177557] ip_fib_alias 112KB 118KB [ 663.182992] ip_dst_cache 10KB 48KB [ 663.188361] RAW 42KB 52KB [ 663.193779] UDP 35KB 47KB [ 663.199169] TCP 14KB 28KB [ 663.205224] hugetlbfs_inode_cache 3KB 15KB [ 663.211033] fscache_cookie_jar 1KB 11KB [ 663.216553] eventpoll_pwq 22KB 47KB [ 663.221920] eventpoll_epi 33KB 66KB [ 663.227365] inotify_inode_mark 28KB 55KB [ 663.232884] request_queue 199KB 199KB [ 663.238245] blkdev_requests 1KB 3KB [ 663.243685] blkdev_ioc 17KB 19KB [ 663.249054] bio-0 711KB 712KB [ 663.254463] biovec-max 1419KB 1419KB [ 663.259831] biovec-64 529KB 535KB [ 663.265266] biovec-16 34KB 37KB [ 663.270627] bio_integrity_payload 1KB 8KB [ 663.276391] khugepaged_mm_slot 12KB 34KB [ 663.281848] uid_cache 0KB 4KB [ 663.287291] dmaengine-unmap-2 0KB 3KB [ 663.292697] skbuff_fclone_cache 153KB 315KB [ 663.298237] skbuff_head_cache 4995KB 4998KB [ 663.303687] configfs_dir_cache 3KB 11KB [ 663.309657] file_lock_cache 102KB 202KB [ 663.315090] file_lock_ctx 9KB 11KB [ 663.320455] fsnotify_mark_connector 11KB 31KB [ 663.326428] net_namespace 52KB 52KB [ 663.331801] shmem_inode_cache 8228KB 8501KB [ 663.337227] task_delay_info 206KB 411KB [ 663.342669] taskstats 99KB 206KB [ 663.348036] proc_dir_entry 694KB 697KB [ 663.353443] pde_opener 10KB 58KB [ 663.358805] seq_file 214KB 539KB [ 663.364242] sigqueue 37KB 55KB [ 663.369604] kernfs_node_cache 18230KB 18246KB [ 663.375008] mnt_cache 173KB 188KB [ 663.380378] filp 5471KB 7646KB [ 663.388024] names_cache 123169KB 123207KB [ 663.395793] iint_cache 89KB 95KB [ 663.401597] key_jar 4KB 11KB [ 663.416048] uts_namespace 2KB 7KB [ 663.421437] nsproxy 1KB 11KB [ 663.429259] vm_area_struct 3100KB 5201KB [ 663.440544] mm_struct 563KB 1085KB [ 663.448590] fs_cache 96KB 380KB [ 663.459918] files_cache 367KB 810KB [ 663.467799] signal_cache 925KB 1782KB [ 663.479400] sighand_cache 531KB 596KB [ 663.487347] task_struct 6558KB 6615KB [ 663.498736] cred_jar 1102KB 2100KB [ 663.506662] anon_vma_chain 1015KB 1803KB [ 663.518253] anon_vma 142KB 269KB [ 663.526101] pid 48KB 264KB [ 663.531523] Acpi-Operand 156KB 202KB [ 663.545153] Acpi-ParseExt 8KB 11KB [ 663.550536] Acpi-Parse 41KB 47KB [ 663.558333] Acpi-State 52KB 63KB [ 663.569968] Acpi-Namespace 21KB 27KB [ 663.577803] numa_policy 0KB 3KB [ 663.589129] debug_objects_cache 2249KB 2252KB [ 663.597294] trace_event_file 297KB 298KB [ 663.609549] ftrace_event_field 398KB 401KB [ 663.617955] pool_workqueue 121KB 124KB [ 663.629624] page->ptl 585KB 1047KB [ 663.637947] kmalloc-2097152 2050KB 2050KB [ 663.650005] kmalloc-524288 2056KB 2056KB [ 663.658037] kmalloc-262144 1290KB 1290KB [ 663.669793] kmalloc-131072 650KB 650KB [ 663.678387] kmalloc-65536 1848KB 1914KB [ 663.687231] kmalloc-32768 1650KB 1650KB [ 663.695889] kmalloc-16384 973KB 973KB [ 663.702000] kmalloc-8192 3960KB 4001KB [ 663.711800] kmalloc-4096 18717KB 18755KB [ 663.728604] kmalloc-2048 13181KB 13878KB [ 663.734924] kmalloc-1024 8011KB 8016KB [ 663.742287] kmalloc-512 10027KB 10027KB [ 663.755437] kmalloc-256 5396KB 5501KB [ 663.761297] kmalloc-128 958KB 1488KB [ 663.776749] kmalloc-96 3542KB 4020KB [ 663.786281] kmalloc-64 3401KB 4264KB [ 663.792121] kmalloc-32 1824KB 2445KB [ 663.807240] kmalloc-192 1475KB 2288KB [ 663.814532] kmem_cache 177KB 183KB [ 663.826688] Out of memory (oom_kill_allocating_task): Kill process 11564 (in:imklog) score 0 or sacrifice child [ 663.838616] Killed process 11562 (rsyslogd) total-vm:254332kB, anon-rss:696kB, file-rss:0kB, shmem-rss:0kB [ 663.855235] oom_reaper: reaped process 11562 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 13:06:43 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000001c0)=@multiplanar_mmap={0x20, 0x2, 0x4, 0x40, 0x200, {}, {0x7, 0x2, 0x2, 0x80, 0x7f, 0x3, "e315c974"}, 0x400, 0x1, {&(0x7f0000000140)=[{0xbf2, 0x3, {0x8}, 0x9}, {0x2, 0x41, {}, 0xe69d}]}, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000003c0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x70000, 0x1, {0x0, 0xea60}, {0x2, 0xc, 0x80, 0x5, 0x3, 0xc7, "5e37fd3b"}, 0x2, 0x2, {&(0x7f0000000340)=[{0x1, 0x3, {&(0x7f00000002c0)}}, {0x5, 0x8, {&(0x7f0000000300)}, 0x7}]}, 0x0, 0x0, r2}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000040)={0x9, 0xffffffff, 0x3, {0x0, @pix_mp={0x401, 0x2e8e, 0x3032344d, 0x9, 0x2, [{0x951, 0x2}, {0x70, 0xffff}, {0x84bc, 0xffff}, {0x101, 0x4}, {0x2, 0x81}, {0x10001, 0x96}, {0xe6a, 0x1ff}, {0x9, 0x8}], 0x9, 0x3, 0x7, 0x2, 0x2}}, 0x7}) 13:06:43 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000000)=0x2) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:06:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_SSID={0x15, 0x34, @random="93388aaa8e929b9ccdf5660a6a3b123fd4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xbb, 0x401, 0x34324948, 0x9, 0x3, 0x9, 0x7, 0x40000, 0x1, 0x0, 0x1, 0x7}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000380)=@userptr={0x40000000, 0x0, 0x4, 0x0, 0x3, {0x0, 0x2710}, {0x1, 0x2, 0x9, 0x9, 0x80, 0xea, "f8437f47"}, 0x3, 0x2, {&(0x7f0000000340)}, 0x9}) ioctl$vim2m_VIDIOC_G_FMT(r3, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x55595659, 0x0, 0x0, [{}, {}, {0xffffffff}, {}, {0x0, 0x400000}], 0x0, 0x10}}) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000140)=0x1, 0x4) 13:06:43 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)=@multiplanar_mmap={0x1ff, 0x2, 0x4, 0x0, 0x2, {0x0, 0x2710}, {0x4, 0xc, 0xc7, 0x7f, 0x1, 0x9, "5799825b"}, 0x800, 0x1, {&(0x7f0000000080)=[{0x9, 0x6abd, {0x344}, 0x7886339c}, {0xa0b2, 0x4, {0x100000001}, 0x6cf81f18}]}, 0x6}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000000)=@fd={0x9, 0x1, 0x4, 0x100000, 0x4, {}, {0x5, 0x8, 0x88, 0x7, 0x1, 0xa8, "25eb4201"}, 0x4, 0x4, {}, 0x8}) 13:06:43 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0xffffffffffffffff, 0x2) 13:06:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000d84a612d9b57725072716c13f8cca9a8359c1a5f219a8577fd39b88c0c7cd9d3444feb1b6c8de5607fb2a466122380afa23c0e5dfd47aa0e2de9e630c65e4564f11620f13bbcafb4d3f38c403803441e6bc", @ANYRES16=r2, @ANYBLOB="000129bd7000fedbdf25650000000800020000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4004085) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r3, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f00000001c0)=@userptr={0x5, 0x1, 0x4, 0x100, 0x5b68, {0x77359400}, {0x3, 0x1, 0xf4, 0x0, 0x8c, 0x6, "0b10d7de"}, 0x8dc, 0x2, {&(0x7f0000000180)}, 0x8001}) (async) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x101, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0xcd6d, 0x3, 0x3, "b6e7364b11c1f12a6b1d7c8cb29809fce3545b00ed1e5d32a44b5829afd67cdc", 0x32314142}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r5) (async) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) 13:06:43 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fffffffffffffff, 0x2) (async, rerun: 32) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async, rerun: 32) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000001c0)=@multiplanar_mmap={0x20, 0x2, 0x4, 0x40, 0x200, {}, {0x7, 0x2, 0x2, 0x80, 0x7f, 0x3, "e315c974"}, 0x400, 0x1, {&(0x7f0000000140)=[{0xbf2, 0x3, {0x8}, 0x9}, {0x2, 0x41, {}, 0xe69d}]}, 0x0, 0x0, 0xffffffffffffffff}) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000003c0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x70000, 0x1, {0x0, 0xea60}, {0x2, 0xc, 0x80, 0x5, 0x3, 0xc7, "5e37fd3b"}, 0x2, 0x2, {&(0x7f0000000340)=[{0x1, 0x3, {&(0x7f00000002c0)}}, {0x5, 0x8, {&(0x7f0000000300)}, 0x7}]}, 0x0, 0x0, r2}) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000040)={0x9, 0xffffffff, 0x3, {0x0, @pix_mp={0x401, 0x2e8e, 0x3032344d, 0x9, 0x2, [{0x951, 0x2}, {0x70, 0xffff}, {0x84bc, 0xffff}, {0x101, 0x4}, {0x2, 0x81}, {0x10001, 0x96}, {0xe6a, 0x1ff}, {0x9, 0x8}], 0x9, 0x3, 0x7, 0x2, 0x2}}, 0x7}) 13:06:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000d84a612d9b57725072716c13f8cca9a8359c1a5f219a8577fd39b88c0c7cd9d3444feb1b6c8de5607fb2a466122380afa23c0e5dfd47aa0e2de9e630c65e4564f11620f13bbcafb4d3f38c403803441e6bc", @ANYRES16=r2, @ANYBLOB="000129bd7000fedbdf25650000000800020000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4004085) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000d84a612d9b57725072716c13f8cca9a8359c1a5f219a8577fd39b88c0c7cd9d3444feb1b6c8de5607fb2a466122380afa23c0e5dfd47aa0e2de9e630c65e4564f11620f13bbcafb4d3f38c403803441e6bc", @ANYRES16=r2, @ANYBLOB="000129bd7000fedbdf25650000000800020000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4004085) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r3, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f00000001c0)=@userptr={0x5, 0x1, 0x4, 0x100, 0x5b68, {0x77359400}, {0x3, 0x1, 0xf4, 0x0, 0x8c, 0x6, "0b10d7de"}, 0x8dc, 0x2, {&(0x7f0000000180)}, 0x8001}) (async) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f00000001c0)=@userptr={0x5, 0x1, 0x4, 0x100, 0x5b68, {0x77359400}, {0x3, 0x1, 0xf4, 0x0, 0x8c, 0x6, "0b10d7de"}, 0x8dc, 0x2, {&(0x7f0000000180)}, 0x8001}) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x101, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0xcd6d, 0x3, 0x3, "b6e7364b11c1f12a6b1d7c8cb29809fce3545b00ed1e5d32a44b5829afd67cdc", 0x32314142}) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) 13:06:44 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) syz_open_dev$vim2m(&(0x7f00000002c0), 0xffffffffffffffff, 0x2) 13:06:44 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x1e4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8000}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc001}, 0x44845) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @raw_data="2f7363758a2baafbf003e347e8209847006ecf4384d5891f5e8b0ff0f9cf50ac7835f06a845a3613b5eee270839e378c2fd86c96a4cb5f7c0347a9e05f2c94b44657562c854f8319f25577d33fdaaa187840372fe0b544ed11bbab97e4204a87015646163d65df50093e306abf59998d637b8eb4cb37f5461bc54f5d23cdbad0fffb032199ca594bdeb054841bbdf79fa2aa84898a50875f5a828375b222759192cd08c9150d5453f35acedc5df33fe53ed883479e6202edf645d08b5a0e388d88bbe7e7c2970940"}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10001000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 13:06:44 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000001c0)=@multiplanar_mmap={0x20, 0x2, 0x4, 0x40, 0x200, {}, {0x7, 0x2, 0x2, 0x80, 0x7f, 0x3, "e315c974"}, 0x400, 0x1, {&(0x7f0000000140)=[{0xbf2, 0x3, {0x8}, 0x9}, {0x2, 0x41, {}, 0xe69d}]}, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000003c0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x70000, 0x1, {0x0, 0xea60}, {0x2, 0xc, 0x80, 0x5, 0x3, 0xc7, "5e37fd3b"}, 0x2, 0x2, {&(0x7f0000000340)=[{0x1, 0x3, {&(0x7f00000002c0)}}, {0x5, 0x8, {&(0x7f0000000300)}, 0x7}]}, 0x0, 0x0, r2}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000040)={0x9, 0xffffffff, 0x3, {0x0, @pix_mp={0x401, 0x2e8e, 0x3032344d, 0x9, 0x2, [{0x951, 0x2}, {0x70, 0xffff}, {0x84bc, 0xffff}, {0x101, 0x4}, {0x2, 0x81}, {0x10001, 0x96}, {0xe6a, 0x1ff}, {0x9, 0x8}], 0x9, 0x3, 0x7, 0x2, 0x2}}, 0x7}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fffffffffffffff, 0x2) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000001c0)=@multiplanar_mmap={0x20, 0x2, 0x4, 0x40, 0x200, {}, {0x7, 0x2, 0x2, 0x80, 0x7f, 0x3, "e315c974"}, 0x400, 0x1, {&(0x7f0000000140)=[{0xbf2, 0x3, {0x8}, 0x9}, {0x2, 0x41, {}, 0xe69d}]}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000003c0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x70000, 0x1, {0x0, 0xea60}, {0x2, 0xc, 0x80, 0x5, 0x3, 0xc7, "5e37fd3b"}, 0x2, 0x2, {&(0x7f0000000340)=[{0x1, 0x3, {&(0x7f00000002c0)}}, {0x5, 0x8, {&(0x7f0000000300)}, 0x7}]}, 0x0, 0x0, r2}) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000040)={0x9, 0xffffffff, 0x3, {0x0, @pix_mp={0x401, 0x2e8e, 0x3032344d, 0x9, 0x2, [{0x951, 0x2}, {0x70, 0xffff}, {0x84bc, 0xffff}, {0x101, 0x4}, {0x2, 0x81}, {0x10001, 0x96}, {0xe6a, 0x1ff}, {0x9, 0x8}], 0x9, 0x3, 0x7, 0x2, 0x2}}, 0x7}) (async) 13:06:45 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)=@overlay={0x9d, 0x3, 0x4, 0xe000, 0x5, {0x77359400}, {0x1, 0x2, 0x80, 0x1, 0x8, 0x3, "b2d2866c"}, 0x5, 0x3, {}, 0x8}) 13:06:45 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x1e4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8000}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc001}, 0x44845) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @raw_data="2f7363758a2baafbf003e347e8209847006ecf4384d5891f5e8b0ff0f9cf50ac7835f06a845a3613b5eee270839e378c2fd86c96a4cb5f7c0347a9e05f2c94b44657562c854f8319f25577d33fdaaa187840372fe0b544ed11bbab97e4204a87015646163d65df50093e306abf59998d637b8eb4cb37f5461bc54f5d23cdbad0fffb032199ca594bdeb054841bbdf79fa2aa84898a50875f5a828375b222759192cd08c9150d5453f35acedc5df33fe53ed883479e6202edf645d08b5a0e388d88bbe7e7c2970940"}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10001000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 13:06:45 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0xffffffffffffffff, 0x2) [ 672.570312] oom_reaper: reaped process 12199 (syz-executor.0), now anon-rss:0kB, file-rss:14332kB, shmem-rss:56kB [ 672.627003] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 672.639384] systemd-journal cpuset=/ mems_allowed=0-1 [ 672.644745] CPU: 0 PID: 12100 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 672.652713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 672.662058] Call Trace: [ 672.664638] dump_stack+0x1fc/0x2ef [ 672.668248] dump_header+0x15d/0xc3f [ 672.671945] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 672.677026] ? ___ratelimit+0x319/0x590 [ 672.680982] oom_kill_process.cold+0x10/0x692 [ 672.685535] ? check_preemption_disabled+0x41/0x280 [ 672.690561] ? has_intersects_mems_allowed+0x1d6/0x290 [ 672.695833] out_of_memory+0x1072/0x1390 [ 672.699890] ? oom_killer_disable+0x270/0x270 [ 672.704383] ? mutex_trylock+0x15f/0x1a0 [ 672.708469] __alloc_pages_nodemask+0x23a2/0x2890 [ 672.713409] ? find_get_entry+0x4cd/0x8a0 [ 672.717555] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 672.722396] alloc_pages_current+0x193/0x2a0 [ 672.726789] filemap_fault+0x146e/0x2180 [ 672.730846] ext4_filemap_fault+0x84/0xb0 [ 672.735011] __do_fault+0x10b/0x4b0 [ 672.738622] __handle_mm_fault+0x273b/0x41c0 [ 672.743029] ? vm_insert_page+0x9c0/0x9c0 [ 672.747166] ? check_preemption_disabled+0x41/0x280 [ 672.752166] handle_mm_fault+0x436/0xb10 [ 672.756213] __do_page_fault+0x68e/0xd60 [ 672.760259] ? trace_hardirqs_off_caller+0x6e/0x210 [ 672.765257] ? spurious_fault+0x840/0x840 [ 672.769390] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 672.774219] ? page_fault+0x8/0x30 [ 672.777741] page_fault+0x1e/0x30 [ 672.781178] RIP: 0033:0x7ff16ca802e3 [ 672.784900] Code: Bad RIP value. [ 672.788242] RSP: 002b:00007ffced5c97d8 EFLAGS: 00010246 [ 672.793595] RAX: 0000000000000001 RBX: 000055989e0a51e0 RCX: 00007ff16ca802e3 [ 672.800847] RDX: 0000000000000013 RSI: 00007ffced5c97e0 RDI: 000000000000000c [ 672.808109] RBP: 00007ffced5c99d0 R08: 0000000000000000 R09: 000000ab151cd9b3 [ 672.815370] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffced5c97e0 [ 672.822623] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005f5c244448f99 [ 672.837443] syz-executor.0: vmalloc: allocation failure, allocated 1783181312 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 672.840378] Mem-Info: [ 672.851269] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 672.851297] CPU: 1 PID: 12199 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 672.851308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 672.864050] active_anon:19588 inactive_anon:6882 isolated_anon:0 [ 672.864050] active_file:16 inactive_file:16 isolated_file:0 [ 672.864050] unevictable:0 dirty:0 writeback:0 unstable:0 [ 672.864050] slab_reclaimable:19472 slab_unreclaimable:114620 [ 672.864050] mapped:22350 shmem:7458 pagetables:597 bounce:0 [ 672.864050] free:13796 free_pcp:269 free_cma:0 [ 672.866674] Call Trace: [ 672.876074] Node 0 active_anon:76704kB inactive_anon:19324kB active_file:60kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 30720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 672.909084] dump_stack+0x1fc/0x2ef [ 672.909103] warn_alloc.cold+0x7b/0x18f [ 672.909119] ? zone_watermark_ok_safe+0x260/0x260 [ 672.909134] ? rcu_nmi_exit+0xb3/0x180 [ 672.909168] __vmalloc_area_node+0x4fd/0x780 [ 672.909187] ? __vmalloc_node_range+0x180/0x180 [ 672.909203] ? _raw_spin_unlock+0x29/0x40 [ 672.922086] Node 1 active_anon:1648kB inactive_anon:8204kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1532kB dirty:0kB writeback:0kB shmem:8204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 672.939434] ? __get_vm_area_node+0x2e2/0x3a0 [ 672.939456] __vmalloc_node_range+0xed/0x180 [ 672.939472] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 672.939487] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 672.939498] vmalloc_user+0x70/0xe0 [ 672.939510] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 672.939523] vb2_vmalloc_alloc+0xb3/0x2f0 [ 672.939537] __vb2_queue_alloc+0x472/0xe60 [ 672.939563] vb2_core_create_bufs+0x273/0x7e0 [ 672.939579] ? __vb2_queue_free+0x870/0x870 [ 672.939594] ? __video_do_ioctl+0x632/0xcd0 [ 672.939614] ? pi_state_update_owner+0x450/0x450 [ 672.939630] ? __mutex_lock+0x368/0x1190 [ 672.939649] vb2_create_bufs+0x332/0x620 [ 672.939666] ? mark_held_locks+0xf0/0xf0 [ 672.939681] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 672.939694] ? futex_wait_queue_me+0x404/0x5e0 [ 672.939710] ? pi_state_update_owner+0x450/0x450 [ 672.939724] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 672.939754] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 672.939776] v4l_create_bufs+0xb2/0x160 [ 672.939794] __video_do_ioctl+0x49a/0xcd0 [ 672.939817] ? v4l_querycap+0x340/0x340 [ 672.939837] ? __might_fault+0x192/0x1d0 [ 672.939854] ? v4l_querycap+0x340/0x340 [ 672.939870] video_usercopy+0x13f/0xfa0 [ 672.939893] ? v4l_enumstd+0x60/0x60 [ 672.939906] ? do_futex+0x171/0x1880 [ 672.939922] ? mark_held_locks+0xf0/0xf0 [ 672.939941] ? debug_check_no_obj_freed+0x201/0x490 [ 672.939966] ? video_usercopy+0xfa0/0xfa0 [ 672.939978] v4l2_ioctl+0x147/0x1a0 [ 672.939990] ? video_devdata+0xa0/0xa0 [ 672.940006] do_vfs_ioctl+0xcdb/0x12e0 [ 672.940020] ? lock_downgrade+0x720/0x720 [ 672.940038] ? check_preemption_disabled+0x41/0x280 [ 672.953742] Node 0 DMA free:10864kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 672.956319] ? ioctl_preallocate+0x200/0x200 [ 672.960700] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 672.965364] ? __fget+0x356/0x510 [ 672.965378] ? do_dup2+0x450/0x450 [ 672.965392] ? __se_sys_futex+0x298/0x3b0 [ 672.965412] ksys_ioctl+0x9b/0xc0 [ 672.965427] __x64_sys_ioctl+0x6f/0xb0 [ 672.965444] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 672.978499] Node 0 DMA32 free:17876kB min:35996kB low:44992kB high:53988kB active_anon:76704kB inactive_anon:19324kB active_file:60kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7584kB pagetables:2164kB bounce:0kB free_pcp:584kB local_pcp:336kB free_cma:0kB [ 672.996281] do_syscall_64+0xf9/0x620 [ 672.996301] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 672.996312] RIP: 0033:0x7f68c24140f9 [ 672.996326] Code: Bad RIP value. [ 672.996333] RSP: 002b:00007f68c0986168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 672.996350] RAX: ffffffffffffffda RBX: 00007f68c2533f80 RCX: 00007f68c24140f9 [ 672.996357] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000006 [ 672.996365] RBP: 00007f68c246fae9 R08: 0000000000000000 R09: 0000000000000000 [ 672.996373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 672.996380] R13: 00007fff6155d44f R14: 00007f68c0986300 R15: 0000000000022000 [ 673.005320] Mem-Info: [ 673.013065] lowmem_reserve[]: 0 0 1 1 1 [ 673.021095] active_anon:19588 inactive_anon:6882 isolated_anon:0 [ 673.021095] active_file:16 inactive_file:16 isolated_file:0 [ 673.021095] unevictable:0 dirty:0 writeback:0 unstable:0 [ 673.021095] slab_reclaimable:19472 slab_unreclaimable:114620 [ 673.021095] mapped:22350 shmem:7458 pagetables:597 bounce:0 [ 673.021095] free:13796 free_pcp:268 free_cma:0 [ 673.023197] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 673.023225] lowmem_reserve[]: 0 0 0 0 0 [ 673.029521] Node 0 active_anon:76704kB inactive_anon:19324kB active_file:60kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 30720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 673.035528] Node 1 Normal free:26436kB min:53876kB low:67344kB high:80812kB active_anon:1648kB inactive_anon:8204kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:224kB bounce:0kB free_pcp:488kB local_pcp:240kB free_cma:0kB [ 673.045675] Node 1 active_anon:1648kB inactive_anon:8204kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1532kB dirty:0kB writeback:0kB shmem:8204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 673.049480] lowmem_reserve[]: 0 0 0 0 0 [ 673.061652] Node 0 DMA free:10864kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 673.061733] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 673.070226] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10864kB [ 673.071396] Node 0 DMA32 free:17876kB min:35996kB low:44992kB high:53988kB active_anon:76704kB inactive_anon:19324kB active_file:60kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7584kB pagetables:2164kB bounce:0kB free_pcp:580kB local_pcp:248kB free_cma:0kB [ 673.076200] Node 0 DMA32: 1677*4kB (UME) 638*8kB (UME) 189*16kB (UME) 67*32kB (UME) 14*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17876kB [ 673.076267] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 673.094717] lowmem_reserve[]: 0 0 1 1 1 [ 673.098549] Node 1 Normal: 121*4kB (UM) 102*8kB (ME) 69*16kB (M) 59*32kB (UME) 32*64kB (M) 15*128kB (UM) 11*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 2*2048kB (UM) 2*4096kB (UE) = 26436kB [ 673.099048] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 673.103158] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 673.103169] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 673.103179] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 673.103188] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 673.103194] 7490 total pagecache pages [ 673.103206] 0 pages in swap cache [ 673.103213] Swap cache stats: add 0, delete 0, find 0/0 [ 673.103223] Free swap = 0kB [ 673.117704] lowmem_reserve[]: 0 0 0 0 0 [ 673.121024] Total swap = 0kB [ 673.128774] Node 1 Normal free:26436kB min:53876kB low:67344kB high:80812kB active_anon:1648kB inactive_anon:8204kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:224kB bounce:0kB free_pcp:488kB local_pcp:248kB free_cma:0kB [ 673.132973] 2097051 pages RAM [ 673.138662] lowmem_reserve[]: 0 0 0 0 0 [ 673.139972] 0 pages HighMem/MovableOnly [ 673.154864] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10864kB [ 673.182895] 369649 pages reserved [ 673.195501] Node 0 DMA32: 1677*4kB (UME) 638*8kB (UME) 189*16kB (UME) 67*32kB (UME) 14*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17876kB [ 673.195886] 0 pages cma reserved [ 673.200054] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 673.207129] Unreclaimable slab info: [ 673.211703] Node 1 Normal: 121*4kB (UM) 102*8kB (ME) 69*16kB (M) 59*32kB (UME) 32*64kB (M) 15*128kB (UM) 11*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 2*2048kB (UM) 2*4096kB (UE) = 26436kB [ 673.212497] Name Used Total [ 673.252548] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 673.258075] pid_2 92KB 152KB [ 673.277290] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 673.281809] batadv_tl_cache 4KB 12KB [ 673.292339] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 673.297132] TIPC 10KB 15KB [ 673.310278] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 673.348894] SCTPv6 14KB 18KB [ 673.383084] 7490 total pagecache pages [ 673.399882] DCCPv6 17KB 22KB [ 673.399898] DCCP 16KB 21KB [ 673.399937] RXRPC 11KB 13KB [ 673.445231] 0 pages in swap cache [ 673.462754] rxrpc_call_jar 78KB 94KB [ 673.493847] Swap cache stats: add 0, delete 0, find 0/0 [ 673.510749] bridge_fdb_cache 9KB 15KB [ 673.536296] Free swap = 0kB [ 673.559071] fib6_nodes 157KB 160KB [ 673.565666] Total swap = 0kB [ 673.590327] ip6_dst_cache 75KB 326KB [ 673.608077] 2097051 pages RAM [ 673.625062] RAWv6 70KB 74KB [ 673.631679] 0 pages HighMem/MovableOnly [ 673.653640] UDPv6 33KB 37KB [ 673.658399] 369649 pages reserved [ 673.659433] TCPv6 30KB 36KB [ 673.662458] 0 pages cma reserved [ 673.917499] nf_conntrack 6KB 18KB [ 673.924702] t10_alua_lu_gp_cache 0KB 3KB [ 673.930334] sd_ext_cdb 0KB 7KB [ 673.937381] scsi_sense_cache 1056KB 1060KB [ 673.946076] virtio_scsi_cmd 16KB 16KB [ 673.951448] sgpool-128 8KB 8KB [ 673.959193] sgpool-64 4KB 12KB [ 673.967818] sgpool-32 2KB 15KB [ 673.974902] sgpool-16 1KB 7KB [ 673.980269] sgpool-8 0KB 7KB [ 673.988807] mqueue_inode_cache 10KB 22KB [ 673.995991] bio_post_read_ctx 14KB 15KB [ 674.001425] bio-2 14KB 15KB [ 674.010126] jfs_mp 7KB 7KB [ 674.017156] cifs_small_rq 15KB 16KB [ 674.025697] cifs_request 67KB 67KB [ 674.031069] cifs_mpx_ids 0KB 7KB [ 674.038172] nfs_commit_data 3KB 14KB [ 674.046701] nfs_write_data 34KB 44KB [ 674.053709] ext4_system_zone 1KB 7KB [ 674.059607] bio-1 1KB 7KB [ 674.068579] pid_namespace 2KB 7KB [ 674.075644] rpc_buffers 17KB 25KB [ 674.081009] rpc_tasks 2KB 7KB [ 674.089706] UNIX 185KB 187KB [ 674.097457] tcp_bind_bucket 1KB 4KB [ 674.106466] ip_fib_trie 23KB 27KB [ 674.116883] ip_fib_alias 112KB 118KB [ 674.125733] ip_dst_cache 10KB 48KB [ 674.131123] RAW 42KB 52KB [ 674.138398] UDP 40KB 47KB [ 674.147107] TCP 14KB 16KB [ 674.154456] hugetlbfs_inode_cache 3KB 15KB [ 674.161323] fscache_cookie_jar 1KB 11KB [ 674.170902] eventpoll_pwq 24KB 47KB [ 674.178448] eventpoll_epi 42KB 66KB [ 674.187419] inotify_inode_mark 22KB 55KB [ 674.197402] request_queue 199KB 199KB [ 674.206245] blkdev_requests 1KB 3KB [ 674.213491] blkdev_ioc 19KB 23KB [ 674.218874] bio-0 941KB 941KB [ 674.227608] biovec-max 1476KB 1476KB [ 674.234716] biovec-64 733KB 740KB [ 674.240088] biovec-16 59KB 63KB [ 674.248657] bio_integrity_payload 1KB 8KB [ 674.256138] khugepaged_mm_slot 15KB 34KB [ 674.265476] uid_cache 0KB 4KB [ 674.270848] dmaengine-unmap-2 0KB 3KB [ 674.278014] skbuff_fclone_cache 158KB 307KB [ 674.287398] skbuff_head_cache 5235KB 5238KB [ 674.294586] configfs_dir_cache 3KB 11KB [ 674.300046] file_lock_cache 101KB 198KB [ 674.308666] file_lock_ctx 9KB 11KB [ 674.315755] fsnotify_mark_connector 17KB 31KB [ 674.325006] net_namespace 52KB 52KB [ 674.330380] shmem_inode_cache 8220KB 8493KB [ 674.337380] task_delay_info 207KB 407KB [ 674.346215] taskstats 101KB 206KB [ 674.355057] proc_dir_entry 694KB 697KB [ 674.360514] pde_opener 7KB 58KB [ 674.371007] seq_file 242KB 539KB [ 674.378208] sigqueue 34KB 55KB [ 674.386907] kernfs_node_cache 18234KB 18246KB [ 674.393952] mnt_cache 173KB 188KB [ 674.399317] filp 6038KB 7646KB [ 674.408694] names_cache 135889KB 135910KB [ 674.415989] iint_cache 85KB 95KB [ 674.421492] key_jar 4KB 11KB [ 674.430427] uts_namespace 2KB 7KB [ 674.439431] nsproxy 1KB 11KB [ 674.448213] vm_area_struct 3257KB 5185KB [ 674.455388] mm_struct 523KB 1046KB [ 674.460844] fs_cache 108KB 372KB [ 674.471286] files_cache 375KB 791KB [ 674.478423] signal_cache 886KB 1775KB [ 674.487019] sighand_cache 564KB 596KB [ 674.494128] task_struct 6868KB 6868KB [ 674.499503] cred_jar 1276KB 2100KB [ 674.508864] anon_vma_chain 1041KB 1803KB [ 674.519438] anon_vma 147KB 269KB [ 674.529211] pid 54KB 264KB [ 674.536952] Acpi-Operand 156KB 202KB [ 674.548872] Acpi-ParseExt 8KB 11KB [ 674.556042] Acpi-Parse 41KB 47KB [ 674.561508] Acpi-State 52KB 63KB [ 674.573314] Acpi-Namespace 21KB 27KB [ 674.578697] numa_policy 0KB 3KB [ 674.587542] debug_objects_cache 1616KB 2046KB [ 674.596621] trace_event_file 297KB 298KB [ 674.605338] ftrace_event_field 398KB 401KB [ 674.610807] pool_workqueue 121KB 124KB [ 674.617965] page->ptl 575KB 1047KB [ 674.626714] kmalloc-2097152 2050KB 2050KB [ 674.633868] kmalloc-524288 2056KB 2056KB [ 674.639236] kmalloc-262144 1290KB 1290KB [ 674.647943] kmalloc-131072 650KB 650KB [ 674.655095] kmalloc-65536 1848KB 1914KB [ 674.660466] kmalloc-32768 1650KB 1650KB [ 674.669234] kmalloc-16384 973KB 973KB [ 674.677499] kmalloc-8192 3960KB 4001KB [ 674.683000] kmalloc-4096 19295KB 19295KB [ 674.688780] kmalloc-2048 13124KB 13872KB [ 674.694250] kmalloc-1024 7849KB 8016KB [ 674.699810] kmalloc-512 10571KB 10575KB [ 674.705272] kmalloc-256 5362KB 5497KB [ 674.710811] kmalloc-128 950KB 1488KB [ 674.716266] kmalloc-96 3715KB 4020KB [ 674.721911] kmalloc-64 3006KB 4252KB [ 674.727413] kmalloc-32 1857KB 2445KB [ 674.732860] kmalloc-192 1489KB 2288KB [ 674.738377] kmem_cache 177KB 183KB [ 674.744053] Out of memory (oom_kill_allocating_task): Kill process 12100 (systemd-journal) score 0 or sacrifice child [ 674.754890] Killed process 12100 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:0kB, shmem-rss:1532kB [ 674.766645] oom_reaper: reaped process 12100 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1532kB [ 674.927900] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 674.937865] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 674.967465] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 674.976624] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 674.987567] systemd[1]: Stopped Journal Service. [ 675.007786] systemd[1]: Starting Journal Service... [ 675.234745] systemd-journald[12280]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 675.707502] systemd[1]: Started Journal Service. 13:06:54 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)=@overlay={0x9d, 0x3, 0x4, 0xe000, 0x5, {0x77359400}, {0x1, 0x2, 0x80, 0x1, 0x8, 0x3, "b2d2866c"}, 0x5, 0x3, {}, 0x8}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)=@overlay={0x9d, 0x3, 0x4, 0xe000, 0x5, {0x77359400}, {0x1, 0x2, 0x80, 0x1, 0x8, 0x3, "b2d2866c"}, 0x5, 0x3, {}, 0x8}) (async) 13:06:54 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x1e4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8000}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc001}, 0x44845) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @raw_data="2f7363758a2baafbf003e347e8209847006ecf4384d5891f5e8b0ff0f9cf50ac7835f06a845a3613b5eee270839e378c2fd86c96a4cb5f7c0347a9e05f2c94b44657562c854f8319f25577d33fdaaa187840372fe0b544ed11bbab97e4204a87015646163d65df50093e306abf59998d637b8eb4cb37f5461bc54f5d23cdbad0fffb032199ca594bdeb054841bbdf79fa2aa84898a50875f5a828375b222759192cd08c9150d5453f35acedc5df33fe53ed883479e6202edf645d08b5a0e388d88bbe7e7c2970940"}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10001000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 13:06:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_SSID={0x15, 0x34, @random="93388aaa8e929b9ccdf5660a6a3b123fd4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xbb, 0x401, 0x34324948, 0x9, 0x3, 0x9, 0x7, 0x40000, 0x1, 0x0, 0x1, 0x7}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000380)=@userptr={0x40000000, 0x0, 0x4, 0x0, 0x3, {0x0, 0x2710}, {0x1, 0x2, 0x9, 0x9, 0x80, 0xea, "f8437f47"}, 0x3, 0x2, {&(0x7f0000000340)}, 0x9}) ioctl$vim2m_VIDIOC_G_FMT(r3, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x55595659, 0x0, 0x0, [{}, {}, {0xffffffff}, {}, {0x0, 0x400000}], 0x0, 0x10}}) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000180)) 13:06:54 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x1}, {}, {}, {0x0, 0xdb1}]}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x0, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20008004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000001640)={0x1018, r7, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}]}, 0x1018}, 0x1, 0x0, 0x0, 0x400c040}, 0x24000001) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000000340), 0xc, &(0x7f0000003c40)={&(0x7f0000000200)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0xb}}}}, [@NL80211_ATTR_REKEY_DATA={0xffffffffffffff0b, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="00032b4b76b92dee5991cbff83aae43abd7000fddbdf255300000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x41) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r8) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r5, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x63}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x1, 0x5]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xcf9}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 13:06:54 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)=@multiplanar_mmap={0x1ff, 0x2, 0x4, 0x0, 0x2, {0x0, 0x2710}, {0x4, 0xc, 0xc7, 0x7f, 0x1, 0x9, "5799825b"}, 0x800, 0x1, {&(0x7f0000000080)=[{0x9, 0x6abd, {0x344}, 0x7886339c}, {0xa0b2, 0x4, {0x100000001}, 0x6cf81f18}]}, 0x6}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000000)=@fd={0x9, 0x1, 0x4, 0x100000, 0x4, {}, {0x5, 0x8, 0x88, 0x7, 0x1, 0xa8, "25eb4201"}, 0x4, 0x4, {}, 0x8}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)=@multiplanar_mmap={0x1ff, 0x2, 0x4, 0x0, 0x2, {0x0, 0x2710}, {0x4, 0xc, 0xc7, 0x7f, 0x1, 0x9, "5799825b"}, 0x800, 0x1, {&(0x7f0000000080)=[{0x9, 0x6abd, {0x344}, 0x7886339c}, {0xa0b2, 0x4, {0x100000001}, 0x6cf81f18}]}, 0x6}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000000)=@fd={0x9, 0x1, 0x4, 0x100000, 0x4, {}, {0x5, 0x8, 0x88, 0x7, 0x1, 0xa8, "25eb4201"}, 0x4, 0x4, {}, 0x8}) (async) 13:06:54 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) syz_open_dev$vim2m(&(0x7f00000002c0), 0xffffffffffffffff, 0x2) 13:06:54 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x1, [{}, {}, {0x0, 0xeebe}, {}, {0x6}], 0x0, 0x0, 0x0, 0x0, 0x1}}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x800, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="100000001702002e2f66696c6530"], 0x10) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000040)={'binder1\x00'}) [ 678.180510] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 13:06:55 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0xffffffffffffffff, 0x2) 13:06:55 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x1, [{}, {}, {0x0, 0xeebe}, {}, {0x6}], 0x0, 0x0, 0x0, 0x0, 0x1}}) (async) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x800, 0x0) (async) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="100000001702002e2f66696c6530"], 0x10) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000040)={'binder1\x00'}) 13:06:56 executing program 5: syz_open_dev$vim2m(&(0x7f00000002c0), 0xffffffffffffffff, 0x2) 13:06:56 executing program 5: syz_open_dev$vim2m(0x0, 0xffffffffffffffff, 0x2) 13:06:56 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x1, [{}, {}, {0x0, 0xeebe}, {}, {0x6}], 0x0, 0x0, 0x0, 0x0, 0x1}}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x800, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="100000001702002e2f66696c6530"], 0x10) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000040)={'binder1\x00'}) (async) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000040)={'binder1\x00'}) [ 683.536930] oom_reaper: reaped process 12291 (syz-executor.0), now anon-rss:0kB, file-rss:14332kB, shmem-rss:16kB [ 683.574986] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 683.588921] systemd-journal cpuset=/ mems_allowed=0-1 [ 683.598014] CPU: 0 PID: 12280 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 683.606049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 683.615402] Call Trace: [ 683.618003] dump_stack+0x1fc/0x2ef [ 683.621636] dump_header+0x15d/0xc3f [ 683.625357] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 683.630473] ? ___ratelimit+0x319/0x590 [ 683.634452] oom_kill_process.cold+0x10/0x692 [ 683.638985] ? check_preemption_disabled+0x41/0x280 [ 683.644008] ? has_intersects_mems_allowed+0x1d6/0x290 [ 683.649285] out_of_memory+0x1072/0x1390 [ 683.653355] ? oom_killer_disable+0x270/0x270 [ 683.657877] ? mutex_trylock+0x15f/0x1a0 [ 683.661942] __alloc_pages_nodemask+0x23a2/0x2890 [ 683.666798] ? find_get_entry+0x4cd/0x8a0 [ 683.670955] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 683.675842] alloc_pages_current+0x193/0x2a0 [ 683.680247] filemap_fault+0x146e/0x2180 [ 683.684317] ext4_filemap_fault+0x84/0xb0 [ 683.688457] __do_fault+0x10b/0x4b0 [ 683.691967] syz-executor.0: vmalloc: allocation failure, allocated 1768480768 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 683.692086] __handle_mm_fault+0x273b/0x41c0 [ 683.706687] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 683.710343] ? vm_insert_page+0x9c0/0x9c0 [ 683.719584] ? check_preemption_disabled+0x41/0x280 [ 683.724593] handle_mm_fault+0x436/0xb10 [ 683.728657] __do_page_fault+0x68e/0xd60 [ 683.732797] ? trace_hardirqs_off_caller+0x6e/0x210 [ 683.737802] ? spurious_fault+0x840/0x840 [ 683.741946] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 683.746780] ? page_fault+0x8/0x30 [ 683.750307] page_fault+0x1e/0x30 [ 683.753783] RIP: 0033:0x7f4ed3a8c2e3 [ 683.757572] Code: Bad RIP value. [ 683.760936] RSP: 002b:00007ffe26107518 EFLAGS: 00010246 [ 683.766296] RAX: 0000000000000001 RBX: 0000561c940c61e0 RCX: 00007f4ed3a8c2e3 [ 683.773551] RDX: 0000000000000013 RSI: 00007ffe26107520 RDI: 000000000000000c [ 683.780808] RBP: 00007ffe26107710 R08: 00007ffe261f7000 R09: 000000ae9a938c67 [ 683.788066] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe26107520 [ 683.795324] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005f5c245165e6a [ 683.802603] CPU: 1 PID: 12291 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 683.808400] Mem-Info: [ 683.810493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 683.813034] active_anon:20137 inactive_anon:8913 isolated_anon:0 [ 683.813034] active_file:16 inactive_file:16 isolated_file:0 [ 683.813034] unevictable:0 dirty:0 writeback:0 unstable:0 [ 683.813034] slab_reclaimable:15873 slab_unreclaimable:119085 [ 683.813034] mapped:22311 shmem:9506 pagetables:611 bounce:0 [ 683.813034] free:14013 free_pcp:189 free_cma:0 [ 683.822313] Call Trace: [ 683.822334] dump_stack+0x1fc/0x2ef [ 683.822351] warn_alloc.cold+0x7b/0x18f [ 683.822388] ? zone_watermark_ok_safe+0x260/0x260 [ 683.855466] Node 0 active_anon:78820kB inactive_anon:19320kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 32768kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 683.858008] ? write_comp_data+0x23/0x70 [ 683.861641] Node 1 active_anon:1728kB inactive_anon:16332kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1376kB dirty:0kB writeback:0kB shmem:16396kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 683.865589] __vmalloc_area_node+0x4fd/0x780 [ 683.870396] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 683.897984] ? __vmalloc_node_range+0x180/0x180 [ 683.897999] ? _raw_spin_unlock+0x29/0x40 [ 683.898013] ? __get_vm_area_node+0x2e2/0x3a0 [ 683.898033] __vmalloc_node_range+0xed/0x180 [ 683.898047] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 683.898061] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 683.898074] vmalloc_user+0x70/0xe0 [ 683.898089] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 683.898101] vb2_vmalloc_alloc+0xb3/0x2f0 [ 683.898117] __vb2_queue_alloc+0x472/0xe60 [ 683.898145] vb2_core_create_bufs+0x273/0x7e0 [ 683.898159] ? __vb2_queue_free+0x870/0x870 [ 683.898179] ? __mutex_lock+0x368/0x1190 [ 683.898197] vb2_create_bufs+0x332/0x620 [ 683.898215] ? mark_held_locks+0xf0/0xf0 [ 683.898229] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 683.898247] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 683.898264] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 683.898287] v4l_create_bufs+0xb2/0x160 [ 683.898306] __video_do_ioctl+0x49a/0xcd0 [ 683.898328] ? v4l_querycap+0x340/0x340 [ 683.898347] ? __might_fault+0x192/0x1d0 [ 683.898372] ? v4l_querycap+0x340/0x340 [ 683.898389] video_usercopy+0x13f/0xfa0 [ 683.898411] ? v4l_enumstd+0x60/0x60 [ 683.898426] ? do_futex+0x171/0x1880 [ 683.898442] ? mark_held_locks+0xf0/0xf0 [ 683.898467] ? debug_check_no_obj_freed+0x201/0x490 [ 683.898491] ? video_usercopy+0xfa0/0xfa0 [ 683.898504] v4l2_ioctl+0x147/0x1a0 [ 683.898517] ? video_devdata+0xa0/0xa0 [ 683.898533] do_vfs_ioctl+0xcdb/0x12e0 [ 683.898549] ? lock_downgrade+0x720/0x720 [ 683.898566] ? check_preemption_disabled+0x41/0x280 [ 683.898580] ? ioctl_preallocate+0x200/0x200 [ 683.898599] ? __fget+0x356/0x510 [ 683.898615] ? do_dup2+0x450/0x450 [ 683.898630] ? __se_sys_futex+0x298/0x3b0 [ 683.898652] ksys_ioctl+0x9b/0xc0 [ 683.898676] __x64_sys_ioctl+0x6f/0xb0 [ 683.898690] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 683.898704] do_syscall_64+0xf9/0x620 [ 683.898723] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 683.898735] RIP: 0033:0x7f68c24140f9 [ 683.898750] Code: Bad RIP value. [ 683.898757] RSP: 002b:00007f68c0986168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 683.898771] RAX: ffffffffffffffda RBX: 00007f68c2533f80 RCX: 00007f68c24140f9 [ 683.898779] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000006 [ 683.898787] RBP: 00007f68c246fae9 R08: 0000000000000000 R09: 0000000000000000 [ 683.898795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 683.898804] R13: 00007fff6155d44f R14: 00007f68c0986300 R15: 0000000000022000 [ 683.907079] Mem-Info: [ 683.934819] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 683.940317] active_anon:20137 inactive_anon:8913 isolated_anon:0 [ 683.940317] active_file:16 inactive_file:16 isolated_file:0 [ 683.940317] unevictable:0 dirty:0 writeback:0 unstable:0 [ 683.940317] slab_reclaimable:15873 slab_unreclaimable:119085 [ 683.940317] mapped:22311 shmem:9506 pagetables:611 bounce:0 [ 683.940317] free:13954 free_pcp:250 free_cma:0 [ 683.965443] Node 0 DMA32 free:17996kB min:35996kB low:44992kB high:53988kB active_anon:78820kB inactive_anon:19320kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7616kB pagetables:2224kB bounce:0kB free_pcp:748kB local_pcp:248kB free_cma:0kB [ 683.971128] Node 0 active_anon:78820kB inactive_anon:19320kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 32768kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 683.975218] lowmem_reserve[]: 0 0 1 1 1 [ 683.979822] Node 1 active_anon:1728kB inactive_anon:16332kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1376kB dirty:0kB writeback:0kB shmem:16396kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 683.988177] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 683.993743] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 683.997541] lowmem_reserve[]: 0 0 0 0 0 [ 684.003273] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 684.008150] Node 1 Normal free:26928kB min:53876kB low:67344kB high:80812kB active_anon:1728kB inactive_anon:16332kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:220kB bounce:0kB free_pcp:252kB local_pcp:0kB free_cma:0kB [ 684.010449] Node 0 DMA32 free:17996kB min:35996kB low:44992kB high:53988kB active_anon:78820kB inactive_anon:19320kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7616kB pagetables:2224kB bounce:0kB free_pcp:744kB local_pcp:500kB free_cma:0kB [ 684.016186] lowmem_reserve[]: 0 0 0 0 0 [ 684.023848] lowmem_reserve[]: 0 0 1 1 1 [ 684.027189] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 684.033855] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 684.039676] Node 0 DMA32: 2081*4kB (UME) 730*8kB (UME) 163*16kB (UME) 39*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18020kB [ 684.045718] lowmem_reserve[]: 0 0 0 0 0 [ 684.046623] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 684.050755] Node 1 Normal free:26928kB min:53876kB low:67344kB high:80812kB active_anon:1728kB inactive_anon:16332kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:220kB bounce:0kB free_pcp:252kB local_pcp:252kB free_cma:0kB [ 684.056341] Node 1 Normal: 148*4kB (M) 130*8kB (UME) 99*16kB (M) 75*32kB (UME) 41*64kB (M) 14*128kB (UM) 4*256kB (UM) 1*512kB (M) 1*1024kB (M) 1*2048kB (M) 3*4096kB (U) = 26928kB [ 684.060620] lowmem_reserve[]: 0 0 0 0 0 [ 684.063151] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 684.070157] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 684.070821] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 684.074563] Node 0 DMA32: 2081*4kB (UME) 730*8kB (UME) 163*16kB (UME) 39*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18020kB [ 684.080783] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 684.088232] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 684.093381] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 684.095345] Node 1 Normal: 148*4kB (M) 130*8kB (UME) 99*16kB (M) 75*32kB (UME) 41*64kB (M) 14*128kB (UM) 4*256kB (UM) 1*512kB (M) 1*1024kB (M) 1*2048kB (M) 3*4096kB (U) = 26928kB [ 684.099221] 9538 total pagecache pages [ 684.108148] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 684.108412] 0 pages in swap cache [ 684.112859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 684.112868] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 684.112880] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 684.119064] Swap cache stats: add 0, delete 0, find 0/0 [ 684.119837] 9538 total pagecache pages [ 684.124133] Free swap = 0kB [ 684.124139] Total swap = 0kB [ 684.124148] 2097051 pages RAM [ 684.124156] 0 pages HighMem/MovableOnly [ 684.131068] 0 pages in swap cache [ 684.132342] 369649 pages reserved [ 684.136082] Swap cache stats: add 0, delete 0, find 0/0 [ 684.139863] 0 pages cma reserved [ 684.149705] Free swap = 0kB [ 684.159102] Unreclaimable slab info: [ 684.172106] Total swap = 0kB [ 684.178029] Name Used Total [ 684.190911] 2097051 pages RAM [ 684.200344] pid_2 97KB 152KB [ 684.215710] 0 pages HighMem/MovableOnly [ 684.240719] batadv_tl_cache 4KB 12KB [ 684.270778] 369649 pages reserved [ 684.304946] TIPC 10KB 15KB [ 684.329950] 0 pages cma reserved [ 684.361363] SCTPv6 14KB 18KB [ 684.792066] DCCPv6 17KB 22KB [ 684.797465] DCCP 16KB 21KB [ 684.802913] RXRPC 11KB 13KB [ 684.810075] rxrpc_call_jar 78KB 94KB [ 684.815519] bridge_fdb_cache 9KB 15KB [ 684.820894] fib6_nodes 157KB 160KB [ 684.826366] ip6_dst_cache 75KB 326KB [ 684.831810] RAWv6 70KB 74KB [ 684.837184] UDPv6 33KB 37KB [ 684.842651] TCPv6 33KB 42KB [ 684.848024] nf_conntrack 6KB 18KB [ 684.853521] t10_alua_lu_gp_cache 0KB 3KB [ 684.859150] sd_ext_cdb 0KB 7KB [ 684.864588] scsi_sense_cache 1056KB 1060KB [ 684.869957] virtio_scsi_cmd 16KB 16KB [ 684.875376] sgpool-128 8KB 8KB [ 684.880744] sgpool-64 4KB 12KB [ 684.886183] sgpool-32 2KB 15KB [ 684.891615] sgpool-16 1KB 7KB [ 684.896979] sgpool-8 0KB 7KB [ 684.902599] mqueue_inode_cache 10KB 22KB [ 684.908058] bio_post_read_ctx 14KB 15KB [ 684.915778] bio-2 14KB 15KB [ 684.921235] jfs_mp 7KB 7KB [ 684.926637] cifs_small_rq 15KB 16KB [ 684.932094] cifs_request 67KB 67KB [ 684.937459] cifs_mpx_ids 0KB 7KB [ 684.943056] nfs_commit_data 3KB 14KB [ 684.948511] nfs_write_data 34KB 44KB [ 684.954067] ext4_system_zone 1KB 7KB [ 684.959460] bio-1 1KB 7KB [ 684.964915] pid_namespace 2KB 7KB [ 684.970291] rpc_buffers 17KB 25KB [ 684.975737] rpc_tasks 2KB 7KB [ 684.981222] UNIX 206KB 210KB [ 684.986595] tcp_bind_bucket 1KB 4KB [ 684.992030] ip_fib_trie 23KB 27KB [ 684.997396] ip_fib_alias 112KB 118KB [ 685.002817] ip_dst_cache 10KB 48KB [ 685.008186] RAW 42KB 52KB [ 685.015279] UDP 40KB 47KB [ 685.020660] TCP 14KB 22KB [ 685.026461] hugetlbfs_inode_cache 3KB 15KB [ 685.032290] fscache_cookie_jar 1KB 11KB [ 685.037753] eventpoll_pwq 21KB 47KB [ 685.043178] eventpoll_epi 40KB 66KB [ 685.048546] inotify_inode_mark 23KB 55KB [ 685.054112] request_queue 199KB 199KB [ 685.059533] blkdev_requests 1KB 3KB [ 685.065036] blkdev_ioc 22KB 27KB [ 685.070399] bio-0 1041KB 1068KB [ 685.075877] biovec-max 1493KB 1493KB [ 685.081277] biovec-64 920KB 921KB [ 685.086643] biovec-16 73KB 75KB [ 685.092083] bio_integrity_payload 1KB 8KB [ 685.097799] khugepaged_mm_slot 13KB 34KB [ 685.103322] uid_cache 0KB 4KB [ 685.108706] dmaengine-unmap-2 0KB 3KB [ 685.115921] skbuff_fclone_cache 170KB 303KB [ 685.121546] skbuff_head_cache 5745KB 5748KB [ 685.126910] configfs_dir_cache 3KB 11KB [ 685.132422] file_lock_cache 107KB 198KB [ 685.137784] file_lock_ctx 9KB 11KB [ 685.143234] fsnotify_mark_connector 12KB 31KB [ 685.149119] net_namespace 52KB 52KB [ 685.154585] shmem_inode_cache 8228KB 8485KB [ 685.160077] task_delay_info 208KB 407KB [ 685.165492] taskstats 100KB 206KB [ 685.171019] proc_dir_entry 694KB 697KB [ 685.176423] pde_opener 9KB 58KB [ 685.181835] seq_file 274KB 539KB [ 685.187198] sigqueue 49KB 55KB [ 685.192642] kernfs_node_cache 18230KB 18246KB [ 685.198095] mnt_cache 173KB 188KB [ 685.203546] filp 6547KB 7642KB [ 685.209028] names_cache 143458KB 143518KB [ 685.214575] iint_cache 43KB 79KB [ 685.221836] key_jar 4KB 11KB [ 685.227244] uts_namespace 2KB 7KB [ 685.232687] nsproxy 1KB 11KB [ 685.238068] vm_area_struct 3576KB 5185KB [ 685.243524] mm_struct 531KB 1040KB [ 685.248894] fs_cache 108KB 372KB [ 685.254320] files_cache 383KB 791KB [ 685.259684] signal_cache 863KB 1760KB [ 685.265217] sighand_cache 518KB 589KB [ 685.270583] task_struct 7253KB 7253KB [ 685.276012] cred_jar 1405KB 2100KB [ 685.281451] anon_vma_chain 1142KB 1803KB [ 685.286816] anon_vma 129KB 269KB [ 685.292268] pid 51KB 264KB [ 685.297633] Acpi-Operand 156KB 202KB [ 685.303083] Acpi-ParseExt 8KB 11KB [ 685.308445] Acpi-Parse 41KB 47KB [ 685.313861] Acpi-State 52KB 63KB [ 685.321564] Acpi-Namespace 21KB 27KB [ 685.326976] numa_policy 0KB 3KB [ 685.332411] debug_objects_cache 1198KB 1770KB [ 685.337950] trace_event_file 297KB 298KB [ 685.343758] ftrace_event_field 398KB 401KB [ 685.349209] pool_workqueue 121KB 124KB [ 685.354655] page->ptl 622KB 1047KB [ 685.360060] kmalloc-2097152 2050KB 2050KB [ 685.369885] kmalloc-524288 2056KB 2056KB [ 685.396707] kmalloc-262144 1290KB 1290KB [ 685.420356] kmalloc-131072 650KB 650KB [ 685.441006] kmalloc-65536 1848KB 1914KB [ 685.446403] kmalloc-32768 1650KB 1650KB [ 685.451955] kmalloc-16384 1006KB 1006KB [ 685.457339] kmalloc-8192 3960KB 4001KB [ 685.462831] kmalloc-4096 19975KB 20013KB [ 685.468197] kmalloc-2048 13192KB 13865KB [ 685.473664] kmalloc-1024 7777KB 8016KB [ 685.479067] kmalloc-512 11580KB 11580KB [ 685.484489] kmalloc-256 5331KB 5482KB [ 685.489856] kmalloc-128 962KB 1488KB [ 685.495327] kmalloc-96 3295KB 4020KB [ 685.502956] kmalloc-64 3002KB 4248KB [ 685.508334] kmalloc-32 1905KB 2445KB [ 685.513922] kmalloc-192 1485KB 2288KB [ 685.519293] kmem_cache 177KB 183KB [ 685.526491] Out of memory (oom_kill_allocating_task): Kill process 12280 (systemd-journal) score 0 or sacrifice child [ 685.537467] Killed process 12280 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:0kB, shmem-rss:1292kB [ 685.549265] oom_reaper: reaped process 12280 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1384kB [ 685.694356] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 685.708349] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 685.723415] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 685.742873] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 685.749846] systemd[1]: Stopped Journal Service. [ 685.777793] systemd[1]: Starting Journal Service... [ 685.959076] systemd-journald[12341]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 686.444999] systemd[1]: Started Journal Service. [ 686.663626] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.669336] ieee802154 phy1 wpan1: encryption failed: -22 13:07:03 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)=@multiplanar_mmap={0x1ff, 0x2, 0x4, 0x0, 0x2, {0x0, 0x2710}, {0x4, 0xc, 0xc7, 0x7f, 0x1, 0x9, "5799825b"}, 0x800, 0x1, {&(0x7f0000000080)=[{0x9, 0x6abd, {0x344}, 0x7886339c}, {0xa0b2, 0x4, {0x100000001}, 0x6cf81f18}]}, 0x6}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000000)=@fd={0x9, 0x1, 0x4, 0x100000, 0x4, {}, {0x5, 0x8, 0x88, 0x7, 0x1, 0xa8, "25eb4201"}, 0x4, 0x4, {}, 0x8}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)=@multiplanar_mmap={0x1ff, 0x2, 0x4, 0x0, 0x2, {0x0, 0x2710}, {0x4, 0xc, 0xc7, 0x7f, 0x1, 0x9, "5799825b"}, 0x800, 0x1, {&(0x7f0000000080)=[{0x9, 0x6abd, {0x344}, 0x7886339c}, {0xa0b2, 0x4, {0x100000001}, 0x6cf81f18}]}, 0x6}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000000)=@fd={0x9, 0x1, 0x4, 0x100000, 0x4, {}, {0x5, 0x8, 0x88, 0x7, 0x1, 0xa8, "25eb4201"}, 0x4, 0x4, {}, 0x8}) (async) 13:07:05 executing program 5: syz_open_dev$vim2m(0x0, 0xffffffffffffffff, 0x2) 13:07:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_SSID={0x15, 0x34, @random="93388aaa8e929b9ccdf5660a6a3b123fd4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xbb, 0x401, 0x34324948, 0x9, 0x3, 0x9, 0x7, 0x40000, 0x1, 0x0, 0x1, 0x7}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000380)=@userptr={0x40000000, 0x0, 0x4, 0x0, 0x3, {0x0, 0x2710}, {0x1, 0x2, 0x9, 0x9, 0x80, 0xea, "f8437f47"}, 0x3, 0x2, {&(0x7f0000000340)}, 0x9}) ioctl$vim2m_VIDIOC_G_FMT(r3, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x55595659, 0x0, 0x0, [{}, {}, {0xffffffff}, {}, {0x0, 0x400000}], 0x0, 0x10}}) 13:07:05 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000140)={0x3, 0x2}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x4, [{0x1}, {0x2, 0x4}, {}, {0x0, 0xffffffff}, {0x93}, {}, {0x1}, {0x2}]}}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xa5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x4008881) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r7, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_COOKIE={0xc}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000a80)=ANY=[@ANYBLOB="b0080000", @ANYRES16=r5, @ANYBLOB="0000000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x8b0}, 0x1, 0x0, 0x0, 0x4004}, 0x1) 13:07:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)=@overlay={0x9d, 0x3, 0x4, 0xe000, 0x5, {0x77359400}, {0x1, 0x2, 0x80, 0x1, 0x8, 0x3, "b2d2866c"}, 0x5, 0x3, {}, 0x8}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)=@overlay={0x9d, 0x3, 0x4, 0xe000, 0x5, {0x77359400}, {0x1, 0x2, 0x80, 0x1, 0x8, 0x3, "b2d2866c"}, 0x5, 0x3, {}, 0x8}) (async) 13:07:05 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @win={{0x3ff, 0x5, 0x7ff}, 0xdbf78d85fdd1cf50, 0x2, &(0x7f0000000080)={{0x7ff, 0x6, 0x5, 0xddc8}, &(0x7f0000000040)={{0x6, 0x9, 0x2, 0x8cc}, &(0x7f00000001c0)={{0x7c0e, 0xfffffffc, 0x0, 0x1}}}}, 0x3, &(0x7f00000000c0)="8da58809ab3722f9a3413886b36f5e570071e1e825c1fd957f1720bdbb4b5f63058fedbad5d1b0a7f779983593165db6e01fa29d752c865b7ae64a9668d1580aa341c723454be849be5556f72d5e0d9b1a3b7c245dbbb2f9f0b8dcc33ce0843a195a5bfcd5eb3489c1cbe9b4162ee408b425043faaf869984a8e58cbaa1fc1321aed95684232f9d2c8b301567739710fcc86a6f357672f5fec67bdb3110adaf575a3d8e3918553d80e14a29db2f1f5bc5175999ca08b111aa38e7305118e967f478c8dacd5f9771da7115b1c7f2e84b59dc0dfcd6a", 0x6}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x80000001, 0x4, 0x4000}) 13:07:05 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x1}, {}, {}, {0x0, 0xdb1}]}}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) (async) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x0, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20008004) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000001640)={0x1018, r7, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "523353fe609d754570858061be8cad87a84a10b27ca4d9649899994491f799b91ee93fbabc96e12d529a9c5bd158105525b7dc6bb189024c0a68d98d1047f7ba66d18df3004bb1e72736b9745a72926cc7dba5db39edb847b61b33002a75d968195a44c1d0ba435482e18e22b7bdb9e41b229cb1ed066707a9ad45c11cf7b43967383e4f578fb206d8b10aefaff1bc3564356153a448af5025860605eafb7c87056610e65d7ec24feaa6a8d77fe438a9ff1b6d22964a51582df82dcd5733a72eba1eb68e3f0155e3a032649cd9515331e3585ab6f6b261469fba8ebed7e4f7fb047d75d0caa3c54c59840134525e0af9889b37edf4fb1cc4525851a8855687aea394cfcb20d68e67724154d92aecb563adb05f83e458481654eca4c95bb99b8d320b050a7f85d316e8db4ca992cd9770c627a70d1b0cc13fbbace56b98fb32fdc14c639136bf1e9578778733d90b884a5f57c6720a47495798a7fc0095a7067bf718d9893acd4d59f34239aca8a686d096ee2d1dc7df2631217cdb7167be9de4dd6f44970f4cdef093ab03aaea0cbdf4dd33a45e4af44162fd8d5a9d905f13a524970075255ddee2d2f7d537545dfe7cb269ecefc67264c91d16d89366c53a3e1ecde9882b3e41cd2f3e15a1dd30142c1b0e5796334adf09280680aa36de6933d059053ebe8a10c9b04f7e1174be3ab49a41f1a4736c454dc8cc6faf5b09b814fa78265ccd3eb33191648177c927dba4902a3bab2ad31dcbf491d156785c7f5565a7b7852387c3a590282344537264f6d2c5c7176a79ba138efc68cdaf64442704cda9488a25533f0d605176e4b45e1e03e978b729dcd8076107a2d0c83f8cdb7db256270f7f8db9dd1809ba8d432fafc608cb552d1431e5f28c86caa4415fa5b9d6a9e9b4a80d78ccbdd7adca7713c39bb9daf5211198e9596c3813f1e2c624c56a27a4aafcdb6998b702b50f23cbda80c9723962dda495fd05f8ffac2dc617d6f72abdaa09c6e6abac38905020aa5560bb7ed78e9345ea7a74ff319992697c655a5eaf26e650b7bb33f6309bf213ce6932adaa876ddb3650b655680cf1463f1aab284e2235bb30f471a3ef9493b2b72f689abca71e96e12abf32d8aa715696c246b97aad7fb6befe582eaaa8cc8e62adc05eae3885ce63601fe6fa294b6e6874479592bb30c613989030ba2bb95ecdc23cba9d43a7eaa5975e09d6cc6b6201b2d2b5988db8444b48b6e1cdbc7ea2398bdd353a805895e1a681e2647329d162bbcb124adb012a19c13f3519983bb125cc61e3c4f575e8c925b12970a9fd75d50fff4b10b53fa61160e1a0111f7a2c257c8bdc31ecf353741095b7985d169fc3f25a53ad06b03798d836b2a0a533fe5c060414f19dd03be863871e9f4eee0587c4a4528e236d84d8957e1eea3d578647b009b9a9a368484d4515d0868fae98386569a7d308664fad2d25edaac60b6df8a8079aeec186ffd946cc040ab4ced1d18519f1c5fae8ecc51f3f611009bf9d71a41adcedc48c89dfc47e02648811005ebcb3ff1c38484f7eb3de305bb963ff08aa65eb08fe007d8edf07408bc4e4ce5845e89988dcf7d97b0a19d6d3fea810f22bed7edf6cab8438dd190d59293bd308e1436259c244fd2609c9c536d7d81fa32783e37cc49515b915290ce57edc62b6f376a96dea49b5f52a76280d24071b79be87b674ed8e46081903b16851ab55a9d8d2b3ecb07aad308c1a5044db8dc565cbbdaf81c2389529255f0156e105d8b832b0edc99aaa4907a53b34e81762b1a1419e9a749fbc56dd45ce9210cc047b4bb1d7ae63a57fd1e10447cbdfaa5b881802d8a20ab1adfc4db325259ad78d2344efd3c445f8876dab857f5d552a5f24328c03f07f5940d3663a1f70faa2733b02cc03c902d314444412bbaf9e569cdf69906a5d868a137f9f3408473d4cffa21ab4d2b40e3dba31710083f6d51f779bfec1dfa440a773d9033b3cf28044543ed339e4682b5f236982910bc4b526b89e81c83ff19bdf90a75e46f0c4ee82454193ebbc159eac8ba9ad4a46e4389fdcaa25f2ad14ed14d4ee4d54344df4798608cd4c731f442d31d98fbffad06de7f3e5e1870d0c3344465b53b26f7ec46dacef8130dd088b83ec5157695b789992932ba51a1575e33e82746fb9cfabdde58d37c0a08caf50b446cdb6bfe5dfb18bf92af7d78d099b57f9f3e276bce028f6491e7b725586a9bae845d48365c5cbcdd6e9294804c56115346fd132a41eab4330e6e8d7df9114eddd1968e5590aae5228baec0c85ac6d6b1c62895ae3413e4cefd445d3383d65edd9c1acc522b20e48baf74b214fc175943d93783e058daba4f1482117b2a59f289339f8429c4cfb40e2c6e3ed15d22cb8e8022e00936f4dc627165b34c75b2ae42e0f5a3d764c7d51814eebf9d7c5149f2a1a89b58ad2a81c6d35ef0d8b36f0e5ed50f8662a074b9d897934bbcb538befb169b6a9cc54faa9bafbc724e967ce77426d651d77a5559c8d501704145acd2198a567807540f676f5491e1bc3835f2cf4789ee5e1ddcfe50106f64856019cdefa4fe6ba704e305de0a202ca8a7aba16042a7ffcc701bbb5bbafe93822d748e250126a3384bca7d0a68e1cda36cd5f0c5f3c150c678d350ef5d12887715431d043bb5e36776ad7b3cd736bc3bbe852ec3cfd67d125c3ec9ad507d61d7542ee13e92775d2eabc8a9b6bffe61ee594b9fd02e819f79b5ab80ac823d5240832ffdffbfa7318b397ef6e7ce492e6b718a541fd2d15e9af31c6e9a691a7c5924ee53e63ce436384b3997cf49c02beade503ced09c1a0cac60f220b86cf6ceb2cbdd64bef08b3558ab4ca0db5cb21923f7b3af5833fac16e817ab2483cc4071685475f1ea0b356e166279ade213bd419b20758ca45efae65aee0d2201a3bcc30b197341b41cdd233d65756edce526a689a2fcdb78a0ee18ade362443c22a10d7bdbe007258dcef7a8b6f68a53cdfc641ad5b3433a77bc5ac1e4e3bfc4ba8324f1a0ce280cef5e5b74573c346b671b536c208789efa7a441629f5d0ddc54af8cc57404bdf1e7423b14db936b8507a2ca31ffcd658beaadb97b58960859547ebe347aaee6dd31bbd15479ee8f1b1fab5b61c1fddf864dfcd2261e9172868f118922483c1a48787f82bee7eb5beeb64df02f83bbfff0f93661693fc53733fbd517f227a406149db1f995704e368d984a87451f4709eb733288254eb2e67be4ac7eb50af9cb186348e31bb48a2c9a4708c634069766e79dd2aa25eb8a9e9ca1a13992d52327353fa7a810dca4e070f27c7022197858514a7f8da7f73e0cf228a1dbef48ae0376e34db358588f0200ae61477a535006ed7755494d027fdb8bc41f3210fcef3da9b27f006a29444841a676cb5ae46005b1fb4d6c3872a74c93cfec8b6d3a002c884b4eb934786d573df8fd472866d44755f1b3b256d0274e5a2899d04eb014ce8c3f22f973f862fefa16f7eb84353092a83df824a4b5593b91a386c09e7ec6398579b5737f915b68b942bad01e411c0bf0b58acbb178953bd9408da21f00b25e775e17e22a02e68535a5da3e539207c287a40777a5162cd073efe8cdb7331f06b11cfe6bf71c26813f9a401e09092adc9c770e4c0f8a5ee33706902da497ecc44b2dc62de3bdaac45eb88c8f89cfc22ce8d5fa7da732d83bafeded993df855575114900a3261f4f3d813bae1471a3e2143230a25db037d02ce411fd99bf0554a1222e57bbbb6b061ef4915ba628679939ca4a8d9fe775b45ec0e6971e4de3624128f1e7ad1add17431ba76663e5a1588dd6653fcac96cc9979def66923187df9d524e96c695d6a7b1c469cb4a5f2035f463899e4de67a827b97d3be98c526d4d81f6897c7be0e9b492bcf6f2e11608a5d139cb1802ccaf27cd58df8044130f1de332f0afa744d41a438c1acf91ec763e391507933ac01b3fd9b4541ea8f288d4f433756be1839547e02f3b4a9fb502a554adff248a888ebd0051237256452363451bf9bd33eae63da98506cfa16087edcd818f2f5da8f4eeb033c08eb72dc5d6caaadf9fedf57965c3ea7522b8850230ca839cb548f54870e874926ffc40d546948c0615ea55201749d70743d023574cd7e4dd0b6736554d039072a89f85adbec3445cb9b6a357dc48687e9b8b5d26876e921cc6621fbad39cd39655aedc6d9c6c1b29bc452ba8cd47eb1670cc732f6b712a7e366ee928e64f3b88ada1952fad11b548f41e12aff9de204896ddfc582f38df62b1ff132d8d848f48642cf14280f12ff2ff906013dd10caa007f7286a650fa6e5578fde932e42dd5c597fb6baf27d5c0e8b9badbf0556d19fe853e9952102fc682a114acf36eb66ffd9c965ee981f0a116ec5d5f137ffcb2131b372411428dfd7bb25c926bf8e272725d063bf0f3be573a922442e2a949a622420bef05d7ac21274a61ac5fd55acb82c65c78bb35dc8ff83d17f76880b38929b79171d71bd92c805a04948672dea04bbdbccf7a26a9e02b0c911fab3f580100c7851b29684cdb1f3fc8edef7ba3601bc93e0a4879bfe9c4f28670382e757c4ed6fdd0da0bf6640f4bfc23e771e67b4a27111bd319e56a629fd1f4b083f54e5fb242b38cc51ba9f376b69689bf837a22d6514107aae574a446fc0975f37faf586ce427a1ff7551c9f865d099dac1723d31075123f89f9035ea4ea59bf74df82024b8305f12b0730ece333c5788292cb2c4ab12727278c78d41b0b0f61f3e259d0efc21bcfd1da22242b64fdce90cf5b7544c2803447298f8f0009e36a3b98f6c9024691e8144388be694d8407def8a91b26a983e490f02e04084b62a61c90e747d1687ce0614ced7a1c603c86d93eaaf8e09c8a528db7400bf08676e1ec24a9a61c63aac533f9bd6069bdf0bae7c61ed72a4e287d31645dafe975f492e23f68ba3196217f1b38b3d54470d7ec0779b7b12e4523a23cb58c3b59dfd9784e25ab94d5c85e95166b620d50426c4ea8b20d7570c1d9fc00ae7445dac345b0f476d32d7a9b9b7f0ccb1dbc541a943432de50a4532bded63b110161bb3f2a4178c297f0463fe0935a083f6237cdd098eb0d7d23977b2027b6740b5f0f933da398db29a918a2e05ff69a4e67f7388893e13c4686d222430cefc4d9c2844f421e8940d7429daf279fdb3c710f5da338263787e2767fcd390f3422cf145c2852dae97ee10cf4bbda86e0f92a4f5ec7725e0d0c6aa0adc0009bea82bba3401d982c420a606e6b21b0b332656275c51735f519135a7a09cb62e6baa792efa497e8854559fa3f861a9ba33f53e903caaf635a4faa5bce81cd597f380acc9554cb08e314aa1530c83bb6e13504cb2c749246f76242d18751dd7ac923291c2b1f5b0661dec8be75c723585ec9b29270d4a9cb0fe6f633670e2f13377da90a362357ad8b8c07bbb07160dc8e3c8c15c123e9a638a93d75091203717eea00222c8182d60ffdd0f8915ec03771e245ab76c8682f25eb3af88ebd291d9eb730deae389e97c08ee6b314d94c423a620c64601f9ddcfe35ad13e7c7bfdeb198ee8b25e9a762acf5c98a3df985be6416750fb2582190e56da49b2bce2bd2f21369dd355a5e29764066ed5a72b98fd2761ca6d7184ddc38fb9d7fa520eb6607dcb1e4728fa881719e0fdc6cb0abb3872a33560c3d289fc78dfe6510e91a0f3ca36d57e14f2d558feb36f23d36feadbacc2584d8f58141d211cf9305dd529e44988500cba2eb84232c1bf8fdfafca2aeb2e08985e91005ee27ed9fd8c3ffa099c327628bf6c94cbd3f4fa"}]}, 0x1018}, 0x1, 0x0, 0x0, 0x400c040}, 0x24000001) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000000340), 0xc, &(0x7f0000003c40)={&(0x7f0000000200)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0xb}}}}, [@NL80211_ATTR_REKEY_DATA={0xffffffffffffff0b, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="00032b4b76b92dee5991cbff83aae43abd7000fddbdf255300000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x41) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r8) (async) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r5, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x63}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x1, 0x5]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xcf9}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 13:07:05 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000140)={0x3, 0x2}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000140)={0x3, 0x2}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x4, [{0x1}, {0x2, 0x4}, {}, {0x0, 0xffffffff}, {0x93}, {}, {0x1}, {0x2}]}}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xa5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x4008881) (async) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xa5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x4008881) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r4) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r7, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_COOKIE={0xc}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4) (async) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000a80)=ANY=[@ANYBLOB="b0080000", @ANYRES16=r5, @ANYBLOB="0000000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x8b0}, 0x1, 0x0, 0x0, 0x4004}, 0x1) 13:07:05 executing program 5: syz_open_dev$vim2m(0x0, 0xffffffffffffffff, 0x2) 13:07:05 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @win={{0x3ff, 0x5, 0x7ff}, 0xdbf78d85fdd1cf50, 0x2, &(0x7f0000000080)={{0x7ff, 0x6, 0x5, 0xddc8}, &(0x7f0000000040)={{0x6, 0x9, 0x2, 0x8cc}, &(0x7f00000001c0)={{0x7c0e, 0xfffffffc, 0x0, 0x1}}}}, 0x3, &(0x7f00000000c0)="8da58809ab3722f9a3413886b36f5e570071e1e825c1fd957f1720bdbb4b5f63058fedbad5d1b0a7f779983593165db6e01fa29d752c865b7ae64a9668d1580aa341c723454be849be5556f72d5e0d9b1a3b7c245dbbb2f9f0b8dcc33ce0843a195a5bfcd5eb3489c1cbe9b4162ee408b425043faaf869984a8e58cbaa1fc1321aed95684232f9d2c8b301567739710fcc86a6f357672f5fec67bdb3110adaf575a3d8e3918553d80e14a29db2f1f5bc5175999ca08b111aa38e7305118e967f478c8dacd5f9771da7115b1c7f2e84b59dc0dfcd6a", 0x6}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x80000001, 0x4, 0x4000}) 13:07:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) [ 689.347984] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 13:07:05 executing program 5: syz_open_dev$vim2m(&(0x7f00000002c0), 0x0, 0x2) 13:07:06 executing program 5: syz_open_dev$vim2m(&(0x7f00000002c0), 0x0, 0x2) 13:07:06 executing program 5: syz_open_dev$vim2m(&(0x7f00000002c0), 0x0, 0x2) 13:07:06 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @win={{0x3ff, 0x5, 0x7ff}, 0xdbf78d85fdd1cf50, 0x2, &(0x7f0000000080)={{0x7ff, 0x6, 0x5, 0xddc8}, &(0x7f0000000040)={{0x6, 0x9, 0x2, 0x8cc}, &(0x7f00000001c0)={{0x7c0e, 0xfffffffc, 0x0, 0x1}}}}, 0x3, &(0x7f00000000c0)="8da58809ab3722f9a3413886b36f5e570071e1e825c1fd957f1720bdbb4b5f63058fedbad5d1b0a7f779983593165db6e01fa29d752c865b7ae64a9668d1580aa341c723454be849be5556f72d5e0d9b1a3b7c245dbbb2f9f0b8dcc33ce0843a195a5bfcd5eb3489c1cbe9b4162ee408b425043faaf869984a8e58cbaa1fc1321aed95684232f9d2c8b301567739710fcc86a6f357672f5fec67bdb3110adaf575a3d8e3918553d80e14a29db2f1f5bc5175999ca08b111aa38e7305118e967f478c8dacd5f9771da7115b1c7f2e84b59dc0dfcd6a", 0x6}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x80000001, 0x4, 0x4000}) [ 694.426236] oom_reaper: reaped process 12371 (syz-executor.0), now anon-rss:0kB, file-rss:14336kB, shmem-rss:16kB [ 694.460405] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 694.477813] in:imklog cpuset=/ mems_allowed=0-1 [ 694.482563] CPU: 1 PID: 12188 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 694.490016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 694.499372] Call Trace: [ 694.501974] dump_stack+0x1fc/0x2ef [ 694.505590] dump_header+0x15d/0xc3f [ 694.509287] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 694.514372] ? ___ratelimit+0x319/0x590 [ 694.518450] oom_kill_process.cold+0x10/0x692 [ 694.520554] syz-executor.0: vmalloc: allocation failure, allocated 1751748608 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 694.522966] ? check_preemption_disabled+0x41/0x280 [ 694.538756] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 694.541941] ? has_intersects_mems_allowed+0x1d6/0x290 [ 694.541956] out_of_memory+0x1072/0x1390 [ 694.541975] ? oom_killer_disable+0x270/0x270 [ 694.541990] ? mutex_trylock+0x15f/0x1a0 [ 694.542007] __alloc_pages_nodemask+0x23a2/0x2890 [ 694.569728] ? find_get_entry+0x4cd/0x8a0 [ 694.573877] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 694.578730] alloc_pages_current+0x193/0x2a0 [ 694.583128] filemap_fault+0x146e/0x2180 [ 694.587287] ext4_filemap_fault+0x84/0xb0 [ 694.591426] __do_fault+0x10b/0x4b0 [ 694.595046] __handle_mm_fault+0x273b/0x41c0 [ 694.599447] ? vm_insert_page+0x9c0/0x9c0 [ 694.603586] ? lock_downgrade+0x720/0x720 [ 694.607731] ? check_preemption_disabled+0x41/0x280 [ 694.612741] handle_mm_fault+0x436/0xb10 [ 694.616800] __do_page_fault+0x68e/0xd60 [ 694.620861] ? trace_hardirqs_off_caller+0x6e/0x210 [ 694.625883] ? spurious_fault+0x840/0x840 [ 694.630022] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 694.634859] ? page_fault+0x8/0x30 [ 694.638391] page_fault+0x1e/0x30 [ 694.641837] RIP: 0033:0x7f5c0cfd222d [ 694.645541] Code: Bad RIP value. [ 694.648893] RSP: 002b:00007f5c0a96e580 EFLAGS: 00010293 [ 694.654243] RAX: 0000000000000078 RBX: 0000000000000000 RCX: 00007f5c0cfd222d [ 694.661503] RDX: 0000000000001fa0 RSI: 00007f5c0a96eda0 RDI: 0000000000000004 [ 694.668776] RBP: 0000563b58dbc9d0 R08: 0000000000000000 R09: 0000000004000001 [ 694.676040] R10: 0000000000000001 R11: 0000000000000293 R12: 00007f5c0a96eda0 [ 694.683324] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f5c0a96ee03 [ 694.690603] CPU: 0 PID: 12371 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 694.698503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 694.705233] Mem-Info: [ 694.707944] Call Trace: [ 694.710370] active_anon:20672 inactive_anon:10945 isolated_anon:0 [ 694.710370] active_file:12 inactive_file:12 isolated_file:0 [ 694.710370] unevictable:0 dirty:0 writeback:0 unstable:0 [ 694.710370] slab_reclaimable:15836 slab_unreclaimable:119785 [ 694.710370] mapped:22311 shmem:11554 pagetables:612 bounce:0 [ 694.710370] free:13857 free_pcp:221 free_cma:0 [ 694.712951] dump_stack+0x1fc/0x2ef [ 694.712970] warn_alloc.cold+0x7b/0x18f [ 694.713005] ? zone_watermark_ok_safe+0x260/0x260 [ 694.746556] Node 0 active_anon:80896kB inactive_anon:19328kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21636kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 36864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 694.750008] ? rcu_nmi_exit+0xb3/0x180 [ 694.754001] Node 1 active_anon:1792kB inactive_anon:24452kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1376kB dirty:0kB writeback:0kB shmem:24580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 694.758808] __vmalloc_area_node+0x4fd/0x780 [ 694.786391] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 694.790287] ? __vmalloc_node_range+0x180/0x180 [ 694.817162] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 694.821543] ? _raw_spin_unlock+0x29/0x40 [ 694.821556] ? __get_vm_area_node+0x2e2/0x3a0 [ 694.821577] __vmalloc_node_range+0xed/0x180 [ 694.847787] Node 0 DMA32 free:17844kB min:35996kB low:44992kB high:53988kB active_anon:80996kB inactive_anon:19328kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:2228kB bounce:0kB free_pcp:364kB local_pcp:116kB free_cma:0kB [ 694.852421] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 694.852438] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 694.852449] vmalloc_user+0x70/0xe0 [ 694.852465] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 694.857476] lowmem_reserve[]: 0 0 1 1 1 [ 694.861599] vb2_vmalloc_alloc+0xb3/0x2f0 [ 694.861613] __vb2_queue_alloc+0x472/0xe60 [ 694.861640] vb2_core_create_bufs+0x273/0x7e0 [ 694.866115] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 694.870520] ? __vb2_queue_free+0x870/0x870 [ 694.870533] ? __video_do_ioctl+0x632/0xcd0 [ 694.870553] ? __mutex_lock+0x368/0x1190 [ 694.899545] lowmem_reserve[]: 0 0 0 0 0 [ 694.903843] vb2_create_bufs+0x332/0x620 [ 694.903863] ? mark_held_locks+0xf0/0xf0 [ 694.909198] Node 1 Normal free:26692kB min:53876kB low:67344kB high:80812kB active_anon:1792kB inactive_anon:24452kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:220kB bounce:0kB free_pcp:520kB local_pcp:252kB free_cma:0kB [ 694.912813] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 694.912828] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 694.912846] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 694.917141] lowmem_reserve[]: 0 0 0 0 0 [ 694.921131] v4l_create_bufs+0xb2/0x160 [ 694.921151] __video_do_ioctl+0x49a/0xcd0 [ 694.925276] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 694.929508] ? v4l_querycap+0x340/0x340 [ 694.933998] Node 0 DMA32: 2031*4kB (UME) 757*8kB (UME) 153*16kB (UME) 38*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17844kB [ 694.959821] ? __might_fault+0x192/0x1d0 [ 694.959836] ? v4l_querycap+0x340/0x340 [ 694.959854] video_usercopy+0x13f/0xfa0 [ 694.964185] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 694.968490] ? v4l_enumstd+0x60/0x60 [ 694.972554] Node 1 Normal: 183*4kB (M) 153*8kB (ME) 120*16kB (M) 97*32kB (ME) 38*64kB (UM) 13*128kB (UM) 1*256kB (M) 0*512kB 1*1024kB (M) 1*2048kB (M) 3*4096kB (U) = 26692kB [ 694.976589] ? do_futex+0x171/0x1880 [ 694.980648] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 694.984772] ? mark_held_locks+0xf0/0xf0 [ 695.013397] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 695.018474] ? debug_check_no_obj_freed+0x201/0x490 [ 695.023583] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 695.028769] ? video_usercopy+0xfa0/0xfa0 [ 695.032742] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 695.036685] v4l2_ioctl+0x147/0x1a0 [ 695.040833] 11601 total pagecache pages [ 695.053286] ? video_devdata+0xa0/0xa0 [ 695.053302] do_vfs_ioctl+0xcdb/0x12e0 [ 695.053319] ? lock_downgrade+0x720/0x720 [ 695.057269] 0 pages in swap cache [ 695.071973] ? check_preemption_disabled+0x41/0x280 [ 695.071987] ? ioctl_preallocate+0x200/0x200 [ 695.072006] ? __fget+0x356/0x510 [ 695.076186] Swap cache stats: add 0, delete 0, find 0/0 [ 695.080277] ? do_dup2+0x450/0x450 [ 695.084387] Free swap = 0kB [ 695.095360] ? __se_sys_futex+0x298/0x3b0 [ 695.095384] ksys_ioctl+0x9b/0xc0 [ 695.099698] Total swap = 0kB [ 695.115655] __x64_sys_ioctl+0x6f/0xb0 [ 695.115670] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 695.115687] do_syscall_64+0xf9/0x620 [ 695.119518] 2097051 pages RAM [ 695.128357] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 695.128370] RIP: 0033:0x7f68c24140f9 [ 695.128386] Code: Bad RIP value. [ 695.132480] 0 pages HighMem/MovableOnly [ 695.141554] RSP: 002b:00007f68c0986168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 695.141568] RAX: ffffffffffffffda RBX: 00007f68c2533f80 RCX: 00007f68c24140f9 [ 695.141575] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000006 [ 695.141582] RBP: 00007f68c246fae9 R08: 0000000000000000 R09: 0000000000000000 [ 695.141589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 695.141595] R13: 00007fff6155d44f R14: 00007f68c0986300 R15: 0000000000022000 [ 695.151096] Mem-Info: [ 695.186042] 369649 pages reserved [ 695.188620] active_anon:20668 inactive_anon:10945 isolated_anon:0 [ 695.188620] active_file:12 inactive_file:12 isolated_file:0 [ 695.188620] unevictable:0 dirty:0 writeback:0 unstable:0 [ 695.188620] slab_reclaimable:15836 slab_unreclaimable:119785 [ 695.188620] mapped:22311 shmem:11554 pagetables:611 bounce:0 [ 695.188620] free:13857 free_pcp:221 free_cma:0 [ 695.198813] 0 pages cma reserved [ 695.206539] Node 0 active_anon:80884kB inactive_anon:19328kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21636kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 34816kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 695.220703] Unreclaimable slab info: [ 695.222030] Node 1 active_anon:1788kB inactive_anon:24452kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1376kB dirty:0kB writeback:0kB shmem:24580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 695.229815] Name Used Total [ 695.232198] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 695.232230] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 695.245496] pid_2 88KB 152KB [ 695.248952] Node 0 DMA32 free:17844kB min:35996kB low:44992kB high:53988kB active_anon:80884kB inactive_anon:19328kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:2224kB bounce:0kB free_pcp:364kB local_pcp:248kB free_cma:0kB [ 695.258715] batadv_tl_cache 4KB 12KB [ 695.260724] lowmem_reserve[]: 0 0 1 1 1 [ 695.273717] TIPC 10KB 15KB [ 695.275783] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 695.294271] SCTPv6 14KB 18KB [ 695.298991] lowmem_reserve[]: 0 0 0 0 0 [ 695.316098] DCCPv6 17KB 22KB [ 695.347624] Node 1 Normal free:26692kB min:53876kB low:67344kB high:80812kB active_anon:1788kB inactive_anon:24452kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:220kB bounce:0kB free_pcp:520kB local_pcp:268kB free_cma:0kB [ 695.386751] DCCP 16KB 21KB [ 695.410192] lowmem_reserve[]: 0 0 0 0 0 [ 695.425266] RXRPC 11KB 13KB [ 695.442140] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 695.455007] rxrpc_call_jar 78KB 94KB [ 695.485251] Node 0 DMA32: 2031*4kB (UME) 757*8kB (UME) 153*16kB (UME) 38*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17844kB [ 695.496101] bridge_fdb_cache 9KB 15KB [ 695.525860] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 695.536520] fib6_nodes 157KB 160KB [ 695.574464] Node 1 Normal: 183*4kB (M) 153*8kB (ME) 120*16kB (M) 97*32kB (ME) 38*64kB (UM) 13*128kB (UM) 1*256kB (M) 0*512kB 1*1024kB (M) 1*2048kB (M) 3*4096kB (U) = 26692kB [ 695.580971] ip6_dst_cache 72KB 326KB [ 695.601822] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 695.612766] RAWv6 70KB 74KB [ 695.619373] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 695.629123] UDPv6 33KB 37KB [ 695.642245] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 695.650182] TCPv6 24KB 42KB [ 695.663925] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 695.668517] nf_conntrack 6KB 18KB [ 695.677371] 11578 total pagecache pages [ 695.681843] t10_alua_lu_gp_cache 0KB 3KB [ 695.698094] 0 pages in swap cache [ 695.706849] sd_ext_cdb 0KB 7KB [ 695.708821] Swap cache stats: add 0, delete 0, find 0/0 [ 695.712814] scsi_sense_cache 1056KB 1060KB [ 695.712824] virtio_scsi_cmd 16KB 16KB [ 695.712837] sgpool-128 8KB 8KB [ 695.712846] sgpool-64 4KB 12KB [ 695.712855] sgpool-32 2KB 15KB [ 695.712865] sgpool-16 1KB 7KB [ 695.712874] sgpool-8 0KB 7KB [ 695.712891] mqueue_inode_cache 10KB 22KB [ 695.712906] bio_post_read_ctx 14KB 15KB [ 695.729061] Free swap = 0kB [ 695.736262] bio-2 14KB 15KB [ 695.738284] Total swap = 0kB [ 695.743704] jfs_mp 7KB 7KB [ 695.743745] cifs_small_rq 15KB 16KB [ 695.743755] cifs_request 67KB 67KB [ 695.743763] cifs_mpx_ids 0KB 7KB [ 695.743792] nfs_commit_data 3KB 14KB [ 695.758298] 2097051 pages RAM [ 695.761992] nfs_write_data 34KB 44KB [ 695.767968] 0 pages HighMem/MovableOnly [ 695.771942] ext4_system_zone 1KB 7KB [ 695.786044] 369649 pages reserved [ 695.789934] bio-1 1KB 7KB [ 695.795755] 0 pages cma reserved [ 695.800383] pid_namespace 2KB 7KB [ 695.857001] rpc_buffers 17KB 25KB [ 695.862702] rpc_tasks 2KB 7KB [ 695.868076] UNIX 196KB 217KB [ 695.877105] tcp_bind_bucket 1KB 4KB [ 695.882542] ip_fib_trie 23KB 27KB [ 695.887911] ip_fib_alias 112KB 118KB [ 695.896883] ip_dst_cache 10KB 48KB [ 695.902312] RAW 42KB 52KB [ 695.907681] UDP 38KB 47KB [ 695.916682] TCP 11KB 16KB [ 695.922097] hugetlbfs_inode_cache 3KB 15KB [ 695.927809] fscache_cookie_jar 1KB 11KB [ 695.937022] eventpoll_pwq 25KB 47KB [ 695.942447] eventpoll_epi 46KB 66KB [ 695.947816] inotify_inode_mark 21KB 55KB [ 695.956882] request_queue 199KB 199KB [ 695.962303] blkdev_requests 1KB 3KB [ 695.967704] blkdev_ioc 23KB 27KB [ 695.978787] bio-0 1059KB 1098KB [ 695.987358] biovec-max 1518KB 1559KB [ 696.004235] biovec-64 977KB 1008KB [ 696.009628] biovec-16 79KB 86KB [ 696.020187] bio_integrity_payload 1KB 8KB [ 696.037847] khugepaged_mm_slot 12KB 34KB [ 696.044973] uid_cache 0KB 4KB [ 696.060310] dmaengine-unmap-2 0KB 3KB [ 696.067342] skbuff_fclone_cache 185KB 300KB [ 696.084839] skbuff_head_cache 5827KB 5846KB [ 696.090229] configfs_dir_cache 3KB 11KB [ 696.107257] file_lock_cache 100KB 198KB [ 696.112933] file_lock_ctx 9KB 11KB [ 696.118304] fsnotify_mark_connector 14KB 31KB [ 696.135661] net_namespace 52KB 52KB [ 696.144440] shmem_inode_cache 8223KB 8473KB [ 696.149822] task_delay_info 210KB 407KB [ 696.167420] taskstats 95KB 206KB [ 696.175783] proc_dir_entry 694KB 697KB [ 696.190126] pde_opener 7KB 58KB [ 696.211209] seq_file 279KB 539KB [ 696.216607] sigqueue 38KB 55KB [ 696.234199] kernfs_node_cache 18230KB 18250KB [ 696.239600] mnt_cache 173KB 188KB [ 696.248467] filp 6685KB 7638KB [ 696.263863] names_cache 144912KB 144971KB [ 696.269264] iint_cache 30KB 71KB [ 696.274675] key_jar 4KB 11KB [ 696.280044] uts_namespace 2KB 7KB [ 696.289103] nsproxy 1KB 7KB [ 696.294520] vm_area_struct 3541KB 5166KB [ 696.299979] mm_struct 524KB 1020KB [ 696.308749] fs_cache 100KB 372KB [ 696.314164] files_cache 376KB 787KB [ 696.319538] signal_cache 856KB 1760KB [ 696.328344] sighand_cache 548KB 589KB [ 696.333806] task_struct 6899KB 6956KB [ 696.339177] cred_jar 1477KB 2096KB [ 696.348043] anon_vma_chain 1142KB 1803KB [ 696.353456] anon_vma 135KB 269KB [ 696.358825] pid 49KB 264KB [ 696.367761] Acpi-Operand 156KB 202KB [ 696.373185] Acpi-ParseExt 8KB 11KB [ 696.378640] Acpi-Parse 41KB 47KB [ 696.387493] Acpi-State 52KB 63KB [ 696.392929] Acpi-Namespace 21KB 27KB [ 696.398298] numa_policy 0KB 3KB [ 696.407016] debug_objects_cache 1184KB 1692KB [ 696.417391] trace_event_file 297KB 298KB [ 696.429381] ftrace_event_field 398KB 401KB [ 696.448044] pool_workqueue 121KB 124KB [ 696.456964] page->ptl 616KB 1047KB [ 696.474877] kmalloc-2097152 2050KB 2050KB [ 696.487577] kmalloc-524288 2056KB 2056KB [ 696.493549] kmalloc-262144 1290KB 1290KB [ 696.499669] kmalloc-131072 650KB 650KB [ 696.511365] kmalloc-65536 1848KB 1914KB [ 696.517512] kmalloc-32768 1650KB 1650KB [ 696.527362] kmalloc-16384 1039KB 1039KB [ 696.533730] kmalloc-8192 3960KB 4001KB [ 696.539176] kmalloc-4096 19953KB 19962KB [ 696.551580] kmalloc-2048 13007KB 13833KB [ 696.556972] kmalloc-1024 7396KB 8016KB [ 696.565806] kmalloc-512 11760KB 11760KB [ 696.573841] kmalloc-256 5124KB 5478KB [ 696.579799] kmalloc-128 960KB 1488KB [ 696.593937] kmalloc-96 3295KB 4020KB [ 696.599488] kmalloc-64 2923KB 4248KB [ 696.606618] kmalloc-32 1897KB 2445KB [ 696.616002] kmalloc-192 1481KB 2288KB [ 696.623350] kmem_cache 177KB 183KB [ 696.628730] Out of memory (oom_kill_allocating_task): Kill process 12188 (in:imklog) score 0 or sacrifice child [ 696.646272] Killed process 12186 (rsyslogd) total-vm:254332kB, anon-rss:724kB, file-rss:0kB, shmem-rss:0kB [ 696.659816] oom_reaper: reaped process 12186 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 13:07:16 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000140)={0x3, 0x2}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x4, [{0x1}, {0x2, 0x4}, {}, {0x0, 0xffffffff}, {0x93}, {}, {0x1}, {0x2}]}}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xa5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x4008881) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r4) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r7, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_COOKIE={0xc}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000a80)=ANY=[@ANYBLOB="b0080000", @ANYRES16=r5, @ANYBLOB="0000000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x8b0}, 0x1, 0x0, 0x0, 0x4004}, 0x1) 13:07:16 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @win={{0x3ff, 0x5, 0x7ff}, 0xdbf78d85fdd1cf50, 0x2, &(0x7f0000000080)={{0x7ff, 0x6, 0x5, 0xddc8}, &(0x7f0000000040)={{0x6, 0x9, 0x2, 0x8cc}, &(0x7f00000001c0)={{0x7c0e, 0xfffffffc, 0x0, 0x1}}}}, 0x3, &(0x7f00000000c0)="8da58809ab3722f9a3413886b36f5e570071e1e825c1fd957f1720bdbb4b5f63058fedbad5d1b0a7f779983593165db6e01fa29d752c865b7ae64a9668d1580aa341c723454be849be5556f72d5e0d9b1a3b7c245dbbb2f9f0b8dcc33ce0843a195a5bfcd5eb3489c1cbe9b4162ee408b425043faaf869984a8e58cbaa1fc1321aed95684232f9d2c8b301567739710fcc86a6f357672f5fec67bdb3110adaf575a3d8e3918553d80e14a29db2f1f5bc5175999ca08b111aa38e7305118e967f478c8dacd5f9771da7115b1c7f2e84b59dc0dfcd6a", 0x6}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x80000001, 0x4, 0x4000}) 13:07:16 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @win={{0x3ff, 0x5, 0x7ff}, 0xdbf78d85fdd1cf50, 0x2, &(0x7f0000000080)={{0x7ff, 0x6, 0x5, 0xddc8}, &(0x7f0000000040)={{0x6, 0x9, 0x2, 0x8cc}, &(0x7f00000001c0)={{0x7c0e, 0xfffffffc, 0x0, 0x1}}}}, 0x3, &(0x7f00000000c0)="8da58809ab3722f9a3413886b36f5e570071e1e825c1fd957f1720bdbb4b5f63058fedbad5d1b0a7f779983593165db6e01fa29d752c865b7ae64a9668d1580aa341c723454be849be5556f72d5e0d9b1a3b7c245dbbb2f9f0b8dcc33ce0843a195a5bfcd5eb3489c1cbe9b4162ee408b425043faaf869984a8e58cbaa1fc1321aed95684232f9d2c8b301567739710fcc86a6f357672f5fec67bdb3110adaf575a3d8e3918553d80e14a29db2f1f5bc5175999ca08b111aa38e7305118e967f478c8dacd5f9771da7115b1c7f2e84b59dc0dfcd6a", 0x6}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x80000001, 0x4, 0x4000}) 13:07:16 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:07:16 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x1}, {}, {}, {0x0, 0xdb1}]}}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) (async, rerun: 64) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x0, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20008004) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000001640)={0x1018, r7, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}]}, 0x1018}, 0x1, 0x0, 0x0, 0x400c040}, 0x24000001) (async, rerun: 64) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000000340), 0xc, &(0x7f0000003c40)={&(0x7f0000000200)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0xb}}}}, [@NL80211_ATTR_REKEY_DATA={0xffffffffffffff0b, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="00032b4b76b92dee5991cbff83aae43abd7000fddbdf255300000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x41) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r8) (async) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r5, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x63}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x1, 0x5]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xcf9}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 13:07:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_SSID={0x15, 0x34, @random="93388aaa8e929b9ccdf5660a6a3b123fd4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xbb, 0x401, 0x34324948, 0x9, 0x3, 0x9, 0x7, 0x40000, 0x1, 0x0, 0x1, 0x7}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000380)=@userptr={0x40000000, 0x0, 0x4, 0x0, 0x3, {0x0, 0x2710}, {0x1, 0x2, 0x9, 0x9, 0x80, 0xea, "f8437f47"}, 0x3, 0x2, {&(0x7f0000000340)}, 0x9}) 13:07:16 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socketpair(0x28, 0x209b0ca5c191ef56, 0xfffff778, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1c8, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x94, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x12, 0x16, 0x9, 0x6, 0x16, 0x16, 0x12, 0x5, 0x18, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x2, 0x0, 0x1, 0x1, 0x8001, 0x7f]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6, 0xb, 0x30, 0x6, 0x0, 0x16, 0x1b, 0xc, 0x3, 0x6c, 0x1b, 0x12, 0x5, 0x18, 0x3, 0x30, 0x6d, 0x2, 0x24, 0x0, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x22, 0x101, 0x7, 0x40, 0x8, 0x8, 0xa3, 0x8000]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x2, 0x1b, 0x24, 0x1b, 0x1, 0x5, 0xc, 0x24, 0x6e, 0x1b, 0x18, 0x6, 0x6c, 0x1b, 0x6, 0x18, 0x24, 0x6c, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}]}, @NL80211_ATTR_TX_RATES={0x120, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf723, 0x8, 0x15e, 0x3, 0x6, 0xfff, 0xf2f5, 0x1]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x6, 0xa}, {0x4, 0x7}, {0x0, 0x9}, {0x7, 0x9}, {0x5, 0x8}, {0x4, 0x8}, {0x6, 0x6}, {0x3, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x2, 0x6}, {0x6, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x7, 0xa}, {0x1, 0x8}, {0x2, 0x7}, {0x5, 0x5}, {0x0, 0x3}, {0x6, 0x9}, {0x1, 0x9}, {0x0, 0x5}, {0x3}, {0x1, 0xa}, {0x0, 0x2}, {0x2, 0x9}, {0x0, 0x8}, {0x1, 0x8}, {0x3, 0x8}, {0x2, 0x6}, {0x1, 0x1}, {0x1, 0x3}, {0x2, 0x9}, {0x0, 0x4}, {0x7, 0x3}, {0x0, 0x9}, {0x0, 0x2}, {0x1, 0x4}, {0x6, 0x6}, {0x1, 0x5}, {0x0, 0x6}, {0x0, 0x7}, {0x1, 0x5}, {0x6, 0x8}, {0x6, 0x7}, {0x2, 0x4}, {0x3, 0x1}, {0x5, 0x4}, {0x0, 0x2}, {0x5, 0x8}, {0x6, 0x2}, {0x5, 0x9}, {0x2, 0x8}, {0x7, 0x3}, {0x0, 0x3}, {0x7, 0x1}, {0x7, 0x8}, {0x2, 0x6}, {0x0, 0x9}, {0x3, 0xa}, {0x4}, {0x1, 0x3}, {0x3, 0x1}, {0x7}, {0x1, 0x3}, {0x5, 0x6}, {0x0, 0x2}, {0x2}, {0x6, 0x4}, {0x4, 0x2}, {0x0, 0x3}, {0x1, 0x7}, {0x3}, {0x3, 0x3}, {0x5, 0x7}, {0x1, 0x9}, {0x2, 0x5}, {0x2, 0x4}, {0x7, 0x1}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6, 0xff3e, 0x2, 0x401, 0x1, 0x0, 0x868]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x24, 0x6c, 0x48, 0x4, 0x36, 0x12, 0x18, 0x36, 0x4, 0xc, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x6, 0x81, 0x5, 0x1000, 0x56a7, 0x3, 0x2b]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x5, 0x8}, {0x6, 0x9}, {0x0, 0x5}, {0x4, 0x8}, {0x3, 0xa}, {0x3, 0x5}, {0x6, 0x4}, {0x7, 0x3}, {}, {0x6, 0x3}, {0x6, 0x5}, {0x5, 0x6}, {0x2, 0x4}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x8000, 0x984f, 0x9, 0x3, 0x2, 0x9, 0x2]}}]}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4001}, 0x4) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:07:16 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) 13:07:16 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @win={{0x3ff, 0x5, 0x7ff}, 0xdbf78d85fdd1cf50, 0x2, &(0x7f0000000080)={{0x7ff, 0x6, 0x5, 0xddc8}, &(0x7f0000000040)={{0x6, 0x9, 0x2, 0x8cc}, &(0x7f00000001c0)={{0x7c0e, 0xfffffffc, 0x0, 0x1}}}}, 0x3, &(0x7f00000000c0)="8da58809ab3722f9a3413886b36f5e570071e1e825c1fd957f1720bdbb4b5f63058fedbad5d1b0a7f779983593165db6e01fa29d752c865b7ae64a9668d1580aa341c723454be849be5556f72d5e0d9b1a3b7c245dbbb2f9f0b8dcc33ce0843a195a5bfcd5eb3489c1cbe9b4162ee408b425043faaf869984a8e58cbaa1fc1321aed95684232f9d2c8b301567739710fcc86a6f357672f5fec67bdb3110adaf575a3d8e3918553d80e14a29db2f1f5bc5175999ca08b111aa38e7305118e967f478c8dacd5f9771da7115b1c7f2e84b59dc0dfcd6a", 0x6}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x80000001, 0x4, 0x4000}) [ 700.336198] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 700.365070] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 700.384104] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 700.400049] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 700.414995] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 700.450416] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 700.459551] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 700.469955] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 700.484156] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 700.494313] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 13:07:17 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x401, 0x8aae, 0x30385056, 0x6, 0x1, 0x3, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:07:17 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socketpair(0x28, 0x209b0ca5c191ef56, 0xfffff778, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1c8, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x94, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x12, 0x16, 0x9, 0x6, 0x16, 0x16, 0x12, 0x5, 0x18, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x2, 0x0, 0x1, 0x1, 0x8001, 0x7f]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6, 0xb, 0x30, 0x6, 0x0, 0x16, 0x1b, 0xc, 0x3, 0x6c, 0x1b, 0x12, 0x5, 0x18, 0x3, 0x30, 0x6d, 0x2, 0x24, 0x0, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x22, 0x101, 0x7, 0x40, 0x8, 0x8, 0xa3, 0x8000]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x2, 0x1b, 0x24, 0x1b, 0x1, 0x5, 0xc, 0x24, 0x6e, 0x1b, 0x18, 0x6, 0x6c, 0x1b, 0x6, 0x18, 0x24, 0x6c, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}]}, @NL80211_ATTR_TX_RATES={0x120, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf723, 0x8, 0x15e, 0x3, 0x6, 0xfff, 0xf2f5, 0x1]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x6, 0xa}, {0x4, 0x7}, {0x0, 0x9}, {0x7, 0x9}, {0x5, 0x8}, {0x4, 0x8}, {0x6, 0x6}, {0x3, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x2, 0x6}, {0x6, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x7, 0xa}, {0x1, 0x8}, {0x2, 0x7}, {0x5, 0x5}, {0x0, 0x3}, {0x6, 0x9}, {0x1, 0x9}, {0x0, 0x5}, {0x3}, {0x1, 0xa}, {0x0, 0x2}, {0x2, 0x9}, {0x0, 0x8}, {0x1, 0x8}, {0x3, 0x8}, {0x2, 0x6}, {0x1, 0x1}, {0x1, 0x3}, {0x2, 0x9}, {0x0, 0x4}, {0x7, 0x3}, {0x0, 0x9}, {0x0, 0x2}, {0x1, 0x4}, {0x6, 0x6}, {0x1, 0x5}, {0x0, 0x6}, {0x0, 0x7}, {0x1, 0x5}, {0x6, 0x8}, {0x6, 0x7}, {0x2, 0x4}, {0x3, 0x1}, {0x5, 0x4}, {0x0, 0x2}, {0x5, 0x8}, {0x6, 0x2}, {0x5, 0x9}, {0x2, 0x8}, {0x7, 0x3}, {0x0, 0x3}, {0x7, 0x1}, {0x7, 0x8}, {0x2, 0x6}, {0x0, 0x9}, {0x3, 0xa}, {0x4}, {0x1, 0x3}, {0x3, 0x1}, {0x7}, {0x1, 0x3}, {0x5, 0x6}, {0x0, 0x2}, {0x2}, {0x6, 0x4}, {0x4, 0x2}, {0x0, 0x3}, {0x1, 0x7}, {0x3}, {0x3, 0x3}, {0x5, 0x7}, {0x1, 0x9}, {0x2, 0x5}, {0x2, 0x4}, {0x7, 0x1}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6, 0xff3e, 0x2, 0x401, 0x1, 0x0, 0x868]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x24, 0x6c, 0x48, 0x4, 0x36, 0x12, 0x18, 0x36, 0x4, 0xc, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x6, 0x81, 0x5, 0x1000, 0x56a7, 0x3, 0x2b]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x5, 0x8}, {0x6, 0x9}, {0x0, 0x5}, {0x4, 0x8}, {0x3, 0xa}, {0x3, 0x5}, {0x6, 0x4}, {0x7, 0x3}, {}, {0x6, 0x3}, {0x6, 0x5}, {0x5, 0x6}, {0x2, 0x4}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x8000, 0x984f, 0x9, 0x3, 0x2, 0x9, 0x2]}}]}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4001}, 0x4) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) socketpair(0x28, 0x209b0ca5c191ef56, 0xfffff778, &(0x7f0000000000)) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1c8, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x94, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x12, 0x16, 0x9, 0x6, 0x16, 0x16, 0x12, 0x5, 0x18, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x2, 0x0, 0x1, 0x1, 0x8001, 0x7f]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6, 0xb, 0x30, 0x6, 0x0, 0x16, 0x1b, 0xc, 0x3, 0x6c, 0x1b, 0x12, 0x5, 0x18, 0x3, 0x30, 0x6d, 0x2, 0x24, 0x0, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x22, 0x101, 0x7, 0x40, 0x8, 0x8, 0xa3, 0x8000]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x2, 0x1b, 0x24, 0x1b, 0x1, 0x5, 0xc, 0x24, 0x6e, 0x1b, 0x18, 0x6, 0x6c, 0x1b, 0x6, 0x18, 0x24, 0x6c, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}]}, @NL80211_ATTR_TX_RATES={0x120, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf723, 0x8, 0x15e, 0x3, 0x6, 0xfff, 0xf2f5, 0x1]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x6, 0xa}, {0x4, 0x7}, {0x0, 0x9}, {0x7, 0x9}, {0x5, 0x8}, {0x4, 0x8}, {0x6, 0x6}, {0x3, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x2, 0x6}, {0x6, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x7, 0xa}, {0x1, 0x8}, {0x2, 0x7}, {0x5, 0x5}, {0x0, 0x3}, {0x6, 0x9}, {0x1, 0x9}, {0x0, 0x5}, {0x3}, {0x1, 0xa}, {0x0, 0x2}, {0x2, 0x9}, {0x0, 0x8}, {0x1, 0x8}, {0x3, 0x8}, {0x2, 0x6}, {0x1, 0x1}, {0x1, 0x3}, {0x2, 0x9}, {0x0, 0x4}, {0x7, 0x3}, {0x0, 0x9}, {0x0, 0x2}, {0x1, 0x4}, {0x6, 0x6}, {0x1, 0x5}, {0x0, 0x6}, {0x0, 0x7}, {0x1, 0x5}, {0x6, 0x8}, {0x6, 0x7}, {0x2, 0x4}, {0x3, 0x1}, {0x5, 0x4}, {0x0, 0x2}, {0x5, 0x8}, {0x6, 0x2}, {0x5, 0x9}, {0x2, 0x8}, {0x7, 0x3}, {0x0, 0x3}, {0x7, 0x1}, {0x7, 0x8}, {0x2, 0x6}, {0x0, 0x9}, {0x3, 0xa}, {0x4}, {0x1, 0x3}, {0x3, 0x1}, {0x7}, {0x1, 0x3}, {0x5, 0x6}, {0x0, 0x2}, {0x2}, {0x6, 0x4}, {0x4, 0x2}, {0x0, 0x3}, {0x1, 0x7}, {0x3}, {0x3, 0x3}, {0x5, 0x7}, {0x1, 0x9}, {0x2, 0x5}, {0x2, 0x4}, {0x7, 0x1}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6, 0xff3e, 0x2, 0x401, 0x1, 0x0, 0x868]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x24, 0x6c, 0x48, 0x4, 0x36, 0x12, 0x18, 0x36, 0x4, 0xc, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x6, 0x81, 0x5, 0x1000, 0x56a7, 0x3, 0x2b]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x5, 0x8}, {0x6, 0x9}, {0x0, 0x5}, {0x4, 0x8}, {0x3, 0xa}, {0x3, 0x5}, {0x6, 0x4}, {0x7, 0x3}, {}, {0x6, 0x3}, {0x6, 0x5}, {0x5, 0x6}, {0x2, 0x4}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x8000, 0x984f, 0x9, 0x3, 0x2, 0x9, 0x2]}}]}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4001}, 0x4) (async) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)) (async) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x4) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) (async) 13:07:17 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x80000001, 0x4, 0x4000}) 13:07:17 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) socketpair(0x28, 0x209b0ca5c191ef56, 0xfffff778, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1c8, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x94, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x12, 0x16, 0x9, 0x6, 0x16, 0x16, 0x12, 0x5, 0x18, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x2, 0x0, 0x1, 0x1, 0x8001, 0x7f]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6, 0xb, 0x30, 0x6, 0x0, 0x16, 0x1b, 0xc, 0x3, 0x6c, 0x1b, 0x12, 0x5, 0x18, 0x3, 0x30, 0x6d, 0x2, 0x24, 0x0, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x22, 0x101, 0x7, 0x40, 0x8, 0x8, 0xa3, 0x8000]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x2, 0x1b, 0x24, 0x1b, 0x1, 0x5, 0xc, 0x24, 0x6e, 0x1b, 0x18, 0x6, 0x6c, 0x1b, 0x6, 0x18, 0x24, 0x6c, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}]}, @NL80211_ATTR_TX_RATES={0x120, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf723, 0x8, 0x15e, 0x3, 0x6, 0xfff, 0xf2f5, 0x1]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x6, 0xa}, {0x4, 0x7}, {0x0, 0x9}, {0x7, 0x9}, {0x5, 0x8}, {0x4, 0x8}, {0x6, 0x6}, {0x3, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x2, 0x6}, {0x6, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x7, 0xa}, {0x1, 0x8}, {0x2, 0x7}, {0x5, 0x5}, {0x0, 0x3}, {0x6, 0x9}, {0x1, 0x9}, {0x0, 0x5}, {0x3}, {0x1, 0xa}, {0x0, 0x2}, {0x2, 0x9}, {0x0, 0x8}, {0x1, 0x8}, {0x3, 0x8}, {0x2, 0x6}, {0x1, 0x1}, {0x1, 0x3}, {0x2, 0x9}, {0x0, 0x4}, {0x7, 0x3}, {0x0, 0x9}, {0x0, 0x2}, {0x1, 0x4}, {0x6, 0x6}, {0x1, 0x5}, {0x0, 0x6}, {0x0, 0x7}, {0x1, 0x5}, {0x6, 0x8}, {0x6, 0x7}, {0x2, 0x4}, {0x3, 0x1}, {0x5, 0x4}, {0x0, 0x2}, {0x5, 0x8}, {0x6, 0x2}, {0x5, 0x9}, {0x2, 0x8}, {0x7, 0x3}, {0x0, 0x3}, {0x7, 0x1}, {0x7, 0x8}, {0x2, 0x6}, {0x0, 0x9}, {0x3, 0xa}, {0x4}, {0x1, 0x3}, {0x3, 0x1}, {0x7}, {0x1, 0x3}, {0x5, 0x6}, {0x0, 0x2}, {0x2}, {0x6, 0x4}, {0x4, 0x2}, {0x0, 0x3}, {0x1, 0x7}, {0x3}, {0x3, 0x3}, {0x5, 0x7}, {0x1, 0x9}, {0x2, 0x5}, {0x2, 0x4}, {0x7, 0x1}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6, 0xff3e, 0x2, 0x401, 0x1, 0x0, 0x868]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x24, 0x6c, 0x48, 0x4, 0x36, 0x12, 0x18, 0x36, 0x4, 0xc, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x6, 0x81, 0x5, 0x1000, 0x56a7, 0x3, 0x2b]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x5, 0x8}, {0x6, 0x9}, {0x0, 0x5}, {0x4, 0x8}, {0x3, 0xa}, {0x3, 0x5}, {0x6, 0x4}, {0x7, 0x3}, {}, {0x6, 0x3}, {0x6, 0x5}, {0x5, 0x6}, {0x2, 0x4}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x8000, 0x984f, 0x9, 0x3, 0x2, 0x9, 0x2]}}]}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4001}, 0x4) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) [ 705.416594] oom_reaper: reaped process 12427 (syz-executor.0), now anon-rss:0kB, file-rss:14332kB, shmem-rss:16kB [ 705.461739] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 705.477713] in:imklog cpuset=/ mems_allowed=0-1 [ 705.482451] CPU: 1 PID: 12414 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 705.489900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 705.499287] Call Trace: [ 705.501885] dump_stack+0x1fc/0x2ef [ 705.505548] dump_header+0x15d/0xc3f [ 705.509271] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 705.514380] ? ___ratelimit+0x319/0x590 [ 705.518681] oom_kill_process.cold+0x10/0x692 [ 705.523189] ? check_preemption_disabled+0x41/0x280 [ 705.528220] ? has_intersects_mems_allowed+0x1d6/0x290 [ 705.533595] out_of_memory+0x1072/0x1390 [ 705.538110] ? oom_killer_disable+0x270/0x270 [ 705.542619] ? mutex_trylock+0x15f/0x1a0 [ 705.546721] __alloc_pages_nodemask+0x23a2/0x2890 [ 705.551601] ? find_get_entry+0x4cd/0x8a0 [ 705.556478] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 705.561421] alloc_pages_current+0x193/0x2a0 [ 705.565844] filemap_fault+0x146e/0x2180 [ 705.569923] ext4_filemap_fault+0x84/0xb0 [ 705.573327] syz-executor.0: vmalloc: allocation failure, allocated 1747664896 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 705.574088] __do_fault+0x10b/0x4b0 [ 705.588129] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 705.591660] __handle_mm_fault+0x273b/0x41c0 [ 705.591678] ? vm_insert_page+0x9c0/0x9c0 [ 705.591693] ? lock_downgrade+0x720/0x720 [ 705.591718] ? check_preemption_disabled+0x41/0x280 [ 705.591736] handle_mm_fault+0x436/0xb10 [ 705.618539] __do_page_fault+0x68e/0xd60 [ 705.622598] ? trace_hardirqs_off_caller+0x6e/0x210 [ 705.627619] ? spurious_fault+0x840/0x840 [ 705.631770] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 705.636612] ? page_fault+0x8/0x30 [ 705.640146] page_fault+0x1e/0x30 [ 705.643600] RIP: 0033:0x7f3a1cd4822d [ 705.647305] Code: Bad RIP value. [ 705.650662] RSP: 002b:00007f3a1a6e4580 EFLAGS: 00010293 [ 705.656015] RAX: 0000000000000078 RBX: 0000000000000000 RCX: 00007f3a1cd4822d [ 705.663270] RDX: 0000000000001fa0 RSI: 00007f3a1a6e4da0 RDI: 0000000000000004 [ 705.670533] RBP: 000055b75d4a49d0 R08: 0000000000000000 R09: 0000000004000001 [ 705.677795] R10: 0000000000000001 R11: 0000000000000293 R12: 00007f3a1a6e4da0 [ 705.685054] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f3a1a6e4e03 [ 705.692765] Mem-Info: [ 705.695187] active_anon:20664 inactive_anon:10945 isolated_anon:0 [ 705.695187] active_file:21 inactive_file:28 isolated_file:0 [ 705.695187] unevictable:0 dirty:5 writeback:0 unstable:0 [ 705.695187] slab_reclaimable:15807 slab_unreclaimable:119913 [ 705.695187] mapped:22355 shmem:11554 pagetables:611 bounce:0 [ 705.695187] free:13928 free_pcp:925 free_cma:0 [ 705.713734] CPU: 0 PID: 12427 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 705.729343] Node 0 active_anon:80904kB inactive_anon:19328kB active_file:100kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87884kB dirty:4kB writeback:0kB shmem:21636kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 36864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 705.736315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 705.736321] Call Trace: [ 705.736342] dump_stack+0x1fc/0x2ef [ 705.736362] warn_alloc.cold+0x7b/0x18f [ 705.764058] Node 1 active_anon:1752kB inactive_anon:24452kB active_file:0kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1536kB dirty:16kB writeback:0kB shmem:24580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 705.773364] ? zone_watermark_ok_safe+0x260/0x260 [ 705.773378] ? rcu_nmi_exit+0xb3/0x180 [ 705.773414] __vmalloc_area_node+0x4fd/0x780 [ 705.775957] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 705.779578] ? __vmalloc_node_range+0x180/0x180 [ 705.783543] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 705.810574] ? _raw_spin_unlock+0x29/0x40 [ 705.810588] ? __get_vm_area_node+0x2e2/0x3a0 [ 705.810608] __vmalloc_node_range+0xed/0x180 [ 705.815423] Node 0 DMA32 free:18228kB min:35996kB low:44992kB high:53988kB active_anon:81004kB inactive_anon:19324kB active_file:100kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:2228kB bounce:0kB free_pcp:2072kB local_pcp:1500kB free_cma:0kB [ 705.819306] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 705.823707] lowmem_reserve[]: 0 0 1 1 1 [ 705.849782] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 705.849796] vmalloc_user+0x70/0xe0 [ 705.849812] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 705.854453] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 705.859461] vb2_vmalloc_alloc+0xb3/0x2f0 [ 705.863601] lowmem_reserve[]: 0 0 0 0 0 [ 705.868068] __vb2_queue_alloc+0x472/0xe60 [ 705.872470] Node 1 Normal free:26876kB min:53876kB low:67344kB high:80812kB active_anon:1752kB inactive_anon:24452kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:216kB bounce:0kB free_pcp:1756kB local_pcp:24kB free_cma:0kB [ 705.901636] vb2_core_create_bufs+0x273/0x7e0 [ 705.901652] ? __vb2_queue_free+0x870/0x870 [ 705.905950] lowmem_reserve[]: 0 0 0 0 0 [ 705.910009] ? __video_do_ioctl+0x632/0xcd0 [ 705.910035] ? __mutex_lock+0x368/0x1190 [ 705.915369] Node 0 DMA: 1*4kB (M) 1*8kB (M) 2*16kB (UM) 2*32kB (UM) 2*64kB (UM) 1*128kB (M) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 10860kB [ 705.918989] vb2_create_bufs+0x332/0x620 [ 705.923301] Node 0 DMA32: 1973*4kB (UME) 818*8kB (UME) 149*16kB (ME) 22*32kB (ME) 12*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18292kB [ 705.949124] ? mark_held_locks+0xf0/0xf0 [ 705.949136] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 705.949156] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 705.953296] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 705.957254] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 705.961482] Node 1 Normal: 234*4kB (UM) 169*8kB (UME) 115*16kB (M) 59*32kB (UME) 25*64kB (UM) 14*128kB (UM) 3*256kB (UM) 1*512kB (U) 2*1024kB (UM) 1*2048kB (M) 3*4096kB (U) = 27072kB [ 705.990183] v4l_create_bufs+0xb2/0x160 [ 705.990204] __video_do_ioctl+0x49a/0xcd0 [ 705.994677] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 705.998989] ? v4l_querycap+0x340/0x340 [ 706.002972] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 706.007258] ? __might_fault+0x192/0x1d0 [ 706.011311] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 706.025842] ? v4l_querycap+0x340/0x340 [ 706.025863] video_usercopy+0x13f/0xfa0 [ 706.029916] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 706.043938] ? v4l_enumstd+0x60/0x60 [ 706.043956] ? do_futex+0x171/0x1880 [ 706.047990] 11613 total pagecache pages [ 706.053078] ? mark_held_locks+0xf0/0xf0 [ 706.053101] ? debug_check_no_obj_freed+0x201/0x490 [ 706.058179] 0 pages in swap cache [ 706.069274] ? video_usercopy+0xfa0/0xfa0 [ 706.069283] v4l2_ioctl+0x147/0x1a0 [ 706.069300] ? video_devdata+0xa0/0xa0 [ 706.074483] Swap cache stats: add 0, delete 0, find 0/0 [ 706.090925] do_vfs_ioctl+0xcdb/0x12e0 [ 706.090940] ? lock_downgrade+0x720/0x720 [ 706.090962] ? check_preemption_disabled+0x41/0x280 [ 706.094903] Free swap = 0kB [ 706.099051] ? ioctl_preallocate+0x200/0x200 [ 706.107879] Total swap = 0kB [ 706.111825] ? __fget+0x356/0x510 [ 706.111843] ? do_dup2+0x450/0x450 [ 706.120415] 2097051 pages RAM [ 706.124528] ? __se_sys_futex+0x298/0x3b0 [ 706.133353] 0 pages HighMem/MovableOnly [ 706.137317] ksys_ioctl+0x9b/0xc0 [ 706.141277] 369649 pages reserved [ 706.149833] __x64_sys_ioctl+0x6f/0xb0 [ 706.149846] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 706.149862] do_syscall_64+0xf9/0x620 [ 706.153549] 0 pages cma reserved [ 706.157251] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 706.161215] Unreclaimable slab info: [ 706.165245] RIP: 0033:0x7f68c24140f9 [ 706.170255] Name Used Total [ 706.173683] Code: Bad RIP value. [ 706.177810] pid_2 89KB 152KB [ 706.181413] RSP: 002b:00007f68c0986168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 706.181427] RAX: ffffffffffffffda RBX: 00007f68c2533f80 RCX: 00007f68c24140f9 [ 706.181434] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000006 [ 706.181445] RBP: 00007f68c246fae9 R08: 0000000000000000 R09: 0000000000000000 [ 706.185382] batadv_tl_cache 4KB 12KB [ 706.190663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 706.190671] R13: 00007fff6155d44f R14: 00007f68c0986300 R15: 0000000000022000 [ 706.216730] Mem-Info: [ 706.218229] TIPC 10KB 15KB [ 706.229286] active_anon:20663 inactive_anon:10945 isolated_anon:0 [ 706.229286] active_file:13 inactive_file:12 isolated_file:0 [ 706.229286] unevictable:0 dirty:0 writeback:0 unstable:0 [ 706.229286] slab_reclaimable:15777 slab_unreclaimable:119934 [ 706.229286] mapped:22351 shmem:11554 pagetables:610 bounce:0 [ 706.229286] free:14058 free_pcp:927 free_cma:0 [ 706.232829] SCTPv6 14KB 18KB [ 706.232850] DCCPv6 17KB 22KB [ 706.232862] DCCP 16KB 21KB [ 706.232900] RXRPC 11KB 13KB [ 706.232913] rxrpc_call_jar 78KB 94KB [ 706.250474] Node 0 active_anon:80892kB inactive_anon:19328kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21636kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 34816kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 706.252087] bridge_fdb_cache 9KB 15KB [ 706.255422] Node 1 active_anon:1760kB inactive_anon:24452kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1536kB dirty:0kB writeback:0kB shmem:24580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 706.260614] fib6_nodes 157KB 160KB [ 706.260625] ip6_dst_cache 70KB 326KB [ 706.260638] RAWv6 70KB 74KB [ 706.260650] UDPv6 33KB 37KB [ 706.260662] TCPv6 30KB 36KB [ 706.260681] nf_conntrack 7KB 18KB [ 706.274749] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 706.277078] t10_alua_lu_gp_cache 0KB 3KB [ 706.282443] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 706.294480] sd_ext_cdb 0KB 7KB [ 706.306360] Node 0 DMA32 free:18292kB min:35996kB low:44992kB high:53988kB active_anon:80892kB inactive_anon:19324kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:2224kB bounce:0kB free_pcp:1952kB local_pcp:452kB free_cma:0kB [ 706.312020] scsi_sense_cache 1056KB 1060KB [ 706.312030] virtio_scsi_cmd 16KB 16KB [ 706.312043] sgpool-128 8KB 8KB [ 706.312052] sgpool-64 4KB 12KB [ 706.312060] sgpool-32 2KB 15KB [ 706.312067] sgpool-16 1KB 7KB [ 706.312075] sgpool-8 0KB 7KB [ 706.312091] mqueue_inode_cache 10KB 22KB [ 706.312106] bio_post_read_ctx 14KB 15KB [ 706.312178] bio-2 14KB 15KB [ 706.312187] jfs_mp 7KB 7KB [ 706.312226] cifs_small_rq 15KB 16KB [ 706.312235] cifs_request 67KB 67KB [ 706.312245] cifs_mpx_ids 0KB 7KB [ 706.312274] nfs_commit_data 3KB 14KB [ 706.312284] nfs_write_data 34KB 44KB [ 706.312326] ext4_system_zone 1KB 7KB [ 706.312357] bio-1 1KB 7KB [ 706.312374] pid_namespace 2KB 7KB [ 706.312395] rpc_buffers 17KB 25KB [ 706.312405] rpc_tasks 2KB 7KB [ 706.312414] UNIX 213KB 217KB [ 706.312430] tcp_bind_bucket 1KB 4KB [ 706.312448] ip_fib_trie 23KB 27KB [ 706.312457] ip_fib_alias 112KB 118KB [ 706.312467] ip_dst_cache 10KB 48KB [ 706.312478] RAW 42KB 52KB [ 706.312488] UDP 42KB 47KB [ 706.312501] TCP 14KB 22KB [ 706.312512] hugetlbfs_inode_cache 3KB 15KB [ 706.312522] fscache_cookie_jar 1KB 11KB [ 706.312532] eventpoll_pwq 27KB 47KB [ 706.312541] eventpoll_epi 49KB 66KB [ 706.312551] inotify_inode_mark 29KB 55KB [ 706.312563] request_queue 199KB 199KB [ 706.312572] blkdev_requests 1KB 3KB [ 706.312581] blkdev_ioc 22KB 27KB [ 706.312591] bio-0 1128KB 1132KB [ 706.312601] biovec-max 1575KB 1575KB [ 706.312613] biovec-64 1035KB 1063KB [ 706.312622] biovec-16 88KB 93KB [ 706.312632] bio_integrity_payload 1KB 8KB [ 706.312641] khugepaged_mm_slot 13KB 34KB [ 706.312660] uid_cache 0KB 4KB [ 706.312669] dmaengine-unmap-2 0KB 3KB [ 706.312681] skbuff_fclone_cache 173KB 285KB [ 706.312691] skbuff_head_cache 6283KB 6285KB [ 706.312700] configfs_dir_cache 3KB 11KB [ 706.312710] file_lock_cache 106KB 198KB [ 706.312720] file_lock_ctx 9KB 11KB [ 706.312730] fsnotify_mark_connector 12KB 31KB [ 706.312739] net_namespace 52KB 52KB [ 706.312749] shmem_inode_cache 8219KB 8462KB [ 706.312758] task_delay_info 199KB 407KB [ 706.312768] taskstats 94KB 206KB [ 706.312777] proc_dir_entry 694KB 697KB [ 706.312787] pde_opener 8KB 58KB [ 706.312796] seq_file 282KB 539KB [ 706.312805] sigqueue 48KB 55KB [ 706.312816] kernfs_node_cache 18234KB 18250KB [ 706.312826] mnt_cache 173KB 188KB [ 706.312835] filp 6637KB 7635KB [ 706.312845] names_cache 144495KB 144551KB [ 706.312855] iint_cache 32KB 71KB [ 706.312864] key_jar 4KB 11KB [ 706.312873] uts_namespace 2KB 7KB [ 706.312882] nsproxy 1KB 7KB [ 706.312892] vm_area_struct 3525KB 5154KB [ 706.312902] mm_struct 529KB 1014KB [ 706.312911] fs_cache 105KB 364KB [ 706.312920] files_cache 373KB 765KB [ 706.312930] signal_cache 839KB 1746KB [ 706.312939] sighand_cache 527KB 589KB [ 706.312949] task_struct 6691KB 6735KB [ 706.312959] cred_jar 1478KB 2096KB [ 706.312968] anon_vma_chain 1132KB 1803KB [ 706.312978] anon_vma 147KB 269KB [ 706.312988] pid 50KB 264KB [ 706.312997] Acpi-Operand 156KB 202KB [ 706.313012] Acpi-ParseExt 8KB 11KB [ 706.313021] Acpi-Parse 41KB 47KB [ 706.313031] Acpi-State 52KB 63KB [ 706.313041] Acpi-Namespace 21KB 27KB [ 706.313052] numa_policy 0KB 3KB [ 706.313061] debug_objects_cache 1173KB 1619KB [ 706.313071] trace_event_file 297KB 298KB [ 706.313081] ftrace_event_field 398KB 401KB [ 706.313090] pool_workqueue 121KB 124KB [ 706.313102] page->ptl 600KB 1047KB [ 706.313148] kmalloc-2097152 2050KB 2050KB [ 706.313159] kmalloc-524288 2056KB 2056KB [ 706.313169] kmalloc-262144 1290KB 1290KB [ 706.313178] kmalloc-131072 650KB 650KB [ 706.313187] kmalloc-65536 1848KB 1914KB [ 706.313196] kmalloc-32768 1650KB 1650KB [ 706.313205] kmalloc-16384 1039KB 1039KB [ 706.313214] kmalloc-8192 3960KB 4001KB [ 706.313223] kmalloc-4096 20170KB 20230KB [ 706.313233] kmalloc-2048 12922KB 13821KB [ 706.313242] kmalloc-1024 7201KB 8008KB [ 706.313251] kmalloc-512 12506KB 12506KB [ 706.313260] kmalloc-256 5045KB 5478KB [ 706.313270] kmalloc-128 964KB 1488KB [ 706.313279] kmalloc-96 3370KB 4020KB [ 706.313288] kmalloc-64 2853KB 4244KB [ 706.313297] kmalloc-32 1896KB 2445KB [ 706.313307] kmalloc-192 1482KB 2288KB [ 706.313317] kmem_cache 177KB 183KB [ 706.313328] Out of memory (oom_kill_allocating_task): Kill process 12414 (in:imklog) score 0 or sacrifice child [ 706.313810] Killed process 12412 (rsyslogd) total-vm:254332kB, anon-rss:524kB, file-rss:0kB, shmem-rss:0kB [ 706.327796] lowmem_reserve[]: 0 0 1 1 1 [ 706.340624] oom_reaper: reaped process 12412 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 706.352398] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 706.417723] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 706.438792] lowmem_reserve[]: 0 0 0 0 0 [ 706.471387] oom_reaper: reaped process 12418 (syz-executor.1), now anon-rss:0kB, file-rss:13640kB, shmem-rss:0kB [ 706.480041] Node 1 Normal free:29872kB min:53876kB low:67344kB high:80812kB active_anon:960kB inactive_anon:24452kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:32kB pagetables:68kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 706.505542] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 706.535033] lowmem_reserve[]: 0 0 0 0 0 [ 706.544683] CPU: 1 PID: 27237 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 706.573453] Node 0 DMA: 1*4kB (M) 1*8kB (M) 2*16kB (UM) 2*32kB (UM) 2*64kB (UM) 1*128kB (M) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 10860kB [ 706.576966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 706.582411] Node 0 DMA32: 2217*4kB (ME) 823*8kB (ME) 176*16kB (ME) 26*32kB (ME) 13*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 2*2048kB (M) 0*4096kB = 24028kB [ 706.587659] Call Trace: [ 706.599930] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 706.603723] dump_stack+0x1fc/0x2ef [ 706.609145] Node 1 Normal: 147*4kB (UM) 110*8kB (UME) 94*16kB (UM) 77*32kB (UME) 39*64kB (UM) 20*128kB (UM) 4*256kB (M) 2*512kB (M) 1*1024kB (M) 2*2048kB (UM) 3*4096kB (U) = 29948kB [ 706.614518] dump_header+0x15d/0xc3f [ 706.614534] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 706.614547] ? ___ratelimit+0x319/0x590 [ 706.614563] oom_kill_process.cold+0x10/0x692 [ 706.614583] ? check_preemption_disabled+0x41/0x280 [ 706.628757] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 706.631098] ? has_intersects_mems_allowed+0x1d6/0x290 [ 706.631114] out_of_memory+0x1072/0x1390 [ 706.631132] ? oom_killer_disable+0x270/0x270 [ 706.631149] ? mutex_trylock+0x15f/0x1a0 [ 706.636497] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 706.641848] __alloc_pages_nodemask+0x23a2/0x2890 [ 706.641868] ? find_get_entry+0x4cd/0x8a0 [ 706.641891] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 706.641934] alloc_pages_current+0x193/0x2a0 [ 706.654077] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 706.657977] filemap_fault+0x146e/0x2180 [ 706.663514] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 706.668708] ext4_filemap_fault+0x84/0xb0 [ 706.680924] 11579 total pagecache pages [ 706.684888] __do_fault+0x10b/0x4b0 [ 706.690289] 0 pages in swap cache [ 706.695594] __handle_mm_fault+0x273b/0x41c0 [ 706.707763] Swap cache stats: add 0, delete 0, find 0/0 [ 706.711664] ? vm_insert_page+0x9c0/0x9c0 [ 706.711675] ? __fget+0x356/0x510 [ 706.711700] ? check_preemption_disabled+0x41/0x280 [ 706.711718] handle_mm_fault+0x436/0xb10 [ 706.717072] Free swap = 0kB [ 706.722434] __do_page_fault+0x68e/0xd60 [ 706.722455] ? trace_hardirqs_off_caller+0x6e/0x210 [ 706.722468] ? spurious_fault+0x840/0x840 [ 706.722482] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 706.722497] ? page_fault+0x8/0x30 [ 706.722509] page_fault+0x1e/0x30 [ 706.722519] RIP: 0033:0x403ace [ 706.722533] Code: Bad RIP value. [ 706.722540] RSP: 002b:000000c0004a1778 EFLAGS: 00010246 [ 706.722550] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000403ace [ 706.722557] RDX: 0000000000000080 RSI: 000000c0004a1840 RDI: 0000000000000004 [ 706.722563] RBP: 000000c0004a17c0 R08: 0000000000000000 R09: 0000000000000000 [ 706.722569] R10: 000000000000022f R11: 0000000000000246 R12: 000000c0004a1850 [ 706.722577] R13: 0000000000000000 R14: 000000c0006d1a00 R15: 000000a6485ba88e [ 706.736078] Mem-Info: [ 706.754006] Total swap = 0kB [ 706.764005] active_anon:19429 inactive_anon:10945 isolated_anon:0 [ 706.764005] active_file:13 inactive_file:12 isolated_file:0 [ 706.764005] unevictable:0 dirty:0 writeback:0 unstable:0 [ 706.764005] slab_reclaimable:15777 slab_unreclaimable:119959 [ 706.764005] mapped:22351 shmem:11554 pagetables:573 bounce:0 [ 706.764005] free:16154 free_pcp:66 free_cma:0 [ 706.779619] 2097051 pages RAM [ 706.795941] Node 0 active_anon:76756kB inactive_anon:19328kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21636kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 34816kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 706.808000] 0 pages HighMem/MovableOnly [ 706.823904] Node 1 active_anon:960kB inactive_anon:24452kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1536kB dirty:0kB writeback:0kB shmem:24580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 706.823911] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 706.823941] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 706.823961] Node 0 DMA32 free:23876kB min:35996kB low:44992kB high:53988kB active_anon:76756kB inactive_anon:19324kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:2224kB bounce:0kB free_pcp:248kB local_pcp:80kB free_cma:0kB [ 706.823991] lowmem_reserve[]: 0 0 1 1 1 [ 706.824009] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 706.824038] lowmem_reserve[]: 0 0 0 0 0 [ 706.824057] Node 1 Normal free:29872kB min:53876kB low:67344kB high:80812kB active_anon:960kB inactive_anon:24452kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:32kB pagetables:68kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 706.824086] lowmem_reserve[]: 0 0 0 0 0 [ 706.824104] Node 0 DMA: 1*4kB (M) 1*8kB (M) 2*16kB (UM) 2*32kB (UM) 2*64kB (UM) 1*128kB (M) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 10860kB [ 706.824179] Node 0 DMA32: 2217*4kB (ME) 823*8kB (ME) 176*16kB (ME) 26*32kB (ME) 13*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 2*2048kB (M) 0*4096kB = 24028kB [ 706.824244] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 706.824296] Node 1 Normal: 147*4kB (UM) 110*8kB (UME) 94*16kB (UM) 77*32kB (UME) 39*64kB (UM) 20*128kB (UM) 4*256kB (M) 2*512kB (M) 1*1024kB (M) 2*2048kB (UM) 3*4096kB (U) = 29948kB [ 706.824379] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 706.824389] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 706.824399] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 706.824415] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 706.824421] 11579 total pagecache pages [ 706.824434] 0 pages in swap cache [ 706.824441] Swap cache stats: add 0, delete 0, find 0/0 [ 706.824446] Free swap = 0kB [ 706.824451] Total swap = 0kB [ 706.824459] 2097051 pages RAM [ 706.824463] 0 pages HighMem/MovableOnly [ 706.824468] 369649 pages reserved [ 706.824473] 0 pages cma reserved [ 706.824479] Unreclaimable slab info: [ 706.824484] Name Used Total [ 706.824495] pid_2 89KB 152KB [ 706.824574] batadv_tl_cache 4KB 12KB [ 706.824601] TIPC 10KB 15KB [ 706.824622] SCTPv6 14KB 18KB [ 706.824641] DCCPv6 17KB 22KB [ 706.824654] DCCP 16KB 21KB [ 706.824695] RXRPC 11KB 13KB [ 706.824705] rxrpc_call_jar 78KB 94KB [ 706.824718] bridge_fdb_cache 9KB 15KB [ 706.824733] fib6_nodes 157KB 160KB [ 706.824743] ip6_dst_cache 70KB 326KB [ 706.824756] RAWv6 70KB 74KB [ 706.824768] UDPv6 33KB 37KB [ 706.824781] TCPv6 30KB 36KB [ 706.824801] nf_conntrack 7KB 18KB [ 706.824864] t10_alua_lu_gp_cache 0KB 3KB [ 706.824878] sd_ext_cdb 0KB 7KB [ 706.837320] 369649 pages reserved [ 706.846347] scsi_sense_cache 1056KB 1060KB [ 706.847115] 0 pages cma reserved [ 706.862648] virtio_scsi_cmd 16KB 16KB [ 708.045760] sgpool-128 8KB 8KB [ 708.051171] sgpool-64 4KB 12KB [ 708.056549] sgpool-32 2KB 15KB [ 708.065275] sgpool-16 1KB 7KB [ 708.070691] sgpool-8 0KB 7KB [ 708.076060] mqueue_inode_cache 10KB 22KB [ 708.085071] bio_post_read_ctx 14KB 15KB [ 708.090542] bio-2 14KB 15KB [ 708.095905] jfs_mp 7KB 7KB [ 708.104968] cifs_small_rq 15KB 16KB [ 708.110404] cifs_request 67KB 67KB [ 708.115768] cifs_mpx_ids 0KB 7KB [ 708.124836] nfs_commit_data 3KB 14KB [ 708.130245] nfs_write_data 34KB 44KB [ 708.135639] ext4_system_zone 1KB 7KB [ 708.144632] bio-1 1KB 7KB [ 708.150047] pid_namespace 2KB 7KB [ 708.155418] rpc_buffers 17KB 25KB [ 708.164401] rpc_tasks 2KB 7KB [ 708.169811] UNIX 213KB 217KB [ 708.175178] tcp_bind_bucket 1KB 4KB [ 708.184293] ip_fib_trie 23KB 27KB [ 708.189696] ip_fib_alias 112KB 118KB [ 708.195083] ip_dst_cache 10KB 48KB [ 708.204161] RAW 42KB 52KB [ 708.209553] UDP 42KB 47KB [ 708.214977] TCP 14KB 22KB [ 708.224001] hugetlbfs_inode_cache 3KB 15KB [ 708.229755] fscache_cookie_jar 1KB 11KB [ 708.235212] eventpoll_pwq 27KB 47KB [ 708.244266] eventpoll_epi 49KB 66KB [ 708.249713] inotify_inode_mark 29KB 55KB [ 708.255169] request_queue 199KB 199KB [ 708.264652] blkdev_requests 1KB 3KB [ 708.270081] blkdev_ioc 22KB 27KB [ 708.275443] bio-0 1128KB 1132KB [ 708.284395] biovec-max 1575KB 1575KB [ 708.289814] biovec-64 1035KB 1063KB [ 708.295174] biovec-16 88KB 93KB [ 708.304164] bio_integrity_payload 1KB 8KB [ 708.309914] khugepaged_mm_slot 13KB 34KB [ 708.315369] uid_cache 0KB 4KB [ 708.327963] dmaengine-unmap-2 0KB 3KB [ 708.348475] skbuff_fclone_cache 173KB 285KB [ 708.354191] skbuff_head_cache 6433KB 6435KB [ 708.376745] configfs_dir_cache 3KB 11KB [ 708.383874] file_lock_cache 106KB 198KB [ 708.389373] file_lock_ctx 9KB 11KB [ 708.401072] fsnotify_mark_connector 12KB 31KB [ 708.406984] net_namespace 52KB 52KB [ 708.412408] shmem_inode_cache 8219KB 8462KB [ 708.418356] task_delay_info 199KB 407KB [ 708.423967] taskstats 94KB 206KB [ 708.429454] proc_dir_entry 694KB 697KB [ 708.434874] pde_opener 8KB 58KB [ 708.440282] seq_file 282KB 539KB [ 708.445661] sigqueue 48KB 55KB [ 708.451651] kernfs_node_cache 18234KB 18250KB [ 708.457067] mnt_cache 173KB 188KB [ 708.462470] filp 6637KB 7635KB [ 708.467839] names_cache 143849KB 143871KB [ 708.474527] iint_cache 37KB 71KB [ 708.483438] key_jar 4KB 11KB [ 708.494006] uts_namespace 2KB 7KB [ 708.503317] nsproxy 1KB 7KB [ 708.509146] vm_area_struct 3525KB 5154KB [ 708.518680] mm_struct 529KB 1014KB [ 708.527781] fs_cache 105KB 364KB [ 708.538918] files_cache 373KB 765KB [ 708.559694] signal_cache 839KB 1746KB [ 708.565111] sighand_cache 527KB 589KB [ 708.590100] task_struct 6666KB 6722KB [ 708.595498] cred_jar 1508KB 2096KB [ 708.609660] anon_vma_chain 1132KB 1803KB [ 708.615088] anon_vma 147KB 269KB [ 708.629663] pid 50KB 264KB [ 708.635112] Acpi-Operand 156KB 202KB [ 708.640969] Acpi-ParseExt 8KB 11KB [ 708.659689] Acpi-Parse 41KB 47KB [ 708.665128] Acpi-State 52KB 63KB [ 708.670555] Acpi-Namespace 21KB 27KB [ 708.675918] numa_policy 0KB 3KB [ 708.695354] debug_objects_cache 1173KB 1619KB [ 708.749719] trace_event_file 297KB 298KB [ 708.755241] ftrace_event_field 398KB 401KB [ 708.770062] pool_workqueue 121KB 124KB [ 708.775783] page->ptl 600KB 1047KB [ 708.783133] kmalloc-2097152 2050KB 2050KB [ 708.789341] kmalloc-524288 2056KB 2056KB [ 708.807414] kmalloc-262144 1290KB 1290KB [ 708.812880] kmalloc-131072 650KB 650KB [ 708.818246] kmalloc-65536 1848KB 1914KB [ 708.824393] kmalloc-32768 1650KB 1650KB [ 708.832099] kmalloc-16384 1039KB 1039KB [ 708.838652] kmalloc-8192 3960KB 4001KB [ 708.844073] kmalloc-4096 18967KB 19027KB [ 708.849439] kmalloc-2048 12361KB 13629KB [ 708.855238] kmalloc-1024 7093KB 8008KB [ 708.861900] kmalloc-512 12607KB 12723KB [ 708.867827] kmalloc-256 4969KB 5471KB [ 708.873927] kmalloc-128 964KB 1488KB [ 708.879575] kmalloc-96 3422KB 4020KB [ 708.889412] kmalloc-64 2793KB 4244KB [ 708.898525] kmalloc-32 1881KB 2445KB [ 708.903945] kmalloc-192 1482KB 2288KB [ 708.909401] kmem_cache 177KB 183KB [ 708.915194] Out of memory (oom_kill_allocating_task): Kill process 27237 (syz-fuzzer) score 0 or sacrifice child [ 708.925828] Killed process 8135 (syz-executor.2) total-vm:48512kB, anon-rss:440kB, file-rss:12292kB, shmem-rss:0kB [ 708.936968] oom_reaper: reaped process 8135 (syz-executor.2), now anon-rss:0kB, file-rss:14336kB, shmem-rss:0kB [ 709.707244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 709.721085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.734340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 709.742687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 709.757047] device bridge_slave_1 left promiscuous mode [ 709.764107] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.829084] device bridge_slave_0 left promiscuous mode [ 709.838062] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.864234] device veth1_macvtap left promiscuous mode [ 709.873200] device veth0_macvtap left promiscuous mode [ 709.878628] device veth1_vlan left promiscuous mode [ 709.886037] device veth0_vlan left promiscuous mode [ 710.047080] device hsr_slave_1 left promiscuous mode [ 710.059144] device hsr_slave_0 left promiscuous mode [ 710.086106] team0 (unregistering): Port device team_slave_1 removed [ 710.104578] team0 (unregistering): Port device team_slave_0 removed [ 710.122447] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 710.138935] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 710.189330] bond0 (unregistering): Released all slaves 13:07:29 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x80000001, 0x4, 0x4000}) 13:07:29 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x401, 0x8aae, 0x30385056, 0x6, 0x1, 0x3, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:07:29 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x3) 13:07:29 executing program 4: socketpair(0x1e, 0x3, 0x7, &(0x7f0000000000)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:07:29 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x5, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x5, 0x0, 0x3, {0x1, @raw_data="225f50a7111826e3f01cee0d662d67ee0f87bfb36ff72ad5557fee03318ba430b2368e64016682d2acfdfa7c50088ff06e4fee874ff0229e99fc8fd779c4fc8bbc42acb0a2d2125f8b8567b6b1b6b8f1fe206acc829f12c4d840bc13182560a27a99ee25b43c0f99df794e30a1641db33485457013fb1ec1a6d80df6437e2dac1f6785e1b019907af06eed8ca4beeb2da415f857e0f545c373e30c8db32efe9324c35eec43e2143334ff8122fe8b2cbdd0d4c0a3ace8931800aa9740eb035f0911175856dcc08415"}, 0x25}) socketpair(0x28, 0x2, 0x9fa, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0xffffffff}], 0x0, 0x0, 0x8}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000008}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 13:07:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_SSID={0x15, 0x34, @random="93388aaa8e929b9ccdf5660a6a3b123fd4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xbb, 0x401, 0x34324948, 0x9, 0x3, 0x9, 0x7, 0x40000, 0x1, 0x0, 0x1, 0x7}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000380)=@userptr={0x40000000, 0x0, 0x4, 0x0, 0x3, {0x0, 0x2710}, {0x1, 0x2, 0x9, 0x9, 0x80, 0xea, "f8437f47"}, 0x3, 0x2, {&(0x7f0000000340)}, 0x9}) 13:07:29 executing program 5: ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x80000001, 0x4, 0x4000}) 13:07:29 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x5, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x5, 0x0, 0x3, {0x1, @raw_data="225f50a7111826e3f01cee0d662d67ee0f87bfb36ff72ad5557fee03318ba430b2368e64016682d2acfdfa7c50088ff06e4fee874ff0229e99fc8fd779c4fc8bbc42acb0a2d2125f8b8567b6b1b6b8f1fe206acc829f12c4d840bc13182560a27a99ee25b43c0f99df794e30a1641db33485457013fb1ec1a6d80df6437e2dac1f6785e1b019907af06eed8ca4beeb2da415f857e0f545c373e30c8db32efe9324c35eec43e2143334ff8122fe8b2cbdd0d4c0a3ace8931800aa9740eb035f0911175856dcc08415"}, 0x25}) (async) socketpair(0x28, 0x2, 0x9fa, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0xffffffff}], 0x0, 0x0, 0x8}}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) (async) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000008}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 13:07:29 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x3) 13:07:29 executing program 4: socketpair(0x1e, 0x3, 0x7, &(0x7f0000000000)) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:07:29 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x3) 13:07:29 executing program 5: ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x80000001, 0x4, 0x4000}) 13:07:29 executing program 5: ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x80000001, 0x4, 0x4000}) [ 714.286018] IPVS: ftp: loaded support on port[0] = 21 [ 714.614768] chnl_net:caif_netlink_parms(): no params data found [ 714.698006] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.706069] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.718967] device bridge_slave_0 entered promiscuous mode [ 714.726852] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.738026] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.746751] device bridge_slave_1 entered promiscuous mode [ 714.781090] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 714.795666] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 714.827345] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 714.845765] team0: Port device team_slave_0 added [ 714.852341] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 714.860254] team0: Port device team_slave_1 added [ 714.880208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.886475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.912221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.924543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.931097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.956754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.971980] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 714.980056] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 715.011119] device hsr_slave_0 entered promiscuous mode [ 715.017415] device hsr_slave_1 entered promiscuous mode [ 715.028926] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 715.036527] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 715.159229] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.165859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.172793] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.179180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 715.244050] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 715.255317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.266135] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 715.281746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 715.294256] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.303549] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.316343] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 715.328510] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 715.342413] 8021q: adding VLAN 0 to HW filter on device team0 [ 715.355487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 715.366915] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.373369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 715.394760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 715.407050] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.413500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.446306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 715.454863] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 715.468006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 715.480774] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 715.489137] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 715.504933] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 715.511144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 715.518445] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 715.528821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 715.536604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 715.582245] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 715.594727] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 715.601590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 715.608311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 715.623071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 715.672971] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 715.688727] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 715.697741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 715.712239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 715.765767] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 715.775456] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 715.785547] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 715.798727] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 715.808190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 715.819194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 715.836086] device veth0_vlan entered promiscuous mode [ 715.846563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 715.857357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 715.871753] device veth1_vlan entered promiscuous mode [ 715.877871] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 715.894068] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 715.913328] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 715.929830] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 715.938585] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 715.947089] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 715.954922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 715.963103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 715.978076] device veth0_macvtap entered promiscuous mode [ 715.985560] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 716.001044] device veth1_macvtap entered promiscuous mode [ 716.007555] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 716.024164] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 716.041606] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 716.055986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.065866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.080580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.093700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.106076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.120914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.133416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.146955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.161145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.173548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.187767] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 716.197894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 716.207774] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 716.218361] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 716.228830] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 716.244234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 716.256770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.269491] Bluetooth: hci4: command 0x0409 tx timeout [ 716.272321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.286925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.302340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.313281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.326368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.337422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.354110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.364019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.378576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.394683] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 716.401687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 716.408705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 716.422450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 716.638131] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 716.644813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.666912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.688163] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 716.704935] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 716.715198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.723911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.735784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 13:07:34 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x401, 0x8aae, 0x30385056, 0x6, 0x1, 0x3, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) [ 718.339280] Bluetooth: hci4: command 0x041b tx timeout [ 718.931476] oom_reaper: reaped process 12522 (syz-executor.0), now anon-rss:0kB, file-rss:14336kB, shmem-rss:16kB [ 718.995766] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 719.034562] systemd-journal cpuset=/ mems_allowed=0-1 [ 719.043153] CPU: 1 PID: 12341 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 719.051128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 719.060482] Call Trace: [ 719.063074] dump_stack+0x1fc/0x2ef [ 719.066705] dump_header+0x15d/0xc3f [ 719.070446] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 719.075550] ? ___ratelimit+0x319/0x590 [ 719.079550] oom_kill_process.cold+0x10/0x692 [ 719.084055] ? check_preemption_disabled+0x41/0x280 [ 719.089074] ? has_intersects_mems_allowed+0x1d6/0x290 [ 719.094453] out_of_memory+0x1072/0x1390 [ 719.098519] ? oom_killer_disable+0x270/0x270 [ 719.103017] ? mutex_trylock+0x15f/0x1a0 [ 719.107082] __alloc_pages_nodemask+0x23a2/0x2890 [ 719.111935] ? find_get_entry+0x4cd/0x8a0 [ 719.116107] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 719.120977] alloc_pages_current+0x193/0x2a0 [ 719.125404] filemap_fault+0x146e/0x2180 [ 719.129479] ext4_filemap_fault+0x84/0xb0 [ 719.133626] __do_fault+0x10b/0x4b0 [ 719.137243] ? do_raw_spin_unlock+0x171/0x230 [ 719.141753] __handle_mm_fault+0x273b/0x41c0 [ 719.146275] ? vm_insert_page+0x9c0/0x9c0 [ 719.150433] ? fsnotify+0x84e/0xe10 [ 719.154075] ? check_preemption_disabled+0x41/0x280 [ 719.158331] syz-executor.0: vmalloc: allocation failure, allocated 1768828928 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 719.159091] handle_mm_fault+0x436/0xb10 [ 719.159111] __do_page_fault+0x68e/0xd60 [ 719.159129] ? trace_hardirqs_off_caller+0x6e/0x210 [ 719.159145] ? spurious_fault+0x840/0x840 [ 719.178832] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 719.181180] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 719.181198] ? page_fault+0x8/0x30 [ 719.181211] page_fault+0x1e/0x30 [ 719.181222] RIP: 0033:0x7fcc67e20fe3 [ 719.181236] Code: Bad RIP value. [ 719.181247] RSP: 002b:00007ffd2a53ff70 EFLAGS: 00010203 [ 719.219781] RAX: 0000000000000008 RBX: 00005596d68e6268 RCX: 00007fcc67711210 [ 719.227057] RDX: 0000000000000008 RSI: 00007ffd2a53ff70 RDI: 0000000000000013 [ 719.234324] RBP: 00007ffd2a540180 R08: 00007ffd2a5c9000 R09: 000000b8f1ce0b0d [ 719.241591] R10: 001d3648930248fd R11: 0000000000000246 R12: 00005596d68e6250 [ 719.248856] R13: 0000000000000001 R14: 00007ffd2a53ff9c R15: 00007ffd2a53ff90 [ 719.256138] CPU: 0 PID: 12522 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 719.260794] Mem-Info: [ 719.264027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 719.266433] active_anon:18107 inactive_anon:10947 isolated_anon:0 [ 719.266433] active_file:26 inactive_file:9 isolated_file:0 [ 719.266433] unevictable:0 dirty:0 writeback:0 unstable:0 [ 719.266433] slab_reclaimable:15404 slab_unreclaimable:118534 [ 719.266433] mapped:22458 shmem:11555 pagetables:619 bounce:0 [ 719.266433] free:13894 free_pcp:137 free_cma:0 [ 719.266463] Node 0 active_anon:71272kB inactive_anon:19328kB active_file:48kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87928kB dirty:0kB writeback:0kB shmem:21624kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 719.275785] Call Trace: [ 719.275809] dump_stack+0x1fc/0x2ef [ 719.275827] warn_alloc.cold+0x7b/0x18f [ 719.275864] ? zone_watermark_ok_safe+0x260/0x260 [ 719.309069] Node 1 active_anon:1156kB inactive_anon:24460kB active_file:56kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1904kB dirty:0kB writeback:0kB shmem:24596kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 719.336696] ? retint_kernel+0x2d/0x2d [ 719.336732] __vmalloc_area_node+0x4fd/0x780 [ 719.336751] ? __vmalloc_node_range+0x180/0x180 [ 719.336764] ? _raw_spin_unlock+0x29/0x40 [ 719.336775] ? __get_vm_area_node+0x2e2/0x3a0 [ 719.336793] __vmalloc_node_range+0xed/0x180 [ 719.336808] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 719.336827] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 719.336841] vmalloc_user+0x70/0xe0 [ 719.336855] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 719.336871] vb2_vmalloc_alloc+0xb3/0x2f0 [ 719.336886] __vb2_queue_alloc+0x472/0xe60 [ 719.336914] vb2_core_create_bufs+0x273/0x7e0 [ 719.336930] ? __vb2_queue_free+0x870/0x870 [ 719.336946] ? __video_do_ioctl+0x632/0xcd0 [ 719.336966] ? __mutex_lock+0x368/0x1190 [ 719.336985] vb2_create_bufs+0x332/0x620 [ 719.337003] ? mark_held_locks+0xf0/0xf0 [ 719.337017] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 719.337035] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 719.337052] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 719.337073] v4l_create_bufs+0xb2/0x160 [ 719.337092] __video_do_ioctl+0x49a/0xcd0 [ 719.337114] ? v4l_querycap+0x340/0x340 [ 719.337134] ? __might_fault+0x192/0x1d0 [ 719.337152] ? v4l_querycap+0x340/0x340 [ 719.337168] video_usercopy+0x13f/0xfa0 [ 719.337191] ? v4l_enumstd+0x60/0x60 [ 719.337206] ? do_futex+0x171/0x1880 [ 719.337222] ? mark_held_locks+0xf0/0xf0 [ 719.337241] ? debug_check_no_obj_freed+0x201/0x490 [ 719.337264] ? video_usercopy+0xfa0/0xfa0 [ 719.339858] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 719.343452] v4l2_ioctl+0x147/0x1a0 [ 719.347408] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 719.352242] ? video_devdata+0xa0/0xa0 [ 719.352259] do_vfs_ioctl+0xcdb/0x12e0 [ 719.352277] ? lock_downgrade+0x720/0x720 [ 719.379357] Node 0 DMA32 free:17884kB min:35996kB low:44992kB high:53988kB active_anon:71372kB inactive_anon:19328kB active_file:44kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7712kB pagetables:2304kB bounce:0kB free_pcp:232kB local_pcp:232kB free_cma:0kB [ 719.383214] ? check_preemption_disabled+0x41/0x280 [ 719.387585] lowmem_reserve[]: 0 0 1 1 1 [ 719.392242] ? ioctl_preallocate+0x200/0x200 [ 719.392260] ? __fget+0x356/0x510 [ 719.392277] ? do_dup2+0x450/0x450 [ 719.396411] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 719.401008] ? __se_sys_futex+0x298/0x3b0 [ 719.401029] ksys_ioctl+0x9b/0xc0 [ 719.401049] __x64_sys_ioctl+0x6f/0xb0 [ 719.405440] lowmem_reserve[]: 0 0 0 0 0 [ 719.409756] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 719.409772] do_syscall_64+0xf9/0x620 [ 719.409793] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 719.415127] Node 1 Normal free:26816kB min:53876kB low:67344kB high:80812kB active_anon:1156kB inactive_anon:24460kB active_file:56kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:128kB pagetables:172kB bounce:0kB free_pcp:312kB local_pcp:64kB free_cma:0kB [ 719.418741] RIP: 0033:0x7f68c24140f9 [ 719.418757] Code: Bad RIP value. [ 719.418764] RSP: 002b:00007f68c0986168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 719.418777] RAX: ffffffffffffffda RBX: 00007f68c2533f80 RCX: 00007f68c24140f9 [ 719.418783] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000006 [ 719.418790] RBP: 00007f68c246fae9 R08: 0000000000000000 R09: 0000000000000000 [ 719.418797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 719.418804] R13: 00007fff6155d44f R14: 00007f68c0986300 R15: 0000000000022000 [ 719.435839] Mem-Info: [ 719.440011] lowmem_reserve[]: 0 0 0 0 0 [ 719.452415] active_anon:18107 inactive_anon:10947 isolated_anon:0 [ 719.452415] active_file:26 inactive_file:9 isolated_file:0 [ 719.452415] unevictable:0 dirty:0 writeback:0 unstable:0 [ 719.452415] slab_reclaimable:15404 slab_unreclaimable:118534 [ 719.452415] mapped:22458 shmem:11555 pagetables:619 bounce:0 [ 719.452415] free:13894 free_pcp:197 free_cma:0 [ 719.455299] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 719.457261] Node 0 active_anon:71272kB inactive_anon:19328kB active_file:48kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87928kB dirty:0kB writeback:0kB shmem:21624kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 719.463665] Node 0 DMA32: 1890*4kB (ME) 726*8kB (UME) 184*16kB (UME) 17*32kB (ME) 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 17880kB [ 719.478697] Node 1 active_anon:1156kB inactive_anon:24460kB active_file:56kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1904kB dirty:0kB writeback:0kB shmem:24596kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 719.484196] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 719.484887] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 719.488940] Node 1 Normal: 175*4kB (M) 131*8kB (UME) 99*16kB (UM) 76*32kB (UME) 37*64kB (M) 20*128kB (UM) 6*256kB (UM) 0*512kB 2*1024kB (UM) 2*2048kB (UM) 2*4096kB (U) = 26564kB [ 719.504377] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 719.509050] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 719.517314] Node 0 DMA32 free:17884kB min:35996kB low:44992kB high:53988kB active_anon:71372kB inactive_anon:19328kB active_file:44kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7712kB pagetables:2304kB bounce:0kB free_pcp:476kB local_pcp:248kB free_cma:0kB [ 719.517504] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 719.555151] lowmem_reserve[]: 0 0 1 1 1 [ 719.559399] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 719.565244] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 719.597066] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 719.610170] lowmem_reserve[]: 0 0 0 0 0 [ 719.613888] 11602 total pagecache pages [ 719.614057] Node 1 Normal free:26816kB min:53876kB low:67344kB high:80812kB active_anon:1156kB inactive_anon:24460kB active_file:56kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:128kB pagetables:172kB bounce:0kB free_pcp:312kB local_pcp:248kB free_cma:0kB [ 719.640208] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 719.643650] 0 pages in swap cache [ 719.656232] lowmem_reserve[]: 0 0 0 0 0 [ 719.663869] Swap cache stats: add 0, delete 0, find 0/0 [ 719.664417] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 719.669670] Free swap = 0kB [ 719.669676] Total swap = 0kB [ 719.669684] 2097051 pages RAM [ 719.669688] 0 pages HighMem/MovableOnly [ 719.669692] 369649 pages reserved [ 719.669702] 0 pages cma reserved [ 719.715120] Node 0 DMA32: 1890*4kB (ME) 726*8kB (UME) 184*16kB (UME) 17*32kB (ME) 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 17880kB [ 719.724438] Unreclaimable slab info: [ 719.735733] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 719.745814] Name Used Total [ 719.760645] Node 1 Normal: 175*4kB (M) 131*8kB (UME) 99*16kB (UM) 76*32kB (UME) 37*64kB (M) 20*128kB (UM) 6*256kB (UM) 0*512kB 2*1024kB (UM) 2*2048kB (UM) 2*4096kB (U) = 26564kB [ 719.792792] pid_2 77KB 152KB [ 719.813860] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 719.834146] batadv_tt_change_cache 1KB 3KB [ 719.855650] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 719.874827] batadv_tl_cache 6KB 12KB [ 719.900575] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 719.912183] TIPC 13KB 15KB [ 719.936123] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 719.942495] SCTPv6 18KB 24KB [ 719.980752] 11579 total pagecache pages [ 719.980767] 0 pages in swap cache [ 719.992954] DCCPv6 17KB 22KB [ 720.026939] Swap cache stats: add 0, delete 0, find 0/0 [ 720.032012] DCCP 16KB 21KB [ 720.035263] Free swap = 0kB [ 720.064273] RXRPC 13KB 13KB [ 720.078839] Total swap = 0kB [ 720.083649] rxrpc_call_jar 90KB 94KB [ 720.106286] 2097051 pages RAM [ 720.110093] bridge_fdb_cache 12KB 15KB [ 720.110270] 0 pages HighMem/MovableOnly [ 720.113546] fib6_nodes 188KB 188KB [ 720.138938] 369649 pages reserved [ 720.145998] ip6_dst_cache 199KB 326KB [ 720.148613] 0 pages cma reserved [ 720.167201] RAWv6 81KB 81KB [ 720.259103] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 720.264995] UDPv6 37KB 41KB [ 720.321109] TCPv6 36KB 36KB [ 720.326495] nf_conntrack 18KB 18KB [ 720.335480] t10_alua_lu_gp_cache 0KB 3KB [ 720.344858] sd_ext_cdb 0KB 7KB [ 720.353806] scsi_sense_cache 1056KB 1060KB [ 720.362474] virtio_scsi_cmd 16KB 16KB [ 720.367848] sgpool-128 8KB 8KB [ 720.376823] sgpool-64 4KB 12KB [ 720.385498] sgpool-32 2KB 15KB [ 720.394451] sgpool-16 1KB 7KB [ 720.403018] sgpool-8 0KB 7KB [ 720.408397] mqueue_inode_cache 13KB 22KB [ 720.417444] bio_post_read_ctx 14KB 15KB [ 720.419084] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 720.426263] bio-2 14KB 15KB [ 720.429429] Bluetooth: hci4: command 0x040f tx timeout [ 720.436778] jfs_mp 7KB 7KB [ 720.450327] cifs_small_rq 15KB 16KB [ 720.455693] cifs_request 67KB 67KB [ 720.461084] cifs_mpx_ids 0KB 7KB [ 720.466462] nfs_commit_data 3KB 14KB [ 720.478208] nfs_write_data 34KB 44KB [ 720.483650] ext4_system_zone 1KB 7KB [ 720.495491] bio-1 1KB 7KB [ 720.499089] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 720.500971] pid_namespace 3KB 7KB [ 720.519380] rpc_buffers 17KB 25KB [ 720.524745] rpc_tasks 2KB 7KB [ 720.533677] UNIX 667KB 667KB [ 720.542851] tcp_bind_bucket 2KB 4KB [ 720.548230] ip_fib_trie 30KB 31KB [ 720.557221] ip_fib_alias 132KB 134KB [ 720.565955] ip_dst_cache 18KB 48KB [ 720.574872] RAW 48KB 52KB [ 720.579055] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 720.583599] UDP 55KB 60KB [ 720.586765] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 720.595418] TCP 19KB 22KB [ 720.598611] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 720.607216] hugetlbfs_inode_cache 3KB 15KB [ 720.618424] fscache_cookie_jar 1KB 11KB [ 720.628288] eventpoll_pwq 30KB 47KB [ 720.633691] eventpoll_epi 56KB 66KB [ 720.645912] inotify_inode_mark 18KB 55KB [ 720.651412] request_queue 199KB 199KB [ 720.656776] blkdev_requests 1KB 3KB [ 720.659050] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 720.668796] blkdev_ioc 27KB 30KB [ 720.674242] bio-0 1393KB 1395KB [ 720.685956] biovec-max 1650KB 1650KB [ 720.691368] biovec-64 1307KB 1307KB [ 720.696731] biovec-16 107KB 108KB [ 720.708494] bio_integrity_payload 1KB 8KB [ 720.714259] khugepaged_mm_slot 11KB 34KB [ 720.726294] uid_cache 0KB 4KB [ 720.731704] dmaengine-unmap-2 0KB 3KB [ 720.737065] skbuff_fclone_cache 143KB 262KB [ 720.739154] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 720.749796] skbuff_head_cache 7366KB 7368KB [ 720.755163] configfs_dir_cache 3KB 11KB [ 720.763961] file_lock_cache 83KB 194KB [ 720.772962] file_lock_ctx 9KB 11KB [ 720.778330] fsnotify_mark_connector 9KB 31KB [ 720.787415] net_namespace 61KB 61KB [ 720.796136] shmem_inode_cache 8167KB 8430KB [ 720.804877] task_delay_info 210KB 407KB [ 720.813842] taskstats 86KB 206KB [ 720.819304] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 720.827923] proc_dir_entry 760KB 761KB [ 720.839337] pde_opener 11KB 58KB [ 720.844717] seq_file 304KB 539KB [ 720.854796] sigqueue 55KB 55KB [ 720.863580] kernfs_node_cache 18240KB 18254KB [ 720.873905] mnt_cache 190KB 192KB [ 720.882506] filp 7025KB 7631KB [ 720.887875] names_cache 136310KB 136310KB [ 720.898017] iint_cache 40KB 71KB [ 720.907748] key_jar 4KB 11KB [ 720.917869] uts_namespace 5KB 7KB [ 720.926949] nsproxy 2KB 7KB [ 720.937222] vm_area_struct 3518KB 5139KB [ 720.945960] mm_struct 497KB 1001KB [ 720.956228] fs_cache 150KB 364KB [ 720.965225] files_cache 550KB 765KB [ 720.975563] signal_cache 1081KB 1746KB [ 720.984658] sighand_cache 612KB 617KB [ 720.995642] task_struct 6779KB 6836KB [ 721.004489] cred_jar 1898KB 2096KB [ 721.014714] anon_vma_chain 1171KB 1803KB [ 721.023894] anon_vma 161KB 269KB [ 721.034054] pid 87KB 264KB [ 721.040957] Acpi-Operand 156KB 202KB [ 721.047026] Acpi-ParseExt 8KB 11KB [ 721.060838] Acpi-Parse 41KB 47KB [ 721.066826] Acpi-State 52KB 63KB [ 721.075750] Acpi-Namespace 21KB 27KB [ 721.083283] numa_policy 0KB 3KB [ 721.088758] debug_objects_cache 1257KB 1619KB [ 721.097786] trace_event_file 297KB 298KB [ 721.104978] ftrace_event_field 398KB 401KB [ 721.114451] pool_workqueue 128KB 128KB [ 721.122640] page->ptl 563KB 1047KB [ 721.128699] kmalloc-2097152 2050KB 2050KB [ 721.138619] kmalloc-524288 2056KB 2056KB [ 721.147974] kmalloc-262144 1290KB 1290KB [ 721.157702] kmalloc-131072 650KB 650KB [ 721.166511] kmalloc-65536 2112KB 2178KB [ 721.176303] kmalloc-32768 1815KB 1815KB [ 721.184395] kmalloc-16384 1155KB 1155KB [ 721.194351] kmalloc-8192 4455KB 4496KB [ 721.202800] kmalloc-4096 21993KB 22015KB [ 721.208731] kmalloc-2048 12692KB 13444KB [ 721.218094] kmalloc-1024 7984KB 8008KB [ 721.227375] kmalloc-512 15037KB 15037KB [ 721.237706] kmalloc-256 4623KB 5343KB [ 721.245824] kmalloc-128 998KB 1488KB [ 721.255571] kmalloc-96 3677KB 4020KB [ 721.263886] kmalloc-64 2511KB 4236KB [ 721.273621] kmalloc-32 1877KB 2445KB [ 721.282576] kmalloc-192 1707KB 2288KB [ 721.288597] kmem_cache 177KB 183KB [ 721.297919] Out of memory (oom_kill_allocating_task): Kill process 12341 (systemd-journal) score 0 or sacrifice child [ 721.316587] Killed process 12341 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:0kB, shmem-rss:1808kB [ 721.329176] oom_reaper: reaped process 12341 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1808kB [ 721.461126] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 721.475383] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 721.505770] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 721.517392] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 721.528111] systemd[1]: Stopped Journal Service. [ 721.547765] systemd[1]: Starting Journal Service... [ 721.747781] systemd-journald[12817]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 722.251788] systemd[1]: Started Journal Service. [ 722.499018] Bluetooth: hci4: command 0x0419 tx timeout 13:07:41 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x80000001, 0x4, 0x4000}) 13:07:41 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x5, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x5, 0x0, 0x3, {0x1, @raw_data="225f50a7111826e3f01cee0d662d67ee0f87bfb36ff72ad5557fee03318ba430b2368e64016682d2acfdfa7c50088ff06e4fee874ff0229e99fc8fd779c4fc8bbc42acb0a2d2125f8b8567b6b1b6b8f1fe206acc829f12c4d840bc13182560a27a99ee25b43c0f99df794e30a1641db33485457013fb1ec1a6d80df6437e2dac1f6785e1b019907af06eed8ca4beeb2da415f857e0f545c373e30c8db32efe9324c35eec43e2143334ff8122fe8b2cbdd0d4c0a3ace8931800aa9740eb035f0911175856dcc08415"}, 0x25}) socketpair(0x28, 0x2, 0x9fa, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0xffffffff}], 0x0, 0x0, 0x8}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000008}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x5, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x5, 0x0, 0x3, {0x1, @raw_data="225f50a7111826e3f01cee0d662d67ee0f87bfb36ff72ad5557fee03318ba430b2368e64016682d2acfdfa7c50088ff06e4fee874ff0229e99fc8fd779c4fc8bbc42acb0a2d2125f8b8567b6b1b6b8f1fe206acc829f12c4d840bc13182560a27a99ee25b43c0f99df794e30a1641db33485457013fb1ec1a6d80df6437e2dac1f6785e1b019907af06eed8ca4beeb2da415f857e0f545c373e30c8db32efe9324c35eec43e2143334ff8122fe8b2cbdd0d4c0a3ace8931800aa9740eb035f0911175856dcc08415"}, 0x25}) (async) socketpair(0x28, 0x2, 0x9fa, &(0x7f0000000000)) (async) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0xffffffff}], 0x0, 0x0, 0x8}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) (async) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000008}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) 13:07:41 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000200)={0x1, @win={{0x5, 0x2906, 0x9, 0x1}, 0x9, 0xfffffffc, &(0x7f0000000340)={{0x3, 0x10000, 0x9, 0x8}, &(0x7f0000000300)={{0x1, 0x800, 0x6, 0x10000}}}, 0x4, &(0x7f0000000380)="6447629fa1e7aa630001728b1cc39b38329651df84609874e040c448f980713e9cc3f139fb90c17e407b4dd82d6d867391c31201b74bf6aff5832a47f5879b046367f248cc9c2177611ba89ad2475cb5a311fdd0746b139b061e36a3e11bbf64e6ca8cdcfd4c1250ed9aceda7f7aa3845bff6fa35c7d7913768104665472340e3a9054f93105c6f888cf570ddbeb787a40de256896235f26e868f68d70e0259ca10f207a7e3dca4b052d8f850ebb847f6c9e7802c28a374c6b1f27bc8fe2c552d3af7ce75589bfcb", 0x3f}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x9bb3}]}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000140)=@multiplanar_userptr={0xb2c2, 0x6, 0x4, 0x0, 0x1, {0x0, 0x2710}, {0x4, 0x8, 0xc8, 0x40, 0x2, 0x8, "15e82d36"}, 0x5, 0x2, {&(0x7f00000000c0)=[{0x3, 0x6, {&(0x7f0000000040)}, 0x1455}, {0xffffffff, 0x6, {&(0x7f0000000080)}, 0x8}]}, 0xffff}) 13:07:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_SSID={0x15, 0x34, @random="93388aaa8e929b9ccdf5660a6a3b123fd4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xbb, 0x401, 0x34324948, 0x9, 0x3, 0x9, 0x7, 0x40000, 0x1, 0x0, 0x1, 0x7}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 13:07:41 executing program 4: socketpair(0x1e, 0x3, 0x7, &(0x7f0000000000)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:07:41 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:07:41 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x80000001, 0x4, 0x4000}) 13:07:41 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000180)={0xff, 0x0, 0x1, "f754b5f18408c11696b9754deca3043d093423d2d53ff337efd4069749f16f86", 0x31384142}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000040)={0x2, 0x10001, 0x0, {0x2, @pix_mp={0x4, 0x0, 0x47504a50, 0x7, 0x2, [{0x2, 0x5}, {0x40, 0x81}, {0x8}, {0x89ac, 0x7dcb}, {0x6, 0x7}, {0x8001, 0x1ff}, {0x7f5c, 0x200}, {0x8, 0x4}], 0x0, 0x1, 0x1, 0x1}}, 0x5}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:07:41 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x80000001, 0x4, 0x4000}) 13:07:41 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x80000001, 0x4, 0x4000}) 13:07:42 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:07:42 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000180)={0xff, 0x0, 0x1, "f754b5f18408c11696b9754deca3043d093423d2d53ff337efd4069749f16f86", 0x31384142}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000180)={0xff, 0x0, 0x1, "f754b5f18408c11696b9754deca3043d093423d2d53ff337efd4069749f16f86", 0x31384142}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000040)={0x2, 0x10001, 0x0, {0x2, @pix_mp={0x4, 0x0, 0x47504a50, 0x7, 0x2, [{0x2, 0x5}, {0x40, 0x81}, {0x8}, {0x89ac, 0x7dcb}, {0x6, 0x7}, {0x8001, 0x1ff}, {0x7f5c, 0x200}, {0x8, 0x4}], 0x0, 0x1, 0x1, 0x1}}, 0x5}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000040)={0x2, 0x10001, 0x0, {0x2, @pix_mp={0x4, 0x0, 0x47504a50, 0x7, 0x2, [{0x2, 0x5}, {0x40, 0x81}, {0x8}, {0x89ac, 0x7dcb}, {0x6, 0x7}, {0x8001, 0x1ff}, {0x7f5c, 0x200}, {0x8, 0x4}], 0x0, 0x1, 0x1, 0x1}}, 0x5}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:07:42 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x80000001, 0x4, 0x4000}) [ 729.872218] oom_reaper: reaped process 12829 (syz-executor.0), now anon-rss:0kB, file-rss:14332kB, shmem-rss:16kB [ 729.910303] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 729.926281] in:imklog cpuset=/ mems_allowed=0-1 [ 729.931020] CPU: 1 PID: 12496 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 729.938466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 729.947902] Call Trace: [ 729.950510] dump_stack+0x1fc/0x2ef [ 729.954234] dump_header+0x15d/0xc3f [ 729.957933] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 729.963034] ? ___ratelimit+0x319/0x590 [ 729.967098] oom_kill_process.cold+0x10/0x692 [ 729.968586] syz-executor.0: vmalloc: allocation failure, allocated 1760251904 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 729.971590] ? check_preemption_disabled+0x41/0x280 [ 729.988931] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 729.990370] ? has_intersects_mems_allowed+0x1d6/0x290 [ 730.000707] out_of_memory+0x1072/0x1390 [ 730.004760] ? oom_killer_disable+0x270/0x270 [ 730.009254] ? mutex_trylock+0x15f/0x1a0 [ 730.013328] __alloc_pages_nodemask+0x23a2/0x2890 [ 730.018169] ? find_get_entry+0x4cd/0x8a0 [ 730.022314] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 730.027172] alloc_pages_current+0x193/0x2a0 [ 730.031579] filemap_fault+0x146e/0x2180 [ 730.035649] ext4_filemap_fault+0x84/0xb0 [ 730.039795] __do_fault+0x10b/0x4b0 [ 730.043429] __handle_mm_fault+0x273b/0x41c0 [ 730.047828] ? vm_insert_page+0x9c0/0x9c0 [ 730.051985] ? lock_downgrade+0x720/0x720 [ 730.056219] ? check_preemption_disabled+0x41/0x280 [ 730.061230] handle_mm_fault+0x436/0xb10 [ 730.065285] __do_page_fault+0x68e/0xd60 [ 730.069363] ? trace_hardirqs_off_caller+0x6e/0x210 [ 730.074398] ? spurious_fault+0x840/0x840 [ 730.078567] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 730.083410] ? page_fault+0x8/0x30 [ 730.086938] page_fault+0x1e/0x30 [ 730.090382] RIP: 0033:0x7f096a8a722d [ 730.094091] Code: Bad RIP value. [ 730.097552] RSP: 002b:00007f0968243580 EFLAGS: 00010293 [ 730.102903] RAX: 0000000000000078 RBX: 0000000000000000 RCX: 00007f096a8a722d [ 730.110163] RDX: 0000000000001fa0 RSI: 00007f0968243da0 RDI: 0000000000000004 [ 730.117428] RBP: 0000558670dd99d0 R08: 0000000000000000 R09: 0000000004000001 [ 730.124691] R10: 0000000000000001 R11: 0000000000000293 R12: 00007f0968243da0 [ 730.131948] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f0968243ddd [ 730.139227] CPU: 0 PID: 12829 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 730.141203] Mem-Info: [ 730.147115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 730.149626] active_anon:17508 inactive_anon:12978 isolated_anon:0 [ 730.149626] active_file:13 inactive_file:22 isolated_file:0 [ 730.149626] unevictable:0 dirty:0 writeback:0 unstable:0 [ 730.149626] slab_reclaimable:15250 slab_unreclaimable:118807 [ 730.149626] mapped:22326 shmem:13602 pagetables:596 bounce:0 [ 730.149626] free:13808 free_pcp:868 free_cma:0 [ 730.159147] Call Trace: [ 730.159174] dump_stack+0x1fc/0x2ef [ 730.159207] warn_alloc.cold+0x7b/0x18f [ 730.194279] Node 0 active_anon:68872kB inactive_anon:19324kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21620kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 730.195009] ? zone_watermark_ok_safe+0x260/0x260 [ 730.198662] Node 1 active_anon:1160kB inactive_anon:32588kB active_file:8kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1436kB dirty:0kB writeback:0kB shmem:32788kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 730.202582] ? retint_kernel+0x2d/0x2d [ 730.230198] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 730.235015] __vmalloc_area_node+0x4fd/0x780 [ 730.262006] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 730.265852] ? __vmalloc_node_range+0x180/0x180 [ 730.293701] Node 0 DMA32 free:17660kB min:35996kB low:44992kB high:53988kB active_anon:68972kB inactive_anon:19324kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7712kB pagetables:2216kB bounce:0kB free_pcp:1860kB local_pcp:1620kB free_cma:0kB [ 730.296327] ? _raw_spin_unlock+0x29/0x40 [ 730.301349] lowmem_reserve[]: 0 0 1 1 1 [ 730.305981] ? __get_vm_area_node+0x2e2/0x3a0 [ 730.335082] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 730.339182] __vmalloc_node_range+0xed/0x180 [ 730.339201] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 730.343145] lowmem_reserve[]: 0 0 0 0 0 [ 730.347635] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 730.374991] Node 1 Normal free:26696kB min:53876kB low:67344kB high:80812kB active_anon:1160kB inactive_anon:32588kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:128kB pagetables:168kB bounce:0kB free_pcp:1596kB local_pcp:4kB free_cma:0kB [ 730.377947] vmalloc_user+0x70/0xe0 [ 730.382268] lowmem_reserve[]: 0 0 0 0 0 [ 730.386205] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 730.391563] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 730.420097] vb2_vmalloc_alloc+0xb3/0x2f0 [ 730.420114] __vb2_queue_alloc+0x472/0xe60 [ 730.420138] vb2_core_create_bufs+0x273/0x7e0 [ 730.420154] ? __vb2_queue_free+0x870/0x870 [ 730.423794] Node 0 DMA32: 1750*4kB (ME) 797*8kB (UME) 206*16kB (UME) 23*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17408kB [ 730.427768] ? _raw_spin_unlock+0x29/0x40 [ 730.432104] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 730.445255] ? __mutex_lock+0x368/0x1190 [ 730.445273] vb2_create_bufs+0x332/0x620 [ 730.445292] ? mark_held_locks+0xf0/0xf0 [ 730.449438] Node 1 Normal: 216*4kB (UME) 183*8kB (M) 133*16kB (M) 109*32kB (UM) 53*64kB (ME) 10*128kB (UME) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 2*4096kB (U) = 26696kB [ 730.453649] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 730.458144] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 730.462980] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 730.462996] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 730.463020] v4l_create_bufs+0xb2/0x160 [ 730.477168] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 730.480761] __video_do_ioctl+0x49a/0xcd0 [ 730.480783] ? v4l_querycap+0x340/0x340 [ 730.480802] ? __might_fault+0x192/0x1d0 [ 730.491816] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 730.495936] ? v4l_querycap+0x340/0x340 [ 730.500002] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 730.504037] video_usercopy+0x13f/0xfa0 [ 730.520888] 13640 total pagecache pages [ 730.525970] ? v4l_enumstd+0x60/0x60 [ 730.535009] 0 pages in swap cache [ 730.540169] ? do_futex+0x171/0x1880 [ 730.540184] ? mark_held_locks+0xf0/0xf0 [ 730.540203] ? debug_check_no_obj_freed+0x201/0x490 [ 730.545485] Swap cache stats: add 0, delete 0, find 0/0 [ 730.549472] ? video_usercopy+0xfa0/0xfa0 [ 730.549484] v4l2_ioctl+0x147/0x1a0 [ 730.549498] ? video_devdata+0xa0/0xa0 [ 730.558138] Free swap = 0kB [ 730.562276] do_vfs_ioctl+0xcdb/0x12e0 [ 730.562293] ? lock_downgrade+0x720/0x720 [ 730.562314] ? check_preemption_disabled+0x41/0x280 [ 730.566260] Total swap = 0kB [ 730.570310] ? ioctl_preallocate+0x200/0x200 [ 730.570328] ? __fget+0x356/0x510 [ 730.570344] ? do_dup2+0x450/0x450 [ 730.579789] 2097051 pages RAM [ 730.583304] ? __se_sys_futex+0x298/0x3b0 [ 730.591878] 0 pages HighMem/MovableOnly [ 730.595945] ksys_ioctl+0x9b/0xc0 [ 730.599915] 369649 pages reserved [ 730.603620] __x64_sys_ioctl+0x6f/0xb0 [ 730.607058] 0 pages cma reserved [ 730.610854] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 730.610868] do_syscall_64+0xf9/0x620 [ 730.610887] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 730.614920] Unreclaimable slab info: [ 730.619932] RIP: 0033:0x7f68c24140f9 [ 730.619948] Code: Bad RIP value. [ 730.619955] RSP: 002b:00007f68c0986168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 730.619971] RAX: ffffffffffffffda RBX: 00007f68c2533f80 RCX: 00007f68c24140f9 [ 730.625319] Name Used Total [ 730.629465] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000006 [ 730.629473] RBP: 00007f68c246fae9 R08: 0000000000000000 R09: 0000000000000000 [ 730.629480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 730.629488] R13: 00007fff6155d44f R14: 00007f68c0986300 R15: 0000000000022000 [ 730.629744] net_ratelimit: 4 callbacks suppressed [ 730.629750] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 730.633199] pid_2 58KB 152KB [ 730.637306] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 730.640369] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 730.644206] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 730.648343] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 730.653386] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 730.656386] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 730.706449] Mem-Info: [ 730.707430] batadv_tt_change_cache 0KB 3KB [ 730.732152] active_anon:17508 inactive_anon:12978 isolated_anon:0 [ 730.732152] active_file:13 inactive_file:22 isolated_file:0 [ 730.732152] unevictable:0 dirty:0 writeback:0 unstable:0 [ 730.732152] slab_reclaimable:15250 slab_unreclaimable:118807 [ 730.732152] mapped:22326 shmem:13602 pagetables:596 bounce:0 [ 730.732152] free:13808 free_pcp:858 free_cma:0 [ 730.732885] batadv_tl_cache 5KB 12KB [ 730.738315] Node 0 active_anon:68872kB inactive_anon:19324kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21620kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 730.745666] TIPC 12KB 15KB [ 730.745686] SCTPv6 16KB 24KB [ 730.745697] SCTP 3KB 3KB [ 730.767409] Node 1 active_anon:1156kB inactive_anon:32588kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1380kB dirty:0kB writeback:0kB shmem:32788kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 730.767642] DCCPv6 17KB 22KB [ 730.777176] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 730.779012] DCCP 16KB 21KB [ 730.779054] RXRPC 13KB 13KB [ 730.779063] rxrpc_call_jar 90KB 94KB [ 730.779079] bridge_fdb_cache 11KB 15KB [ 730.797986] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 730.804473] fib6_nodes 186KB 188KB [ 730.804488] ip6_dst_cache 216KB 326KB [ 730.818485] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 730.824060] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 730.826415] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 730.832421] RAWv6 81KB 81KB [ 730.878262] Node 0 DMA32 free:17408kB min:35996kB low:44992kB high:53988kB active_anon:68864kB inactive_anon:19324kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7712kB pagetables:2212kB bounce:0kB free_pcp:1828kB local_pcp:232kB free_cma:0kB [ 730.910441] UDPv6 37KB 41KB [ 730.918072] lowmem_reserve[]: 0 0 1 1 1 [ 730.953262] TCPv6 36KB 42KB [ 730.976861] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 730.990668] nf_conntrack 10KB 18KB [ 730.997226] lowmem_reserve[]: 0 0 0 0 0 [ 731.004853] t10_alua_lu_gp_cache 0KB 3KB [ 731.005565] Node 1 Normal free:26696kB min:53876kB low:67344kB high:80812kB active_anon:1156kB inactive_anon:32588kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:128kB pagetables:168kB bounce:0kB free_pcp:1596kB local_pcp:1592kB free_cma:0kB [ 731.017710] sd_ext_cdb 0KB 7KB [ 731.025305] lowmem_reserve[]: 0 0 0 0 0 [ 731.041905] scsi_sense_cache 1056KB 1060KB [ 731.068359] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 731.083357] virtio_scsi_cmd 16KB 16KB [ 731.117866] Node 0 DMA32: 1750*4kB (ME) 797*8kB (UME) 206*16kB (UME) 23*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17408kB [ 731.125008] sgpool-128 8KB 8KB [ 731.161979] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 731.168754] sgpool-64 4KB 12KB [ 731.190124] Node 1 Normal: 216*4kB (UME) 183*8kB (M) 133*16kB (M) 109*32kB (UM) 53*64kB (ME) 10*128kB (UME) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 2*4096kB (U) = 26696kB [ 731.201705] sgpool-32 2KB 15KB [ 731.208111] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 731.217597] sgpool-16 1KB 7KB [ 731.231025] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 731.241447] sgpool-8 0KB 7KB [ 731.247274] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 731.255581] mqueue_inode_cache 12KB 22KB [ 731.265069] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 731.266140] bio_post_read_ctx 14KB 15KB [ 731.276103] 13626 total pagecache pages [ 731.283825] bio-2 14KB 15KB [ 731.296059] 0 pages in swap cache [ 731.303926] jfs_mp 7KB 7KB [ 731.304579] Swap cache stats: add 0, delete 0, find 0/0 [ 731.309991] cifs_small_rq 15KB 16KB [ 731.310001] cifs_request 67KB 67KB [ 731.310010] cifs_mpx_ids 0KB 7KB [ 731.310044] nfs_commit_data 3KB 14KB [ 731.321700] Free swap = 0kB [ 731.333095] nfs_write_data 34KB 44KB [ 731.336390] Total swap = 0kB [ 731.339320] ext4_system_zone 1KB 7KB [ 731.339353] bio-1 1KB 7KB [ 731.348456] 2097051 pages RAM [ 731.356774] pid_namespace 3KB 7KB [ 731.364442] 0 pages HighMem/MovableOnly [ 731.366973] rpc_buffers 17KB 25KB [ 731.372345] 369649 pages reserved [ 731.372352] 0 pages cma reserved [ 731.404973] rpc_tasks 2KB 7KB [ 731.410405] UNIX 693KB 693KB [ 731.415780] tcp_bind_bucket 1KB 4KB [ 731.428494] ip_fib_trie 27KB 31KB [ 731.433971] ip_fib_alias 131KB 134KB [ 731.443150] ip_dst_cache 15KB 48KB [ 731.451917] RAW 48KB 52KB [ 731.457386] UDP 54KB 60KB [ 731.468041] TCP 19KB 22KB [ 731.477600] hugetlbfs_inode_cache 3KB 15KB [ 731.486951] fscache_cookie_jar 1KB 11KB [ 731.495822] eventpoll_pwq 30KB 47KB [ 731.505223] eventpoll_epi 56KB 66KB [ 731.513927] inotify_inode_mark 24KB 55KB [ 731.527546] request_queue 199KB 199KB [ 731.536173] blkdev_requests 1KB 3KB [ 731.552969] blkdev_ioc 33KB 34KB [ 731.558358] bio-0 1453KB 1473KB [ 731.575294] biovec-max 1674KB 1691KB [ 731.587215] biovec-64 1395KB 1441KB [ 731.597628] biovec-16 121KB 123KB [ 731.614578] bio_integrity_payload 1KB 8KB [ 731.625152] khugepaged_mm_slot 12KB 34KB [ 731.636940] uid_cache 0KB 4KB [ 731.647069] dmaengine-unmap-2 0KB 3KB [ 731.664083] skbuff_fclone_cache 111KB 243KB [ 731.672815] skbuff_head_cache 7505KB 7507KB [ 731.678196] configfs_dir_cache 3KB 11KB [ 731.694815] file_lock_cache 70KB 186KB [ 731.717088] file_lock_ctx 9KB 11KB [ 731.723332] fsnotify_mark_connector 10KB 31KB [ 731.740597] net_namespace 61KB 61KB [ 731.745988] shmem_inode_cache 8122KB 8392KB [ 731.763332] task_delay_info 203KB 407KB [ 731.772779] taskstats 64KB 191KB [ 731.778161] proc_dir_entry 760KB 761KB [ 731.801811] pde_opener 10KB 58KB [ 731.807212] seq_file 310KB 539KB [ 731.812636] sigqueue 54KB 55KB [ 731.818006] kernfs_node_cache 18239KB 18250KB [ 731.831565] mnt_cache 190KB 192KB [ 731.836953] filp 7242KB 7631KB [ 731.845523] names_cache 136433KB 136493KB [ 731.856095] iint_cache 47KB 71KB [ 731.864642] key_jar 4KB 11KB [ 731.875024] uts_namespace 4KB 7KB [ 731.883769] nsproxy 1KB 7KB [ 731.894052] vm_area_struct 3456KB 5112KB [ 731.902603] mm_struct 445KB 962KB [ 731.907981] fs_cache 154KB 364KB [ 731.921808] files_cache 516KB 765KB [ 731.927197] signal_cache 1063KB 1746KB [ 731.934215] sighand_cache 564KB 617KB [ 731.946082] task_struct 6470KB 6470KB [ 731.953108] cred_jar 2021KB 2096KB [ 731.965212] anon_vma_chain 1121KB 1803KB [ 731.972439] anon_vma 144KB 269KB [ 731.977817] pid 83KB 264KB [ 731.991576] Acpi-Operand 156KB 202KB [ 731.996964] Acpi-ParseExt 8KB 11KB [ 732.002528] Acpi-Parse 41KB 47KB [ 732.007895] Acpi-State 52KB 63KB [ 732.014821] Acpi-Namespace 21KB 27KB [ 732.020820] numa_policy 0KB 3KB [ 732.027186] debug_objects_cache 1237KB 1607KB [ 732.033302] trace_event_file 297KB 298KB [ 732.039490] ftrace_event_field 398KB 401KB [ 732.045229] pool_workqueue 128KB 128KB [ 732.050868] page->ptl 510KB 1047KB [ 732.056546] kmalloc-2097152 2050KB 2050KB [ 732.062165] kmalloc-524288 2056KB 2056KB [ 732.067606] kmalloc-262144 1290KB 1290KB [ 732.073075] kmalloc-131072 650KB 650KB [ 732.078688] kmalloc-65536 2112KB 2178KB [ 732.084309] kmalloc-32768 1815KB 1815KB [ 732.089903] kmalloc-16384 1188KB 1188KB [ 732.095442] kmalloc-8192 4455KB 4496KB [ 732.100969] kmalloc-4096 22231KB 22253KB [ 732.106532] kmalloc-2048 12611KB 13413KB [ 732.112006] kmalloc-1024 7786KB 8008KB [ 732.117523] kmalloc-512 15446KB 15446KB [ 732.126096] kmalloc-256 4555KB 5321KB [ 732.133110] kmalloc-128 993KB 1488KB [ 732.141851] kmalloc-96 3556KB 4020KB [ 732.147301] kmalloc-64 2428KB 4228KB [ 732.154336] kmalloc-32 1868KB 2445KB [ 732.162927] kmalloc-192 1703KB 2288KB [ 732.168302] kmem_cache 177KB 183KB [ 732.175699] Out of memory (oom_kill_allocating_task): Kill process 12496 (in:imklog) score 0 or sacrifice child [ 732.189251] Killed process 12484 (rsyslogd) total-vm:254332kB, anon-rss:728kB, file-rss:0kB, shmem-rss:0kB [ 732.208281] oom_reaper: reaped process 12484 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 13:07:52 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000180)={0xff, 0x0, 0x1, "f754b5f18408c11696b9754deca3043d093423d2d53ff337efd4069749f16f86", 0x31384142}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000040)={0x2, 0x10001, 0x0, {0x2, @pix_mp={0x4, 0x0, 0x47504a50, 0x7, 0x2, [{0x2, 0x5}, {0x40, 0x81}, {0x8}, {0x89ac, 0x7dcb}, {0x6, 0x7}, {0x8001, 0x1ff}, {0x7f5c, 0x200}, {0x8, 0x4}], 0x0, 0x1, 0x1, 0x1}}, 0x5}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:07:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:07:52 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x80000001, 0x4, 0x4000}) 13:07:52 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x59565955, 0x0, 0x0, [{}, {}, {0x7498}, {}, {}, {}, {0x0, 0xfffffffc}], 0x0, 0x0, 0x0, 0x2}}) 13:07:52 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000200)={0x1, @win={{0x5, 0x2906, 0x9, 0x1}, 0x9, 0xfffffffc, &(0x7f0000000340)={{0x3, 0x10000, 0x9, 0x8}, &(0x7f0000000300)={{0x1, 0x800, 0x6, 0x10000}}}, 0x4, &(0x7f0000000380)="6447629fa1e7aa630001728b1cc39b38329651df84609874e040c448f980713e9cc3f139fb90c17e407b4dd82d6d867391c31201b74bf6aff5832a47f5879b046367f248cc9c2177611ba89ad2475cb5a311fdd0746b139b061e36a3e11bbf64e6ca8cdcfd4c1250ed9aceda7f7aa3845bff6fa35c7d7913768104665472340e3a9054f93105c6f888cf570ddbeb787a40de256896235f26e868f68d70e0259ca10f207a7e3dca4b052d8f850ebb847f6c9e7802c28a374c6b1f27bc8fe2c552d3af7ce75589bfcb", 0x3f}}) (async, rerun: 64) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x9bb3}]}}) (async, rerun: 64) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000140)=@multiplanar_userptr={0xb2c2, 0x6, 0x4, 0x0, 0x1, {0x0, 0x2710}, {0x4, 0x8, 0xc8, 0x40, 0x2, 0x8, "15e82d36"}, 0x5, 0x2, {&(0x7f00000000c0)=[{0x3, 0x6, {&(0x7f0000000040)}, 0x1455}, {0xffffffff, 0x6, {&(0x7f0000000080)}, 0x8}]}, 0xffff}) 13:07:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_SSID={0x15, 0x34, @random="93388aaa8e929b9ccdf5660a6a3b123fd4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xbb, 0x401, 0x34324948, 0x9, 0x3, 0x9, 0x7, 0x40000, 0x1, 0x0, 0x1, 0x7}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) 13:07:52 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 13:07:52 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x59565955, 0x0, 0x0, [{}, {}, {0x7498}, {}, {}, {}, {0x0, 0xfffffffc}], 0x0, 0x0, 0x0, 0x2}}) 13:07:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) socketpair(0x10, 0x800, 0x20, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000c80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000004500)={0xb20, r2, 0x0, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_NAN_FUNC={0x2c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x0, 0xe, 0x0, 0x1, [{0x0, 0x0, "ae90be9e0add9e64861eb785b0ebe4c645fc18b5ab13f77ede18598808dbe8315472f1072384d2af2d920cb1c7ea23d24f9239866e86fe7d0e7c20dbe495ff2ae06760ef3bc0ba61680953d2990eecde1b38b9a093638f6e9947fb51a34771517a7d20d3fc287e2c7a937fdc8b3156e4609aa71f36e207977a1d0b68d4da6fc8189df00dfcdef48d7621554c3a6882ca8abcb92db96374c2a987e41925a3c6529f272f322b5d3f8a25105f03ceab5a46636553c380557b0a2e2995d67e3e44dd71b11e5ca571e6c4873ceaa2bdb40c2052c1d1c001f37002df81182f817cbaae20"}, {0x0, 0x0, "21123634c2848f955866c04e54900fbf0b8cb91ee412303c62488b695a7d951441de64e002dd85e8f3259fd13da65a173d408918f96832fe1b3e6eef9742dfaee6a6ec67c0954b81f1c48bbda6358c19f59762f8e3fbaeb77a6308789ba5cd0c02"}]}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "4b858fc4b181"}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x9}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x5}]}, @NL80211_ATTR_NAN_FUNC={0x28, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x3}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_SERVICE_ID={0x0, 0x2, "5441faefdd34"}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x9}]}, @NL80211_ATTR_NAN_FUNC={0x43c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xfb}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xe2}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x1}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x6}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x414, 0xe, 0x0, 0x1, [{0x28, 0x0, "eb6f9075cc56db86e1baecccf174d9cfde3ab93807fd3a9885ad5d810d1f5c306eda9411"}, {0xc2, 0x0, "817bc05a7fe8f82a2c12cedee2a6ba2e02499ed56d70ee652d6b838f5b4f21d51f57eea130663abaec08a5f7561f7755b96422d934fc116ff4d4d225ebf1a5fbdc326064b7d5fafb5e8cbfe70f7c199cd1ab997dc00a7bac6049d762c5d2d9bf3bad80387a2050a388b8bced4082cf67f44d82a89b0de57e38e913be356159075aecb7887ccf79620499c70273c34876bbc440f56552f19e71e074465c437398767f9f1746565e3aa1df91b651af4da4512b78bdd92a7c305d26c5ec5fff"}, {0xe9, 0x0, "3cc95a713b727a45ad3468c3af896ab8ebb82050a2355affbd752315a635f39133c7a659149b6ad1b942e06d3ab4f86eb57b9ac5398ae99c987aec7a96e8bfeca831eaf7241b99c7c34ffe5517c4dd9c0bf443b81edd255d35112cd9a3fccac0e5ad7585cf2c69dd4425564a13b10cb1f47a65e11d47b54becb06a867d25d62c4a4444a0a8458356c9126f4c54bd5c74374ce5aab3e1bc25825dde0c40d5450e4cdf1abb49480ba12858dbff28dfee1a6a1e84570c671ae8935a4fe41910e0ac9460ab158d56fd698eb60819469d24b5e51d8cdf471a5a624fe9a85411cf5a98528e6f4f3d"}, {0xcc, 0x0, "b4ec4e3ddb8c4ccd69b8fe21dfe57d3c8682f58c35e2cc58b644c430dccdf1974613e33ece3e2baa7b14ab9b0a1af4749c3bb93dad499f4907114bab47b0bae20b301c4bf63c1a7fdb300c4ba379a02068d0b42bacb0538a92967b5e355e906697e2b1ff2af5743b9319fb0ac4998d0d50ff2d44c7f63e7562a9734b88cb7bebc301db4c338792e9d260f55fa236331fab3705007efd26ce4a441cd780bd492648f034dba7e44ba674b37a3c56dd81c0972dced07db6f41f450fd6c5b09b0828170c0e89741b7cbd"}, {0xd0, 0x0, "9afc7779b11e7fcd8f4ad0583e44150d113eb3d1a59d7e33bae191721b09622823557f5b03f579fe896dba18883ed4da4272cb034425bc69d8585d0a1caf87fb626af7a27328fbbe13076d1d0c41b6ddcd26000bed76420ede7dd93d347dae439b0253f04d6ed0f556bbfa23dd1945630d8db7bc13f67e7da2aff13ba6822c1f8e0dfe56a3a69beb0e8271de15d2ecdd59cb4f6d0c22e0a36a8a7d07c2f3a12421bd8f9e6a5361e566beceaccf8b754f71cef6d0008998fcb3af5fc604dfcd4b45409e006936cedd674e3843"}, {0x60, 0x0, "78148ce6ecfe6e3379c19383ce0674193735a1dfd8f3c74f15369d98ce1403192d8015aff2ab6c89ab38d763edfc23e5ad3401bb09d84a5ac8f1439dad529310c053c28d622b30c10ab0b27685fa60f9c2a9394fcb74aa7efe25321a"}, {0x39, 0x0, "c4ccb0c052ee35d55264cb69faf95c9f50d7441a6bcbb6b872185464ba2823bb46f7ca53161628318bc52a745b9f702776e425fe57"}]}]}, @NL80211_ATTR_NAN_FUNC={0x18c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_SRF={0x17c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x58, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xffffff40}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x3f}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x0, 0x7, 0x3f}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x0, 0x7, 0x8}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST, @NL80211_NAN_FUNC_SERVICE_ID={0x0, 0x2, "0503df4ad2be"}, @NL80211_NAN_FUNC_TYPE]}, @NL80211_ATTR_NAN_FUNC={0x4c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x1}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xba}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xfffffe01}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "3fc5cd4bb006"}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x1f}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x9}]}, @NL80211_ATTR_NAN_FUNC={0x2fc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x2f8, 0xd, 0x0, 0x1, [{0x6f, 0x0, "ace5a4ae1586814e992fac00dbbc5277c5fc14a21823d8c3d5c11fefdfc1eb7261f2c26f2dc20ba7c15ad198bbc97de345ecc8b41a2c7e4f37b4ff4236867267be18e94f38b7249f539c4115785ec25a417ae2b111ab004f03a07b2f875d47e7f64daf11f666caa585e6a7"}, {0xd2, 0x0, "b39e1ff144fa583913392f556b563e959c5603e2e145909faa28e9a18434c28829b6c8c7bb6a236dc63285a56f3fc63da1944a746938cb01ba9308bc7cd5e03da4d879eca3e69f107046819a530670607a1f8b0aafceb1277611140b4cef23d2f7e0d9167894a177ec0e6a90f7f54d865ee325c67a0192c01b1f1cdf2736a1e28d53d67ae1ee90e3729e35eae6ba83bb3fbd8c6b087ad8c2e89600e3550ced9098b7de8bd97ed7b3ef730129e0bffd641074bed2ae6f33b9c83ac69fbef713ca754a2e4d187d5aae3a6fecf9163b"}, {0x9b, 0x0, "c7c1fc772dc5ff53d0b36c647aa41ef62cea8bf022efdb6371810326503a6ad17205057a4d56ba4a9b3a20cb715a5044d483cf13215def215aa124b8dd0dbc80740ca635e953a93bb40cc93c0c24229e7769d4469ad1004d85d67c490ca9d017c151857362ef3410a99d8bc1696fb3657f25ae30f8b5580159698a378f27c0ca0e7973ffdee226610094cd36fbaca48eb846eabfb1ec5c"}, {0x6, 0x0, "c372"}, {0x75, 0x0, "ff348c6a07c632373ff22d94236fc7f0410df7879186897948f48005afe2aff9ea2fb216bb2f8c63e28b77194e1aa5666e17929e2104624582a532d344485019b913c3e9192413cec61e1914adfd987cbae4c0ee5d5abdf863c78fdef13885915969a03feb74f19444e7620c39a18dd4bd"}, {0x94, 0x0, "a28fd8105f49cd0bb36bda89519cdb3e2dd47aeb4c4e0de996ddc9500f75aa295c25932d631dbf72968f77d57c2e87dc231e08fec9d5709aa08af66d9e53eb713a7f31fb250d71d72e8d7499371215c5e398d68a868b82296d51d577036a639706e572b8b71ec45ce6ef54b6df5c2c3377c658ea2d46b20f08d1ad1318127ccd56d363d252af8670fdd78a69d9d5fdd2"}]}]}, @NL80211_ATTR_NAN_FUNC={0x188, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x1}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "0800b6ecccf9"}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x16}, @NL80211_NAN_FUNC_SRF={0x150, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x34, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1f}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x1f}]}]}, 0xb20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 13:07:53 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x59565955, 0x0, 0x0, [{}, {}, {0x7498}, {}, {}, {}, {0x0, 0xfffffffc}], 0x0, 0x0, 0x0, 0x2}}) 13:07:53 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 13:07:53 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) socketpair(0x10, 0x800, 0x20, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000c80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000004500)={0xb20, r2, 0x0, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_NAN_FUNC={0x2c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x0, 0xe, 0x0, 0x1, [{0x0, 0x0, "ae90be9e0add9e64861eb785b0ebe4c645fc18b5ab13f77ede18598808dbe8315472f1072384d2af2d920cb1c7ea23d24f9239866e86fe7d0e7c20dbe495ff2ae06760ef3bc0ba61680953d2990eecde1b38b9a093638f6e9947fb51a34771517a7d20d3fc287e2c7a937fdc8b3156e4609aa71f36e207977a1d0b68d4da6fc8189df00dfcdef48d7621554c3a6882ca8abcb92db96374c2a987e41925a3c6529f272f322b5d3f8a25105f03ceab5a46636553c380557b0a2e2995d67e3e44dd71b11e5ca571e6c4873ceaa2bdb40c2052c1d1c001f37002df81182f817cbaae20"}, {0x0, 0x0, "21123634c2848f955866c04e54900fbf0b8cb91ee412303c62488b695a7d951441de64e002dd85e8f3259fd13da65a173d408918f96832fe1b3e6eef9742dfaee6a6ec67c0954b81f1c48bbda6358c19f59762f8e3fbaeb77a6308789ba5cd0c02"}]}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "4b858fc4b181"}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x9}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x5}]}, @NL80211_ATTR_NAN_FUNC={0x28, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x3}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_SERVICE_ID={0x0, 0x2, "5441faefdd34"}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x9}]}, @NL80211_ATTR_NAN_FUNC={0x43c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xfb}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xe2}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x1}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x6}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x414, 0xe, 0x0, 0x1, [{0x28, 0x0, "eb6f9075cc56db86e1baecccf174d9cfde3ab93807fd3a9885ad5d810d1f5c306eda9411"}, {0xc2, 0x0, "817bc05a7fe8f82a2c12cedee2a6ba2e02499ed56d70ee652d6b838f5b4f21d51f57eea130663abaec08a5f7561f7755b96422d934fc116ff4d4d225ebf1a5fbdc326064b7d5fafb5e8cbfe70f7c199cd1ab997dc00a7bac6049d762c5d2d9bf3bad80387a2050a388b8bced4082cf67f44d82a89b0de57e38e913be356159075aecb7887ccf79620499c70273c34876bbc440f56552f19e71e074465c437398767f9f1746565e3aa1df91b651af4da4512b78bdd92a7c305d26c5ec5fff"}, {0xe9, 0x0, "3cc95a713b727a45ad3468c3af896ab8ebb82050a2355affbd752315a635f39133c7a659149b6ad1b942e06d3ab4f86eb57b9ac5398ae99c987aec7a96e8bfeca831eaf7241b99c7c34ffe5517c4dd9c0bf443b81edd255d35112cd9a3fccac0e5ad7585cf2c69dd4425564a13b10cb1f47a65e11d47b54becb06a867d25d62c4a4444a0a8458356c9126f4c54bd5c74374ce5aab3e1bc25825dde0c40d5450e4cdf1abb49480ba12858dbff28dfee1a6a1e84570c671ae8935a4fe41910e0ac9460ab158d56fd698eb60819469d24b5e51d8cdf471a5a624fe9a85411cf5a98528e6f4f3d"}, {0xcc, 0x0, "b4ec4e3ddb8c4ccd69b8fe21dfe57d3c8682f58c35e2cc58b644c430dccdf1974613e33ece3e2baa7b14ab9b0a1af4749c3bb93dad499f4907114bab47b0bae20b301c4bf63c1a7fdb300c4ba379a02068d0b42bacb0538a92967b5e355e906697e2b1ff2af5743b9319fb0ac4998d0d50ff2d44c7f63e7562a9734b88cb7bebc301db4c338792e9d260f55fa236331fab3705007efd26ce4a441cd780bd492648f034dba7e44ba674b37a3c56dd81c0972dced07db6f41f450fd6c5b09b0828170c0e89741b7cbd"}, {0xd0, 0x0, "9afc7779b11e7fcd8f4ad0583e44150d113eb3d1a59d7e33bae191721b09622823557f5b03f579fe896dba18883ed4da4272cb034425bc69d8585d0a1caf87fb626af7a27328fbbe13076d1d0c41b6ddcd26000bed76420ede7dd93d347dae439b0253f04d6ed0f556bbfa23dd1945630d8db7bc13f67e7da2aff13ba6822c1f8e0dfe56a3a69beb0e8271de15d2ecdd59cb4f6d0c22e0a36a8a7d07c2f3a12421bd8f9e6a5361e566beceaccf8b754f71cef6d0008998fcb3af5fc604dfcd4b45409e006936cedd674e3843"}, {0x60, 0x0, "78148ce6ecfe6e3379c19383ce0674193735a1dfd8f3c74f15369d98ce1403192d8015aff2ab6c89ab38d763edfc23e5ad3401bb09d84a5ac8f1439dad529310c053c28d622b30c10ab0b27685fa60f9c2a9394fcb74aa7efe25321a"}, {0x39, 0x0, "c4ccb0c052ee35d55264cb69faf95c9f50d7441a6bcbb6b872185464ba2823bb46f7ca53161628318bc52a745b9f702776e425fe57"}]}]}, @NL80211_ATTR_NAN_FUNC={0x18c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_SRF={0x17c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x58, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xffffff40}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x3f}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x0, 0x7, 0x3f}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x0, 0x7, 0x8}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST, @NL80211_NAN_FUNC_SERVICE_ID={0x0, 0x2, "0503df4ad2be"}, @NL80211_NAN_FUNC_TYPE]}, @NL80211_ATTR_NAN_FUNC={0x4c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x1}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xba}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xfffffe01}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "3fc5cd4bb006"}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x1f}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x9}]}, @NL80211_ATTR_NAN_FUNC={0x2fc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x2f8, 0xd, 0x0, 0x1, [{0x6f, 0x0, "ace5a4ae1586814e992fac00dbbc5277c5fc14a21823d8c3d5c11fefdfc1eb7261f2c26f2dc20ba7c15ad198bbc97de345ecc8b41a2c7e4f37b4ff4236867267be18e94f38b7249f539c4115785ec25a417ae2b111ab004f03a07b2f875d47e7f64daf11f666caa585e6a7"}, {0xd2, 0x0, "b39e1ff144fa583913392f556b563e959c5603e2e145909faa28e9a18434c28829b6c8c7bb6a236dc63285a56f3fc63da1944a746938cb01ba9308bc7cd5e03da4d879eca3e69f107046819a530670607a1f8b0aafceb1277611140b4cef23d2f7e0d9167894a177ec0e6a90f7f54d865ee325c67a0192c01b1f1cdf2736a1e28d53d67ae1ee90e3729e35eae6ba83bb3fbd8c6b087ad8c2e89600e3550ced9098b7de8bd97ed7b3ef730129e0bffd641074bed2ae6f33b9c83ac69fbef713ca754a2e4d187d5aae3a6fecf9163b"}, {0x9b, 0x0, "c7c1fc772dc5ff53d0b36c647aa41ef62cea8bf022efdb6371810326503a6ad17205057a4d56ba4a9b3a20cb715a5044d483cf13215def215aa124b8dd0dbc80740ca635e953a93bb40cc93c0c24229e7769d4469ad1004d85d67c490ca9d017c151857362ef3410a99d8bc1696fb3657f25ae30f8b5580159698a378f27c0ca0e7973ffdee226610094cd36fbaca48eb846eabfb1ec5c"}, {0x6, 0x0, "c372"}, {0x75, 0x0, "ff348c6a07c632373ff22d94236fc7f0410df7879186897948f48005afe2aff9ea2fb216bb2f8c63e28b77194e1aa5666e17929e2104624582a532d344485019b913c3e9192413cec61e1914adfd987cbae4c0ee5d5abdf863c78fdef13885915969a03feb74f19444e7620c39a18dd4bd"}, {0x94, 0x0, "a28fd8105f49cd0bb36bda89519cdb3e2dd47aeb4c4e0de996ddc9500f75aa295c25932d631dbf72968f77d57c2e87dc231e08fec9d5709aa08af66d9e53eb713a7f31fb250d71d72e8d7499371215c5e398d68a868b82296d51d577036a639706e572b8b71ec45ce6ef54b6df5c2c3377c658ea2d46b20f08d1ad1318127ccd56d363d252af8670fdd78a69d9d5fdd2"}]}]}, @NL80211_ATTR_NAN_FUNC={0x188, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x1}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "0800b6ecccf9"}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x16}, @NL80211_NAN_FUNC_SRF={0x150, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x34, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1f}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x1f}]}]}, 0xb20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) [ 740.846697] oom_reaper: reaped process 12899 (syz-executor.0), now anon-rss:0kB, file-rss:14332kB, shmem-rss:16kB [ 740.892181] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 740.904817] in:imklog cpuset=/ mems_allowed=0-1 [ 740.909579] CPU: 0 PID: 12887 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 740.917025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 740.926377] Call Trace: [ 740.928973] dump_stack+0x1fc/0x2ef [ 740.932602] dump_header+0x15d/0xc3f [ 740.936305] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 740.941391] ? ___ratelimit+0x319/0x590 [ 740.945349] oom_kill_process.cold+0x10/0x692 [ 740.949829] ? check_preemption_disabled+0x41/0x280 [ 740.954831] ? has_intersects_mems_allowed+0x1d6/0x290 [ 740.960093] out_of_memory+0x1072/0x1390 [ 740.964150] ? oom_killer_disable+0x270/0x270 [ 740.968641] ? mutex_trylock+0x15f/0x1a0 [ 740.972685] __alloc_pages_nodemask+0x23a2/0x2890 [ 740.977514] ? find_get_entry+0x4cd/0x8a0 [ 740.981651] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 740.986502] alloc_pages_current+0x193/0x2a0 [ 740.990893] filemap_fault+0x146e/0x2180 [ 740.994941] ext4_filemap_fault+0x84/0xb0 [ 740.999072] __do_fault+0x10b/0x4b0 [ 741.002695] __handle_mm_fault+0x273b/0x41c0 [ 741.007088] ? vm_insert_page+0x9c0/0x9c0 [ 741.011230] ? lock_downgrade+0x720/0x720 [ 741.015379] ? check_preemption_disabled+0x41/0x280 [ 741.020492] handle_mm_fault+0x436/0xb10 [ 741.024539] __do_page_fault+0x68e/0xd60 [ 741.028585] ? trace_hardirqs_off_caller+0x6e/0x210 [ 741.033582] ? spurious_fault+0x840/0x840 [ 741.037723] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 741.042563] ? page_fault+0x8/0x30 [ 741.046094] page_fault+0x1e/0x30 [ 741.049532] RIP: 0033:0x7fef741a722d [ 741.053235] Code: Bad RIP value. [ 741.056666] RSP: 002b:00007fef71b43580 EFLAGS: 00010293 [ 741.062011] RAX: 0000000000000078 RBX: 0000000000000000 RCX: 00007fef741a722d [ 741.069263] RDX: 0000000000001fa0 RSI: 00007fef71b43da0 RDI: 0000000000000004 [ 741.076522] RBP: 000055f7b35489d0 R08: 0000000000000000 R09: 0000000000000000 [ 741.083790] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007fef71b43da0 [ 741.091051] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007fef71b457ae [ 741.103049] Mem-Info: [ 741.105503] active_anon:18166 inactive_anon:12978 isolated_anon:0 [ 741.105503] active_file:12 inactive_file:13 isolated_file:0 [ 741.105503] unevictable:0 dirty:1 writeback:0 unstable:0 [ 741.105503] slab_reclaimable:15250 slab_unreclaimable:118463 [ 741.105503] mapped:22352 shmem:13602 pagetables:611 bounce:0 [ 741.105503] free:13820 free_pcp:587 free_cma:0 [ 741.108171] syz-executor.0: vmalloc: allocation failure, allocated 1759723520 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 741.154757] Node 0 active_anon:70756kB inactive_anon:19320kB active_file:44kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 741.166809] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 741.187331] Node 1 active_anon:1908kB inactive_anon:32592kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1540kB dirty:4kB writeback:0kB shmem:32792kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 741.200479] CPU: 1 PID: 12899 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 741.219811] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 741.223934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 741.254126] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 741.259413] Call Trace: [ 741.259435] dump_stack+0x1fc/0x2ef [ 741.259456] warn_alloc.cold+0x7b/0x18f [ 741.259475] ? zone_watermark_ok_safe+0x260/0x260 [ 741.259491] ? retint_kernel+0x2d/0x2d [ 741.264496] Node 0 DMA32 free:17768kB min:35996kB low:44992kB high:53988kB active_anon:70756kB inactive_anon:19320kB active_file:44kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7680kB pagetables:2228kB bounce:0kB free_pcp:436kB local_pcp:80kB free_cma:0kB [ 741.267092] __vmalloc_area_node+0x4fd/0x780 [ 741.274181] lowmem_reserve[]: 0 0 1 1 1 [ 741.274673] ? __vmalloc_node_range+0x180/0x180 [ 741.279534] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 741.283368] ? _raw_spin_unlock+0x29/0x40 [ 741.315712] lowmem_reserve[]: 0 0 0 0 0 [ 741.316649] ? __get_vm_area_node+0x2e2/0x3a0 [ 741.320662] Node 1 Normal free:26636kB min:53876kB low:67344kB high:80812kB active_anon:1908kB inactive_anon:32592kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:224kB pagetables:216kB bounce:0kB free_pcp:1904kB local_pcp:248kB free_cma:0kB [ 741.325293] __vmalloc_node_range+0xed/0x180 [ 741.355117] lowmem_reserve[]: 0 0 0 0 0 [ 741.355261] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 741.359274] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 741.363724] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 741.395998] Node 0 DMA32: 1960*4kB (UME) 775*8kB (UME) 183*16kB (UME) 25*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17768kB [ 741.396743] vmalloc_user+0x70/0xe0 [ 741.400745] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 741.404999] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 741.421788] Node 1 Normal: 217*4kB (UME) 177*8kB (ME) 148*16kB (UME) 97*32kB (UM) 49*64kB (M) 11*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (UE) 1*2048kB (E) 2*4096kB (U) = 26636kB [ 741.423625] vb2_vmalloc_alloc+0xb3/0x2f0 [ 741.441451] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 741.451911] __vb2_queue_alloc+0x472/0xe60 [ 741.451937] vb2_core_create_bufs+0x273/0x7e0 [ 741.451951] ? __vb2_queue_free+0x870/0x870 [ 741.451968] ? __video_do_ioctl+0x632/0xcd0 [ 741.456271] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 741.472911] ? __mutex_lock+0x368/0x1190 [ 741.472928] vb2_create_bufs+0x332/0x620 [ 741.472945] ? mark_held_locks+0xf0/0xf0 [ 741.472959] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 741.472975] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 741.472989] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 741.473010] v4l_create_bufs+0xb2/0x160 [ 741.479392] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 741.485981] __video_do_ioctl+0x49a/0xcd0 [ 741.491601] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 741.494705] ? v4l_querycap+0x340/0x340 [ 741.499051] 13627 total pagecache pages [ 741.503301] ? __might_fault+0x192/0x1d0 [ 741.515444] 0 pages in swap cache [ 741.515913] ? v4l_querycap+0x340/0x340 [ 741.519996] Swap cache stats: add 0, delete 0, find 0/0 [ 741.524001] video_usercopy+0x13f/0xfa0 [ 741.532531] Free swap = 0kB [ 741.534178] ? v4l_enumstd+0x60/0x60 [ 741.534193] ? do_futex+0x171/0x1880 [ 741.534208] ? mark_held_locks+0xf0/0xf0 [ 741.534224] ? debug_check_no_obj_freed+0x201/0x490 [ 741.534245] ? video_usercopy+0xfa0/0xfa0 [ 741.534255] v4l2_ioctl+0x147/0x1a0 [ 741.534267] ? video_devdata+0xa0/0xa0 [ 741.534283] do_vfs_ioctl+0xcdb/0x12e0 [ 741.534299] ? lock_downgrade+0x720/0x720 [ 741.534314] ? check_preemption_disabled+0x41/0x280 [ 741.534328] ? ioctl_preallocate+0x200/0x200 [ 741.534347] ? __fget+0x356/0x510 [ 741.534364] ? do_dup2+0x450/0x450 [ 741.534378] ? __se_sys_futex+0x298/0x3b0 [ 741.534401] ksys_ioctl+0x9b/0xc0 [ 741.534418] __x64_sys_ioctl+0x6f/0xb0 [ 741.534432] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 741.534447] do_syscall_64+0xf9/0x620 [ 741.534467] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 741.534479] RIP: 0033:0x7f68c24140f9 [ 741.534494] Code: Bad RIP value. [ 741.534502] RSP: 002b:00007f68c0986168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 741.534516] RAX: ffffffffffffffda RBX: 00007f68c2533f80 RCX: 00007f68c24140f9 [ 741.534524] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000006 [ 741.534532] RBP: 00007f68c246fae9 R08: 0000000000000000 R09: 0000000000000000 [ 741.534540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.534548] R13: 00007fff6155d44f R14: 00007f68c0986300 R15: 0000000000022000 [ 741.541449] Mem-Info: [ 741.552777] Total swap = 0kB [ 741.556601] active_anon:18166 inactive_anon:12978 isolated_anon:0 [ 741.556601] active_file:12 inactive_file:13 isolated_file:0 [ 741.556601] unevictable:0 dirty:1 writeback:0 unstable:0 [ 741.556601] slab_reclaimable:15250 slab_unreclaimable:118463 [ 741.556601] mapped:22352 shmem:13602 pagetables:611 bounce:0 [ 741.556601] free:13820 free_pcp:582 free_cma:0 [ 741.557028] 2097051 pages RAM [ 741.569044] Node 0 active_anon:70756kB inactive_anon:19320kB active_file:44kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 741.577757] 0 pages HighMem/MovableOnly [ 741.587741] Node 1 active_anon:1908kB inactive_anon:32592kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1540kB dirty:4kB writeback:0kB shmem:32792kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 741.598643] 369649 pages reserved [ 741.608283] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 741.613657] 0 pages cma reserved [ 741.614017] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 741.621627] Unreclaimable slab info: [ 741.628495] Node 0 DMA32 free:17768kB min:35996kB low:44992kB high:53988kB active_anon:70756kB inactive_anon:19320kB active_file:44kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7680kB pagetables:2228kB bounce:0kB free_pcp:424kB local_pcp:356kB free_cma:0kB [ 741.634352] Name Used Total [ 741.643357] lowmem_reserve[]: 0 0 1 1 1 [ 741.645846] pid_2 47KB 152KB [ 741.647167] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 741.656826] batadv_tt_change_cache 0KB 3KB [ 741.665322] lowmem_reserve[]: 0 0 0 0 0 [ 741.666825] batadv_tl_cache 5KB 12KB [ 741.670690] Node 1 Normal free:26636kB min:53876kB low:67344kB high:80812kB active_anon:1908kB inactive_anon:32592kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:224kB pagetables:216kB bounce:0kB free_pcp:1904kB local_pcp:1656kB free_cma:0kB [ 741.670723] lowmem_reserve[]: 0 0 0 0 0 [ 741.670740] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 741.682474] TIPC 12KB 15KB [ 741.689471] Node 0 DMA32: 1960*4kB (UME) 775*8kB (UME) 183*16kB (UME) 25*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17768kB [ 741.692612] SCTPv6 16KB 24KB [ 741.698339] net_ratelimit: 7 callbacks suppressed [ 741.698345] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 741.703035] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 741.711398] SCTP 5KB 7KB [ 741.712979] Node 1 Normal: 217*4kB (UME) 177*8kB (ME) 148*16kB (UME) 97*32kB (UM) 49*64kB (M) 11*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (UE) 1*2048kB (E) 2*4096kB (U) = 26636kB [ 741.724255] DCCPv6 17KB 22KB [ 741.734426] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 741.770315] DCCP 16KB 21KB [ 741.812111] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 741.828352] RXRPC 13KB 13KB [ 741.846499] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 741.858467] rxrpc_call_jar 90KB 94KB [ 741.875929] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 741.899165] bridge_fdb_cache 10KB 15KB [ 741.899187] fib6_nodes 184KB 188KB [ 741.899200] ip6_dst_cache 207KB 326KB [ 741.918409] 13627 total pagecache pages [ 741.944361] RAWv6 81KB 81KB [ 741.955370] 0 pages in swap cache [ 741.955585] UDPv6 30KB 37KB [ 741.995594] Swap cache stats: add 0, delete 0, find 0/0 [ 742.005038] TCPv6 36KB 36KB [ 742.007863] Free swap = 0kB [ 742.025410] nf_conntrack 12KB 18KB [ 742.034574] Total swap = 0kB [ 742.037602] t10_alua_lu_gp_cache 0KB 3KB [ 742.056670] 2097051 pages RAM [ 742.075934] sd_ext_cdb 0KB 7KB [ 742.082698] 0 pages HighMem/MovableOnly [ 742.085519] scsi_sense_cache 1056KB 1060KB [ 742.097872] 369649 pages reserved [ 742.106292] virtio_scsi_cmd 16KB 16KB [ 742.121762] 0 pages cma reserved [ 742.131231] sgpool-128 8KB 8KB [ 742.229732] sgpool-64 4KB 12KB [ 742.235109] sgpool-32 2KB 15KB [ 742.240524] sgpool-16 1KB 7KB [ 742.245886] sgpool-8 0KB 7KB [ 742.255093] mqueue_inode_cache 12KB 22KB [ 742.260753] bio_post_read_ctx 14KB 15KB [ 742.266189] bio-2 14KB 15KB [ 742.274826] jfs_mp 7KB 7KB [ 742.280284] cifs_small_rq 15KB 16KB [ 742.285645] cifs_request 67KB 67KB [ 742.294707] cifs_mpx_ids 0KB 7KB [ 742.300160] nfs_commit_data 3KB 14KB [ 742.305520] nfs_write_data 34KB 44KB [ 742.314403] ext4_system_zone 1KB 7KB [ 742.319880] bio-1 1KB 7KB [ 742.325251] pid_namespace 2KB 7KB [ 742.334020] rpc_buffers 17KB 25KB [ 742.339685] rpc_tasks 2KB 7KB [ 742.345050] UNIX 708KB 716KB [ 742.358264] tcp_bind_bucket 1KB 4KB [ 742.363655] ip_fib_trie 27KB 31KB [ 742.369114] ip_fib_alias 130KB 134KB [ 742.374488] ip_dst_cache 13KB 48KB [ 742.386603] RAW 48KB 52KB [ 742.392071] UDP 59KB 60KB [ 742.397437] TCP 19KB 22KB [ 742.409768] hugetlbfs_inode_cache 3KB 15KB [ 742.415491] fscache_cookie_jar 1KB 11KB [ 742.421010] eventpoll_pwq 29KB 47KB [ 742.426369] eventpoll_epi 54KB 66KB [ 742.446392] inotify_inode_mark 17KB 55KB [ 742.451916] request_queue 199KB 199KB [ 742.457280] blkdev_requests 1KB 3KB [ 742.471041] blkdev_ioc 27KB 34KB [ 742.476437] bio-0 1511KB 1537KB [ 742.484395] biovec-max 1674KB 1699KB [ 742.495563] biovec-64 1400KB 1464KB [ 742.503457] biovec-16 123KB 131KB [ 742.514502] bio_integrity_payload 1KB 8KB [ 742.522761] khugepaged_mm_slot 9KB 34KB [ 742.533645] uid_cache 0KB 4KB [ 742.541429] dmaengine-unmap-2 0KB 3KB [ 742.546801] skbuff_fclone_cache 93KB 206KB [ 742.560659] skbuff_head_cache 7471KB 7473KB [ 742.566080] configfs_dir_cache 3KB 11KB [ 742.573931] file_lock_cache 62KB 186KB [ 742.585673] file_lock_ctx 9KB 11KB [ 742.593434] fsnotify_mark_connector 9KB 31KB [ 742.605431] net_namespace 61KB 61KB [ 742.613191] shmem_inode_cache 8108KB 8388KB [ 742.624757] task_delay_info 185KB 407KB [ 742.632487] taskstats 66KB 179KB [ 742.643998] proc_dir_entry 759KB 761KB [ 742.651814] pde_opener 10KB 58KB [ 742.657185] seq_file 316KB 539KB [ 742.670980] sigqueue 54KB 55KB [ 742.676360] kernfs_node_cache 18234KB 18250KB [ 742.684229] mnt_cache 190KB 192KB [ 742.695471] filp 7201KB 7631KB [ 742.703456] names_cache 135876KB 135936KB [ 742.714540] iint_cache 44KB 71KB [ 742.722428] key_jar 4KB 11KB [ 742.733526] uts_namespace 3KB 7KB [ 742.741485] nsproxy 1KB 7KB [ 742.746864] vm_area_struct 3395KB 5100KB [ 742.760563] mm_struct 422KB 936KB [ 742.765956] fs_cache 144KB 364KB [ 742.774161] files_cache 495KB 753KB [ 742.785565] signal_cache 1035KB 1717KB [ 742.793359] sighand_cache 536KB 603KB [ 742.804917] task_struct 6268KB 6268KB [ 742.812699] cred_jar 1985KB 2096KB [ 742.824255] anon_vma_chain 1109KB 1803KB [ 742.832156] anon_vma 150KB 269KB [ 742.837526] pid 82KB 264KB [ 742.851547] Acpi-Operand 156KB 202KB [ 742.864189] Acpi-ParseExt 8KB 11KB [ 742.872786] Acpi-Parse 41KB 47KB [ 742.880861] Acpi-State 52KB 63KB [ 742.886324] Acpi-Namespace 21KB 27KB [ 742.894357] numa_policy 0KB 3KB [ 742.902279] debug_objects_cache 1219KB 1595KB [ 742.910769] trace_event_file 297KB 298KB [ 742.916207] ftrace_event_field 398KB 401KB [ 742.924247] pool_workqueue 128KB 128KB [ 742.932234] page->ptl 497KB 1047KB [ 742.937706] kmalloc-2097152 2050KB 2050KB [ 742.946150] kmalloc-524288 2056KB 2056KB [ 742.954622] kmalloc-262144 1290KB 1290KB [ 742.963649] kmalloc-131072 650KB 650KB [ 742.972067] kmalloc-65536 2112KB 2178KB [ 742.980925] kmalloc-32768 1815KB 1815KB [ 742.986917] kmalloc-16384 1155KB 1155KB [ 742.994810] kmalloc-8192 4455KB 4496KB [ 743.002595] kmalloc-4096 22265KB 22265KB [ 743.010746] kmalloc-2048 12484KB 13381KB [ 743.016114] kmalloc-1024 7522KB 7953KB [ 743.023907] kmalloc-512 15535KB 15536KB [ 743.031704] kmalloc-256 4507KB 5317KB [ 743.037075] kmalloc-128 979KB 1488KB [ 743.045027] kmalloc-96 3594KB 4020KB [ 743.052783] kmalloc-64 2416KB 4228KB [ 743.060568] kmalloc-32 1863KB 2445KB [ 743.066013] kmalloc-192 1702KB 2288KB [ 743.074425] kmem_cache 177KB 183KB [ 743.082221] Out of memory (oom_kill_allocating_task): Kill process 12887 (in:imklog) score 0 or sacrifice child [ 743.095245] Killed process 12885 (rsyslogd) total-vm:254332kB, anon-rss:516kB, file-rss:0kB, shmem-rss:0kB [ 743.109348] oom_reaper: reaped process 12885 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 13:08:00 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x6}]}}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x2, 0x2, 0x0, 0x4800}) 13:08:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_SSID={0x15, 0x34, @random="93388aaa8e929b9ccdf5660a6a3b123fd4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xbb, 0x401, 0x34324948, 0x9, 0x3, 0x9, 0x7, 0x40000, 0x1, 0x0, 0x1, 0x7}}) 13:08:03 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x7, 0x34325842, 0x6, 0xb, [{0x8, 0x7}, {0xfffffc34, 0x6}, {0x2, 0x7315}, {0x300000, 0x80000000}, {0xc67, 0x5}, {0x80000000, 0x4b1}, {0x0, 0x9}, {0x9d, 0x7}], 0x0, 0x7f, 0x6, 0x2, 0x1}}) 13:08:03 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 13:08:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x6}]}}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x2, 0x2, 0x0, 0x4800}) 13:08:03 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000200)={0x1, @win={{0x5, 0x2906, 0x9, 0x1}, 0x9, 0xfffffffc, &(0x7f0000000340)={{0x3, 0x10000, 0x9, 0x8}, &(0x7f0000000300)={{0x1, 0x800, 0x6, 0x10000}}}, 0x4, &(0x7f0000000380)="6447629fa1e7aa630001728b1cc39b38329651df84609874e040c448f980713e9cc3f139fb90c17e407b4dd82d6d867391c31201b74bf6aff5832a47f5879b046367f248cc9c2177611ba89ad2475cb5a311fdd0746b139b061e36a3e11bbf64e6ca8cdcfd4c1250ed9aceda7f7aa3845bff6fa35c7d7913768104665472340e3a9054f93105c6f888cf570ddbeb787a40de256896235f26e868f68d70e0259ca10f207a7e3dca4b052d8f850ebb847f6c9e7802c28a374c6b1f27bc8fe2c552d3af7ce75589bfcb", 0x3f}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x9bb3}]}}) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000140)=@multiplanar_userptr={0xb2c2, 0x6, 0x4, 0x0, 0x1, {0x0, 0x2710}, {0x4, 0x8, 0xc8, 0x40, 0x2, 0x8, "15e82d36"}, 0x5, 0x2, {&(0x7f00000000c0)=[{0x3, 0x6, {&(0x7f0000000040)}, 0x1455}, {0xffffffff, 0x6, {&(0x7f0000000080)}, 0x8}]}, 0xffff}) 13:08:03 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x7, 0x34325842, 0x6, 0xb, [{0x8, 0x7}, {0xfffffc34, 0x6}, {0x2, 0x7315}, {0x300000, 0x80000000}, {0xc67, 0x5}, {0x80000000, 0x4b1}, {0x0, 0x9}, {0x9d, 0x7}], 0x0, 0x7f, 0x6, 0x2, 0x1}}) 13:08:03 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x0, 0x80000001, 0x4, 0x4000}) 13:08:03 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) socketpair(0x10, 0x800, 0x20, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000c80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000004500)={0xb20, r2, 0x0, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_NAN_FUNC={0x2c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x0, 0xe, 0x0, 0x1, [{0x0, 0x0, "ae90be9e0add9e64861eb785b0ebe4c645fc18b5ab13f77ede18598808dbe8315472f1072384d2af2d920cb1c7ea23d24f9239866e86fe7d0e7c20dbe495ff2ae06760ef3bc0ba61680953d2990eecde1b38b9a093638f6e9947fb51a34771517a7d20d3fc287e2c7a937fdc8b3156e4609aa71f36e207977a1d0b68d4da6fc8189df00dfcdef48d7621554c3a6882ca8abcb92db96374c2a987e41925a3c6529f272f322b5d3f8a25105f03ceab5a46636553c380557b0a2e2995d67e3e44dd71b11e5ca571e6c4873ceaa2bdb40c2052c1d1c001f37002df81182f817cbaae20"}, {0x0, 0x0, "21123634c2848f955866c04e54900fbf0b8cb91ee412303c62488b695a7d951441de64e002dd85e8f3259fd13da65a173d408918f96832fe1b3e6eef9742dfaee6a6ec67c0954b81f1c48bbda6358c19f59762f8e3fbaeb77a6308789ba5cd0c02"}]}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "4b858fc4b181"}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x9}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x5}]}, @NL80211_ATTR_NAN_FUNC={0x28, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x3}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_SERVICE_ID={0x0, 0x2, "5441faefdd34"}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x9}]}, @NL80211_ATTR_NAN_FUNC={0x43c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xfb}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xe2}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x1}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x6}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x414, 0xe, 0x0, 0x1, [{0x28, 0x0, "eb6f9075cc56db86e1baecccf174d9cfde3ab93807fd3a9885ad5d810d1f5c306eda9411"}, {0xc2, 0x0, "817bc05a7fe8f82a2c12cedee2a6ba2e02499ed56d70ee652d6b838f5b4f21d51f57eea130663abaec08a5f7561f7755b96422d934fc116ff4d4d225ebf1a5fbdc326064b7d5fafb5e8cbfe70f7c199cd1ab997dc00a7bac6049d762c5d2d9bf3bad80387a2050a388b8bced4082cf67f44d82a89b0de57e38e913be356159075aecb7887ccf79620499c70273c34876bbc440f56552f19e71e074465c437398767f9f1746565e3aa1df91b651af4da4512b78bdd92a7c305d26c5ec5fff"}, {0xe9, 0x0, "3cc95a713b727a45ad3468c3af896ab8ebb82050a2355affbd752315a635f39133c7a659149b6ad1b942e06d3ab4f86eb57b9ac5398ae99c987aec7a96e8bfeca831eaf7241b99c7c34ffe5517c4dd9c0bf443b81edd255d35112cd9a3fccac0e5ad7585cf2c69dd4425564a13b10cb1f47a65e11d47b54becb06a867d25d62c4a4444a0a8458356c9126f4c54bd5c74374ce5aab3e1bc25825dde0c40d5450e4cdf1abb49480ba12858dbff28dfee1a6a1e84570c671ae8935a4fe41910e0ac9460ab158d56fd698eb60819469d24b5e51d8cdf471a5a624fe9a85411cf5a98528e6f4f3d"}, {0xcc, 0x0, "b4ec4e3ddb8c4ccd69b8fe21dfe57d3c8682f58c35e2cc58b644c430dccdf1974613e33ece3e2baa7b14ab9b0a1af4749c3bb93dad499f4907114bab47b0bae20b301c4bf63c1a7fdb300c4ba379a02068d0b42bacb0538a92967b5e355e906697e2b1ff2af5743b9319fb0ac4998d0d50ff2d44c7f63e7562a9734b88cb7bebc301db4c338792e9d260f55fa236331fab3705007efd26ce4a441cd780bd492648f034dba7e44ba674b37a3c56dd81c0972dced07db6f41f450fd6c5b09b0828170c0e89741b7cbd"}, {0xd0, 0x0, "9afc7779b11e7fcd8f4ad0583e44150d113eb3d1a59d7e33bae191721b09622823557f5b03f579fe896dba18883ed4da4272cb034425bc69d8585d0a1caf87fb626af7a27328fbbe13076d1d0c41b6ddcd26000bed76420ede7dd93d347dae439b0253f04d6ed0f556bbfa23dd1945630d8db7bc13f67e7da2aff13ba6822c1f8e0dfe56a3a69beb0e8271de15d2ecdd59cb4f6d0c22e0a36a8a7d07c2f3a12421bd8f9e6a5361e566beceaccf8b754f71cef6d0008998fcb3af5fc604dfcd4b45409e006936cedd674e3843"}, {0x60, 0x0, "78148ce6ecfe6e3379c19383ce0674193735a1dfd8f3c74f15369d98ce1403192d8015aff2ab6c89ab38d763edfc23e5ad3401bb09d84a5ac8f1439dad529310c053c28d622b30c10ab0b27685fa60f9c2a9394fcb74aa7efe25321a"}, {0x39, 0x0, "c4ccb0c052ee35d55264cb69faf95c9f50d7441a6bcbb6b872185464ba2823bb46f7ca53161628318bc52a745b9f702776e425fe57"}]}]}, @NL80211_ATTR_NAN_FUNC={0x18c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_SRF={0x17c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x58, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xffffff40}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x3f}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x0, 0x7, 0x3f}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x0, 0x7, 0x8}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST, @NL80211_NAN_FUNC_SERVICE_ID={0x0, 0x2, "0503df4ad2be"}, @NL80211_NAN_FUNC_TYPE]}, @NL80211_ATTR_NAN_FUNC={0x4c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x1}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xba}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xfffffe01}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "3fc5cd4bb006"}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x1f}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x9}]}, @NL80211_ATTR_NAN_FUNC={0x2fc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x2f8, 0xd, 0x0, 0x1, [{0x6f, 0x0, "ace5a4ae1586814e992fac00dbbc5277c5fc14a21823d8c3d5c11fefdfc1eb7261f2c26f2dc20ba7c15ad198bbc97de345ecc8b41a2c7e4f37b4ff4236867267be18e94f38b7249f539c4115785ec25a417ae2b111ab004f03a07b2f875d47e7f64daf11f666caa585e6a7"}, {0xd2, 0x0, "b39e1ff144fa583913392f556b563e959c5603e2e145909faa28e9a18434c28829b6c8c7bb6a236dc63285a56f3fc63da1944a746938cb01ba9308bc7cd5e03da4d879eca3e69f107046819a530670607a1f8b0aafceb1277611140b4cef23d2f7e0d9167894a177ec0e6a90f7f54d865ee325c67a0192c01b1f1cdf2736a1e28d53d67ae1ee90e3729e35eae6ba83bb3fbd8c6b087ad8c2e89600e3550ced9098b7de8bd97ed7b3ef730129e0bffd641074bed2ae6f33b9c83ac69fbef713ca754a2e4d187d5aae3a6fecf9163b"}, {0x9b, 0x0, "c7c1fc772dc5ff53d0b36c647aa41ef62cea8bf022efdb6371810326503a6ad17205057a4d56ba4a9b3a20cb715a5044d483cf13215def215aa124b8dd0dbc80740ca635e953a93bb40cc93c0c24229e7769d4469ad1004d85d67c490ca9d017c151857362ef3410a99d8bc1696fb3657f25ae30f8b5580159698a378f27c0ca0e7973ffdee226610094cd36fbaca48eb846eabfb1ec5c"}, {0x6, 0x0, "c372"}, {0x75, 0x0, "ff348c6a07c632373ff22d94236fc7f0410df7879186897948f48005afe2aff9ea2fb216bb2f8c63e28b77194e1aa5666e17929e2104624582a532d344485019b913c3e9192413cec61e1914adfd987cbae4c0ee5d5abdf863c78fdef13885915969a03feb74f19444e7620c39a18dd4bd"}, {0x94, 0x0, "a28fd8105f49cd0bb36bda89519cdb3e2dd47aeb4c4e0de996ddc9500f75aa295c25932d631dbf72968f77d57c2e87dc231e08fec9d5709aa08af66d9e53eb713a7f31fb250d71d72e8d7499371215c5e398d68a868b82296d51d577036a639706e572b8b71ec45ce6ef54b6df5c2c3377c658ea2d46b20f08d1ad1318127ccd56d363d252af8670fdd78a69d9d5fdd2"}]}]}, @NL80211_ATTR_NAN_FUNC={0x188, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x1}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "0800b6ecccf9"}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x16}, @NL80211_NAN_FUNC_SRF={0x150, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x34, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1f}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x1f}]}]}, 0xb20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 13:08:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x6}]}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x6}]}}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x2, 0x2, 0x0, 0x4800}) 13:08:03 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x7, 0x34325842, 0x6, 0xb, [{0x8, 0x7}, {0xfffffc34, 0x6}, {0x2, 0x7315}, {0x300000, 0x80000000}, {0xc67, 0x5}, {0x80000000, 0x4b1}, {0x0, 0x9}, {0x9d, 0x7}], 0x0, 0x7f, 0x6, 0x2, 0x1}}) 13:08:03 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x0, 0x80000001, 0x4, 0x4000}) 13:08:03 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x3, @win={{0x29a7, 0x9, 0x7ff, 0xffffffff}, 0x6, 0x2, &(0x7f0000000000)={{0x1f, 0x2000000, 0x3, 0x1000}}, 0xbaa, &(0x7f0000000040)="a017295552323d72ad528dadfe63e60d97b67582d3dc389992e3f52bc590cb4a077a3264a3814b465d259a907a79296bb7369978899dd6ea259543a77a40c8bc3b77b96b8ae3c80b5b1ac887c7e5d27db185aa94d91fda03185fb284f1e37a99ca4dee12b77c663a5108c2ae2f4d98244bc5c16f667a4ef3a0316dc5068ba2eb5ab03134b6dc5dbe070aa40a29c687c2a0fa67bc2932466ff1ac798a8b9bdc7a0947382fa4d0948ce9e5e9a3455ed976405e5999572b12fa87d929983a2f22236cbf0f660eca575d983f3d7adba29e9db036297a4885ff63c598dd3b", 0x8}}) [ 748.111197] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.116801] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.602799] oom_reaper: reaped process 12967 (syz-executor.0), now anon-rss:0kB, file-rss:14336kB, shmem-rss:16kB [ 751.627209] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 751.643265] in:imklog cpuset=/ mems_allowed=0-1 [ 751.648017] CPU: 1 PID: 12942 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 751.655465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 751.664826] Call Trace: [ 751.667423] dump_stack+0x1fc/0x2ef [ 751.671057] dump_header+0x15d/0xc3f [ 751.674777] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 751.679884] ? ___ratelimit+0x319/0x590 [ 751.683870] oom_kill_process.cold+0x10/0x692 [ 751.688398] ? check_preemption_disabled+0x41/0x280 [ 751.693422] ? has_intersects_mems_allowed+0x1d6/0x290 [ 751.698706] out_of_memory+0x1072/0x1390 [ 751.702778] ? oom_killer_disable+0x270/0x270 [ 751.707371] ? mutex_trylock+0x15f/0x1a0 [ 751.711442] __alloc_pages_nodemask+0x23a2/0x2890 [ 751.716296] ? find_get_entry+0x4cd/0x8a0 [ 751.720457] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 751.725322] alloc_pages_current+0x193/0x2a0 [ 751.729730] filemap_fault+0x146e/0x2180 [ 751.733805] ext4_filemap_fault+0x84/0xb0 [ 751.737962] __do_fault+0x10b/0x4b0 [ 751.741592] __handle_mm_fault+0x273b/0x41c0 [ 751.746007] ? vm_insert_page+0x9c0/0x9c0 [ 751.750160] ? lock_downgrade+0x720/0x720 [ 751.754306] ? check_preemption_disabled+0x41/0x280 [ 751.759331] handle_mm_fault+0x436/0xb10 [ 751.763389] __do_page_fault+0x68e/0xd60 [ 751.767406] syz-executor.0: vmalloc: allocation failure, allocated 1760366592 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 751.767448] ? trace_hardirqs_off_caller+0x6e/0x210 [ 751.784764] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 751.786224] ? spurious_fault+0x840/0x840 [ 751.795547] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 751.800392] ? page_fault+0x8/0x30 [ 751.803931] page_fault+0x1e/0x30 [ 751.807376] RIP: 0033:0x7f7eec2bf22d [ 751.811081] Code: Bad RIP value. [ 751.814434] RSP: 002b:00007f7ee9c5b580 EFLAGS: 00010293 [ 751.819794] RAX: 0000000000000078 RBX: 0000000000000000 RCX: 00007f7eec2bf22d [ 751.827075] RDX: 0000000000001fa0 RSI: 00007f7ee9c5bda0 RDI: 0000000000000004 [ 751.834339] RBP: 000056139a2c79d0 R08: 0000000000000000 R09: 0000000000000000 [ 751.841595] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007f7ee9c5bda0 [ 751.849319] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f7ee9c5be20 [ 751.856626] CPU: 0 PID: 12967 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 751.864616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 751.866319] Mem-Info: [ 751.874012] Call Trace: [ 751.874033] dump_stack+0x1fc/0x2ef [ 751.874054] warn_alloc.cold+0x7b/0x18f [ 751.874071] ? zone_watermark_ok_safe+0x260/0x260 [ 751.874088] ? retint_kernel+0x2d/0x2d [ 751.878926] active_anon:17120 inactive_anon:12978 isolated_anon:0 [ 751.878926] active_file:13 inactive_file:13 isolated_file:0 [ 751.878926] unevictable:0 dirty:0 writeback:0 unstable:0 [ 751.878926] slab_reclaimable:15252 slab_unreclaimable:118741 [ 751.878926] mapped:22384 shmem:13602 pagetables:580 bounce:0 [ 751.878926] free:13942 free_pcp:1148 free_cma:0 [ 751.879088] __vmalloc_area_node+0x4fd/0x780 [ 751.882694] Node 0 active_anon:66668kB inactive_anon:19324kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21620kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 751.886655] ? __vmalloc_node_range+0x180/0x180 [ 751.891673] Node 1 active_anon:1812kB inactive_anon:32588kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1668kB dirty:0kB writeback:0kB shmem:32788kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 751.895514] ? _raw_spin_unlock+0x29/0x40 [ 751.928839] Node 0 DMA free:10880kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 751.933476] ? __get_vm_area_node+0x2e2/0x3a0 [ 751.961140] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 751.965781] __vmalloc_node_range+0xed/0x180 [ 751.994630] Node 0 DMA32 free:17864kB min:35996kB low:44992kB high:53988kB active_anon:66668kB inactive_anon:19324kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:2100kB bounce:0kB free_pcp:2136kB local_pcp:508kB free_cma:0kB [ 751.997444] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 751.997461] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 751.997479] vmalloc_user+0x70/0xe0 [ 752.023588] lowmem_reserve[]: 0 0 1 1 1 [ 752.028055] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 752.028069] vb2_vmalloc_alloc+0xb3/0x2f0 [ 752.028085] __vb2_queue_alloc+0x472/0xe60 [ 752.033084] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 752.037941] vb2_core_create_bufs+0x273/0x7e0 [ 752.037959] ? __vb2_queue_free+0x870/0x870 [ 752.066939] lowmem_reserve[]: 0 0 0 0 0 [ 752.071232] ? __video_do_ioctl+0x632/0xcd0 [ 752.071256] ? __mutex_lock+0x368/0x1190 [ 752.076596] Node 1 Normal free:26764kB min:53876kB low:67344kB high:80812kB active_anon:1812kB inactive_anon:32588kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:224kB pagetables:220kB bounce:0kB free_pcp:2704kB local_pcp:1592kB free_cma:0kB [ 752.080215] vb2_create_bufs+0x332/0x620 [ 752.080233] ? mark_held_locks+0xf0/0xf0 [ 752.080246] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 752.080265] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 752.080283] v4l_create_bufs+0xb2/0x160 [ 752.080300] __video_do_ioctl+0x49a/0xcd0 [ 752.080321] ? v4l_querycap+0x340/0x340 [ 752.080342] ? __might_fault+0x192/0x1d0 [ 752.080359] ? v4l_querycap+0x340/0x340 [ 752.080376] video_usercopy+0x13f/0xfa0 [ 752.080398] ? v4l_enumstd+0x60/0x60 [ 752.080413] ? do_futex+0x171/0x1880 [ 752.080429] ? mark_held_locks+0xf0/0xf0 [ 752.080448] ? debug_check_no_obj_freed+0x201/0x490 [ 752.080471] ? video_usercopy+0xfa0/0xfa0 [ 752.080484] v4l2_ioctl+0x147/0x1a0 [ 752.080497] ? video_devdata+0xa0/0xa0 [ 752.080513] do_vfs_ioctl+0xcdb/0x12e0 [ 752.080529] ? lock_downgrade+0x720/0x720 [ 752.080545] ? check_preemption_disabled+0x41/0x280 [ 752.080559] ? ioctl_preallocate+0x200/0x200 [ 752.080577] ? __fget+0x356/0x510 [ 752.080594] ? do_dup2+0x450/0x450 [ 752.080609] ? __se_sys_futex+0x298/0x3b0 [ 752.080631] ksys_ioctl+0x9b/0xc0 [ 752.080648] __x64_sys_ioctl+0x6f/0xb0 [ 752.080662] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 752.080677] do_syscall_64+0xf9/0x620 [ 752.080696] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 752.080708] RIP: 0033:0x7f68c24140f9 [ 752.080723] Code: Bad RIP value. [ 752.080731] RSP: 002b:00007f68c0986168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 752.080746] RAX: ffffffffffffffda RBX: 00007f68c2533f80 RCX: 00007f68c24140f9 [ 752.084697] lowmem_reserve[]: 0 0 0 0 0 [ 752.089010] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000006 [ 752.089023] RBP: 00007f68c246fae9 R08: 0000000000000000 R09: 0000000000000000 [ 752.089031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 752.089042] R13: 00007fff6155d44f R14: 00007f68c0986300 R15: 0000000000022000 [ 752.093166] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10880kB [ 752.101040] Mem-Info: [ 752.128885] Node 0 DMA32: 1802*4kB (ME) 766*8kB (ME) 193*16kB (UME) 37*32kB (UME) 4*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17864kB [ 752.135768] active_anon:17120 inactive_anon:12978 isolated_anon:0 [ 752.135768] active_file:13 inactive_file:13 isolated_file:0 [ 752.135768] unevictable:0 dirty:0 writeback:0 unstable:0 [ 752.135768] slab_reclaimable:15252 slab_unreclaimable:118741 [ 752.135768] mapped:22384 shmem:13602 pagetables:580 bounce:0 [ 752.135768] free:13879 free_pcp:1210 free_cma:0 [ 752.136231] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 752.140647] Node 0 active_anon:66668kB inactive_anon:19324kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21620kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 752.140671] Node 1 active_anon:1812kB inactive_anon:32588kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1668kB dirty:0kB writeback:0kB shmem:32788kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 752.140679] Node 0 DMA free:10880kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 752.156485] Node 1 Normal: 269*4kB (ME) 221*8kB (UM) 163*16kB (ME) 96*32kB (UM) 39*64kB (UM) 7*128kB (UME) 2*256kB (UE) 2*512kB (ME) 1*1024kB (E) 2*2048kB (UE) 2*4096kB (U) = 26764kB [ 752.177738] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 752.188470] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 752.192537] Node 0 DMA32 free:17864kB min:35996kB low:44992kB high:53988kB active_anon:66668kB inactive_anon:19324kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:2100kB bounce:0kB free_pcp:2136kB local_pcp:1628kB free_cma:0kB [ 752.196414] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 752.196427] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 752.204102] lowmem_reserve[]: 0 0 1 1 1 [ 752.215066] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 752.216745] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 752.220573] 13628 total pagecache pages [ 752.220585] 0 pages in swap cache [ 752.220593] Swap cache stats: add 0, delete 0, find 0/0 [ 752.220598] Free swap = 0kB [ 752.220607] Total swap = 0kB [ 752.226754] lowmem_reserve[]: 0 0 0 0 0 [ 752.237058] 2097051 pages RAM [ 752.240248] Node 1 Normal free:26764kB min:53876kB low:67344kB high:80812kB active_anon:1812kB inactive_anon:32588kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:224kB pagetables:220kB bounce:0kB free_pcp:2704kB local_pcp:1112kB free_cma:0kB [ 752.241829] 0 pages HighMem/MovableOnly [ 752.245692] lowmem_reserve[]: 0 0 0 0 0 [ 752.257725] 369649 pages reserved [ 752.265603] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10880kB [ 752.266605] 0 pages cma reserved [ 752.270187] Node 0 DMA32: 1802*4kB (ME) 766*8kB (ME) 193*16kB (UME) 37*32kB (UME) 4*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17864kB [ 752.270256] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 752.281141] Unreclaimable slab info: [ 752.287642] Node 1 Normal: 269*4kB (ME) 221*8kB (UM) 163*16kB (ME) 96*32kB (UM) 39*64kB (UM) 7*128kB (UME) 2*256kB (UE) 2*512kB (ME) 1*1024kB (E) 2*2048kB (UE) 2*4096kB (U) = 26764kB [ 752.292940] Name Used Total [ 752.295957] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 752.303533] pid_2 43KB 152KB [ 752.315319] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 752.326184] batadv_tt_change_cache 0KB 3KB [ 752.336247] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 752.336722] batadv_tl_cache 5KB 12KB [ 752.344041] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 752.344048] 13628 total pagecache pages [ 752.344062] 0 pages in swap cache [ 752.344069] Swap cache stats: add 0, delete 0, find 0/0 [ 752.344075] Free swap = 0kB [ 752.344079] Total swap = 0kB [ 752.344088] 2097051 pages RAM [ 752.344096] 0 pages HighMem/MovableOnly [ 752.359919] TIPC 12KB 15KB [ 752.370427] 369649 pages reserved [ 752.388808] SCTPv6 16KB 24KB [ 752.420642] 0 pages cma reserved [ 752.432652] SCTP 5KB 7KB [ 752.860449] DCCPv6 17KB 22KB [ 752.865818] DCCP 16KB 21KB [ 752.871276] RXRPC 13KB 13KB [ 752.876640] rxrpc_call_jar 90KB 94KB [ 752.882048] bridge_fdb_cache 10KB 15KB [ 752.887520] fib6_nodes 183KB 188KB [ 752.892883] ip6_dst_cache 232KB 326KB [ 752.898289] RAWv6 81KB 81KB [ 752.905414] UDPv6 30KB 37KB [ 752.910846] TCPv6 36KB 42KB [ 752.916215] nf_conntrack 9KB 18KB [ 752.921703] t10_alua_lu_gp_cache 0KB 3KB [ 752.927365] sd_ext_cdb 0KB 7KB [ 752.932728] scsi_sense_cache 1056KB 1060KB [ 752.938129] virtio_scsi_cmd 16KB 16KB [ 752.943492] sgpool-128 8KB 8KB [ 752.948888] sgpool-64 4KB 12KB [ 752.954247] sgpool-32 2KB 15KB [ 752.959640] sgpool-16 1KB 7KB [ 752.964998] sgpool-8 0KB 7KB [ 752.970414] mqueue_inode_cache 12KB 22KB [ 752.975871] bio_post_read_ctx 14KB 15KB [ 752.981328] bio-2 14KB 15KB [ 752.986691] jfs_mp 7KB 7KB [ 752.992151] cifs_small_rq 15KB 16KB [ 752.997553] cifs_request 67KB 67KB [ 753.004733] cifs_mpx_ids 0KB 7KB [ 753.010449] nfs_commit_data 3KB 14KB [ 753.015835] nfs_write_data 34KB 44KB [ 753.021296] ext4_system_zone 1KB 7KB [ 753.026688] bio-1 1KB 7KB [ 753.032108] pid_namespace 2KB 7KB [ 753.037530] rpc_buffers 17KB 25KB [ 753.042891] rpc_tasks 2KB 7KB [ 753.048295] UNIX 738KB 742KB [ 753.053678] tcp_bind_bucket 1KB 4KB [ 753.059122] ip_fib_trie 27KB 31KB [ 753.064486] ip_fib_alias 130KB 134KB [ 753.069885] ip_dst_cache 12KB 48KB [ 753.075250] RAW 48KB 52KB [ 753.080653] UDP 59KB 60KB [ 753.086022] TCP 16KB 22KB [ 753.091511] hugetlbfs_inode_cache 3KB 15KB [ 753.097262] fscache_cookie_jar 1KB 11KB [ 753.102710] eventpoll_pwq 27KB 47KB [ 753.109875] eventpoll_epi 49KB 66KB [ 753.115247] inotify_inode_mark 15KB 51KB [ 753.120749] request_queue 199KB 199KB [ 753.126118] blkdev_requests 1KB 3KB [ 753.132918] blkdev_ioc 29KB 34KB [ 753.138430] bio-0 1448KB 1481KB [ 753.143795] biovec-max 1674KB 1749KB [ 753.152797] biovec-64 1348KB 1425KB [ 753.158232] biovec-16 117KB 131KB [ 753.163606] bio_integrity_payload 1KB 8KB [ 753.173085] khugepaged_mm_slot 7KB 34KB [ 753.178607] uid_cache 0KB 4KB [ 753.183975] dmaengine-unmap-2 0KB 3KB [ 753.193222] skbuff_fclone_cache 78KB 187KB [ 753.198865] skbuff_head_cache 7441KB 7443KB [ 753.204236] configfs_dir_cache 3KB 11KB [ 753.215135] file_lock_cache 60KB 186KB [ 753.220735] file_lock_ctx 9KB 11KB [ 753.226190] fsnotify_mark_connector 7KB 31KB [ 753.235469] net_namespace 61KB 61KB [ 753.240888] shmem_inode_cache 8101KB 8388KB [ 753.246255] task_delay_info 179KB 407KB [ 753.255127] taskstats 62KB 176KB [ 753.260554] proc_dir_entry 759KB 761KB [ 753.265917] pde_opener 11KB 58KB [ 753.274739] seq_file 306KB 539KB [ 753.280154] sigqueue 57KB 59KB [ 753.285638] kernfs_node_cache 18234KB 18250KB [ 753.294501] mnt_cache 190KB 192KB [ 753.299919] filp 7178KB 7627KB [ 753.305299] names_cache 137024KB 137083KB [ 753.315822] iint_cache 42KB 71KB [ 753.321261] key_jar 4KB 11KB [ 753.326631] uts_namespace 3KB 7KB [ 753.335386] nsproxy 1KB 7KB [ 753.340806] vm_area_struct 3319KB 5096KB [ 753.346172] mm_struct 445KB 936KB [ 753.354955] fs_cache 138KB 364KB [ 753.360374] files_cache 484KB 742KB [ 753.365741] signal_cache 1027KB 1717KB [ 753.374679] sighand_cache 531KB 603KB [ 753.380100] task_struct 6078KB 6135KB [ 753.385464] cred_jar 2039KB 2096KB [ 753.394355] anon_vma_chain 1104KB 1803KB [ 753.400058] anon_vma 156KB 269KB [ 753.405433] pid 81KB 264KB [ 753.420555] Acpi-Operand 156KB 202KB [ 753.425936] Acpi-ParseExt 8KB 11KB [ 753.436476] Acpi-Parse 41KB 47KB [ 753.445464] Acpi-State 52KB 63KB [ 753.455589] Acpi-Namespace 21KB 27KB [ 753.464686] numa_policy 0KB 3KB [ 753.474789] debug_objects_cache 1211KB 1580KB [ 753.484159] trace_event_file 297KB 298KB [ 753.494311] ftrace_event_field 398KB 401KB [ 753.503509] pool_workqueue 128KB 128KB [ 753.514983] page->ptl 493KB 1047KB [ 753.523995] kmalloc-2097152 2050KB 2050KB [ 753.529559] kmalloc-524288 2056KB 2056KB [ 753.534922] kmalloc-262144 1290KB 1290KB [ 753.543979] kmalloc-131072 650KB 650KB [ 753.549523] kmalloc-65536 2112KB 2178KB [ 753.554890] kmalloc-32768 1815KB 1815KB [ 753.563891] kmalloc-16384 1122KB 1155KB [ 753.569319] kmalloc-8192 4455KB 4496KB [ 753.574687] kmalloc-4096 21904KB 21934KB [ 753.583773] kmalloc-2048 12454KB 13374KB [ 753.589175] kmalloc-1024 7538KB 7945KB [ 753.594537] kmalloc-512 15480KB 15480KB [ 753.604910] kmalloc-256 4490KB 5313KB [ 753.610323] kmalloc-128 978KB 1488KB [ 753.615690] kmalloc-96 3586KB 4020KB [ 753.628621] kmalloc-64 2404KB 4228KB [ 753.634002] kmalloc-32 1863KB 2445KB [ 753.643085] kmalloc-192 1698KB 2288KB [ 753.652035] kmem_cache 177KB 183KB [ 753.661082] Out of memory (oom_kill_allocating_task): Kill process 12942 (in:imklog) score 0 or sacrifice child [ 753.675154] Killed process 12940 (rsyslogd) total-vm:254332kB, anon-rss:520kB, file-rss:0kB, shmem-rss:0kB [ 753.687488] oom_reaper: reaped process 12940 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 13:08:13 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x0, 0x80000001, 0x4, 0x4000}) 13:08:13 executing program 4: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="06000000d800a8efff0f56e034594eed"], &(0x7f0000000180)=0x10) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x5, 0x0, 0x2, 0x0, 0x3}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x2, 0x1, 0x4, 0xe000, 0x2, {0x77359400}, {0x3, 0x0, 0x20, 0x1, 0x5, 0x0, "473569ec"}, 0x81, 0x1, {&(0x7f0000000040)=[{0xd7bf, 0x9, {0x4}, 0x90}, {0x0, 0x7f, {0x91c5}, 0x7fffffff}]}, 0x5, 0x0, r3}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:08:13 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x3, @win={{0x29a7, 0x9, 0x7ff, 0xffffffff}, 0x6, 0x2, &(0x7f0000000000)={{0x1f, 0x2000000, 0x3, 0x1000}}, 0xbaa, &(0x7f0000000040)="a017295552323d72ad528dadfe63e60d97b67582d3dc389992e3f52bc590cb4a077a3264a3814b465d259a907a79296bb7369978899dd6ea259543a77a40c8bc3b77b96b8ae3c80b5b1ac887c7e5d27db185aa94d91fda03185fb284f1e37a99ca4dee12b77c663a5108c2ae2f4d98244bc5c16f667a4ef3a0316dc5068ba2eb5ab03134b6dc5dbe070aa40a29c687c2a0fa67bc2932466ff1ac798a8b9bdc7a0947382fa4d0948ce9e5e9a3455ed976405e5999572b12fa87d929983a2f22236cbf0f660eca575d983f3d7adba29e9db036297a4885ff63c598dd3b", 0x8}}) 13:08:13 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x3}]}}) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x3, 0x550, 0x0, 0x4000}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x3, 0x1d88}) 13:08:13 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000040)=@fd={0x13, 0x0, 0x4, 0x20, 0x10001, {}, {0x2, 0x0, 0x0, 0x2, 0x3f, 0x5f, "c639ecc3"}, 0x1, 0x4, {}, 0x40, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0xd9c, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000100)=@overlay={0x5, 0x3, 0x4, 0x1000, 0x401, {0x77359400}, {0x2, 0x1, 0x54, 0x8e, 0x0, 0x80, "aa1739ff"}, 0x7ff, 0x3, {}, 0x1, 0x0, r2}) 13:08:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_SSID={0x15, 0x34, @random="93388aaa8e929b9ccdf5660a6a3b123fd4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:08:13 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x0, 0x4, 0x4000}) 13:08:13 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x3}]}}) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x3, 0x550, 0x0, 0x4000}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x3, 0x1d88}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x3, 0x1d88}) 13:08:14 executing program 4: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="06000000d800a8efff0f56e034594eed"], &(0x7f0000000180)=0x10) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x5, 0x0, 0x2, 0x0, 0x3}) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x2, 0x1, 0x4, 0xe000, 0x2, {0x77359400}, {0x3, 0x0, 0x20, 0x1, 0x5, 0x0, "473569ec"}, 0x81, 0x1, {&(0x7f0000000040)=[{0xd7bf, 0x9, {0x4}, 0x90}, {0x0, 0x7f, {0x91c5}, 0x7fffffff}]}, 0x5, 0x0, r3}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:08:14 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x0, 0x4, 0x4000}) 13:08:14 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x3}]}}) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x3, 0x550, 0x0, 0x4000}) (async) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x3, 0x550, 0x0, 0x4000}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x3, 0x1d88}) 13:08:15 executing program 4: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="06000000d800a8efff0f56e034594eed"], &(0x7f0000000180)=0x10) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x5, 0x0, 0x2, 0x0, 0x3}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x2, 0x1, 0x4, 0xe000, 0x2, {0x77359400}, {0x3, 0x0, 0x20, 0x1, 0x5, 0x0, "473569ec"}, 0x81, 0x1, {&(0x7f0000000040)=[{0xd7bf, 0x9, {0x4}, 0x90}, {0x0, 0x7f, {0x91c5}, 0x7fffffff}]}, 0x5, 0x0, r3}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)) (async) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="06000000d800a8efff0f56e034594eed"], &(0x7f0000000180)=0x10) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x5, 0x0, 0x2, 0x0, 0x3}) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x2, 0x1, 0x4, 0xe000, 0x2, {0x77359400}, {0x3, 0x0, 0x20, 0x1, 0x5, 0x0, "473569ec"}, 0x81, 0x1, {&(0x7f0000000040)=[{0xd7bf, 0x9, {0x4}, 0x90}, {0x0, 0x7f, {0x91c5}, 0x7fffffff}]}, 0x5, 0x0, r3}) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) [ 762.292180] oom_reaper: reaped process 13006 (syz-executor.0), now anon-rss:0kB, file-rss:13576kB, shmem-rss:0kB [ 762.329858] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 762.347117] in:imklog cpuset=/ mems_allowed=0-1 [ 762.351920] CPU: 0 PID: 12996 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 762.359367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 762.368724] Call Trace: [ 762.371319] dump_stack+0x1fc/0x2ef [ 762.374957] dump_header+0x15d/0xc3f [ 762.378675] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 762.383777] ? ___ratelimit+0x319/0x590 [ 762.387754] oom_kill_process.cold+0x10/0x692 [ 762.392258] ? check_preemption_disabled+0x41/0x280 [ 762.397293] ? has_intersects_mems_allowed+0x1d6/0x290 [ 762.402582] out_of_memory+0x1072/0x1390 [ 762.406685] ? oom_killer_disable+0x270/0x270 [ 762.411218] ? mutex_trylock+0x15f/0x1a0 [ 762.415285] __alloc_pages_nodemask+0x23a2/0x2890 [ 762.420136] ? find_get_entry+0x4cd/0x8a0 [ 762.424296] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 762.429153] alloc_pages_current+0x193/0x2a0 [ 762.433557] filemap_fault+0x146e/0x2180 [ 762.436837] syz-executor.0: vmalloc: allocation failure, allocated 1756983296 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 762.437634] ext4_filemap_fault+0x84/0xb0 [ 762.451432] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 762.455531] __do_fault+0x10b/0x4b0 [ 762.464334] __handle_mm_fault+0x273b/0x41c0 [ 762.468736] ? vm_insert_page+0x9c0/0x9c0 [ 762.472870] ? lock_downgrade+0x720/0x720 [ 762.477017] ? check_preemption_disabled+0x41/0x280 [ 762.482032] handle_mm_fault+0x436/0xb10 [ 762.486083] __do_page_fault+0x68e/0xd60 [ 762.490141] ? trace_hardirqs_off_caller+0x6e/0x210 [ 762.495145] ? spurious_fault+0x840/0x840 [ 762.499282] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 762.504115] ? page_fault+0x8/0x30 [ 762.507647] page_fault+0x1e/0x30 [ 762.511090] RIP: 0033:0x7f36061c122d [ 762.514793] Code: Bad RIP value. [ 762.518141] RSP: 002b:00007f3603b5d580 EFLAGS: 00010293 [ 762.523491] RAX: 0000000000000077 RBX: 0000000000000000 RCX: 00007f36061c122d [ 762.530750] RDX: 0000000000001fa0 RSI: 00007f3603b5dda0 RDI: 0000000000000004 [ 762.538006] RBP: 000055e21e6f49d0 R08: 0000000000000000 R09: 0000000000000000 [ 762.545278] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007f3603b5dda0 [ 762.552532] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f3603b5f41d [ 762.559809] CPU: 1 PID: 13006 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 762.563510] Mem-Info: [ 762.567696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 762.567702] Call Trace: [ 762.567724] dump_stack+0x1fc/0x2ef [ 762.567741] warn_alloc.cold+0x7b/0x18f [ 762.567761] ? zone_watermark_ok_safe+0x260/0x260 [ 762.567775] ? rcu_nmi_exit+0xb3/0x180 [ 762.567813] __vmalloc_area_node+0x4fd/0x780 [ 762.567835] ? __vmalloc_node_range+0x180/0x180 [ 762.567848] ? _raw_spin_unlock+0x29/0x40 [ 762.567863] ? __get_vm_area_node+0x2e2/0x3a0 [ 762.570276] active_anon:18714 inactive_anon:12978 isolated_anon:0 [ 762.570276] active_file:28 inactive_file:17 isolated_file:0 [ 762.570276] unevictable:0 dirty:23 writeback:0 unstable:0 [ 762.570276] slab_reclaimable:15252 slab_unreclaimable:119127 [ 762.570276] mapped:22466 shmem:13602 pagetables:613 bounce:0 [ 762.570276] free:13778 free_pcp:146 free_cma:0 [ 762.579603] __vmalloc_node_range+0xed/0x180 [ 762.579619] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 762.579637] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 762.582224] Node 0 active_anon:73032kB inactive_anon:19324kB active_file:88kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88012kB dirty:80kB writeback:0kB shmem:21620kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 20480kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 762.585810] vmalloc_user+0x70/0xe0 [ 762.589799] Node 1 active_anon:1824kB inactive_anon:32588kB active_file:24kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1852kB dirty:12kB writeback:0kB shmem:32788kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 762.594605] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 762.598501] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:20kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 762.602880] vb2_vmalloc_alloc+0xb3/0x2f0 [ 762.607536] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 762.611663] __vb2_queue_alloc+0x472/0xe60 [ 762.616145] Node 0 DMA32 free:17796kB min:35996kB low:44992kB high:53988kB active_anon:73032kB inactive_anon:19324kB active_file:320kB inactive_file:68kB unevictable:0kB writepending:80kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7616kB pagetables:2232kB bounce:0kB free_pcp:332kB local_pcp:0kB free_cma:0kB [ 762.649458] vb2_core_create_bufs+0x273/0x7e0 [ 762.649477] ? __vb2_queue_free+0x870/0x870 [ 762.653861] lowmem_reserve[]: 0 0 1 1 1 [ 762.658181] ? __video_do_ioctl+0x632/0xcd0 [ 762.658206] ? __mutex_lock+0x368/0x1190 [ 762.663540] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 762.691311] vb2_create_bufs+0x332/0x620 [ 762.691331] ? mark_held_locks+0xf0/0xf0 [ 762.691348] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 762.694956] lowmem_reserve[]: 0 0 0 0 0 [ 762.722134] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 762.722150] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 762.722170] v4l_create_bufs+0xb2/0x160 [ 762.722189] __video_do_ioctl+0x49a/0xcd0 [ 762.722207] ? v4l_querycap+0x340/0x340 [ 762.735093] Node 1 Normal free:26440kB min:53876kB low:67344kB high:80812kB active_anon:1824kB inactive_anon:32588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:112kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:224kB pagetables:220kB bounce:0kB free_pcp:252kB local_pcp:0kB free_cma:0kB [ 762.752877] ? __might_fault+0x192/0x1d0 [ 762.752895] ? v4l_querycap+0x340/0x340 [ 762.752912] video_usercopy+0x13f/0xfa0 [ 762.761960] lowmem_reserve[]: 0 0 0 0 0 [ 762.762065] ? v4l_enumstd+0x60/0x60 [ 762.766267] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10892kB [ 762.795230] ? do_futex+0x171/0x1880 [ 762.795246] ? mark_held_locks+0xf0/0xf0 [ 762.795262] ? debug_check_no_obj_freed+0x201/0x490 [ 762.795286] ? video_usercopy+0xfa0/0xfa0 [ 762.799769] Node 0 DMA32: 2010*4kB (UME) 777*8kB (UME) 179*16kB (UME) 24*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17888kB [ 762.804064] v4l2_ioctl+0x147/0x1a0 [ 762.808026] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 762.812319] ? video_devdata+0xa0/0xa0 [ 762.816353] Node 1 Normal: 198*4kB (ME) 166*8kB (UME) 135*16kB (M) 91*32kB (M) 52*64kB (M) 20*128kB (ME) 5*256kB (UME) 3*512kB (UME) 2*1024kB (UE) 2*2048kB (UE) 1*4096kB (U) = 26136kB [ 762.842192] do_vfs_ioctl+0xcdb/0x12e0 [ 762.842208] ? lock_downgrade+0x720/0x720 [ 762.842223] ? check_preemption_disabled+0x41/0x280 [ 762.842239] ? ioctl_preallocate+0x200/0x200 [ 762.846318] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 762.850337] ? __fget+0x356/0x510 [ 762.850352] ? do_dup2+0x450/0x450 [ 762.850369] ? __se_sys_futex+0x298/0x3b0 [ 762.855449] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 762.859414] ksys_ioctl+0x9b/0xc0 [ 762.859432] __x64_sys_ioctl+0x6f/0xb0 [ 762.864515] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 762.869684] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 762.869697] do_syscall_64+0xf9/0x620 [ 762.869716] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 762.873663] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 762.877789] RIP: 0033:0x7f68c24140f9 [ 762.877807] Code: Bad RIP value. [ 762.881760] 13627 total pagecache pages [ 762.910276] RSP: 002b:00007f68c0986168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 762.910289] RAX: ffffffffffffffda RBX: 00007f68c2533f80 RCX: 00007f68c24140f9 [ 762.910297] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000006 [ 762.910308] RBP: 00007f68c246fae9 R08: 0000000000000000 R09: 0000000000000000 [ 762.914351] 0 pages in swap cache [ 762.918302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 762.918310] R13: 00007fff6155d44f R14: 00007f68c0986300 R15: 0000000000022000 [ 762.925725] Mem-Info: [ 762.926435] Swap cache stats: add 0, delete 0, find 0/0 [ 762.930214] active_anon:18689 inactive_anon:12978 isolated_anon:0 [ 762.930214] active_file:16 inactive_file:8 isolated_file:0 [ 762.930214] unevictable:0 dirty:23 writeback:0 unstable:0 [ 762.930214] slab_reclaimable:15252 slab_unreclaimable:119151 [ 762.930214] mapped:22435 shmem:13602 pagetables:612 bounce:0 [ 762.930214] free:13778 free_pcp:145 free_cma:0 [ 762.930243] Node 0 active_anon:72936kB inactive_anon:19324kB active_file:80kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87936kB dirty:80kB writeback:0kB shmem:21620kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 762.930270] Node 1 active_anon:1820kB inactive_anon:32588kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1804kB dirty:12kB writeback:0kB shmem:32788kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 762.958233] Free swap = 0kB [ 762.961179] Node 0 DMA free:10892kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 762.984670] Total swap = 0kB [ 763.000811] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 763.024660] 2097051 pages RAM [ 763.027549] Node 0 DMA32 free:17888kB min:35996kB low:44992kB high:53988kB active_anon:72936kB inactive_anon:19324kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7616kB pagetables:2228kB bounce:0kB free_pcp:324kB local_pcp:320kB free_cma:0kB [ 763.036480] 0 pages HighMem/MovableOnly [ 763.036486] 369649 pages reserved [ 763.036490] 0 pages cma reserved [ 763.036497] Unreclaimable slab info: [ 763.036501] Name Used Total [ 763.036510] pid_2 49KB 152KB [ 763.036576] batadv_tt_change_cache 0KB 3KB [ 763.036592] batadv_tl_cache 5KB 12KB [ 763.036619] TIPC 12KB 15KB [ 763.036638] SCTPv6 16KB 24KB [ 763.036646] SCTP 5KB 7KB [ 763.036663] DCCPv6 17KB 22KB [ 763.036676] DCCP 16KB 21KB [ 763.046845] RXRPC 13KB 13KB [ 763.054950] lowmem_reserve[]: 0 0 1 1 1 [ 763.068116] rxrpc_call_jar 90KB 94KB [ 763.074171] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 763.093628] bridge_fdb_cache 10KB 15KB [ 763.096482] lowmem_reserve[]: 0 0 0 0 0 [ 763.104976] fib6_nodes 183KB 188KB [ 763.107612] Node 1 Normal free:26136kB min:53876kB low:67344kB high:80812kB active_anon:1820kB inactive_anon:32588kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:224kB pagetables:220kB bounce:0kB free_pcp:252kB local_pcp:252kB free_cma:0kB [ 763.107646] lowmem_reserve[]: 0 0 0 0 0 [ 763.125464] ip6_dst_cache 221KB 326KB [ 763.130025] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10876kB [ 763.152646] RAWv6 81KB 81KB [ 763.156810] Node 0 DMA32: 2010*4kB (UME) 782*8kB (UME) 179*16kB (UME) 24*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17928kB [ 763.168278] UDPv6 30KB 37KB [ 763.206006] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 763.232477] TCPv6 27KB 36KB [ 763.261522] Node 1 Normal: 198*4kB (ME) 166*8kB (UME) 135*16kB (M) 91*32kB (M) 52*64kB (M) 20*128kB (ME) 5*256kB (UME) 3*512kB (UME) 2*1024kB (UE) 2*2048kB (UE) 1*4096kB (U) = 26136kB [ 763.285643] nf_conntrack 7KB 18KB [ 763.301670] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 763.325802] t10_alua_lu_gp_cache 0KB 3KB [ 763.336773] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 763.340323] sd_ext_cdb 0KB 7KB [ 763.342456] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 763.347831] scsi_sense_cache 1056KB 1060KB [ 763.347840] virtio_scsi_cmd 16KB 16KB [ 763.347853] sgpool-128 8KB 8KB [ 763.347862] sgpool-64 4KB 12KB [ 763.347869] sgpool-32 2KB 15KB [ 763.347877] sgpool-16 1KB 7KB [ 763.347885] sgpool-8 0KB 7KB [ 763.347901] mqueue_inode_cache 12KB 22KB [ 763.347916] bio_post_read_ctx 14KB 15KB [ 763.347989] bio-2 14KB 15KB [ 763.347999] jfs_mp 7KB 7KB [ 763.348039] cifs_small_rq 15KB 16KB [ 763.348048] cifs_request 67KB 67KB [ 763.348063] cifs_mpx_ids 0KB 7KB [ 763.348092] nfs_commit_data 3KB 14KB [ 763.348102] nfs_write_data 34KB 44KB [ 763.348144] ext4_system_zone 1KB 7KB [ 763.348175] bio-1 1KB 7KB [ 763.348187] pid_namespace 2KB 7KB [ 763.348207] rpc_buffers 17KB 25KB [ 763.348216] rpc_tasks 2KB 7KB [ 763.348226] UNIX 753KB 757KB [ 763.348241] tcp_bind_bucket 1KB 4KB [ 763.348259] ip_fib_trie 27KB 31KB [ 763.348268] ip_fib_alias 130KB 134KB [ 763.348277] ip_dst_cache 12KB 48KB [ 763.348289] RAW 48KB 52KB [ 763.348299] UDP 64KB 67KB [ 763.348312] TCP 14KB 16KB [ 763.348324] hugetlbfs_inode_cache 3KB 15KB [ 763.348333] fscache_cookie_jar 1KB 11KB [ 763.348342] eventpoll_pwq 26KB 47KB [ 763.348350] eventpoll_epi 49KB 66KB [ 763.348359] inotify_inode_mark 15KB 51KB [ 763.348371] request_queue 199KB 199KB [ 763.348380] blkdev_requests 1KB 3KB [ 763.348390] blkdev_ioc 27KB 34KB [ 763.348399] bio-0 1458KB 1485KB [ 763.348407] biovec-max 1674KB 1749KB [ 763.348418] biovec-64 1364KB 1417KB [ 763.348425] biovec-16 115KB 131KB [ 763.348437] bio_integrity_payload 1KB 8KB [ 763.365408] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 763.373781] khugepaged_mm_slot 7KB 34KB [ 763.375763] 13626 total pagecache pages [ 763.381166] uid_cache 0KB 4KB [ 763.381175] dmaengine-unmap-2 0KB 3KB [ 763.381188] skbuff_fclone_cache 73KB 180KB [ 763.381197] skbuff_head_cache 7509KB 7511KB [ 763.381206] configfs_dir_cache 3KB 11KB [ 763.381218] file_lock_cache 58KB 186KB [ 763.397924] 0 pages in swap cache [ 763.404639] file_lock_ctx 9KB 11KB [ 763.432022] Swap cache stats: add 0, delete 0, find 0/0 [ 763.441546] fsnotify_mark_connector 7KB 31KB [ 763.442384] Free swap = 0kB [ 763.478892] net_namespace 61KB 61KB [ 763.485269] Total swap = 0kB [ 763.504302] shmem_inode_cache 8102KB 8380KB [ 763.518009] 2097051 pages RAM [ 763.528914] task_delay_info 177KB 407KB [ 763.532925] 0 pages HighMem/MovableOnly [ 763.535232] taskstats 65KB 176KB [ 763.557045] 369649 pages reserved [ 763.567117] proc_dir_entry 759KB 761KB [ 763.575829] 0 pages cma reserved [ 763.590185] pde_opener 9KB 58KB [ 763.953236] seq_file 296KB 539KB [ 763.958681] sigqueue 53KB 59KB [ 763.964072] kernfs_node_cache 18234KB 18250KB [ 763.972889] mnt_cache 190KB 192KB [ 763.978373] filp 7168KB 7627KB [ 763.983742] names_cache 137776KB 137823KB [ 763.992644] iint_cache 43KB 71KB [ 763.998082] key_jar 4KB 11KB [ 764.003570] uts_namespace 3KB 7KB [ 764.012551] nsproxy 1KB 7KB [ 764.017993] vm_area_struct 3321KB 5096KB [ 764.023361] mm_struct 429KB 923KB [ 764.032332] fs_cache 139KB 364KB [ 764.037850] files_cache 481KB 735KB [ 764.043218] signal_cache 1020KB 1710KB [ 764.057118] sighand_cache 557KB 603KB [ 764.062531] task_struct 6085KB 6097KB [ 764.075436] cred_jar 2016KB 2096KB [ 764.081694] anon_vma_chain 1085KB 1803KB [ 764.094791] anon_vma 140KB 269KB [ 764.101091] pid 79KB 264KB [ 764.106467] Acpi-Operand 156KB 202KB [ 764.120105] Acpi-ParseExt 8KB 11KB [ 764.125482] Acpi-Parse 41KB 47KB [ 764.133378] Acpi-State 52KB 63KB [ 764.144467] Acpi-Namespace 21KB 27KB [ 764.152350] numa_policy 0KB 3KB [ 764.163312] debug_objects_cache 1211KB 1580KB [ 764.171411] trace_event_file 297KB 298KB [ 764.182618] ftrace_event_field 398KB 401KB [ 764.190598] pool_workqueue 128KB 128KB [ 764.196021] page->ptl 491KB 1047KB [ 764.210057] kmalloc-2097152 2050KB 2050KB [ 764.215444] kmalloc-524288 2056KB 2056KB [ 764.223335] kmalloc-262144 1290KB 1290KB [ 764.234754] kmalloc-131072 650KB 650KB [ 764.242540] kmalloc-65536 2112KB 2178KB [ 764.254014] kmalloc-32768 1815KB 1815KB [ 764.262203] kmalloc-16384 1089KB 1155KB [ 764.273825] kmalloc-8192 4455KB 4496KB [ 764.281602] kmalloc-4096 21908KB 21955KB [ 764.293139] kmalloc-2048 12405KB 13362KB [ 764.300931] kmalloc-1024 7614KB 7945KB [ 764.306318] kmalloc-512 15510KB 15510KB [ 764.319964] kmalloc-256 4495KB 5313KB [ 764.325566] kmalloc-128 983KB 1488KB [ 764.333471] kmalloc-96 3628KB 4020KB [ 764.344859] kmalloc-64 2377KB 4224KB [ 764.352803] kmalloc-32 1861KB 2445KB [ 764.363793] kmalloc-192 1697KB 2288KB [ 764.371708] kmem_cache 177KB 183KB [ 764.382859] Out of memory (oom_kill_allocating_task): Kill process 12996 (in:imklog) score 0 or sacrifice child [ 764.395669] Killed process 12994 (rsyslogd) total-vm:254332kB, anon-rss:520kB, file-rss:0kB, shmem-rss:0kB [ 764.416202] oom_reaper: reaped process 12994 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 764.433095] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 764.453610] in:imklog cpuset=/ mems_allowed=0-1 [ 764.458670] CPU: 0 PID: 12996 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 764.466117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 764.475499] Call Trace: [ 764.478095] dump_stack+0x1fc/0x2ef [ 764.481732] dump_header+0x15d/0xc3f [ 764.485457] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 764.490568] ? ___ratelimit+0x319/0x590 [ 764.494551] oom_kill_process.cold+0x10/0x692 [ 764.499063] ? check_preemption_disabled+0x41/0x280 [ 764.504091] ? has_intersects_mems_allowed+0x1d6/0x290 [ 764.509378] out_of_memory+0x1072/0x1390 [ 764.513450] ? oom_killer_disable+0x270/0x270 [ 764.517957] ? mutex_trylock+0x15f/0x1a0 [ 764.522025] __alloc_pages_nodemask+0x23a2/0x2890 [ 764.526883] ? find_get_entry+0x4cd/0x8a0 [ 764.531047] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 764.535922] alloc_pages_current+0x193/0x2a0 [ 764.540338] filemap_fault+0x146e/0x2180 [ 764.544419] ext4_filemap_fault+0x84/0xb0 [ 764.548572] __do_fault+0x10b/0x4b0 [ 764.552236] __handle_mm_fault+0x273b/0x41c0 [ 764.556676] ? vm_insert_page+0x9c0/0x9c0 [ 764.560836] ? lock_downgrade+0x720/0x720 [ 764.565000] ? check_preemption_disabled+0x41/0x280 [ 764.570025] handle_mm_fault+0x436/0xb10 [ 764.574100] __do_page_fault+0x68e/0xd60 [ 764.578175] ? trace_hardirqs_off_caller+0x6e/0x210 [ 764.583199] ? spurious_fault+0x840/0x840 [ 764.587354] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 764.592218] ? page_fault+0x8/0x30 [ 764.595764] page_fault+0x1e/0x30 [ 764.599219] RIP: 0033:0x7f36061c122d [ 764.603028] Code: Bad RIP value. [ 764.606388] RSP: 002b:00007f3603b5d580 EFLAGS: 00010293 [ 764.611771] RAX: 0000000000000077 RBX: 0000000000000000 RCX: 00007f36061c122d [ 764.619130] RDX: 0000000000001fa0 RSI: 00007f3603b5dda0 RDI: 0000000000000004 [ 764.626871] RBP: 000055e21e6f49d0 R08: 0000000000000000 R09: 0000000000000000 [ 764.634228] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007f3603b5dda0 [ 764.641589] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f3603b5f41d [ 764.650258] Mem-Info: [ 764.652705] active_anon:18489 inactive_anon:12978 isolated_anon:0 [ 764.652705] active_file:12 inactive_file:12 isolated_file:0 [ 764.652705] unevictable:0 dirty:0 writeback:0 unstable:0 [ 764.652705] slab_reclaimable:15252 slab_unreclaimable:119152 [ 764.652705] mapped:22422 shmem:13602 pagetables:612 bounce:0 [ 764.652705] free:91531 free_pcp:618 free_cma:0 [ 764.687066] Node 0 active_anon:72936kB inactive_anon:19324kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21620kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 764.715446] Node 1 active_anon:1020kB inactive_anon:32588kB active_file:8kB inactive_file:408kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1920kB dirty:0kB writeback:0kB shmem:32788kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 764.743437] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 764.770872] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 764.776082] Node 0 DMA32 free:17928kB min:35996kB low:44992kB high:53988kB active_anon:72936kB inactive_anon:19324kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7616kB pagetables:2228kB bounce:0kB free_pcp:236kB local_pcp:4kB free_cma:0kB [ 764.805085] lowmem_reserve[]: 0 0 1 1 1 [ 764.809248] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 764.837091] lowmem_reserve[]: 0 0 0 0 0 [ 764.842453] Node 1 Normal free:535760kB min:53876kB low:67344kB high:80812kB active_anon:972kB inactive_anon:32588kB active_file:40kB inactive_file:1836kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:128kB pagetables:220kB bounce:0kB free_pcp:1524kB local_pcp:176kB free_cma:0kB [ 764.873072] lowmem_reserve[]: 0 0 0 0 0 [ 764.878158] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10872kB [ 764.892588] Node 0 DMA32: 2010*4kB (UME) 782*8kB (UME) 179*16kB (UME) 24*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17928kB [ 764.906409] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 764.918206] Node 1 Normal: 9*4kB (UME) 26*8kB (UME) 128*16kB (UM) 102*32kB (UM) 61*64kB (UM) 26*128kB (UME) 11*256kB (UME) 9*512kB (UME) 27*1024kB (UE) 273*2048kB (UE) 2*4096kB (U) = 615156kB [ 764.936278] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 764.945351] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 764.955434] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 764.965465] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 764.975603] 14584 total pagecache pages [ 764.980900] 0 pages in swap cache [ 764.985547] Swap cache stats: add 0, delete 0, find 0/0 [ 764.992056] Free swap = 0kB [ 764.996137] Total swap = 0kB [ 764.999992] 2097051 pages RAM [ 765.004543] 0 pages HighMem/MovableOnly [ 765.009700] 369649 pages reserved [ 765.017349] 0 pages cma reserved [ 765.022968] Unreclaimable slab info: [ 765.027914] Name Used Total [ 765.034368] pid_2 49KB 152KB [ 765.047253] batadv_tt_change_cache 0KB 3KB [ 765.064262] batadv_tl_cache 5KB 12KB [ 765.070120] TIPC 12KB 15KB [ 765.075584] SCTPv6 16KB 24KB [ 765.106866] SCTP 5KB 7KB [ 765.112270] DCCPv6 17KB 22KB [ 765.126976] DCCP 16KB 21KB [ 765.132394] RXRPC 13KB 13KB [ 765.146666] rxrpc_call_jar 90KB 94KB [ 765.152151] bridge_fdb_cache 10KB 15KB [ 765.166980] fib6_nodes 183KB 188KB [ 765.172487] ip6_dst_cache 221KB 326KB [ 765.196994] RAWv6 81KB 81KB [ 765.202412] UDPv6 30KB 37KB [ 765.208302] TCPv6 27KB 36KB [ 765.213679] nf_conntrack 7KB 18KB [ 765.219321] t10_alua_lu_gp_cache 0KB 3KB [ 765.224954] sd_ext_cdb 0KB 7KB [ 765.230830] scsi_sense_cache 1056KB 1060KB [ 765.236200] virtio_scsi_cmd 16KB 16KB [ 765.241641] sgpool-128 8KB 8KB [ 765.247090] sgpool-64 4KB 12KB [ 765.252462] sgpool-32 2KB 15KB [ 765.257922] sgpool-16 1KB 7KB [ 765.263460] sgpool-8 0KB 7KB [ 765.268925] mqueue_inode_cache 12KB 22KB [ 765.274384] bio_post_read_ctx 14KB 15KB [ 765.279885] bio-2 14KB 15KB [ 765.285258] jfs_mp 7KB 7KB [ 765.290729] cifs_small_rq 15KB 16KB [ 765.296097] cifs_request 67KB 67KB [ 765.301529] cifs_mpx_ids 0KB 7KB [ 765.306983] nfs_commit_data 3KB 14KB [ 765.312347] nfs_write_data 34KB 44KB [ 765.317867] ext4_system_zone 1KB 7KB [ 765.323259] bio-1 1KB 7KB [ 765.346651] pid_namespace 2KB 7KB [ 765.352054] rpc_buffers 17KB 25KB [ 765.366647] rpc_tasks 2KB 7KB [ 765.372033] UNIX 753KB 757KB [ 765.377492] tcp_bind_bucket 1KB 4KB [ 765.382880] ip_fib_trie 27KB 31KB [ 765.388318] ip_fib_alias 130KB 134KB [ 765.393691] ip_dst_cache 12KB 48KB [ 765.399142] RAW 48KB 52KB [ 765.404512] UDP 64KB 67KB [ 765.409953] TCP 14KB 16KB [ 765.415332] hugetlbfs_inode_cache 3KB 15KB [ 765.421121] fscache_cookie_jar 1KB 11KB [ 765.426651] eventpoll_pwq 26KB 47KB [ 765.432021] eventpoll_epi 49KB 66KB [ 765.437488] inotify_inode_mark 15KB 51KB [ 765.442950] request_queue 199KB 199KB [ 765.448398] blkdev_requests 1KB 3KB [ 765.453784] blkdev_ioc 27KB 34KB [ 765.459265] bio-0 1483KB 1485KB [ 765.464645] biovec-max 1674KB 1749KB [ 765.470186] biovec-64 1422KB 1425KB [ 765.475666] biovec-16 123KB 131KB [ 765.481144] bio_integrity_payload 1KB 8KB [ 765.486934] khugepaged_mm_slot 7KB 34KB [ 765.492399] uid_cache 0KB 4KB [ 765.497849] dmaengine-unmap-2 0KB 3KB [ 765.503219] skbuff_fclone_cache 73KB 180KB [ 765.508814] skbuff_head_cache 7561KB 7597KB [ 765.514182] configfs_dir_cache 3KB 11KB [ 765.519727] file_lock_cache 58KB 186KB [ 765.525092] file_lock_ctx 9KB 11KB [ 765.530547] fsnotify_mark_connector 7KB 31KB [ 765.536451] net_namespace 61KB 61KB [ 765.541915] shmem_inode_cache 8102KB 8380KB [ 765.547342] task_delay_info 177KB 407KB [ 765.552708] taskstats 65KB 176KB [ 765.558153] proc_dir_entry 759KB 761KB [ 765.563521] pde_opener 9KB 58KB [ 765.568942] seq_file 296KB 539KB [ 765.574311] sigqueue 59KB 59KB [ 765.579774] kernfs_node_cache 18234KB 18250KB [ 765.585142] mnt_cache 190KB 192KB [ 765.590583] filp 7168KB 7627KB [ 765.595956] names_cache 138554KB 138554KB [ 765.603157] iint_cache 43KB 71KB [ 765.608633] key_jar 4KB 11KB [ 765.614000] uts_namespace 3KB 7KB [ 765.624176] nsproxy 1KB 7KB [ 765.629623] vm_area_struct 3168KB 5077KB [ 765.634990] mm_struct 429KB 923KB [ 765.645182] fs_cache 139KB 364KB [ 765.650665] files_cache 481KB 735KB [ 765.656037] signal_cache 1020KB 1710KB [ 765.666198] sighand_cache 557KB 603KB [ 765.671674] task_struct 6034KB 6097KB [ 765.681918] cred_jar 2046KB 2096KB [ 765.687469] anon_vma_chain 1072KB 1803KB [ 765.692833] anon_vma 140KB 269KB [ 765.700341] pid 79KB 264KB [ 765.705718] Acpi-Operand 156KB 202KB [ 765.711177] Acpi-ParseExt 8KB 11KB [ 765.716547] Acpi-Parse 41KB 47KB [ 765.722005] Acpi-State 52KB 63KB [ 765.727473] Acpi-Namespace 21KB 27KB [ 765.732839] numa_policy 0KB 3KB [ 765.738357] debug_objects_cache 1211KB 1580KB [ 765.743933] trace_event_file 297KB 298KB [ 765.749367] ftrace_event_field 398KB 401KB [ 765.754817] pool_workqueue 128KB 128KB [ 765.760285] page->ptl 491KB 1047KB [ 765.765725] kmalloc-2097152 2050KB 2050KB [ 765.771160] kmalloc-524288 2056KB 2056KB [ 765.776525] kmalloc-262144 1290KB 1290KB [ 765.782103] kmalloc-131072 650KB 650KB [ 765.787545] kmalloc-65536 2112KB 2178KB [ 765.792912] kmalloc-32768 1815KB 1815KB [ 765.798994] kmalloc-16384 1089KB 1155KB [ 765.804476] kmalloc-8192 4455KB 4496KB [ 765.810854] kmalloc-4096 21483KB 21543KB [ 765.816228] kmalloc-2048 12405KB 13362KB [ 765.827424] kmalloc-1024 7627KB 7945KB [ 765.832806] kmalloc-512 15535KB 15603KB [ 765.843903] kmalloc-256 4495KB 5313KB [ 765.849904] kmalloc-128 983KB 1488KB [ 765.855275] kmalloc-96 3628KB 4020KB [ 765.866368] kmalloc-64 2377KB 4224KB [ 765.872411] kmalloc-32 1861KB 2445KB [ 765.883045] kmalloc-192 1697KB 2288KB [ 765.888996] kmem_cache 177KB 183KB [ 765.894369] Out of memory (oom_kill_allocating_task): Kill process 12996 (in:imklog) score 0 or sacrifice child [ 765.906498] Killed process 12996 (in:imklog) total-vm:254332kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 765.917276] in:imklog: page allocation failure: order:0, mode:0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null) [ 765.927915] in:imklog cpuset=/ mems_allowed=0-1 [ 765.932851] CPU: 0 PID: 12996 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 765.940385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 765.949739] Call Trace: [ 765.952339] dump_stack+0x1fc/0x2ef [ 765.955983] warn_alloc.cold+0x7b/0x18f [ 765.959965] ? zone_watermark_ok_safe+0x260/0x260 [ 765.964819] ? wait_for_completion_io+0x10/0x10 [ 765.969502] __alloc_pages_nodemask+0x232f/0x2890 [ 765.974364] ? find_get_entry+0x4cd/0x8a0 [ 765.978524] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 765.983394] alloc_pages_current+0x193/0x2a0 [ 765.987806] filemap_fault+0x146e/0x2180 [ 765.991885] ext4_filemap_fault+0x84/0xb0 [ 765.996036] __do_fault+0x10b/0x4b0 [ 765.999667] __handle_mm_fault+0x273b/0x41c0 [ 766.004168] ? vm_insert_page+0x9c0/0x9c0 [ 766.008325] ? lock_downgrade+0x720/0x720 [ 766.012508] ? check_preemption_disabled+0x41/0x280 [ 766.017624] handle_mm_fault+0x436/0xb10 [ 766.021696] __do_page_fault+0x68e/0xd60 [ 766.025771] ? trace_hardirqs_off_caller+0x6e/0x210 [ 766.030886] ? spurious_fault+0x840/0x840 [ 766.035057] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 766.039920] ? page_fault+0x8/0x30 [ 766.043476] page_fault+0x1e/0x30 [ 766.046947] RIP: 0033:0x7f36061c122d [ 766.050777] Code: Bad RIP value. [ 766.054230] RSP: 002b:00007f3603b5d580 EFLAGS: 00010293 [ 766.059597] RAX: 0000000000000077 RBX: 0000000000000000 RCX: 00007f36061c122d [ 766.066869] RDX: 0000000000001fa0 RSI: 00007f3603b5dda0 RDI: 0000000000000004 [ 766.074150] RBP: 000055e21e6f49d0 R08: 0000000000000000 R09: 0000000000000000 [ 766.081440] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007f3603b5dda0 [ 766.088900] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f3603b5f41d [ 766.109010] Mem-Info: 13:08:22 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x3, @win={{0x29a7, 0x9, 0x7ff, 0xffffffff}, 0x6, 0x2, &(0x7f0000000000)={{0x1f, 0x2000000, 0x3, 0x1000}}, 0xbaa, &(0x7f0000000040)="a017295552323d72ad528dadfe63e60d97b67582d3dc389992e3f52bc590cb4a077a3264a3814b465d259a907a79296bb7369978899dd6ea259543a77a40c8bc3b77b96b8ae3c80b5b1ac887c7e5d27db185aa94d91fda03185fb284f1e37a99ca4dee12b77c663a5108c2ae2f4d98244bc5c16f667a4ef3a0316dc5068ba2eb5ab03134b6dc5dbe070aa40a29c687c2a0fa67bc2932466ff1ac798a8b9bdc7a0947382fa4d0948ce9e5e9a3455ed976405e5999572b12fa87d929983a2f22236cbf0f660eca575d983f3d7adba29e9db036297a4885ff63c598dd3b", 0x8}}) 13:08:22 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x0, 0x4, 0x4000}) 13:08:22 executing program 4: write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000000)={0xf, 0x1f, 0x1, 0x3}, 0xf) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r1 = getuid() r2 = getegid() write$P9_RSTATu(r0, &(0x7f0000000080)={0x52, 0x7d, 0x1, {{0x0, 0x3b, 0x471, 0xfffffffb, {0x66, 0x3, 0x6}, 0xc5100000, 0x7, 0x80000001, 0x101, 0x4, ']\xba)!', 0x3, '{-[', 0x0, '', 0x1, '\x00'}, 0x2, ':\'', r1, r2, 0xee00}}, 0x52) 13:08:22 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000040)=@fd={0x13, 0x0, 0x4, 0x20, 0x10001, {}, {0x2, 0x0, 0x0, 0x2, 0x3f, 0x5f, "c639ecc3"}, 0x1, 0x4, {}, 0x40, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0xd9c, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000100)=@overlay={0x5, 0x3, 0x4, 0x1000, 0x401, {0x77359400}, {0x2, 0x1, 0x54, 0x8e, 0x0, 0x80, "aa1739ff"}, 0x7ff, 0x3, {}, 0x1, 0x0, r2}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000040)=@fd={0x13, 0x0, 0x4, 0x20, 0x10001, {}, {0x2, 0x0, 0x0, 0x2, 0x3f, 0x5f, "c639ecc3"}, 0x1, 0x4, {}, 0x40}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0xd9c, 0x2) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000100)=@overlay={0x5, 0x3, 0x4, 0x1000, 0x401, {0x77359400}, {0x2, 0x1, 0x54, 0x8e, 0x0, 0x80, "aa1739ff"}, 0x7ff, 0x3, {}, 0x1, 0x0, r2}) (async) [ 766.116114] active_anon:16923 inactive_anon:12978 isolated_anon:0 [ 766.116114] active_file:49 inactive_file:2406 isolated_file:0 [ 766.116114] unevictable:0 dirty:0 writeback:0 unstable:0 [ 766.116114] slab_reclaimable:15226 slab_unreclaimable:119202 [ 766.116114] mapped:24202 shmem:13602 pagetables:575 bounce:0 [ 766.116114] free:442373 free_pcp:884 free_cma:0 [ 766.178677] Node 0 active_anon:75020kB inactive_anon:19324kB active_file:140kB inactive_file:2440kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:89668kB dirty:0kB writeback:0kB shmem:21620kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 766.214602] Node 1 active_anon:944kB inactive_anon:32588kB active_file:56kB inactive_file:8184kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8340kB dirty:0kB writeback:0kB shmem:32788kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 766.247493] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 766.274500] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 766.287723] Node 0 DMA32 free:54196kB min:35996kB low:44992kB high:53988kB active_anon:70908kB inactive_anon:19324kB active_file:740kB inactive_file:2240kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7744kB pagetables:2228kB bounce:0kB free_pcp:1056kB local_pcp:332kB free_cma:0kB [ 766.322921] lowmem_reserve[]: 0 0 1 1 1 [ 766.332411] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 766.359685] lowmem_reserve[]: 0 0 0 0 0 [ 766.364241] Node 1 Normal free:1696272kB min:53876kB low:67344kB high:80812kB active_anon:944kB inactive_anon:32588kB active_file:56kB inactive_file:8184kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:128kB pagetables:220kB bounce:0kB free_pcp:2740kB local_pcp:1388kB free_cma:0kB [ 766.400593] lowmem_reserve[]: 0 0 0 0 0 [ 766.405156] Node 0 DMA: 2*4kB (U) 2*8kB (U) 3*16kB (U) 2*32kB (U) 3*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 11080kB [ 766.420298] Node 0 DMA32: 1866*4kB (UME) 1416*8kB (UME) 305*16kB (UME) 63*32kB (UME) 29*64kB (UME) 10*128kB (UME) 5*256kB (UM) 6*512kB (UM) 3*1024kB (U) 3*2048kB (UM) 3*4096kB (UM) = 54680kB [ 766.438998] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 766.451055] Node 1 Normal: 57*4kB (UME) 30*8kB (UME) 23*16kB (U) 394*32kB (UM) 326*64kB (UM) 292*128kB (UME) 146*256kB (UME) 110*512kB (UME) 87*1024kB (UE) 386*2048kB (UE) 159*4096kB (U) = 1696260kB [ 766.469648] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 766.479158] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 766.488343] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 766.498512] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 766.511600] 16536 total pagecache pages [ 766.518244] 0 pages in swap cache [ 766.525046] Swap cache stats: add 0, delete 0, find 0/0 [ 766.531935] Free swap = 0kB [ 766.535013] Total swap = 0kB [ 766.539065] 2097051 pages RAM [ 766.542225] 0 pages HighMem/MovableOnly [ 766.546269] 369649 pages reserved [ 766.551669] 0 pages cma reserved [ 766.555617] in:imklog invoked oom-killer: gfp_mask=0x0(), nodemask=(null), order=0, oom_score_adj=0 [ 766.566739] in:imklog cpuset=/ mems_allowed=0-1 [ 766.571768] CPU: 0 PID: 12996 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 766.579214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 766.588590] Call Trace: [ 766.591185] dump_stack+0x1fc/0x2ef [ 766.594826] dump_header+0x15d/0xc3f [ 766.598549] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 766.603678] ? ___ratelimit+0x319/0x590 [ 766.607662] oom_kill_process.cold+0x10/0x692 [ 766.612166] ? check_preemption_disabled+0x41/0x280 [ 766.617199] ? has_intersects_mems_allowed+0x1d6/0x290 [ 766.622486] out_of_memory+0x1072/0x1390 [ 766.626559] ? lock_acquire+0x170/0x3c0 [ 766.630540] ? oom_killer_disable+0x270/0x270 [ 766.635055] ? mutex_trylock+0x15f/0x1a0 [ 766.639127] pagefault_out_of_memory+0x102/0x120 [ 766.643894] ? out_of_memory+0x1390/0x1390 [ 766.648140] ? lock_downgrade+0x720/0x720 [ 766.652294] mm_fault_error+0x106/0x390 [ 766.656277] __do_page_fault+0xc34/0xd60 [ 766.660381] ? trace_hardirqs_off_caller+0x6e/0x210 [ 766.665494] ? spurious_fault+0x840/0x840 [ 766.669650] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 766.674502] ? page_fault+0x8/0x30 [ 766.678052] page_fault+0x1e/0x30 [ 766.681508] RIP: 0033:0x7f36061c122d [ 766.685225] Code: Bad RIP value. [ 766.688596] RSP: 002b:00007f3603b5d580 EFLAGS: 00010293 [ 766.694049] RAX: 0000000000000077 RBX: 0000000000000000 RCX: 00007f36061c122d [ 766.701323] RDX: 0000000000001fa0 RSI: 00007f3603b5dda0 RDI: 0000000000000004 [ 766.708596] RBP: 000055e21e6f49d0 R08: 0000000000000000 R09: 0000000000000000 [ 766.715960] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007f3603b5dda0 [ 766.723233] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f3603b5f41d [ 766.756886] Mem-Info: [ 766.759409] active_anon:17984 inactive_anon:12978 isolated_anon:0 [ 766.759409] active_file:285 inactive_file:2955 isolated_file:0 [ 766.759409] unevictable:0 dirty:15 writeback:0 unstable:0 [ 766.759409] slab_reclaimable:15226 slab_unreclaimable:119721 [ 766.759409] mapped:24842 shmem:13602 pagetables:620 bounce:0 [ 766.759409] free:440131 free_pcp:1138 free_cma:0 [ 766.794301] Node 0 active_anon:70972kB inactive_anon:19324kB active_file:1084kB inactive_file:3624kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:90696kB dirty:56kB writeback:0kB shmem:21620kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 766.823947] Node 1 active_anon:964kB inactive_anon:32588kB active_file:56kB inactive_file:8196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8672kB dirty:4kB writeback:0kB shmem:32788kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 766.852266] Node 0 DMA free:11080kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 766.880396] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 766.885653] Node 0 DMA32 free:183112kB min:35996kB low:44992kB high:53988kB active_anon:70972kB inactive_anon:19324kB active_file:1084kB inactive_file:3624kB unevictable:0kB writepending:56kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7744kB pagetables:2260kB bounce:0kB free_pcp:1856kB local_pcp:480kB free_cma:0kB [ 766.916276] lowmem_reserve[]: 0 0 1 1 1 [ 766.920897] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 766.947577] lowmem_reserve[]: 0 0 0 0 0 [ 766.951680] Node 1 Normal free:1696260kB min:53876kB low:67344kB high:80812kB active_anon:964kB inactive_anon:32588kB active_file:56kB inactive_file:8196kB unevictable:0kB writepending:4kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:128kB pagetables:220kB bounce:0kB free_pcp:2740kB local_pcp:1388kB free_cma:0kB [ 766.982216] lowmem_reserve[]: 0 0 0 0 0 [ 766.987024] Node 0 DMA: 2*4kB (U) 2*8kB (U) 3*16kB (U) 2*32kB (U) 3*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 11080kB [ 767.001285] Node 0 DMA32: 4845*4kB (UME) 9265*8kB (UME) 8021*16kB (UME) 1741*32kB (UME) 36*64kB (UME) 10*128kB (UME) 5*256kB (UM) 6*512kB (UM) 3*1024kB (U) 3*2048kB (UM) 3*4096kB (UM) = 306988kB [ 767.056726] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 767.076757] Node 1 Normal: 57*4kB (UME) 30*8kB (UME) 23*16kB (U) 394*32kB (UM) 326*64kB (UM) 292*128kB (UME) 146*256kB (UME) 110*512kB (UME) 87*1024kB (UE) 386*2048kB (UE) 159*4096kB (U) = 1696260kB [ 767.094797] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 767.103757] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 767.112416] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 767.121516] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 767.130150] 17005 total pagecache pages [ 767.135894] 0 pages in swap cache [ 767.139605] Swap cache stats: add 0, delete 0, find 0/0 [ 767.145126] Free swap = 0kB [ 767.148213] Total swap = 0kB [ 767.151235] 2097051 pages RAM [ 767.154338] 0 pages HighMem/MovableOnly [ 767.158381] 369649 pages reserved [ 767.161828] 0 pages cma reserved [ 767.165241] Unreclaimable slab info: [ 767.169385] Name Used Total [ 767.174970] pid_2 49KB 152KB [ 767.180479] batadv_tt_change_cache 0KB 3KB [ 767.186314] batadv_tl_cache 5KB 12KB [ 767.191784] TIPC 12KB 15KB [ 767.197246] SCTPv6 16KB 24KB [ 767.202757] SCTP 5KB 7KB [ 767.208228] DCCPv6 17KB 22KB [ 767.213602] DCCP 16KB 21KB [ 767.219080] RXRPC 13KB 13KB [ 767.224461] rxrpc_call_jar 90KB 94KB [ 767.229898] bridge_fdb_cache 10KB 15KB [ 767.237485] fib6_nodes 183KB 188KB [ 767.242860] ip6_dst_cache 221KB 326KB [ 767.248301] RAWv6 81KB 81KB [ 767.253667] UDPv6 30KB 37KB [ 767.259106] TCPv6 36KB 36KB [ 767.264485] nf_conntrack 7KB 18KB [ 767.270014] t10_alua_lu_gp_cache 0KB 3KB [ 767.275645] sd_ext_cdb 0KB 7KB [ 767.281169] scsi_sense_cache 1056KB 1060KB [ 767.286598] virtio_scsi_cmd 16KB 16KB [ 767.291988] sgpool-128 8KB 8KB [ 767.297422] sgpool-64 4KB 12KB [ 767.302792] sgpool-32 2KB 15KB [ 767.308240] sgpool-16 1KB 7KB [ 767.313621] sgpool-8 0KB 7KB [ 767.319072] mqueue_inode_cache 12KB 22KB [ 767.324533] bio_post_read_ctx 14KB 15KB [ 767.330212] bio-2 14KB 15KB [ 767.335582] jfs_mp 7KB 7KB [ 767.342758] cifs_small_rq 15KB 16KB [ 767.348288] cifs_request 67KB 67KB [ 767.353651] cifs_mpx_ids 0KB 7KB [ 767.359092] nfs_commit_data 3KB 14KB [ 767.364462] nfs_write_data 34KB 44KB [ 767.369944] ext4_system_zone 1KB 7KB [ 767.375331] bio-1 1KB 7KB [ 767.380799] pid_namespace 2KB 7KB [ 767.386210] rpc_buffers 17KB 25KB [ 767.391658] rpc_tasks 2KB 7KB [ 767.397328] UNIX 753KB 757KB [ 767.402703] tcp_bind_bucket 1KB 4KB [ 767.408145] ip_fib_trie 27KB 31KB [ 767.413520] ip_fib_alias 130KB 134KB [ 767.418946] ip_dst_cache 12KB 48KB [ 767.424315] RAW 48KB 52KB [ 767.429763] UDP 64KB 67KB [ 767.435134] TCP 16KB 16KB [ 767.442350] hugetlbfs_inode_cache 3KB 15KB [ 767.451243] fscache_cookie_jar 1KB 11KB [ 767.458317] eventpoll_pwq 26KB 47KB [ 767.463692] eventpoll_epi 49KB 66KB [ 767.472256] inotify_inode_mark 15KB 51KB [ 767.479485] request_queue 199KB 199KB [ 767.484861] blkdev_requests 1KB 3KB [ 767.493544] blkdev_ioc 27KB 34KB [ 767.500843] bio-0 1483KB 1485KB [ 767.506217] biovec-max 1674KB 1749KB [ 767.515116] biovec-64 1429KB 1433KB [ 767.522397] biovec-16 123KB 131KB [ 767.531026] bio_integrity_payload 1KB 8KB [ 767.538548] khugepaged_mm_slot 7KB 34KB [ 767.546120] uid_cache 0KB 4KB [ 767.554841] dmaengine-unmap-2 0KB 3KB [ 767.561864] skbuff_fclone_cache 73KB 180KB [ 767.570680] skbuff_head_cache 7367KB 7597KB [ 767.576055] configfs_dir_cache 3KB 11KB [ 767.583699] file_lock_cache 58KB 186KB [ 767.592345] file_lock_ctx 9KB 11KB [ 767.599973] fsnotify_mark_connector 7KB 31KB [ 767.606017] net_namespace 61KB 61KB [ 767.615056] shmem_inode_cache 8102KB 8380KB [ 767.622291] task_delay_info 177KB 407KB [ 767.630871] taskstats 65KB 176KB [ 767.638443] proc_dir_entry 759KB 761KB [ 767.646148] pde_opener 9KB 58KB [ 767.654955] seq_file 296KB 539KB [ 767.662330] sigqueue 59KB 59KB [ 767.671177] kernfs_node_cache 18234KB 18250KB [ 767.678621] mnt_cache 190KB 192KB [ 767.684140] filp 7269KB 7627KB [ 767.693178] names_cache 139599KB 139599KB [ 767.700300] iint_cache 43KB 71KB [ 767.706292] key_jar 4KB 11KB [ 767.715988] uts_namespace 3KB 7KB [ 767.723220] nsproxy 1KB 7KB [ 767.732309] vm_area_struct 3105KB 5058KB [ 767.739625] mm_struct 429KB 923KB [ 767.745014] fs_cache 139KB 364KB [ 767.758592] files_cache 481KB 735KB [ 767.763969] signal_cache 1020KB 1710KB [ 767.771766] sighand_cache 557KB 603KB [ 767.779546] task_struct 5908KB 5971KB [ 767.784924] cred_jar 2140KB 2144KB [ 767.792731] anon_vma_chain 1046KB 1803KB [ 767.800771] anon_vma 153KB 269KB [ 767.806138] pid 79KB 264KB [ 767.813929] Acpi-Operand 156KB 202KB [ 767.821709] Acpi-ParseExt 8KB 11KB [ 767.829499] Acpi-Parse 41KB 47KB [ 767.834869] Acpi-State 52KB 63KB [ 767.842664] Acpi-Namespace 21KB 27KB [ 767.852255] numa_policy 0KB 3KB [ 767.860040] debug_objects_cache 1211KB 1580KB [ 767.865585] trace_event_file 297KB 298KB [ 767.873430] ftrace_event_field 398KB 401KB [ 767.881300] pool_workqueue 128KB 128KB [ 767.889399] page->ptl 491KB 1047KB [ 767.894815] kmalloc-2097152 2050KB 2050KB [ 767.902497] kmalloc-524288 2056KB 2056KB [ 767.910309] kmalloc-262144 1290KB 1290KB [ 767.915679] kmalloc-131072 650KB 650KB [ 767.923528] kmalloc-65536 2112KB 2178KB [ 767.931380] kmalloc-32768 1815KB 1815KB [ 767.939281] kmalloc-16384 1089KB 1155KB [ 767.944656] kmalloc-8192 4455KB 4496KB [ 767.954482] kmalloc-4096 21063KB 21122KB [ 767.962398] kmalloc-2048 12405KB 13362KB [ 767.970177] kmalloc-1024 7587KB 7945KB [ 767.975565] kmalloc-512 15096KB 15592KB [ 767.983342] kmalloc-256 4495KB 5313KB [ 767.991135] kmalloc-128 983KB 1488KB [ 767.999176] kmalloc-96 3606KB 4020KB [ 768.004557] kmalloc-64 2377KB 4224KB [ 768.012339] kmalloc-32 1850KB 2445KB [ 768.020225] kmalloc-192 1697KB 2288KB [ 768.025591] kmem_cache 177KB 183KB [ 768.033609] Out of memory (oom_kill_allocating_task): Kill process 12996 (in:imklog) score 0 or sacrifice child [ 768.046802] Killed process 12996 (in:imklog) total-vm:254332kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 13:08:26 executing program 4: write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000000)={0xf, 0x1f, 0x1, 0x3}, 0xf) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) (async) r1 = getuid() r2 = getegid() write$P9_RSTATu(r0, &(0x7f0000000080)={0x52, 0x7d, 0x1, {{0x0, 0x3b, 0x471, 0xfffffffb, {0x66, 0x3, 0x6}, 0xc5100000, 0x7, 0x80000001, 0x101, 0x4, ']\xba)!', 0x3, '{-[', 0x0, '', 0x1, '\x00'}, 0x2, ':\'', r1, r2, 0xee00}}, 0x52) 13:08:26 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x44001) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, 'hsr0\x00'}}, 0x1e) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0xfffffffe}]}}) 13:08:26 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000040)=@fd={0x13, 0x0, 0x4, 0x20, 0x10001, {}, {0x2, 0x0, 0x0, 0x2, 0x3f, 0x5f, "c639ecc3"}, 0x1, 0x4, {}, 0x40, 0x0, 0xffffffffffffffff}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0xd9c, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000100)=@overlay={0x5, 0x3, 0x4, 0x1000, 0x401, {0x77359400}, {0x2, 0x1, 0x54, 0x8e, 0x0, 0x80, "aa1739ff"}, 0x7ff, 0x3, {}, 0x1, 0x0, r2}) 13:08:26 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x80000001, 0x0, 0x4000}) 13:08:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_SSID={0x15, 0x34, @random="93388aaa8e929b9ccdf5660a6a3b123fd4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:08:26 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000000)=@fd={0x10000, 0x3, 0x4, 0x64, 0xb65f, {0x77359400}, {0x3, 0x8, 0xb1, 0x1, 0x3, 0x5, "1953e8eb"}, 0x10001, 0x4, {}, 0x9}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:08:26 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x44001) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, 'hsr0\x00'}}, 0x1e) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0xfffffffe}]}}) 13:08:26 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000000)=@fd={0x10000, 0x3, 0x4, 0x64, 0xb65f, {0x77359400}, {0x3, 0x8, 0xb1, 0x1, 0x3, 0x5, "1953e8eb"}, 0x10001, 0x4, {}, 0x9}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:08:26 executing program 4: write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000000)={0xf, 0x1f, 0x1, 0x3}, 0xf) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) pipe2$9p(&(0x7f0000000040), 0x4000) (async) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getuid() (async) r1 = getuid() r2 = getegid() write$P9_RSTATu(r0, &(0x7f0000000080)={0x52, 0x7d, 0x1, {{0x0, 0x3b, 0x471, 0xfffffffb, {0x66, 0x3, 0x6}, 0xc5100000, 0x7, 0x80000001, 0x101, 0x4, ']\xba)!', 0x3, '{-[', 0x0, '', 0x1, '\x00'}, 0x2, ':\'', r1, r2, 0xee00}}, 0x52) 13:08:26 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x80000001}) 13:08:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_SSID={0x15, 0x34, @random="93388aaa8e929b9ccdf5660a6a3b123fd4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:08:26 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000000)=@fd={0x10000, 0x3, 0x4, 0x64, 0xb65f, {0x77359400}, {0x3, 0x8, 0xb1, 0x1, 0x3, 0x5, "1953e8eb"}, 0x10001, 0x4, {}, 0x9}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000000)=@fd={0x10000, 0x3, 0x4, 0x64, 0xb65f, {0x77359400}, {0x3, 0x8, 0xb1, 0x1, 0x3, 0x5, "1953e8eb"}, 0x10001, 0x4, {}, 0x9}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) 13:08:26 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x2d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 13:08:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_SSID={0x15, 0x34, @random="93388aaa8e929b9ccdf5660a6a3b123fd4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:08:26 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x44001) (async) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, 'hsr0\x00'}}, 0x1e) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0xfffffffe}]}}) 13:08:26 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x40000000}, {0x7}]}}) 13:08:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_SSID={0x15, 0x34, @random="93388aaa8e929b9ccdf5660a6a3b123fd4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:08:26 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000000)={0x8}, 0x1) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:08:26 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x2d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 13:08:26 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x40000000}, {0x7}]}}) 13:08:26 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x3, @raw_data="cdd8212b4b92f2a8989ab97639a42a6c8b435a92128a0861a139312a8e99c108e7c907990efe4135e3a3efcbc9b6ba733309af505c35527fd3edeb32e046d743a549c308ad105224d6c9de13d77fc9e06cbdc6afb0153aa7ee0b1eb526266cf56f8c55740d12a3ebc0ed8df68dd9dfe0b758075ecdd8b4ed1bfd2cbe79689d705742cd8d244dbc560c8def16104ea705f234815681631bcbab6e49c40aff663381ebbed036ae82943120b24b6de1686bd30aeb7a7ac37d086f67617e835c000601691f5837a8f25d"}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x2, 0x2, 0x2, 0x0, 0x2}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0xfffffffd}, {0x0, 0x2}], 0x0, 0x0, 0x0, 0x0, 0x6}}) 13:08:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_SSID={0x15, 0x34, @random="93388aaa8e929b9ccdf5660a6a3b123fd4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:08:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_SSID={0x15, 0x34, @random="93388aaa8e929b9ccdf5660a6a3b123fd4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:08:26 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x40000000}, {0x7}]}}) 13:08:26 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x3, @raw_data="cdd8212b4b92f2a8989ab97639a42a6c8b435a92128a0861a139312a8e99c108e7c907990efe4135e3a3efcbc9b6ba733309af505c35527fd3edeb32e046d743a549c308ad105224d6c9de13d77fc9e06cbdc6afb0153aa7ee0b1eb526266cf56f8c55740d12a3ebc0ed8df68dd9dfe0b758075ecdd8b4ed1bfd2cbe79689d705742cd8d244dbc560c8def16104ea705f234815681631bcbab6e49c40aff663381ebbed036ae82943120b24b6de1686bd30aeb7a7ac37d086f67617e835c000601691f5837a8f25d"}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x2, 0x2, 0x2, 0x0, 0x2}) (async, rerun: 64) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0xfffffffd}, {0x0, 0x2}], 0x0, 0x0, 0x0, 0x0, 0x6}}) (rerun: 64) 13:08:26 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x2d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 13:08:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_COOKIE={0xc}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xf12e6c2}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004c855}, 0x4008044) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:08:27 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLOCK(r0, &(0x7f0000000040)={0x8, 0x35, 0x1, 0x1}, 0x8) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf}, 0xf) write$9p(r2, &(0x7f0000000100)="3eb66d63347e9f0afe1efd78e1337e39438c264cf53a2ffdc91a706254e6", 0x1e) 13:08:27 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x3, @raw_data="cdd8212b4b92f2a8989ab97639a42a6c8b435a92128a0861a139312a8e99c108e7c907990efe4135e3a3efcbc9b6ba733309af505c35527fd3edeb32e046d743a549c308ad105224d6c9de13d77fc9e06cbdc6afb0153aa7ee0b1eb526266cf56f8c55740d12a3ebc0ed8df68dd9dfe0b758075ecdd8b4ed1bfd2cbe79689d705742cd8d244dbc560c8def16104ea705f234815681631bcbab6e49c40aff663381ebbed036ae82943120b24b6de1686bd30aeb7a7ac37d086f67617e835c000601691f5837a8f25d"}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x2, 0x2, 0x2, 0x0, 0x2}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0xfffffffd}, {0x0, 0x2}], 0x0, 0x0, 0x0, 0x0, 0x6}}) [ 774.848803] oom_reaper: reaped process 13148 (syz-executor.0), now anon-rss:0kB, file-rss:14336kB, shmem-rss:16kB [ 774.886950] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 774.902305] systemd-journal cpuset=/ mems_allowed=0-1 [ 774.907661] CPU: 1 PID: 12817 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 774.915628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 774.924979] Call Trace: [ 774.927591] dump_stack+0x1fc/0x2ef [ 774.931227] dump_header+0x15d/0xc3f [ 774.934945] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 774.940052] ? ___ratelimit+0x319/0x590 [ 774.944033] oom_kill_process.cold+0x10/0x692 [ 774.948628] ? check_preemption_disabled+0x41/0x280 [ 774.953650] ? has_intersects_mems_allowed+0x1d6/0x290 [ 774.958939] out_of_memory+0x1072/0x1390 [ 774.963012] ? oom_killer_disable+0x270/0x270 [ 774.967514] ? mutex_trylock+0x15f/0x1a0 [ 774.971599] __alloc_pages_nodemask+0x23a2/0x2890 [ 774.976539] ? find_get_entry+0x4cd/0x8a0 [ 774.980742] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 774.985705] alloc_pages_current+0x193/0x2a0 [ 774.990118] filemap_fault+0x146e/0x2180 [ 774.994193] ext4_filemap_fault+0x84/0xb0 [ 774.998341] __do_fault+0x10b/0x4b0 [ 775.001965] __handle_mm_fault+0x273b/0x41c0 [ 775.006359] ? vm_insert_page+0x9c0/0x9c0 [ 775.010508] ? check_preemption_disabled+0x41/0x280 [ 775.015525] handle_mm_fault+0x436/0xb10 [ 775.019599] __do_page_fault+0x68e/0xd60 [ 775.023646] ? trace_hardirqs_off_caller+0x6e/0x210 [ 775.028646] ? spurious_fault+0x840/0x840 [ 775.032791] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 775.037621] ? page_fault+0x8/0x30 [ 775.041144] page_fault+0x1e/0x30 [ 775.044593] RIP: 0033:0x7fcce70032e3 [ 775.048293] Code: Bad RIP value. [ 775.051656] RSP: 002b:00007ffdabad7798 EFLAGS: 00010246 [ 775.057002] RAX: 0000000000000001 RBX: 000055627b6971e0 RCX: 00007fcce70032e3 [ 775.064251] RDX: 0000000000000013 RSI: 00007ffdabad77a0 RDI: 000000000000000d [ 775.071599] RBP: 00007ffdabad7990 R08: 00007ffdabb11000 R09: 000000c5c7e4bac2 [ 775.078861] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdabad77a0 [ 775.086118] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005f5c24a7b4a21 [ 775.095772] Mem-Info: [ 775.098272] active_anon:18261 inactive_anon:12978 isolated_anon:0 [ 775.098272] active_file:12 inactive_file:1 isolated_file:0 [ 775.098272] unevictable:0 dirty:2 writeback:0 unstable:0 [ 775.098272] slab_reclaimable:15222 slab_unreclaimable:119086 [ 775.098272] mapped:22510 shmem:13602 pagetables:613 bounce:0 [ 775.098272] free:13859 free_pcp:1567 free_cma:0 [ 775.101790] syz-executor.0: vmalloc: allocation failure, allocated 1752559616 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 775.137008] Node 0 active_anon:72192kB inactive_anon:19328kB active_file:44kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87916kB dirty:8kB writeback:0kB shmem:21624kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 775.152583] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 775.184141] CPU: 0 PID: 13148 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 775.190705] Node 1 active_anon:852kB inactive_anon:32584kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2124kB dirty:0kB writeback:0kB shmem:32784kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 775.192029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 775.228788] Call Trace: [ 775.231390] dump_stack+0x1fc/0x2ef [ 775.231615] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 775.235021] warn_alloc.cold+0x7b/0x18f [ 775.265082] ? zone_watermark_ok_safe+0x260/0x260 [ 775.269930] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 775.271438] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 775.274707] __vmalloc_area_node+0x4fd/0x780 [ 775.279729] Node 0 DMA32 free:17708kB min:35996kB low:44992kB high:53988kB active_anon:72292kB inactive_anon:19328kB active_file:68kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7712kB pagetables:2356kB bounce:0kB free_pcp:3120kB local_pcp:1556kB free_cma:0kB [ 775.284089] ? __vmalloc_node_range+0x180/0x180 [ 775.317712] ? _raw_spin_unlock+0x29/0x40 [ 775.321863] ? __get_vm_area_node+0x2e2/0x3a0 [ 775.323167] lowmem_reserve[]: 0 0 1 1 1 [ 775.326363] __vmalloc_node_range+0xed/0x180 [ 775.326381] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 775.326396] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 775.326409] vmalloc_user+0x70/0xe0 [ 775.326420] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 775.326433] vb2_vmalloc_alloc+0xb3/0x2f0 [ 775.326447] __vb2_queue_alloc+0x472/0xe60 [ 775.326475] vb2_core_create_bufs+0x273/0x7e0 [ 775.326487] ? __vb2_queue_free+0x870/0x870 [ 775.326509] ? __mutex_lock+0x368/0x1190 [ 775.326528] vb2_create_bufs+0x332/0x620 [ 775.326544] ? mark_held_locks+0xf0/0xf0 [ 775.326557] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 775.326574] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 775.326591] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 775.326615] v4l_create_bufs+0xb2/0x160 [ 775.326634] __video_do_ioctl+0x49a/0xcd0 [ 775.326656] ? v4l_querycap+0x340/0x340 [ 775.326675] ? __might_fault+0x192/0x1d0 [ 775.326693] ? v4l_querycap+0x340/0x340 [ 775.326709] video_usercopy+0x13f/0xfa0 [ 775.326730] ? v4l_enumstd+0x60/0x60 [ 775.326745] ? do_futex+0x171/0x1880 [ 775.326761] ? mark_held_locks+0xf0/0xf0 [ 775.326779] ? debug_check_no_obj_freed+0x201/0x490 [ 775.326803] ? video_usercopy+0xfa0/0xfa0 [ 775.326815] v4l2_ioctl+0x147/0x1a0 [ 775.326828] ? video_devdata+0xa0/0xa0 [ 775.326845] do_vfs_ioctl+0xcdb/0x12e0 [ 775.326860] ? lock_downgrade+0x720/0x720 [ 775.326876] ? check_preemption_disabled+0x41/0x280 [ 775.326891] ? ioctl_preallocate+0x200/0x200 [ 775.326909] ? __fget+0x356/0x510 [ 775.326926] ? do_dup2+0x450/0x450 [ 775.326940] ? __se_sys_futex+0x298/0x3b0 [ 775.326963] ksys_ioctl+0x9b/0xc0 [ 775.326979] __x64_sys_ioctl+0x6f/0xb0 [ 775.326994] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 775.327009] do_syscall_64+0xf9/0x620 [ 775.327029] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 775.327041] RIP: 0033:0x7f68c24140f9 [ 775.327055] Code: Bad RIP value. [ 775.327063] RSP: 002b:00007f68c0986168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 775.327076] RAX: ffffffffffffffda RBX: 00007f68c2533f80 RCX: 00007f68c24140f9 [ 775.327085] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000005 [ 775.327092] RBP: 00007f68c246fae9 R08: 0000000000000000 R09: 0000000000000000 [ 775.327101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 775.327109] R13: 00007fff6155d44f R14: 00007f68c0986300 R15: 0000000000022000 [ 775.339013] Mem-Info: [ 775.349990] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 775.358842] active_anon:18261 inactive_anon:12978 isolated_anon:0 [ 775.358842] active_file:12 inactive_file:1 isolated_file:0 [ 775.358842] unevictable:0 dirty:2 writeback:0 unstable:0 [ 775.358842] slab_reclaimable:15222 slab_unreclaimable:119086 [ 775.358842] mapped:22510 shmem:13602 pagetables:613 bounce:0 [ 775.358842] free:13859 free_pcp:1567 free_cma:0 [ 775.363965] lowmem_reserve[]: 0 0 0 0 0 [ 775.371025] Node 0 active_anon:72192kB inactive_anon:19328kB active_file:44kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87916kB dirty:8kB writeback:0kB shmem:21624kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 775.380308] Node 1 Normal free:26852kB min:53876kB low:67344kB high:80812kB active_anon:852kB inactive_anon:32584kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:96kB pagetables:96kB bounce:0kB free_pcp:3148kB local_pcp:1536kB free_cma:0kB [ 775.384729] Node 1 active_anon:852kB inactive_anon:32584kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2124kB dirty:0kB writeback:0kB shmem:32784kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 775.390258] lowmem_reserve[]: 0 0 0 0 0 [ 775.398222] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 775.409612] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 775.416108] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 775.423065] Node 0 DMA32: 2157*4kB (UME) 739*8kB (UME) 94*16kB (ME) 40*32kB (UME) 11*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18028kB [ 775.423536] Node 0 DMA32 free:17708kB min:35996kB low:44992kB high:53988kB active_anon:72292kB inactive_anon:19328kB active_file:68kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7712kB pagetables:2356kB bounce:0kB free_pcp:3120kB local_pcp:1564kB free_cma:0kB [ 775.435589] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 775.444896] lowmem_reserve[]: 0 0 1 1 1 [ 775.458569] Node 1 Normal: 207*4kB (UME) 147*8kB (UME) 71*16kB (UM) 71*32kB (M) 55*64kB (UM) 20*128kB (ME) 4*256kB (ME) 2*512kB (ME) 1*1024kB (E) 2*2048kB (UE) 2*4096kB (U) = 26852kB [ 775.471545] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 775.472899] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 775.478811] lowmem_reserve[]: 0 0 0 0 0 [ 775.489558] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 775.495147] Node 1 Normal free:26852kB min:53876kB low:67344kB high:80812kB active_anon:852kB inactive_anon:32584kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:96kB pagetables:96kB bounce:0kB free_pcp:3148kB local_pcp:1612kB free_cma:0kB [ 775.497898] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 775.504077] lowmem_reserve[]: 0 0 0 0 0 [ 775.505486] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 775.511147] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 775.526690] 13644 total pagecache pages [ 775.536574] Node 0 DMA32: 2157*4kB (UME) 739*8kB (UME) 94*16kB (ME) 40*32kB (UME) 11*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18028kB [ 775.550517] 0 pages in swap cache [ 775.560078] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 775.593778] Swap cache stats: add 0, delete 0, find 0/0 [ 775.629099] Node 1 Normal: 207*4kB (UME) 147*8kB (UME) 71*16kB (UM) 71*32kB (M) 55*64kB (UM) 20*128kB (ME) 4*256kB (ME) 2*512kB (ME) 1*1024kB (E) 2*2048kB (UE) 2*4096kB (U) = 26852kB [ 775.654218] Free swap = 0kB [ 775.689592] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 775.708283] Total swap = 0kB [ 775.720378] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 775.739786] 2097051 pages RAM [ 775.760182] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 775.770317] 0 pages HighMem/MovableOnly [ 775.808091] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 775.814250] 369649 pages reserved [ 775.839013] 13635 total pagecache pages [ 775.858395] 0 pages cma reserved [ 775.874190] 0 pages in swap cache [ 775.874590] Unreclaimable slab info: [ 775.914619] Swap cache stats: add 0, delete 0, find 0/0 [ 775.919335] Name Used Total [ 775.929552] Free swap = 0kB [ 775.942747] pid_2 47KB 152KB [ 775.967987] Total swap = 0kB [ 775.973752] batadv_tt_change_cache 0KB 3KB [ 775.975563] 2097051 pages RAM [ 775.995832] batadv_tl_cache 5KB 12KB [ 776.016160] 0 pages HighMem/MovableOnly [ 776.022553] TIPC 12KB 15KB [ 776.038455] 369649 pages reserved [ 776.048905] SCTPv6 16KB 24KB [ 776.060281] 0 pages cma reserved [ 776.070901] SCTP 5KB 7KB [ 776.129171] DCCPv6 17KB 22KB [ 776.134548] DCCP 16KB 21KB [ 776.145184] RXRPC 13KB 13KB [ 776.154257] rxrpc_call_jar 90KB 94KB [ 776.163036] bridge_fdb_cache 10KB 15KB [ 776.171883] fib6_nodes 183KB 188KB [ 776.180934] ip6_dst_cache 234KB 326KB [ 776.189800] RAWv6 81KB 81KB [ 776.195184] UDPv6 30KB 37KB [ 776.203975] TCPv6 24KB 36KB [ 776.212940] nf_conntrack 7KB 18KB [ 776.221755] t10_alua_lu_gp_cache 0KB 3KB [ 776.230818] sd_ext_cdb 0KB 7KB [ 776.239826] scsi_sense_cache 1056KB 1060KB [ 776.250272] virtio_scsi_cmd 16KB 16KB [ 776.255649] sgpool-128 8KB 8KB [ 776.264793] sgpool-64 4KB 12KB [ 776.273673] sgpool-32 2KB 15KB [ 776.282489] sgpool-16 1KB 7KB [ 776.291395] sgpool-8 0KB 7KB [ 776.300428] mqueue_inode_cache 12KB 22KB [ 776.305892] bio_post_read_ctx 14KB 15KB [ 776.314776] bio-2 14KB 15KB [ 776.323537] jfs_mp 7KB 7KB [ 776.332462] cifs_small_rq 15KB 16KB [ 776.341338] cifs_request 67KB 67KB [ 776.351865] cifs_mpx_ids 0KB 7KB [ 776.360802] nfs_commit_data 3KB 14KB [ 776.369959] nfs_write_data 34KB 44KB [ 776.375362] ext4_system_zone 1KB 7KB [ 776.384197] bio-1 1KB 7KB [ 776.393132] pid_namespace 2KB 7KB [ 776.402208] rpc_buffers 17KB 25KB [ 776.410974] rpc_tasks 2KB 7KB [ 776.419875] UNIX 755KB 780KB [ 776.425249] tcp_bind_bucket 1KB 4KB [ 776.434051] ip_fib_trie 27KB 31KB [ 776.442856] ip_fib_alias 130KB 134KB [ 776.453665] ip_dst_cache 12KB 48KB [ 776.462554] RAW 48KB 52KB [ 776.471345] UDP 60KB 74KB [ 776.480296] TCP 8KB 16KB [ 776.485756] hugetlbfs_inode_cache 3KB 15KB [ 776.494911] fscache_cookie_jar 1KB 11KB [ 776.503779] eventpoll_pwq 21KB 47KB [ 776.512756] eventpoll_epi 40KB 66KB [ 776.521688] inotify_inode_mark 16KB 51KB [ 776.530595] request_queue 199KB 199KB [ 776.535960] blkdev_requests 1KB 3KB [ 776.544778] blkdev_ioc 24KB 34KB [ 776.555404] bio-0 1424KB 1462KB [ 776.564253] biovec-max 1658KB 1732KB [ 776.573145] biovec-64 1370KB 1433KB [ 776.582188] biovec-16 103KB 131KB [ 776.591053] bio_integrity_payload 1KB 8KB [ 776.600298] khugepaged_mm_slot 6KB 34KB [ 776.605762] uid_cache 0KB 4KB [ 776.614576] dmaengine-unmap-2 0KB 3KB [ 776.623403] skbuff_fclone_cache 69KB 176KB [ 776.632467] skbuff_head_cache 7325KB 7593KB [ 776.641348] configfs_dir_cache 3KB 11KB [ 776.650305] file_lock_cache 53KB 186KB [ 776.660927] file_lock_ctx 9KB 11KB [ 776.669731] fsnotify_mark_connector 8KB 31KB [ 776.675621] net_namespace 61KB 61KB [ 776.690564] shmem_inode_cache 8080KB 8349KB [ 776.695937] task_delay_info 179KB 407KB [ 776.701391] taskstats 56KB 172KB [ 776.713775] proc_dir_entry 759KB 761KB [ 776.719207] pde_opener 7KB 58KB [ 776.724573] seq_file 271KB 539KB [ 776.736859] sigqueue 50KB 59KB [ 776.742240] kernfs_node_cache 18235KB 18250KB [ 776.747673] mnt_cache 190KB 192KB [ 776.753035] filp 7282KB 7627KB [ 776.760546] names_cache 138052KB 138112KB [ 776.766531] iint_cache 43KB 71KB [ 776.772383] key_jar 4KB 11KB [ 776.778344] uts_namespace 3KB 7KB [ 776.784321] nsproxy 2KB 7KB [ 776.790354] vm_area_struct 3233KB 5042KB [ 776.795743] mm_struct 435KB 916KB [ 776.801462] fs_cache 130KB 360KB [ 776.806930] files_cache 491KB 735KB [ 776.812296] signal_cache 1020KB 1696KB [ 776.817771] sighand_cache 527KB 603KB [ 776.823451] task_struct 6274KB 6287KB [ 776.828908] cred_jar 2108KB 2160KB [ 776.834267] anon_vma_chain 1035KB 1803KB [ 776.839706] anon_vma 131KB 269KB [ 776.845683] pid 79KB 264KB [ 776.851656] Acpi-Operand 156KB 202KB [ 776.857556] Acpi-ParseExt 8KB 11KB [ 776.864641] Acpi-Parse 41KB 47KB [ 776.870054] Acpi-State 52KB 63KB [ 776.876109] Acpi-Namespace 21KB 27KB [ 776.882014] numa_policy 0KB 3KB [ 776.887487] debug_objects_cache 1211KB 1580KB [ 776.893111] trace_event_file 297KB 298KB [ 776.898595] ftrace_event_field 398KB 401KB [ 776.904582] pool_workqueue 128KB 128KB [ 776.910512] page->ptl 493KB 1047KB [ 776.915934] kmalloc-2097152 2050KB 2050KB [ 776.921395] kmalloc-524288 2056KB 2056KB [ 776.926815] kmalloc-262144 1290KB 1290KB [ 776.932810] kmalloc-131072 650KB 650KB [ 776.938710] kmalloc-65536 2112KB 2178KB [ 776.944480] kmalloc-32768 1815KB 1815KB [ 776.953143] kmalloc-16384 1089KB 1155KB [ 776.959319] kmalloc-8192 4455KB 4496KB [ 776.966487] kmalloc-4096 21258KB 21318KB [ 776.971913] kmalloc-2048 12465KB 13362KB [ 776.978434] kmalloc-1024 7573KB 7945KB [ 776.984651] kmalloc-512 15227KB 15476KB [ 776.991120] kmalloc-256 4508KB 5313KB [ 776.997739] kmalloc-128 979KB 1488KB [ 777.003111] kmalloc-96 3598KB 4020KB [ 777.008826] kmalloc-64 2415KB 4224KB [ 777.014295] kmalloc-32 1846KB 2445KB [ 777.019989] kmalloc-192 1685KB 2288KB [ 777.025352] kmem_cache 177KB 183KB [ 777.031116] Out of memory (oom_kill_allocating_task): Kill process 12817 (systemd-journal) score 0 or sacrifice child [ 777.042191] Killed process 12817 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:0kB, shmem-rss:2128kB [ 777.053939] oom_reaper: reaped process 12817 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2132kB [ 777.224626] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 777.239539] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 777.263318] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 777.277043] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 777.284605] systemd[1]: Stopped Journal Service. [ 777.333869] systemd[1]: Starting Journal Service... [ 777.526194] systemd-journald[13175]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. 13:08:34 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLOCK(r0, &(0x7f0000000040)={0x8, 0x35, 0x1, 0x1}, 0x8) (async) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf}, 0xf) (async, rerun: 32) write$9p(r2, &(0x7f0000000100)="3eb66d63347e9f0afe1efd78e1337e39438c264cf53a2ffdc91a706254e6", 0x1e) (rerun: 32) 13:08:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_SSID={0x15, 0x34, @random="93388aaa8e929b9ccdf5660a6a3b123fd4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xbb, 0x401, 0x34324948, 0x9, 0x3, 0x9, 0x7, 0x40000, 0x1, 0x0, 0x1, 0x7}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) 13:08:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) (async) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_COOKIE={0xc}]}, 0x30}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xf12e6c2}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004c855}, 0x4008044) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:08:34 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000000)={0x8}, 0x1) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) [ 778.162636] systemd[1]: Started Journal Service. 13:08:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:08:37 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x20000000}, {0x2}, {0x400001}, {0x4}], 0x0, 0x0, 0x3, 0x0, 0x4}}) 13:08:37 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLOCK(r0, &(0x7f0000000040)={0x8, 0x35, 0x1, 0x1}, 0x8) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) pipe2$9p(&(0x7f0000000040), 0x0) (async) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf}, 0xf) write$9p(r2, &(0x7f0000000100)="3eb66d63347e9f0afe1efd78e1337e39438c264cf53a2ffdc91a706254e6", 0x1e) (async) write$9p(r2, &(0x7f0000000100)="3eb66d63347e9f0afe1efd78e1337e39438c264cf53a2ffdc91a706254e6", 0x1e) 13:08:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_COOKIE={0xc}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xf12e6c2}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004c855}, 0x4008044) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) (async) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_COOKIE={0xc}]}, 0x30}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xf12e6c2}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004c855}, 0x4008044) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r2, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) 13:08:37 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000000)={0x8}, 0x1) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:08:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_SSID={0x15, 0x34, @random="93388aaa8e929b9ccdf5660a6a3b123fd4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xbb, 0x401, 0x34324948, 0x9, 0x3, 0x9, 0x7, 0x40000, 0x1, 0x0, 0x1, 0x7}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 13:08:37 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x20000000}, {0x2}, {0x400001}, {0x4}], 0x0, 0x0, 0x3, 0x0, 0x4}}) 13:08:37 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000040) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x6}]}}) 13:08:37 executing program 4: openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2d0040, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="000126adc44cff00fd0000000000000032faeb8dbe1067138b89a68380f0053f7358d72115df730847b6d9f6182e860c9159b6135ecad6ef363566efff5b792d25f5c66aed9bcc70485094167b8294a9be6d7032d55d1cc13062038d074693db3d50afa7ae3c3a87484afe39bb1e38953a98e1671fbfa3a4067a60f048eb60daa6335366b85f67e395d97a53c84e0e9136faadf6f25663", @ANYRES32=0x0, @ANYBLOB="0c009900040000002b0000002c005e80180001000400000003000000070000000200000000000000080009002000000008000700bf06000014005e800800060006000000080003000700000044005e8008000900ff0100000800050034000000100001000800000006000000c0ffffff080009000700000010000100e0e200000400000007000000080007007d00000014005e80080009001f00000008000700eb06000004005e8014005e80080005000700000008000700ee020000"], 0xd8}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000801) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000a80)={0xa54, r4, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x73, 0x1b}}}}, [@NL80211_ATTR_TID_CONFIG={0x338, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1d}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffffffffffff}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x16c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x78, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x56, 0x5, 0x3, 0x0, 0x1, 0x0, 0x5b, 0x60, 0x11, 0xb, 0x32, 0x1b, 0x6533b0b25f7d6880, 0x0, 0x1, 0x5, 0x5, 0x36, 0x30, 0x5, 0x9, 0xb, 0x24, 0x6a51e596e69572b1, 0x6, 0xb, 0x24, 0x9, 0x9, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x2, 0x3f, 0x4, 0x0, 0x800, 0xfff7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x4, 0x18, 0x4e, 0x1b, 0x4, 0x24, 0x5, 0x36, 0x36, 0x2, 0x24, 0x36, 0x60, 0x34]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0xfffa, 0xd587, 0x81, 0xfff, 0x8001, 0x6, 0x8]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1328, 0x5, 0x6, 0x6, 0x9, 0x0, 0x8, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x1c00, 0x5, 0x80, 0x0, 0x1, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xa5, 0xde, 0x0, 0x8000, 0x2, 0x800]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1, 0x12, 0x48, 0xb, 0x1]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x4, 0x3, 0x16, 0x3, 0x18, 0x12, 0x1, 0x1, 0x1b, 0x6, 0x36, 0x36, 0x4f6498daae914ec2, 0x4, 0x0, 0x36, 0x48, 0x16, 0x5, 0x5, 0x5, 0x1, 0x1, 0x12, 0x3, 0x30, 0x48, 0x1b, 0x60, 0x1, 0x6]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x20, 0x2, [{}, {0x4, 0xa}, {0x2, 0x9}, {0x1, 0x5}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x4}, {0x6, 0x8}, {0x4, 0x7}, {0x1, 0x5}, {0x6, 0x9}, {0x1, 0x3}, {0x7, 0xa}, {0x0, 0x2}, {0x0, 0x8}, {0x1, 0x7}, {0x4, 0x3}, {0x1}, {0x5}, {0x2}, {0x4}, {0x6, 0xa}, {0x4, 0x2}, {0x1, 0x9}, {0x6, 0x4}, {0x2, 0x3}, {0x0, 0x6}, {0x1, 0x4}]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8000, 0x6, 0x3a, 0xba69, 0x7fff, 0x5, 0x7]}}]}]}]}, {0x194, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1c000}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x39}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x160, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x6, 0x4}, {0x3, 0x8}, {0x6, 0x8}, {0x3, 0x7}, {0x7, 0x9}, {0x6, 0x4}, {0x2, 0x6}, {0x2, 0x3}, {0x1, 0x8}, {0x5, 0x3}, {0x1, 0xa}, {0x0, 0x8}, {0x2, 0x7}, {0x7, 0x4}, {0x0, 0x3}, {0x0, 0x8}, {0x3, 0x7}, {0x1, 0x4}, {0x0, 0xa}, {0x4, 0x2}, {0x7, 0x9}, {0x6}, {0x1, 0x2}, {0x3, 0x4}, {0x1, 0x5}, {0x0, 0x2}, {0x3, 0x9}, {0x7, 0x3}, {0x6, 0x8}, {0x1, 0x8}, {0x6, 0x8}, {0x2, 0x5}, {0x1, 0x8}, {0x7, 0x1}, {0x2, 0x2}, {0x3}, {0x1, 0x4}, {0x4, 0x3}, {0x3, 0x5}, {0x7, 0x7}, {0x6, 0x1}, {0x2, 0x3}, {0x4, 0x6}, {0x2, 0x3}, {0x7, 0x1}, {0x7, 0x2}, {0x4, 0x6}, {0x1, 0x1}, {0x1, 0x8}, {0x6, 0x5}, {}, {0x1, 0x7}, {0x3, 0x1}, {0x4, 0x8}, {0x3, 0x9}, {0x7, 0x6}, {0x4, 0x4}, {0x4, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x3, 0x9, 0x12, 0x6, 0x1, 0x30, 0x2, 0x2, 0x5, 0x30, 0x24, 0xb, 0xc, 0xc, 0x34, 0x12, 0x18, 0x9, 0x48, 0x48, 0x18, 0x9, 0x2, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5a, 0x4, 0x3, 0x8, 0x20, 0x9, 0x5]}}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x77, 0x7ff, 0x3, 0x8000, 0x0, 0x5, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe692, 0x3, 0xffff, 0x1, 0x798, 0x8, 0x1ff, 0x330]}}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x7, 0x2}, {0x0, 0xa}, {0x1, 0x5}, {0x1}, {0x2, 0x3}, {0x2, 0xa}, {0x1, 0x8}, {0x0, 0x9}, {0x4, 0x8}, {0x6}, {0x1, 0x7}, {0x7, 0x2}, {0x1, 0x8}, {0x0, 0x2}, {0x6, 0x8}, {0x7, 0x6}, {0x4, 0x3}, {0x4, 0x6}, {0x0, 0xa}, {0x3, 0x8}, {0x1, 0x8}, {0x3, 0x7}, {0x5, 0x4}, {0x2, 0x8}, {0x7, 0x2}, {0x6, 0x4}, {0x1, 0x7}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x6, 0x9}, {0x5, 0x7}, {0x1, 0x3}, {0x7, 0x8}, {0x4}, {0x4, 0x8}, {0x2, 0x8}, {0x6, 0x9}, {0x5, 0x7}, {0x1}, {0x4, 0x8}, {0x4}, {0x1, 0x5}, {0x7}, {0x6, 0x8}, {0x7, 0x1}, {0x7, 0x4}, {0x1, 0x5}, {0x4, 0xa}, {0x7, 0x3}, {}, {0x6, 0x8}, {0x0, 0x3}, {0x7, 0xa}, {0x2, 0x1}, {0x1, 0x8}, {0x3, 0x9}, {0x7, 0x7}, {0x4, 0x3}, {0x4, 0x2}, {0x2, 0x3}, {0x5, 0x3}, {0x1, 0x3}, {0x6, 0x4}, {0x4, 0x4}, {0x1, 0x8}, {0x5, 0xa}, {0x7, 0x4}, {0x5, 0x5}, {0x7, 0x7}, {0x5, 0x8}, {0x5, 0x2}, {0x1, 0x1}, {0x6, 0x4}]}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x2}, {0x3, 0x8}, {0x6, 0x2}, {0x2, 0x9}, {0x6, 0x1}, {0x0, 0xa}, {0x6, 0x2}, {0x2, 0x4}, {0x6, 0x8}, {0x7, 0x4}, {0x4, 0x4}, {0x1}, {0x3, 0x3}, {0x4, 0x2}, {0x0, 0x5}, {0x3, 0x5}, {0x4, 0x9}, {0x6}, {0x7}, {0x7}, {0x4, 0x9}, {0x3, 0x4}, {0x1, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x7, 0x8}, {0x0, 0xa}, {0x6, 0x3}, {0x4}, {0x0, 0xa}, {0x5, 0x4}, {0x4, 0x8}, {0x1, 0x4}, {0x2, 0x4}, {0x0, 0x7}, {0x5, 0x3}, {0x3, 0x5}, {0x0, 0x8}, {0x0, 0x2}, {0x7, 0x1}, {0x2, 0x7}, {0x7, 0x4}, {0x0, 0x6}, {0x2, 0x3}, {0x1, 0x9}, {0x6, 0x6}, {0x3, 0x3}, {0x1, 0x8}, {0x1, 0x1}, {0x1, 0x7}, {0x1, 0x2}, {0x3, 0x1}, {0x3, 0x9}, {0x1, 0xa}, {0x1, 0x1}, {0x0, 0x6}, {0x1}, {0x5, 0x8}, {0x7, 0x1}, {0x5, 0x3}, {0x0, 0x5}, {0x4, 0x7}, {0x2, 0xa}, {0x7, 0x2}, {0x6, 0x3}, {0x0, 0xa}, {0x1, 0x7}, {0x7, 0x8}, {0x6, 0x5}]}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0xb4, 0x11d, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x38, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x80, 0x9, 0xb8, 0x10, 0xf4f3, 0x6, 0x2]}}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x41}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9b}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x40}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x250, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x69}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1000}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x9c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x54, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0xfff7, 0x1, 0xf87, 0x5, 0x20, 0x5]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x2, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0x9}, {0x6, 0x3}, {0x0, 0x7}, {0x6, 0x8}, {0x5, 0xa}, {0x7, 0x9}, {0x4, 0x2}, {0x2}, {0x4, 0x3}, {0x6, 0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffffffffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x41}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x58}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x400}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x42}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffffffffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x98, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x5c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x6, 0x9}, {0x7, 0xa}, {0x0, 0x5}, {0x5, 0x2}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x8}, {0x0, 0xa}, {0x7, 0x8}, {0x7, 0x3}, {0x0, 0x1}, {0x7, 0x5}, {0x5, 0x9}, {0x1, 0x6}, {0x3, 0x7}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x9}, {0x3}, {}, {0x6, 0x3}, {0x5, 0x3}, {0x2, 0x7}, {0x4, 0x9}, {0x7, 0x7}, {0x6, 0x9}, {0x4, 0x8}, {0x2, 0x2}, {0x0, 0xa}, {0x5, 0x5}, {0x5, 0x2}, {0x0, 0x5}, {0x7, 0x4}, {0x1, 0x1}, {0x5, 0x3}, {0x2, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc99, 0x8, 0xf2, 0x8, 0xf221, 0x8, 0x2, 0x4]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x24c, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}]}, {0xd0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xa0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x4c, 0xef4, 0x0, 0xff7f, 0x9, 0x5083, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffc, 0x2, 0x4, 0x8, 0x2, 0x5, 0xde, 0xea4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8000, 0x5, 0xff, 0x3f62, 0x2, 0xfff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0xc7a9, 0x7, 0x8000, 0x8, 0x7fff, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0xfbff, 0x1, 0x4, 0x3880, 0x1, 0x4]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x60, 0x0, 0x6, 0x12, 0x60, 0x60, 0x18, 0x5]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x38}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x56}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x430a}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc8}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x200}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x81}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x73}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000001}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x86}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe3}]}]}, @NL80211_ATTR_TID_CONFIG={0x7c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x96}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6e}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x78, 0x11d, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x13}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x29}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xb0, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x36}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x97}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x4}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0xa54}, 0x1, 0x0, 0x0, 0x20000801}, 0x4c000) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000200)=0x2) 13:08:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_SSID={0x15, 0x34, @random="93388aaa8e929b9ccdf5660a6a3b123fd4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:08:38 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x20000000}, {0x2}, {0x400001}, {0x4}], 0x0, 0x0, 0x3, 0x0, 0x4}}) 13:08:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000040) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x6}]}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000040) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r2, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x6}]}}) (async) [ 785.765199] oom_reaper: reaped process 13211 (syz-executor.0), now anon-rss:0kB, file-rss:14336kB, shmem-rss:16kB [ 785.803405] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 785.820423] systemd-journal cpuset=/ mems_allowed=0-1 [ 785.825782] CPU: 0 PID: 13175 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 785.833775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 785.843132] Call Trace: [ 785.845728] dump_stack+0x1fc/0x2ef [ 785.849340] dump_header+0x15d/0xc3f [ 785.853038] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 785.858320] ? ___ratelimit+0x319/0x590 [ 785.862294] oom_kill_process.cold+0x10/0x692 [ 785.866849] ? check_preemption_disabled+0x41/0x280 [ 785.871852] ? has_intersects_mems_allowed+0x1d6/0x290 [ 785.877114] out_of_memory+0x1072/0x1390 [ 785.881163] ? oom_killer_disable+0x270/0x270 [ 785.885645] ? mutex_trylock+0x15f/0x1a0 [ 785.889713] __alloc_pages_nodemask+0x23a2/0x2890 [ 785.894559] ? find_get_entry+0x4cd/0x8a0 [ 785.898696] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 785.903568] alloc_pages_current+0x193/0x2a0 [ 785.908071] filemap_fault+0x146e/0x2180 [ 785.912127] ext4_filemap_fault+0x84/0xb0 [ 785.916274] __do_fault+0x10b/0x4b0 [ 785.919901] __handle_mm_fault+0x273b/0x41c0 [ 785.924294] ? vm_insert_page+0x9c0/0x9c0 [ 785.928457] ? check_preemption_disabled+0x41/0x280 [ 785.933475] handle_mm_fault+0x436/0xb10 [ 785.937529] __do_page_fault+0x68e/0xd60 [ 785.941575] ? trace_hardirqs_off_caller+0x6e/0x210 [ 785.946573] ? spurious_fault+0x840/0x840 [ 785.950708] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 785.955535] ? page_fault+0x8/0x30 [ 785.959153] page_fault+0x1e/0x30 [ 785.962615] RIP: 0033:0x7f519b33f2e3 [ 785.966328] Code: Bad RIP value. [ 785.969676] RSP: 002b:00007ffe1ee66208 EFLAGS: 00010246 [ 785.975020] RAX: 0000000000000001 RBX: 0000559a00cf61e0 RCX: 00007f519b33f2e3 [ 785.982272] RDX: 0000000000000013 RSI: 00007ffe1ee66210 RDI: 000000000000000c [ 785.989527] RBP: 00007ffe1ee66400 R08: 00007ffe1ef0e000 R09: 000000c836ba777c [ 785.996777] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe1ee66210 [ 786.004030] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005f5c24b0c3f67 [ 786.016973] syz-executor.0: vmalloc: allocation failure, allocated 1753747456 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 786.025634] Mem-Info: [ 786.031052] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 786.033424] active_anon:17845 inactive_anon:15015 isolated_anon:0 [ 786.033424] active_file:15 inactive_file:15 isolated_file:0 [ 786.033424] unevictable:0 dirty:0 writeback:0 unstable:0 [ 786.033424] slab_reclaimable:15219 slab_unreclaimable:118587 [ 786.033424] mapped:22310 shmem:15650 pagetables:597 bounce:0 [ 786.033424] free:13846 free_pcp:283 free_cma:0 [ 786.041986] CPU: 0 PID: 13211 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 786.076921] Node 0 active_anon:70452kB inactive_anon:19328kB active_file:56kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21624kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 786.079894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 786.107527] Node 1 active_anon:928kB inactive_anon:40732kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1372kB dirty:0kB writeback:0kB shmem:40976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 786.117312] Call Trace: [ 786.117334] dump_stack+0x1fc/0x2ef [ 786.117353] warn_alloc.cold+0x7b/0x18f [ 786.154392] ? zone_watermark_ok_safe+0x260/0x260 [ 786.157015] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 786.159240] ? retint_kernel+0x2d/0x2d [ 786.186220] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 786.189307] ? policy_node+0x52/0x140 [ 786.194292] Node 0 DMA32 free:17860kB min:35996kB low:44992kB high:53988kB active_anon:70452kB inactive_anon:19328kB active_file:56kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7680kB pagetables:2284kB bounce:0kB free_pcp:632kB local_pcp:248kB free_cma:0kB [ 786.198097] __vmalloc_area_node+0x4fd/0x780 [ 786.198119] ? __vmalloc_node_range+0x180/0x180 [ 786.227041] lowmem_reserve[]: 0 0 1 1 1 [ 786.231503] ? _raw_spin_unlock+0x29/0x40 [ 786.236479] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 786.240418] ? __get_vm_area_node+0x2e2/0x3a0 [ 786.244537] lowmem_reserve[]: 0 0 0 0 0 [ 786.270387] __vmalloc_node_range+0xed/0x180 [ 786.270405] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 786.270422] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 786.274901] Node 1 Normal free:26648kB min:53876kB low:67344kB high:80812kB active_anon:928kB inactive_anon:40732kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:96kB pagetables:104kB bounce:0kB free_pcp:500kB local_pcp:248kB free_cma:0kB [ 786.278871] vmalloc_user+0x70/0xe0 [ 786.278886] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 786.278902] vb2_vmalloc_alloc+0xb3/0x2f0 [ 786.283283] lowmem_reserve[]: 0 0 0 0 0 [ 786.287598] __vb2_queue_alloc+0x472/0xe60 [ 786.287626] vb2_core_create_bufs+0x273/0x7e0 [ 786.292978] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 786.321424] ? __vb2_queue_free+0x870/0x870 [ 786.321439] ? __video_do_ioctl+0x632/0xcd0 [ 786.321459] ? __mutex_lock+0x368/0x1190 [ 786.325058] Node 0 DMA32: 1965*4kB (UME) 795*8kB (UME) 171*16kB (UME) 29*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17884kB [ 786.329374] vb2_create_bufs+0x332/0x620 [ 786.329390] ? mark_held_locks+0xf0/0xf0 [ 786.329406] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 786.333531] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 786.337503] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 786.337518] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 786.337540] v4l_create_bufs+0xb2/0x160 [ 786.341744] Node 1 Normal: 94*4kB (M) 86*8kB (UME) 77*16kB (ME) 61*32kB (M) 26*64kB (ME) 18*128kB (UM) 4*256kB (UME) 2*512kB (ME) 2*1024kB (UE) 3*2048kB (UME) 2*4096kB (UM) = 26648kB [ 786.346233] __video_do_ioctl+0x49a/0xcd0 [ 786.346258] ? v4l_querycap+0x340/0x340 [ 786.359433] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 786.363726] ? __might_fault+0x192/0x1d0 [ 786.368138] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 786.372168] ? v4l_querycap+0x340/0x340 [ 786.385870] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 786.389915] video_usercopy+0x13f/0xfa0 [ 786.393956] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 786.399181] ? v4l_enumstd+0x60/0x60 [ 786.399197] ? do_futex+0x171/0x1880 [ 786.399217] ? mark_held_locks+0xf0/0xf0 [ 786.410349] 15680 total pagecache pages [ 786.415421] ? debug_check_no_obj_freed+0x201/0x490 [ 786.420631] 0 pages in swap cache [ 786.424571] ? video_usercopy+0xfa0/0xfa0 [ 786.440967] Swap cache stats: add 0, delete 0, find 0/0 [ 786.445086] v4l2_ioctl+0x147/0x1a0 [ 786.449061] Free swap = 0kB [ 786.457865] ? video_devdata+0xa0/0xa0 [ 786.457881] do_vfs_ioctl+0xcdb/0x12e0 [ 786.457898] ? lock_downgrade+0x720/0x720 [ 786.461934] Total swap = 0kB [ 786.470499] ? check_preemption_disabled+0x41/0x280 [ 786.470513] ? ioctl_preallocate+0x200/0x200 [ 786.470531] ? __fget+0x356/0x510 [ 786.474832] 2097051 pages RAM [ 786.483659] ? do_dup2+0x450/0x450 [ 786.483673] ? __se_sys_futex+0x298/0x3b0 [ 786.483696] ksys_ioctl+0x9b/0xc0 [ 786.487658] 0 pages HighMem/MovableOnly [ 786.496210] __x64_sys_ioctl+0x6f/0xb0 [ 786.496224] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 786.496240] do_syscall_64+0xf9/0x620 [ 786.499931] 369649 pages reserved [ 786.503639] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 786.507693] 0 pages cma reserved [ 786.511641] RIP: 0033:0x7f68c24140f9 [ 786.516655] Unreclaimable slab info: [ 786.520076] Code: Bad RIP value. [ 786.524224] Name Used Total [ 786.529566] RSP: 002b:00007f68c0986168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 786.529579] RAX: ffffffffffffffda RBX: 00007f68c2533f80 RCX: 00007f68c24140f9 [ 786.529587] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000005 [ 786.529597] RBP: 00007f68c246fae9 R08: 0000000000000000 R09: 0000000000000000 [ 786.533209] pid_2 49KB 152KB [ 786.536204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 786.536212] R13: 00007fff6155d44f R14: 00007f68c0986300 R15: 0000000000022000 [ 786.542254] Mem-Info: [ 786.552736] batadv_tt_change_cache 0KB 3KB [ 786.559657] active_anon:17845 inactive_anon:15015 isolated_anon:0 [ 786.559657] active_file:15 inactive_file:15 isolated_file:0 [ 786.559657] unevictable:0 dirty:0 writeback:0 unstable:0 [ 786.559657] slab_reclaimable:15219 slab_unreclaimable:118587 [ 786.559657] mapped:22310 shmem:15650 pagetables:597 bounce:0 [ 786.559657] free:13846 free_pcp:278 free_cma:0 [ 786.567125] batadv_tl_cache 5KB 12KB [ 786.567406] Node 0 active_anon:70452kB inactive_anon:19328kB active_file:56kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21624kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 786.570884] TIPC 12KB 15KB [ 786.575021] Node 1 active_anon:928kB inactive_anon:40732kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1372kB dirty:0kB writeback:0kB shmem:40976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 786.589906] SCTPv6 16KB 24KB [ 786.594916] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 786.600586] SCTP 5KB 7KB [ 786.603551] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 786.615987] DCCPv6 17KB 22KB [ 786.621296] Node 0 DMA32 free:17860kB min:35996kB low:44992kB high:53988kB active_anon:70452kB inactive_anon:19328kB active_file:56kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7680kB pagetables:2284kB bounce:0kB free_pcp:608kB local_pcp:360kB free_cma:0kB [ 786.623438] DCCP 16KB 21KB [ 786.631179] lowmem_reserve[]: 0 0 1 1 1 [ 786.631200] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 786.631233] lowmem_reserve[]: 0 0 0 0 0 [ 786.649838] RXRPC 13KB 13KB [ 786.656557] Node 1 Normal free:26648kB min:53876kB low:67344kB high:80812kB active_anon:928kB inactive_anon:40732kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:96kB pagetables:104kB bounce:0kB free_pcp:500kB local_pcp:252kB free_cma:0kB [ 786.663137] rxrpc_call_jar 90KB 94KB [ 786.665807] lowmem_reserve[]: 0 0 0 0 0 [ 786.678576] bridge_fdb_cache 10KB 15KB [ 786.684675] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 786.723952] fib6_nodes 183KB 188KB [ 786.756125] Node 0 DMA32: 1965*4kB (UME) 795*8kB (UME) 171*16kB (UME) 29*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17884kB [ 786.787023] ip6_dst_cache 250KB 326KB [ 786.830064] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 786.857125] RAWv6 81KB 81KB [ 786.857137] UDPv6 30KB 37KB [ 786.857150] TCPv6 27KB 30KB [ 786.857170] nf_conntrack 7KB 18KB [ 786.857234] t10_alua_lu_gp_cache 0KB 3KB [ 786.877208] Node 1 Normal: 94*4kB (M) 86*8kB (UME) 77*16kB (ME) 61*32kB (M) 26*64kB (ME) 18*128kB (UM) 4*256kB (UME) 2*512kB (ME) 2*1024kB (UE) 3*2048kB (UME) 2*4096kB (UM) = 26648kB [ 786.892603] sd_ext_cdb 0KB 7KB [ 786.892614] scsi_sense_cache 1056KB 1060KB [ 786.892624] virtio_scsi_cmd 16KB 16KB [ 786.892636] sgpool-128 8KB 8KB [ 786.911831] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 786.930591] sgpool-64 4KB 12KB [ 786.930601] sgpool-32 2KB 15KB [ 786.930611] sgpool-16 1KB 7KB [ 786.930620] sgpool-8 0KB 7KB [ 786.930637] mqueue_inode_cache 10KB 22KB [ 786.930653] bio_post_read_ctx 14KB 15KB [ 786.930724] bio-2 14KB 15KB [ 786.950751] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 786.963186] jfs_mp 7KB 7KB [ 786.963994] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 786.982275] cifs_small_rq 15KB 16KB [ 786.991829] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 786.994167] cifs_request 67KB 67KB [ 787.001387] 15680 total pagecache pages [ 787.009527] cifs_mpx_ids 0KB 7KB [ 787.020411] 0 pages in swap cache [ 787.025544] nfs_commit_data 3KB 14KB [ 787.044462] Swap cache stats: add 0, delete 0, find 0/0 [ 787.056656] nfs_write_data 34KB 44KB [ 787.066272] Free swap = 0kB [ 787.078960] ext4_system_zone 1KB 7KB [ 787.079127] Total swap = 0kB [ 787.094520] bio-1 1KB 7KB [ 787.104556] 2097051 pages RAM [ 787.116307] pid_namespace 2KB 7KB [ 787.123439] 0 pages HighMem/MovableOnly [ 787.139218] rpc_buffers 17KB 25KB [ 787.148865] 369649 pages reserved [ 787.153999] rpc_tasks 2KB 7KB [ 787.154791] 0 pages cma reserved [ 787.165092] UNIX 748KB 765KB [ 787.240712] tcp_bind_bucket 1KB 4KB [ 787.249431] ip_fib_trie 27KB 31KB [ 787.254816] ip_fib_alias 129KB 134KB [ 787.265192] ip_dst_cache 12KB 48KB [ 787.273979] RAW 48KB 52KB [ 787.284160] UDP 55KB 74KB [ 787.292725] TCP 8KB 11KB [ 787.303020] hugetlbfs_inode_cache 3KB 15KB [ 787.311902] fscache_cookie_jar 1KB 11KB [ 787.322369] eventpoll_pwq 25KB 47KB [ 787.331052] eventpoll_epi 46KB 66KB [ 787.341851] inotify_inode_mark 20KB 51KB [ 787.350545] request_queue 199KB 199KB [ 787.361011] blkdev_requests 1KB 3KB [ 787.369642] blkdev_ioc 26KB 34KB [ 787.375021] bio-0 1460KB 1500KB [ 787.385248] biovec-max 1658KB 1740KB [ 787.393764] biovec-64 1368KB 1425KB [ 787.403822] biovec-16 105KB 131KB [ 787.412373] bio_integrity_payload 1KB 8KB [ 787.422768] khugepaged_mm_slot 7KB 34KB [ 787.431639] uid_cache 0KB 4KB [ 787.442040] dmaengine-unmap-2 0KB 3KB [ 787.450735] skbuff_fclone_cache 62KB 161KB [ 787.461496] skbuff_head_cache 7370KB 7372KB [ 787.470176] configfs_dir_cache 3KB 11KB [ 787.480987] file_lock_cache 57KB 186KB [ 787.489873] file_lock_ctx 9KB 11KB [ 787.495250] fsnotify_mark_connector 10KB 31KB [ 787.509329] net_namespace 61KB 61KB [ 787.514717] shmem_inode_cache 8084KB 8345KB [ 787.524251] task_delay_info 187KB 407KB [ 787.533548] taskstats 57KB 172KB [ 787.543424] proc_dir_entry 757KB 761KB [ 787.552753] pde_opener 9KB 58KB [ 787.562284] seq_file 284KB 535KB [ 787.571834] sigqueue 53KB 59KB [ 787.581519] kernfs_node_cache 18229KB 18250KB [ 787.591085] mnt_cache 179KB 188KB [ 787.601127] filp 7171KB 7623KB [ 787.610580] names_cache 137436KB 137496KB [ 787.620422] iint_cache 41KB 71KB [ 787.629927] key_jar 4KB 11KB [ 787.635383] uts_namespace 2KB 7KB [ 787.644781] nsproxy 2KB 7KB [ 787.654119] vm_area_struct 3354KB 5019KB [ 787.663616] mm_struct 448KB 916KB [ 787.673040] fs_cache 139KB 360KB [ 787.682563] files_cache 504KB 735KB [ 787.691901] signal_cache 1036KB 1696KB [ 787.701610] sighand_cache 545KB 603KB [ 787.711185] task_struct 6369KB 6375KB [ 787.720950] cred_jar 2066KB 2160KB [ 787.730417] anon_vma_chain 1069KB 1803KB [ 787.740199] anon_vma 130KB 269KB [ 787.749704] pid 78KB 264KB [ 787.755079] Acpi-Operand 156KB 202KB [ 787.764500] Acpi-ParseExt 8KB 11KB [ 787.773816] Acpi-Parse 41KB 47KB [ 787.783314] Acpi-State 52KB 63KB [ 787.792627] Acpi-Namespace 21KB 27KB [ 787.802256] numa_policy 0KB 3KB [ 787.811795] debug_objects_cache 1211KB 1580KB [ 787.821804] trace_event_file 297KB 298KB [ 787.831515] ftrace_event_field 398KB 401KB [ 787.841495] pool_workqueue 127KB 128KB [ 787.851010] page->ptl 512KB 1047KB [ 787.860992] kmalloc-2097152 2050KB 2050KB [ 787.870551] kmalloc-524288 2056KB 2056KB [ 787.880489] kmalloc-262144 1290KB 1290KB [ 787.890130] kmalloc-131072 650KB 650KB [ 787.896692] kmalloc-65536 2112KB 2178KB [ 787.902160] kmalloc-32768 1815KB 1815KB [ 787.912457] kmalloc-16384 1105KB 1138KB [ 787.918813] kmalloc-8192 4438KB 4479KB [ 787.930142] kmalloc-4096 21131KB 21169KB [ 787.936937] kmalloc-2048 12514KB 13362KB [ 787.942902] kmalloc-1024 7600KB 7945KB [ 787.952920] kmalloc-512 15360KB 15360KB [ 787.960125] kmalloc-256 4515KB 5310KB [ 787.970464] kmalloc-128 985KB 1488KB [ 787.979881] kmalloc-96 3606KB 4020KB [ 787.989556] kmalloc-64 2430KB 4224KB [ 787.995029] kmalloc-32 1871KB 2445KB [ 788.001371] kmalloc-192 1694KB 2288KB [ 788.011121] kmem_cache 177KB 183KB [ 788.017464] Out of memory (oom_kill_allocating_task): Kill process 13175 (systemd-journal) score 0 or sacrifice child [ 788.033050] Killed process 13175 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:0kB, shmem-rss:1292kB [ 788.045734] oom_reaper: reaped process 13175 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1380kB [ 788.154448] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 788.169847] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 788.192895] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 788.203634] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 788.213851] systemd[1]: Stopped Journal Service. [ 788.240235] systemd[1]: Starting Journal Service... [ 788.372979] systemd-journald[13258]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 788.877983] systemd[1]: Started Journal Service. 13:08:48 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x0, @multicast, 'veth1_to_team\x00'}}, 0x1e) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x1, @sliced={0x3, [0x85, 0x6, 0x2, 0x3f, 0x401, 0x400, 0x9, 0x80a5, 0x0, 0x401, 0x3, 0xdcb, 0xfff, 0x1ff, 0x7, 0x200, 0xfff, 0x8000, 0x0, 0x3, 0x1ff, 0x61, 0xaf, 0x2, 0xdf, 0x100, 0x4d87, 0x2, 0x1, 0xfbff, 0x0, 0x5, 0x4, 0xffff, 0x0, 0x89a3, 0x8001, 0x1ff, 0x1, 0x200, 0x101, 0x1, 0x8090, 0x4, 0x5, 0x5, 0x3, 0x26], 0x9}}) 13:08:48 executing program 5: openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2d0040, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="000126adc44cff00fd0000000000000032faeb8dbe1067138b89a68380f0053f7358d72115df730847b6d9f6182e860c9159b6135ecad6ef363566efff5b792d25f5c66aed9bcc70485094167b8294a9be6d7032d55d1cc13062038d074693db3d50afa7ae3c3a87484afe39bb1e38953a98e1671fbfa3a4067a60f048eb60daa6335366b85f67e395d97a53c84e0e9136faadf6f25663", @ANYRES32=0x0, @ANYBLOB="0c009900040000002b0000002c005e80180001000400000003000000070000000200000000000000080009002000000008000700bf06000014005e800800060006000000080003000700000044005e8008000900ff0100000800050034000000100001000800000006000000c0ffffff080009000700000010000100e0e200000400000007000000080007007d00000014005e80080009001f00000008000700eb06000004005e8014005e80080005000700000008000700ee020000"], 0xd8}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000801) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000a80)={0xa54, r4, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x73, 0x1b}}}}, [@NL80211_ATTR_TID_CONFIG={0x338, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1d}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffffffffffff}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x16c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x78, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x56, 0x5, 0x3, 0x0, 0x1, 0x0, 0x5b, 0x60, 0x11, 0xb, 0x32, 0x1b, 0x6533b0b25f7d6880, 0x0, 0x1, 0x5, 0x5, 0x36, 0x30, 0x5, 0x9, 0xb, 0x24, 0x6a51e596e69572b1, 0x6, 0xb, 0x24, 0x9, 0x9, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x2, 0x3f, 0x4, 0x0, 0x800, 0xfff7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x4, 0x18, 0x4e, 0x1b, 0x4, 0x24, 0x5, 0x36, 0x36, 0x2, 0x24, 0x36, 0x60, 0x34]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0xfffa, 0xd587, 0x81, 0xfff, 0x8001, 0x6, 0x8]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1328, 0x5, 0x6, 0x6, 0x9, 0x0, 0x8, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x1c00, 0x5, 0x80, 0x0, 0x1, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xa5, 0xde, 0x0, 0x8000, 0x2, 0x800]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1, 0x12, 0x48, 0xb, 0x1]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x4, 0x3, 0x16, 0x3, 0x18, 0x12, 0x1, 0x1, 0x1b, 0x6, 0x36, 0x36, 0x4f6498daae914ec2, 0x4, 0x0, 0x36, 0x48, 0x16, 0x5, 0x5, 0x5, 0x1, 0x1, 0x12, 0x3, 0x30, 0x48, 0x1b, 0x60, 0x1, 0x6]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x20, 0x2, [{}, {0x4, 0xa}, {0x2, 0x9}, {0x1, 0x5}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x4}, {0x6, 0x8}, {0x4, 0x7}, {0x1, 0x5}, {0x6, 0x9}, {0x1, 0x3}, {0x7, 0xa}, {0x0, 0x2}, {0x0, 0x8}, {0x1, 0x7}, {0x4, 0x3}, {0x1}, {0x5}, {0x2}, {0x4}, {0x6, 0xa}, {0x4, 0x2}, {0x1, 0x9}, {0x6, 0x4}, {0x2, 0x3}, {0x0, 0x6}, {0x1, 0x4}]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8000, 0x6, 0x3a, 0xba69, 0x7fff, 0x5, 0x7]}}]}]}]}, {0x194, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1c000}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x39}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x160, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x6, 0x4}, {0x3, 0x8}, {0x6, 0x8}, {0x3, 0x7}, {0x7, 0x9}, {0x6, 0x4}, {0x2, 0x6}, {0x2, 0x3}, {0x1, 0x8}, {0x5, 0x3}, {0x1, 0xa}, {0x0, 0x8}, {0x2, 0x7}, {0x7, 0x4}, {0x0, 0x3}, {0x0, 0x8}, {0x3, 0x7}, {0x1, 0x4}, {0x0, 0xa}, {0x4, 0x2}, {0x7, 0x9}, {0x6}, {0x1, 0x2}, {0x3, 0x4}, {0x1, 0x5}, {0x0, 0x2}, {0x3, 0x9}, {0x7, 0x3}, {0x6, 0x8}, {0x1, 0x8}, {0x6, 0x8}, {0x2, 0x5}, {0x1, 0x8}, {0x7, 0x1}, {0x2, 0x2}, {0x3}, {0x1, 0x4}, {0x4, 0x3}, {0x3, 0x5}, {0x7, 0x7}, {0x6, 0x1}, {0x2, 0x3}, {0x4, 0x6}, {0x2, 0x3}, {0x7, 0x1}, {0x7, 0x2}, {0x4, 0x6}, {0x1, 0x1}, {0x1, 0x8}, {0x6, 0x5}, {}, {0x1, 0x7}, {0x3, 0x1}, {0x4, 0x8}, {0x3, 0x9}, {0x7, 0x6}, {0x4, 0x4}, {0x4, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x3, 0x9, 0x12, 0x6, 0x1, 0x30, 0x2, 0x2, 0x5, 0x30, 0x24, 0xb, 0xc, 0xc, 0x34, 0x12, 0x18, 0x9, 0x48, 0x48, 0x18, 0x9, 0x2, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5a, 0x4, 0x3, 0x8, 0x20, 0x9, 0x5]}}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x77, 0x7ff, 0x3, 0x8000, 0x0, 0x5, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe692, 0x3, 0xffff, 0x1, 0x798, 0x8, 0x1ff, 0x330]}}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x7, 0x2}, {0x0, 0xa}, {0x1, 0x5}, {0x1}, {0x2, 0x3}, {0x2, 0xa}, {0x1, 0x8}, {0x0, 0x9}, {0x4, 0x8}, {0x6}, {0x1, 0x7}, {0x7, 0x2}, {0x1, 0x8}, {0x0, 0x2}, {0x6, 0x8}, {0x7, 0x6}, {0x4, 0x3}, {0x4, 0x6}, {0x0, 0xa}, {0x3, 0x8}, {0x1, 0x8}, {0x3, 0x7}, {0x5, 0x4}, {0x2, 0x8}, {0x7, 0x2}, {0x6, 0x4}, {0x1, 0x7}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x6, 0x9}, {0x5, 0x7}, {0x1, 0x3}, {0x7, 0x8}, {0x4}, {0x4, 0x8}, {0x2, 0x8}, {0x6, 0x9}, {0x5, 0x7}, {0x1}, {0x4, 0x8}, {0x4}, {0x1, 0x5}, {0x7}, {0x6, 0x8}, {0x7, 0x1}, {0x7, 0x4}, {0x1, 0x5}, {0x4, 0xa}, {0x7, 0x3}, {}, {0x6, 0x8}, {0x0, 0x3}, {0x7, 0xa}, {0x2, 0x1}, {0x1, 0x8}, {0x3, 0x9}, {0x7, 0x7}, {0x4, 0x3}, {0x4, 0x2}, {0x2, 0x3}, {0x5, 0x3}, {0x1, 0x3}, {0x6, 0x4}, {0x4, 0x4}, {0x1, 0x8}, {0x5, 0xa}, {0x7, 0x4}, {0x5, 0x5}, {0x7, 0x7}, {0x5, 0x8}, {0x5, 0x2}, {0x1, 0x1}, {0x6, 0x4}]}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x2}, {0x3, 0x8}, {0x6, 0x2}, {0x2, 0x9}, {0x6, 0x1}, {0x0, 0xa}, {0x6, 0x2}, {0x2, 0x4}, {0x6, 0x8}, {0x7, 0x4}, {0x4, 0x4}, {0x1}, {0x3, 0x3}, {0x4, 0x2}, {0x0, 0x5}, {0x3, 0x5}, {0x4, 0x9}, {0x6}, {0x7}, {0x7}, {0x4, 0x9}, {0x3, 0x4}, {0x1, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x7, 0x8}, {0x0, 0xa}, {0x6, 0x3}, {0x4}, {0x0, 0xa}, {0x5, 0x4}, {0x4, 0x8}, {0x1, 0x4}, {0x2, 0x4}, {0x0, 0x7}, {0x5, 0x3}, {0x3, 0x5}, {0x0, 0x8}, {0x0, 0x2}, {0x7, 0x1}, {0x2, 0x7}, {0x7, 0x4}, {0x0, 0x6}, {0x2, 0x3}, {0x1, 0x9}, {0x6, 0x6}, {0x3, 0x3}, {0x1, 0x8}, {0x1, 0x1}, {0x1, 0x7}, {0x1, 0x2}, {0x3, 0x1}, {0x3, 0x9}, {0x1, 0xa}, {0x1, 0x1}, {0x0, 0x6}, {0x1}, {0x5, 0x8}, {0x7, 0x1}, {0x5, 0x3}, {0x0, 0x5}, {0x4, 0x7}, {0x2, 0xa}, {0x7, 0x2}, {0x6, 0x3}, {0x0, 0xa}, {0x1, 0x7}, {0x7, 0x8}, {0x6, 0x5}]}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0xb4, 0x11d, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x38, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x80, 0x9, 0xb8, 0x10, 0xf4f3, 0x6, 0x2]}}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x41}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9b}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x40}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x250, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x69}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1000}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x9c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x54, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0xfff7, 0x1, 0xf87, 0x5, 0x20, 0x5]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x2, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0x9}, {0x6, 0x3}, {0x0, 0x7}, {0x6, 0x8}, {0x5, 0xa}, {0x7, 0x9}, {0x4, 0x2}, {0x2}, {0x4, 0x3}, {0x6, 0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffffffffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x41}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x58}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x400}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x42}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffffffffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x98, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x5c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x6, 0x9}, {0x7, 0xa}, {0x0, 0x5}, {0x5, 0x2}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x8}, {0x0, 0xa}, {0x7, 0x8}, {0x7, 0x3}, {0x0, 0x1}, {0x7, 0x5}, {0x5, 0x9}, {0x1, 0x6}, {0x3, 0x7}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x9}, {0x3}, {}, {0x6, 0x3}, {0x5, 0x3}, {0x2, 0x7}, {0x4, 0x9}, {0x7, 0x7}, {0x6, 0x9}, {0x4, 0x8}, {0x2, 0x2}, {0x0, 0xa}, {0x5, 0x5}, {0x5, 0x2}, {0x0, 0x5}, {0x7, 0x4}, {0x1, 0x1}, {0x5, 0x3}, {0x2, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc99, 0x8, 0xf2, 0x8, 0xf221, 0x8, 0x2, 0x4]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x24c, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}]}, {0xd0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xa0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x4c, 0xef4, 0x0, 0xff7f, 0x9, 0x5083, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffc, 0x2, 0x4, 0x8, 0x2, 0x5, 0xde, 0xea4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8000, 0x5, 0xff, 0x3f62, 0x2, 0xfff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0xc7a9, 0x7, 0x8000, 0x8, 0x7fff, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0xfbff, 0x1, 0x4, 0x3880, 0x1, 0x4]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x60, 0x0, 0x6, 0x12, 0x60, 0x60, 0x18, 0x5]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x38}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x56}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x430a}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc8}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x200}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x81}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x73}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000001}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x86}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe3}]}]}, @NL80211_ATTR_TID_CONFIG={0x7c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x96}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6e}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x78, 0x11d, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x13}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x29}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xb0, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x36}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x97}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x4}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0xa54}, 0x1, 0x0, 0x0, 0x20000801}, 0x4c000) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000200)=0x2) 13:08:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:08:48 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x5, 0x1, 0x3, "ce4b94b596c055bd092d3b245b65b4aa8138edc34966714e8489dbc649dbaf9b", 0x34325241}) 13:08:48 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000040) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x6}]}}) 13:08:48 executing program 4: openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2d0040, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="000126adc44cff00fd0000000000000032faeb8dbe1067138b89a68380f0053f7358d72115df730847b6d9f6182e860c9159b6135ecad6ef363566efff5b792d25f5c66aed9bcc70485094167b8294a9be6d7032d55d1cc13062038d074693db3d50afa7ae3c3a87484afe39bb1e38953a98e1671fbfa3a4067a60f048eb60daa6335366b85f67e395d97a53c84e0e9136faadf6f25663", @ANYRES32=0x0, @ANYBLOB="0c009900040000002b0000002c005e80180001000400000003000000070000000200000000000000080009002000000008000700bf06000014005e800800060006000000080003000700000044005e8008000900ff0100000800050034000000100001000800000006000000c0ffffff080009000700000010000100e0e200000400000007000000080007007d00000014005e80080009001f00000008000700eb06000004005e8014005e80080005000700000008000700ee020000"], 0xd8}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000801) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) (async) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000a80)={0xa54, r4, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x73, 0x1b}}}}, [@NL80211_ATTR_TID_CONFIG={0x338, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1d}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffffffffffff}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x16c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x78, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x56, 0x5, 0x3, 0x0, 0x1, 0x0, 0x5b, 0x60, 0x11, 0xb, 0x32, 0x1b, 0x6533b0b25f7d6880, 0x0, 0x1, 0x5, 0x5, 0x36, 0x30, 0x5, 0x9, 0xb, 0x24, 0x6a51e596e69572b1, 0x6, 0xb, 0x24, 0x9, 0x9, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x2, 0x3f, 0x4, 0x0, 0x800, 0xfff7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x4, 0x18, 0x4e, 0x1b, 0x4, 0x24, 0x5, 0x36, 0x36, 0x2, 0x24, 0x36, 0x60, 0x34]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0xfffa, 0xd587, 0x81, 0xfff, 0x8001, 0x6, 0x8]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1328, 0x5, 0x6, 0x6, 0x9, 0x0, 0x8, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x1c00, 0x5, 0x80, 0x0, 0x1, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xa5, 0xde, 0x0, 0x8000, 0x2, 0x800]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1, 0x12, 0x48, 0xb, 0x1]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x4, 0x3, 0x16, 0x3, 0x18, 0x12, 0x1, 0x1, 0x1b, 0x6, 0x36, 0x36, 0x4f6498daae914ec2, 0x4, 0x0, 0x36, 0x48, 0x16, 0x5, 0x5, 0x5, 0x1, 0x1, 0x12, 0x3, 0x30, 0x48, 0x1b, 0x60, 0x1, 0x6]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x20, 0x2, [{}, {0x4, 0xa}, {0x2, 0x9}, {0x1, 0x5}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x4}, {0x6, 0x8}, {0x4, 0x7}, {0x1, 0x5}, {0x6, 0x9}, {0x1, 0x3}, {0x7, 0xa}, {0x0, 0x2}, {0x0, 0x8}, {0x1, 0x7}, {0x4, 0x3}, {0x1}, {0x5}, {0x2}, {0x4}, {0x6, 0xa}, {0x4, 0x2}, {0x1, 0x9}, {0x6, 0x4}, {0x2, 0x3}, {0x0, 0x6}, {0x1, 0x4}]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8000, 0x6, 0x3a, 0xba69, 0x7fff, 0x5, 0x7]}}]}]}]}, {0x194, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1c000}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x39}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x160, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x6, 0x4}, {0x3, 0x8}, {0x6, 0x8}, {0x3, 0x7}, {0x7, 0x9}, {0x6, 0x4}, {0x2, 0x6}, {0x2, 0x3}, {0x1, 0x8}, {0x5, 0x3}, {0x1, 0xa}, {0x0, 0x8}, {0x2, 0x7}, {0x7, 0x4}, {0x0, 0x3}, {0x0, 0x8}, {0x3, 0x7}, {0x1, 0x4}, {0x0, 0xa}, {0x4, 0x2}, {0x7, 0x9}, {0x6}, {0x1, 0x2}, {0x3, 0x4}, {0x1, 0x5}, {0x0, 0x2}, {0x3, 0x9}, {0x7, 0x3}, {0x6, 0x8}, {0x1, 0x8}, {0x6, 0x8}, {0x2, 0x5}, {0x1, 0x8}, {0x7, 0x1}, {0x2, 0x2}, {0x3}, {0x1, 0x4}, {0x4, 0x3}, {0x3, 0x5}, {0x7, 0x7}, {0x6, 0x1}, {0x2, 0x3}, {0x4, 0x6}, {0x2, 0x3}, {0x7, 0x1}, {0x7, 0x2}, {0x4, 0x6}, {0x1, 0x1}, {0x1, 0x8}, {0x6, 0x5}, {}, {0x1, 0x7}, {0x3, 0x1}, {0x4, 0x8}, {0x3, 0x9}, {0x7, 0x6}, {0x4, 0x4}, {0x4, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x3, 0x9, 0x12, 0x6, 0x1, 0x30, 0x2, 0x2, 0x5, 0x30, 0x24, 0xb, 0xc, 0xc, 0x34, 0x12, 0x18, 0x9, 0x48, 0x48, 0x18, 0x9, 0x2, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5a, 0x4, 0x3, 0x8, 0x20, 0x9, 0x5]}}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x77, 0x7ff, 0x3, 0x8000, 0x0, 0x5, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe692, 0x3, 0xffff, 0x1, 0x798, 0x8, 0x1ff, 0x330]}}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x7, 0x2}, {0x0, 0xa}, {0x1, 0x5}, {0x1}, {0x2, 0x3}, {0x2, 0xa}, {0x1, 0x8}, {0x0, 0x9}, {0x4, 0x8}, {0x6}, {0x1, 0x7}, {0x7, 0x2}, {0x1, 0x8}, {0x0, 0x2}, {0x6, 0x8}, {0x7, 0x6}, {0x4, 0x3}, {0x4, 0x6}, {0x0, 0xa}, {0x3, 0x8}, {0x1, 0x8}, {0x3, 0x7}, {0x5, 0x4}, {0x2, 0x8}, {0x7, 0x2}, {0x6, 0x4}, {0x1, 0x7}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x6, 0x9}, {0x5, 0x7}, {0x1, 0x3}, {0x7, 0x8}, {0x4}, {0x4, 0x8}, {0x2, 0x8}, {0x6, 0x9}, {0x5, 0x7}, {0x1}, {0x4, 0x8}, {0x4}, {0x1, 0x5}, {0x7}, {0x6, 0x8}, {0x7, 0x1}, {0x7, 0x4}, {0x1, 0x5}, {0x4, 0xa}, {0x7, 0x3}, {}, {0x6, 0x8}, {0x0, 0x3}, {0x7, 0xa}, {0x2, 0x1}, {0x1, 0x8}, {0x3, 0x9}, {0x7, 0x7}, {0x4, 0x3}, {0x4, 0x2}, {0x2, 0x3}, {0x5, 0x3}, {0x1, 0x3}, {0x6, 0x4}, {0x4, 0x4}, {0x1, 0x8}, {0x5, 0xa}, {0x7, 0x4}, {0x5, 0x5}, {0x7, 0x7}, {0x5, 0x8}, {0x5, 0x2}, {0x1, 0x1}, {0x6, 0x4}]}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x2}, {0x3, 0x8}, {0x6, 0x2}, {0x2, 0x9}, {0x6, 0x1}, {0x0, 0xa}, {0x6, 0x2}, {0x2, 0x4}, {0x6, 0x8}, {0x7, 0x4}, {0x4, 0x4}, {0x1}, {0x3, 0x3}, {0x4, 0x2}, {0x0, 0x5}, {0x3, 0x5}, {0x4, 0x9}, {0x6}, {0x7}, {0x7}, {0x4, 0x9}, {0x3, 0x4}, {0x1, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x7, 0x8}, {0x0, 0xa}, {0x6, 0x3}, {0x4}, {0x0, 0xa}, {0x5, 0x4}, {0x4, 0x8}, {0x1, 0x4}, {0x2, 0x4}, {0x0, 0x7}, {0x5, 0x3}, {0x3, 0x5}, {0x0, 0x8}, {0x0, 0x2}, {0x7, 0x1}, {0x2, 0x7}, {0x7, 0x4}, {0x0, 0x6}, {0x2, 0x3}, {0x1, 0x9}, {0x6, 0x6}, {0x3, 0x3}, {0x1, 0x8}, {0x1, 0x1}, {0x1, 0x7}, {0x1, 0x2}, {0x3, 0x1}, {0x3, 0x9}, {0x1, 0xa}, {0x1, 0x1}, {0x0, 0x6}, {0x1}, {0x5, 0x8}, {0x7, 0x1}, {0x5, 0x3}, {0x0, 0x5}, {0x4, 0x7}, {0x2, 0xa}, {0x7, 0x2}, {0x6, 0x3}, {0x0, 0xa}, {0x1, 0x7}, {0x7, 0x8}, {0x6, 0x5}]}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0xb4, 0x11d, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x38, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x80, 0x9, 0xb8, 0x10, 0xf4f3, 0x6, 0x2]}}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x41}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9b}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x40}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x250, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x69}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1000}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x9c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x54, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0xfff7, 0x1, 0xf87, 0x5, 0x20, 0x5]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x2, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0x9}, {0x6, 0x3}, {0x0, 0x7}, {0x6, 0x8}, {0x5, 0xa}, {0x7, 0x9}, {0x4, 0x2}, {0x2}, {0x4, 0x3}, {0x6, 0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffffffffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x41}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x58}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x400}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x42}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffffffffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x98, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x5c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x6, 0x9}, {0x7, 0xa}, {0x0, 0x5}, {0x5, 0x2}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x8}, {0x0, 0xa}, {0x7, 0x8}, {0x7, 0x3}, {0x0, 0x1}, {0x7, 0x5}, {0x5, 0x9}, {0x1, 0x6}, {0x3, 0x7}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x9}, {0x3}, {}, {0x6, 0x3}, {0x5, 0x3}, {0x2, 0x7}, {0x4, 0x9}, {0x7, 0x7}, {0x6, 0x9}, {0x4, 0x8}, {0x2, 0x2}, {0x0, 0xa}, {0x5, 0x5}, {0x5, 0x2}, {0x0, 0x5}, {0x7, 0x4}, {0x1, 0x1}, {0x5, 0x3}, {0x2, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc99, 0x8, 0xf2, 0x8, 0xf221, 0x8, 0x2, 0x4]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x24c, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}]}, {0xd0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xa0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x4c, 0xef4, 0x0, 0xff7f, 0x9, 0x5083, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffc, 0x2, 0x4, 0x8, 0x2, 0x5, 0xde, 0xea4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8000, 0x5, 0xff, 0x3f62, 0x2, 0xfff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0xc7a9, 0x7, 0x8000, 0x8, 0x7fff, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0xfbff, 0x1, 0x4, 0x3880, 0x1, 0x4]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x60, 0x0, 0x6, 0x12, 0x60, 0x60, 0x18, 0x5]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x38}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x56}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x430a}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc8}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x200}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x81}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x73}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000001}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x86}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe3}]}]}, @NL80211_ATTR_TID_CONFIG={0x7c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x96}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6e}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x78, 0x11d, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x13}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x29}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xb0, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x36}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x97}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x4}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0xa54}, 0x1, 0x0, 0x0, 0x20000801}, 0x4c000) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000200)=0x2) 13:08:48 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x3447504d, 0x1, @stepwise={0x80000001, 0x0, 0xca, 0x1, 0xa04, 0x4}}) 13:08:48 executing program 5: openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2d0040, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="000126adc44cff00fd0000000000000032faeb8dbe1067138b89a68380f0053f7358d72115df730847b6d9f6182e860c9159b6135ecad6ef363566efff5b792d25f5c66aed9bcc70485094167b8294a9be6d7032d55d1cc13062038d074693db3d50afa7ae3c3a87484afe39bb1e38953a98e1671fbfa3a4067a60f048eb60daa6335366b85f67e395d97a53c84e0e9136faadf6f25663", @ANYRES32=0x0, @ANYBLOB="0c009900040000002b0000002c005e80180001000400000003000000070000000200000000000000080009002000000008000700bf06000014005e800800060006000000080003000700000044005e8008000900ff0100000800050034000000100001000800000006000000c0ffffff080009000700000010000100e0e200000400000007000000080007007d00000014005e80080009001f00000008000700eb06000004005e8014005e80080005000700000008000700ee020000"], 0xd8}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000801) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000a80)={0xa54, r4, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x73, 0x1b}}}}, [@NL80211_ATTR_TID_CONFIG={0x338, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1d}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffffffffffff}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x16c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x78, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x56, 0x5, 0x3, 0x0, 0x1, 0x0, 0x5b, 0x60, 0x11, 0xb, 0x32, 0x1b, 0x6533b0b25f7d6880, 0x0, 0x1, 0x5, 0x5, 0x36, 0x30, 0x5, 0x9, 0xb, 0x24, 0x6a51e596e69572b1, 0x6, 0xb, 0x24, 0x9, 0x9, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x2, 0x3f, 0x4, 0x0, 0x800, 0xfff7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x4, 0x18, 0x4e, 0x1b, 0x4, 0x24, 0x5, 0x36, 0x36, 0x2, 0x24, 0x36, 0x60, 0x34]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0xfffa, 0xd587, 0x81, 0xfff, 0x8001, 0x6, 0x8]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1328, 0x5, 0x6, 0x6, 0x9, 0x0, 0x8, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x1c00, 0x5, 0x80, 0x0, 0x1, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xa5, 0xde, 0x0, 0x8000, 0x2, 0x800]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1, 0x12, 0x48, 0xb, 0x1]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x4, 0x3, 0x16, 0x3, 0x18, 0x12, 0x1, 0x1, 0x1b, 0x6, 0x36, 0x36, 0x4f6498daae914ec2, 0x4, 0x0, 0x36, 0x48, 0x16, 0x5, 0x5, 0x5, 0x1, 0x1, 0x12, 0x3, 0x30, 0x48, 0x1b, 0x60, 0x1, 0x6]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x20, 0x2, [{}, {0x4, 0xa}, {0x2, 0x9}, {0x1, 0x5}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x4}, {0x6, 0x8}, {0x4, 0x7}, {0x1, 0x5}, {0x6, 0x9}, {0x1, 0x3}, {0x7, 0xa}, {0x0, 0x2}, {0x0, 0x8}, {0x1, 0x7}, {0x4, 0x3}, {0x1}, {0x5}, {0x2}, {0x4}, {0x6, 0xa}, {0x4, 0x2}, {0x1, 0x9}, {0x6, 0x4}, {0x2, 0x3}, {0x0, 0x6}, {0x1, 0x4}]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8000, 0x6, 0x3a, 0xba69, 0x7fff, 0x5, 0x7]}}]}]}]}, {0x194, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1c000}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x39}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x160, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x6, 0x4}, {0x3, 0x8}, {0x6, 0x8}, {0x3, 0x7}, {0x7, 0x9}, {0x6, 0x4}, {0x2, 0x6}, {0x2, 0x3}, {0x1, 0x8}, {0x5, 0x3}, {0x1, 0xa}, {0x0, 0x8}, {0x2, 0x7}, {0x7, 0x4}, {0x0, 0x3}, {0x0, 0x8}, {0x3, 0x7}, {0x1, 0x4}, {0x0, 0xa}, {0x4, 0x2}, {0x7, 0x9}, {0x6}, {0x1, 0x2}, {0x3, 0x4}, {0x1, 0x5}, {0x0, 0x2}, {0x3, 0x9}, {0x7, 0x3}, {0x6, 0x8}, {0x1, 0x8}, {0x6, 0x8}, {0x2, 0x5}, {0x1, 0x8}, {0x7, 0x1}, {0x2, 0x2}, {0x3}, {0x1, 0x4}, {0x4, 0x3}, {0x3, 0x5}, {0x7, 0x7}, {0x6, 0x1}, {0x2, 0x3}, {0x4, 0x6}, {0x2, 0x3}, {0x7, 0x1}, {0x7, 0x2}, {0x4, 0x6}, {0x1, 0x1}, {0x1, 0x8}, {0x6, 0x5}, {}, {0x1, 0x7}, {0x3, 0x1}, {0x4, 0x8}, {0x3, 0x9}, {0x7, 0x6}, {0x4, 0x4}, {0x4, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x3, 0x9, 0x12, 0x6, 0x1, 0x30, 0x2, 0x2, 0x5, 0x30, 0x24, 0xb, 0xc, 0xc, 0x34, 0x12, 0x18, 0x9, 0x48, 0x48, 0x18, 0x9, 0x2, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5a, 0x4, 0x3, 0x8, 0x20, 0x9, 0x5]}}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x77, 0x7ff, 0x3, 0x8000, 0x0, 0x5, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe692, 0x3, 0xffff, 0x1, 0x798, 0x8, 0x1ff, 0x330]}}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x7, 0x2}, {0x0, 0xa}, {0x1, 0x5}, {0x1}, {0x2, 0x3}, {0x2, 0xa}, {0x1, 0x8}, {0x0, 0x9}, {0x4, 0x8}, {0x6}, {0x1, 0x7}, {0x7, 0x2}, {0x1, 0x8}, {0x0, 0x2}, {0x6, 0x8}, {0x7, 0x6}, {0x4, 0x3}, {0x4, 0x6}, {0x0, 0xa}, {0x3, 0x8}, {0x1, 0x8}, {0x3, 0x7}, {0x5, 0x4}, {0x2, 0x8}, {0x7, 0x2}, {0x6, 0x4}, {0x1, 0x7}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x6, 0x9}, {0x5, 0x7}, {0x1, 0x3}, {0x7, 0x8}, {0x4}, {0x4, 0x8}, {0x2, 0x8}, {0x6, 0x9}, {0x5, 0x7}, {0x1}, {0x4, 0x8}, {0x4}, {0x1, 0x5}, {0x7}, {0x6, 0x8}, {0x7, 0x1}, {0x7, 0x4}, {0x1, 0x5}, {0x4, 0xa}, {0x7, 0x3}, {}, {0x6, 0x8}, {0x0, 0x3}, {0x7, 0xa}, {0x2, 0x1}, {0x1, 0x8}, {0x3, 0x9}, {0x7, 0x7}, {0x4, 0x3}, {0x4, 0x2}, {0x2, 0x3}, {0x5, 0x3}, {0x1, 0x3}, {0x6, 0x4}, {0x4, 0x4}, {0x1, 0x8}, {0x5, 0xa}, {0x7, 0x4}, {0x5, 0x5}, {0x7, 0x7}, {0x5, 0x8}, {0x5, 0x2}, {0x1, 0x1}, {0x6, 0x4}]}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x2}, {0x3, 0x8}, {0x6, 0x2}, {0x2, 0x9}, {0x6, 0x1}, {0x0, 0xa}, {0x6, 0x2}, {0x2, 0x4}, {0x6, 0x8}, {0x7, 0x4}, {0x4, 0x4}, {0x1}, {0x3, 0x3}, {0x4, 0x2}, {0x0, 0x5}, {0x3, 0x5}, {0x4, 0x9}, {0x6}, {0x7}, {0x7}, {0x4, 0x9}, {0x3, 0x4}, {0x1, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x7, 0x8}, {0x0, 0xa}, {0x6, 0x3}, {0x4}, {0x0, 0xa}, {0x5, 0x4}, {0x4, 0x8}, {0x1, 0x4}, {0x2, 0x4}, {0x0, 0x7}, {0x5, 0x3}, {0x3, 0x5}, {0x0, 0x8}, {0x0, 0x2}, {0x7, 0x1}, {0x2, 0x7}, {0x7, 0x4}, {0x0, 0x6}, {0x2, 0x3}, {0x1, 0x9}, {0x6, 0x6}, {0x3, 0x3}, {0x1, 0x8}, {0x1, 0x1}, {0x1, 0x7}, {0x1, 0x2}, {0x3, 0x1}, {0x3, 0x9}, {0x1, 0xa}, {0x1, 0x1}, {0x0, 0x6}, {0x1}, {0x5, 0x8}, {0x7, 0x1}, {0x5, 0x3}, {0x0, 0x5}, {0x4, 0x7}, {0x2, 0xa}, {0x7, 0x2}, {0x6, 0x3}, {0x0, 0xa}, {0x1, 0x7}, {0x7, 0x8}, {0x6, 0x5}]}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0xb4, 0x11d, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x38, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x80, 0x9, 0xb8, 0x10, 0xf4f3, 0x6, 0x2]}}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x41}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9b}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x40}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x250, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x69}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1000}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x9c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x54, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0xfff7, 0x1, 0xf87, 0x5, 0x20, 0x5]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x2, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0x9}, {0x6, 0x3}, {0x0, 0x7}, {0x6, 0x8}, {0x5, 0xa}, {0x7, 0x9}, {0x4, 0x2}, {0x2}, {0x4, 0x3}, {0x6, 0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffffffffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x41}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x58}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x400}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x42}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffffffffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x98, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x5c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x6, 0x9}, {0x7, 0xa}, {0x0, 0x5}, {0x5, 0x2}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x8}, {0x0, 0xa}, {0x7, 0x8}, {0x7, 0x3}, {0x0, 0x1}, {0x7, 0x5}, {0x5, 0x9}, {0x1, 0x6}, {0x3, 0x7}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x9}, {0x3}, {}, {0x6, 0x3}, {0x5, 0x3}, {0x2, 0x7}, {0x4, 0x9}, {0x7, 0x7}, {0x6, 0x9}, {0x4, 0x8}, {0x2, 0x2}, {0x0, 0xa}, {0x5, 0x5}, {0x5, 0x2}, {0x0, 0x5}, {0x7, 0x4}, {0x1, 0x1}, {0x5, 0x3}, {0x2, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc99, 0x8, 0xf2, 0x8, 0xf221, 0x8, 0x2, 0x4]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x24c, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}]}, {0xd0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xa0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x4c, 0xef4, 0x0, 0xff7f, 0x9, 0x5083, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffc, 0x2, 0x4, 0x8, 0x2, 0x5, 0xde, 0xea4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8000, 0x5, 0xff, 0x3f62, 0x2, 0xfff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0xc7a9, 0x7, 0x8000, 0x8, 0x7fff, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0xfbff, 0x1, 0x4, 0x3880, 0x1, 0x4]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x60, 0x0, 0x6, 0x12, 0x60, 0x60, 0x18, 0x5]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x38}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x56}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x430a}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc8}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x200}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x81}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x73}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000001}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x86}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe3}]}]}, @NL80211_ATTR_TID_CONFIG={0x7c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x96}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6e}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x78, 0x11d, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x13}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x29}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xb0, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x36}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x97}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x4}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0xa54}, 0x1, 0x0, 0x0, 0x20000801}, 0x4c000) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000200)=0x2) 13:08:48 executing program 4: openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2d0040, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="000126adc44cff00fd0000000000000032faeb8dbe1067138b89a68380f0053f7358d72115df730847b6d9f6182e860c9159b6135ecad6ef363566efff5b792d25f5c66aed9bcc70485094167b8294a9be6d7032d55d1cc13062038d074693db3d50afa7ae3c3a87484afe39bb1e38953a98e1671fbfa3a4067a60f048eb60daa6335366b85f67e395d97a53c84e0e9136faadf6f25663", @ANYRES32=0x0, @ANYBLOB="0c009900040000002b0000002c005e80180001000400000003000000070000000200000000000000080009002000000008000700bf06000014005e800800060006000000080003000700000044005e8008000900ff0100000800050034000000100001000800000006000000c0ffffff080009000700000010000100e0e200000400000007000000080007007d00000014005e80080009001f00000008000700eb06000004005e8014005e80080005000700000008000700ee020000"], 0xd8}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000801) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) (async) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000a80)={0xa54, r4, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x73, 0x1b}}}}, [@NL80211_ATTR_TID_CONFIG={0x338, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1d}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffffffffffff}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x16c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x78, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x56, 0x5, 0x3, 0x0, 0x1, 0x0, 0x5b, 0x60, 0x11, 0xb, 0x32, 0x1b, 0x6533b0b25f7d6880, 0x0, 0x1, 0x5, 0x5, 0x36, 0x30, 0x5, 0x9, 0xb, 0x24, 0x6a51e596e69572b1, 0x6, 0xb, 0x24, 0x9, 0x9, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x2, 0x3f, 0x4, 0x0, 0x800, 0xfff7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x4, 0x18, 0x4e, 0x1b, 0x4, 0x24, 0x5, 0x36, 0x36, 0x2, 0x24, 0x36, 0x60, 0x34]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0xfffa, 0xd587, 0x81, 0xfff, 0x8001, 0x6, 0x8]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1328, 0x5, 0x6, 0x6, 0x9, 0x0, 0x8, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x1c00, 0x5, 0x80, 0x0, 0x1, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xa5, 0xde, 0x0, 0x8000, 0x2, 0x800]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1, 0x12, 0x48, 0xb, 0x1]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x4, 0x3, 0x16, 0x3, 0x18, 0x12, 0x1, 0x1, 0x1b, 0x6, 0x36, 0x36, 0x4f6498daae914ec2, 0x4, 0x0, 0x36, 0x48, 0x16, 0x5, 0x5, 0x5, 0x1, 0x1, 0x12, 0x3, 0x30, 0x48, 0x1b, 0x60, 0x1, 0x6]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x20, 0x2, [{}, {0x4, 0xa}, {0x2, 0x9}, {0x1, 0x5}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x4}, {0x6, 0x8}, {0x4, 0x7}, {0x1, 0x5}, {0x6, 0x9}, {0x1, 0x3}, {0x7, 0xa}, {0x0, 0x2}, {0x0, 0x8}, {0x1, 0x7}, {0x4, 0x3}, {0x1}, {0x5}, {0x2}, {0x4}, {0x6, 0xa}, {0x4, 0x2}, {0x1, 0x9}, {0x6, 0x4}, {0x2, 0x3}, {0x0, 0x6}, {0x1, 0x4}]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8000, 0x6, 0x3a, 0xba69, 0x7fff, 0x5, 0x7]}}]}]}]}, {0x194, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1c000}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x39}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x160, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x6, 0x4}, {0x3, 0x8}, {0x6, 0x8}, {0x3, 0x7}, {0x7, 0x9}, {0x6, 0x4}, {0x2, 0x6}, {0x2, 0x3}, {0x1, 0x8}, {0x5, 0x3}, {0x1, 0xa}, {0x0, 0x8}, {0x2, 0x7}, {0x7, 0x4}, {0x0, 0x3}, {0x0, 0x8}, {0x3, 0x7}, {0x1, 0x4}, {0x0, 0xa}, {0x4, 0x2}, {0x7, 0x9}, {0x6}, {0x1, 0x2}, {0x3, 0x4}, {0x1, 0x5}, {0x0, 0x2}, {0x3, 0x9}, {0x7, 0x3}, {0x6, 0x8}, {0x1, 0x8}, {0x6, 0x8}, {0x2, 0x5}, {0x1, 0x8}, {0x7, 0x1}, {0x2, 0x2}, {0x3}, {0x1, 0x4}, {0x4, 0x3}, {0x3, 0x5}, {0x7, 0x7}, {0x6, 0x1}, {0x2, 0x3}, {0x4, 0x6}, {0x2, 0x3}, {0x7, 0x1}, {0x7, 0x2}, {0x4, 0x6}, {0x1, 0x1}, {0x1, 0x8}, {0x6, 0x5}, {}, {0x1, 0x7}, {0x3, 0x1}, {0x4, 0x8}, {0x3, 0x9}, {0x7, 0x6}, {0x4, 0x4}, {0x4, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x3, 0x9, 0x12, 0x6, 0x1, 0x30, 0x2, 0x2, 0x5, 0x30, 0x24, 0xb, 0xc, 0xc, 0x34, 0x12, 0x18, 0x9, 0x48, 0x48, 0x18, 0x9, 0x2, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5a, 0x4, 0x3, 0x8, 0x20, 0x9, 0x5]}}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x77, 0x7ff, 0x3, 0x8000, 0x0, 0x5, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe692, 0x3, 0xffff, 0x1, 0x798, 0x8, 0x1ff, 0x330]}}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x7, 0x2}, {0x0, 0xa}, {0x1, 0x5}, {0x1}, {0x2, 0x3}, {0x2, 0xa}, {0x1, 0x8}, {0x0, 0x9}, {0x4, 0x8}, {0x6}, {0x1, 0x7}, {0x7, 0x2}, {0x1, 0x8}, {0x0, 0x2}, {0x6, 0x8}, {0x7, 0x6}, {0x4, 0x3}, {0x4, 0x6}, {0x0, 0xa}, {0x3, 0x8}, {0x1, 0x8}, {0x3, 0x7}, {0x5, 0x4}, {0x2, 0x8}, {0x7, 0x2}, {0x6, 0x4}, {0x1, 0x7}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x6, 0x9}, {0x5, 0x7}, {0x1, 0x3}, {0x7, 0x8}, {0x4}, {0x4, 0x8}, {0x2, 0x8}, {0x6, 0x9}, {0x5, 0x7}, {0x1}, {0x4, 0x8}, {0x4}, {0x1, 0x5}, {0x7}, {0x6, 0x8}, {0x7, 0x1}, {0x7, 0x4}, {0x1, 0x5}, {0x4, 0xa}, {0x7, 0x3}, {}, {0x6, 0x8}, {0x0, 0x3}, {0x7, 0xa}, {0x2, 0x1}, {0x1, 0x8}, {0x3, 0x9}, {0x7, 0x7}, {0x4, 0x3}, {0x4, 0x2}, {0x2, 0x3}, {0x5, 0x3}, {0x1, 0x3}, {0x6, 0x4}, {0x4, 0x4}, {0x1, 0x8}, {0x5, 0xa}, {0x7, 0x4}, {0x5, 0x5}, {0x7, 0x7}, {0x5, 0x8}, {0x5, 0x2}, {0x1, 0x1}, {0x6, 0x4}]}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x2}, {0x3, 0x8}, {0x6, 0x2}, {0x2, 0x9}, {0x6, 0x1}, {0x0, 0xa}, {0x6, 0x2}, {0x2, 0x4}, {0x6, 0x8}, {0x7, 0x4}, {0x4, 0x4}, {0x1}, {0x3, 0x3}, {0x4, 0x2}, {0x0, 0x5}, {0x3, 0x5}, {0x4, 0x9}, {0x6}, {0x7}, {0x7}, {0x4, 0x9}, {0x3, 0x4}, {0x1, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x7, 0x8}, {0x0, 0xa}, {0x6, 0x3}, {0x4}, {0x0, 0xa}, {0x5, 0x4}, {0x4, 0x8}, {0x1, 0x4}, {0x2, 0x4}, {0x0, 0x7}, {0x5, 0x3}, {0x3, 0x5}, {0x0, 0x8}, {0x0, 0x2}, {0x7, 0x1}, {0x2, 0x7}, {0x7, 0x4}, {0x0, 0x6}, {0x2, 0x3}, {0x1, 0x9}, {0x6, 0x6}, {0x3, 0x3}, {0x1, 0x8}, {0x1, 0x1}, {0x1, 0x7}, {0x1, 0x2}, {0x3, 0x1}, {0x3, 0x9}, {0x1, 0xa}, {0x1, 0x1}, {0x0, 0x6}, {0x1}, {0x5, 0x8}, {0x7, 0x1}, {0x5, 0x3}, {0x0, 0x5}, {0x4, 0x7}, {0x2, 0xa}, {0x7, 0x2}, {0x6, 0x3}, {0x0, 0xa}, {0x1, 0x7}, {0x7, 0x8}, {0x6, 0x5}]}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0xb4, 0x11d, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x38, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x80, 0x9, 0xb8, 0x10, 0xf4f3, 0x6, 0x2]}}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x41}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9b}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x40}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x250, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x69}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1000}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x9c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x54, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0xfff7, 0x1, 0xf87, 0x5, 0x20, 0x5]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x2, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0x9}, {0x6, 0x3}, {0x0, 0x7}, {0x6, 0x8}, {0x5, 0xa}, {0x7, 0x9}, {0x4, 0x2}, {0x2}, {0x4, 0x3}, {0x6, 0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffffffffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x41}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x58}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x400}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x42}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffffffffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x98, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x5c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x6, 0x9}, {0x7, 0xa}, {0x0, 0x5}, {0x5, 0x2}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x8}, {0x0, 0xa}, {0x7, 0x8}, {0x7, 0x3}, {0x0, 0x1}, {0x7, 0x5}, {0x5, 0x9}, {0x1, 0x6}, {0x3, 0x7}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x9}, {0x3}, {}, {0x6, 0x3}, {0x5, 0x3}, {0x2, 0x7}, {0x4, 0x9}, {0x7, 0x7}, {0x6, 0x9}, {0x4, 0x8}, {0x2, 0x2}, {0x0, 0xa}, {0x5, 0x5}, {0x5, 0x2}, {0x0, 0x5}, {0x7, 0x4}, {0x1, 0x1}, {0x5, 0x3}, {0x2, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc99, 0x8, 0xf2, 0x8, 0xf221, 0x8, 0x2, 0x4]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x24c, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}]}, {0xd0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xa0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x4c, 0xef4, 0x0, 0xff7f, 0x9, 0x5083, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffc, 0x2, 0x4, 0x8, 0x2, 0x5, 0xde, 0xea4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8000, 0x5, 0xff, 0x3f62, 0x2, 0xfff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0xc7a9, 0x7, 0x8000, 0x8, 0x7fff, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0xfbff, 0x1, 0x4, 0x3880, 0x1, 0x4]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x60, 0x0, 0x6, 0x12, 0x60, 0x60, 0x18, 0x5]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x38}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x56}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x430a}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc8}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x200}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x81}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x73}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000001}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x86}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe3}]}]}, @NL80211_ATTR_TID_CONFIG={0x7c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x96}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6e}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x78, 0x11d, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x13}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x29}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xb0, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x36}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x97}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x4}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0xa54}, 0x1, 0x0, 0x0, 0x20000801}, 0x4c000) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000200)=0x2) 13:08:48 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x5, 0x1, 0x3, "ce4b94b596c055bd092d3b245b65b4aa8138edc34966714e8489dbc649dbaf9b", 0x34325241}) 13:08:48 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x0, @multicast, 'veth1_to_team\x00'}}, 0x1e) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x1, @sliced={0x3, [0x85, 0x6, 0x2, 0x3f, 0x401, 0x400, 0x9, 0x80a5, 0x0, 0x401, 0x3, 0xdcb, 0xfff, 0x1ff, 0x7, 0x200, 0xfff, 0x8000, 0x0, 0x3, 0x1ff, 0x61, 0xaf, 0x2, 0xdf, 0x100, 0x4d87, 0x2, 0x1, 0xfbff, 0x0, 0x5, 0x4, 0xffff, 0x0, 0x89a3, 0x8001, 0x1ff, 0x1, 0x200, 0x101, 0x1, 0x8090, 0x4, 0x5, 0x5, 0x3, 0x26], 0x9}}) 13:08:49 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x0, @multicast, 'veth1_to_team\x00'}}, 0x1e) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x1, @sliced={0x3, [0x85, 0x6, 0x2, 0x3f, 0x401, 0x400, 0x9, 0x80a5, 0x0, 0x401, 0x3, 0xdcb, 0xfff, 0x1ff, 0x7, 0x200, 0xfff, 0x8000, 0x0, 0x3, 0x1ff, 0x61, 0xaf, 0x2, 0xdf, 0x100, 0x4d87, 0x2, 0x1, 0xfbff, 0x0, 0x5, 0x4, 0xffff, 0x0, 0x89a3, 0x8001, 0x1ff, 0x1, 0x200, 0x101, 0x1, 0x8090, 0x4, 0x5, 0x5, 0x3, 0x26], 0x9}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x0, @multicast, 'veth1_to_team\x00'}}, 0x1e) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x20, 0x2) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x1, @sliced={0x3, [0x85, 0x6, 0x2, 0x3f, 0x401, 0x400, 0x9, 0x80a5, 0x0, 0x401, 0x3, 0xdcb, 0xfff, 0x1ff, 0x7, 0x200, 0xfff, 0x8000, 0x0, 0x3, 0x1ff, 0x61, 0xaf, 0x2, 0xdf, 0x100, 0x4d87, 0x2, 0x1, 0xfbff, 0x0, 0x5, 0x4, 0xffff, 0x0, 0x89a3, 0x8001, 0x1ff, 0x1, 0x200, 0x101, 0x1, 0x8090, 0x4, 0x5, 0x5, 0x3, 0x26], 0x9}}) (async) [ 796.596459] oom_reaper: reaped process 13274 (syz-executor.0), now anon-rss:0kB, file-rss:14332kB, shmem-rss:16kB [ 796.633130] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 796.649840] in:imklog cpuset=/ mems_allowed=0-1 [ 796.654547] CPU: 0 PID: 13083 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 796.661996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 796.671356] Call Trace: [ 796.674001] dump_stack+0x1fc/0x2ef [ 796.677630] dump_header+0x15d/0xc3f [ 796.681450] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 796.686541] ? ___ratelimit+0x319/0x590 [ 796.690505] oom_kill_process.cold+0x10/0x692 [ 796.695014] ? check_preemption_disabled+0x41/0x280 [ 796.700026] ? has_intersects_mems_allowed+0x1d6/0x290 [ 796.705327] out_of_memory+0x1072/0x1390 [ 796.709379] ? oom_killer_disable+0x270/0x270 [ 796.713866] ? mutex_trylock+0x15f/0x1a0 [ 796.717920] __alloc_pages_nodemask+0x23a2/0x2890 [ 796.722773] ? find_get_entry+0x4cd/0x8a0 [ 796.726920] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 796.731765] alloc_pages_current+0x193/0x2a0 [ 796.736164] filemap_fault+0x146e/0x2180 [ 796.740218] ext4_filemap_fault+0x84/0xb0 [ 796.744372] __do_fault+0x10b/0x4b0 [ 796.747989] __handle_mm_fault+0x273b/0x41c0 [ 796.752388] ? vm_insert_page+0x9c0/0x9c0 [ 796.756535] ? lock_downgrade+0x720/0x720 [ 796.760679] ? check_preemption_disabled+0x41/0x280 [ 796.765771] handle_mm_fault+0x436/0xb10 [ 796.769823] __do_page_fault+0x68e/0xd60 [ 796.773876] ? trace_hardirqs_off_caller+0x6e/0x210 [ 796.778899] ? spurious_fault+0x840/0x840 [ 796.783034] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 796.787864] ? page_fault+0x8/0x30 [ 796.791392] page_fault+0x1e/0x30 [ 796.794852] RIP: 0033:0x7f137e7c822d [ 796.798591] Code: Bad RIP value. [ 796.802050] RSP: 002b:00007f137c164580 EFLAGS: 00010293 [ 796.807407] RAX: 0000000000000078 RBX: 0000000000000000 RCX: 00007f137e7c822d [ 796.814664] RDX: 0000000000001fa0 RSI: 00007f137c164da0 RDI: 0000000000000004 [ 796.821924] RBP: 00005592b21da9d0 R08: 00007f137d941940 R09: 0000000004000001 [ 796.829266] R10: 0000000000000001 R11: 0000000000000293 R12: 00007f137c164da0 [ 796.836524] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f137c164dd8 [ 796.848670] Mem-Info: [ 796.851123] active_anon:17439 inactive_anon:17038 isolated_anon:0 [ 796.851123] active_file:13 inactive_file:16 isolated_file:0 [ 796.851123] unevictable:0 dirty:0 writeback:0 unstable:0 [ 796.851123] slab_reclaimable:15229 slab_unreclaimable:120542 [ 796.851123] mapped:22311 shmem:17698 pagetables:581 bounce:0 [ 796.851123] free:13781 free_pcp:270 free_cma:0 [ 796.853452] syz-executor.0: vmalloc: allocation failure, allocated 1739464704 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 796.887990] Node 0 active_anon:68444kB inactive_anon:19288kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21620kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 796.903064] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 796.931226] Node 1 active_anon:1312kB inactive_anon:48864kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1376kB dirty:0kB writeback:0kB shmem:49172kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 796.936786] CPU: 1 PID: 13274 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 796.962136] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 796.966524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 796.966530] Call Trace: [ 796.966554] dump_stack+0x1fc/0x2ef [ 796.966572] warn_alloc.cold+0x7b/0x18f [ 796.966596] ? zone_watermark_ok_safe+0x260/0x260 [ 796.996328] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 797.002066] ? rcu_nmi_exit+0xb3/0x180 [ 797.004891] Node 0 DMA32 free:17776kB min:35996kB low:44992kB high:53988kB active_anon:68444kB inactive_anon:19288kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7648kB pagetables:2220kB bounce:0kB free_pcp:572kB local_pcp:332kB free_cma:0kB [ 797.008574] __vmalloc_area_node+0x4fd/0x780 [ 797.008595] ? __vmalloc_node_range+0x180/0x180 [ 797.008609] ? _raw_spin_unlock+0x29/0x40 [ 797.008626] ? __get_vm_area_node+0x2e2/0x3a0 [ 797.013103] lowmem_reserve[]: 0 0 1 1 1 [ 797.017947] __vmalloc_node_range+0xed/0x180 [ 797.017962] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 797.017976] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 797.017987] vmalloc_user+0x70/0xe0 [ 797.018000] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 797.018015] vb2_vmalloc_alloc+0xb3/0x2f0 [ 797.025077] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 797.026991] __vb2_queue_alloc+0x472/0xe60 [ 797.059830] lowmem_reserve[]: 0 0 0 0 0 [ 797.060286] vb2_core_create_bufs+0x273/0x7e0 [ 797.064924] Node 1 Normal free:26468kB min:53876kB low:67344kB high:80812kB active_anon:1312kB inactive_anon:48864kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:96kB pagetables:104kB bounce:0kB free_pcp:500kB local_pcp:252kB free_cma:0kB [ 797.069070] ? __vb2_queue_free+0x870/0x870 [ 797.069083] ? __video_do_ioctl+0x632/0xcd0 [ 797.069100] ? pi_state_update_owner+0x450/0x450 [ 797.069114] ? __mutex_lock+0x368/0x1190 [ 797.069129] vb2_create_bufs+0x332/0x620 [ 797.069146] ? mark_held_locks+0xf0/0xf0 [ 797.069162] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 797.073636] lowmem_reserve[]: 0 0 0 0 0 [ 797.077607] ? futex_wait_queue_me+0x404/0x5e0 [ 797.077622] ? pi_state_update_owner+0x450/0x450 [ 797.077634] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 797.077649] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 797.077673] v4l_create_bufs+0xb2/0x160 [ 797.077696] __video_do_ioctl+0x49a/0xcd0 [ 797.084339] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10872kB [ 797.086500] ? v4l_querycap+0x340/0x340 [ 797.086518] ? __might_fault+0x192/0x1d0 [ 797.086536] ? v4l_querycap+0x340/0x340 [ 797.091875] Node 0 DMA32: 1964*4kB (UME) 774*8kB (UME) 169*16kB (UME) 32*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17776kB [ 797.095495] video_usercopy+0x13f/0xfa0 [ 797.095516] ? v4l_enumstd+0x60/0x60 [ 797.095529] ? do_futex+0x171/0x1880 [ 797.095544] ? mark_held_locks+0xf0/0xf0 [ 797.095565] ? debug_check_no_obj_freed+0x201/0x490 [ 797.095583] ? video_usercopy+0xfa0/0xfa0 [ 797.095598] v4l2_ioctl+0x147/0x1a0 [ 797.101269] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 797.104042] ? video_devdata+0xa0/0xa0 [ 797.133371] Node 1 Normal: 131*4kB (UME) 129*8kB (ME) 117*16kB (UME) 82*32kB (UME) 55*64kB (M) 22*128kB (M) 5*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (U) = 26468kB [ 797.134099] do_vfs_ioctl+0xcdb/0x12e0 [ 797.134116] ? lock_downgrade+0x720/0x720 [ 797.134131] ? check_preemption_disabled+0x41/0x280 [ 797.134144] ? ioctl_preallocate+0x200/0x200 [ 797.134161] ? __fget+0x356/0x510 [ 797.134178] ? do_dup2+0x450/0x450 [ 797.134191] ? __se_sys_futex+0x298/0x3b0 [ 797.134212] ksys_ioctl+0x9b/0xc0 [ 797.134228] __x64_sys_ioctl+0x6f/0xb0 [ 797.134243] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 797.134255] do_syscall_64+0xf9/0x620 [ 797.134274] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 797.134285] RIP: 0033:0x7f68c24140f9 [ 797.134301] Code: Bad RIP value. [ 797.134309] RSP: 002b:00007f68c0986168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 797.134322] RAX: ffffffffffffffda RBX: 00007f68c2533f80 RCX: 00007f68c24140f9 [ 797.134329] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000005 [ 797.134337] RBP: 00007f68c246fae9 R08: 0000000000000000 R09: 0000000000000000 [ 797.134344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 797.134353] R13: 00007fff6155d44f R14: 00007f68c0986300 R15: 0000000000022000 [ 797.134626] Mem-Info: [ 797.134658] active_anon:17439 inactive_anon:17038 isolated_anon:0 [ 797.134658] active_file:14 inactive_file:15 isolated_file:0 [ 797.134658] unevictable:0 dirty:0 writeback:0 unstable:0 [ 797.134658] slab_reclaimable:15229 slab_unreclaimable:120546 [ 797.134658] mapped:22311 shmem:17698 pagetables:581 bounce:0 [ 797.134658] free:13781 free_pcp:265 free_cma:0 [ 797.134686] Node 0 active_anon:68444kB inactive_anon:19288kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21620kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 797.134713] Node 1 active_anon:1312kB inactive_anon:48864kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1376kB dirty:0kB writeback:0kB shmem:49172kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 797.134719] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 797.134750] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 797.134770] Node 0 DMA32 free:17776kB min:35996kB low:44992kB high:53988kB active_anon:68444kB inactive_anon:19288kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7648kB pagetables:2220kB bounce:0kB free_pcp:560kB local_pcp:240kB free_cma:0kB [ 797.134804] lowmem_reserve[]: 0 0 1 1 1 [ 797.134823] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 797.134852] lowmem_reserve[]: 0 0 0 0 0 [ 797.134872] Node 1 Normal free:26468kB min:53876kB low:67344kB high:80812kB active_anon:1312kB inactive_anon:48864kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:96kB pagetables:104kB bounce:0kB free_pcp:500kB local_pcp:248kB free_cma:0kB [ 797.134905] lowmem_reserve[]: 0 0 0 0 0 [ 797.134924] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10872kB [ 797.135039] Node 0 DMA32: 1964*4kB (UME) 774*8kB (UME) 169*16kB (UME) 32*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17776kB [ 797.135101] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 797.135154] Node 1 Normal: 131*4kB (UME) 129*8kB (ME) 117*16kB (UME) 82*32kB (UME) 55*64kB (M) 22*128kB (M) 5*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (U) = 26468kB [ 797.135241] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 797.135250] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 797.135260] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 797.135270] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 797.135275] 17727 total pagecache pages [ 797.135288] 0 pages in swap cache [ 797.135296] Swap cache stats: add 0, delete 0, find 0/0 [ 797.135301] Free swap = 0kB [ 797.135306] Total swap = 0kB [ 797.135313] 2097051 pages RAM [ 797.135318] 0 pages HighMem/MovableOnly [ 797.135323] 369649 pages reserved [ 797.135327] 0 pages cma reserved [ 797.780484] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 797.789404] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 797.798229] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 797.807188] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 797.815866] 17727 total pagecache pages [ 797.819860] 0 pages in swap cache [ 797.823314] Swap cache stats: add 0, delete 0, find 0/0 [ 797.829280] Free swap = 0kB [ 797.832309] Total swap = 0kB [ 797.835391] 2097051 pages RAM [ 797.838499] 0 pages HighMem/MovableOnly [ 797.842471] 369649 pages reserved [ 797.845982] 0 pages cma reserved [ 797.849442] Unreclaimable slab info: [ 797.854901] Name Used Total [ 797.860596] pid_2 51KB 152KB [ 797.866075] batadv_tt_change_cache 0KB 3KB [ 797.871886] batadv_tl_cache 4KB 12KB [ 797.877401] TIPC 10KB 15KB [ 797.882782] SCTPv6 14KB 24KB [ 797.888217] SCTP 5KB 7KB [ 797.893612] DCCPv6 17KB 22KB [ 797.899135] DCCP 16KB 21KB [ 797.904538] RXRPC 11KB 13KB [ 797.909994] rxrpc_call_jar 78KB 94KB [ 797.915476] bridge_fdb_cache 9KB 15KB [ 797.920852] fib6_nodes 159KB 188KB [ 797.926264] ip6_dst_cache 226KB 322KB [ 797.931762] RAWv6 70KB 74KB [ 797.937287] UDPv6 26KB 33KB [ 797.942742] TCPv6 24KB 30KB [ 797.948169] nf_conntrack 7KB 18KB [ 797.955493] t10_alua_lu_gp_cache 0KB 3KB [ 797.961234] sd_ext_cdb 0KB 7KB [ 797.966808] scsi_sense_cache 1056KB 1060KB [ 797.972288] virtio_scsi_cmd 16KB 16KB [ 797.977736] sgpool-128 8KB 8KB [ 797.983210] sgpool-64 4KB 12KB [ 797.988817] sgpool-32 2KB 15KB [ 797.994322] sgpool-16 1KB 7KB [ 797.999903] sgpool-8 0KB 7KB [ 798.005398] mqueue_inode_cache 10KB 22KB [ 798.011091] bio_post_read_ctx 14KB 15KB [ 798.016719] bio-2 14KB 15KB [ 798.022174] jfs_mp 7KB 7KB [ 798.027616] cifs_small_rq 15KB 16KB [ 798.032980] cifs_request 67KB 67KB [ 798.038528] cifs_mpx_ids 0KB 7KB [ 798.044054] nfs_commit_data 3KB 14KB [ 798.049472] nfs_write_data 34KB 44KB [ 798.054876] ext4_system_zone 1KB 7KB [ 798.062906] bio-1 1KB 7KB [ 798.068953] pid_namespace 2KB 7KB [ 798.075070] rpc_buffers 17KB 25KB [ 798.080627] rpc_tasks 2KB 7KB [ 798.086079] UNIX 682KB 738KB [ 798.091449] tcp_bind_bucket 1KB 4KB [ 798.096899] ip_fib_trie 23KB 31KB [ 798.102392] ip_fib_alias 112KB 134KB [ 798.107875] ip_dst_cache 11KB 48KB [ 798.113914] RAW 42KB 52KB [ 798.119836] UDP 48KB 74KB [ 798.125768] TCP 8KB 11KB [ 798.131575] hugetlbfs_inode_cache 3KB 15KB [ 798.138187] fscache_cookie_jar 1KB 11KB [ 798.144168] eventpoll_pwq 26KB 47KB [ 798.150017] eventpoll_epi 47KB 66KB [ 798.156454] inotify_inode_mark 17KB 51KB [ 798.164249] request_queue 199KB 199KB [ 798.170209] blkdev_requests 1KB 3KB [ 798.185028] blkdev_ioc 27KB 34KB [ 798.190544] bio-0 1520KB 1522KB [ 798.195991] biovec-max 1724KB 1806KB [ 798.201353] biovec-64 1364KB 1409KB [ 798.225036] biovec-16 105KB 131KB [ 798.230425] bio_integrity_payload 1KB 8KB [ 798.245054] khugepaged_mm_slot 7KB 34KB [ 798.250536] uid_cache 0KB 4KB [ 798.290235] dmaengine-unmap-2 0KB 3KB [ 798.295813] skbuff_fclone_cache 65KB 153KB [ 798.301356] skbuff_head_cache 6902KB 7008KB [ 798.321578] configfs_dir_cache 3KB 11KB [ 798.327712] file_lock_cache 60KB 186KB [ 798.333084] file_lock_ctx 9KB 11KB [ 798.339449] fsnotify_mark_connector 8KB 31KB [ 798.346634] net_namespace 52KB 52KB [ 798.352027] shmem_inode_cache 8086KB 8337KB [ 798.358640] task_delay_info 164KB 407KB [ 798.366880] taskstats 54KB 172KB [ 798.372267] proc_dir_entry 704KB 735KB [ 798.378811] pde_opener 7KB 58KB [ 798.384185] seq_file 291KB 535KB [ 798.390656] sigqueue 49KB 59KB [ 798.396591] kernfs_node_cache 18230KB 18250KB [ 798.401970] mnt_cache 173KB 180KB [ 798.408375] filp 7359KB 7623KB [ 798.413747] names_cache 148635KB 148635KB [ 798.420249] iint_cache 41KB 71KB [ 798.426271] key_jar 4KB 11KB [ 798.431645] uts_namespace 2KB 7KB [ 798.438089] nsproxy 2KB 7KB [ 798.443469] vm_area_struct 3325KB 5008KB [ 798.449843] mm_struct 433KB 916KB [ 798.455825] fs_cache 104KB 356KB [ 798.461194] files_cache 436KB 697KB [ 798.470212] signal_cache 846KB 1645KB [ 798.476279] sighand_cache 527KB 603KB [ 798.481651] task_struct 5132KB 5188KB [ 798.487962] cred_jar 2063KB 2160KB [ 798.493332] anon_vma_chain 1073KB 1803KB [ 798.499777] anon_vma 123KB 269KB [ 798.505722] pid 60KB 264KB [ 798.511095] Acpi-Operand 156KB 202KB [ 798.517577] Acpi-ParseExt 8KB 11KB [ 798.522946] Acpi-Parse 41KB 47KB [ 798.529265] Acpi-State 52KB 63KB [ 798.534632] Acpi-Namespace 21KB 27KB [ 798.541060] numa_policy 0KB 3KB [ 798.546968] debug_objects_cache 1162KB 1576KB [ 798.552515] trace_event_file 297KB 298KB [ 798.558882] ftrace_event_field 398KB 401KB [ 798.564340] pool_workqueue 121KB 128KB [ 798.572360] page->ptl 510KB 1047KB [ 798.578510] kmalloc-2097152 2050KB 2050KB [ 798.583887] kmalloc-524288 2056KB 2056KB [ 798.590273] kmalloc-262144 1290KB 1290KB [ 798.596263] kmalloc-131072 650KB 650KB [ 798.601646] kmalloc-65536 1848KB 1914KB [ 798.607982] kmalloc-32768 1650KB 1683KB [ 798.613351] kmalloc-16384 1039KB 1072KB [ 798.619770] kmalloc-8192 3960KB 4042KB [ 798.625724] kmalloc-4096 17845KB 17884KB [ 798.631095] kmalloc-2048 11026KB 12686KB [ 798.637445] kmalloc-1024 6474KB 7835KB [ 798.642824] kmalloc-512 14724KB 14895KB [ 798.649226] kmalloc-256 4148KB 5238KB [ 798.654597] kmalloc-128 937KB 1488KB [ 798.660940] kmalloc-96 3673KB 4020KB [ 798.666858] kmalloc-64 2332KB 4212KB [ 798.673894] kmalloc-32 1839KB 2445KB [ 798.681335] kmalloc-192 1607KB 2288KB [ 798.687333] kmem_cache 177KB 183KB [ 798.692708] Out of memory (oom_kill_allocating_task): Kill process 13083 (in:imklog) score 0 or sacrifice child [ 798.704103] Killed process 13081 (rsyslogd) total-vm:254332kB, anon-rss:744kB, file-rss:0kB, shmem-rss:0kB [ 798.716446] oom_reaper: reaped process 13081 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 13:08:58 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) futex(&(0x7f00000001c0)=0x1, 0x80, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f0000000240)=0x8, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8, 0x1, 0x4, 0x8000000000000001, 0xfffffffffffffff8, 0x3a, 0x10000, 0x1}, &(0x7f0000000040)={0x100000000, 0xfffffffffffffff9, 0x1, 0x1, 0x3, 0x7, 0x3f, 0x81}, &(0x7f0000000080)={0x1, 0x8000000000000000, 0x4, 0x400, 0x1, 0x4, 0x3, 0x3}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x7f]}, 0x8}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0x5421, 0x0) 13:08:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:08:58 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) (async) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x5, 0x1, 0x3, "ce4b94b596c055bd092d3b245b65b4aa8138edc34966714e8489dbc649dbaf9b", 0x34325241}) 13:08:58 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x1, @sdr={0xb5315241, 0xbf2}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0xfffffffe}]}}) 13:08:58 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x3447504d, 0x1, @stepwise={0x80000001, 0x0, 0xca, 0x1, 0xa04, 0x4}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x3447504d, 0x1, @stepwise={0x80000001, 0x0, 0xca, 0x1, 0xa04, 0x4}}) (async) 13:08:58 executing program 5: openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2d0040, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="000126adc44cff00fd0000000000000032faeb8dbe1067138b89a68380f0053f7358d72115df730847b6d9f6182e860c9159b6135ecad6ef363566efff5b792d25f5c66aed9bcc70485094167b8294a9be6d7032d55d1cc13062038d074693db3d50afa7ae3c3a87484afe39bb1e38953a98e1671fbfa3a4067a60f048eb60daa6335366b85f67e395d97a53c84e0e9136faadf6f25663", @ANYRES32=0x0, @ANYBLOB="0c009900040000002b0000002c005e80180001000400000003000000070000000200000000000000080009002000000008000700bf06000014005e800800060006000000080003000700000044005e8008000900ff0100000800050034000000100001000800000006000000c0ffffff080009000700000010000100e0e200000400000007000000080007007d00000014005e80080009001f00000008000700eb06000004005e8014005e80080005000700000008000700ee020000"], 0xd8}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000801) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000a80)={0xa54, r4, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x73, 0x1b}}}}, [@NL80211_ATTR_TID_CONFIG={0x338, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1d}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffffffffffff}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x16c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x78, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x56, 0x5, 0x3, 0x0, 0x1, 0x0, 0x5b, 0x60, 0x11, 0xb, 0x32, 0x1b, 0x6533b0b25f7d6880, 0x0, 0x1, 0x5, 0x5, 0x36, 0x30, 0x5, 0x9, 0xb, 0x24, 0x6a51e596e69572b1, 0x6, 0xb, 0x24, 0x9, 0x9, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x2, 0x3f, 0x4, 0x0, 0x800, 0xfff7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x4, 0x18, 0x4e, 0x1b, 0x4, 0x24, 0x5, 0x36, 0x36, 0x2, 0x24, 0x36, 0x60, 0x34]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0xfffa, 0xd587, 0x81, 0xfff, 0x8001, 0x6, 0x8]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1328, 0x5, 0x6, 0x6, 0x9, 0x0, 0x8, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x1c00, 0x5, 0x80, 0x0, 0x1, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xa5, 0xde, 0x0, 0x8000, 0x2, 0x800]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1, 0x12, 0x48, 0xb, 0x1]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x4, 0x3, 0x16, 0x3, 0x18, 0x12, 0x1, 0x1, 0x1b, 0x6, 0x36, 0x36, 0x4f6498daae914ec2, 0x4, 0x0, 0x36, 0x48, 0x16, 0x5, 0x5, 0x5, 0x1, 0x1, 0x12, 0x3, 0x30, 0x48, 0x1b, 0x60, 0x1, 0x6]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x20, 0x2, [{}, {0x4, 0xa}, {0x2, 0x9}, {0x1, 0x5}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x4}, {0x6, 0x8}, {0x4, 0x7}, {0x1, 0x5}, {0x6, 0x9}, {0x1, 0x3}, {0x7, 0xa}, {0x0, 0x2}, {0x0, 0x8}, {0x1, 0x7}, {0x4, 0x3}, {0x1}, {0x5}, {0x2}, {0x4}, {0x6, 0xa}, {0x4, 0x2}, {0x1, 0x9}, {0x6, 0x4}, {0x2, 0x3}, {0x0, 0x6}, {0x1, 0x4}]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8000, 0x6, 0x3a, 0xba69, 0x7fff, 0x5, 0x7]}}]}]}]}, {0x194, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1c000}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x39}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x160, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x6, 0x4}, {0x3, 0x8}, {0x6, 0x8}, {0x3, 0x7}, {0x7, 0x9}, {0x6, 0x4}, {0x2, 0x6}, {0x2, 0x3}, {0x1, 0x8}, {0x5, 0x3}, {0x1, 0xa}, {0x0, 0x8}, {0x2, 0x7}, {0x7, 0x4}, {0x0, 0x3}, {0x0, 0x8}, {0x3, 0x7}, {0x1, 0x4}, {0x0, 0xa}, {0x4, 0x2}, {0x7, 0x9}, {0x6}, {0x1, 0x2}, {0x3, 0x4}, {0x1, 0x5}, {0x0, 0x2}, {0x3, 0x9}, {0x7, 0x3}, {0x6, 0x8}, {0x1, 0x8}, {0x6, 0x8}, {0x2, 0x5}, {0x1, 0x8}, {0x7, 0x1}, {0x2, 0x2}, {0x3}, {0x1, 0x4}, {0x4, 0x3}, {0x3, 0x5}, {0x7, 0x7}, {0x6, 0x1}, {0x2, 0x3}, {0x4, 0x6}, {0x2, 0x3}, {0x7, 0x1}, {0x7, 0x2}, {0x4, 0x6}, {0x1, 0x1}, {0x1, 0x8}, {0x6, 0x5}, {}, {0x1, 0x7}, {0x3, 0x1}, {0x4, 0x8}, {0x3, 0x9}, {0x7, 0x6}, {0x4, 0x4}, {0x4, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x3, 0x9, 0x12, 0x6, 0x1, 0x30, 0x2, 0x2, 0x5, 0x30, 0x24, 0xb, 0xc, 0xc, 0x34, 0x12, 0x18, 0x9, 0x48, 0x48, 0x18, 0x9, 0x2, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5a, 0x4, 0x3, 0x8, 0x20, 0x9, 0x5]}}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x77, 0x7ff, 0x3, 0x8000, 0x0, 0x5, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe692, 0x3, 0xffff, 0x1, 0x798, 0x8, 0x1ff, 0x330]}}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x7, 0x2}, {0x0, 0xa}, {0x1, 0x5}, {0x1}, {0x2, 0x3}, {0x2, 0xa}, {0x1, 0x8}, {0x0, 0x9}, {0x4, 0x8}, {0x6}, {0x1, 0x7}, {0x7, 0x2}, {0x1, 0x8}, {0x0, 0x2}, {0x6, 0x8}, {0x7, 0x6}, {0x4, 0x3}, {0x4, 0x6}, {0x0, 0xa}, {0x3, 0x8}, {0x1, 0x8}, {0x3, 0x7}, {0x5, 0x4}, {0x2, 0x8}, {0x7, 0x2}, {0x6, 0x4}, {0x1, 0x7}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x6, 0x9}, {0x5, 0x7}, {0x1, 0x3}, {0x7, 0x8}, {0x4}, {0x4, 0x8}, {0x2, 0x8}, {0x6, 0x9}, {0x5, 0x7}, {0x1}, {0x4, 0x8}, {0x4}, {0x1, 0x5}, {0x7}, {0x6, 0x8}, {0x7, 0x1}, {0x7, 0x4}, {0x1, 0x5}, {0x4, 0xa}, {0x7, 0x3}, {}, {0x6, 0x8}, {0x0, 0x3}, {0x7, 0xa}, {0x2, 0x1}, {0x1, 0x8}, {0x3, 0x9}, {0x7, 0x7}, {0x4, 0x3}, {0x4, 0x2}, {0x2, 0x3}, {0x5, 0x3}, {0x1, 0x3}, {0x6, 0x4}, {0x4, 0x4}, {0x1, 0x8}, {0x5, 0xa}, {0x7, 0x4}, {0x5, 0x5}, {0x7, 0x7}, {0x5, 0x8}, {0x5, 0x2}, {0x1, 0x1}, {0x6, 0x4}]}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x2}, {0x3, 0x8}, {0x6, 0x2}, {0x2, 0x9}, {0x6, 0x1}, {0x0, 0xa}, {0x6, 0x2}, {0x2, 0x4}, {0x6, 0x8}, {0x7, 0x4}, {0x4, 0x4}, {0x1}, {0x3, 0x3}, {0x4, 0x2}, {0x0, 0x5}, {0x3, 0x5}, {0x4, 0x9}, {0x6}, {0x7}, {0x7}, {0x4, 0x9}, {0x3, 0x4}, {0x1, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x7, 0x8}, {0x0, 0xa}, {0x6, 0x3}, {0x4}, {0x0, 0xa}, {0x5, 0x4}, {0x4, 0x8}, {0x1, 0x4}, {0x2, 0x4}, {0x0, 0x7}, {0x5, 0x3}, {0x3, 0x5}, {0x0, 0x8}, {0x0, 0x2}, {0x7, 0x1}, {0x2, 0x7}, {0x7, 0x4}, {0x0, 0x6}, {0x2, 0x3}, {0x1, 0x9}, {0x6, 0x6}, {0x3, 0x3}, {0x1, 0x8}, {0x1, 0x1}, {0x1, 0x7}, {0x1, 0x2}, {0x3, 0x1}, {0x3, 0x9}, {0x1, 0xa}, {0x1, 0x1}, {0x0, 0x6}, {0x1}, {0x5, 0x8}, {0x7, 0x1}, {0x5, 0x3}, {0x0, 0x5}, {0x4, 0x7}, {0x2, 0xa}, {0x7, 0x2}, {0x6, 0x3}, {0x0, 0xa}, {0x1, 0x7}, {0x7, 0x8}, {0x6, 0x5}]}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0xb4, 0x11d, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x38, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x80, 0x9, 0xb8, 0x10, 0xf4f3, 0x6, 0x2]}}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x41}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9b}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x40}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x250, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x69}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1000}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x9c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x54, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0xfff7, 0x1, 0xf87, 0x5, 0x20, 0x5]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x2, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0x9}, {0x6, 0x3}, {0x0, 0x7}, {0x6, 0x8}, {0x5, 0xa}, {0x7, 0x9}, {0x4, 0x2}, {0x2}, {0x4, 0x3}, {0x6, 0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffffffffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x41}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x58}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x400}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x42}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffffffffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x98, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x5c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x6, 0x9}, {0x7, 0xa}, {0x0, 0x5}, {0x5, 0x2}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x8}, {0x0, 0xa}, {0x7, 0x8}, {0x7, 0x3}, {0x0, 0x1}, {0x7, 0x5}, {0x5, 0x9}, {0x1, 0x6}, {0x3, 0x7}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x9}, {0x3}, {}, {0x6, 0x3}, {0x5, 0x3}, {0x2, 0x7}, {0x4, 0x9}, {0x7, 0x7}, {0x6, 0x9}, {0x4, 0x8}, {0x2, 0x2}, {0x0, 0xa}, {0x5, 0x5}, {0x5, 0x2}, {0x0, 0x5}, {0x7, 0x4}, {0x1, 0x1}, {0x5, 0x3}, {0x2, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc99, 0x8, 0xf2, 0x8, 0xf221, 0x8, 0x2, 0x4]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x24c, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}]}, {0xd0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xa0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x4c, 0xef4, 0x0, 0xff7f, 0x9, 0x5083, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffc, 0x2, 0x4, 0x8, 0x2, 0x5, 0xde, 0xea4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8000, 0x5, 0xff, 0x3f62, 0x2, 0xfff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0xc7a9, 0x7, 0x8000, 0x8, 0x7fff, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0xfbff, 0x1, 0x4, 0x3880, 0x1, 0x4]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x60, 0x0, 0x6, 0x12, 0x60, 0x60, 0x18, 0x5]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x38}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x56}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x430a}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc8}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x200}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x81}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x73}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000001}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x86}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe3}]}]}, @NL80211_ATTR_TID_CONFIG={0x7c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x96}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6e}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x78, 0x11d, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x13}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x29}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xb0, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x36}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x97}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x4}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0xa54}, 0x1, 0x0, 0x0, 0x20000801}, 0x4c000) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000200)=0x2) 13:08:58 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 13:08:58 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) (async) futex(&(0x7f00000001c0)=0x1, 0x80, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f0000000240)=0x8, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8, 0x1, 0x4, 0x8000000000000001, 0xfffffffffffffff8, 0x3a, 0x10000, 0x1}, &(0x7f0000000040)={0x100000000, 0xfffffffffffffff9, 0x1, 0x1, 0x3, 0x7, 0x3f, 0x81}, &(0x7f0000000080)={0x1, 0x8000000000000000, 0x4, 0x400, 0x1, 0x4, 0x3, 0x3}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x7f]}, 0x8}) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0x5421, 0x0) 13:08:58 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x1, @sdr={0xb5315241, 0xbf2}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0xfffffffe}]}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x1, @sdr={0xb5315241, 0xbf2}}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0xfffffffe}]}}) (async) 13:08:58 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x3447504d, 0x1, @stepwise={0x80000001, 0x0, 0xca, 0x1, 0xa04, 0x4}}) 13:08:58 executing program 5: openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2d0040, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="000126adc44cff00fd0000000000000032faeb8dbe1067138b89a68380f0053f7358d72115df730847b6d9f6182e860c9159b6135ecad6ef363566efff5b792d25f5c66aed9bcc70485094167b8294a9be6d7032d55d1cc13062038d074693db3d50afa7ae3c3a87484afe39bb1e38953a98e1671fbfa3a4067a60f048eb60daa6335366b85f67e395d97a53c84e0e9136faadf6f25663", @ANYRES32=0x0, @ANYBLOB="0c009900040000002b0000002c005e80180001000400000003000000070000000200000000000000080009002000000008000700bf06000014005e800800060006000000080003000700000044005e8008000900ff0100000800050034000000100001000800000006000000c0ffffff080009000700000010000100e0e200000400000007000000080007007d00000014005e80080009001f00000008000700eb06000004005e8014005e80080005000700000008000700ee020000"], 0xd8}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000801) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000a80)={0xa54, r4, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x73, 0x1b}}}}, [@NL80211_ATTR_TID_CONFIG={0x338, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1d}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffffffffffff}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x16c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x78, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x56, 0x5, 0x3, 0x0, 0x1, 0x0, 0x5b, 0x60, 0x11, 0xb, 0x32, 0x1b, 0x6533b0b25f7d6880, 0x0, 0x1, 0x5, 0x5, 0x36, 0x30, 0x5, 0x9, 0xb, 0x24, 0x6a51e596e69572b1, 0x6, 0xb, 0x24, 0x9, 0x9, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x2, 0x3f, 0x4, 0x0, 0x800, 0xfff7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x4, 0x18, 0x4e, 0x1b, 0x4, 0x24, 0x5, 0x36, 0x36, 0x2, 0x24, 0x36, 0x60, 0x34]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0xfffa, 0xd587, 0x81, 0xfff, 0x8001, 0x6, 0x8]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1328, 0x5, 0x6, 0x6, 0x9, 0x0, 0x8, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x1c00, 0x5, 0x80, 0x0, 0x1, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xa5, 0xde, 0x0, 0x8000, 0x2, 0x800]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1, 0x12, 0x48, 0xb, 0x1]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x4, 0x3, 0x16, 0x3, 0x18, 0x12, 0x1, 0x1, 0x1b, 0x6, 0x36, 0x36, 0x4f6498daae914ec2, 0x4, 0x0, 0x36, 0x48, 0x16, 0x5, 0x5, 0x5, 0x1, 0x1, 0x12, 0x3, 0x30, 0x48, 0x1b, 0x60, 0x1, 0x6]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x20, 0x2, [{}, {0x4, 0xa}, {0x2, 0x9}, {0x1, 0x5}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x4}, {0x6, 0x8}, {0x4, 0x7}, {0x1, 0x5}, {0x6, 0x9}, {0x1, 0x3}, {0x7, 0xa}, {0x0, 0x2}, {0x0, 0x8}, {0x1, 0x7}, {0x4, 0x3}, {0x1}, {0x5}, {0x2}, {0x4}, {0x6, 0xa}, {0x4, 0x2}, {0x1, 0x9}, {0x6, 0x4}, {0x2, 0x3}, {0x0, 0x6}, {0x1, 0x4}]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8000, 0x6, 0x3a, 0xba69, 0x7fff, 0x5, 0x7]}}]}]}]}, {0x194, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1c000}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x39}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x160, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x6, 0x4}, {0x3, 0x8}, {0x6, 0x8}, {0x3, 0x7}, {0x7, 0x9}, {0x6, 0x4}, {0x2, 0x6}, {0x2, 0x3}, {0x1, 0x8}, {0x5, 0x3}, {0x1, 0xa}, {0x0, 0x8}, {0x2, 0x7}, {0x7, 0x4}, {0x0, 0x3}, {0x0, 0x8}, {0x3, 0x7}, {0x1, 0x4}, {0x0, 0xa}, {0x4, 0x2}, {0x7, 0x9}, {0x6}, {0x1, 0x2}, {0x3, 0x4}, {0x1, 0x5}, {0x0, 0x2}, {0x3, 0x9}, {0x7, 0x3}, {0x6, 0x8}, {0x1, 0x8}, {0x6, 0x8}, {0x2, 0x5}, {0x1, 0x8}, {0x7, 0x1}, {0x2, 0x2}, {0x3}, {0x1, 0x4}, {0x4, 0x3}, {0x3, 0x5}, {0x7, 0x7}, {0x6, 0x1}, {0x2, 0x3}, {0x4, 0x6}, {0x2, 0x3}, {0x7, 0x1}, {0x7, 0x2}, {0x4, 0x6}, {0x1, 0x1}, {0x1, 0x8}, {0x6, 0x5}, {}, {0x1, 0x7}, {0x3, 0x1}, {0x4, 0x8}, {0x3, 0x9}, {0x7, 0x6}, {0x4, 0x4}, {0x4, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x3, 0x9, 0x12, 0x6, 0x1, 0x30, 0x2, 0x2, 0x5, 0x30, 0x24, 0xb, 0xc, 0xc, 0x34, 0x12, 0x18, 0x9, 0x48, 0x48, 0x18, 0x9, 0x2, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5a, 0x4, 0x3, 0x8, 0x20, 0x9, 0x5]}}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x77, 0x7ff, 0x3, 0x8000, 0x0, 0x5, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe692, 0x3, 0xffff, 0x1, 0x798, 0x8, 0x1ff, 0x330]}}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x7, 0x2}, {0x0, 0xa}, {0x1, 0x5}, {0x1}, {0x2, 0x3}, {0x2, 0xa}, {0x1, 0x8}, {0x0, 0x9}, {0x4, 0x8}, {0x6}, {0x1, 0x7}, {0x7, 0x2}, {0x1, 0x8}, {0x0, 0x2}, {0x6, 0x8}, {0x7, 0x6}, {0x4, 0x3}, {0x4, 0x6}, {0x0, 0xa}, {0x3, 0x8}, {0x1, 0x8}, {0x3, 0x7}, {0x5, 0x4}, {0x2, 0x8}, {0x7, 0x2}, {0x6, 0x4}, {0x1, 0x7}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x6, 0x9}, {0x5, 0x7}, {0x1, 0x3}, {0x7, 0x8}, {0x4}, {0x4, 0x8}, {0x2, 0x8}, {0x6, 0x9}, {0x5, 0x7}, {0x1}, {0x4, 0x8}, {0x4}, {0x1, 0x5}, {0x7}, {0x6, 0x8}, {0x7, 0x1}, {0x7, 0x4}, {0x1, 0x5}, {0x4, 0xa}, {0x7, 0x3}, {}, {0x6, 0x8}, {0x0, 0x3}, {0x7, 0xa}, {0x2, 0x1}, {0x1, 0x8}, {0x3, 0x9}, {0x7, 0x7}, {0x4, 0x3}, {0x4, 0x2}, {0x2, 0x3}, {0x5, 0x3}, {0x1, 0x3}, {0x6, 0x4}, {0x4, 0x4}, {0x1, 0x8}, {0x5, 0xa}, {0x7, 0x4}, {0x5, 0x5}, {0x7, 0x7}, {0x5, 0x8}, {0x5, 0x2}, {0x1, 0x1}, {0x6, 0x4}]}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x2}, {0x3, 0x8}, {0x6, 0x2}, {0x2, 0x9}, {0x6, 0x1}, {0x0, 0xa}, {0x6, 0x2}, {0x2, 0x4}, {0x6, 0x8}, {0x7, 0x4}, {0x4, 0x4}, {0x1}, {0x3, 0x3}, {0x4, 0x2}, {0x0, 0x5}, {0x3, 0x5}, {0x4, 0x9}, {0x6}, {0x7}, {0x7}, {0x4, 0x9}, {0x3, 0x4}, {0x1, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x7, 0x8}, {0x0, 0xa}, {0x6, 0x3}, {0x4}, {0x0, 0xa}, {0x5, 0x4}, {0x4, 0x8}, {0x1, 0x4}, {0x2, 0x4}, {0x0, 0x7}, {0x5, 0x3}, {0x3, 0x5}, {0x0, 0x8}, {0x0, 0x2}, {0x7, 0x1}, {0x2, 0x7}, {0x7, 0x4}, {0x0, 0x6}, {0x2, 0x3}, {0x1, 0x9}, {0x6, 0x6}, {0x3, 0x3}, {0x1, 0x8}, {0x1, 0x1}, {0x1, 0x7}, {0x1, 0x2}, {0x3, 0x1}, {0x3, 0x9}, {0x1, 0xa}, {0x1, 0x1}, {0x0, 0x6}, {0x1}, {0x5, 0x8}, {0x7, 0x1}, {0x5, 0x3}, {0x0, 0x5}, {0x4, 0x7}, {0x2, 0xa}, {0x7, 0x2}, {0x6, 0x3}, {0x0, 0xa}, {0x1, 0x7}, {0x7, 0x8}, {0x6, 0x5}]}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0xb4, 0x11d, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x38, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x80, 0x9, 0xb8, 0x10, 0xf4f3, 0x6, 0x2]}}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x41}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9b}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x40}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x250, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x69}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1000}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x9c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x54, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0xfff7, 0x1, 0xf87, 0x5, 0x20, 0x5]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x2, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0x9}, {0x6, 0x3}, {0x0, 0x7}, {0x6, 0x8}, {0x5, 0xa}, {0x7, 0x9}, {0x4, 0x2}, {0x2}, {0x4, 0x3}, {0x6, 0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffffffffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x41}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x58}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x400}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x42}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffffffffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x98, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x5c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x6, 0x9}, {0x7, 0xa}, {0x0, 0x5}, {0x5, 0x2}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x8}, {0x0, 0xa}, {0x7, 0x8}, {0x7, 0x3}, {0x0, 0x1}, {0x7, 0x5}, {0x5, 0x9}, {0x1, 0x6}, {0x3, 0x7}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x9}, {0x3}, {}, {0x6, 0x3}, {0x5, 0x3}, {0x2, 0x7}, {0x4, 0x9}, {0x7, 0x7}, {0x6, 0x9}, {0x4, 0x8}, {0x2, 0x2}, {0x0, 0xa}, {0x5, 0x5}, {0x5, 0x2}, {0x0, 0x5}, {0x7, 0x4}, {0x1, 0x1}, {0x5, 0x3}, {0x2, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc99, 0x8, 0xf2, 0x8, 0xf221, 0x8, 0x2, 0x4]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x24c, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}]}, {0xd0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xa0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x4c, 0xef4, 0x0, 0xff7f, 0x9, 0x5083, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffc, 0x2, 0x4, 0x8, 0x2, 0x5, 0xde, 0xea4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8000, 0x5, 0xff, 0x3f62, 0x2, 0xfff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0xc7a9, 0x7, 0x8000, 0x8, 0x7fff, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0xfbff, 0x1, 0x4, 0x3880, 0x1, 0x4]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x60, 0x0, 0x6, 0x12, 0x60, 0x60, 0x18, 0x5]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x38}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x56}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x430a}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc8}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x200}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x81}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x73}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000001}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x86}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe3}]}]}, @NL80211_ATTR_TID_CONFIG={0x7c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x96}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6e}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x78, 0x11d, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x13}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x29}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xb0, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x36}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x97}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x4}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0xa54}, 0x1, 0x0, 0x0, 0x20000801}, 0x4c000) 13:08:59 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) (async, rerun: 64) futex(&(0x7f00000001c0)=0x1, 0x80, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f0000000240)=0x8, 0x0) (rerun: 64) pselect6(0x40, &(0x7f0000000000)={0x8, 0x1, 0x4, 0x8000000000000001, 0xfffffffffffffff8, 0x3a, 0x10000, 0x1}, &(0x7f0000000040)={0x100000000, 0xfffffffffffffff9, 0x1, 0x1, 0x3, 0x7, 0x3f, 0x81}, &(0x7f0000000080)={0x1, 0x8000000000000000, 0x4, 0x400, 0x1, 0x4, 0x3, 0x3}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x7f]}, 0x8}) (async, rerun: 32) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (rerun: 32) ioctl$vim2m_VIDIOC_G_FMT(r2, 0x5421, 0x0) [ 806.673905] oom_reaper: reaped process 13338 (syz-executor.0), now anon-rss:0kB, file-rss:14336kB, shmem-rss:12kB [ 806.874062] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 806.887960] in:imklog cpuset=/ mems_allowed=0-1 [ 806.892631] CPU: 0 PID: 13322 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 806.900061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 806.909398] Call Trace: [ 806.911986] dump_stack+0x1fc/0x2ef [ 806.915610] dump_header+0x15d/0xc3f [ 806.919317] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 806.924403] ? ___ratelimit+0x319/0x590 [ 806.928364] oom_kill_process.cold+0x10/0x692 [ 806.932845] ? check_preemption_disabled+0x41/0x280 [ 806.937849] ? has_intersects_mems_allowed+0x1d6/0x290 [ 806.943118] out_of_memory+0x1072/0x1390 [ 806.947167] ? oom_killer_disable+0x270/0x270 [ 806.951656] ? mutex_trylock+0x15f/0x1a0 [ 806.955703] __alloc_pages_nodemask+0x23a2/0x2890 [ 806.960529] ? find_get_entry+0x4cd/0x8a0 [ 806.964664] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 806.969514] alloc_pages_current+0x193/0x2a0 [ 806.973904] filemap_fault+0x146e/0x2180 [ 806.977970] ext4_filemap_fault+0x84/0xb0 [ 806.982099] __do_fault+0x10b/0x4b0 [ 806.985709] ? do_raw_spin_unlock+0x171/0x230 [ 806.990187] __handle_mm_fault+0x273b/0x41c0 [ 806.994581] ? vm_insert_page+0x9c0/0x9c0 [ 806.998711] ? lock_downgrade+0x720/0x720 [ 807.002848] ? check_preemption_disabled+0x41/0x280 [ 807.007848] handle_mm_fault+0x436/0xb10 [ 807.011912] __do_page_fault+0x68e/0xd60 [ 807.015966] ? trace_hardirqs_off_caller+0x6e/0x210 [ 807.020964] ? spurious_fault+0x840/0x840 [ 807.025094] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 807.029921] ? page_fault+0x8/0x30 [ 807.033458] page_fault+0x1e/0x30 [ 807.036906] RIP: 0033:0x7fcda5273238 [ 807.040615] Code: Bad RIP value. [ 807.043961] RSP: 002b:00007fcda4823588 EFLAGS: 00010206 [ 807.049307] RAX: 0000000000000078 RBX: 0000000000000000 RCX: 00007fcda6e8722d [ 807.056572] RDX: 0000000000000078 RSI: 000000000000000a RDI: 00007fcda4823da0 [ 807.063852] RBP: 000055acf05b69d0 R08: 0000000000000000 R09: 0000000000000000 [ 807.071119] R10: 2ce33e6c02ce33e7 R11: 0000000000000000 R12: 00007fcda4823da0 [ 807.078370] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007fcda4823da0 [ 807.088381] Mem-Info: [ 807.090832] active_anon:17989 inactive_anon:17038 isolated_anon:0 [ 807.090832] active_file:20 inactive_file:9 isolated_file:0 [ 807.090832] unevictable:0 dirty:0 writeback:0 unstable:0 [ 807.090832] slab_reclaimable:15279 slab_unreclaimable:120983 [ 807.090832] mapped:22352 shmem:17698 pagetables:580 bounce:0 [ 807.090832] free:14084 free_pcp:52 free_cma:0 [ 807.134787] Node 0 active_anon:70376kB inactive_anon:19288kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21620kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 807.189568] Node 1 active_anon:1580kB inactive_anon:48864kB active_file:48kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1540kB dirty:0kB writeback:0kB shmem:49172kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 807.216939] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 807.243197] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 807.248318] Node 0 DMA32 free:17856kB min:35996kB low:44992kB high:53988kB active_anon:70376kB inactive_anon:19288kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7616kB pagetables:2148kB bounce:0kB free_pcp:440kB local_pcp:248kB free_cma:0kB [ 807.277285] lowmem_reserve[]: 0 0 1 1 1 [ 807.281280] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 807.289199] syz-executor.0: vmalloc: allocation failure, allocated 1734868992 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 807.307196] lowmem_reserve[]: 0 0 0 0 0 [ 807.307220] Node 1 Normal free:26924kB min:53876kB low:67344kB high:80812kB active_anon:1580kB inactive_anon:48864kB active_file:48kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:128kB pagetables:172kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 807.307250] lowmem_reserve[]: 0 0 0 0 0 [ 807.307270] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10872kB [ 807.341461] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 807.359123] Node 0 DMA32: 1872*4kB (ME) 812*8kB (UME) 168*16kB (ME) 31*32kB (ME) 1*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17856kB [ 807.359194] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 807.379642] CPU: 0 PID: 13338 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 807.381569] Node 1 Normal: 183*4kB (UME) 164*8kB (ME) 145*16kB (UME) 87*32kB (UM) 65*64kB (ME) 13*128kB (M) 1*256kB (M) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 2*4096kB (U) = 27052kB [ 807.395703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 807.395709] Call Trace: [ 807.395732] dump_stack+0x1fc/0x2ef [ 807.395749] warn_alloc.cold+0x7b/0x18f [ 807.395769] ? zone_watermark_ok_safe+0x260/0x260 [ 807.406795] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 807.414670] __vmalloc_area_node+0x4fd/0x780 [ 807.414692] ? __vmalloc_node_range+0x180/0x180 [ 807.431171] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 807.442150] ? _raw_spin_unlock+0x29/0x40 [ 807.442163] ? __get_vm_area_node+0x2e2/0x3a0 [ 807.442183] __vmalloc_node_range+0xed/0x180 [ 807.444762] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 807.448359] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 807.452310] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 807.457224] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 807.457238] vmalloc_user+0x70/0xe0 [ 807.457254] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 807.466080] 17733 total pagecache pages [ 807.470472] vb2_vmalloc_alloc+0xb3/0x2f0 [ 807.475142] 0 pages in swap cache [ 807.483692] __vb2_queue_alloc+0x472/0xe60 [ 807.487837] Swap cache stats: add 0, delete 0, find 0/0 [ 807.492311] vb2_core_create_bufs+0x273/0x7e0 [ 807.496711] Free swap = 0kB [ 807.505514] ? __vb2_queue_free+0x870/0x870 [ 807.505527] ? __video_do_ioctl+0x632/0xcd0 [ 807.505545] ? pi_state_update_owner+0x450/0x450 [ 807.509844] Total swap = 0kB [ 807.518415] ? __mutex_lock+0x368/0x1190 [ 807.518433] vb2_create_bufs+0x332/0x620 [ 807.518451] ? mark_held_locks+0xf0/0xf0 [ 807.523787] 2097051 pages RAM [ 807.527397] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 807.527411] ? futex_wait_queue_me+0x404/0x5e0 [ 807.527427] ? pi_state_update_owner+0x450/0x450 [ 807.531720] 0 pages HighMem/MovableOnly [ 807.535678] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 807.535694] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 807.535716] v4l_create_bufs+0xb2/0x160 [ 807.539832] 369649 pages reserved [ 807.543278] __video_do_ioctl+0x49a/0xcd0 [ 807.547499] 0 pages cma reserved [ 807.552863] ? v4l_querycap+0x340/0x340 [ 807.557356] Unreclaimable slab info: [ 807.560345] ? __might_fault+0x192/0x1d0 [ 807.564669] Name Used Total [ 807.568962] ? v4l_querycap+0x340/0x340 [ 807.573693] pid_2 59KB 152KB [ 807.576693] video_usercopy+0x13f/0xfa0 [ 807.576718] ? v4l_enumstd+0x60/0x60 [ 807.580823] batadv_tl_cache 4KB 12KB [ 807.584799] ? do_futex+0x171/0x1880 [ 807.584814] ? mark_held_locks+0xf0/0xf0 [ 807.584832] ? debug_check_no_obj_freed+0x201/0x490 [ 807.588885] TIPC 10KB 15KB [ 807.591970] ? video_usercopy+0xfa0/0xfa0 [ 807.597075] SCTPv6 14KB 24KB [ 807.601620] v4l2_ioctl+0x147/0x1a0 [ 807.606370] SCTP 5KB 7KB [ 807.610312] ? video_devdata+0xa0/0xa0 [ 807.615418] DCCPv6 17KB 22KB [ 807.620566] do_vfs_ioctl+0xcdb/0x12e0 [ 807.624542] DCCP 16KB 21KB [ 807.627973] ? lock_downgrade+0x720/0x720 [ 807.632121] RXRPC 11KB 13KB [ 807.635444] ? check_preemption_disabled+0x41/0x280 [ 807.635457] ? ioctl_preallocate+0x200/0x200 [ 807.635476] ? __fget+0x356/0x510 [ 807.639421] rxrpc_call_jar 78KB 94KB [ 807.643133] ? do_dup2+0x450/0x450 [ 807.648498] bridge_fdb_cache 9KB 15KB [ 807.653995] ? __se_sys_futex+0x298/0x3b0 [ 807.657972] fib6_nodes 158KB 188KB [ 807.663329] ksys_ioctl+0x9b/0xc0 [ 807.667295] ip6_dst_cache 177KB 322KB [ 807.670986] __x64_sys_ioctl+0x6f/0xb0 [ 807.676357] RAWv6 70KB 74KB [ 807.680045] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 807.684080] UDPv6 26KB 33KB [ 807.689078] do_syscall_64+0xf9/0x620 [ 807.689096] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 807.689111] RIP: 0033:0x7f68c24140f9 [ 807.694490] TCPv6 30KB 36KB [ 807.698597] Code: Bad RIP value. [ 807.703944] nf_conntrack 9KB 18KB [ 807.707538] RSP: 002b:00007f68c0986168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 807.707552] RAX: ffffffffffffffda RBX: 00007f68c2533f80 RCX: 00007f68c24140f9 [ 807.707559] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000005 [ 807.707571] RBP: 00007f68c246fae9 R08: 0000000000000000 R09: 0000000000000000 [ 807.713111] t10_alua_lu_gp_cache 0KB 3KB [ 807.716804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 807.716812] R13: 00007fff6155d44f R14: 00007f68c0986300 R15: 0000000000022000 [ 807.727795] Mem-Info: [ 807.739423] sd_ext_cdb 0KB 7KB [ 807.748749] active_anon:17989 inactive_anon:17038 isolated_anon:0 [ 807.748749] active_file:23 inactive_file:6 isolated_file:0 [ 807.748749] unevictable:0 dirty:0 writeback:0 unstable:0 [ 807.748749] slab_reclaimable:15279 slab_unreclaimable:121008 [ 807.748749] mapped:22352 shmem:17698 pagetables:580 bounce:0 [ 807.748749] free:13915 free_pcp:167 free_cma:0 [ 807.753959] scsi_sense_cache 1056KB 1060KB [ 807.754125] Node 0 active_anon:70376kB inactive_anon:19288kB active_file:44kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21620kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 807.759534] virtio_scsi_cmd 16KB 16KB [ 807.759548] sgpool-128 8KB 8KB [ 807.759563] sgpool-64 4KB 12KB [ 807.774647] Node 1 active_anon:1580kB inactive_anon:48864kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1536kB dirty:0kB writeback:0kB shmem:49172kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 807.781518] sgpool-32 2KB 15KB [ 807.781529] sgpool-16 1KB 7KB [ 807.798751] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 807.804139] sgpool-8 0KB 7KB [ 807.809518] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 807.809972] mqueue_inode_cache 10KB 22KB [ 807.818566] Node 0 DMA32 free:17856kB min:35996kB low:44992kB high:53988kB active_anon:70376kB inactive_anon:19288kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7616kB pagetables:2148kB bounce:0kB free_pcp:416kB local_pcp:168kB free_cma:0kB [ 807.825830] bio_post_read_ctx 14KB 15KB [ 807.831005] lowmem_reserve[]: 0 0 1 1 1 [ 807.834019] bio-2 14KB 15KB [ 807.844110] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 807.852732] jfs_mp 7KB 7KB [ 807.865637] lowmem_reserve[]: 0 0 0 0 0 [ 807.873789] cifs_small_rq 15KB 16KB [ 807.875748] Node 1 Normal free:26800kB min:53876kB low:67344kB high:80812kB active_anon:1580kB inactive_anon:48864kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:128kB pagetables:172kB bounce:0kB free_pcp:496kB local_pcp:248kB free_cma:0kB [ 807.882983] cifs_request 67KB 67KB [ 807.895792] lowmem_reserve[]: 0 0 0 0 0 [ 807.928663] cifs_mpx_ids 0KB 7KB [ 807.939475] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10872kB [ 807.965959] nfs_commit_data 3KB 14KB [ 807.974994] Node 0 DMA32: 1872*4kB (ME) 812*8kB (UME) 168*16kB (ME) 31*32kB (ME) 1*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17856kB [ 808.008756] nfs_write_data 34KB 44KB [ 808.018844] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 808.049649] ext4_system_zone 1KB 7KB [ 808.057606] Node 1 Normal: 182*4kB (ME) 165*8kB (UME) 145*16kB (UME) 87*32kB (UM) 65*64kB (ME) 13*128kB (M) 2*256kB (UM) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 2*4096kB (U) = 26800kB [ 808.094548] bio-1 1KB 7KB [ 808.101871] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 808.135714] pid_namespace 2KB 7KB [ 808.142528] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 808.185826] rpc_buffers 17KB 25KB [ 808.200369] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 808.211917] rpc_tasks 2KB 7KB [ 808.219415] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 808.229638] UNIX 504KB 562KB [ 808.232626] 17725 total pagecache pages [ 808.247377] tcp_bind_bucket 1KB 4KB [ 808.261686] 0 pages in swap cache [ 808.277480] ip_fib_trie 23KB 31KB [ 808.288099] Swap cache stats: add 0, delete 0, find 0/0 [ 808.293680] ip_fib_alias 112KB 134KB [ 808.300894] Free swap = 0kB [ 808.304482] ip_dst_cache 9KB 48KB [ 808.318692] Total swap = 0kB [ 808.328222] RAW 42KB 52KB [ 808.330259] 2097051 pages RAM [ 808.340123] UDP 52KB 74KB [ 808.346719] 0 pages HighMem/MovableOnly [ 808.353902] TCP 11KB 16KB [ 808.356425] 369649 pages reserved [ 808.361977] hugetlbfs_inode_cache 3KB 15KB [ 808.363699] 0 pages cma reserved [ 808.403066] fscache_cookie_jar 1KB 11KB [ 808.408597] eventpoll_pwq 23KB 47KB [ 808.414087] eventpoll_epi 43KB 66KB [ 808.427589] inotify_inode_mark 21KB 51KB [ 808.433067] request_queue 199KB 199KB [ 808.443345] blkdev_requests 1KB 3KB [ 808.451904] blkdev_ioc 34KB 34KB [ 808.462265] bio-0 1584KB 1612KB [ 808.470840] biovec-max 1707KB 1815KB [ 808.481451] biovec-64 1356KB 1401KB [ 808.489996] biovec-16 115KB 131KB [ 808.500573] bio_integrity_payload 1KB 8KB [ 808.509635] khugepaged_mm_slot 11KB 34KB [ 808.520285] uid_cache 0KB 4KB [ 808.528945] dmaengine-unmap-2 0KB 3KB [ 808.534321] skbuff_fclone_cache 71KB 150KB [ 808.548032] skbuff_head_cache 7003KB 7005KB [ 808.553437] configfs_dir_cache 3KB 11KB [ 808.563053] file_lock_cache 65KB 178KB [ 808.572369] file_lock_ctx 9KB 11KB [ 808.581760] fsnotify_mark_connector 11KB 31KB [ 808.591738] net_namespace 52KB 52KB [ 808.601268] shmem_inode_cache 8095KB 8337KB [ 808.610949] task_delay_info 152KB 407KB [ 808.620725] taskstats 64KB 172KB [ 808.630123] proc_dir_entry 696KB 727KB [ 808.639880] pde_opener 5KB 58KB [ 808.649318] seq_file 301KB 535KB [ 808.659105] sigqueue 46KB 59KB [ 808.668604] kernfs_node_cache 18234KB 18250KB [ 808.673974] mnt_cache 173KB 180KB [ 808.683500] filp 7318KB 7620KB [ 808.692895] names_cache 149162KB 149221KB [ 808.702299] iint_cache 40KB 71KB [ 808.711763] key_jar 4KB 11KB [ 808.721214] uts_namespace 2KB 7KB [ 808.730579] nsproxy 4KB 7KB [ 808.740361] vm_area_struct 3243KB 4980KB [ 808.749896] mm_struct 406KB 890KB [ 808.759632] fs_cache 83KB 348KB [ 808.769076] files_cache 330KB 656KB [ 808.779246] signal_cache 767KB 1602KB [ 808.788740] sighand_cache 548KB 603KB [ 808.794204] task_struct 5056KB 5056KB [ 808.803778] cred_jar 2021KB 2160KB [ 808.813185] anon_vma_chain 1067KB 1803KB [ 808.822709] anon_vma 148KB 269KB [ 808.832323] pid 49KB 264KB [ 808.842174] Acpi-Operand 156KB 202KB [ 808.851503] Acpi-ParseExt 8KB 11KB [ 808.861035] Acpi-Parse 41KB 47KB [ 808.870409] Acpi-State 52KB 63KB [ 808.880117] Acpi-Namespace 21KB 27KB [ 808.889541] numa_policy 0KB 3KB [ 808.900099] debug_objects_cache 1151KB 1568KB [ 808.909709] trace_event_file 297KB 298KB [ 808.919452] ftrace_event_field 398KB 401KB [ 808.929021] pool_workqueue 121KB 128KB [ 808.934398] page->ptl 498KB 1047KB [ 808.944253] kmalloc-2097152 2050KB 2050KB [ 808.953547] kmalloc-524288 2056KB 2056KB [ 808.963081] kmalloc-262144 1290KB 1290KB [ 808.972379] kmalloc-131072 650KB 650KB [ 808.981806] kmalloc-65536 1848KB 1914KB [ 808.991146] kmalloc-32768 1650KB 1650KB [ 809.000724] kmalloc-16384 1006KB 1056KB [ 809.010268] kmalloc-8192 3960KB 4009KB [ 809.020006] kmalloc-4096 17701KB 17731KB [ 809.029492] kmalloc-2048 10629KB 12501KB [ 809.039322] kmalloc-1024 6162KB 7812KB [ 809.049231] kmalloc-512 15123KB 15123KB [ 809.059426] kmalloc-256 4100KB 5227KB [ 809.068909] kmalloc-128 887KB 1488KB [ 809.074302] kmalloc-96 3696KB 4020KB [ 809.081370] kmalloc-64 2322KB 4208KB [ 809.091326] kmalloc-32 1834KB 2445KB [ 809.097677] kmalloc-192 1535KB 2280KB [ 809.103124] kmem_cache 177KB 183KB [ 809.112606] Out of memory (oom_kill_allocating_task): Kill process 13322 (in:imklog) score 0 or sacrifice child [ 809.124395] Killed process 13320 (rsyslogd) total-vm:254332kB, anon-rss:2564kB, file-rss:0kB, shmem-rss:0kB [ 809.141049] oom_reaper: reaped process 13320 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 809.538235] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.543845] ieee802154 phy1 wpan1: encryption failed: -22 13:09:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:09:09 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x1, 0x10000, 0x2, 0x880}) 13:09:09 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 13:09:09 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x20343059, 0x0, 0x0, [{}, {}, {}, {}, {}, {0xfffffffe}, {0x0, 0x7fff}], 0x0, 0x2}}) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000080)="cec0b1a238fe100eb1db19596885688c9acc234f1ec6768f39f48b56cce1e512b60bc9dc16f423407e2b14378b7740a33d23da677252a5280a4159fe4f74267d36ded93f6a778ac32b17f72a635abc848a041224f07395d39227e9341bc9d517545070b5f1ea92f92af9d4e52841111d4d", 0x71, 0x4000000, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000000)=@mmap={0x1e8, 0x2, 0x4, 0x1, 0xfff, {0x0, 0xea60}, {0x2, 0xc, 0x7f, 0x1f, 0x1f, 0xff, "51ed7508"}, 0x9, 0x1, {}, 0x8}) 13:09:09 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x1, @sdr={0xb5315241, 0xbf2}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0xfffffffe}]}}) 13:09:09 executing program 5: openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2d0040, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="000126adc44cff00fd0000000000000032faeb8dbe1067138b89a68380f0053f7358d72115df730847b6d9f6182e860c9159b6135ecad6ef363566efff5b792d25f5c66aed9bcc70485094167b8294a9be6d7032d55d1cc13062038d074693db3d50afa7ae3c3a87484afe39bb1e38953a98e1671fbfa3a4067a60f048eb60daa6335366b85f67e395d97a53c84e0e9136faadf6f25663", @ANYRES32=0x0, @ANYBLOB="0c009900040000002b0000002c005e80180001000400000003000000070000000200000000000000080009002000000008000700bf06000014005e800800060006000000080003000700000044005e8008000900ff0100000800050034000000100001000800000006000000c0ffffff080009000700000010000100e0e200000400000007000000080007007d00000014005e80080009001f00000008000700eb06000004005e8014005e80080005000700000008000700ee020000"], 0xd8}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000801) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 13:09:09 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x1, 0x10000, 0x2, 0x880}) 13:09:09 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 13:09:09 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x20343059, 0x0, 0x0, [{}, {}, {}, {}, {}, {0xfffffffe}, {0x0, 0x7fff}], 0x0, 0x2}}) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000080)="cec0b1a238fe100eb1db19596885688c9acc234f1ec6768f39f48b56cce1e512b60bc9dc16f423407e2b14378b7740a33d23da677252a5280a4159fe4f74267d36ded93f6a778ac32b17f72a635abc848a041224f07395d39227e9341bc9d517545070b5f1ea92f92af9d4e52841111d4d", 0x71, 0x4000000, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000000)=@mmap={0x1e8, 0x2, 0x4, 0x1, 0xfff, {0x0, 0xea60}, {0x2, 0xc, 0x7f, 0x1f, 0x1f, 0xff, "51ed7508"}, 0x9, 0x1, {}, 0x8}) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000000)=@mmap={0x1e8, 0x2, 0x4, 0x1, 0xfff, {0x0, 0xea60}, {0x2, 0xc, 0x7f, 0x1f, 0x1f, 0xff, "51ed7508"}, 0x9, 0x1, {}, 0x8}) 13:09:09 executing program 5: openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2d0040, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="000126adc44cff00fd0000000000000032faeb8dbe1067138b89a68380f0053f7358d72115df730847b6d9f6182e860c9159b6135ecad6ef363566efff5b792d25f5c66aed9bcc70485094167b8294a9be6d7032d55d1cc13062038d074693db3d50afa7ae3c3a87484afe39bb1e38953a98e1671fbfa3a4067a60f048eb60daa6335366b85f67e395d97a53c84e0e9136faadf6f25663", @ANYRES32=0x0, @ANYBLOB="0c009900040000002b0000002c005e80180001000400000003000000070000000200000000000000080009002000000008000700bf06000014005e800800060006000000080003000700000044005e8008000900ff0100000800050034000000100001000800000006000000c0ffffff080009000700000010000100e0e200000400000007000000080007007d00000014005e80080009001f00000008000700eb06000004005e8014005e80080005000700000008000700ee020000"], 0xd8}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000801) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 13:09:09 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$P9_RSYMLINK(r0, &(0x7f0000000100)={0x14, 0x11, 0x1, {0x4, 0x4, 0x3}}, 0x14) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_userptr={0x3322, 0x3, 0x4, 0x530, 0x0, {}, {0x3, 0x8, 0xf3, 0xff, 0x58, 0x2, "832babeb"}, 0x153, 0x2, {&(0x7f00000002c0)=[{0x6, 0x9, {&(0x7f00000001c0)}}, {0x9, 0x400, {&(0x7f0000000200)}, 0x2}]}, 0xfffffff9}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)=@userptr={0x336a, 0x0, 0x4, 0x70100, 0x7c5, {r2, r3/1000+60000}, {0x1, 0xa, 0x8, 0x5, 0x81, 0xd9, "12bf40f3"}, 0x7f0, 0x2, {&(0x7f0000000040)}, 0x6}) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000180)) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8001000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x4008040) 13:09:10 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000002c0)={0x7f, 0x0, 0x2, "6da40a08fa53f326e92571ff7a40cdf74e30f0d62af5289d0611e5e458448c9f", 0x31364d4e}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000080)=@multiplanar_mmap={0xc66b, 0x2, 0x4, 0x10, 0x42aa5765, {0x0, 0x2710}, {0x2, 0x2, 0x61, 0x1, 0xff, 0x1f, "ee258121"}, 0x7a2b, 0x1, {&(0x7f0000000100)=[{0xc66, 0xffffffff, {0x2}, 0x1000}, {0x100001, 0xffff, {0x40}}]}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x9, 0x2, 0x4, 0x0, 0xffff, {}, {0x4, 0x0, 0x2, 0x0, 0x4, 0x5f, "409312ca"}, 0x2, 0x2, {&(0x7f0000000180)=[{0xfffffffc, 0x7, {}, 0x7ff}, {0x80000000, 0x3a34, {&(0x7f0000000040)}, 0x401}]}, 0x1f, 0x0, r3}) 13:09:10 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x1, 0x10000, 0x2, 0x880}) [ 817.525860] oom_reaper: reaped process 13391 (syz-executor.0), now anon-rss:0kB, file-rss:14336kB, shmem-rss:12kB [ 817.581317] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 817.623336] systemd-journal cpuset=/ mems_allowed=0-1 [ 817.628649] CPU: 0 PID: 13258 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 817.636625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 817.645979] Call Trace: [ 817.648572] dump_stack+0x1fc/0x2ef [ 817.652205] dump_header+0x15d/0xc3f [ 817.655923] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 817.661027] ? ___ratelimit+0x319/0x590 [ 817.665019] oom_kill_process.cold+0x10/0x692 [ 817.669528] ? check_preemption_disabled+0x41/0x280 [ 817.674539] ? has_intersects_mems_allowed+0x1d6/0x290 [ 817.679796] out_of_memory+0x1072/0x1390 [ 817.683844] ? oom_killer_disable+0x270/0x270 [ 817.688325] ? mutex_trylock+0x15f/0x1a0 [ 817.692372] __alloc_pages_nodemask+0x23a2/0x2890 [ 817.697204] ? find_get_entry+0x4cd/0x8a0 [ 817.701343] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 817.706199] alloc_pages_current+0x193/0x2a0 [ 817.710598] filemap_fault+0x146e/0x2180 [ 817.714652] ext4_filemap_fault+0x84/0xb0 [ 817.718831] __do_fault+0x10b/0x4b0 [ 817.722577] __handle_mm_fault+0x273b/0x41c0 [ 817.726979] ? vm_insert_page+0x9c0/0x9c0 [ 817.731125] ? check_preemption_disabled+0x41/0x280 [ 817.736135] handle_mm_fault+0x436/0xb10 [ 817.740188] __do_page_fault+0x68e/0xd60 [ 817.744238] ? trace_hardirqs_off_caller+0x6e/0x210 [ 817.749255] ? spurious_fault+0x840/0x840 [ 817.753389] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 817.758221] ? page_fault+0x8/0x30 [ 817.761763] page_fault+0x1e/0x30 [ 817.765202] RIP: 0033:0x7fac9a89f21d [ 817.769013] Code: Bad RIP value. [ 817.772363] RSP: 002b:00007ffc3ac7c2f0 EFLAGS: 00010207 [ 817.777708] RAX: 0000000000000001 RBX: 0000562c51cac1e0 RCX: 00007fac99ec42e3 [ 817.784961] RDX: 0000000000000013 RSI: 00007ffc3ac7c2f0 RDI: 000000000000000c [ 817.792218] RBP: 00007ffc3ac7c4e0 R08: 00007ffc3acb6000 R09: 000000d0378a2c4c [ 817.799471] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc3ac7c2f0 [ 817.806908] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005f5c24ce915fa [ 817.819752] Mem-Info: [ 817.822195] active_anon:17530 inactive_anon:17038 isolated_anon:0 [ 817.822195] active_file:12 inactive_file:13 isolated_file:0 [ 817.822195] unevictable:0 dirty:0 writeback:0 unstable:0 [ 817.822195] slab_reclaimable:15280 slab_unreclaimable:120924 [ 817.822195] mapped:22383 shmem:17698 pagetables:582 bounce:0 [ 817.822195] free:14017 free_pcp:16 free_cma:0 [ 817.855720] syz-executor.0: vmalloc: allocation failure, allocated 1737445376 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 817.857431] Node 0 active_anon:68020kB inactive_anon:19288kB active_file:44kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21620kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 817.874882] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 817.900704] Node 1 active_anon:2100kB inactive_anon:48864kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1664kB dirty:0kB writeback:0kB shmem:49172kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 817.904023] CPU: 1 PID: 13391 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 817.934561] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 817.937228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 817.966998] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 817.972761] Call Trace: [ 817.977863] Node 0 DMA32 free:18080kB min:35996kB low:44992kB high:53988kB active_anon:68020kB inactive_anon:19288kB active_file:44kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7520kB pagetables:2096kB bounce:0kB free_pcp:72kB local_pcp:56kB free_cma:0kB [ 817.980366] dump_stack+0x1fc/0x2ef [ 818.012583] lowmem_reserve[]: 0 0 1 1 1 [ 818.012679] warn_alloc.cold+0x7b/0x18f [ 818.016664] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 818.020600] ? zone_watermark_ok_safe+0x260/0x260 [ 818.051263] ? rcu_nmi_exit+0xb3/0x180 [ 818.051489] lowmem_reserve[]: 0 0 0 0 0 [ 818.055170] __vmalloc_area_node+0x4fd/0x780 [ 818.055191] ? __vmalloc_node_range+0x180/0x180 [ 818.055206] ? _raw_spin_unlock+0x29/0x40 [ 818.055218] ? __get_vm_area_node+0x2e2/0x3a0 [ 818.055235] __vmalloc_node_range+0xed/0x180 [ 818.055252] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 818.059218] Node 1 Normal free:27096kB min:53876kB low:67344kB high:80812kB active_anon:2100kB inactive_anon:48864kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:224kB pagetables:232kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 818.063652] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 818.076385] lowmem_reserve[]: 0 0 0 0 0 [ 818.076957] vmalloc_user+0x70/0xe0 [ 818.081345] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 818.085661] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 818.085675] vb2_vmalloc_alloc+0xb3/0x2f0 [ 818.085690] __vb2_queue_alloc+0x472/0xe60 [ 818.085715] vb2_core_create_bufs+0x273/0x7e0 [ 818.085730] ? __vb2_queue_free+0x870/0x870 [ 818.085746] ? __video_do_ioctl+0x632/0xcd0 [ 818.085767] ? __mutex_lock+0x368/0x1190 [ 818.122564] Node 0 DMA32: 1838*4kB (UME) 826*8kB (UME) 183*16kB (UME) 36*32kB (UME) 2*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18168kB [ 818.124652] vb2_create_bufs+0x332/0x620 [ 818.124670] ? mark_held_locks+0xf0/0xf0 [ 818.124684] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 818.124702] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 818.124716] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 818.124737] v4l_create_bufs+0xb2/0x160 [ 818.124755] __video_do_ioctl+0x49a/0xcd0 [ 818.124775] ? v4l_querycap+0x340/0x340 [ 818.124793] ? __might_fault+0x192/0x1d0 [ 818.124811] ? v4l_querycap+0x340/0x340 [ 818.124826] video_usercopy+0x13f/0xfa0 [ 818.124847] ? v4l_enumstd+0x60/0x60 [ 818.124862] ? do_futex+0x171/0x1880 [ 818.124878] ? mark_held_locks+0xf0/0xf0 [ 818.124897] ? debug_check_no_obj_freed+0x201/0x490 [ 818.124920] ? video_usercopy+0xfa0/0xfa0 [ 818.124933] v4l2_ioctl+0x147/0x1a0 [ 818.124946] ? video_devdata+0xa0/0xa0 [ 818.124962] do_vfs_ioctl+0xcdb/0x12e0 [ 818.124978] ? lock_downgrade+0x720/0x720 [ 818.124998] ? check_preemption_disabled+0x41/0x280 [ 818.125012] ? ioctl_preallocate+0x200/0x200 [ 818.125031] ? __fget+0x356/0x510 [ 818.125048] ? do_dup2+0x450/0x450 [ 818.125062] ? __se_sys_futex+0x298/0x3b0 [ 818.125084] ksys_ioctl+0x9b/0xc0 [ 818.125101] __x64_sys_ioctl+0x6f/0xb0 [ 818.125115] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 818.125130] do_syscall_64+0xf9/0x620 [ 818.125149] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 818.125161] RIP: 0033:0x7f68c24140f9 [ 818.125175] Code: Bad RIP value. [ 818.125183] RSP: 002b:00007f68c0986168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 818.125196] RAX: ffffffffffffffda RBX: 00007f68c2533f80 RCX: 00007f68c24140f9 [ 818.125204] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000004 [ 818.125212] RBP: 00007f68c246fae9 R08: 0000000000000000 R09: 0000000000000000 [ 818.125219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 818.125227] R13: 00007fff6155d44f R14: 00007f68c0986300 R15: 0000000000022000 [ 818.127159] Mem-Info: [ 818.130701] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 818.145776] active_anon:17530 inactive_anon:17038 isolated_anon:0 [ 818.145776] active_file:12 inactive_file:13 isolated_file:0 [ 818.145776] unevictable:0 dirty:0 writeback:0 unstable:0 [ 818.145776] slab_reclaimable:15280 slab_unreclaimable:120924 [ 818.145776] mapped:22383 shmem:17698 pagetables:582 bounce:0 [ 818.145776] free:13972 free_pcp:71 free_cma:0 [ 818.168459] Node 1 Normal: 214*4kB (UME) 187*8kB (UME) 158*16kB (UME) 103*32kB (ME) 66*64kB (UME) 13*128kB (M) 1*256kB (M) 1*512kB (E) 2*1024kB (UE) 1*2048kB (E) 2*4096kB (U) = 27120kB [ 818.172480] Node 0 active_anon:68020kB inactive_anon:19288kB active_file:44kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21620kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 818.196589] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 818.204615] Node 1 active_anon:2100kB inactive_anon:48864kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1664kB dirty:0kB writeback:0kB shmem:49172kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 818.211919] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 818.219042] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 818.232422] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 818.239840] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 818.242021] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 818.246274] Node 0 DMA32 free:17900kB min:35996kB low:44992kB high:53988kB active_anon:68020kB inactive_anon:19288kB active_file:44kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7520kB pagetables:2096kB bounce:0kB free_pcp:260kB local_pcp:16kB free_cma:0kB [ 818.246307] lowmem_reserve[]: 0 0 1 1 1 [ 818.262199] 17723 total pagecache pages [ 818.263093] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 818.267115] 0 pages in swap cache [ 818.274467] lowmem_reserve[]: 0 0 0 0 0 [ 818.284295] Swap cache stats: add 0, delete 0, find 0/0 [ 818.294100] Node 1 Normal free:27096kB min:53876kB low:67344kB high:80812kB active_anon:2100kB inactive_anon:48864kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:224kB pagetables:232kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 818.300203] Free swap = 0kB [ 818.303789] lowmem_reserve[]: 0 0 0 0 0 [ 818.311010] Total swap = 0kB [ 818.316563] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 818.327340] 2097051 pages RAM [ 818.331031] Node 0 DMA32: 1837*4kB (ME) 795*8kB (UME) 183*16kB (UME) 36*32kB (UME) 2*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17916kB [ 818.341910] 0 pages HighMem/MovableOnly [ 818.342248] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 818.352986] 369649 pages reserved [ 818.363390] Node 1 Normal: 214*4kB (UME) 187*8kB (UME) 158*16kB (UME) 103*32kB (ME) 66*64kB (UME) 13*128kB (M) 1*256kB (M) 1*512kB (E) 2*1024kB (UE) 1*2048kB (E) 2*4096kB (U) = 27120kB [ 818.372165] 0 pages cma reserved [ 818.384402] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 818.419645] Unreclaimable slab info: [ 818.434826] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 818.466587] Name Used Total [ 818.499472] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 818.509569] pid_2 55KB 152KB [ 818.534392] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 818.547477] batadv_tl_cache 4KB 12KB [ 818.556980] 17723 total pagecache pages [ 818.592156] TIPC 10KB 15KB [ 818.619760] 0 pages in swap cache [ 818.629001] SCTPv6 14KB 24KB [ 818.661371] Swap cache stats: add 0, delete 0, find 0/0 [ 818.666742] SCTP 1KB 3KB [ 818.684857] Free swap = 0kB [ 818.704462] DCCPv6 17KB 22KB [ 818.717114] Total swap = 0kB [ 818.738873] DCCP 16KB 21KB [ 818.747172] 2097051 pages RAM [ 818.763542] RXRPC 11KB 13KB [ 818.775662] 0 pages HighMem/MovableOnly [ 818.792135] rxrpc_call_jar 78KB 94KB [ 818.793978] 369649 pages reserved [ 818.798901] bridge_fdb_cache 9KB 15KB [ 818.802265] 0 pages cma reserved [ 818.815717] fib6_nodes 157KB 188KB [ 818.880973] ip6_dst_cache 114KB 311KB [ 818.886599] RAWv6 70KB 74KB [ 818.891975] UDPv6 26KB 33KB [ 818.904004] TCPv6 27KB 36KB [ 818.909491] nf_conntrack 10KB 18KB [ 818.918502] t10_alua_lu_gp_cache 0KB 3KB [ 818.927615] sd_ext_cdb 0KB 7KB [ 818.933078] scsi_sense_cache 1056KB 1060KB [ 818.941821] virtio_scsi_cmd 16KB 16KB [ 818.950529] sgpool-128 8KB 8KB [ 818.959479] sgpool-64 4KB 12KB [ 818.968248] sgpool-32 2KB 15KB [ 818.973622] sgpool-16 1KB 7KB [ 818.982320] sgpool-8 0KB 7KB [ 818.991024] mqueue_inode_cache 10KB 22KB [ 819.000078] bio_post_read_ctx 14KB 15KB [ 819.008866] bio-2 14KB 15KB [ 819.017832] jfs_mp 7KB 7KB [ 819.023234] cifs_small_rq 15KB 16KB [ 819.032080] cifs_request 67KB 67KB [ 819.040893] cifs_mpx_ids 0KB 7KB [ 819.049493] nfs_commit_data 3KB 14KB [ 819.058455] nfs_write_data 34KB 44KB [ 819.063864] ext4_system_zone 1KB 7KB [ 819.072453] bio-1 1KB 7KB [ 819.082389] pid_namespace 2KB 7KB [ 819.091118] rpc_buffers 17KB 25KB [ 819.102926] rpc_tasks 2KB 7KB [ 819.111629] UNIX 388KB 446KB [ 819.123501] tcp_bind_bucket 1KB 4KB [ 819.132198] ip_fib_trie 23KB 31KB [ 819.147536] ip_fib_alias 112KB 134KB [ 819.152923] ip_dst_cache 9KB 48KB [ 819.161636] RAW 42KB 52KB [ 819.173627] UDP 55KB 74KB [ 819.182581] TCP 11KB 16KB [ 819.198238] hugetlbfs_inode_cache 3KB 15KB [ 819.207567] fscache_cookie_jar 1KB 11KB [ 819.213298] eventpoll_pwq 23KB 47KB [ 819.228549] eventpoll_epi 43KB 66KB [ 819.235279] inotify_inode_mark 17KB 51KB [ 819.240741] request_queue 199KB 199KB [ 819.255941] blkdev_requests 1KB 3KB [ 819.261330] blkdev_ioc 30KB 34KB [ 819.270157] bio-0 1685KB 1713KB [ 819.282067] biovec-max 1707KB 1815KB [ 819.290813] biovec-64 1440KB 1480KB [ 819.302696] biovec-16 105KB 131KB [ 819.311444] bio_integrity_payload 1KB 8KB [ 819.323662] khugepaged_mm_slot 8KB 34KB [ 819.332458] uid_cache 0KB 4KB [ 819.347739] dmaengine-unmap-2 0KB 3KB [ 819.353299] skbuff_fclone_cache 74KB 150KB [ 819.362487] skbuff_head_cache 7025KB 7027KB [ 819.377930] configfs_dir_cache 3KB 11KB [ 819.383401] file_lock_cache 62KB 178KB [ 819.392173] file_lock_ctx 9KB 11KB [ 819.407547] fsnotify_mark_connector 8KB 31KB [ 819.413480] net_namespace 52KB 52KB [ 819.422429] shmem_inode_cache 8104KB 8333KB [ 819.437947] task_delay_info 152KB 407KB [ 819.443524] taskstats 63KB 168KB [ 819.452290] proc_dir_entry 694KB 720KB [ 819.465026] pde_opener 5KB 58KB [ 819.471014] seq_file 289KB 535KB [ 819.476684] sigqueue 46KB 59KB [ 819.482257] kernfs_node_cache 18234KB 18250KB [ 819.487777] mnt_cache 173KB 180KB [ 819.493741] filp 7193KB 7620KB [ 819.499681] names_cache 149000KB 149060KB [ 819.505894] iint_cache 41KB 71KB [ 819.511273] key_jar 4KB 11KB [ 819.516766] uts_namespace 2KB 7KB [ 819.522723] nsproxy 3KB 7KB [ 819.528726] vm_area_struct 3184KB 4980KB [ 819.535209] mm_struct 399KB 845KB [ 819.541019] fs_cache 70KB 348KB [ 819.548116] files_cache 278KB 600KB [ 819.557031] signal_cache 697KB 1581KB [ 819.562482] sighand_cache 550KB 603KB [ 819.567993] task_struct 5037KB 5087KB [ 819.574092] cred_jar 1982KB 2160KB [ 819.579526] anon_vma_chain 1054KB 1803KB [ 819.585004] anon_vma 134KB 269KB [ 819.590737] pid 47KB 264KB [ 819.596216] Acpi-Operand 156KB 202KB [ 819.601766] Acpi-ParseExt 8KB 11KB [ 819.607220] Acpi-Parse 41KB 47KB [ 819.612862] Acpi-State 52KB 63KB [ 819.618291] Acpi-Namespace 21KB 27KB [ 819.623848] numa_policy 0KB 3KB [ 819.629714] debug_objects_cache 1151KB 1568KB [ 819.635309] trace_event_file 297KB 298KB [ 819.640857] ftrace_event_field 398KB 401KB [ 819.646367] pool_workqueue 121KB 128KB [ 819.651939] page->ptl 483KB 1047KB [ 819.657403] kmalloc-2097152 2050KB 2050KB [ 819.662969] kmalloc-524288 2056KB 2056KB [ 819.668427] kmalloc-262144 1290KB 1290KB [ 819.674033] kmalloc-131072 650KB 650KB [ 819.679409] kmalloc-65536 1848KB 1914KB [ 819.684840] kmalloc-32768 1650KB 1650KB [ 819.690399] kmalloc-16384 1006KB 1056KB [ 819.697060] kmalloc-8192 3960KB 4001KB [ 819.702599] kmalloc-4096 17752KB 17756KB [ 819.708071] kmalloc-2048 10550KB 12456KB [ 819.713821] kmalloc-1024 6178KB 7812KB [ 819.720546] kmalloc-512 15202KB 15202KB [ 819.726713] kmalloc-256 4080KB 5227KB [ 819.732723] kmalloc-128 841KB 1488KB [ 819.738855] kmalloc-96 3711KB 4020KB [ 819.744973] kmalloc-64 2307KB 4208KB [ 819.751225] kmalloc-32 1833KB 2445KB [ 819.756687] kmalloc-192 1481KB 2280KB [ 819.762268] kmem_cache 177KB 183KB [ 819.767722] Out of memory (oom_kill_allocating_task): Kill process 13258 (systemd-journal) score 0 or sacrifice child [ 819.779426] Killed process 13258 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:1544kB [ 819.792189] oom_reaper: reaped process 13258 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1544kB [ 819.875040] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 819.889282] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 819.923804] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 819.937007] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 819.947356] systemd[1]: Stopped Journal Service. [ 819.971061] systemd[1]: Starting Journal Service... [ 820.195938] systemd-journald[13432]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 820.694045] systemd[1]: Started Journal Service. 13:09:19 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x20343059, 0x0, 0x0, [{}, {}, {}, {}, {}, {0xfffffffe}, {0x0, 0x7fff}], 0x0, 0x2}}) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000080)="cec0b1a238fe100eb1db19596885688c9acc234f1ec6768f39f48b56cce1e512b60bc9dc16f423407e2b14378b7740a33d23da677252a5280a4159fe4f74267d36ded93f6a778ac32b17f72a635abc848a041224f07395d39227e9341bc9d517545070b5f1ea92f92af9d4e52841111d4d", 0x71, 0x4000000, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000000)=@mmap={0x1e8, 0x2, 0x4, 0x1, 0xfff, {0x0, 0xea60}, {0x2, 0xc, 0x7f, 0x1f, 0x1f, 0xff, "51ed7508"}, 0x9, 0x1, {}, 0x8}) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000000)=@mmap={0x1e8, 0x2, 0x4, 0x1, 0xfff, {0x0, 0xea60}, {0x2, 0xc, 0x7f, 0x1f, 0x1f, 0xff, "51ed7508"}, 0x9, 0x1, {}, 0x8}) 13:09:19 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0xffffffff, 0x2, 0x4, 0x2, 0x0, {0x77359400}, {0x0, 0x0, 0x40, 0x0, 0x2, 0xfe, "f6d3cd36"}, 0x0, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x1, @sliced={0x8e, [0x7f, 0x38bb, 0x9, 0xc3, 0x7, 0x4, 0x7f, 0x1, 0x63b, 0x1, 0x4, 0x8, 0x20, 0x1, 0x8, 0x8001, 0x5, 0xd86, 0x2, 0x3ff, 0x6, 0x9, 0x0, 0x9, 0x3, 0x2, 0x1, 0x8001, 0x1, 0x401, 0x2, 0x6, 0x6, 0x9, 0x5, 0x2000, 0x8, 0x4, 0x6, 0x4, 0xfffa, 0x1, 0x94, 0x1, 0x5, 0xcc, 0x401, 0x100], 0xffff}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x1, 0x3, 0x3, 0x0, 0x5}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_userptr={0xffffff00, 0x2, 0x4, 0x100000, 0x2, {0x0, 0xea60}, {0x5, 0x8, 0x5, 0x18, 0x1, 0x1, "638cd0b4"}, 0x8, 0x2, {&(0x7f00000001c0)=[{0x800, 0xffffffff, {&(0x7f0000000140)}, 0xec4e}, {0x8, 0x4, {&(0x7f0000000180)}, 0x1}]}, 0x0, 0x0, r2}) 13:09:19 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$P9_RSYMLINK(r0, &(0x7f0000000100)={0x14, 0x11, 0x1, {0x4, 0x4, 0x3}}, 0x14) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_userptr={0x3322, 0x3, 0x4, 0x530, 0x0, {}, {0x3, 0x8, 0xf3, 0xff, 0x58, 0x2, "832babeb"}, 0x153, 0x2, {&(0x7f00000002c0)=[{0x6, 0x9, {&(0x7f00000001c0)}}, {0x9, 0x400, {&(0x7f0000000200)}, 0x2}]}, 0xfffffff9}) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)=@userptr={0x336a, 0x0, 0x4, 0x70100, 0x7c5, {r2, r3/1000+60000}, {0x1, 0xa, 0x8, 0x5, 0x81, 0xd9, "12bf40f3"}, 0x7f0, 0x2, {&(0x7f0000000040)}, 0x6}) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000180)) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8001000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x4008040) 13:09:19 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000002c0)={0x7f, 0x0, 0x2, "6da40a08fa53f326e92571ff7a40cdf74e30f0d62af5289d0611e5e458448c9f", 0x31364d4e}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000080)=@multiplanar_mmap={0xc66b, 0x2, 0x4, 0x10, 0x42aa5765, {0x0, 0x2710}, {0x2, 0x2, 0x61, 0x1, 0xff, 0x1f, "ee258121"}, 0x7a2b, 0x1, {&(0x7f0000000100)=[{0xc66, 0xffffffff, {0x2}, 0x1000}, {0x100001, 0xffff, {0x40}}]}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) (async, rerun: 32) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x9, 0x2, 0x4, 0x0, 0xffff, {}, {0x4, 0x0, 0x2, 0x0, 0x4, 0x5f, "409312ca"}, 0x2, 0x2, {&(0x7f0000000180)=[{0xfffffffc, 0x7, {}, 0x7ff}, {0x80000000, 0x3a34, {&(0x7f0000000040)}, 0x401}]}, 0x1f, 0x0, r3}) (rerun: 32) 13:09:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:09:19 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$P9_RSYMLINK(r0, &(0x7f0000000100)={0x14, 0x11, 0x1, {0x4, 0x4, 0x3}}, 0x14) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_userptr={0x3322, 0x3, 0x4, 0x530, 0x0, {}, {0x3, 0x8, 0xf3, 0xff, 0x58, 0x2, "832babeb"}, 0x153, 0x2, {&(0x7f00000002c0)=[{0x6, 0x9, {&(0x7f00000001c0)}}, {0x9, 0x400, {&(0x7f0000000200)}, 0x2}]}, 0xfffffff9}) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)=@userptr={0x336a, 0x0, 0x4, 0x70100, 0x7c5, {r2, r3/1000+60000}, {0x1, 0xa, 0x8, 0x5, 0x81, 0xd9, "12bf40f3"}, 0x7f0, 0x2, {&(0x7f0000000040)}, 0x6}) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000180)) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8001000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x4008040) 13:09:19 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0xffffffff, 0x2, 0x4, 0x2, 0x0, {0x77359400}, {0x0, 0x0, 0x40, 0x0, 0x2, 0xfe, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0xffffffff, 0x2, 0x4, 0x2, 0x0, {0x77359400}, {0x0, 0x0, 0x40, 0x0, 0x2, 0xfe, "f6d3cd36"}, 0x0, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x1, @sliced={0x8e, [0x7f, 0x38bb, 0x9, 0xc3, 0x7, 0x4, 0x7f, 0x1, 0x63b, 0x1, 0x4, 0x8, 0x20, 0x1, 0x8, 0x8001, 0x5, 0xd86, 0x2, 0x3ff, 0x6, 0x9, 0x0, 0x9, 0x3, 0x2, 0x1, 0x8001, 0x1, 0x401, 0x2, 0x6, 0x6, 0x9, 0x5, 0x2000, 0x8, 0x4, 0x6, 0x4, 0xfffa, 0x1, 0x94, 0x1, 0x5, 0xcc, 0x401, 0x100], 0xffff}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x1, 0x3, 0x3, 0x0, 0x5}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_userptr={0xffffff00, 0x2, 0x4, 0x100000, 0x2, {0x0, 0xea60}, {0x5, 0x8, 0x5, 0x18, 0x1, 0x1, "638cd0b4"}, 0x8, 0x2, {&(0x7f00000001c0)=[{0x800, 0xffffffff, {&(0x7f0000000140)}, 0xec4e}, {0x8, 0x4, {&(0x7f0000000180)}, 0x1}]}, 0x0, 0x0, r2}) 13:09:19 executing program 5: openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2d0040, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="000126adc44cff00fd0000000000000032faeb8dbe1067138b89a68380f0053f7358d72115df730847b6d9f6182e860c9159b6135ecad6ef363566efff5b792d25f5c66aed9bcc70485094167b8294a9be6d7032d55d1cc13062038d074693db3d50afa7ae3c3a87484afe39bb1e38953a98e1671fbfa3a4067a60f048eb60daa6335366b85f67e395d97a53c84e0e9136faadf6f25663", @ANYRES32=0x0, @ANYBLOB="0c009900040000002b0000002c005e80180001000400000003000000070000000200000000000000080009002000000008000700bf06000014005e800800060006000000080003000700000044005e8008000900ff0100000800050034000000100001000800000006000000c0ffffff080009000700000010000100e0e200000400000007000000080007007d00000014005e80080009001f00000008000700eb06000004005e8014005e80080005000700000008000700ee020000"], 0xd8}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000801) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) 13:09:20 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async, rerun: 32) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (rerun: 32) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0xffffffff, 0x2, 0x4, 0x2, 0x0, {0x77359400}, {0x0, 0x0, 0x40, 0x0, 0x2, 0xfe, "f6d3cd36"}, 0x0, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x1, @sliced={0x8e, [0x7f, 0x38bb, 0x9, 0xc3, 0x7, 0x4, 0x7f, 0x1, 0x63b, 0x1, 0x4, 0x8, 0x20, 0x1, 0x8, 0x8001, 0x5, 0xd86, 0x2, 0x3ff, 0x6, 0x9, 0x0, 0x9, 0x3, 0x2, 0x1, 0x8001, 0x1, 0x401, 0x2, 0x6, 0x6, 0x9, 0x5, 0x2000, 0x8, 0x4, 0x6, 0x4, 0xfffa, 0x1, 0x94, 0x1, 0x5, 0xcc, 0x401, 0x100], 0xffff}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x1, 0x3, 0x3, 0x0, 0x5}) (async, rerun: 64) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_userptr={0xffffff00, 0x2, 0x4, 0x100000, 0x2, {0x0, 0xea60}, {0x5, 0x8, 0x5, 0x18, 0x1, 0x1, "638cd0b4"}, 0x8, 0x2, {&(0x7f00000001c0)=[{0x800, 0xffffffff, {&(0x7f0000000140)}, 0xec4e}, {0x8, 0x4, {&(0x7f0000000180)}, 0x1}]}, 0x0, 0x0, r2}) (rerun: 64) 13:09:20 executing program 5: openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2d0040, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="000126adc44cff00fd0000000000000032faeb8dbe1067138b89a68380f0053f7358d72115df730847b6d9f6182e860c9159b6135ecad6ef363566efff5b792d25f5c66aed9bcc70485094167b8294a9be6d7032d55d1cc13062038d074693db3d50afa7ae3c3a87484afe39bb1e38953a98e1671fbfa3a4067a60f048eb60daa6335366b85f67e395d97a53c84e0e9136faadf6f25663", @ANYRES32=0x0, @ANYBLOB="0c009900040000002b0000002c005e80180001000400000003000000070000000200000000000000080009002000000008000700bf06000014005e800800060006000000080003000700000044005e8008000900ff0100000800050034000000100001000800000006000000c0ffffff080009000700000010000100e0e200000400000007000000080007007d00000014005e80080009001f00000008000700eb06000004005e8014005e80080005000700000008000700ee020000"], 0xd8}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000801) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) 13:09:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r1, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xffff8000, 0x6c}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4040041) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0xfc, r6, 0xb32, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x34}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x7e}}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x185}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xc4}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x9}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x9}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x5}]}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x9f}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x40}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x3ff}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x58}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x3}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xfff}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}]}, @NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x9}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x4}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xa1}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x4}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x7}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xae}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x1000}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r4, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x95b, 0x1d}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x20, 0x5, 0x0, 0x4, 0x0, 0x7, 0xa0]}]}, 0x34}}, 0x40040d0) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r7, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:09:21 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @raw_data="ddabc783af71f0977f5289047dac20dbf4832e856f966419fb34de5a1c5386ba6d2bd7b19e6140efbf9a8d1d54af1a2caee351c0e38a79d14f546508df48850a7785bec3de3fc1d42dcc962c442bbce7361fdbf3e304ce7e4c0ebd4412db58f1b67bc66cf962754999c039f267ea8c5e3e747107b1025b77c7435252a7035490565f80df5ae6a54897cfa9f4394ddf18fe5215a002153261f5346c778ade7ac84598434eabb63768fc30e333ffa2665890078dc49af61d6b5a2bb1e0833d3b4e09711645052f1d6d"}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x200, 0x0, 0x1, "cfa7b5c9ee5b821b5dc1b0abfa7b693ebeb1b42842ee8d9c14cccb43972109b5", 0x50424752}) 13:09:21 executing program 5: openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2d0040, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="000126adc44cff00fd0000000000000032faeb8dbe1067138b89a68380f0053f7358d72115df730847b6d9f6182e860c9159b6135ecad6ef363566efff5b792d25f5c66aed9bcc70485094167b8294a9be6d7032d55d1cc13062038d074693db3d50afa7ae3c3a87484afe39bb1e38953a98e1671fbfa3a4067a60f048eb60daa6335366b85f67e395d97a53c84e0e9136faadf6f25663", @ANYRES32=0x0, @ANYBLOB="0c009900040000002b0000002c005e80180001000400000003000000070000000200000000000000080009002000000008000700bf06000014005e800800060006000000080003000700000044005e8008000900ff0100000800050034000000100001000800000006000000c0ffffff080009000700000010000100e0e200000400000007000000080007007d00000014005e80080009001f00000008000700eb06000004005e8014005e80080005000700000008000700ee020000"], 0xd8}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000801) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) socket$nl_generic(0x10, 0x3, 0x10) [ 828.405999] oom_reaper: reaped process 13441 (syz-executor.0), now anon-rss:0kB, file-rss:14336kB, shmem-rss:12kB [ 828.440818] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 828.457452] systemd-journal cpuset=/ mems_allowed=0-1 [ 828.462685] CPU: 1 PID: 13432 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 828.470658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 828.480190] Call Trace: [ 828.482802] dump_stack+0x1fc/0x2ef [ 828.486437] dump_header+0x15d/0xc3f [ 828.490169] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 828.495278] ? ___ratelimit+0x319/0x590 [ 828.499272] oom_kill_process.cold+0x10/0x692 [ 828.503783] ? check_preemption_disabled+0x41/0x280 [ 828.508813] ? has_intersects_mems_allowed+0x1d6/0x290 [ 828.514189] out_of_memory+0x1072/0x1390 [ 828.518259] ? oom_killer_disable+0x270/0x270 [ 828.522761] ? mutex_trylock+0x15f/0x1a0 [ 828.526947] __alloc_pages_nodemask+0x23a2/0x2890 [ 828.531827] ? find_get_entry+0x4cd/0x8a0 [ 828.536074] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 828.540948] alloc_pages_current+0x193/0x2a0 [ 828.545363] filemap_fault+0x146e/0x2180 [ 828.549445] ext4_filemap_fault+0x84/0xb0 [ 828.553600] __do_fault+0x10b/0x4b0 [ 828.557232] __handle_mm_fault+0x273b/0x41c0 [ 828.561649] ? vm_insert_page+0x9c0/0x9c0 [ 828.565818] ? check_preemption_disabled+0x41/0x280 [ 828.570838] handle_mm_fault+0x436/0xb10 [ 828.574906] __do_page_fault+0x68e/0xd60 [ 828.578967] ? trace_hardirqs_off_caller+0x6e/0x210 [ 828.583570] syz-executor.0: vmalloc: allocation failure, allocated 1723752448 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 828.583980] ? spurious_fault+0x840/0x840 [ 828.601295] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 828.601896] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 828.611820] ? page_fault+0x8/0x30 [ 828.615381] page_fault+0x1e/0x30 [ 828.618833] RIP: 0033:0x7f4e2b69d2e3 [ 828.622556] Code: Bad RIP value. [ 828.625909] RSP: 002b:00007ffd2d9748a8 EFLAGS: 00010246 [ 828.631278] RAX: 0000000000000001 RBX: 00005625630781e0 RCX: 00007f4e2b69d2e3 [ 828.638551] RDX: 0000000000000013 RSI: 00007ffd2d9748b0 RDI: 000000000000000c [ 828.645826] RBP: 00007ffd2d974aa0 R08: 0000000000000000 R09: 000000d3191bc359 [ 828.653086] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd2d9748b0 [ 828.660350] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005f5c24d94bf23 [ 828.667648] CPU: 0 PID: 13441 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 828.667956] Mem-Info: [ 828.675534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 828.675540] Call Trace: [ 828.675562] dump_stack+0x1fc/0x2ef [ 828.675581] warn_alloc.cold+0x7b/0x18f [ 828.675598] ? zone_watermark_ok_safe+0x260/0x260 [ 828.675633] __vmalloc_area_node+0x4fd/0x780 [ 828.675652] ? __vmalloc_node_range+0x180/0x180 [ 828.675666] ? _raw_spin_unlock+0x29/0x40 [ 828.675680] ? __get_vm_area_node+0x2e2/0x3a0 [ 828.675700] __vmalloc_node_range+0xed/0x180 [ 828.675715] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 828.675731] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 828.675745] vmalloc_user+0x70/0xe0 [ 828.675760] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 828.675774] vb2_vmalloc_alloc+0xb3/0x2f0 [ 828.675790] __vb2_queue_alloc+0x472/0xe60 [ 828.675818] vb2_core_create_bufs+0x273/0x7e0 [ 828.675833] ? __vb2_queue_free+0x870/0x870 [ 828.675849] ? __video_do_ioctl+0x632/0xcd0 [ 828.675869] ? __mutex_lock+0x368/0x1190 [ 828.675887] vb2_create_bufs+0x332/0x620 [ 828.675904] ? mark_held_locks+0xf0/0xf0 [ 828.675919] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 828.675936] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 828.675953] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 828.675974] v4l_create_bufs+0xb2/0x160 [ 828.675993] __video_do_ioctl+0x49a/0xcd0 [ 828.676014] ? v4l_querycap+0x340/0x340 [ 828.676033] ? __might_fault+0x192/0x1d0 [ 828.676049] ? v4l_querycap+0x340/0x340 [ 828.676065] video_usercopy+0x13f/0xfa0 [ 828.676087] ? v4l_enumstd+0x60/0x60 [ 828.676101] ? do_futex+0x171/0x1880 [ 828.676117] ? mark_held_locks+0xf0/0xf0 [ 828.676136] ? debug_check_no_obj_freed+0x201/0x490 [ 828.676160] ? video_usercopy+0xfa0/0xfa0 [ 828.676172] v4l2_ioctl+0x147/0x1a0 [ 828.676185] ? video_devdata+0xa0/0xa0 [ 828.676201] do_vfs_ioctl+0xcdb/0x12e0 [ 828.676216] ? lock_downgrade+0x720/0x720 [ 828.676232] ? check_preemption_disabled+0x41/0x280 [ 828.676247] ? ioctl_preallocate+0x200/0x200 [ 828.676272] ? __fget+0x356/0x510 [ 828.676289] ? do_dup2+0x450/0x450 [ 828.676304] ? __se_sys_futex+0x298/0x3b0 [ 828.676327] ksys_ioctl+0x9b/0xc0 [ 828.676343] __x64_sys_ioctl+0x6f/0xb0 [ 828.676358] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 828.676372] do_syscall_64+0xf9/0x620 [ 828.676391] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 828.676404] RIP: 0033:0x7f68c24140f9 [ 828.676417] Code: Bad RIP value. [ 828.676425] RSP: 002b:00007f68c0986168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 828.676438] RAX: ffffffffffffffda RBX: 00007f68c2533f80 RCX: 00007f68c24140f9 [ 828.676447] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000004 [ 828.676456] RBP: 00007f68c246fae9 R08: 0000000000000000 R09: 0000000000000000 [ 828.676463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 828.676471] R13: 00007fff6155d44f R14: 00007f68c0986300 R15: 0000000000022000 [ 828.685827] Mem-Info: [ 828.689257] active_anon:19175 inactive_anon:19070 isolated_anon:0 [ 828.689257] active_file:36 inactive_file:11 isolated_file:0 [ 828.689257] unevictable:0 dirty:0 writeback:1 unstable:0 [ 828.689257] slab_reclaimable:15270 slab_unreclaimable:120547 [ 828.689257] mapped:22313 shmem:19746 pagetables:615 bounce:0 [ 828.689257] free:13886 free_pcp:149 free_cma:0 [ 828.692166] active_anon:19175 inactive_anon:19070 isolated_anon:0 [ 828.692166] active_file:36 inactive_file:11 isolated_file:0 [ 828.692166] unevictable:0 dirty:0 writeback:1 unstable:0 [ 828.692166] slab_reclaimable:15270 slab_unreclaimable:120547 [ 828.692166] mapped:22313 shmem:19746 pagetables:615 bounce:0 [ 828.692166] free:13886 free_pcp:149 free_cma:0 [ 828.695148] Node 0 active_anon:74596kB inactive_anon:19280kB active_file:36kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87880kB dirty:0kB writeback:0kB shmem:21612kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 20480kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 828.695174] Node 1 active_anon:2104kB inactive_anon:57000kB active_file:108kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1372kB dirty:0kB writeback:4kB shmem:57372kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 828.695179] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 828.695206] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 828.716094] Node 0 active_anon:74596kB inactive_anon:19280kB active_file:36kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87880kB dirty:0kB writeback:0kB shmem:21612kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 20480kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 828.716250] Node 0 DMA32 free:17732kB min:35996kB low:44992kB high:53988kB active_anon:74596kB inactive_anon:19280kB active_file:36kB inactive_file:68kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7616kB pagetables:2228kB bounce:0kB free_pcp:344kB local_pcp:0kB free_cma:0kB [ 828.720291] Node 1 active_anon:2104kB inactive_anon:57000kB active_file:108kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1372kB dirty:0kB writeback:4kB shmem:57372kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 828.724779] lowmem_reserve[]: 0 0 1 1 1 [ 828.724797] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 828.724825] lowmem_reserve[]: 0 0 0 0 0 [ 828.724843] Node 1 Normal free:26936kB min:53876kB low:67344kB high:80812kB active_anon:2104kB inactive_anon:57000kB active_file:108kB inactive_file:0kB unevictable:0kB writepending:104kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:224kB pagetables:232kB bounce:0kB free_pcp:252kB local_pcp:0kB free_cma:0kB [ 828.737433] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 828.739433] lowmem_reserve[]: 0 0 0 0 0 [ 828.742630] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 828.751768] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 828.763984] Node 0 DMA32 free:17732kB min:35996kB low:44992kB high:53988kB active_anon:74500kB inactive_anon:19280kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7616kB pagetables:2224kB bounce:0kB free_pcp:344kB local_pcp:344kB free_cma:0kB [ 828.771245] Node 0 DMA32: 1855*4kB (UME) 807*8kB (ME) 177*16kB (UME) 32*32kB (ME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17732kB [ 828.773002] lowmem_reserve[]: 0 0 1 1 1 [ 828.778845] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 828.789287] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 828.796871] Node 1 Normal: 230*4kB (ME) 196*8kB (UME) 152*16kB (ME) 116*32kB (ME) 42*64kB (UME) 12*128kB (M) 3*256kB (UM) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 2*4096kB (U) = 26936kB [ 828.801888] lowmem_reserve[]: 0 0 0 0 0 [ 828.807292] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 828.816942] Node 1 Normal free:26936kB min:53876kB low:67344kB high:80812kB active_anon:2100kB inactive_anon:57000kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:224kB pagetables:232kB bounce:0kB free_pcp:252kB local_pcp:252kB free_cma:0kB [ 828.820509] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 828.821009] lowmem_reserve[]: 0 0 0 0 0 [ 828.828113] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 828.832763] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 828.841015] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 828.848601] Node 0 DMA32: 1855*4kB (UME) 807*8kB (ME) 177*16kB (UME) 32*32kB (ME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17732kB [ 828.851701] 19778 total pagecache pages [ 828.853174] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 828.861848] 0 pages in swap cache [ 828.868417] Node 1 Normal: 230*4kB (ME) 196*8kB (UME) 152*16kB (ME) 116*32kB (ME) 42*64kB (UME) 12*128kB (M) 3*256kB (UM) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 2*4096kB (U) = 26936kB [ 828.870300] Swap cache stats: add 0, delete 0, find 0/0 [ 828.873893] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 828.873906] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 828.886495] Free swap = 0kB [ 828.899140] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 828.906177] Total swap = 0kB [ 828.906186] 2097051 pages RAM [ 828.906191] 0 pages HighMem/MovableOnly [ 828.906196] 369649 pages reserved [ 828.906200] 0 pages cma reserved [ 828.906206] Unreclaimable slab info: [ 828.906211] Name Used Total [ 828.906222] pid_2 62KB 152KB [ 828.906298] batadv_tl_cache 4KB 12KB [ 828.922032] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 828.935487] TIPC 10KB 15KB [ 828.944437] 19778 total pagecache pages [ 828.957375] SCTPv6 14KB 24KB [ 828.996937] 0 pages in swap cache [ 829.027471] SCTP 1KB 3KB [ 829.058766] Swap cache stats: add 0, delete 0, find 0/0 [ 829.083015] DCCPv6 17KB 22KB [ 829.110391] Free swap = 0kB [ 829.134759] DCCP 16KB 21KB [ 829.180278] Total swap = 0kB [ 829.191330] RXRPC 11KB 13KB [ 829.209697] 2097051 pages RAM [ 829.220995] rxrpc_call_jar 78KB 94KB [ 829.221012] bridge_fdb_cache 9KB 15KB [ 829.240097] 0 pages HighMem/MovableOnly [ 829.253812] fib6_nodes 157KB 188KB [ 829.253823] ip6_dst_cache 98KB 311KB [ 829.253836] RAWv6 70KB 74KB [ 829.253848] UDPv6 26KB 33KB [ 829.253859] TCPv6 36KB 42KB [ 829.253878] nf_conntrack 10KB 18KB [ 829.253944] t10_alua_lu_gp_cache 0KB 3KB [ 829.297677] 369649 pages reserved [ 829.303942] sd_ext_cdb 0KB 7KB [ 829.303955] scsi_sense_cache 1056KB 1060KB [ 829.348596] 0 pages cma reserved [ 829.350577] virtio_scsi_cmd 16KB 16KB [ 829.751353] sgpool-128 8KB 8KB [ 829.756756] sgpool-64 4KB 12KB [ 829.762124] sgpool-32 2KB 15KB [ 829.767528] sgpool-16 1KB 7KB [ 829.772896] sgpool-8 0KB 7KB [ 829.778303] mqueue_inode_cache 10KB 22KB [ 829.783803] bio_post_read_ctx 14KB 15KB [ 829.789236] bio-2 14KB 15KB [ 829.794646] jfs_mp 7KB 7KB [ 829.800575] cifs_small_rq 15KB 16KB [ 829.806129] cifs_request 67KB 67KB [ 829.811525] cifs_mpx_ids 0KB 7KB [ 829.816949] nfs_commit_data 3KB 14KB [ 829.822316] nfs_write_data 34KB 44KB [ 829.827750] ext4_system_zone 1KB 7KB [ 829.833228] bio-1 1KB 7KB [ 829.838717] pid_namespace 2KB 7KB [ 829.844135] rpc_buffers 17KB 25KB [ 829.849517] rpc_tasks 2KB 7KB [ 829.854934] UNIX 406KB 431KB [ 829.860742] tcp_bind_bucket 1KB 4KB [ 829.866194] ip_fib_trie 23KB 31KB [ 829.871560] ip_fib_alias 112KB 134KB [ 829.876993] ip_dst_cache 9KB 48KB [ 829.882363] RAW 42KB 52KB [ 829.887864] UDP 54KB 74KB [ 829.893240] TCP 16KB 22KB [ 829.898647] hugetlbfs_inode_cache 3KB 15KB [ 829.904955] fscache_cookie_jar 1KB 11KB [ 829.910496] eventpoll_pwq 29KB 47KB [ 829.915903] eventpoll_epi 52KB 66KB [ 829.921265] inotify_inode_mark 15KB 51KB [ 829.926756] request_queue 199KB 199KB [ 829.932123] blkdev_requests 1KB 3KB [ 829.937523] blkdev_ioc 30KB 34KB [ 829.942885] bio-0 1647KB 1695KB [ 829.948323] biovec-max 1707KB 1782KB [ 829.953731] biovec-64 1462KB 1519KB [ 829.959094] biovec-16 112KB 131KB [ 829.964502] bio_integrity_payload 1KB 8KB [ 829.970213] khugepaged_mm_slot 8KB 34KB [ 829.975713] uid_cache 0KB 4KB [ 829.981073] dmaengine-unmap-2 0KB 3KB [ 829.986485] skbuff_fclone_cache 81KB 146KB [ 829.992125] skbuff_head_cache 7088KB 7091KB [ 829.997537] configfs_dir_cache 3KB 11KB [ 830.003557] file_lock_cache 68KB 166KB [ 830.008953] file_lock_ctx 9KB 11KB [ 830.018469] fsnotify_mark_connector 14KB 31KB [ 830.024439] net_namespace 52KB 52KB [ 830.029803] shmem_inode_cache 8100KB 8322KB [ 830.038727] task_delay_info 158KB 407KB [ 830.044169] taskstats 67KB 164KB [ 830.049532] proc_dir_entry 694KB 720KB [ 830.058475] pde_opener 6KB 58KB [ 830.063937] seq_file 302KB 535KB [ 830.069297] sigqueue 57KB 59KB [ 830.078216] kernfs_node_cache 18229KB 18250KB [ 830.087280] mnt_cache 173KB 180KB [ 830.092669] filp 7243KB 7620KB [ 830.101525] names_cache 147942KB 147963KB [ 830.110716] iint_cache 42KB 71KB [ 830.119544] key_jar 4KB 11KB [ 830.128491] uts_namespace 2KB 7KB [ 830.137489] nsproxy 3KB 7KB [ 830.142858] vm_area_struct 3285KB 4969KB [ 830.151474] mm_struct 416KB 838KB [ 830.160285] fs_cache 88KB 348KB [ 830.169197] files_cache 282KB 600KB [ 830.178310] signal_cache 707KB 1574KB [ 830.187436] sighand_cache 564KB 603KB [ 830.192863] task_struct 5138KB 5169KB [ 830.201772] cred_jar 2021KB 2160KB [ 830.210968] anon_vma_chain 1061KB 1803KB [ 830.219838] anon_vma 150KB 269KB [ 830.227881] pid 48KB 264KB [ 830.233346] Acpi-Operand 156KB 202KB [ 830.242710] Acpi-ParseExt 8KB 11KB [ 830.252220] Acpi-Parse 41KB 47KB [ 830.262387] Acpi-State 52KB 63KB [ 830.272038] Acpi-Namespace 21KB 27KB [ 830.281327] numa_policy 0KB 3KB [ 830.290780] debug_objects_cache 1151KB 1568KB [ 830.300284] trace_event_file 297KB 298KB [ 830.309948] ftrace_event_field 398KB 401KB [ 830.319434] pool_workqueue 121KB 128KB [ 830.329192] page->ptl 498KB 1047KB [ 830.338585] kmalloc-2097152 2050KB 2050KB [ 830.348413] kmalloc-524288 2056KB 2056KB [ 830.358159] kmalloc-262144 1290KB 1290KB [ 830.367997] kmalloc-131072 650KB 650KB [ 830.377530] kmalloc-65536 1848KB 1914KB [ 830.382908] kmalloc-32768 1650KB 1650KB [ 830.392567] kmalloc-16384 1039KB 1056KB [ 830.401883] kmalloc-8192 3960KB 4001KB [ 830.411777] kmalloc-4096 17879KB 17901KB [ 830.421143] kmalloc-2048 10497KB 12431KB [ 830.431261] kmalloc-1024 6219KB 7812KB [ 830.441098] kmalloc-512 15363KB 15363KB [ 830.450841] kmalloc-256 4066KB 5227KB [ 830.460210] kmalloc-128 852KB 1488KB [ 830.470243] kmalloc-96 3726KB 4020KB [ 830.479947] kmalloc-64 2307KB 4208KB [ 830.487064] kmalloc-32 1833KB 2445KB [ 830.492441] kmalloc-192 1482KB 2280KB [ 830.502180] kmem_cache 177KB 183KB [ 830.508806] Out of memory (oom_kill_allocating_task): Kill process 13432 (systemd-journal) score 0 or sacrifice child [ 830.526147] Killed process 13432 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:0kB, shmem-rss:1296kB [ 830.540205] oom_reaper: reaped process 13432 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1296kB [ 830.680234] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 830.691828] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 830.707462] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 830.719272] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 830.727349] systemd[1]: Stopped Journal Service. [ 830.768723] systemd[1]: Starting Journal Service... [ 830.880515] systemd-journald[13505]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 831.392409] systemd[1]: Started Journal Service. 13:09:30 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @raw_data="ddabc783af71f0977f5289047dac20dbf4832e856f966419fb34de5a1c5386ba6d2bd7b19e6140efbf9a8d1d54af1a2caee351c0e38a79d14f546508df48850a7785bec3de3fc1d42dcc962c442bbce7361fdbf3e304ce7e4c0ebd4412db58f1b67bc66cf962754999c039f267ea8c5e3e747107b1025b77c7435252a7035490565f80df5ae6a54897cfa9f4394ddf18fe5215a002153261f5346c778ade7ac84598434eabb63768fc30e333ffa2665890078dc49af61d6b5a2bb1e0833d3b4e09711645052f1d6d"}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x200, 0x0, 0x1, "cfa7b5c9ee5b821b5dc1b0abfa7b693ebeb1b42842ee8d9c14cccb43972109b5", 0x50424752}) 13:09:30 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:09:30 executing program 5: openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2d0040, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="000126adc44cff00fd0000000000000032faeb8dbe1067138b89a68380f0053f7358d72115df730847b6d9f6182e860c9159b6135ecad6ef363566efff5b792d25f5c66aed9bcc70485094167b8294a9be6d7032d55d1cc13062038d074693db3d50afa7ae3c3a87484afe39bb1e38953a98e1671fbfa3a4067a60f048eb60daa6335366b85f67e395d97a53c84e0e9136faadf6f25663", @ANYRES32=0x0, @ANYBLOB="0c009900040000002b0000002c005e80180001000400000003000000070000000200000000000000080009002000000008000700bf06000014005e800800060006000000080003000700000044005e8008000900ff0100000800050034000000100001000800000006000000c0ffffff080009000700000010000100e0e200000400000007000000080007007d00000014005e80080009001f00000008000700eb06000004005e8014005e80080005000700000008000700ee020000"], 0xd8}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000801) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) 13:09:30 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000002c0)={0x7f, 0x0, 0x2, "6da40a08fa53f326e92571ff7a40cdf74e30f0d62af5289d0611e5e458448c9f", 0x31364d4e}) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000080)=@multiplanar_mmap={0xc66b, 0x2, 0x4, 0x10, 0x42aa5765, {0x0, 0x2710}, {0x2, 0x2, 0x61, 0x1, 0xff, 0x1f, "ee258121"}, 0x7a2b, 0x1, {&(0x7f0000000100)=[{0xc66, 0xffffffff, {0x2}, 0x1000}, {0x100001, 0xffff, {0x40}}]}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x9, 0x2, 0x4, 0x0, 0xffff, {}, {0x4, 0x0, 0x2, 0x0, 0x4, 0x5f, "409312ca"}, 0x2, 0x2, {&(0x7f0000000180)=[{0xfffffffc, 0x7, {}, 0x7ff}, {0x80000000, 0x3a34, {&(0x7f0000000040)}, 0x401}]}, 0x1f, 0x0, r3}) 13:09:30 executing program 1: socketpair(0xb, 0x3, 0x2, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x80000}]}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3ff, 0x4d}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x78a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000000}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x7fffffff}], @NL80211_ATTR_SSID={0x18, 0x34, @random="44d801c247ea87033059c782bc830baa30100eee"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="00d0817b87bd"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) set_robust_list(&(0x7f00000006c0)={0x0, 0x5, &(0x7f0000000680)={&(0x7f0000000540)}}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000880)={[{0x2b, 'rlimit'}, {0x2b, 'net_cls'}, {0x2b, 'cpuset'}]}, 0x19) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x2b99}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PW_TYPE={0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000041}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), r2) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r6, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, r7, 0x403, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x80000) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000003c80)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003c40)={&(0x7f0000000500)={0x40, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffc}}}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d465adaaca8755088211ac9221ca8963"}]}]}, 0x40}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r9, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r8, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x48, r10, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffff9, 0x1}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x91}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008008) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r6, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, r5, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1da}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x120, r5, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x5f}}}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@broadcast}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x8000000, {0x8, 0x8, 0xffff, 0x80}}}, @NL80211_ATTR_BSS_SELECT={0x34, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x7}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x5, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4720e2e8d94758cb, 0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x5, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x8}]}, @NL80211_ATTR_KEYS={0x94, 0x51, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "08e9ea049c"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "5e17262ba0"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "8d692d4b06"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="3497cf6cab41"}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 13:09:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r1, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xffff8000, 0x6c}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4040041) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r5) (async) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0xfc, r6, 0xb32, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x34}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x7e}}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x185}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xc4}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x9}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x9}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x5}]}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x9f}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x40}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x3ff}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x58}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x3}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xfff}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}]}, @NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x9}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x4}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xa1}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x4}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x7}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xae}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x1000}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r4, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x95b, 0x1d}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x20, 0x5, 0x0, 0x4, 0x0, 0x7, 0xa0]}]}, 0x34}}, 0x40040d0) (async) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r7, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:09:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r1, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xffff8000, 0x6c}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4040041) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0xfc, r6, 0xb32, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x34}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x7e}}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x185}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xc4}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x9}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x9}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x5}]}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x9f}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x40}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x3ff}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x58}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x3}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xfff}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}]}, @NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x9}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x4}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xa1}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x4}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x7}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xae}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x1000}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r4, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x95b, 0x1d}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x20, 0x5, 0x0, 0x4, 0x0, 0x7, 0xa0]}]}, 0x34}}, 0x40040d0) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r7, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r1, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xffff8000, 0x6c}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4040041) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r5) (async) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) (async) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0xfc, r6, 0xb32, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x34}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x7e}}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x185}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xc4}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x9}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x9}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x5}]}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x9f}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x40}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x3ff}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x58}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x3}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xfff}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}]}, @NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x9}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x4}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xa1}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x4}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x7}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xae}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x1000}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r4, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x95b, 0x1d}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x20, 0x5, 0x0, 0x4, 0x0, 0x7, 0xa0]}]}, 0x34}}, 0x40040d0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r7, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) 13:09:30 executing program 3: socketpair(0x27, 0x3, 0xffffffff, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="d8939fa0c1a67635a2b073fb6a7a680a09ce0f", @ANYRES16=r1, @ANYBLOB="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"], 0x9d8}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:09:30 executing program 1: socketpair(0xb, 0x3, 0x2, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x80000}]}}) (rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3ff, 0x4d}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x78a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000000}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x7fffffff}], @NL80211_ATTR_SSID={0x18, 0x34, @random="44d801c247ea87033059c782bc830baa30100eee"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="00d0817b87bd"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) (async, rerun: 32) set_robust_list(&(0x7f00000006c0)={0x0, 0x5, &(0x7f0000000680)={&(0x7f0000000540)}}, 0x18) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000880)={[{0x2b, 'rlimit'}, {0x2b, 'net_cls'}, {0x2b, 'cpuset'}]}, 0x19) (async) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x2b99}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PW_TYPE={0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000041}, 0x80) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), r2) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r6, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, r7, 0x403, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x80000) (async, rerun: 32) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000003c80)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003c40)={&(0x7f0000000500)={0x40, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffc}}}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d465adaaca8755088211ac9221ca8963"}]}]}, 0x40}}, 0x0) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r9, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_SET_MCAST_RATE(r8, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x48, r10, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffff9, 0x1}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x91}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008008) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r6, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, r5, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1da}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) (async) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x120, r5, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x5f}}}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@broadcast}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x8000000, {0x8, 0x8, 0xffff, 0x80}}}, @NL80211_ATTR_BSS_SELECT={0x34, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x7}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x5, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4720e2e8d94758cb, 0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x5, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x8}]}, @NL80211_ATTR_KEYS={0x94, 0x51, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "08e9ea049c"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "5e17262ba0"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "8d692d4b06"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="3497cf6cab41"}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 13:09:30 executing program 1: socketpair(0xb, 0x3, 0x2, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x80000}]}}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3ff, 0x4d}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x78a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000000}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x7fffffff}], @NL80211_ATTR_SSID={0x18, 0x34, @random="44d801c247ea87033059c782bc830baa30100eee"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="00d0817b87bd"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) set_robust_list(&(0x7f00000006c0)={0x0, 0x5, &(0x7f0000000680)={&(0x7f0000000540)}}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000880)={[{0x2b, 'rlimit'}, {0x2b, 'net_cls'}, {0x2b, 'cpuset'}]}, 0x19) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x2b99}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PW_TYPE={0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000041}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r6) (async) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), r2) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r6, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, r7, 0x403, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x80000) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000003c80)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003c40)={&(0x7f0000000500)={0x40, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffc}}}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d465adaaca8755088211ac9221ca8963"}]}]}, 0x40}}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r9, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_SET_MCAST_RATE(r8, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x48, r10, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffff9, 0x1}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x91}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008008) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r6, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, r5, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1da}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) (async) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x120, r5, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x5f}}}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@broadcast}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x8000000, {0x8, 0x8, 0xffff, 0x80}}}, @NL80211_ATTR_BSS_SELECT={0x34, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x7}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x5, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4720e2e8d94758cb, 0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x5, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x8}]}, @NL80211_ATTR_KEYS={0x94, 0x51, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "08e9ea049c"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "5e17262ba0"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "8d692d4b06"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="3497cf6cab41"}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 13:09:30 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)=@multiplanar_mmap={0x2, 0x3, 0x4, 0x800, 0x20, {}, {0x0, 0x2, 0x8, 0x8, 0xb0, 0xcd, "b5887588"}, 0x10001, 0x1, {&(0x7f0000000000)=[{0x3, 0xeb54, {0x3}, 0xec7}, {0x64, 0x2, {0x7}, 0x3c5}]}, 0x8001}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x819}, 0x3404c005) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:09:30 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000000c0)) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) [ 837.213193] Bluetooth: hci4: command 0x0406 tx timeout [ 839.240108] oom_reaper: reaped process 13522 (syz-executor.0), now anon-rss:0kB, file-rss:14336kB, shmem-rss:8kB [ 839.286530] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 839.299677] in:imklog cpuset=/ mems_allowed=0-1 [ 839.304806] CPU: 0 PID: 13377 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 839.312260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 839.322050] Call Trace: [ 839.324653] dump_stack+0x1fc/0x2ef [ 839.328288] dump_header+0x15d/0xc3f [ 839.332015] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 839.337207] ? ___ratelimit+0x319/0x590 [ 839.341189] oom_kill_process.cold+0x10/0x692 [ 839.345699] ? check_preemption_disabled+0x41/0x280 [ 839.350717] ? has_intersects_mems_allowed+0x1d6/0x290 [ 839.355993] out_of_memory+0x1072/0x1390 [ 839.360059] ? oom_killer_disable+0x270/0x270 [ 839.364557] ? mutex_trylock+0x15f/0x1a0 [ 839.368620] __alloc_pages_nodemask+0x23a2/0x2890 [ 839.373474] ? find_get_entry+0x4cd/0x8a0 [ 839.377619] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 839.382461] alloc_pages_current+0x193/0x2a0 [ 839.386971] filemap_fault+0x146e/0x2180 [ 839.391031] ext4_filemap_fault+0x84/0xb0 [ 839.395172] __do_fault+0x10b/0x4b0 [ 839.398790] __handle_mm_fault+0x273b/0x41c0 [ 839.403205] ? vm_insert_page+0x9c0/0x9c0 [ 839.407350] ? lock_downgrade+0x720/0x720 [ 839.411500] ? check_preemption_disabled+0x41/0x280 [ 839.416517] handle_mm_fault+0x436/0xb10 [ 839.420570] __do_page_fault+0x68e/0xd60 [ 839.424629] ? trace_hardirqs_off_caller+0x6e/0x210 [ 839.429630] ? spurious_fault+0x840/0x840 [ 839.433764] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 839.438589] ? page_fault+0x8/0x30 [ 839.442116] page_fault+0x1e/0x30 [ 839.445554] RIP: 0033:0x7f060d3da22d [ 839.449265] Code: Bad RIP value. [ 839.452621] RSP: 002b:00007f060ad76580 EFLAGS: 00010293 [ 839.457965] RAX: 0000000000000077 RBX: 0000000000000000 RCX: 00007f060d3da22d [ 839.465228] RDX: 0000000000001fa0 RSI: 00007f060ad76da0 RDI: 0000000000000004 [ 839.472479] RBP: 000055c393b059d0 R08: 0000000000000000 R09: 0000000004000001 [ 839.479739] R10: 0000000000000001 R11: 0000000000000293 R12: 00007f060ad76da0 [ 839.486993] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f060ad76ddd [ 839.500885] Mem-Info: [ 839.503453] active_anon:18893 inactive_anon:21102 isolated_anon:0 [ 839.503453] active_file:22 inactive_file:17 isolated_file:0 [ 839.503453] unevictable:0 dirty:5 writeback:0 unstable:0 [ 839.503453] slab_reclaimable:15230 slab_unreclaimable:120570 [ 839.503453] mapped:22317 shmem:21794 pagetables:613 bounce:0 [ 839.503453] free:13886 free_pcp:791 free_cma:0 [ 839.508106] syz-executor.0: vmalloc: allocation failure, allocated 1713639424 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 839.541848] Node 0 active_anon:73292kB inactive_anon:19280kB active_file:44kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87888kB dirty:4kB writeback:0kB shmem:21612kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 839.557850] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 839.583752] CPU: 1 PID: 13522 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 839.586623] Node 1 active_anon:2280kB inactive_anon:65128kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1380kB dirty:16kB writeback:0kB shmem:65564kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 839.591631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 839.628366] Call Trace: [ 839.630425] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 839.630962] dump_stack+0x1fc/0x2ef [ 839.660684] warn_alloc.cold+0x7b/0x18f [ 839.664665] ? zone_watermark_ok_safe+0x260/0x260 [ 839.665149] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 839.669504] ? retint_kernel+0x2d/0x2d [ 839.669540] __vmalloc_area_node+0x4fd/0x780 [ 839.679217] Node 0 DMA32 free:17932kB min:35996kB low:44992kB high:53988kB active_anon:73292kB inactive_anon:19280kB active_file:48kB inactive_file:24kB unevictable:0kB writepending:104kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7584kB pagetables:2228kB bounce:0kB free_pcp:1524kB local_pcp:92kB free_cma:0kB [ 839.682814] ? __vmalloc_node_range+0x180/0x180 [ 839.716608] ? _raw_spin_unlock+0x29/0x40 [ 839.720442] lowmem_reserve[]: 0 0 1 1 1 [ 839.720759] ? __get_vm_area_node+0x2e2/0x3a0 [ 839.724784] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 839.729201] __vmalloc_node_range+0xed/0x180 [ 839.760034] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 839.764361] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 839.766215] lowmem_reserve[]: 0 0 0 0 0 [ 839.769728] vmalloc_user+0x70/0xe0 [ 839.777389] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 839.778584] Node 1 Normal free:27180kB min:53876kB low:67344kB high:80812kB active_anon:2288kB inactive_anon:65128kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:224kB pagetables:224kB bounce:0kB free_pcp:1640kB local_pcp:1260kB free_cma:0kB [ 839.781713] vb2_vmalloc_alloc+0xb3/0x2f0 [ 839.814556] __vb2_queue_alloc+0x472/0xe60 [ 839.818575] lowmem_reserve[]: 0 0 0 0 0 [ 839.818820] vb2_core_create_bufs+0x273/0x7e0 [ 839.822760] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 839.827255] ? __vb2_queue_free+0x870/0x870 [ 839.827270] ? __video_do_ioctl+0x632/0xcd0 [ 839.827289] ? __mutex_lock+0x368/0x1190 [ 839.827306] vb2_create_bufs+0x332/0x620 [ 839.827324] ? mark_held_locks+0xf0/0xf0 [ 839.827354] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 839.827375] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 839.851142] Node 0 DMA32: 1878*4kB (ME) 743*8kB (UME) 184*16kB (UME) 36*32kB (UME) 3*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17744kB [ 839.853290] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 839.853313] v4l_create_bufs+0xb2/0x160 [ 839.853331] __video_do_ioctl+0x49a/0xcd0 [ 839.853351] ? v4l_querycap+0x340/0x340 [ 839.853371] ? __might_fault+0x192/0x1d0 [ 839.857418] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 839.861471] ? v4l_querycap+0x340/0x340 [ 839.874708] Node 1 Normal: 271*4kB (ME) 182*8kB (UME) 134*16kB (ME) 105*32kB (ME) 55*64kB (UME) 6*128kB (M) 2*256kB (M) 2*512kB (UE) 1*1024kB (E) 2*2048kB (UE) 2*4096kB (U) = 27180kB [ 839.885692] video_usercopy+0x13f/0xfa0 [ 839.885715] ? v4l_enumstd+0x60/0x60 [ 839.885728] ? do_futex+0x171/0x1880 [ 839.885743] ? mark_held_locks+0xf0/0xf0 [ 839.885759] ? debug_check_no_obj_freed+0x201/0x490 [ 839.885782] ? video_usercopy+0xfa0/0xfa0 [ 839.885793] v4l2_ioctl+0x147/0x1a0 [ 839.885805] ? video_devdata+0xa0/0xa0 [ 839.885819] do_vfs_ioctl+0xcdb/0x12e0 [ 839.885831] ? lock_downgrade+0x720/0x720 [ 839.885849] ? check_preemption_disabled+0x41/0x280 [ 839.896432] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 839.899142] ? ioctl_preallocate+0x200/0x200 [ 839.907502] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 839.918137] ? __fget+0x356/0x510 [ 839.918153] ? do_dup2+0x450/0x450 [ 839.918167] ? __se_sys_futex+0x298/0x3b0 [ 839.918188] ksys_ioctl+0x9b/0xc0 [ 839.918206] __x64_sys_ioctl+0x6f/0xb0 [ 839.929289] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 839.938533] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 839.938548] do_syscall_64+0xf9/0x620 [ 839.938567] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 839.938579] RIP: 0033:0x7f68c24140f9 [ 839.938592] Code: Bad RIP value. [ 839.938598] RSP: 002b:00007f68c0986168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 839.938611] RAX: ffffffffffffffda RBX: 00007f68c2533f80 RCX: 00007f68c24140f9 [ 839.938619] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000004 [ 839.938626] RBP: 00007f68c246fae9 R08: 0000000000000000 R09: 0000000000000000 [ 839.938634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 839.938641] R13: 00007fff6155d44f R14: 00007f68c0986300 R15: 0000000000022000 [ 839.939355] Mem-Info: [ 839.939395] active_anon:18873 inactive_anon:21102 isolated_anon:0 [ 839.939395] active_file:13 inactive_file:13 isolated_file:0 [ 839.939395] unevictable:0 dirty:0 writeback:0 unstable:0 [ 839.939395] slab_reclaimable:15230 slab_unreclaimable:120566 [ 839.939395] mapped:22310 shmem:21794 pagetables:612 bounce:0 [ 839.939395] free:13934 free_pcp:879 free_cma:0 [ 839.939424] Node 0 active_anon:73204kB inactive_anon:19280kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21612kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 839.939450] Node 1 active_anon:2288kB inactive_anon:65128kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1372kB dirty:0kB writeback:0kB shmem:65564kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 839.939455] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 839.939485] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 839.939504] Node 0 DMA32 free:17680kB min:35996kB low:44992kB high:53988kB active_anon:73204kB inactive_anon:19280kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7584kB pagetables:2224kB bounce:0kB free_pcp:1872kB local_pcp:1456kB free_cma:0kB [ 839.939536] lowmem_reserve[]: 0 0 1 1 1 [ 839.939555] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 839.939584] lowmem_reserve[]: 0 0 0 0 0 [ 839.939603] Node 1 Normal free:27180kB min:53876kB low:67344kB high:80812kB active_anon:2288kB inactive_anon:65128kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:224kB pagetables:224kB bounce:0kB free_pcp:1640kB local_pcp:380kB free_cma:0kB [ 839.939635] lowmem_reserve[]: 0 0 0 0 0 [ 839.939653] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 839.939721] Node 0 DMA32: 1878*4kB (ME) 744*8kB (UME) 184*16kB (UME) 36*32kB (UME) 3*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17752kB [ 839.939785] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 839.939839] Node 1 Normal: 271*4kB (ME) 182*8kB (UME) 134*16kB (ME) 105*32kB (ME) 55*64kB (UME) 6*128kB (M) 2*256kB (M) 2*512kB (UE) 1*1024kB (E) 2*2048kB (UE) 2*4096kB (U) = 27180kB [ 839.939923] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 839.939933] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 839.939942] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 839.939954] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 839.945619] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 839.952978] 21820 total pagecache pages [ 839.955629] 21820 total pagecache pages [ 839.960582] 0 pages in swap cache [ 839.968189] 0 pages in swap cache [ 839.968359] Swap cache stats: add 0, delete 0, find 0/0 [ 839.972230] Swap cache stats: add 0, delete 0, find 0/0 [ 839.980400] Free swap = 0kB [ 839.988994] Free swap = 0kB [ 839.998941] Total swap = 0kB [ 840.010793] Total swap = 0kB [ 840.010808] 2097051 pages RAM [ 840.014382] 2097051 pages RAM [ 840.014387] 0 pages HighMem/MovableOnly [ 840.014392] 369649 pages reserved [ 840.014397] 0 pages cma reserved [ 840.014403] Unreclaimable slab info: [ 840.014409] Name Used Total [ 840.014421] pid_2 58KB 152KB [ 840.022935] 0 pages HighMem/MovableOnly [ 840.029508] batadv_tl_cache 4KB 12KB [ 840.038893] 369649 pages reserved [ 840.041809] TIPC 10KB 15KB [ 840.043187] 0 pages cma reserved [ 840.254592] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 840.254642] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 840.254882] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 840.254924] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 840.254975] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 840.255018] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 840.255061] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 840.558957] SCTPv6 14KB 24KB [ 840.564400] DCCPv6 17KB 22KB [ 840.569767] DCCP 16KB 21KB [ 840.575320] RXRPC 11KB 13KB [ 840.580684] rxrpc_call_jar 78KB 94KB [ 840.586101] bridge_fdb_cache 9KB 15KB [ 840.591465] fib6_nodes 157KB 188KB [ 840.596865] ip6_dst_cache 88KB 311KB [ 840.602233] RAWv6 70KB 74KB [ 840.607661] UDPv6 26KB 33KB [ 840.613059] TCPv6 24KB 30KB [ 840.618517] nf_conntrack 10KB 18KB [ 840.624006] t10_alua_lu_gp_cache 0KB 3KB [ 840.629636] sd_ext_cdb 0KB 7KB [ 840.635070] scsi_sense_cache 1056KB 1060KB [ 840.640430] virtio_scsi_cmd 16KB 16KB [ 840.645848] sgpool-128 8KB 8KB [ 840.651209] sgpool-64 4KB 12KB [ 840.657171] sgpool-32 2KB 15KB [ 840.662535] sgpool-16 1KB 7KB [ 840.667966] sgpool-8 0KB 7KB [ 840.673403] mqueue_inode_cache 10KB 22KB [ 840.678855] bio_post_read_ctx 14KB 15KB [ 840.689220] bio-2 14KB 15KB [ 840.694639] jfs_mp 7KB 7KB [ 840.700030] cifs_small_rq 15KB 16KB [ 840.710125] cifs_request 67KB 67KB [ 840.715552] cifs_mpx_ids 0KB 7KB [ 840.720945] nfs_commit_data 3KB 14KB [ 840.731055] nfs_write_data 34KB 44KB [ 840.736643] ext4_system_zone 1KB 7KB [ 840.742048] bio-1 1KB 7KB [ 840.752270] pid_namespace 2KB 7KB [ 840.758188] rpc_buffers 17KB 25KB [ 840.768240] rpc_tasks 2KB 7KB [ 840.773648] UNIX 421KB 435KB [ 840.779014] tcp_bind_bucket 1KB 4KB [ 840.789127] ip_fib_trie 23KB 31KB [ 840.794542] ip_fib_alias 112KB 134KB [ 840.799921] ip_dst_cache 9KB 48KB [ 840.810599] RAW 42KB 52KB [ 840.817749] UDP 48KB 74KB [ 840.827932] TCP 11KB 16KB [ 840.833361] hugetlbfs_inode_cache 3KB 15KB [ 840.839257] fscache_cookie_jar 1KB 11KB [ 840.850203] eventpoll_pwq 26KB 47KB [ 840.855826] eventpoll_epi 48KB 66KB [ 840.863548] inotify_inode_mark 15KB 51KB [ 840.869204] request_queue 199KB 199KB [ 840.874729] blkdev_requests 1KB 3KB [ 840.880191] blkdev_ioc 29KB 34KB [ 840.885645] bio-0 1642KB 1672KB [ 840.891124] biovec-max 1707KB 1790KB [ 840.896732] biovec-64 1516KB 1590KB [ 840.902194] biovec-16 120KB 131KB [ 840.907777] bio_integrity_payload 1KB 8KB [ 840.913711] khugepaged_mm_slot 8KB 34KB [ 840.919262] uid_cache 0KB 4KB [ 840.924803] dmaengine-unmap-2 0KB 3KB [ 840.930265] skbuff_fclone_cache 73KB 142KB [ 840.935952] skbuff_head_cache 7251KB 7252KB [ 840.941466] configfs_dir_cache 3KB 11KB [ 840.947690] file_lock_cache 59KB 166KB [ 840.953206] file_lock_ctx 9KB 11KB [ 840.960685] fsnotify_mark_connector 7KB 31KB [ 840.966739] net_namespace 52KB 52KB [ 840.972765] shmem_inode_cache 8076KB 8306KB [ 840.978744] task_delay_info 150KB 407KB [ 840.984280] taskstats 60KB 156KB [ 840.989728] proc_dir_entry 694KB 720KB [ 840.995840] pde_opener 5KB 58KB [ 841.001861] seq_file 292KB 535KB [ 841.007969] sigqueue 59KB 59KB [ 841.015494] kernfs_node_cache 18230KB 18250KB [ 841.021305] mnt_cache 173KB 180KB [ 841.027371] filp 7293KB 7620KB [ 841.033611] names_cache 147938KB 147985KB [ 841.039901] iint_cache 39KB 71KB [ 841.046190] key_jar 4KB 11KB [ 841.052600] uts_namespace 2KB 7KB [ 841.059456] nsproxy 3KB 7KB [ 841.068923] vm_area_struct 3258KB 4950KB [ 841.092918] mm_struct 391KB 806KB [ 841.098600] fs_cache 69KB 336KB [ 841.112238] files_cache 264KB 581KB [ 841.118931] signal_cache 681KB 1538KB [ 841.133989] sighand_cache 529KB 603KB [ 841.152928] task_struct 5157KB 5169KB [ 841.158322] cred_jar 2006KB 2160KB [ 841.182930] anon_vma_chain 1069KB 1803KB [ 841.188322] anon_vma 118KB 265KB [ 841.193756] pid 46KB 260KB [ 841.199119] Acpi-Operand 156KB 202KB [ 841.222939] Acpi-ParseExt 8KB 11KB [ 841.228323] Acpi-Parse 41KB 47KB [ 841.234549] Acpi-State 52KB 63KB [ 841.239916] Acpi-Namespace 21KB 27KB [ 841.245383] numa_policy 0KB 3KB [ 841.250747] debug_objects_cache 1151KB 1568KB [ 841.257270] trace_event_file 297KB 298KB [ 841.262636] ftrace_event_field 398KB 401KB [ 841.270057] pool_workqueue 121KB 128KB [ 841.275486] page->ptl 491KB 1047KB [ 841.280912] kmalloc-2097152 2050KB 2050KB [ 841.286396] kmalloc-524288 2056KB 2056KB [ 841.291764] kmalloc-262144 1290KB 1290KB [ 841.297189] kmalloc-131072 650KB 650KB [ 841.302554] kmalloc-65536 1848KB 1914KB [ 841.308018] kmalloc-32768 1650KB 1650KB [ 841.313459] kmalloc-16384 1072KB 1072KB [ 841.318822] kmalloc-8192 3960KB 4001KB [ 841.324266] kmalloc-4096 17633KB 17692KB [ 841.329631] kmalloc-2048 10710KB 12418KB [ 841.335065] kmalloc-1024 6207KB 7812KB [ 841.340432] kmalloc-512 15588KB 15588KB [ 841.345915] kmalloc-256 4041KB 5223KB [ 841.351281] kmalloc-128 858KB 1488KB [ 841.356717] kmalloc-96 3745KB 4020KB [ 841.362081] kmalloc-64 2304KB 4208KB [ 841.367547] kmalloc-32 1839KB 2445KB [ 841.374836] kmalloc-192 1481KB 2280KB [ 841.380210] kmem_cache 177KB 183KB [ 841.385673] Out of memory (oom_kill_allocating_task): Kill process 13377 (in:imklog) score 0 or sacrifice child [ 841.396046] Killed process 13375 (rsyslogd) total-vm:254332kB, anon-rss:720kB, file-rss:0kB, shmem-rss:0kB [ 841.407899] oom_reaper: reaped process 13375 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 13:09:38 executing program 3: socketpair(0x27, 0x3, 0xffffffff, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="d8939fa0c1a67635a2b073fb6a7a680a09ce0f", @ANYRES16=r1, @ANYBLOB="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"], 0x9d8}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) socketpair(0x27, 0x3, 0xffffffff, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="d8939fa0c1a67635a2b073fb6a7a680a09ce0f", @ANYRES16=r1, @ANYBLOB="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"], 0x9d8}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) (async) 13:09:41 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:09:41 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @raw_data="ddabc783af71f0977f5289047dac20dbf4832e856f966419fb34de5a1c5386ba6d2bd7b19e6140efbf9a8d1d54af1a2caee351c0e38a79d14f546508df48850a7785bec3de3fc1d42dcc962c442bbce7361fdbf3e304ce7e4c0ebd4412db58f1b67bc66cf962754999c039f267ea8c5e3e747107b1025b77c7435252a7035490565f80df5ae6a54897cfa9f4394ddf18fe5215a002153261f5346c778ade7ac84598434eabb63768fc30e333ffa2665890078dc49af61d6b5a2bb1e0833d3b4e09711645052f1d6d"}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x200, 0x0, 0x1, "cfa7b5c9ee5b821b5dc1b0abfa7b693ebeb1b42842ee8d9c14cccb43972109b5", 0x50424752}) 13:09:41 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)=@multiplanar_mmap={0x2, 0x3, 0x4, 0x800, 0x20, {}, {0x0, 0x2, 0x8, 0x8, 0xb0, 0xcd, "b5887588"}, 0x10001, 0x1, {&(0x7f0000000000)=[{0x3, 0xeb54, {0x3}, 0xec7}, {0x64, 0x2, {0x7}, 0x3c5}]}, 0x8001}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x819}, 0x3404c005) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:09:41 executing program 5: openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2d0040, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="000126adc44cff00fd0000000000000032faeb8dbe1067138b89a68380f0053f7358d72115df730847b6d9f6182e860c9159b6135ecad6ef363566efff5b792d25f5c66aed9bcc70485094167b8294a9be6d7032d55d1cc13062038d074693db3d50afa7ae3c3a87484afe39bb1e38953a98e1671fbfa3a4067a60f048eb60daa6335366b85f67e395d97a53c84e0e9136faadf6f25663", @ANYRES32=0x0, @ANYBLOB="0c009900040000002b0000002c005e80180001000400000003000000070000000200000000000000080009002000000008000700bf06000014005e800800060006000000080003000700000044005e8008000900ff0100000800050034000000100001000800000006000000c0ffffff080009000700000010000100e0e200000400000007000000080007007d00000014005e80080009001f00000008000700eb06000004005e8014005e80080005000700000008000700ee020000"], 0xd8}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000801) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) 13:09:41 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000000c0)) (async, rerun: 32) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (rerun: 32) 13:09:41 executing program 3: socketpair(0x27, 0x3, 0xffffffff, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="d8939fa0c1a67635a2b073fb6a7a680a09ce0f", @ANYRES16=r1, @ANYBLOB="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"], 0x9d8}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:09:41 executing program 5: openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2d0040, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="000126adc44cff00fd0000000000000032faeb8dbe1067138b89a68380f0053f7358d72115df730847b6d9f6182e860c9159b6135ecad6ef363566efff5b792d25f5c66aed9bcc70485094167b8294a9be6d7032d55d1cc13062038d074693db3d50afa7ae3c3a87484afe39bb1e38953a98e1671fbfa3a4067a60f048eb60daa6335366b85f67e395d97a53c84e0e9136faadf6f25663", @ANYRES32=0x0, @ANYBLOB="0c009900040000002b0000002c005e80180001000400000003000000070000000200000000000000080009002000000008000700bf06000014005e800800060006000000080003000700000044005e8008000900ff0100000800050034000000100001000800000006000000c0ffffff080009000700000010000100e0e200000400000007000000080007007d00000014005e80080009001f00000008000700eb06000004005e8014005e80080005000700000008000700ee020000"], 0xd8}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000801) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:09:41 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5421, 0x0) 13:09:41 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000000c0)) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:09:41 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)=@multiplanar_mmap={0x2, 0x3, 0x4, 0x800, 0x20, {}, {0x0, 0x2, 0x8, 0x8, 0xb0, 0xcd, "b5887588"}, 0x10001, 0x1, {&(0x7f0000000000)=[{0x3, 0xeb54, {0x3}, 0xec7}, {0x64, 0x2, {0x7}, 0x3c5}]}, 0x8001}) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) (async, rerun: 64) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x819}, 0x3404c005) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:09:41 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x7d}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) 13:09:41 executing program 5: openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2d0040, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="000126adc44cff00fd0000000000000032faeb8dbe1067138b89a68380f0053f7358d72115df730847b6d9f6182e860c9159b6135ecad6ef363566efff5b792d25f5c66aed9bcc70485094167b8294a9be6d7032d55d1cc13062038d074693db3d50afa7ae3c3a87484afe39bb1e38953a98e1671fbfa3a4067a60f048eb60daa6335366b85f67e395d97a53c84e0e9136faadf6f25663", @ANYRES32=0x0, @ANYBLOB="0c009900040000002b0000002c005e80180001000400000003000000070000000200000000000000080009002000000008000700bf06000014005e800800060006000000080003000700000044005e8008000900ff0100000800050034000000100001000800000006000000c0ffffff080009000700000010000100e0e200000400000007000000080007007d00000014005e80080009001f00000008000700eb06000004005e8014005e80080005000700000008000700ee020000"], 0xd8}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000801) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) [ 849.630101] oom_reaper: reaped process 13605 (syz-executor.0), now anon-rss:0kB, file-rss:14336kB, shmem-rss:8kB [ 849.666904] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 849.679343] systemd-journal cpuset=/ mems_allowed=0-1 [ 849.684676] CPU: 0 PID: 13505 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 849.692646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 849.702100] Call Trace: [ 849.704696] dump_stack+0x1fc/0x2ef [ 849.708327] dump_header+0x15d/0xc3f [ 849.712052] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 849.717159] ? ___ratelimit+0x319/0x590 [ 849.721145] oom_kill_process.cold+0x10/0x692 [ 849.725650] ? check_preemption_disabled+0x41/0x280 [ 849.730677] ? has_intersects_mems_allowed+0x1d6/0x290 [ 849.735985] out_of_memory+0x1072/0x1390 [ 849.740059] ? oom_killer_disable+0x270/0x270 [ 849.744555] ? mutex_trylock+0x15f/0x1a0 [ 849.748618] __alloc_pages_nodemask+0x23a2/0x2890 [ 849.753479] ? find_get_entry+0x4cd/0x8a0 [ 849.757650] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 849.762518] alloc_pages_current+0x193/0x2a0 [ 849.766934] filemap_fault+0x146e/0x2180 [ 849.771016] ext4_filemap_fault+0x84/0xb0 [ 849.775165] __do_fault+0x10b/0x4b0 [ 849.778805] __handle_mm_fault+0x273b/0x41c0 [ 849.783215] ? vm_insert_page+0x9c0/0x9c0 [ 849.787368] ? check_preemption_disabled+0x41/0x280 [ 849.792385] handle_mm_fault+0x436/0xb10 [ 849.796447] __do_page_fault+0x68e/0xd60 [ 849.800567] ? trace_hardirqs_off_caller+0x6e/0x210 [ 849.805588] ? spurious_fault+0x840/0x840 [ 849.809727] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 849.814559] ? page_fault+0x8/0x30 [ 849.818085] page_fault+0x1e/0x30 [ 849.821521] RIP: 0033:0x7f94209e72e3 [ 849.825221] Code: Bad RIP value. [ 849.828576] RSP: 002b:00007ffd9a24d8d8 EFLAGS: 00010246 [ 849.833920] RAX: 0000000000000001 RBX: 00005623cd1bc1e0 RCX: 00007f94209e72e3 [ 849.841171] RDX: 0000000000000013 RSI: 00007ffd9a24d8e0 RDI: 000000000000000c [ 849.848443] RBP: 00007ffd9a24dad0 R08: 0000000000000000 R09: 000000d88a4c907d [ 849.855705] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd9a24d8e0 [ 849.862969] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005f5c24ed8feed [ 849.872377] Mem-Info: [ 849.881559] syz-executor.0: vmalloc: allocation failure, allocated 1719951360 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 849.886049] active_anon:17816 inactive_anon:21102 isolated_anon:0 [ 849.886049] active_file:14 inactive_file:14 isolated_file:0 [ 849.886049] unevictable:0 dirty:0 writeback:0 unstable:0 [ 849.886049] slab_reclaimable:15200 slab_unreclaimable:120176 [ 849.886049] mapped:22350 shmem:21794 pagetables:579 bounce:0 [ 849.886049] free:13908 free_pcp:898 free_cma:0 [ 849.906767] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 849.932228] Node 0 active_anon:69472kB inactive_anon:19292kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21624kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 849.951784] CPU: 1 PID: 13605 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 849.965252] Node 1 active_anon:1792kB inactive_anon:65116kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1532kB dirty:0kB writeback:0kB shmem:65552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 849.969437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 849.969443] Call Trace: [ 849.969466] dump_stack+0x1fc/0x2ef [ 849.969484] warn_alloc.cold+0x7b/0x18f [ 849.969501] ? zone_watermark_ok_safe+0x260/0x260 [ 849.969516] ? retint_kernel+0x2d/0x2d [ 849.969549] __vmalloc_area_node+0x4fd/0x780 [ 849.969572] ? __vmalloc_node_range+0x180/0x180 [ 849.969587] ? _raw_spin_unlock+0x29/0x40 [ 849.969600] ? __get_vm_area_node+0x2e2/0x3a0 [ 849.969620] __vmalloc_node_range+0xed/0x180 [ 849.969637] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 849.969654] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 849.969667] vmalloc_user+0x70/0xe0 [ 849.969682] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 849.969697] vb2_vmalloc_alloc+0xb3/0x2f0 [ 849.969713] __vb2_queue_alloc+0x472/0xe60 [ 849.969741] vb2_core_create_bufs+0x273/0x7e0 [ 849.969757] ? __vb2_queue_free+0x870/0x870 [ 849.969771] ? __video_do_ioctl+0x632/0xcd0 [ 849.969792] ? __mutex_lock+0x368/0x1190 [ 849.969809] vb2_create_bufs+0x332/0x620 [ 849.969827] ? mark_held_locks+0xf0/0xf0 [ 849.969841] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 849.969863] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 849.969885] v4l_create_bufs+0xb2/0x160 [ 849.969904] __video_do_ioctl+0x49a/0xcd0 [ 849.969926] ? v4l_querycap+0x340/0x340 [ 849.969946] ? __might_fault+0x192/0x1d0 [ 849.969963] ? v4l_querycap+0x340/0x340 [ 849.969979] video_usercopy+0x13f/0xfa0 [ 849.970002] ? v4l_enumstd+0x60/0x60 [ 849.970016] ? __schedule+0x88f/0x2040 [ 849.970036] ? rcu_read_unlock_special+0x7ce/0xfc0 [ 849.970054] ? lock_downgrade+0x720/0x720 [ 849.970075] ? video_usercopy+0xfa0/0xfa0 [ 849.970088] v4l2_ioctl+0x147/0x1a0 [ 849.970100] ? video_devdata+0xa0/0xa0 [ 849.970117] do_vfs_ioctl+0xcdb/0x12e0 [ 849.970133] ? lock_downgrade+0x720/0x720 [ 849.970148] ? ioctl_preallocate+0x200/0x200 [ 849.970167] ? __fget+0x356/0x510 [ 849.970183] ? do_dup2+0x450/0x450 [ 849.970198] ? __se_sys_futex+0x298/0x3b0 [ 849.970221] ksys_ioctl+0x9b/0xc0 [ 849.970238] __x64_sys_ioctl+0x6f/0xb0 [ 849.970258] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 849.970273] do_syscall_64+0xf9/0x620 [ 849.970292] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 849.970303] RIP: 0033:0x7f68c24140f9 [ 849.970318] Code: Bad RIP value. [ 849.970326] RSP: 002b:00007f68c0986168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 849.970339] RAX: ffffffffffffffda RBX: 00007f68c2533f80 RCX: 00007f68c24140f9 [ 849.970348] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000003 [ 849.970356] RBP: 00007f68c246fae9 R08: 0000000000000000 R09: 0000000000000000 [ 849.970363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 849.970372] R13: 00007fff6155d44f R14: 00007f68c0986300 R15: 0000000000022000 [ 849.982660] Mem-Info: [ 850.001664] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 850.019025] active_anon:17816 inactive_anon:21102 isolated_anon:0 [ 850.019025] active_file:14 inactive_file:14 isolated_file:0 [ 850.019025] unevictable:0 dirty:0 writeback:0 unstable:0 [ 850.019025] slab_reclaimable:15200 slab_unreclaimable:120176 [ 850.019025] mapped:22350 shmem:21794 pagetables:579 bounce:0 [ 850.019025] free:13908 free_pcp:895 free_cma:0 [ 850.026249] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 850.030948] Node 0 active_anon:69472kB inactive_anon:19292kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21624kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 850.031123] Node 0 DMA32 free:17676kB min:35996kB low:44992kB high:53988kB active_anon:69472kB inactive_anon:19292kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7616kB pagetables:2116kB bounce:0kB free_pcp:1976kB local_pcp:340kB free_cma:0kB [ 850.044334] Node 1 active_anon:1792kB inactive_anon:65116kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1532kB dirty:0kB writeback:0kB shmem:65552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 850.047918] lowmem_reserve[]: 0 0 1 1 1 [ 850.048869] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 850.053230] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 850.053260] lowmem_reserve[]: 0 0 0 0 0 [ 850.053279] Node 1 Normal free:27064kB min:53876kB low:67344kB high:80812kB active_anon:1792kB inactive_anon:65116kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:128kB pagetables:200kB bounce:0kB free_pcp:1604kB local_pcp:1352kB free_cma:0kB [ 850.053307] lowmem_reserve[]: 0 0 0 0 0 [ 850.068774] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 850.074700] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 850.080071] Node 0 DMA32 free:17676kB min:35996kB low:44992kB high:53988kB active_anon:69472kB inactive_anon:19292kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7616kB pagetables:2116kB bounce:0kB free_pcp:1968kB local_pcp:1636kB free_cma:0kB [ 850.086836] Node 0 DMA32: 1701*4kB (UME) 793*8kB (UME) 198*16kB (UME) 43*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17692kB [ 850.090282] lowmem_reserve[]: 0 0 1 1 1 [ 850.092241] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 850.104374] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 850.109006] Node 1 Normal: 278*4kB (UME) 219*8kB (UM) 175*16kB (UME) 119*32kB (UME) 42*64kB (UME) 7*128kB (M) 3*256kB (UM) 2*512kB (UE) 2*1024kB (UE) 1*2048kB (E) 2*4096kB (U) = 27136kB [ 850.112254] lowmem_reserve[]: 0 0 0 0 0 [ 850.114737] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 850.114748] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 850.114758] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 850.114767] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 850.114772] 21822 total pagecache pages [ 850.114783] 0 pages in swap cache [ 850.114789] Swap cache stats: add 0, delete 0, find 0/0 [ 850.114793] Free swap = 0kB [ 850.114798] Total swap = 0kB [ 850.114806] 2097051 pages RAM [ 850.114811] 0 pages HighMem/MovableOnly [ 850.114815] 369649 pages reserved [ 850.114820] 0 pages cma reserved [ 850.114826] Unreclaimable slab info: [ 850.114831] Name Used Total [ 850.114842] pid_2 60KB 152KB [ 850.114921] batadv_tl_cache 4KB 12KB [ 850.128720] Node 1 Normal free:27064kB min:53876kB low:67344kB high:80812kB active_anon:1792kB inactive_anon:65116kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:128kB pagetables:200kB bounce:0kB free_pcp:1596kB local_pcp:252kB free_cma:0kB [ 850.132534] TIPC 10KB 15KB [ 850.140041] lowmem_reserve[]: 0 0 0 0 0 [ 850.144699] SCTPv6 14KB 24KB [ 850.154089] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 850.155955] DCCPv6 17KB 22KB [ 850.159493] Node 0 DMA32: 1701*4kB (UME) 793*8kB (UME) 198*16kB (UME) 43*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17692kB [ 850.166816] DCCP 16KB 21KB [ 850.178354] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 850.181272] RXRPC 11KB 13KB [ 850.189260] Node 1 Normal: 278*4kB (UME) 219*8kB (UM) 175*16kB (UME) 119*32kB (UME) 42*64kB (UME) 7*128kB (M) 3*256kB (UM) 2*512kB (UE) 2*1024kB (UE) 1*2048kB (E) 2*4096kB (U) = 27136kB [ 850.194814] rxrpc_call_jar 78KB 94KB [ 850.198625] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 850.200817] bridge_fdb_cache 9KB 15KB [ 850.211634] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 850.217383] fib6_nodes 157KB 188KB [ 850.236955] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 850.243030] ip6_dst_cache 92KB 311KB [ 850.258515] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 850.261423] RAWv6 70KB 74KB [ 850.266217] 21822 total pagecache pages [ 850.295273] UDPv6 26KB 33KB [ 850.335801] 0 pages in swap cache [ 850.359649] TCPv6 27KB 36KB [ 850.398892] Swap cache stats: add 0, delete 0, find 0/0 [ 850.417721] nf_conntrack 12KB 18KB [ 850.429223] Free swap = 0kB [ 850.447657] t10_alua_lu_gp_cache 0KB 3KB [ 850.479120] Total swap = 0kB [ 850.509541] sd_ext_cdb 0KB 7KB [ 850.524893] 2097051 pages RAM [ 850.557218] scsi_sense_cache 1056KB 1060KB [ 850.579639] 0 pages HighMem/MovableOnly [ 850.588037] virtio_scsi_cmd 16KB 16KB [ 850.622002] 369649 pages reserved [ 850.629054] sgpool-128 8KB 8KB [ 850.641509] 0 pages cma reserved [ 850.651075] sgpool-64 4KB 12KB [ 850.979438] sgpool-32 2KB 15KB [ 850.984877] sgpool-16 1KB 7KB [ 850.990246] sgpool-8 0KB 7KB [ 850.996205] mqueue_inode_cache 10KB 22KB [ 851.001670] bio_post_read_ctx 14KB 15KB [ 851.007151] bio-2 14KB 15KB [ 851.012578] jfs_mp 7KB 7KB [ 851.017971] cifs_small_rq 15KB 16KB [ 851.023402] cifs_request 67KB 67KB [ 851.028765] cifs_mpx_ids 0KB 7KB [ 851.034225] nfs_commit_data 3KB 14KB [ 851.039592] nfs_write_data 34KB 44KB [ 851.045029] ext4_system_zone 1KB 7KB [ 851.050413] bio-1 1KB 7KB [ 851.055836] pid_namespace 2KB 7KB [ 851.061212] rpc_buffers 17KB 25KB [ 851.066621] rpc_tasks 2KB 7KB [ 851.071984] UNIX 435KB 442KB [ 851.077418] tcp_bind_bucket 1KB 4KB [ 851.082845] ip_fib_trie 23KB 31KB [ 851.088208] ip_fib_alias 112KB 134KB [ 851.093700] ip_dst_cache 9KB 48KB [ 851.099577] RAW 42KB 52KB [ 851.105004] UDP 55KB 74KB [ 851.110373] TCP 11KB 22KB [ 851.115795] hugetlbfs_inode_cache 3KB 15KB [ 851.121504] fscache_cookie_jar 1KB 11KB [ 851.126997] eventpoll_pwq 29KB 47KB [ 851.132360] eventpoll_epi 54KB 66KB [ 851.137803] inotify_inode_mark 18KB 51KB [ 851.143303] request_queue 199KB 199KB [ 851.148692] blkdev_requests 1KB 3KB [ 851.154130] blkdev_ioc 28KB 34KB [ 851.159495] bio-0 1663KB 1698KB [ 851.164960] biovec-max 1707KB 1757KB [ 851.170332] biovec-64 1533KB 1598KB [ 851.175766] biovec-16 117KB 135KB [ 851.181131] bio_integrity_payload 1KB 8KB [ 851.187007] khugepaged_mm_slot 8KB 34KB [ 851.192528] uid_cache 0KB 4KB [ 851.197892] dmaengine-unmap-2 0KB 3KB [ 851.203842] skbuff_fclone_cache 76KB 142KB [ 851.209382] skbuff_head_cache 7278KB 7278KB [ 851.214815] configfs_dir_cache 3KB 11KB [ 851.220264] file_lock_cache 63KB 166KB [ 851.225679] file_lock_ctx 9KB 11KB [ 851.231165] fsnotify_mark_connector 8KB 31KB [ 851.237148] net_namespace 52KB 52KB [ 851.242583] shmem_inode_cache 8091KB 8306KB [ 851.247944] task_delay_info 147KB 407KB [ 851.253381] taskstats 62KB 156KB [ 851.258744] proc_dir_entry 694KB 720KB [ 851.264156] pde_opener 6KB 54KB [ 851.269522] seq_file 303KB 535KB [ 851.274946] sigqueue 57KB 59KB [ 851.280306] kernfs_node_cache 18234KB 18250KB [ 851.285731] mnt_cache 173KB 180KB [ 851.291094] filp 7397KB 7620KB [ 851.296549] names_cache 146514KB 146574KB [ 851.306066] iint_cache 39KB 71KB [ 851.311442] key_jar 4KB 11KB [ 851.316901] uts_namespace 2KB 7KB [ 851.322261] nsproxy 3KB 7KB [ 851.331125] vm_area_struct 3314KB 4950KB [ 851.336554] mm_struct 403KB 806KB [ 851.341915] fs_cache 78KB 336KB [ 851.350672] files_cache 276KB 573KB [ 851.356232] signal_cache 694KB 1538KB [ 851.361604] sighand_cache 550KB 603KB [ 851.370410] task_struct 5151KB 5188KB [ 851.376014] cred_jar 2003KB 2160KB [ 851.381378] anon_vma_chain 1077KB 1803KB [ 851.390468] anon_vma 156KB 265KB [ 851.395919] pid 50KB 260KB [ 851.401282] Acpi-Operand 156KB 202KB [ 851.410480] Acpi-ParseExt 8KB 11KB [ 851.415921] Acpi-Parse 41KB 47KB [ 851.421291] Acpi-State 52KB 63KB [ 851.430081] Acpi-Namespace 21KB 27KB [ 851.435702] numa_policy 0KB 3KB [ 851.441066] debug_objects_cache 1151KB 1568KB [ 851.450319] trace_event_file 297KB 298KB [ 851.455762] ftrace_event_field 398KB 401KB [ 851.461213] pool_workqueue 121KB 128KB [ 851.470037] page->ptl 493KB 1047KB [ 851.475550] kmalloc-2097152 2050KB 2050KB [ 851.480915] kmalloc-524288 2056KB 2056KB [ 851.489664] kmalloc-262144 1290KB 1290KB [ 851.495218] kmalloc-131072 650KB 650KB [ 851.500585] kmalloc-65536 1848KB 1914KB [ 851.512972] kmalloc-32768 1650KB 1650KB [ 851.518364] kmalloc-16384 1072KB 1072KB [ 851.527273] kmalloc-8192 3960KB 4001KB [ 851.532937] kmalloc-4096 18411KB 18415KB [ 851.539622] kmalloc-2048 11011KB 12418KB [ 851.546379] kmalloc-1024 6242KB 7812KB [ 851.552234] kmalloc-512 15498KB 15498KB [ 851.558044] kmalloc-256 4043KB 5223KB [ 851.563571] kmalloc-128 889KB 1488KB [ 851.569541] kmalloc-96 3723KB 4020KB [ 851.574995] kmalloc-64 2292KB 4208KB [ 851.581296] kmalloc-32 1850KB 2445KB [ 851.586811] kmalloc-192 1480KB 2280KB [ 851.592985] kmem_cache 177KB 183KB [ 851.599072] Out of memory (oom_kill_allocating_task): Kill process 13505 (systemd-journal) score 0 or sacrifice child [ 851.612827] Killed process 13505 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:1532kB [ 851.625726] oom_reaper: reaped process 13505 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1532kB [ 851.785548] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 851.798977] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 851.821742] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 851.830305] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 851.838584] systemd[1]: Stopped Journal Service. [ 851.855330] systemd[1]: Starting Journal Service... [ 852.006774] systemd-journald[13630]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 852.293778] systemd[1]: Started Journal Service. 13:09:51 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x6, [{}, {}, {}, {}, {0x3}], 0x0, 0x0, 0x1, 0x0, 0x5}}) 13:09:51 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5421, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5421, 0x0) (async) 13:09:51 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x7d}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) 13:09:51 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x0, @pix={0x40, 0x0, 0x30314742, 0x0, 0x73, 0x2, 0x2, 0x7f, 0x1, 0x1, 0x1, 0x1}}) 13:09:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:09:51 executing program 5: openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2d0040, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="000126adc44cff00fd0000000000000032faeb8dbe1067138b89a68380f0053f7358d72115df730847b6d9f6182e860c9159b6135ecad6ef363566efff5b792d25f5c66aed9bcc70485094167b8294a9be6d7032d55d1cc13062038d074693db3d50afa7ae3c3a87484afe39bb1e38953a98e1671fbfa3a4067a60f048eb60daa6335366b85f67e395d97a53c84e0e9136faadf6f25663", @ANYRES32=0x0, @ANYBLOB="0c009900040000002b0000002c005e80180001000400000003000000070000000200000000000000080009002000000008000700bf06000014005e800800060006000000080003000700000044005e8008000900ff0100000800050034000000100001000800000006000000c0ffffff080009000700000010000100e0e200000400000007000000080007007d00000014005e80080009001f00000008000700eb06000004005e8014005e80080005000700000008000700ee020000"], 0xd8}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000801) 13:09:51 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x0, @pix={0x40, 0x0, 0x30314742, 0x0, 0x73, 0x2, 0x2, 0x7f, 0x1, 0x1, 0x1, 0x1}}) 13:09:51 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x6, [{}, {}, {}, {}, {0x3}], 0x0, 0x0, 0x1, 0x0, 0x5}}) 13:09:51 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x7d}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) 13:09:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:09:51 executing program 5: openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2d0040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 13:09:51 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000040)={0x4, 0x2, 0x2, {0x1, @vbi={0x4f6, 0x6, 0x0, 0x31363553, [0x7, 0x80000000], [0x5, 0xa9], 0x108}}, 0x3}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:09:51 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5421, 0x0) 13:09:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:09:51 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x0, @pix={0x40, 0x0, 0x30314742, 0x0, 0x73, 0x2, 0x2, 0x7f, 0x1, 0x1, 0x1, 0x1}}) 13:09:51 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x6, [{}, {}, {}, {}, {0x3}], 0x0, 0x0, 0x1, 0x0, 0x5}}) 13:09:51 executing program 5: openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2d0040, 0x0) 13:09:51 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000040)={0x4, 0x2, 0x2, {0x1, @vbi={0x4f6, 0x6, 0x0, 0x31363553, [0x7, 0x80000000], [0x5, 0xa9], 0x108}}, 0x3}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:09:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) 13:09:51 executing program 5: openat$userio(0xffffffffffffff9c, 0x0, 0x2d0040, 0x0) 13:09:51 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:09:51 executing program 4: socketpair(0x1e, 0x2, 0x80000001, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xe) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:09:51 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000040)={0x4, 0x2, 0x2, {0x1, @vbi={0x4f6, 0x6, 0x0, 0x31363553, [0x7, 0x80000000], [0x5, 0xa9], 0x108}}, 0x3}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:09:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) (async) 13:09:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x4000) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000000)=0x3) ioctl$vim2m_VIDIOC_G_FMT(r3, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:09:52 executing program 4: socketpair(0x1e, 0x2, 0x80000001, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xe) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:09:52 executing program 5: openat$userio(0xffffffffffffff9c, 0x0, 0x2d0040, 0x0) 13:09:52 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:09:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) (async) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x4000) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000000)=0x3) (async) ioctl$vim2m_VIDIOC_G_FMT(r3, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:09:52 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x34363248, 0x0, 0x0, [{}, {0x0, 0x35}, {}, {}, {0x1000000}, {0x0, 0x1}]}}) 13:09:52 executing program 5: openat$userio(0xffffffffffffff9c, 0x0, 0x2d0040, 0x0) 13:09:52 executing program 4: socketpair(0x1e, 0x2, 0x80000001, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xe) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) socketpair(0x1e, 0x2, 0x80000001, &(0x7f0000000000)) (async) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xe) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) 13:09:52 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:09:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async, rerun: 64) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) (rerun: 64) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) 13:09:52 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x34363248, 0x0, 0x0, [{}, {0x0, 0x35}, {}, {}, {0x1000000}, {0x0, 0x1}]}}) 13:09:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x4000) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000000)=0x3) (async) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000000)=0x3) ioctl$vim2m_VIDIOC_G_FMT(r3, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:09:52 executing program 5: openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 13:09:52 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 13:09:52 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000340)={0x2, @vbi={0x8000, 0xffffb7bb, 0x9, 0x31435641, [0x9, 0x800], [0x100, 0x80000000], 0x1}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000440)={0x8, 0x3, 0x4, 0x0, 0x81}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000300)={0x10001, 0x31364d59, 0x3, @discrete={0x8, 0x101}}) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f00000004c0)) syz_open_dev$vim2m(&(0x7f00000000c0), 0x3f, 0x2) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)=@mmap={0x2cb, 0x3, 0x4, 0x800, 0x604a0066, {r3, r4/1000+10000}, {0x3, 0xc, 0x84, 0x8, 0x1, 0xfa, "d79ba33a"}, 0x0, 0x1, {}, 0x7fffffff}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000000)=@fd={0x3, 0x7, 0x4, 0x10800, 0x4, {0x0, 0x2710}, {0x1, 0xc, 0xeb, 0x1, 0xde, 0x7}, 0x5, 0x4, {}, 0x8002}) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x71, 0x2, {{0x2, 0x3, 0x3}, 0x7a4}}, 0x18) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x0, @multicast1}], 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000840)={0x9, 0x2, 0x3, "681f0388931e6767e9ac8cb9a4718850635d33c35aa7666762c9eb23a8db603f", 0x32314d56}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xc0000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x70, r6, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @ctrl_frame=@ba={{}, {0x3}, @device_a, @device_a, @multi={{0x0, 0x1, 0x1, 0x0, 0x3}, [{0x0, 0x4, {0x0, 0x80}, "90181ad765d2588c"}, {0x0, 0x5, {0x6, 0x3f}, "1b55ce54f09a4212"}, {0x0, 0x3, {0x7, 0x8a}, "2dc9fd26f6dc6f82"}], {0x0, 0x9, {0xb}, "a76a876a964435da"}}}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000780), 0x3, 0x2) r9 = syz_open_dev$vim2m(&(0x7f0000000880), 0x6, 0x2) ioctl$vim2m_VIDIOC_QBUF(r9, 0xc058560f, &(0x7f00000008c0)=@fd={0x8b5, 0x2, 0x4, 0x2000, 0x0, {0x0, 0xea60}, {0x1, 0x0, 0x4, 0xfb, 0x1, 0x3f, "452d3ec3"}, 0x0, 0x4, {}, 0x8}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000a80)=@multiplanar_mmap={0x9, 0x2, 0x4, 0x4, 0x5, {0x0, 0xea60}, {0x3, 0x2, 0x2, 0x9, 0x7f, 0x5, "2d264a91"}, 0x6, 0x1, {&(0x7f0000000980)=[{0x2, 0x7160, {0x5a}, 0x2}, {0x8, 0x2, {0x7ff}, 0x7f}]}, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, &(0x7f00000007c0)=@overlay={0xf3, 0x0, 0x4, 0x2, 0x1f, {0x77359400}, {0x2, 0x2, 0x7, 0x20, 0x9, 0x6, "c53f57c5"}, 0x7fff, 0x3, {}, 0x5}) socketpair(0x22, 0x80000, 0x8, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000480)={0xfb, 0x7f, 0x3f, 0x3, 0xd5, 0x7f, 0xfa, 0x6, 0x4, 0x8, 0x9, 0x5, 0x4, 0x8}, 0xe) getsockopt$inet_sctp_SCTP_NODELAY(r10, 0x84, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) 13:09:52 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x34363248, 0x0, 0x0, [{}, {0x0, 0x35}, {}, {}, {0x1000000}, {0x0, 0x1}]}}) 13:09:52 executing program 5: openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 13:09:52 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xfffffffc}]}}) 13:09:52 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 13:09:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0xffff, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x400, 0x2) syz_open_dev$vim2m(&(0x7f0000000100), 0x800, 0x2) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x1ff, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0x5421, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000180)={0x0, 0x4f565559, 0x2, @stepwise={0x8acb, 0x7f, 0x7fffffff, 0x40, 0xac9, 0x7eb2}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)) 13:09:52 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x52}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfcc, 0x31}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x2400c802) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@mmap={0x8000, 0x5, 0x4, 0x4000, 0x3, {}, {0x3, 0x2, 0x15, 0xff, 0x6, 0x40, "6153ee48"}, 0x7f, 0x1, {}, 0xe82}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)=@multiplanar_overlay={0x1, 0x0, 0x4, 0x1000, 0x200, {0x77359400}, {0x4, 0x0, 0x2, 0x6, 0x80, 0x6, "4505475e"}, 0x80000001, 0x3, {&(0x7f0000000140)=[{0xa9, 0xfffffffa, {0x9}, 0x8}, {0x2, 0x0, {0x81}}]}, 0x2}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @win={{0x0, 0x3, 0x9, 0x7fffffff}, 0x9, 0x8001, &(0x7f0000000080)={{0x8000, 0x8, 0x2301}, &(0x7f0000000040)={{0x260e, 0x1, 0x1d7418ec, 0xfffffffe}, &(0x7f0000000000)={{0x10001, 0x0, 0x2, 0xfb88}}}}, 0xffffffff, &(0x7f00000000c0)="dda12cda273b890171ba9a0622adf017f9edc6893ea182b26824528328952e19381c8d926b7dd23df67ccd32e50dc2506f2f250da3b660d89afbd6f0194d9afe6bb76d967bbfac872b3e40a987daf511c9ec97e0c3a18267fa63543498dba3c72b0e8168037e7f9149954dae2c47a4e5c2421e1675d0aea4cb"}}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r4, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048001}, 0x8a) 13:09:52 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000340)={0x2, @vbi={0x8000, 0xffffb7bb, 0x9, 0x31435641, [0x9, 0x800], [0x100, 0x80000000], 0x1}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000440)={0x8, 0x3, 0x4, 0x0, 0x81}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000300)={0x10001, 0x31364d59, 0x3, @discrete={0x8, 0x101}}) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f00000004c0)) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x3f, 0x2) (async) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)=@mmap={0x2cb, 0x3, 0x4, 0x800, 0x604a0066, {r3, r4/1000+10000}, {0x3, 0xc, 0x84, 0x8, 0x1, 0xfa, "d79ba33a"}, 0x0, 0x1, {}, 0x7fffffff}) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000000)=@fd={0x3, 0x7, 0x4, 0x10800, 0x4, {0x0, 0x2710}, {0x1, 0xc, 0xeb, 0x1, 0xde, 0x7}, 0x5, 0x4, {}, 0x8002}) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x71, 0x2, {{0x2, 0x3, 0x3}, 0x7a4}}, 0x18) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x0, @multicast1}], 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000840)={0x9, 0x2, 0x3, "681f0388931e6767e9ac8cb9a4718850635d33c35aa7666762c9eb23a8db603f", 0x32314d56}) (async) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xc0000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x70, r6, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @ctrl_frame=@ba={{}, {0x3}, @device_a, @device_a, @multi={{0x0, 0x1, 0x1, 0x0, 0x3}, [{0x0, 0x4, {0x0, 0x80}, "90181ad765d2588c"}, {0x0, 0x5, {0x6, 0x3f}, "1b55ce54f09a4212"}, {0x0, 0x3, {0x7, 0x8a}, "2dc9fd26f6dc6f82"}], {0x0, 0x9, {0xb}, "a76a876a964435da"}}}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r8 = syz_open_dev$vim2m(&(0x7f0000000780), 0x3, 0x2) r9 = syz_open_dev$vim2m(&(0x7f0000000880), 0x6, 0x2) ioctl$vim2m_VIDIOC_QBUF(r9, 0xc058560f, &(0x7f00000008c0)=@fd={0x8b5, 0x2, 0x4, 0x2000, 0x0, {0x0, 0xea60}, {0x1, 0x0, 0x4, 0xfb, 0x1, 0x3f, "452d3ec3"}, 0x0, 0x4, {}, 0x8}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000a80)=@multiplanar_mmap={0x9, 0x2, 0x4, 0x4, 0x5, {0x0, 0xea60}, {0x3, 0x2, 0x2, 0x9, 0x7f, 0x5, "2d264a91"}, 0x6, 0x1, {&(0x7f0000000980)=[{0x2, 0x7160, {0x5a}, 0x2}, {0x8, 0x2, {0x7ff}, 0x7f}]}, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, &(0x7f00000007c0)=@overlay={0xf3, 0x0, 0x4, 0x2, 0x1f, {0x77359400}, {0x2, 0x2, 0x7, 0x20, 0x9, 0x6, "c53f57c5"}, 0x7fff, 0x3, {}, 0x5}) (async) socketpair(0x22, 0x80000, 0x8, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000480)={0xfb, 0x7f, 0x3f, 0x3, 0xd5, 0x7f, 0xfa, 0x6, 0x4, 0x8, 0x9, 0x5, 0x4, 0x8}, 0xe) (async) getsockopt$inet_sctp_SCTP_NODELAY(r10, 0x84, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) 13:09:52 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 13:09:52 executing program 5: openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 13:09:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) syz_open_dev$vim2m(&(0x7f0000000040), 0xffff, 0x2) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0xffff, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x400, 0x2) syz_open_dev$vim2m(&(0x7f0000000100), 0x800, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x800, 0x2) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x1ff, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0x5421, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000180)={0x0, 0x4f565559, 0x2, @stepwise={0x8acb, 0x7f, 0x7fffffff, 0x40, 0xac9, 0x7eb2}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)) 13:09:52 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xfffffffc}]}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xfffffffc}]}}) (async) 13:09:52 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000340)={0x2, @vbi={0x8000, 0xffffb7bb, 0x9, 0x31435641, [0x9, 0x800], [0x100, 0x80000000], 0x1}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000440)={0x8, 0x3, 0x4, 0x0, 0x81}) (async, rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000300)={0x10001, 0x31364d59, 0x3, @discrete={0x8, 0x101}}) (async, rerun: 64) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f00000004c0)) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x3f, 0x2) (async) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)=@mmap={0x2cb, 0x3, 0x4, 0x800, 0x604a0066, {r3, r4/1000+10000}, {0x3, 0xc, 0x84, 0x8, 0x1, 0xfa, "d79ba33a"}, 0x0, 0x1, {}, 0x7fffffff}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000000)=@fd={0x3, 0x7, 0x4, 0x10800, 0x4, {0x0, 0x2710}, {0x1, 0xc, 0xeb, 0x1, 0xde, 0x7}, 0x5, 0x4, {}, 0x8002}) (async, rerun: 32) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x71, 0x2, {{0x2, 0x3, 0x3}, 0x7a4}}, 0x18) (async, rerun: 32) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x0, @multicast1}], 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000840)={0x9, 0x2, 0x3, "681f0388931e6767e9ac8cb9a4718850635d33c35aa7666762c9eb23a8db603f", 0x32314d56}) (async) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xc0000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x70, r6, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @ctrl_frame=@ba={{}, {0x3}, @device_a, @device_a, @multi={{0x0, 0x1, 0x1, 0x0, 0x3}, [{0x0, 0x4, {0x0, 0x80}, "90181ad765d2588c"}, {0x0, 0x5, {0x6, 0x3f}, "1b55ce54f09a4212"}, {0x0, 0x3, {0x7, 0x8a}, "2dc9fd26f6dc6f82"}], {0x0, 0x9, {0xb}, "a76a876a964435da"}}}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000780), 0x3, 0x2) (async) r9 = syz_open_dev$vim2m(&(0x7f0000000880), 0x6, 0x2) ioctl$vim2m_VIDIOC_QBUF(r9, 0xc058560f, &(0x7f00000008c0)=@fd={0x8b5, 0x2, 0x4, 0x2000, 0x0, {0x0, 0xea60}, {0x1, 0x0, 0x4, 0xfb, 0x1, 0x3f, "452d3ec3"}, 0x0, 0x4, {}, 0x8}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000a80)=@multiplanar_mmap={0x9, 0x2, 0x4, 0x4, 0x5, {0x0, 0xea60}, {0x3, 0x2, 0x2, 0x9, 0x7f, 0x5, "2d264a91"}, 0x6, 0x1, {&(0x7f0000000980)=[{0x2, 0x7160, {0x5a}, 0x2}, {0x8, 0x2, {0x7ff}, 0x7f}]}, 0x2}) (async) ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, &(0x7f00000007c0)=@overlay={0xf3, 0x0, 0x4, 0x2, 0x1f, {0x77359400}, {0x2, 0x2, 0x7, 0x20, 0x9, 0x6, "c53f57c5"}, 0x7fff, 0x3, {}, 0x5}) (async) socketpair(0x22, 0x80000, 0x8, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000480)={0xfb, 0x7f, 0x3f, 0x3, 0xd5, 0x7f, 0xfa, 0x6, 0x4, 0x8, 0x9, 0x5, 0x4, 0x8}, 0xe) (async) getsockopt$inet_sctp_SCTP_NODELAY(r10, 0x84, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) 13:09:52 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x52}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfcc, 0x31}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x2400c802) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@mmap={0x8000, 0x5, 0x4, 0x4000, 0x3, {}, {0x3, 0x2, 0x15, 0xff, 0x6, 0x40, "6153ee48"}, 0x7f, 0x1, {}, 0xe82}) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)=@multiplanar_overlay={0x1, 0x0, 0x4, 0x1000, 0x200, {0x77359400}, {0x4, 0x0, 0x2, 0x6, 0x80, 0x6, "4505475e"}, 0x80000001, 0x3, {&(0x7f0000000140)=[{0xa9, 0xfffffffa, {0x9}, 0x8}, {0x2, 0x0, {0x81}}]}, 0x2}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @win={{0x0, 0x3, 0x9, 0x7fffffff}, 0x9, 0x8001, &(0x7f0000000080)={{0x8000, 0x8, 0x2301}, &(0x7f0000000040)={{0x260e, 0x1, 0x1d7418ec, 0xfffffffe}, &(0x7f0000000000)={{0x10001, 0x0, 0x2, 0xfb88}}}}, 0xffffffff, &(0x7f00000000c0)="dda12cda273b890171ba9a0622adf017f9edc6893ea182b26824528328952e19381c8d926b7dd23df67ccd32e50dc2506f2f250da3b660d89afbd6f0194d9afe6bb76d967bbfac872b3e40a987daf511c9ec97e0c3a18267fa63543498dba3c72b0e8168037e7f9149954dae2c47a4e5c2421e1675d0aea4cb"}}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r4, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048001}, 0x8a) 13:09:52 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0xffff, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x400, 0x2) syz_open_dev$vim2m(&(0x7f0000000100), 0x800, 0x2) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x1ff, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0x5421, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000180)={0x0, 0x4f565559, 0x2, @stepwise={0x8acb, 0x7f, 0x7fffffff, 0x40, 0xac9, 0x7eb2}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)) 13:09:52 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:09:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0xffff, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x400, 0x2) syz_open_dev$vim2m(&(0x7f0000000100), 0x800, 0x2) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x1ff, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0x5421, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000180)={0x0, 0x4f565559, 0x2, @stepwise={0x8acb, 0x7f, 0x7fffffff, 0x40, 0xac9, 0x7eb2}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0xffff, 0x2) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x400, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x800, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000140), 0x1ff, 0x2) (async) ioctl$vim2m_VIDIOC_G_FMT(r5, 0x5421, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000180)={0x0, 0x4f565559, 0x2, @stepwise={0x8acb, 0x7f, 0x7fffffff, 0x40, 0xac9, 0x7eb2}}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)) (async) 13:09:52 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xfffffffc}]}}) 13:09:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x20, 0x0, {0x77359400}, {0x3, 0x0, 0x0, 0x0, 0xfe, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0x0, 0x7fffffff, 0x4, {0x0, @sliced={0x7, [0xf715, 0x8, 0x42fe, 0xb3, 0x8, 0xfffc, 0x5, 0x6, 0x7, 0x3ff, 0x27e7, 0x6, 0x8000, 0x9, 0xfff, 0x8, 0x3, 0xffff, 0x2629, 0x1f, 0x4, 0x1, 0xbf54, 0x7, 0xff, 0x7, 0x8001, 0x3, 0x6, 0xffff, 0x2, 0x42c, 0x8, 0xfff, 0x7, 0x2ca0, 0x800, 0xffff, 0x5, 0xfffb, 0xfff, 0x2, 0x7, 0x5, 0x3, 0x1, 0x7f, 0x7f], 0x5}}, 0x20}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0xec, r3, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3270, 0x3a}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7e5b}, @NL80211_ATTR_KEYS={0xbc, 0x51, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "4c0725bccedeeaa13dea17e060"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_SEQ={0xf, 0x4, "e63280b988bb47c24c4f8c"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x10, 0x4, "b54dd9908457a7842baef95c"}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}]}, 0xec}, 0x1, 0x0, 0x0, 0x8040}, 0x40001) 13:09:53 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@multiplanar_userptr={0x10000, 0x3, 0x4, 0x8, 0x8000, {0x77359400}, {0x1, 0x8, 0x3, 0x51, 0x20, 0x7, "15590109"}, 0x200, 0x2, {&(0x7f00000000c0)=[{0x5, 0x4, {&(0x7f0000000040)}, 0x2}, {0x6fc, 0x5, {&(0x7f0000000080)}, 0x21}]}, 0xff}) 13:09:53 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x20, 0x0, {0x77359400}, {0x3, 0x0, 0x0, 0x0, 0xfe, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0x0, 0x7fffffff, 0x4, {0x0, @sliced={0x7, [0xf715, 0x8, 0x42fe, 0xb3, 0x8, 0xfffc, 0x5, 0x6, 0x7, 0x3ff, 0x27e7, 0x6, 0x8000, 0x9, 0xfff, 0x8, 0x3, 0xffff, 0x2629, 0x1f, 0x4, 0x1, 0xbf54, 0x7, 0xff, 0x7, 0x8001, 0x3, 0x6, 0xffff, 0x2, 0x42c, 0x8, 0xfff, 0x7, 0x2ca0, 0x800, 0xffff, 0x5, 0xfffb, 0xfff, 0x2, 0x7, 0x5, 0x3, 0x1, 0x7f, 0x7f], 0x5}}, 0x20}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0xec, r3, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3270, 0x3a}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7e5b}, @NL80211_ATTR_KEYS={0xbc, 0x51, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "4c0725bccedeeaa13dea17e060"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_SEQ={0xf, 0x4, "e63280b988bb47c24c4f8c"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x10, 0x4, "b54dd9908457a7842baef95c"}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}]}, 0xec}, 0x1, 0x0, 0x0, 0x8040}, 0x40001) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x20, 0x0, {0x77359400}, {0x3, 0x0, 0x0, 0x0, 0xfe, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0x0, 0x7fffffff, 0x4, {0x0, @sliced={0x7, [0xf715, 0x8, 0x42fe, 0xb3, 0x8, 0xfffc, 0x5, 0x6, 0x7, 0x3ff, 0x27e7, 0x6, 0x8000, 0x9, 0xfff, 0x8, 0x3, 0xffff, 0x2629, 0x1f, 0x4, 0x1, 0xbf54, 0x7, 0xff, 0x7, 0x8001, 0x3, 0x6, 0xffff, 0x2, 0x42c, 0x8, 0xfff, 0x7, 0x2ca0, 0x800, 0xffff, 0x5, 0xfffb, 0xfff, 0x2, 0x7, 0x5, 0x3, 0x1, 0x7f, 0x7f], 0x5}}, 0x20}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r2) (async) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0xec, r3, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3270, 0x3a}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7e5b}, @NL80211_ATTR_KEYS={0xbc, 0x51, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "4c0725bccedeeaa13dea17e060"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_SEQ={0xf, 0x4, "e63280b988bb47c24c4f8c"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x10, 0x4, "b54dd9908457a7842baef95c"}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}]}, 0xec}, 0x1, 0x0, 0x0, 0x8040}, 0x40001) (async) 13:09:53 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x20, 0x0, {0x77359400}, {0x3, 0x0, 0x0, 0x0, 0xfe, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0x0, 0x7fffffff, 0x4, {0x0, @sliced={0x7, [0xf715, 0x8, 0x42fe, 0xb3, 0x8, 0xfffc, 0x5, 0x6, 0x7, 0x3ff, 0x27e7, 0x6, 0x8000, 0x9, 0xfff, 0x8, 0x3, 0xffff, 0x2629, 0x1f, 0x4, 0x1, 0xbf54, 0x7, 0xff, 0x7, 0x8001, 0x3, 0x6, 0xffff, 0x2, 0x42c, 0x8, 0xfff, 0x7, 0x2ca0, 0x800, 0xffff, 0x5, 0xfffb, 0xfff, 0x2, 0x7, 0x5, 0x3, 0x1, 0x7f, 0x7f], 0x5}}, 0x20}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0xec, r3, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3270, 0x3a}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7e5b}, @NL80211_ATTR_KEYS={0xbc, 0x51, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "4c0725bccedeeaa13dea17e060"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_SEQ={0xf, 0x4, "e63280b988bb47c24c4f8c"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x10, 0x4, "b54dd9908457a7842baef95c"}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}]}, 0xec}, 0x1, 0x0, 0x0, 0x8040}, 0x40001) 13:09:54 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@multiplanar_userptr={0x10000, 0x3, 0x4, 0x8, 0x8000, {0x77359400}, {0x1, 0x8, 0x3, 0x51, 0x20, 0x7, "15590109"}, 0x200, 0x2, {&(0x7f00000000c0)=[{0x5, 0x4, {&(0x7f0000000040)}, 0x2}, {0x6fc, 0x5, {&(0x7f0000000080)}, 0x21}]}, 0xff}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@multiplanar_userptr={0x10000, 0x3, 0x4, 0x8, 0x8000, {0x77359400}, {0x1, 0x8, 0x3, 0x51, 0x20, 0x7, "15590109"}, 0x200, 0x2, {&(0x7f00000000c0)=[{0x5, 0x4, {&(0x7f0000000040)}, 0x2}, {0x6fc, 0x5, {&(0x7f0000000080)}, 0x21}]}, 0xff}) (async) 13:09:54 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000001c0)={0xc4, 0x7, 0x2, "dd37d8f1c879f3f2335196dc7bc23e5c94eaa1ac58bdff4bf081f78c149245a4", 0x42303159}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)=@multiplanar_userptr={0x8, 0x2, 0x4, 0x10, 0xf, {r2, r3/1000+10000}, {0x4, 0xc, 0x58, 0x1f, 0x7, 0x2, "92876498"}, 0x2, 0x2, {&(0x7f00000000c0)=[{0x3f, 0x0, {&(0x7f0000000040)}}, {0x6, 0x2, {&(0x7f0000000080)}, 0x5}]}, 0xffffffff}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) [ 860.960508] oom_reaper: reaped process 13794 (syz-executor.0), now anon-rss:0kB, file-rss:14336kB, shmem-rss:8kB [ 861.009660] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 861.026125] in:imklog cpuset=/ mems_allowed=0-1 [ 861.033431] CPU: 1 PID: 13571 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 861.040905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 861.050764] Call Trace: [ 861.052029] syz-executor.0: vmalloc: allocation failure, allocated 1703059456 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 861.053343] dump_stack+0x1fc/0x2ef [ 861.067206] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 861.070738] dump_header+0x15d/0xc3f [ 861.079514] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 861.084606] ? ___ratelimit+0x319/0x590 [ 861.088576] oom_kill_process.cold+0x10/0x692 [ 861.093076] ? check_preemption_disabled+0x41/0x280 [ 861.098083] ? has_intersects_mems_allowed+0x1d6/0x290 [ 861.103957] out_of_memory+0x1072/0x1390 [ 861.108012] ? oom_killer_disable+0x270/0x270 [ 861.112497] ? mutex_trylock+0x15f/0x1a0 [ 861.116545] __alloc_pages_nodemask+0x23a2/0x2890 [ 861.121381] ? find_get_entry+0x4cd/0x8a0 [ 861.125524] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 861.130462] alloc_pages_current+0x193/0x2a0 [ 861.134875] filemap_fault+0x146e/0x2180 [ 861.138959] ext4_filemap_fault+0x84/0xb0 [ 861.143110] __do_fault+0x10b/0x4b0 [ 861.146737] __handle_mm_fault+0x273b/0x41c0 [ 861.151142] ? vm_insert_page+0x9c0/0x9c0 [ 861.155284] ? lock_downgrade+0x720/0x720 [ 861.159439] ? check_preemption_disabled+0x41/0x280 [ 861.164537] handle_mm_fault+0x436/0xb10 [ 861.168610] __do_page_fault+0x68e/0xd60 [ 861.172785] ? trace_hardirqs_off_caller+0x6e/0x210 [ 861.177817] ? spurious_fault+0x840/0x840 [ 861.182049] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 861.186886] ? page_fault+0x8/0x30 [ 861.190462] page_fault+0x1e/0x30 [ 861.193911] RIP: 0033:0x7f1f062bf22d [ 861.197626] Code: Bad RIP value. [ 861.200996] RSP: 002b:00007f1f03c5b580 EFLAGS: 00010293 [ 861.206347] RAX: 0000000000000077 RBX: 0000000000000000 RCX: 00007f1f062bf22d [ 861.213630] RDX: 0000000000001fa0 RSI: 00007f1f03c5bda0 RDI: 0000000000000004 [ 861.220998] RBP: 0000558f266b59d0 R08: 00007f1f05438940 R09: 0000000000000000 [ 861.228423] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007f1f03c5bda0 [ 861.235985] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f1f03c5bdd8 [ 861.243649] CPU: 0 PID: 13794 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 861.251579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 861.259380] Mem-Info: [ 861.260962] Call Trace: [ 861.263629] active_anon:19444 inactive_anon:23146 isolated_anon:0 [ 861.263629] active_file:13 inactive_file:14 isolated_file:0 [ 861.263629] unevictable:0 dirty:0 writeback:0 unstable:0 [ 861.263629] slab_reclaimable:15357 slab_unreclaimable:120180 [ 861.263629] mapped:22310 shmem:23842 pagetables:614 bounce:0 [ 861.263629] free:13860 free_pcp:1195 free_cma:0 [ 861.266411] dump_stack+0x1fc/0x2ef [ 861.300570] Node 0 active_anon:75832kB inactive_anon:19288kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21620kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 20480kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 861.304149] warn_alloc.cold+0x7b/0x18f [ 861.304168] ? zone_watermark_ok_safe+0x260/0x260 [ 861.304198] ? write_comp_data+0xf/0x70 [ 861.331973] Node 1 active_anon:1944kB inactive_anon:73296kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1372kB dirty:0kB writeback:0kB shmem:73748kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 861.336001] __vmalloc_area_node+0x4fd/0x780 [ 861.336022] ? __vmalloc_node_range+0x180/0x180 [ 861.336037] ? _raw_spin_unlock+0x29/0x40 [ 861.336049] ? __get_vm_area_node+0x2e2/0x3a0 [ 861.336069] __vmalloc_node_range+0xed/0x180 [ 861.336086] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 861.336100] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 861.336113] vmalloc_user+0x70/0xe0 [ 861.336128] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 861.336142] vb2_vmalloc_alloc+0xb3/0x2f0 [ 861.336156] __vb2_queue_alloc+0x472/0xe60 [ 861.336182] vb2_core_create_bufs+0x273/0x7e0 [ 861.336196] ? __vb2_queue_free+0x870/0x870 [ 861.336211] ? __video_do_ioctl+0x632/0xcd0 [ 861.336232] ? __mutex_lock+0x368/0x1190 [ 861.336249] vb2_create_bufs+0x332/0x620 [ 861.336272] ? mark_held_locks+0xf0/0xf0 [ 861.336286] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 861.336304] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 861.336320] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 861.336342] v4l_create_bufs+0xb2/0x160 [ 861.336362] __video_do_ioctl+0x49a/0xcd0 [ 861.336383] ? v4l_querycap+0x340/0x340 [ 861.336401] ? __might_fault+0x192/0x1d0 [ 861.336419] ? v4l_querycap+0x340/0x340 [ 861.336435] video_usercopy+0x13f/0xfa0 [ 861.336457] ? v4l_enumstd+0x60/0x60 [ 861.336472] ? do_futex+0x171/0x1880 [ 861.336488] ? mark_held_locks+0xf0/0xf0 [ 861.336506] ? debug_check_no_obj_freed+0x201/0x490 [ 861.336530] ? video_usercopy+0xfa0/0xfa0 [ 861.336542] v4l2_ioctl+0x147/0x1a0 [ 861.336555] ? video_devdata+0xa0/0xa0 [ 861.336571] do_vfs_ioctl+0xcdb/0x12e0 [ 861.336587] ? lock_downgrade+0x720/0x720 [ 861.336602] ? check_preemption_disabled+0x41/0x280 [ 861.336617] ? ioctl_preallocate+0x200/0x200 [ 861.336635] ? __fget+0x356/0x510 [ 861.336651] ? do_dup2+0x450/0x450 [ 861.336666] ? __se_sys_futex+0x298/0x3b0 [ 861.336688] ksys_ioctl+0x9b/0xc0 [ 861.336705] __x64_sys_ioctl+0x6f/0xb0 [ 861.336719] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 861.336732] do_syscall_64+0xf9/0x620 [ 861.336751] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 861.336763] RIP: 0033:0x7f68c24140f9 [ 861.336777] Code: Bad RIP value. [ 861.336785] RSP: 002b:00007f68c0986168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 861.336799] RAX: ffffffffffffffda RBX: 00007f68c2533f80 RCX: 00007f68c24140f9 [ 861.336807] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000003 [ 861.336815] RBP: 00007f68c246fae9 R08: 0000000000000000 R09: 0000000000000000 [ 861.336823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 861.336831] R13: 00007fff6155d44f R14: 00007f68c0986300 R15: 0000000000022000 [ 861.343872] Mem-Info: [ 861.356099] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 861.374345] active_anon:19444 inactive_anon:23146 isolated_anon:0 [ 861.374345] active_file:13 inactive_file:14 isolated_file:0 [ 861.374345] unevictable:0 dirty:0 writeback:0 unstable:0 [ 861.374345] slab_reclaimable:15357 slab_unreclaimable:120180 [ 861.374345] mapped:22310 shmem:23842 pagetables:614 bounce:0 [ 861.374345] free:13860 free_pcp:1195 free_cma:0 [ 861.392681] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 861.396889] Node 0 active_anon:75832kB inactive_anon:19288kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21620kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 20480kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 861.401146] Node 0 DMA32 free:17868kB min:35996kB low:44992kB high:53988kB active_anon:75832kB inactive_anon:19288kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7744kB pagetables:2252kB bounce:0kB free_pcp:1736kB local_pcp:1380kB free_cma:0kB [ 861.406587] Node 1 active_anon:1944kB inactive_anon:73296kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1372kB dirty:0kB writeback:0kB shmem:73748kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 861.406593] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 861.406624] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 861.428816] lowmem_reserve[]: 0 0 1 1 1 [ 861.431995] Node 0 DMA32 free:17868kB min:35996kB low:44992kB high:53988kB active_anon:75832kB inactive_anon:19288kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7744kB pagetables:2252kB bounce:0kB free_pcp:1736kB local_pcp:356kB free_cma:0kB [ 861.446550] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 861.448527] lowmem_reserve[]: 0 0 1 1 1 [ 861.465571] lowmem_reserve[]: 0 0 0 0 0 [ 861.468043] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 861.482502] Node 1 Normal free:26680kB min:53876kB low:67344kB high:80812kB active_anon:1944kB inactive_anon:73296kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:128kB pagetables:204kB bounce:0kB free_pcp:3044kB local_pcp:1508kB free_cma:0kB [ 861.487352] lowmem_reserve[]: 0 0 0 0 0 [ 861.488311] lowmem_reserve[]: 0 0 0 0 0 [ 861.493622] Node 1 Normal free:26680kB min:53876kB low:67344kB high:80812kB active_anon:1944kB inactive_anon:73296kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:128kB pagetables:204kB bounce:0kB free_pcp:3044kB local_pcp:1536kB free_cma:0kB [ 861.505676] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 861.513939] lowmem_reserve[]: 0 0 0 0 0 [ 861.523950] Node 0 DMA32: 1727*4kB (UME) 752*8kB (UME) 207*16kB (UME) 49*32kB (UME) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17868kB [ 861.524890] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 861.531920] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 861.534333] Node 0 DMA32: 1727*4kB (UME) 752*8kB (UME) 207*16kB (UME) 49*32kB (UME) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17868kB [ 861.537652] Node 1 Normal: 302*4kB (ME) 262*8kB (UME) 197*16kB (UME) 112*32kB (UME) 18*64kB (UME) 3*128kB (ME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UE) 2*4096kB (U) = 26680kB [ 861.541178] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 861.541229] Node 1 Normal: 302*4kB (ME) 262*8kB (UME) 197*16kB (UME) 112*32kB (UME) 18*64kB (UME) 3*128kB (ME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UE) 2*4096kB (U) = 26680kB [ 861.541310] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 861.541320] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 861.541331] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 861.541342] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 861.541346] 23869 total pagecache pages [ 861.541358] 0 pages in swap cache [ 861.541366] Swap cache stats: add 0, delete 0, find 0/0 [ 861.541371] Free swap = 0kB [ 861.541376] Total swap = 0kB [ 861.541384] 2097051 pages RAM [ 861.541389] 0 pages HighMem/MovableOnly [ 861.541394] 369649 pages reserved [ 861.541398] 0 pages cma reserved [ 862.149934] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 862.174416] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 862.191508] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 862.215346] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 862.238894] 23869 total pagecache pages [ 862.248685] 0 pages in swap cache [ 862.261715] Swap cache stats: add 0, delete 0, find 0/0 [ 862.281822] Free swap = 0kB [ 862.289431] Total swap = 0kB [ 862.307723] 2097051 pages RAM [ 862.310857] 0 pages HighMem/MovableOnly [ 862.319076] 369649 pages reserved [ 862.337317] 0 pages cma reserved [ 862.340708] Unreclaimable slab info: [ 862.348744] Name Used Total [ 862.366574] pid_2 75KB 152KB [ 862.375576] batadv_tl_cache 4KB 12KB [ 862.380969] TIPC 10KB 15KB [ 862.396682] SCTPv6 14KB 24KB [ 862.405606] SCTP 5KB 7KB [ 862.410987] DCCPv6 17KB 22KB [ 862.426302] DCCP 16KB 21KB [ 862.431728] RXRPC 11KB 13KB [ 862.437179] rxrpc_call_jar 78KB 94KB [ 862.450886] bridge_fdb_cache 9KB 15KB [ 862.457607] fib6_nodes 157KB 188KB [ 862.464405] ip6_dst_cache 95KB 311KB [ 862.470692] RAWv6 70KB 74KB [ 862.477309] UDPv6 26KB 33KB [ 862.483272] TCPv6 30KB 42KB [ 862.489180] nf_conntrack 11KB 18KB [ 862.495511] t10_alua_lu_gp_cache 0KB 3KB [ 862.501808] sd_ext_cdb 0KB 7KB [ 862.507340] scsi_sense_cache 1056KB 1060KB [ 862.512841] virtio_scsi_cmd 16KB 16KB [ 862.518988] sgpool-128 8KB 8KB [ 862.524432] sgpool-64 4KB 12KB [ 862.529848] sgpool-32 2KB 15KB [ 862.536122] sgpool-16 1KB 7KB [ 862.541537] sgpool-8 0KB 7KB [ 862.546989] mqueue_inode_cache 10KB 22KB [ 862.552674] bio_post_read_ctx 14KB 15KB [ 862.558312] bio-2 14KB 15KB [ 862.563873] jfs_mp 7KB 7KB [ 862.569424] cifs_small_rq 15KB 16KB [ 862.575059] cifs_request 67KB 67KB [ 862.580583] cifs_mpx_ids 0KB 7KB [ 862.588743] nfs_commit_data 3KB 14KB [ 862.597491] nfs_write_data 34KB 44KB [ 862.606759] ext4_system_zone 1KB 7KB [ 862.615536] bio-1 1KB 7KB [ 862.621044] pid_namespace 2KB 7KB [ 862.629198] rpc_buffers 17KB 25KB [ 862.637805] rpc_tasks 2KB 7KB [ 862.645994] UNIX 423KB 450KB [ 862.651588] tcp_bind_bucket 1KB 4KB [ 862.659598] ip_fib_trie 23KB 31KB [ 862.696001] ip_fib_alias 112KB 134KB [ 862.701522] ip_dst_cache 9KB 48KB [ 862.716711] RAW 42KB 52KB [ 862.736909] UDP 48KB 67KB [ 862.742533] TCP 11KB 22KB [ 862.747903] hugetlbfs_inode_cache 3KB 15KB [ 862.771985] fscache_cookie_jar 1KB 11KB [ 862.777459] eventpoll_pwq 29KB 47KB [ 862.802278] eventpoll_epi 57KB 66KB [ 862.807671] inotify_inode_mark 21KB 51KB [ 862.822256] request_queue 199KB 199KB [ 862.827639] blkdev_requests 1KB 3KB [ 862.846778] blkdev_ioc 28KB 34KB [ 862.852224] bio-0 1585KB 1668KB [ 862.857587] biovec-max 1716KB 1757KB [ 862.867718] biovec-64 1527KB 1614KB [ 862.875531] biovec-16 119KB 135KB [ 862.880902] bio_integrity_payload 1KB 8KB [ 862.891259] khugepaged_mm_slot 11KB 34KB [ 862.896794] uid_cache 0KB 4KB [ 862.906921] dmaengine-unmap-2 0KB 3KB [ 862.912372] skbuff_fclone_cache 120KB 142KB [ 862.917911] skbuff_head_cache 7226KB 7530KB [ 862.928416] configfs_dir_cache 3KB 11KB [ 862.933943] file_lock_cache 70KB 166KB [ 862.939306] file_lock_ctx 9KB 11KB [ 862.949469] fsnotify_mark_connector 11KB 31KB [ 862.955466] net_namespace 52KB 52KB [ 862.960829] shmem_inode_cache 8135KB 8302KB [ 862.971119] task_delay_info 170KB 407KB [ 862.978877] taskstats 85KB 156KB [ 862.989180] proc_dir_entry 694KB 720KB [ 862.994610] pde_opener 6KB 54KB [ 862.999988] seq_file 314KB 531KB [ 863.010089] sigqueue 51KB 59KB [ 863.015636] kernfs_node_cache 18229KB 18250KB [ 863.021000] mnt_cache 173KB 180KB [ 863.031164] filp 7103KB 7620KB [ 863.036753] names_cache 144695KB 144695KB [ 863.046936] iint_cache 36KB 71KB [ 863.052354] key_jar 4KB 11KB [ 863.057717] uts_namespace 2KB 7KB [ 863.067887] nsproxy 2KB 7KB [ 863.073318] vm_area_struct 3529KB 4938KB [ 863.080935] mm_struct 445KB 806KB [ 863.091024] fs_cache 88KB 336KB [ 863.096458] files_cache 307KB 573KB [ 863.106576] signal_cache 730KB 1523KB [ 863.112122] sighand_cache 548KB 603KB [ 863.117486] task_struct 5782KB 5807KB [ 863.127573] cred_jar 1883KB 2156KB [ 863.133889] anon_vma_chain 1163KB 1803KB [ 863.139257] anon_vma 159KB 265KB [ 863.149367] pid 47KB 260KB [ 863.154891] Acpi-Operand 156KB 202KB [ 863.160254] Acpi-ParseExt 8KB 11KB [ 863.170491] Acpi-Parse 41KB 47KB [ 863.175921] Acpi-State 52KB 63KB [ 863.183570] Acpi-Namespace 21KB 27KB [ 863.188945] numa_policy 0KB 3KB [ 863.199528] debug_objects_cache 1151KB 1568KB [ 863.205174] trace_event_file 297KB 298KB [ 863.210550] ftrace_event_field 398KB 401KB [ 863.220827] pool_workqueue 121KB 128KB [ 863.226383] page->ptl 549KB 1047KB [ 863.231782] kmalloc-2097152 2050KB 2050KB [ 863.241896] kmalloc-524288 2056KB 2056KB [ 863.247375] kmalloc-262144 1290KB 1290KB [ 863.256859] kmalloc-131072 650KB 650KB [ 863.263215] kmalloc-65536 1848KB 1914KB [ 863.268591] kmalloc-32768 1650KB 1650KB [ 863.277860] kmalloc-16384 1072KB 1105KB [ 863.286340] kmalloc-8192 3960KB 4001KB [ 863.291711] kmalloc-4096 18411KB 18470KB [ 863.301042] kmalloc-2048 11264KB 12412KB [ 863.307555] kmalloc-1024 6304KB 7812KB [ 863.316890] kmalloc-512 15378KB 15993KB [ 863.323307] kmalloc-256 4136KB 5223KB [ 863.328675] kmalloc-128 911KB 1488KB [ 863.338017] kmalloc-96 3693KB 4020KB [ 863.344263] kmalloc-64 2379KB 4208KB [ 863.349665] kmalloc-32 1884KB 2445KB [ 863.358991] kmalloc-192 1488KB 2280KB [ 863.365232] kmem_cache 177KB 183KB [ 863.370600] Out of memory (oom_kill_allocating_task): Kill process 13571 (in:imklog) score 0 or sacrifice child [ 863.381932] Killed process 13569 (rsyslogd) total-vm:254332kB, anon-rss:700kB, file-rss:0kB, shmem-rss:0kB [ 863.396591] oom_reaper: reaped process 13569 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 13:10:00 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@multiplanar_userptr={0x10000, 0x3, 0x4, 0x8, 0x8000, {0x77359400}, {0x1, 0x8, 0x3, 0x51, 0x20, 0x7, "15590109"}, 0x200, 0x2, {&(0x7f00000000c0)=[{0x5, 0x4, {&(0x7f0000000040)}, 0x2}, {0x6fc, 0x5, {&(0x7f0000000080)}, 0x21}]}, 0xff}) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@multiplanar_userptr={0x10000, 0x3, 0x4, 0x8, 0x8000, {0x77359400}, {0x1, 0x8, 0x3, 0x51, 0x20, 0x7, "15590109"}, 0x200, 0x2, {&(0x7f00000000c0)=[{0x5, 0x4, {&(0x7f0000000040)}, 0x2}, {0x6fc, 0x5, {&(0x7f0000000080)}, 0x21}]}, 0xff}) 13:10:02 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x52}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfcc, 0x31}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x2400c802) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@mmap={0x8000, 0x5, 0x4, 0x4000, 0x3, {}, {0x3, 0x2, 0x15, 0xff, 0x6, 0x40, "6153ee48"}, 0x7f, 0x1, {}, 0xe82}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)=@multiplanar_overlay={0x1, 0x0, 0x4, 0x1000, 0x200, {0x77359400}, {0x4, 0x0, 0x2, 0x6, 0x80, 0x6, "4505475e"}, 0x80000001, 0x3, {&(0x7f0000000140)=[{0xa9, 0xfffffffa, {0x9}, 0x8}, {0x2, 0x0, {0x81}}]}, 0x2}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @win={{0x0, 0x3, 0x9, 0x7fffffff}, 0x9, 0x8001, &(0x7f0000000080)={{0x8000, 0x8, 0x2301}, &(0x7f0000000040)={{0x260e, 0x1, 0x1d7418ec, 0xfffffffe}, &(0x7f0000000000)={{0x10001, 0x0, 0x2, 0xfb88}}}}, 0xffffffff, &(0x7f00000000c0)="dda12cda273b890171ba9a0622adf017f9edc6893ea182b26824528328952e19381c8d926b7dd23df67ccd32e50dc2506f2f250da3b660d89afbd6f0194d9afe6bb76d967bbfac872b3e40a987daf511c9ec97e0c3a18267fa63543498dba3c72b0e8168037e7f9149954dae2c47a4e5c2421e1675d0aea4cb"}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @win={{0x0, 0x3, 0x9, 0x7fffffff}, 0x9, 0x8001, &(0x7f0000000080)={{0x8000, 0x8, 0x2301}, &(0x7f0000000040)={{0x260e, 0x1, 0x1d7418ec, 0xfffffffe}, &(0x7f0000000000)={{0x10001, 0x0, 0x2, 0xfb88}}}}, 0xffffffff, &(0x7f00000000c0)="dda12cda273b890171ba9a0622adf017f9edc6893ea182b26824528328952e19381c8d926b7dd23df67ccd32e50dc2506f2f250da3b660d89afbd6f0194d9afe6bb76d967bbfac872b3e40a987daf511c9ec97e0c3a18267fa63543498dba3c72b0e8168037e7f9149954dae2c47a4e5c2421e1675d0aea4cb"}}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r4, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048001}, 0x8a) 13:10:02 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000001c0)={0xc4, 0x7, 0x2, "dd37d8f1c879f3f2335196dc7bc23e5c94eaa1ac58bdff4bf081f78c149245a4", 0x42303159}) clock_gettime(0x0, &(0x7f0000000000)) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)=@multiplanar_userptr={0x8, 0x2, 0x4, 0x10, 0xf, {r2, r3/1000+10000}, {0x4, 0xc, 0x58, 0x1f, 0x7, 0x2, "92876498"}, 0x2, 0x2, {&(0x7f00000000c0)=[{0x3f, 0x0, {&(0x7f0000000040)}}, {0x6, 0x2, {&(0x7f0000000080)}, 0x5}]}, 0xffffffff}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:10:02 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000180)={0x0, @pix_mp={0x0, 0x0, 0x30314247, 0x0, 0x0, [{}, {0x0, 0x1ff}, {}, {}, {}, {}, {0x0, 0x97}, {0xffffffff, 0x5ba1}]}}) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000280)={0x7, 0x7ff, 0x1, {0x0, @vbi={0x4, 0xa8b, 0x5, 0x31324d4e, [0x76, 0x5], [0x7, 0x101], 0x2}}, 0xfff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990068a76ee5af8d233086eb0e229012000000000000"], 0x34}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)={0x11dc, r4, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x86, 0xfc, "a1aa8283452e07c6ebd3a88c742fd9c928f4e0a7329703234d6042c2bd4dcc7d59f9c66ca4d633e8c608d790c470672e7f9db7986828d47550228c2432957d3fe77d6dcf1d7edf32b16f8fe71bcb615785ba42b9273938ea1d6a93f9c5ddeb886115b43a58da608e66ea3a2e86615a85788eee5e1b4ceb724df2f04d61b22eea8c6a"}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x81}], @NL80211_ATTR_IE={0xd, 0x2a, [@peer_mgmt={0x75, 0x4, {0x1, 0x7fff, @void, @void, @void}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x32, 0xfa, "02544539949ac9728a1d83274e9d4499cbcb7c33e57847aaf5b8c81b93a5c525f4caab0a1e83d48038cf540bb7c6"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7f}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x80}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x94, 0xfa, "8429e49574e249f0cd04b54975fcbf4998ce7d63fec569329e16e19a23a36f2cace3385e77ab09f740fa0ad46326bb7cbd7733fcffada8bfe79e64a7ad141007a657aa39a8477d24808b2679f387f0d2fec61e780470740375cccb1a85dff17c383962cf0ba1957de4cef90f623518b07fb2d78393cf887b981427da4d6426f9183437fc061254d5be9403254af6e901"}, @NL80211_ATTR_FILS_ERP_REALM={0x3c, 0xfa, "c71ef68fe2ffd692a60213bc6ba3ae0d2b9511539cdaddd5705af6f75b4c83f9eba8a1540c3ab4c4ddff4ad13001d33788851417cb7656c1"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x4}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "e4026ef618558d77"}]]}, 0x11dc}, 0x1, 0x0, 0x0, 0x41}, 0x40001) 13:10:02 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 13:10:02 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x34363248, 0x0, 0x0, [{}, {0x0, 0x35}, {}, {}, {0x1000000}, {0x0, 0x1}]}}) 13:10:02 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:10:02 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 13:10:02 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000001c0)={0xc4, 0x7, 0x2, "dd37d8f1c879f3f2335196dc7bc23e5c94eaa1ac58bdff4bf081f78c149245a4", 0x42303159}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)=@multiplanar_userptr={0x8, 0x2, 0x4, 0x10, 0xf, {r2, r3/1000+10000}, {0x4, 0xc, 0x58, 0x1f, 0x7, 0x2, "92876498"}, 0x2, 0x2, {&(0x7f00000000c0)=[{0x3f, 0x0, {&(0x7f0000000040)}}, {0x6, 0x2, {&(0x7f0000000080)}, 0x5}]}, 0xffffffff}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000001c0)={0xc4, 0x7, 0x2, "dd37d8f1c879f3f2335196dc7bc23e5c94eaa1ac58bdff4bf081f78c149245a4", 0x42303159}) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)=@multiplanar_userptr={0x8, 0x2, 0x4, 0x10, 0xf, {r2, r3/1000+10000}, {0x4, 0xc, 0x58, 0x1f, 0x7, 0x2, "92876498"}, 0x2, 0x2, {&(0x7f00000000c0)=[{0x3f, 0x0, {&(0x7f0000000040)}}, {0x6, 0x2, {&(0x7f0000000080)}, 0x5}]}, 0xffffffff}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) 13:10:02 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:10:02 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:10:02 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000080)={0x1, 0x4c47504a, 0x2, @discrete={0x8, 0x3b}}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x3, 0x3, 0x3, 0x80080}) 13:10:02 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) [ 866.289655] nla_parse: 55 callbacks suppressed [ 866.289665] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 13:10:02 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x100000001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x6, 0x2, 0x1, "728daa6ac48c777fc35947da8fe41fa39c4265f08e2d79027d743332fe36623c", 0x35315241}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f00000000c0)=0x3) 13:10:02 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:10:02 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000180)={0x0, @pix_mp={0x0, 0x0, 0x30314247, 0x0, 0x0, [{}, {0x0, 0x1ff}, {}, {}, {}, {}, {0x0, 0x97}, {0xffffffff, 0x5ba1}]}}) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000280)={0x7, 0x7ff, 0x1, {0x0, @vbi={0x4, 0xa8b, 0x5, 0x31324d4e, [0x76, 0x5], [0x7, 0x101], 0x2}}, 0xfff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990068a76ee5af8d233086eb0e229012000000000000"], 0x34}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)={0x11dc, r4, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x86, 0xfc, "a1aa8283452e07c6ebd3a88c742fd9c928f4e0a7329703234d6042c2bd4dcc7d59f9c66ca4d633e8c608d790c470672e7f9db7986828d47550228c2432957d3fe77d6dcf1d7edf32b16f8fe71bcb615785ba42b9273938ea1d6a93f9c5ddeb886115b43a58da608e66ea3a2e86615a85788eee5e1b4ceb724df2f04d61b22eea8c6a"}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x81}], @NL80211_ATTR_IE={0xd, 0x2a, [@peer_mgmt={0x75, 0x4, {0x1, 0x7fff, @void, @void, @void}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x32, 0xfa, "02544539949ac9728a1d83274e9d4499cbcb7c33e57847aaf5b8c81b93a5c525f4caab0a1e83d48038cf540bb7c6"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7f}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x80}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x94, 0xfa, "8429e49574e249f0cd04b54975fcbf4998ce7d63fec569329e16e19a23a36f2cace3385e77ab09f740fa0ad46326bb7cbd7733fcffada8bfe79e64a7ad141007a657aa39a8477d24808b2679f387f0d2fec61e780470740375cccb1a85dff17c383962cf0ba1957de4cef90f623518b07fb2d78393cf887b981427da4d6426f9183437fc061254d5be9403254af6e901"}, @NL80211_ATTR_FILS_ERP_REALM={0x3c, 0xfa, "c71ef68fe2ffd692a60213bc6ba3ae0d2b9511539cdaddd5705af6f75b4c83f9eba8a1540c3ab4c4ddff4ad13001d33788851417cb7656c1"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x4}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "e4026ef618558d77"}]]}, 0x11dc}, 0x1, 0x0, 0x0, 0x41}, 0x40001) (async) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)={0x11dc, r4, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x86, 0xfc, "a1aa8283452e07c6ebd3a88c742fd9c928f4e0a7329703234d6042c2bd4dcc7d59f9c66ca4d633e8c608d790c470672e7f9db7986828d47550228c2432957d3fe77d6dcf1d7edf32b16f8fe71bcb615785ba42b9273938ea1d6a93f9c5ddeb886115b43a58da608e66ea3a2e86615a85788eee5e1b4ceb724df2f04d61b22eea8c6a"}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x81}], @NL80211_ATTR_IE={0xd, 0x2a, [@peer_mgmt={0x75, 0x4, {0x1, 0x7fff, @void, @void, @void}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x32, 0xfa, "02544539949ac9728a1d83274e9d4499cbcb7c33e57847aaf5b8c81b93a5c525f4caab0a1e83d48038cf540bb7c6"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7f}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x80}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x94, 0xfa, "8429e49574e249f0cd04b54975fcbf4998ce7d63fec569329e16e19a23a36f2cace3385e77ab09f740fa0ad46326bb7cbd7733fcffada8bfe79e64a7ad141007a657aa39a8477d24808b2679f387f0d2fec61e780470740375cccb1a85dff17c383962cf0ba1957de4cef90f623518b07fb2d78393cf887b981427da4d6426f9183437fc061254d5be9403254af6e901"}, @NL80211_ATTR_FILS_ERP_REALM={0x3c, 0xfa, "c71ef68fe2ffd692a60213bc6ba3ae0d2b9511539cdaddd5705af6f75b4c83f9eba8a1540c3ab4c4ddff4ad13001d33788851417cb7656c1"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x4}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "e4026ef618558d77"}]]}, 0x11dc}, 0x1, 0x0, 0x0, 0x41}, 0x40001) 13:10:02 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:10:02 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000080)={0x1, 0x4c47504a, 0x2, @discrete={0x8, 0x3b}}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x3, 0x3, 0x3, 0x80080}) 13:10:02 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000)=0x5, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e22, @private=0xa010100}, @in6={0xa, 0x4e22, 0x3, @empty, 0x9}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x4, @private0}, @in6={0xa, 0x4e21, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x7}], 0x84) 13:10:03 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x3, 0x0, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:10:03 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x100000001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x6, 0x2, 0x1, "728daa6ac48c777fc35947da8fe41fa39c4265f08e2d79027d743332fe36623c", 0x35315241}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f00000000c0)=0x3) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x100000001, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x6, 0x2, 0x1, "728daa6ac48c777fc35947da8fe41fa39c4265f08e2d79027d743332fe36623c", 0x35315241}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f00000000c0)=0x3) (async) 13:10:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000080)={0x1, 0x4c47504a, 0x2, @discrete={0x8, 0x3b}}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x3, 0x3, 0x3, 0x80080}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000080)={0x1, 0x4c47504a, 0x2, @discrete={0x8, 0x3b}}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x3, 0x3, 0x3, 0x80080}) (async) 13:10:03 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:10:03 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000180)={0x0, @pix_mp={0x0, 0x0, 0x30314247, 0x0, 0x0, [{}, {0x0, 0x1ff}, {}, {}, {}, {}, {0x0, 0x97}, {0xffffffff, 0x5ba1}]}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000180)={0x0, @pix_mp={0x0, 0x0, 0x30314247, 0x0, 0x0, [{}, {0x0, 0x1ff}, {}, {}, {}, {}, {0x0, 0x97}, {0xffffffff, 0x5ba1}]}}) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000280)={0x7, 0x7ff, 0x1, {0x0, @vbi={0x4, 0xa8b, 0x5, 0x31324d4e, [0x76, 0x5], [0x7, 0x101], 0x2}}, 0xfff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990068a76ee5af8d233086eb0e229012000000000000"], 0x34}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)={0x11dc, r4, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x86, 0xfc, "a1aa8283452e07c6ebd3a88c742fd9c928f4e0a7329703234d6042c2bd4dcc7d59f9c66ca4d633e8c608d790c470672e7f9db7986828d47550228c2432957d3fe77d6dcf1d7edf32b16f8fe71bcb615785ba42b9273938ea1d6a93f9c5ddeb886115b43a58da608e66ea3a2e86615a85788eee5e1b4ceb724df2f04d61b22eea8c6a"}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x81}], @NL80211_ATTR_IE={0xd, 0x2a, [@peer_mgmt={0x75, 0x4, {0x1, 0x7fff, @void, @void, @void}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x32, 0xfa, "02544539949ac9728a1d83274e9d4499cbcb7c33e57847aaf5b8c81b93a5c525f4caab0a1e83d48038cf540bb7c6"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7f}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x80}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x94, 0xfa, "8429e49574e249f0cd04b54975fcbf4998ce7d63fec569329e16e19a23a36f2cace3385e77ab09f740fa0ad46326bb7cbd7733fcffada8bfe79e64a7ad141007a657aa39a8477d24808b2679f387f0d2fec61e780470740375cccb1a85dff17c383962cf0ba1957de4cef90f623518b07fb2d78393cf887b981427da4d6426f9183437fc061254d5be9403254af6e901"}, @NL80211_ATTR_FILS_ERP_REALM={0x3c, 0xfa, "c71ef68fe2ffd692a60213bc6ba3ae0d2b9511539cdaddd5705af6f75b4c83f9eba8a1540c3ab4c4ddff4ad13001d33788851417cb7656c1"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x4}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "e4026ef618558d77"}]]}, 0x11dc}, 0x1, 0x0, 0x0, 0x41}, 0x40001) 13:10:03 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x3, 0x0, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:10:03 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x100000001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x6, 0x2, 0x1, "728daa6ac48c777fc35947da8fe41fa39c4265f08e2d79027d743332fe36623c", 0x35315241}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f00000000c0)=0x3) [ 866.487162] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 13:10:03 executing program 5: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:10:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000140)={0x7ff, 0x31364d59, 0x1, @stepwise={0xad9, 0x1, 0x4, 0x3, 0x4, 0x200}}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000040)={0x7, @pix={0xcf, 0xff, 0x3432564e, 0x6, 0x76306b32, 0x2, 0x0, 0x1000000, 0x0, 0x1, 0x0, 0xf929f15244b73f5c}}) 13:10:03 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)) (async) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000)=0x5, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e22, @private=0xa010100}, @in6={0xa, 0x4e22, 0x3, @empty, 0x9}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x4, @private0}, @in6={0xa, 0x4e21, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x7}], 0x84) 13:10:03 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x3, 0x0, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) [ 866.578638] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 13:10:03 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x3, @pix_mp={0x9, 0xffffff81, 0x43564548, 0x2, 0x8, [{0x400, 0x81e7}, {0x1, 0xd0e5}, {0xff800, 0x1}, {0x3, 0x7}, {0xffff0000, 0x4}, {0x8, 0x200}, {0x401, 0x7fffffff}, {0x5, 0x8000}], 0x7, 0x18, 0x7, 0x2}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000001c0)={0x1ff, 0x20303159, 0x3, @stepwise={0x2, 0x6, 0xfffffff9, 0x0, 0x20, 0x9}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000300)={0x0, @vbi={0x7ff, 0xaf, 0x42f, 0x41414270, [0x5, 0x1], [0x6, 0x4b61057d], 0x2}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="88000000", @ANYRES16=r2, @ANYBLOB="04012abc7080dc06e6251df9ff0008002300", @ANYRESHEX=r3, @ANYBLOB="0c00990005000000010400004c00238008001c000004000006000400c200000006001200e018000008001400bcffffff05001300010000000600100001000000060018004000000005001f000100000005001d00000000000c009900f80f000057000000080001005e000000"], 0x88}, 0x1, 0x0, 0x0, 0x8002}, 0x20000001) 13:10:03 executing program 5: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:10:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000140)={0x7ff, 0x31364d59, 0x1, @stepwise={0xad9, 0x1, 0x4, 0x3, 0x4, 0x200}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000040)={0x7, @pix={0xcf, 0xff, 0x3432564e, 0x6, 0x76306b32, 0x2, 0x0, 0x1000000, 0x0, 0x1, 0x0, 0xf929f15244b73f5c}}) 13:10:03 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xcc, r2, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x24}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6b}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8001}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa362}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x143}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_MAC={0xa}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4040004}, 0x810) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x3, @pix_mp={0x0, 0x9, 0x0, 0x0, 0x4, [{}, {}, {0x7}, {}, {0x0, 0xfffffc00}, {0x7}]}}) 13:10:03 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x3, 0x1, {0x0, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:10:03 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x3, @pix_mp={0x9, 0xffffff81, 0x43564548, 0x2, 0x8, [{0x400, 0x81e7}, {0x1, 0xd0e5}, {0xff800, 0x1}, {0x3, 0x7}, {0xffff0000, 0x4}, {0x8, 0x200}, {0x401, 0x7fffffff}, {0x5, 0x8000}], 0x7, 0x18, 0x7, 0x2}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000001c0)={0x1ff, 0x20303159, 0x3, @stepwise={0x2, 0x6, 0xfffffff9, 0x0, 0x20, 0x9}}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000300)={0x0, @vbi={0x7ff, 0xaf, 0x42f, 0x41414270, [0x5, 0x1], [0x6, 0x4b61057d], 0x2}}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="88000000", @ANYRES16=r2, @ANYBLOB="04012abc7080dc06e6251df9ff0008002300", @ANYRESHEX=r3, @ANYBLOB="0c00990005000000010400004c00238008001c000004000006000400c200000006001200e018000008001400bcffffff05001300010000000600100001000000060018004000000005001f000100000005001d00000000000c009900f80f000057000000080001005e000000"], 0x88}, 0x1, 0x0, 0x0, 0x8002}, 0x20000001) 13:10:03 executing program 5: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:10:03 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xcc, r2, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x24}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6b}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8001}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa362}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x143}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_MAC={0xa}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4040004}, 0x810) (async) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x3, @pix_mp={0x0, 0x9, 0x0, 0x0, 0x4, [{}, {}, {0x7}, {}, {0x0, 0xfffffc00}, {0x7}]}}) 13:10:03 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000)=0x5, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e22, @private=0xa010100}, @in6={0xa, 0x4e22, 0x3, @empty, 0x9}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x4, @private0}, @in6={0xa, 0x4e21, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x7}], 0x84) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)) (async) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) (async) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)) (async) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000)=0x5, 0x4) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e22, @private=0xa010100}, @in6={0xa, 0x4e22, 0x3, @empty, 0x9}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x4, @private0}, @in6={0xa, 0x4e21, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x7}], 0x84) (async) 13:10:03 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x3, 0x1, {0x0, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:10:03 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x3, @pix_mp={0x9, 0xffffff81, 0x43564548, 0x2, 0x8, [{0x400, 0x81e7}, {0x1, 0xd0e5}, {0xff800, 0x1}, {0x3, 0x7}, {0xffff0000, 0x4}, {0x8, 0x200}, {0x401, 0x7fffffff}, {0x5, 0x8000}], 0x7, 0x18, 0x7, 0x2}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000001c0)={0x1ff, 0x20303159, 0x3, @stepwise={0x2, 0x6, 0xfffffff9, 0x0, 0x20, 0x9}}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000300)={0x0, @vbi={0x7ff, 0xaf, 0x42f, 0x41414270, [0x5, 0x1], [0x6, 0x4b61057d], 0x2}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="88000000", @ANYRES16=r2, @ANYBLOB="04012abc7080dc06e6251df9ff0008002300", @ANYRESHEX=r3, @ANYBLOB="0c00990005000000010400004c00238008001c000004000006000400c200000006001200e018000008001400bcffffff05001300010000000600100001000000060018004000000005001f000100000005001d00000000000c009900f80f000057000000080001005e000000"], 0x88}, 0x1, 0x0, 0x0, 0x8002}, 0x20000001) 13:10:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000140)={0x7ff, 0x31364d59, 0x1, @stepwise={0xad9, 0x1, 0x4, 0x3, 0x4, 0x200}}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000040)={0x7, @pix={0xcf, 0xff, 0x3432564e, 0x6, 0x76306b32, 0x2, 0x0, 0x1000000, 0x0, 0x1, 0x0, 0xf929f15244b73f5c}}) 13:10:03 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:10:03 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xcc, r2, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x24}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6b}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8001}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa362}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x143}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_MAC={0xa}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4040004}, 0x810) (async) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x3, @pix_mp={0x0, 0x9, 0x0, 0x0, 0x4, [{}, {}, {0x7}, {}, {0x0, 0xfffffc00}, {0x7}]}}) 13:10:03 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x3, 0x1, {0x0, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:10:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, r2, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x28}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "5bc6dc8cfe"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e3b4cce635955273bc49ecc0b4"}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:10:03 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:10:03 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000040)={0x2, @sliced={0x200, [0x4d78, 0x3, 0xa7c3, 0x6, 0x5, 0xff, 0x6, 0x1f, 0x2, 0x80, 0x16, 0x1000, 0x20, 0x81, 0x401, 0x401, 0x200, 0x9, 0x0, 0x400, 0x229, 0xfe, 0x477, 0xea6b, 0x8000, 0x7, 0x6, 0x400, 0x4, 0x1f, 0x9, 0x2, 0x1079, 0x1, 0x8001, 0x2, 0xf001, 0x8000, 0x40, 0x3f, 0x9, 0x58b, 0x1, 0xdfbb, 0x4, 0x4, 0x7fff, 0x8a], 0x4}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:10:03 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socketpair(0x20, 0x5, 0x2662, &(0x7f0000000000)={0xffffffffffffffff}) bind$l2tp(r1, &(0x7f0000000040)={0x2, 0x0, @empty, 0x2}, 0x10) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:10:03 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x3, 0x1, {0x2, @sliced={0x0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:10:03 executing program 4: sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4000084) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xde, 0x2) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)=0x3, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000000, 0x3, 0x1, 0x0, 0x40}) 13:10:03 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000040)={0x2, @sliced={0x200, [0x4d78, 0x3, 0xa7c3, 0x6, 0x5, 0xff, 0x6, 0x1f, 0x2, 0x80, 0x16, 0x1000, 0x20, 0x81, 0x401, 0x401, 0x200, 0x9, 0x0, 0x400, 0x229, 0xfe, 0x477, 0xea6b, 0x8000, 0x7, 0x6, 0x400, 0x4, 0x1f, 0x9, 0x2, 0x1079, 0x1, 0x8001, 0x2, 0xf001, 0x8000, 0x40, 0x3f, 0x9, 0x58b, 0x1, 0xdfbb, 0x4, 0x4, 0x7fff, 0x8a], 0x4}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000040)={0x2, @sliced={0x200, [0x4d78, 0x3, 0xa7c3, 0x6, 0x5, 0xff, 0x6, 0x1f, 0x2, 0x80, 0x16, 0x1000, 0x20, 0x81, 0x401, 0x401, 0x200, 0x9, 0x0, 0x400, 0x229, 0xfe, 0x477, 0xea6b, 0x8000, 0x7, 0x6, 0x400, 0x4, 0x1f, 0x9, 0x2, 0x1079, 0x1, 0x8001, 0x2, 0xf001, 0x8000, 0x40, 0x3f, 0x9, 0x58b, 0x1, 0xdfbb, 0x4, 0x4, 0x7fff, 0x8a], 0x4}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) 13:10:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, r2, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x28}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "5bc6dc8cfe"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e3b4cce635955273bc49ecc0b4"}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:10:03 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:10:03 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) socketpair(0x20, 0x5, 0x2662, &(0x7f0000000000)={0xffffffffffffffff}) bind$l2tp(r1, &(0x7f0000000040)={0x2, 0x0, @empty, 0x2}, 0x10) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:10:03 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:10:03 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async, rerun: 64) syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) (rerun: 64) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000040)={0x2, @sliced={0x200, [0x4d78, 0x3, 0xa7c3, 0x6, 0x5, 0xff, 0x6, 0x1f, 0x2, 0x80, 0x16, 0x1000, 0x20, 0x81, 0x401, 0x401, 0x200, 0x9, 0x0, 0x400, 0x229, 0xfe, 0x477, 0xea6b, 0x8000, 0x7, 0x6, 0x400, 0x4, 0x1f, 0x9, 0x2, 0x1079, 0x1, 0x8001, 0x2, 0xf001, 0x8000, 0x40, 0x3f, 0x9, 0x58b, 0x1, 0xdfbb, 0x4, 0x4, 0x7fff, 0x8a], 0x4}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:10:04 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:10:04 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, r2, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x28}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "5bc6dc8cfe"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e3b4cce635955273bc49ecc0b4"}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:10:04 executing program 4: sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4000084) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xde, 0x2) (async) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)=0x3, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000000, 0x3, 0x1, 0x0, 0x40}) 13:10:04 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) socketpair(0x20, 0x5, 0x2662, &(0x7f0000000000)={0xffffffffffffffff}) bind$l2tp(r1, &(0x7f0000000040)={0x2, 0x0, @empty, 0x2}, 0x10) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) [ 870.984638] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.990225] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.140089] oom_reaper: reaped process 14042 (syz-executor.0), now anon-rss:0kB, file-rss:14336kB, shmem-rss:8kB [ 872.150986] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 872.190412] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 872.197018] CPU: 1 PID: 8139 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 872.204474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 872.213828] Call Trace: [ 872.216422] dump_stack+0x1fc/0x2ef [ 872.220065] dump_header+0x15d/0xc3f [ 872.223787] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 872.228895] ? ___ratelimit+0x319/0x590 [ 872.232887] oom_kill_process.cold+0x10/0x692 [ 872.237390] ? check_preemption_disabled+0x41/0x280 [ 872.242419] ? has_intersects_mems_allowed+0x1d6/0x290 [ 872.247723] out_of_memory+0x1072/0x1390 [ 872.251795] ? oom_killer_disable+0x270/0x270 [ 872.256296] ? mutex_trylock+0x15f/0x1a0 [ 872.260364] __alloc_pages_nodemask+0x23a2/0x2890 [ 872.265219] ? find_get_entry+0x4cd/0x8a0 [ 872.269377] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 872.274251] alloc_pages_current+0x193/0x2a0 [ 872.278662] filemap_fault+0x146e/0x2180 [ 872.282741] ext4_filemap_fault+0x84/0xb0 [ 872.286900] __do_fault+0x10b/0x4b0 [ 872.290535] __handle_mm_fault+0x273b/0x41c0 [ 872.294954] ? vm_insert_page+0x9c0/0x9c0 [ 872.299106] ? __fget+0x356/0x510 [ 872.302577] ? check_preemption_disabled+0x41/0x280 [ 872.307606] handle_mm_fault+0x436/0xb10 [ 872.311677] __do_page_fault+0x68e/0xd60 [ 872.315747] ? trace_hardirqs_off_caller+0x6e/0x210 [ 872.320764] ? spurious_fault+0x840/0x840 [ 872.324918] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 872.329786] ? page_fault+0x8/0x30 [ 872.333331] page_fault+0x1e/0x30 [ 872.336785] RIP: 0033:0x403ace [ 872.339979] Code: Bad RIP value. [ 872.343336] RSP: 002b:000000c0002a3778 EFLAGS: 00010246 [ 872.348829] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000403ace [ 872.356199] RDX: 0000000000000080 RSI: 000000c0002a3840 RDI: 0000000000000004 [ 872.363495] RBP: 000000c0002a37c0 R08: 0000000000000000 R09: 0000000000000000 [ 872.370874] R10: 00000000000003e6 R11: 0000000000000246 R12: 000000c0002a3850 [ 872.378142] R13: 0000000000000001 R14: 000000c0006d09c0 R15: 000000cb8919e88e [ 872.389318] Mem-Info: [ 872.391802] active_anon:17867 inactive_anon:23146 isolated_anon:0 [ 872.391802] active_file:27 inactive_file:29 isolated_file:0 [ 872.391802] unevictable:0 dirty:8 writeback:0 unstable:0 [ 872.391802] slab_reclaimable:15485 slab_unreclaimable:119591 [ 872.391802] mapped:22378 shmem:23842 pagetables:580 bounce:0 [ 872.391802] free:13788 free_pcp:124 free_cma:0 [ 872.429718] Node 0 active_anon:70280kB inactive_anon:19292kB active_file:92kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87948kB dirty:24kB writeback:0kB shmem:21624kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 872.457544] syz-executor.0: vmalloc: allocation failure, allocated 1716080640 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 872.463618] Node 1 active_anon:1188kB inactive_anon:73292kB active_file:16kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1564kB dirty:8kB writeback:0kB shmem:73744kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 872.483204] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 872.499871] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 872.499904] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 872.499923] Node 0 DMA32 free:17632kB min:35996kB low:44992kB high:53988kB active_anon:70280kB inactive_anon:19292kB active_file:72kB inactive_file:52kB unevictable:0kB writepending:224kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7648kB pagetables:2216kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 872.499954] lowmem_reserve[]: 0 0 1 1 1 [ 872.499972] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 872.500001] lowmem_reserve[]: 0 0 0 0 0 [ 872.500019] Node 1 Normal free:26652kB min:53876kB low:67344kB high:80812kB active_anon:1188kB inactive_anon:73292kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:8kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:96kB pagetables:104kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 872.500047] lowmem_reserve[]: 0 0 0 0 0 [ 872.500071] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB [ 872.518810] CPU: 0 PID: 14042 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 872.534812] Node 0 DMA32: 1783*4kB (ME) 761*8kB (ME) 191*16kB (ME) 47*32kB (UME) 3*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17972kB [ 872.536350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 872.536358] Call Trace: [ 872.565270] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 872.569201] dump_stack+0x1fc/0x2ef [ 872.595038] Node 1 Normal: 140*4kB (UME) 121*8kB (ME) 116*16kB (UME) 87*32kB (UME) 54*64kB (UME) 27*128kB (ME) 6*256kB (UME) 4*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 1*4096kB (U) = 26904kB [ 872.598981] warn_alloc.cold+0x7b/0x18f [ 872.627442] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 872.631382] ? zone_watermark_ok_safe+0x260/0x260 [ 872.644555] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 872.652485] ? rcu_nmi_exit+0xb3/0x180 [ 872.652524] __vmalloc_area_node+0x4fd/0x780 [ 872.666391] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 872.675728] ? __vmalloc_node_range+0x180/0x180 [ 872.675747] ? _raw_spin_unlock+0x29/0x40 [ 872.678309] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 872.689295] ? __get_vm_area_node+0x2e2/0x3a0 [ 872.689313] __vmalloc_node_range+0xed/0x180 [ 872.689332] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 872.692944] 23900 total pagecache pages [ 872.709910] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 872.709923] vmalloc_user+0x70/0xe0 [ 872.709936] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 872.709948] vb2_vmalloc_alloc+0xb3/0x2f0 [ 872.709966] __vb2_queue_alloc+0x472/0xe60 [ 872.714040] 0 pages in swap cache [ 872.722843] vb2_core_create_bufs+0x273/0x7e0 [ 872.722859] ? __vb2_queue_free+0x870/0x870 [ 872.727684] Swap cache stats: add 0, delete 0, find 0/0 [ 872.736246] ? __video_do_ioctl+0x632/0xcd0 [ 872.736271] ? __mutex_lock+0x368/0x1190 [ 872.740140] Free swap = 0kB [ 872.744645] vb2_create_bufs+0x332/0x620 [ 872.744661] ? mark_held_locks+0xf0/0xf0 [ 872.744677] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 872.753505] Total swap = 0kB [ 872.758150] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 872.762306] 2097051 pages RAM [ 872.770864] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 872.775351] 0 pages HighMem/MovableOnly [ 872.779753] v4l_create_bufs+0xb2/0x160 [ 872.784063] 369649 pages reserved [ 872.788013] __video_do_ioctl+0x49a/0xcd0 [ 872.793370] 0 pages cma reserved [ 872.796977] ? v4l_querycap+0x340/0x340 [ 872.801265] Unreclaimable slab info: [ 872.805404] ? __might_fault+0x192/0x1d0 [ 872.805427] ? v4l_querycap+0x340/0x340 [ 872.809645] Name Used Total [ 872.813087] video_usercopy+0x13f/0xfa0 [ 872.813112] ? v4l_enumstd+0x60/0x60 [ 872.817587] pid_2 88KB 152KB [ 872.821889] ? do_futex+0x171/0x1880 [ 872.821904] ? mark_held_locks+0xf0/0xf0 [ 872.821922] ? debug_check_no_obj_freed+0x201/0x490 [ 872.827336] batadv_tl_cache 4KB 12KB [ 872.831699] ? video_usercopy+0xfa0/0xfa0 [ 872.831709] v4l2_ioctl+0x147/0x1a0 [ 872.831724] ? video_devdata+0xa0/0xa0 [ 872.835776] TIPC 10KB 15KB [ 872.838878] do_vfs_ioctl+0xcdb/0x12e0 [ 872.842954] SCTPv6 14KB 24KB [ 872.846972] ? lock_downgrade+0x720/0x720 [ 872.852071] SCTP 5KB 7KB [ 872.855074] ? check_preemption_disabled+0x41/0x280 [ 872.860153] DCCPv6 17KB 22KB [ 872.863239] ? ioctl_preallocate+0x200/0x200 [ 872.863262] ? __fget+0x356/0x510 [ 872.868437] DCCP 16KB 21KB [ 872.872397] ? do_dup2+0x450/0x450 [ 872.872410] ? __se_sys_futex+0x298/0x3b0 [ 872.872432] ksys_ioctl+0x9b/0xc0 [ 872.876407] RXRPC 11KB 13KB [ 872.879820] __x64_sys_ioctl+0x6f/0xb0 [ 872.883966] rxrpc_call_jar 78KB 94KB [ 872.887298] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 872.891247] bridge_fdb_cache 9KB 15KB [ 872.894944] do_syscall_64+0xf9/0x620 [ 872.894961] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 872.894975] RIP: 0033:0x7f68c24140f9 [ 872.899105] fib6_nodes 157KB 188KB [ 872.903063] Code: Bad RIP value. [ 872.903071] RSP: 002b:00007f68c0986168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 872.908596] ip6_dst_cache 78KB 311KB [ 872.912548] RAX: ffffffffffffffda RBX: 00007f68c2533f80 RCX: 00007f68c24140f9 [ 872.912557] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000003 [ 872.912565] RBP: 00007f68c246fae9 R08: 0000000000000000 R09: 0000000000000000 [ 872.912575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 872.916292] RAWv6 70KB 74KB [ 872.921640] R13: 00007fff6155d44f R14: 00007f68c0986300 R15: 0000000000022000 [ 872.938116] Mem-Info: [ 872.945678] UDPv6 26KB 33KB [ 872.948371] active_anon:17845 inactive_anon:23146 isolated_anon:0 [ 872.948371] active_file:16 inactive_file:15 isolated_file:0 [ 872.948371] unevictable:0 dirty:0 writeback:0 unstable:0 [ 872.948371] slab_reclaimable:15475 slab_unreclaimable:119560 [ 872.948371] mapped:22350 shmem:23842 pagetables:579 bounce:0 [ 872.948371] free:13936 free_pcp:124 free_cma:0 [ 872.962802] TCPv6 27KB 30KB [ 872.973895] Node 0 active_anon:70192kB inactive_anon:19292kB active_file:60kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21624kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 872.983968] nf_conntrack 12KB 18KB [ 872.987176] Node 1 active_anon:1188kB inactive_anon:73292kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1532kB dirty:0kB writeback:0kB shmem:73744kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 872.999047] t10_alua_lu_gp_cache 0KB 3KB [ 873.004778] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 873.009027] sd_ext_cdb 0KB 7KB [ 873.016156] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 873.017754] scsi_sense_cache 1056KB 1060KB [ 873.020918] Node 0 DMA32 free:17972kB min:35996kB low:44992kB high:53988kB active_anon:70192kB inactive_anon:19292kB active_file:60kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7648kB pagetables:2212kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 873.034462] virtio_scsi_cmd 16KB 16KB [ 873.043079] lowmem_reserve[]: 0 0 1 1 1 [ 873.053489] sgpool-128 8KB 8KB [ 873.054357] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 873.057648] sgpool-64 4KB 12KB [ 873.072214] lowmem_reserve[]: 0 0 0 0 0 [ 873.086169] sgpool-32 2KB 15KB [ 873.099476] Node 1 Normal free:26904kB min:53876kB low:67344kB high:80812kB active_anon:1188kB inactive_anon:73292kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:96kB pagetables:104kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 873.101376] sgpool-16 1KB 7KB [ 873.105457] lowmem_reserve[]: 0 0 0 0 0 [ 873.120230] sgpool-8 0KB 7KB [ 873.129274] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB [ 873.164611] mqueue_inode_cache 10KB 22KB [ 873.195435] Node 0 DMA32: 1783*4kB (ME) 761*8kB (ME) 191*16kB (ME) 47*32kB (UME) 3*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17972kB [ 873.229503] bio_post_read_ctx 14KB 15KB [ 873.261763] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 873.273920] bio-2 14KB 15KB [ 873.306301] Node 1 Normal: 140*4kB (UME) 121*8kB (ME) 116*16kB (UME) 87*32kB (UME) 54*64kB (UME) 27*128kB (ME) 6*256kB (UME) 4*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 1*4096kB (U) = 26904kB [ 873.316905] jfs_mp 7KB 7KB [ 873.348709] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 873.358434] cifs_small_rq 15KB 16KB [ 873.390428] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 873.401521] cifs_request 67KB 67KB [ 873.420269] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 873.440256] cifs_mpx_ids 0KB 7KB [ 873.454234] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 873.478417] nfs_commit_data 3KB 14KB [ 873.491068] 23873 total pagecache pages [ 873.506567] nfs_write_data 34KB 44KB [ 873.519678] 0 pages in swap cache [ 873.537049] ext4_system_zone 1KB 7KB [ 873.547815] Swap cache stats: add 0, delete 0, find 0/0 [ 873.548071] bio-1 1KB 7KB [ 873.554991] Free swap = 0kB [ 873.561143] pid_namespace 2KB 7KB [ 873.574251] rpc_buffers 17KB 25KB [ 873.575994] Total swap = 0kB [ 873.579615] rpc_tasks 2KB 7KB [ 873.585913] 2097051 pages RAM [ 873.588010] UNIX 420KB 438KB [ 873.591110] 0 pages HighMem/MovableOnly [ 873.603542] tcp_bind_bucket 1KB 4KB [ 873.608938] ip_fib_trie 23KB 31KB [ 873.609159] 369649 pages reserved [ 873.617795] 0 pages cma reserved [ 873.617931] ip_fib_alias 112KB 134KB [ 873.630277] ip_dst_cache 9KB 48KB [ 873.639078] RAW 42KB 52KB [ 873.647977] UDP 54KB 67KB [ 873.656829] TCP 11KB 16KB [ 873.665854] hugetlbfs_inode_cache 3KB 15KB [ 873.675317] fscache_cookie_jar 1KB 11KB [ 873.680775] eventpoll_pwq 27KB 47KB [ 873.689620] eventpoll_epi 50KB 66KB [ 873.698253] inotify_inode_mark 24KB 51KB [ 873.707359] request_queue 199KB 199KB [ 873.716382] blkdev_requests 1KB 3KB [ 873.725394] blkdev_ioc 28KB 34KB [ 873.730791] bio-0 1537KB 1623KB [ 873.739527] biovec-max 1650KB 1716KB [ 873.753153] biovec-64 1486KB 1598KB [ 873.758525] biovec-16 108KB 135KB [ 873.775811] bio_integrity_payload 1KB 8KB [ 873.786366] khugepaged_mm_slot 13KB 34KB [ 873.798888] uid_cache 0KB 4KB [ 873.809189] dmaengine-unmap-2 0KB 3KB [ 873.821276] skbuff_fclone_cache 126KB 142KB [ 873.839409] skbuff_head_cache 6711KB 7252KB [ 873.848099] configfs_dir_cache 3KB 11KB [ 873.862192] file_lock_cache 83KB 166KB [ 873.867573] file_lock_ctx 9KB 11KB [ 873.877722] fsnotify_mark_connector 13KB 31KB [ 873.890408] net_namespace 52KB 52KB [ 873.900586] shmem_inode_cache 8156KB 8287KB [ 873.917690] task_delay_info 194KB 407KB [ 873.923100] taskstats 93KB 149KB [ 873.928462] proc_dir_entry 694KB 720KB [ 873.945735] pde_opener 6KB 54KB [ 873.951113] seq_file 307KB 531KB [ 873.961182] sigqueue 52KB 59KB [ 873.978590] kernfs_node_cache 18234KB 18250KB [ 873.984030] mnt_cache 173KB 180KB [ 873.989400] filp 7079KB 7612KB [ 874.006342] names_cache 143837KB 143858KB [ 874.019889] iint_cache 36KB 71KB [ 874.037445] key_jar 4KB 11KB [ 874.043680] uts_namespace 2KB 7KB [ 874.049046] nsproxy 1KB 7KB [ 874.066081] vm_area_struct 3583KB 4911KB [ 874.074017] mm_struct 503KB 806KB [ 874.079395] fs_cache 100KB 336KB [ 874.096619] files_cache 336KB 558KB [ 874.103643] signal_cache 812KB 1502KB [ 874.109019] sighand_cache 568KB 603KB [ 874.126039] task_struct 6527KB 6565KB [ 874.133875] cred_jar 1733KB 2156KB [ 874.139603] anon_vma_chain 1184KB 1803KB [ 874.156736] anon_vma 134KB 265KB [ 874.163749] pid 56KB 260KB [ 874.169122] Acpi-Operand 156KB 202KB [ 874.187194] Acpi-ParseExt 8KB 11KB [ 874.195855] Acpi-Parse 41KB 47KB [ 874.201263] Acpi-State 52KB 63KB [ 874.216245] Acpi-Namespace 21KB 27KB [ 874.227645] numa_policy 0KB 3KB [ 874.233603] debug_objects_cache 1145KB 1568KB [ 874.240113] trace_event_file 297KB 298KB [ 874.251218] ftrace_event_field 398KB 401KB [ 874.257286] pool_workqueue 121KB 128KB [ 874.268402] page->ptl 597KB 1047KB [ 874.274090] kmalloc-2097152 2050KB 2050KB [ 874.279732] kmalloc-524288 2056KB 2056KB [ 874.290752] kmalloc-262144 1290KB 1290KB [ 874.296341] kmalloc-131072 650KB 650KB [ 874.307844] kmalloc-65536 1848KB 1914KB [ 874.313828] kmalloc-32768 1650KB 1650KB [ 874.319260] kmalloc-16384 1039KB 1105KB [ 874.329494] kmalloc-8192 3960KB 4001KB [ 874.335282] kmalloc-4096 19006KB 19027KB [ 874.342010] kmalloc-2048 11914KB 12399KB [ 874.348088] kmalloc-1024 6123KB 7812KB [ 874.353942] kmalloc-512 14518KB 15465KB [ 874.371386] kmalloc-256 4276KB 5223KB [ 874.383900] kmalloc-128 970KB 1488KB [ 874.399544] kmalloc-96 3685KB 4020KB [ 874.405214] kmalloc-64 2524KB 4208KB [ 874.420742] kmalloc-32 1902KB 2445KB [ 874.426195] kmalloc-192 1491KB 2280KB [ 874.441645] kmem_cache 177KB 183KB [ 874.457187] Out of memory (oom_kill_allocating_task): Kill process 8139 (syz-fuzzer) score 0 or sacrifice child [ 874.477808] Killed process 8131 (syz-executor.1) total-vm:48512kB, anon-rss:2284kB, file-rss:0kB, shmem-rss:0kB [ 877.780501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 877.799395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 877.814361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 877.821089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 877.836070] device bridge_slave_1 left promiscuous mode [ 877.844955] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.855344] device bridge_slave_0 left promiscuous mode [ 877.860845] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.876638] device veth1_macvtap left promiscuous mode [ 877.884529] device veth0_macvtap left promiscuous mode [ 877.889864] device veth1_vlan left promiscuous mode [ 877.898662] device veth0_vlan left promiscuous mode 13:10:16 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xfffffc00, 0x2, 0x3, "5e5829734711ecc0b56bc92a91efb6c43c697aff9f0ebefd18d5986ed811cd8c", 0x4f565559}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:10:16 executing program 4: sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4000084) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xde, 0x2) (async) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)=0x3, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000000, 0x3, 0x1, 0x0, 0x40}) 13:10:16 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x3, 0x1, {0x2, @sliced={0x0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4], 0x9}}, 0x7fff}) 13:10:16 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:10:16 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000040)=0x3) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x1}]}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000080)={0x5, 0x56595559, 0x1, @stepwise={0x0, 0x0, 0x3, 0x4, 0x2, 0x401}}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0)=0x3, 0x4) 13:10:16 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) 13:10:16 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) 13:10:17 executing program 4: getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x36314d59, 0x0, 0x0, [{}, {}, {0x0, 0x303f277c}, {0x0, 0x2}], 0x0, 0x0, 0x4}}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x91dd, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x2, 0x1, 0x1, "86d247c88aee3b37a8b0940907a3343e1f5d615786729724c54db59d8e38dc54", 0x34325842}) 13:10:17 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xfffffc00, 0x2, 0x3, "5e5829734711ecc0b56bc92a91efb6c43c697aff9f0ebefd18d5986ed811cd8c", 0x4f565559}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xfffffc00, 0x2, 0x3, "5e5829734711ecc0b56bc92a91efb6c43c697aff9f0ebefd18d5986ed811cd8c", 0x4f565559}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) (async) 13:10:17 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:10:17 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 13:10:17 executing program 2: ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000080)={0x0, 0x2, 0x101, &(0x7f0000000040)=0x7f}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44014}, 0x400c000) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) getpeername$l2tp(r1, &(0x7f00000001c0), &(0x7f0000000200)=0x10) 13:10:17 executing program 4: getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x36314d59, 0x0, 0x0, [{}, {}, {0x0, 0x303f277c}, {0x0, 0x2}], 0x0, 0x0, 0x4}}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x91dd, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x2, 0x1, 0x1, "86d247c88aee3b37a8b0940907a3343e1f5d615786729724c54db59d8e38dc54", 0x34325842}) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x36314d59, 0x0, 0x0, [{}, {}, {0x0, 0x303f277c}, {0x0, 0x2}], 0x0, 0x0, 0x4}}) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x91dd, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x2, 0x1, 0x1, "86d247c88aee3b37a8b0940907a3343e1f5d615786729724c54db59d8e38dc54", 0x34325842}) (async) 13:10:17 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xfffffc00, 0x2, 0x3, "5e5829734711ecc0b56bc92a91efb6c43c697aff9f0ebefd18d5986ed811cd8c", 0x4f565559}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:10:18 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) [ 882.970976] Bluetooth: hci3: command 0x0409 tx timeout [ 885.050949] Bluetooth: hci3: command 0x041b tx timeout [ 886.113747] device hsr_slave_1 left promiscuous mode [ 886.132509] device hsr_slave_0 left promiscuous mode [ 886.152853] team0 (unregistering): Port device team_slave_1 removed [ 886.165195] team0 (unregistering): Port device team_slave_0 removed [ 886.177135] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 886.195532] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 886.245886] bond0 (unregistering): Released all slaves [ 886.267156] IPVS: ftp: loaded support on port[0] = 21 [ 886.440535] chnl_net:caif_netlink_parms(): no params data found [ 886.566432] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.585795] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.601933] device bridge_slave_0 entered promiscuous mode [ 886.613098] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.619506] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.641918] device bridge_slave_1 entered promiscuous mode [ 886.694962] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 886.727408] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 886.788117] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 886.816261] team0: Port device team_slave_0 added [ 886.823303] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 886.834071] team0: Port device team_slave_1 added [ 886.906135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 886.912525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.944456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 886.959723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 886.969240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 887.000372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 887.043104] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 887.075797] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 887.130923] Bluetooth: hci3: command 0x040f tx timeout [ 887.137330] device hsr_slave_0 entered promiscuous mode [ 887.156266] device hsr_slave_1 entered promiscuous mode [ 887.176894] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 887.196934] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 887.349784] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 887.416261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 887.426964] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 887.442354] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 887.449053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 887.463120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 887.473151] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 887.479228] 8021q: adding VLAN 0 to HW filter on device team0 [ 887.496437] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 887.509434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 887.518878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 887.538624] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.545059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 887.561633] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 887.577305] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 887.586066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 887.599379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 887.608176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 887.622346] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.628702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 887.641722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 887.652252] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 887.669273] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 887.676388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 887.691554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 887.699596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 887.716572] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 887.727018] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 887.738424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 887.749089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 887.764749] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 887.777645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 887.786668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 887.803231] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 887.817656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 887.825768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 887.840584] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 887.847969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 888.010209] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 888.037622] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 888.046073] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 888.058829] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 888.072433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 888.144249] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 888.154782] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 888.164388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 888.173975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 888.233943] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 888.248923] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 888.256380] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 888.273083] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 888.279759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 888.293752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 888.306715] device veth0_vlan entered promiscuous mode [ 888.315469] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 888.324204] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 888.335891] device veth1_vlan entered promiscuous mode [ 888.357056] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 888.367047] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 888.376770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 888.388849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 888.409606] device veth0_macvtap entered promiscuous mode [ 888.417984] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 888.429883] device veth1_macvtap entered promiscuous mode [ 888.437144] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 888.448240] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 888.464679] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 888.474901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 888.485959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.496650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 888.507288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.517439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 888.528347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.545781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 888.581359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.608013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 888.635234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.661554] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 888.680819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 888.687705] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 888.770935] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 888.778330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 888.801393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 888.835641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 888.860055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.890654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 888.900395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.916173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 888.926007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.935171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 888.944974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.954186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 888.964066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.974851] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 888.982322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 888.989194] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 889.135575] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 889.147187] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 889.152008] CPU: 0 PID: 9576 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 889.159455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 889.168895] Call Trace: [ 889.171487] dump_stack+0x1fc/0x2ef [ 889.175224] dump_header+0x15d/0xc3f [ 889.178946] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 889.184060] ? ___ratelimit+0x319/0x590 [ 889.188038] oom_kill_process.cold+0x10/0x692 [ 889.192527] ? check_preemption_disabled+0x41/0x280 [ 889.197539] ? has_intersects_mems_allowed+0x1d6/0x290 [ 889.202818] out_of_memory+0x1072/0x1390 [ 889.206888] ? oom_killer_disable+0x270/0x270 [ 889.211387] ? mutex_trylock+0x15f/0x1a0 [ 889.215445] __alloc_pages_nodemask+0x23a2/0x2890 [ 889.220277] ? find_get_entry+0x4cd/0x8a0 [ 889.224436] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 889.229288] alloc_pages_current+0x193/0x2a0 [ 889.233700] filemap_fault+0x146e/0x2180 [ 889.237780] ext4_filemap_fault+0x84/0xb0 [ 889.241933] __do_fault+0x10b/0x4b0 [ 889.245567] __handle_mm_fault+0x273b/0x41c0 [ 889.250079] ? vm_insert_page+0x9c0/0x9c0 [ 889.254230] ? __fget+0x356/0x510 [ 889.257705] ? check_preemption_disabled+0x41/0x280 [ 889.262735] handle_mm_fault+0x436/0xb10 [ 889.266833] __do_page_fault+0x68e/0xd60 [ 889.270920] ? trace_hardirqs_off_caller+0x6e/0x210 [ 889.275940] ? spurious_fault+0x840/0x840 [ 889.280125] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 889.284985] ? page_fault+0x8/0x30 [ 889.288621] page_fault+0x1e/0x30 [ 889.292081] RIP: 0033:0x403ace [ 889.295280] Code: Bad RIP value. [ 889.298646] RSP: 002b:000000c00049f778 EFLAGS: 00010246 [ 889.304103] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000403ace [ 889.311556] RDX: 0000000000000080 RSI: 000000c00049f840 RDI: 0000000000000004 [ 889.318826] RBP: 000000c00049f7c0 R08: 0000000000000000 R09: 0000000000000000 [ 889.326265] R10: 00000000000000c8 R11: 0000000000000246 R12: 000000c00049f850 [ 889.333632] R13: 0000000000000000 R14: 000000c000b3eea0 R15: 0000000000000001 [ 889.343704] Bluetooth: hci3: command 0x0419 tx timeout [ 889.366532] Mem-Info: [ 889.369382] active_anon:16518 inactive_anon:23145 isolated_anon:0 [ 889.369382] active_file:4 inactive_file:17 isolated_file:0 [ 889.369382] unevictable:0 dirty:2 writeback:0 unstable:0 [ 889.369382] slab_reclaimable:15430 slab_unreclaimable:116788 [ 889.369382] mapped:22400 shmem:23838 pagetables:578 bounce:0 [ 889.369382] free:25198 free_pcp:169 free_cma:0 [ 889.431167] Node 0 active_anon:64656kB inactive_anon:19284kB active_file:8kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87828kB dirty:0kB writeback:0kB shmem:21604kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 889.579786] Node 1 active_anon:1416kB inactive_anon:73296kB active_file:4kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1772kB dirty:8kB writeback:0kB shmem:73748kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 889.694007] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 889.738533] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 889.743668] Node 0 DMA32 free:36124kB min:35996kB low:44992kB high:53988kB active_anon:64656kB inactive_anon:19284kB active_file:36kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7616kB pagetables:2208kB bounce:0kB free_pcp:260kB local_pcp:0kB free_cma:0kB [ 889.798963] lowmem_reserve[]: 0 0 1 1 1 [ 889.805652] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 889.810858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 889.833523] lowmem_reserve[]: 0 0 0 0 0 [ 889.868019] Node 1 Normal free:53272kB min:53876kB low:67344kB high:80812kB active_anon:1416kB inactive_anon:73296kB active_file:0kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:104kB bounce:0kB free_pcp:764kB local_pcp:448kB free_cma:0kB [ 889.911229] lowmem_reserve[]: 0 0 0 0 0 [ 889.915244] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10984kB [ 889.958603] Node 0 DMA32: 2189*4kB (UME) 1096*8kB (ME) 316*16kB (UME) 91*32kB (UME) 27*64kB (UME) 8*128kB (ME) 4*256kB (UM) 3*512kB (UM) 1*1024kB (M) 2*2048kB (M) 0*4096kB = 35924kB [ 889.977226] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 889.997067] Node 1 Normal: 89*4kB (ME) 89*8kB (ME) 109*16kB (ME) 82*32kB (UME) 59*64kB (UME) 25*128kB (ME) 3*256kB (ME) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 8*4096kB (U) = 53628kB [ 890.019174] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 890.028185] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 890.039024] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 890.053570] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 890.069360] 23880 total pagecache pages [ 890.073440] 0 pages in swap cache [ 890.076892] Swap cache stats: add 0, delete 0, find 0/0 [ 890.088030] Free swap = 0kB [ 890.096929] Total swap = 0kB [ 890.099970] 2097051 pages RAM [ 890.110536] 0 pages HighMem/MovableOnly [ 890.114737] 369649 pages reserved [ 890.118192] 0 pages cma reserved [ 890.125977] Unreclaimable slab info: [ 890.129850] Name Used Total [ 890.139739] pid_2 78KB 152KB [ 890.146430] batadv_tt_change_cache 3KB 3KB [ 890.155465] batadv_tl_cache 8KB 12KB [ 890.169780] TIPC 13KB 15KB [ 890.177811] SCTPv6 18KB 24KB [ 890.195891] SCTP 5KB 7KB [ 890.204209] DCCPv6 20KB 30KB [ 890.209607] DCCP 16KB 21KB [ 890.226275] RXRPC 13KB 13KB [ 890.231768] rxrpc_call_jar 90KB 94KB [ 890.237389] bridge_fdb_cache 13KB 15KB [ 890.243967] fib6_nodes 167KB 188KB [ 890.249363] ip6_dst_cache 145KB 311KB [ 890.257501] RAWv6 81KB 81KB [ 890.263002] UDPv6 30KB 33KB [ 890.268403] TCPv6 24KB 36KB [ 890.287732] nf_conntrack 4KB 18KB [ 890.293319] t10_alua_lu_gp_cache 0KB 3KB [ 890.298952] sd_ext_cdb 0KB 7KB [ 890.311508] scsi_sense_cache 1056KB 1060KB [ 890.316889] virtio_scsi_cmd 16KB 16KB [ 890.325959] sgpool-128 8KB 8KB [ 890.335251] sgpool-64 4KB 12KB [ 890.344339] sgpool-32 2KB 15KB [ 890.349709] sgpool-16 1KB 7KB [ 890.358757] sgpool-8 0KB 7KB [ 890.368813] mqueue_inode_cache 12KB 22KB [ 890.377004] bio_post_read_ctx 14KB 15KB [ 890.384291] bio-2 14KB 15KB [ 890.389666] jfs_mp 7KB 7KB [ 890.401863] cifs_small_rq 15KB 16KB [ 890.407250] cifs_request 67KB 67KB [ 890.414171] cifs_mpx_ids 0KB 7KB [ 890.419593] nfs_commit_data 3KB 14KB [ 890.434869] nfs_write_data 34KB 44KB [ 890.440267] ext4_system_zone 1KB 7KB [ 890.449629] bio-1 1KB 7KB [ 890.464691] pid_namespace 2KB 7KB [ 890.470109] rpc_buffers 17KB 25KB [ 890.475548] rpc_tasks 2KB 7KB [ 890.485160] UNIX 731KB 735KB [ 890.494176] tcp_bind_bucket 2KB 4KB [ 890.499561] ip_fib_trie 28KB 31KB [ 890.508594] ip_fib_alias 134KB 134KB [ 890.514711] ip_dst_cache 11KB 48KB [ 890.520166] RAW 48KB 52KB [ 890.529676] UDP 55KB 67KB [ 890.538749] TCP 8KB 11KB [ 890.547927] hugetlbfs_inode_cache 3KB 15KB [ 890.557281] fscache_cookie_jar 1KB 11KB [ 890.566460] eventpoll_pwq 24KB 47KB [ 890.575422] eventpoll_epi 45KB 66KB [ 890.584373] inotify_inode_mark 17KB 51KB [ 890.589830] request_queue 199KB 199KB [ 890.598401] blkdev_requests 1KB 3KB [ 890.610974] blkdev_ioc 25KB 34KB [ 890.616347] bio-0 1302KB 1357KB [ 890.636848] biovec-max 1699KB 1740KB [ 890.645802] biovec-64 1336KB 1401KB [ 890.665476] biovec-16 122KB 135KB [ 890.678170] bio_integrity_payload 1KB 8KB [ 890.687607] khugepaged_mm_slot 11KB 34KB [ 890.700392] uid_cache 0KB 4KB [ 890.709552] dmaengine-unmap-2 0KB 3KB [ 890.718466] skbuff_fclone_cache 116KB 138KB [ 890.729143] skbuff_head_cache 7083KB 7083KB [ 890.745488] configfs_dir_cache 3KB 11KB [ 890.750996] file_lock_cache 72KB 150KB [ 890.756359] file_lock_ctx 9KB 11KB [ 890.772483] fsnotify_mark_connector 9KB 31KB [ 890.778382] net_namespace 61KB 61KB [ 890.787897] shmem_inode_cache 8149KB 8275KB [ 890.799246] task_delay_info 231KB 407KB [ 890.808246] taskstats 78KB 141KB [ 890.817699] proc_dir_entry 759KB 761KB [ 890.828511] pde_opener 9KB 54KB [ 890.834899] seq_file 283KB 527KB [ 890.840271] sigqueue 49KB 59KB [ 890.847353] kernfs_node_cache 18161KB 18171KB [ 890.854032] mnt_cache 190KB 200KB [ 890.859407] filp 6886KB 7612KB [ 890.871669] names_cache 133288KB 133343KB [ 890.877042] iint_cache 32KB 67KB [ 890.884020] key_jar 4KB 11KB [ 890.889389] uts_namespace 3KB 7KB [ 890.905656] nsproxy 1KB 7KB [ 890.914725] vm_area_struct 3585KB 4880KB [ 890.920104] mm_struct 529KB 793KB [ 890.937660] fs_cache 166KB 336KB [ 890.946800] files_cache 550KB 558KB [ 890.959363] signal_cache 1108KB 1487KB [ 890.968413] sighand_cache 640KB 645KB [ 890.980159] task_struct 7739KB 7739KB [ 890.990312] cred_jar 1709KB 2152KB [ 891.010163] anon_vma_chain 1201KB 1803KB [ 891.018110] anon_vma 146KB 265KB [ 891.030189] pid 82KB 260KB [ 891.038772] Acpi-Operand 156KB 202KB [ 891.044485] Acpi-ParseExt 8KB 11KB [ 891.049895] Acpi-Parse 41KB 47KB [ 891.064297] Acpi-State 52KB 63KB [ 891.069753] Acpi-Namespace 21KB 27KB [ 891.078888] numa_policy 0KB 3KB [ 891.087948] debug_objects_cache 1183KB 1568KB [ 891.097182] trace_event_file 297KB 298KB [ 891.106331] ftrace_event_field 398KB 401KB [ 891.114130] pool_workqueue 126KB 128KB [ 891.119502] page->ptl 608KB 1047KB [ 891.135011] kmalloc-2097152 2050KB 2050KB [ 891.140391] kmalloc-524288 2056KB 2056KB [ 891.147495] kmalloc-262144 1290KB 1290KB [ 891.152960] kmalloc-131072 650KB 650KB [ 891.158318] kmalloc-65536 2112KB 2178KB [ 891.167501] kmalloc-32768 1815KB 1815KB [ 891.173005] kmalloc-16384 1056KB 1155KB [ 891.178378] kmalloc-8192 4240KB 4240KB [ 891.187450] kmalloc-4096 21917KB 21917KB [ 891.192913] kmalloc-2048 13568KB 13572KB [ 891.198446] kmalloc-1024 7446KB 7812KB [ 891.209815] kmalloc-512 15005KB 15135KB [ 891.215512] kmalloc-256 4690KB 5223KB [ 891.224662] kmalloc-128 1100KB 1488KB [ 891.230044] kmalloc-96 3558KB 4020KB [ 891.237024] kmalloc-64 2637KB 4208KB [ 891.246187] kmalloc-32 1929KB 2445KB [ 891.251663] kmalloc-192 1682KB 2280KB [ 891.257130] kmem_cache 177KB 183KB [ 891.264506] Out of memory (oom_kill_allocating_task): Kill process 9576 (syz-fuzzer) score 0 or sacrifice child [ 891.274871] Killed process 8129 (syz-executor.0) total-vm:48512kB, anon-rss:436kB, file-rss:4kB, shmem-rss:0kB [ 891.324074] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 891.399707] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 891.446202] CPU: 1 PID: 8108 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 891.453685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 891.463037] Call Trace: [ 891.465639] dump_stack+0x1fc/0x2ef [ 891.469286] dump_header+0x15d/0xc3f [ 891.473016] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 891.478125] ? ___ratelimit+0x319/0x590 [ 891.482103] oom_kill_process.cold+0x10/0x692 [ 891.486604] ? check_preemption_disabled+0x41/0x280 [ 891.491816] ? has_intersects_mems_allowed+0x1d6/0x290 [ 891.497092] out_of_memory+0x1072/0x1390 [ 891.501167] ? oom_killer_disable+0x270/0x270 [ 891.505665] ? mutex_trylock+0x15f/0x1a0 [ 891.509728] __alloc_pages_nodemask+0x23a2/0x2890 [ 891.514578] ? find_get_entry+0x4cd/0x8a0 [ 891.518736] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 891.523632] alloc_pages_current+0x193/0x2a0 [ 891.528038] filemap_fault+0x146e/0x2180 [ 891.532121] ext4_filemap_fault+0x84/0xb0 [ 891.536308] __do_fault+0x10b/0x4b0 [ 891.539934] __handle_mm_fault+0x273b/0x41c0 [ 891.544354] ? vm_insert_page+0x9c0/0x9c0 [ 891.548516] ? check_preemption_disabled+0x41/0x280 [ 891.553547] handle_mm_fault+0x436/0xb10 [ 891.557620] __do_page_fault+0x68e/0xd60 [ 891.561709] ? trace_hardirqs_off_caller+0x6e/0x210 [ 891.566812] ? spurious_fault+0x840/0x840 [ 891.570964] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 891.575813] ? page_fault+0x8/0x30 [ 891.579353] page_fault+0x1e/0x30 [ 891.582802] RIP: 0033:0x46b100 [ 891.585999] Code: Bad RIP value. [ 891.589359] RSP: 002b:000000c000067f28 EFLAGS: 00010206 [ 891.594716] RAX: 0000000001ec3878 RBX: 000000c000058000 RCX: 000000000000003e [ 891.601981] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000c000067e7c [ 891.609245] RBP: 000000c000067f90 R08: 00007ffde85ca000 R09: 000000e46ce69de4 [ 891.616512] R10: 0016a8e6f1a8cf88 R11: 0000000000000001 R12: 000000c000067eb0 [ 891.623789] R13: 000000c00086a000 R14: 000000c0000064e0 R15: 0000000000000001 [ 891.686484] Mem-Info: [ 891.688947] active_anon:16518 inactive_anon:23145 isolated_anon:0 [ 891.688947] active_file:25 inactive_file:13 isolated_file:0 [ 891.688947] unevictable:0 dirty:0 writeback:0 unstable:0 [ 891.688947] slab_reclaimable:15431 slab_unreclaimable:116466 [ 891.688947] mapped:22418 shmem:23838 pagetables:578 bounce:0 [ 891.688947] free:25181 free_pcp:48 free_cma:0 [ 891.790638] Node 0 active_anon:64536kB inactive_anon:19284kB active_file:64kB inactive_file:184kB unevictable:0kB isolated(anon):0kB isolated(file):116kB mapped:88124kB dirty:0kB writeback:0kB shmem:21604kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 891.823571] Node 1 active_anon:1416kB inactive_anon:73296kB active_file:28kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1708kB dirty:0kB writeback:0kB shmem:73748kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 891.853326] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 891.880618] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 891.885663] Node 0 DMA32 free:35472kB min:35996kB low:44992kB high:53988kB active_anon:64536kB inactive_anon:19284kB active_file:108kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7584kB pagetables:2100kB bounce:0kB free_pcp:1192kB local_pcp:944kB free_cma:0kB [ 891.916133] lowmem_reserve[]: 0 0 1 1 1 [ 891.920133] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 891.954067] lowmem_reserve[]: 0 0 0 0 0 [ 891.958192] Node 1 Normal free:53280kB min:53876kB low:67344kB high:80812kB active_anon:1416kB inactive_anon:73296kB active_file:28kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:104kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 891.990148] lowmem_reserve[]: 0 0 0 0 0 [ 891.994205] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10984kB [ 892.011024] Node 0 DMA32: 2211*4kB (ME) 1101*8kB (ME) 323*16kB (UME) 93*32kB (UME) 27*64kB (UME) 10*128kB (UME) 5*256kB (UM) 3*512kB (UM) 1*1024kB (M) 2*2048kB (M) 0*4096kB = 36740kB [ 892.027573] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 892.042300] Node 1 Normal: 143*4kB (ME) 119*8kB (UME) 110*16kB (UME) 82*32kB (UME) 59*64kB (UME) 25*128kB (ME) 3*256kB (ME) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 8*4096kB (U) = 53588kB [ 892.064515] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 892.073522] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 892.090411] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 892.107955] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 892.117446] 23885 total pagecache pages [ 892.124642] 0 pages in swap cache [ 892.128111] Swap cache stats: add 0, delete 0, find 0/0 [ 892.138769] Free swap = 0kB [ 892.148753] Total swap = 0kB [ 892.159987] 2097051 pages RAM [ 892.164119] 0 pages HighMem/MovableOnly [ 892.168092] 369649 pages reserved [ 892.175634] 0 pages cma reserved [ 892.179041] Unreclaimable slab info: [ 892.188074] Name Used Total [ 892.208089] pid_2 78KB 152KB [ 892.217089] batadv_tt_change_cache 1KB 3KB [ 892.225372] batadv_tl_cache 6KB 12KB [ 892.240390] TIPC 12KB 15KB [ 892.245847] SCTPv6 16KB 24KB [ 892.253030] SCTP 5KB 7KB [ 892.258427] DCCPv6 17KB 30KB [ 892.268385] DCCP 16KB 21KB [ 892.277582] RXRPC 13KB 13KB [ 892.290354] rxrpc_call_jar 90KB 94KB [ 892.306047] bridge_fdb_cache 12KB 15KB [ 892.314090] fib6_nodes 166KB 188KB [ 892.319556] ip6_dst_cache 145KB 311KB [ 892.326196] RAWv6 81KB 81KB [ 892.335575] UDPv6 28KB 33KB [ 892.341003] TCPv6 24KB 36KB [ 892.346374] nf_conntrack 4KB 15KB [ 892.354044] t10_alua_lu_gp_cache 0KB 3KB [ 892.359686] sd_ext_cdb 0KB 7KB [ 892.377663] scsi_sense_cache 1056KB 1060KB [ 892.384015] virtio_scsi_cmd 16KB 16KB [ 892.389400] sgpool-128 8KB 8KB [ 892.397277] sgpool-64 4KB 12KB [ 892.410133] sgpool-32 2KB 15KB [ 892.419080] sgpool-16 1KB 7KB [ 892.425458] sgpool-8 0KB 7KB [ 892.435304] mqueue_inode_cache 12KB 22KB [ 892.440821] bio_post_read_ctx 14KB 15KB [ 892.446252] bio-2 14KB 15KB [ 892.452555] jfs_mp 7KB 7KB [ 892.458237] cifs_small_rq 15KB 16KB [ 892.467763] cifs_request 67KB 67KB [ 892.477381] cifs_mpx_ids 0KB 7KB [ 892.486609] nfs_commit_data 3KB 14KB [ 892.493934] nfs_write_data 34KB 44KB [ 892.499445] ext4_system_zone 1KB 7KB [ 892.508545] bio-1 1KB 7KB [ 892.524277] pid_namespace 2KB 7KB [ 892.529668] rpc_buffers 17KB 25KB [ 892.536944] rpc_tasks 2KB 7KB [ 892.546777] UNIX 727KB 735KB [ 892.555752] tcp_bind_bucket 1KB 4KB [ 892.565593] ip_fib_trie 27KB 31KB [ 892.575235] ip_fib_alias 132KB 134KB [ 892.585130] ip_dst_cache 10KB 48KB [ 892.594129] RAW 48KB 52KB [ 892.599502] UDP 47KB 67KB [ 892.608774] TCP 8KB 11KB [ 892.617419] hugetlbfs_inode_cache 3KB 15KB [ 892.624171] fscache_cookie_jar 1KB 11KB [ 892.629635] eventpoll_pwq 23KB 47KB [ 892.638744] eventpoll_epi 44KB 66KB [ 892.647802] inotify_inode_mark 17KB 51KB [ 892.665936] request_queue 199KB 199KB [ 892.675128] blkdev_requests 1KB 3KB [ 892.684150] blkdev_ioc 25KB 34KB [ 892.689526] bio-0 1310KB 1357KB [ 892.707646] biovec-max 1683KB 1740KB [ 892.713998] biovec-64 1359KB 1401KB [ 892.719359] biovec-16 130KB 135KB [ 892.727782] bio_integrity_payload 1KB 8KB [ 892.737143] khugepaged_mm_slot 10KB 34KB [ 892.746660] uid_cache 0KB 4KB [ 892.753893] dmaengine-unmap-2 0KB 3KB [ 892.759283] skbuff_fclone_cache 115KB 138KB [ 892.767076] skbuff_head_cache 7206KB 7207KB [ 892.778869] configfs_dir_cache 3KB 11KB [ 892.784396] file_lock_cache 71KB 150KB [ 892.789762] file_lock_ctx 9KB 11KB [ 892.797177] fsnotify_mark_connector 9KB 31KB [ 892.809443] net_namespace 61KB 61KB [ 892.814926] shmem_inode_cache 8143KB 8271KB [ 892.827900] task_delay_info 225KB 407KB [ 892.833372] taskstats 77KB 141KB [ 892.838739] proc_dir_entry 759KB 761KB [ 892.851372] pde_opener 7KB 54KB [ 892.856754] seq_file 275KB 519KB [ 892.862280] sigqueue 49KB 59KB [ 892.867647] kernfs_node_cache 18160KB 18171KB [ 892.879222] mnt_cache 190KB 200KB [ 892.896784] filp 6873KB 7612KB [ 892.902236] names_cache 132353KB 132408KB [ 892.907602] iint_cache 32KB 67KB [ 892.916782] key_jar 4KB 11KB [ 892.922210] uts_namespace 3KB 7KB [ 892.927748] nsproxy 1KB 7KB [ 892.936697] vm_area_struct 3582KB 4880KB [ 892.942126] mm_struct 518KB 793KB [ 892.947489] fs_cache 154KB 336KB [ 892.956626] files_cache 535KB 558KB [ 892.962181] signal_cache 1098KB 1487KB [ 892.967568] sighand_cache 571KB 645KB [ 892.976901] task_struct 7739KB 7739KB [ 892.982392] cred_jar 1697KB 2152KB [ 892.987798] anon_vma_chain 1198KB 1803KB [ 892.996738] anon_vma 132KB 265KB [ 893.002209] pid 76KB 260KB [ 893.007580] Acpi-Operand 156KB 202KB [ 893.016628] Acpi-ParseExt 8KB 11KB [ 893.022246] Acpi-Parse 41KB 47KB [ 893.027606] Acpi-State 52KB 63KB [ 893.036546] Acpi-Namespace 21KB 27KB [ 893.042327] numa_policy 0KB 3KB [ 893.047711] debug_objects_cache 1180KB 1568KB [ 893.056903] trace_event_file 297KB 298KB [ 893.062326] ftrace_event_field 398KB 401KB [ 893.067806] pool_workqueue 126KB 128KB [ 893.076922] page->ptl 604KB 1047KB [ 893.082414] kmalloc-2097152 2050KB 2050KB [ 893.087783] kmalloc-524288 2056KB 2056KB [ 893.096734] kmalloc-262144 1290KB 1290KB [ 893.102270] kmalloc-131072 650KB 650KB [ 893.107636] kmalloc-65536 2112KB 2178KB [ 893.116668] kmalloc-32768 1815KB 1815KB [ 893.122118] kmalloc-16384 1056KB 1138KB [ 893.127481] kmalloc-8192 4240KB 4240KB [ 893.136450] kmalloc-4096 21908KB 21917KB [ 893.141854] kmalloc-2048 13563KB 13572KB [ 893.147338] kmalloc-1024 7486KB 7812KB [ 893.156304] kmalloc-512 15241KB 15371KB [ 893.161739] kmalloc-256 4690KB 5223KB [ 893.167107] kmalloc-128 1100KB 1488KB [ 893.176094] kmalloc-96 3573KB 4020KB [ 893.181522] kmalloc-64 2637KB 4208KB [ 893.186901] kmalloc-32 1936KB 2445KB [ 893.195946] kmalloc-192 1682KB 2280KB [ 893.201383] kmem_cache 177KB 183KB [ 893.206799] Out of memory (oom_kill_allocating_task): Kill process 8108 (syz-fuzzer) score 0 or sacrifice child [ 893.220895] Killed process 8137 (syz-executor.3) total-vm:48512kB, anon-rss:440kB, file-rss:4kB, shmem-rss:0kB [ 893.231823] oom_reaper: reaped process 8137 (syz-executor.3), now anon-rss:0kB, file-rss:14336kB, shmem-rss:0kB [ 893.234765] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 893.257241] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 893.262102] CPU: 0 PID: 8108 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 893.269557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 893.278918] Call Trace: [ 893.281520] dump_stack+0x1fc/0x2ef [ 893.285160] dump_header+0x15d/0xc3f [ 893.288982] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 893.294095] ? ___ratelimit+0x319/0x590 [ 893.298078] oom_kill_process.cold+0x10/0x692 [ 893.302577] ? check_preemption_disabled+0x41/0x280 [ 893.307582] ? has_intersects_mems_allowed+0x1d6/0x290 [ 893.312866] out_of_memory+0x1072/0x1390 [ 893.316942] ? oom_killer_disable+0x270/0x270 [ 893.321436] ? mutex_trylock+0x15f/0x1a0 [ 893.325488] __alloc_pages_nodemask+0x23a2/0x2890 [ 893.330891] ? find_get_entry+0x4cd/0x8a0 [ 893.335029] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 893.339870] alloc_pages_current+0x193/0x2a0 [ 893.344277] filemap_fault+0x146e/0x2180 [ 893.348330] ext4_filemap_fault+0x84/0xb0 [ 893.352574] __do_fault+0x10b/0x4b0 [ 893.356187] __handle_mm_fault+0x273b/0x41c0 [ 893.360585] ? vm_insert_page+0x9c0/0x9c0 [ 893.364752] ? check_preemption_disabled+0x41/0x280 [ 893.369780] handle_mm_fault+0x436/0xb10 [ 893.373833] __do_page_fault+0x68e/0xd60 [ 893.377887] ? trace_hardirqs_off_caller+0x6e/0x210 [ 893.382892] ? spurious_fault+0x840/0x840 [ 893.387033] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 893.391870] ? page_fault+0x8/0x30 [ 893.395404] page_fault+0x1e/0x30 [ 893.398854] RIP: 0033:0x46b100 [ 893.402130] Code: Bad RIP value. [ 893.405498] RSP: 002b:000000c000067f28 EFLAGS: 00010206 [ 893.410859] RAX: 0000000001ec3878 RBX: 000000c000058000 RCX: 000000000000003e [ 893.418124] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000c000067e7c [ 893.425379] RBP: 000000c000067f90 R08: 00007ffde85ca000 R09: 000000e46ce69de4 [ 893.432632] R10: 0016a8e6f1a8cf88 R11: 0000000000000001 R12: 000000c000067eb0 [ 893.439882] R13: 000000c00086a000 R14: 000000c0000064e0 R15: 0000000000000001 [ 893.448390] Mem-Info: [ 893.475739] active_anon:16363 inactive_anon:23145 isolated_anon:0 [ 893.475739] active_file:11 inactive_file:887 isolated_file:0 [ 893.475739] unevictable:0 dirty:0 writeback:0 unstable:0 [ 893.475739] slab_reclaimable:15399 slab_unreclaimable:116566 [ 893.475739] mapped:19318 shmem:23838 pagetables:514 bounce:0 [ 893.475739] free:26292 free_pcp:414 free_cma:0 [ 893.517876] Node 0 active_anon:64036kB inactive_anon:19284kB active_file:936kB inactive_file:3664kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:76268kB dirty:0kB writeback:0kB shmem:21604kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 893.553129] Node 1 active_anon:1416kB inactive_anon:73296kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1704kB dirty:0kB writeback:0kB shmem:73748kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 893.608278] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 893.635234] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 893.640283] Node 0 DMA32 free:36000kB min:35996kB low:44992kB high:53988kB active_anon:64036kB inactive_anon:19284kB active_file:1352kB inactive_file:1552kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:1952kB bounce:0kB free_pcp:932kB local_pcp:136kB free_cma:0kB [ 893.670880] lowmem_reserve[]: 0 0 1 1 1 [ 893.674871] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 893.702519] lowmem_reserve[]: 0 0 0 0 0 [ 893.706526] Node 1 Normal free:53588kB min:53876kB low:67344kB high:80812kB active_anon:1416kB inactive_anon:73296kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:104kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 893.747126] lowmem_reserve[]: 0 0 0 0 0 [ 893.752561] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10984kB [ 893.767493] Node 0 DMA32: 1914*4kB (UME) 1096*8kB (ME) 329*16kB (UME) 95*32kB (UME) 28*64kB (UME) 15*128kB (UME) 7*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 1*2048kB (M) 0*4096kB = 37912kB [ 893.788285] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 893.807152] Node 1 Normal: 142*4kB (ME) 118*8kB (UME) 109*16kB (UME) 81*32kB (UME) 60*64kB (UME) 25*128kB (ME) 3*256kB (ME) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 8*4096kB (U) = 53592kB [ 893.832932] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 893.857359] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 893.866098] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 893.879877] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 893.889819] 24273 total pagecache pages [ 893.894567] 0 pages in swap cache [ 893.899647] Swap cache stats: add 0, delete 0, find 0/0 [ 893.905076] Free swap = 0kB [ 893.908092] Total swap = 0kB [ 893.915257] 2097051 pages RAM [ 893.918371] 0 pages HighMem/MovableOnly [ 893.927653] 369649 pages reserved [ 893.932953] 0 pages cma reserved [ 893.936353] Unreclaimable slab info: [ 893.940063] Name Used Total [ 893.951000] pid_2 78KB 152KB [ 893.956488] batadv_tt_change_cache 1KB 3KB [ 893.966463] batadv_tl_cache 6KB 12KB [ 893.972707] TIPC 12KB 15KB [ 893.978097] SCTPv6 16KB 24KB [ 893.987685] SCTP 5KB 7KB [ 893.993951] DCCPv6 17KB 30KB [ 893.999344] DCCP 16KB 21KB [ 894.009545] RXRPC 13KB 13KB [ 894.015846] rxrpc_call_jar 90KB 94KB [ 894.025635] bridge_fdb_cache 11KB 15KB [ 894.031759] fib6_nodes 166KB 188KB [ 894.037133] ip6_dst_cache 145KB 311KB [ 894.046681] RAWv6 81KB 81KB [ 894.056615] UDPv6 28KB 33KB [ 894.066163] TCPv6 24KB 36KB [ 894.073719] nf_conntrack 4KB 15KB [ 894.079240] t10_alua_lu_gp_cache 0KB 3KB [ 894.086976] sd_ext_cdb 0KB 7KB [ 894.096827] scsi_sense_cache 1056KB 1060KB [ 894.106867] virtio_scsi_cmd 16KB 16KB [ 894.116782] sgpool-128 8KB 8KB [ 894.127413] sgpool-64 4KB 12KB [ 894.132889] sgpool-32 2KB 15KB [ 894.138251] sgpool-16 1KB 7KB [ 894.144511] sgpool-8 0KB 7KB [ 894.149889] mqueue_inode_cache 12KB 22KB [ 894.157230] bio_post_read_ctx 14KB 15KB [ 894.166423] bio-2 14KB 15KB [ 894.177290] jfs_mp 7KB 7KB [ 894.185857] cifs_small_rq 15KB 16KB [ 894.191287] cifs_request 67KB 67KB [ 894.196641] cifs_mpx_ids 0KB 7KB [ 894.208543] nfs_commit_data 3KB 14KB [ 894.217436] nfs_write_data 34KB 44KB [ 894.226464] ext4_system_zone 1KB 7KB [ 894.238653] bio-1 1KB 7KB [ 894.246585] pid_namespace 2KB 7KB [ 894.252074] rpc_buffers 17KB 25KB [ 894.257466] rpc_tasks 2KB 7KB [ 894.267993] UNIX 733KB 735KB [ 894.276694] tcp_bind_bucket 1KB 4KB [ 894.286003] ip_fib_trie 27KB 31KB [ 894.298206] ip_fib_alias 129KB 134KB [ 894.305391] ip_dst_cache 9KB 48KB [ 894.315785] RAW 48KB 52KB [ 894.328509] UDP 45KB 67KB [ 894.335309] TCP 8KB 11KB [ 894.340798] hugetlbfs_inode_cache 3KB 15KB [ 894.346512] fscache_cookie_jar 1KB 11KB [ 894.358066] eventpoll_pwq 23KB 47KB [ 894.366133] eventpoll_epi 43KB 66KB [ 894.375315] inotify_inode_mark 16KB 51KB [ 894.388038] request_queue 199KB 199KB [ 894.394317] blkdev_requests 1KB 3KB [ 894.399699] blkdev_ioc 25KB 34KB [ 894.407510] bio-0 1358KB 1387KB [ 894.424641] biovec-max 1740KB 1740KB [ 894.430029] biovec-64 1449KB 1449KB [ 894.438916] biovec-16 136KB 138KB [ 894.445147] bio_integrity_payload 1KB 8KB [ 894.458565] khugepaged_mm_slot 10KB 34KB [ 894.464134] uid_cache 0KB 4KB [ 894.469496] dmaengine-unmap-2 0KB 3KB [ 894.483627] skbuff_fclone_cache 113KB 138KB [ 894.489207] skbuff_head_cache 7334KB 7335KB [ 894.509037] configfs_dir_cache 3KB 11KB [ 894.514544] file_lock_cache 70KB 150KB [ 894.519906] file_lock_ctx 9KB 11KB [ 894.534231] fsnotify_mark_connector 8KB 31KB [ 894.540131] net_namespace 61KB 61KB [ 894.560492] shmem_inode_cache 8136KB 8267KB [ 894.565875] task_delay_info 223KB 407KB [ 894.572030] taskstats 76KB 141KB [ 894.577408] proc_dir_entry 758KB 761KB [ 894.584664] pde_opener 7KB 54KB [ 894.590036] seq_file 268KB 515KB [ 894.609771] sigqueue 53KB 59KB [ 894.617905] kernfs_node_cache 18154KB 18171KB [ 894.629086] mnt_cache 190KB 200KB [ 894.638008] filp 6765KB 7612KB [ 894.646920] names_cache 131767KB 131822KB [ 894.655957] iint_cache 32KB 67KB [ 894.665011] key_jar 4KB 11KB [ 894.674053] uts_namespace 3KB 7KB [ 894.679593] nsproxy 1KB 7KB [ 894.686885] vm_area_struct 3578KB 4880KB [ 894.695681] mm_struct 513KB 793KB [ 894.704554] fs_cache 148KB 336KB [ 894.709921] files_cache 534KB 558KB [ 894.719209] signal_cache 1114KB 1487KB [ 894.734773] sighand_cache 559KB 638KB [ 894.740160] task_struct 7764KB 7764KB [ 894.746776] cred_jar 1697KB 2152KB [ 894.753719] anon_vma_chain 1195KB 1803KB [ 894.759089] anon_vma 121KB 265KB [ 894.767983] pid 76KB 260KB [ 894.776833] Acpi-Operand 156KB 202KB [ 894.785808] Acpi-ParseExt 8KB 11KB [ 894.794793] Acpi-Parse 41KB 47KB [ 894.800154] Acpi-State 52KB 63KB [ 894.809122] Acpi-Namespace 21KB 27KB [ 894.818173] numa_policy 0KB 3KB [ 894.828704] debug_objects_cache 1180KB 1568KB [ 894.837915] trace_event_file 297KB 298KB [ 894.846794] ftrace_event_field 398KB 401KB [ 894.855870] pool_workqueue 126KB 128KB [ 894.865003] page->ptl 600KB 1047KB [ 894.874045] kmalloc-2097152 2050KB 2050KB [ 894.879423] kmalloc-524288 2056KB 2056KB [ 894.888394] kmalloc-262144 1290KB 1290KB [ 894.897292] kmalloc-131072 650KB 650KB [ 894.906261] kmalloc-65536 2112KB 2178KB [ 894.915262] kmalloc-32768 1815KB 1815KB [ 894.925954] kmalloc-16384 1056KB 1138KB [ 894.934962] kmalloc-8192 4240KB 4240KB [ 894.943942] kmalloc-4096 21794KB 21832KB [ 894.949306] kmalloc-2048 13572KB 13578KB [ 894.958413] kmalloc-1024 7513KB 7812KB [ 894.967463] kmalloc-512 15459KB 15588KB [ 894.976298] kmalloc-256 4698KB 5223KB [ 894.985326] kmalloc-128 1100KB 1488KB [ 894.994318] kmalloc-96 3588KB 4020KB [ 894.999708] kmalloc-64 2637KB 4208KB [ 895.008657] kmalloc-32 1944KB 2445KB [ 895.017607] kmalloc-192 1682KB 2280KB [ 895.028000] kmem_cache 177KB 183KB [ 895.036929] Out of memory (oom_kill_allocating_task): Kill process 8108 (syz-fuzzer) score 0 or sacrifice child [ 895.049794] Killed process 8130 (syz-executor.5) total-vm:48512kB, anon-rss:436kB, file-rss:4kB, shmem-rss:0kB [ 895.071221] oom_reaper: reaped process 8130 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:0kB [ 895.086650] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 895.117088] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 895.125023] CPU: 0 PID: 9576 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 895.132479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 895.141817] Call Trace: [ 895.144409] dump_stack+0x1fc/0x2ef [ 895.148020] dump_header+0x15d/0xc3f [ 895.151719] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 895.156817] ? ___ratelimit+0x319/0x590 [ 895.160778] oom_kill_process.cold+0x10/0x692 [ 895.165277] ? check_preemption_disabled+0x41/0x280 [ 895.170292] ? has_intersects_mems_allowed+0x1d6/0x290 [ 895.175577] out_of_memory+0x1072/0x1390 [ 895.179728] ? oom_killer_disable+0x270/0x270 [ 895.184213] ? mutex_trylock+0x15f/0x1a0 [ 895.188279] __alloc_pages_nodemask+0x23a2/0x2890 [ 895.193785] ? find_get_entry+0x4cd/0x8a0 [ 895.197937] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 895.202794] alloc_pages_current+0x193/0x2a0 [ 895.207195] filemap_fault+0x146e/0x2180 [ 895.211267] ext4_filemap_fault+0x84/0xb0 [ 895.215410] __do_fault+0x10b/0x4b0 [ 895.219030] ? do_raw_spin_unlock+0x171/0x230 [ 895.223513] __handle_mm_fault+0x273b/0x41c0 [ 895.227916] ? vm_insert_page+0x9c0/0x9c0 [ 895.232056] ? check_preemption_disabled+0x41/0x280 [ 895.237058] handle_mm_fault+0x436/0xb10 [ 895.241122] __do_page_fault+0x68e/0xd60 [ 895.245181] ? trace_hardirqs_off_caller+0x6e/0x210 [ 895.250178] ? spurious_fault+0x840/0x840 [ 895.254308] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 895.259136] ? page_fault+0x8/0x30 [ 895.262661] page_fault+0x1e/0x30 [ 895.266107] RIP: 0033:0x4491de [ 895.269316] Code: Bad RIP value. [ 895.272665] RSP: 002b:000000c0009cfe18 EFLAGS: 00010212 [ 895.278102] RAX: 0000000000000000 RBX: 00000000004390d6 RCX: 000000c0009cf800 [ 895.285358] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000c0075fe000 [ 895.292613] RBP: 000000c0009cff48 R08: 00007ffde85ca001 R09: 000000e5bdd8edd1 [ 895.299875] R10: 001ad015675f24d1 R11: 0000000000000001 R12: 000000c00049fde8 [ 895.307386] R13: 0000000000000000 R14: 000000c0075fe000 R15: 0000000000000001 [ 895.354956] Mem-Info: [ 895.357427] active_anon:16230 inactive_anon:23145 isolated_anon:0 [ 895.357427] active_file:138 inactive_file:128 isolated_file:0 [ 895.357427] unevictable:0 dirty:0 writeback:0 unstable:0 [ 895.357427] slab_reclaimable:15396 slab_unreclaimable:116356 [ 895.357427] mapped:15384 shmem:23838 pagetables:524 bounce:0 [ 895.357427] free:25260 free_pcp:359 free_cma:0 [ 895.398493] Node 0 active_anon:63708kB inactive_anon:19284kB active_file:1036kB inactive_file:884kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:60832kB dirty:0kB writeback:0kB shmem:21604kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 895.427712] Node 1 active_anon:1412kB inactive_anon:73296kB active_file:16kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1704kB dirty:0kB writeback:0kB shmem:73748kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 895.461204] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 895.488214] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 895.493747] Node 0 DMA32 free:36760kB min:35996kB low:44992kB high:53988kB active_anon:63508kB inactive_anon:19284kB active_file:640kB inactive_file:1116kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7520kB pagetables:1992kB bounce:0kB free_pcp:2360kB local_pcp:1392kB free_cma:0kB [ 895.561568] lowmem_reserve[]: 0 0 1 1 1 [ 895.565583] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 895.595319] lowmem_reserve[]: 0 0 0 0 0 [ 895.599325] Node 1 Normal free:53592kB min:53876kB low:67344kB high:80812kB active_anon:1412kB inactive_anon:73296kB active_file:16kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:104kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 895.700474] lowmem_reserve[]: 0 0 0 0 0 [ 895.704496] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10984kB [ 895.796375] Node 0 DMA32: 1809*4kB (UME) 1128*8kB (UME) 327*16kB (UME) 90*32kB (ME) 29*64kB (UME) 10*128kB (ME) 10*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 1*2048kB (M) 0*4096kB = 36724kB [ 895.820116] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 895.838585] Node 1 Normal: 141*4kB (ME) 117*8kB (UME) 108*16kB (UME) 80*32kB (UME) 59*64kB (UME) 24*128kB (ME) 4*256kB (ME) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 8*4096kB (U) = 53596kB [ 895.866334] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 895.886029] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 895.916105] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 895.937405] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 895.957165] 23925 total pagecache pages [ 895.992071] 0 pages in swap cache [ 895.995550] Swap cache stats: add 0, delete 0, find 0/0 [ 896.012526] Free swap = 0kB [ 896.015563] Total swap = 0kB [ 896.018575] 2097051 pages RAM [ 896.059855] 0 pages HighMem/MovableOnly [ 896.082601] 369649 pages reserved [ 896.086074] 0 pages cma reserved [ 896.089473] Unreclaimable slab info: [ 896.117059] Name Used Total [ 896.122680] pid_2 78KB 152KB [ 896.140398] batadv_tt_change_cache 1KB 3KB [ 896.146227] batadv_tl_cache 5KB 12KB [ 896.160342] TIPC 12KB 15KB [ 896.165980] SCTPv6 16KB 24KB [ 896.180325] SCTP 5KB 7KB [ 896.185724] DCCPv6 17KB 30KB [ 896.220968] DCCP 16KB 21KB [ 896.226507] RXRPC 13KB 13KB [ 896.289788] rxrpc_call_jar 90KB 94KB [ 896.337135] bridge_fdb_cache 10KB 15KB [ 896.367453] fib6_nodes 165KB 188KB [ 896.423721] ip6_dst_cache 154KB 311KB [ 896.429129] RAWv6 81KB 81KB [ 896.454235] UDPv6 28KB 33KB [ 896.459633] TCPv6 24KB 36KB [ 896.488763] nf_conntrack 4KB 15KB [ 896.518022] t10_alua_lu_gp_cache 0KB 3KB [ 896.547493] sd_ext_cdb 0KB 7KB [ 896.600342] scsi_sense_cache 1056KB 1060KB [ 896.605742] virtio_scsi_cmd 16KB 16KB [ 896.677494] sgpool-128 8KB 8KB [ 896.727915] sgpool-64 4KB 12KB [ 896.749742] sgpool-32 2KB 15KB [ 896.778946] sgpool-16 1KB 7KB [ 896.853645] sgpool-8 0KB 7KB [ 896.859041] mqueue_inode_cache 12KB 22KB [ 896.889459] bio_post_read_ctx 14KB 15KB [ 896.933758] bio-2 14KB 15KB [ 896.939154] jfs_mp 7KB 7KB [ 896.987325] cifs_small_rq 15KB 16KB [ 896.998642] cifs_request 67KB 67KB [ 897.078502] cifs_mpx_ids 0KB 7KB [ 897.090029] nfs_commit_data 3KB 14KB [ 897.132935] nfs_write_data 34KB 44KB [ 897.162987] ext4_system_zone 1KB 7KB [ 897.168419] bio-1 1KB 7KB [ 897.210711] pid_namespace 2KB 7KB [ 897.228605] rpc_buffers 17KB 25KB [ 897.255173] rpc_tasks 2KB 7KB [ 897.287451] UNIX 723KB 735KB [ 897.297743] tcp_bind_bucket 1KB 4KB [ 897.305780] ip_fib_trie 28KB 31KB [ 897.314109] ip_fib_alias 131KB 134KB [ 897.319486] ip_dst_cache 9KB 48KB [ 897.327490] RAW 48KB 52KB [ 897.335450] UDP 45KB 67KB [ 897.343245] TCP 8KB 11KB [ 897.348618] hugetlbfs_inode_cache 3KB 15KB [ 897.356886] fscache_cookie_jar 1KB 11KB [ 897.365022] eventpoll_pwq 23KB 47KB [ 897.373146] eventpoll_epi 43KB 66KB [ 897.378520] inotify_inode_mark 16KB 51KB [ 897.387040] request_queue 199KB 199KB [ 897.395827] blkdev_requests 1KB 3KB [ 897.408519] blkdev_ioc 24KB 34KB [ 897.417200] bio-0 1422KB 1451KB [ 897.427415] biovec-max 1749KB 1749KB [ 897.435585] biovec-64 1472KB 1472KB [ 897.453141] biovec-16 155KB 157KB [ 897.458519] bio_integrity_payload 1KB 8KB [ 897.467162] khugepaged_mm_slot 10KB 34KB [ 897.475176] uid_cache 0KB 4KB [ 897.483903] dmaengine-unmap-2 0KB 3KB [ 897.489278] skbuff_fclone_cache 123KB 138KB [ 897.497606] skbuff_head_cache 7495KB 7503KB [ 897.505545] configfs_dir_cache 3KB 11KB [ 897.514456] file_lock_cache 70KB 150KB [ 897.519822] file_lock_ctx 9KB 11KB [ 897.529453] fsnotify_mark_connector 8KB 31KB [ 897.539156] net_namespace 61KB 61KB [ 897.549805] shmem_inode_cache 8134KB 8267KB [ 897.557799] task_delay_info 223KB 407KB [ 897.565747] taskstats 76KB 141KB [ 897.574268] proc_dir_entry 758KB 761KB [ 897.579633] pde_opener 7KB 54KB [ 897.588653] seq_file 261KB 511KB [ 897.596655] sigqueue 53KB 59KB [ 897.604556] kernfs_node_cache 18149KB 18171KB [ 897.609918] mnt_cache 190KB 200KB [ 897.618502] filp 6720KB 7612KB [ 897.626374] names_cache 130526KB 130581KB [ 897.632791] iint_cache 32KB 67KB [ 897.638160] key_jar 4KB 11KB [ 897.643591] uts_namespace 3KB 7KB [ 897.648949] nsproxy 1KB 7KB [ 897.654358] vm_area_struct 3550KB 4876KB [ 897.659718] mm_struct 511KB 793KB [ 897.665448] fs_cache 148KB 336KB [ 897.670875] files_cache 558KB 558KB [ 897.676232] signal_cache 1114KB 1487KB [ 897.682665] sighand_cache 559KB 638KB [ 897.688052] task_struct 7789KB 7789KB [ 897.695867] cred_jar 1673KB 2152KB [ 897.701336] anon_vma_chain 1183KB 1803KB [ 897.706809] anon_vma 108KB 261KB [ 897.712212] pid 78KB 260KB [ 897.717592] Acpi-Operand 156KB 202KB [ 897.722978] Acpi-ParseExt 8KB 11KB [ 897.728329] Acpi-Parse 41KB 47KB [ 897.734034] Acpi-State 52KB 63KB [ 897.739395] Acpi-Namespace 21KB 27KB [ 897.745236] numa_policy 0KB 3KB [ 897.758660] debug_objects_cache 1179KB 1568KB [ 897.769304] trace_event_file 297KB 298KB [ 897.793180] ftrace_event_field 398KB 401KB [ 897.798661] pool_workqueue 126KB 128KB [ 897.807654] page->ptl 591KB 1047KB [ 897.837471] kmalloc-2097152 2050KB 2050KB [ 897.846252] kmalloc-524288 2056KB 2056KB [ 897.916443] kmalloc-262144 1290KB 1290KB [ 897.937811] kmalloc-131072 650KB 650KB [ 897.983074] kmalloc-65536 2112KB 2178KB [ 897.988582] kmalloc-32768 1815KB 1815KB [ 898.035007] kmalloc-16384 1056KB 1138KB [ 898.068704] kmalloc-8192 4240KB 4240KB [ 898.074158] kmalloc-4096 21747KB 21785KB [ 898.079535] kmalloc-2048 13668KB 13668KB [ 898.115862] kmalloc-1024 7648KB 7812KB [ 898.128657] kmalloc-512 15721KB 15821KB [ 898.137686] kmalloc-256 4707KB 5223KB [ 898.178884] kmalloc-128 1100KB 1488KB [ 898.213022] kmalloc-96 3618KB 4020KB [ 898.218414] kmalloc-64 2644KB 4208KB [ 898.265333] kmalloc-32 1947KB 2445KB [ 898.277310] kmalloc-192 1680KB 2280KB [ 898.287601] kmem_cache 177KB 183KB [ 898.339052] Out of memory (oom_kill_allocating_task): Kill process 9576 (syz-fuzzer) score 0 or sacrifice child [ 898.356529] Killed process 8134 (syz-executor.4) total-vm:48512kB, anon-rss:436kB, file-rss:4kB, shmem-rss:0kB [ 898.367051] oom_reaper: reaped process 8134 (syz-executor.4), now anon-rss:0kB, file-rss:14336kB, shmem-rss:0kB [ 898.387794] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 898.399315] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 898.410825] CPU: 1 PID: 9576 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 898.418287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 898.427636] Call Trace: [ 898.430229] dump_stack+0x1fc/0x2ef [ 898.433862] dump_header+0x15d/0xc3f [ 898.437581] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 898.442686] ? ___ratelimit+0x319/0x590 [ 898.446669] oom_kill_process.cold+0x10/0x692 [ 898.451176] ? check_preemption_disabled+0x41/0x280 [ 898.456199] ? has_intersects_mems_allowed+0x1d6/0x290 [ 898.461478] out_of_memory+0x1072/0x1390 [ 898.465637] ? oom_killer_disable+0x270/0x270 [ 898.470181] ? mutex_trylock+0x15f/0x1a0 [ 898.474248] __alloc_pages_nodemask+0x23a2/0x2890 [ 898.479113] ? find_get_entry+0x4cd/0x8a0 [ 898.483275] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 898.488159] alloc_pages_current+0x193/0x2a0 [ 898.492575] filemap_fault+0x146e/0x2180 [ 898.496649] ext4_filemap_fault+0x84/0xb0 [ 898.500796] __do_fault+0x10b/0x4b0 [ 898.504442] ? do_raw_spin_unlock+0x171/0x230 [ 898.508951] __handle_mm_fault+0x273b/0x41c0 [ 898.513367] ? vm_insert_page+0x9c0/0x9c0 [ 898.517528] ? check_preemption_disabled+0x41/0x280 [ 898.522548] handle_mm_fault+0x436/0xb10 [ 898.526618] __do_page_fault+0x68e/0xd60 [ 898.530697] ? trace_hardirqs_off_caller+0x6e/0x210 [ 898.535712] ? spurious_fault+0x840/0x840 [ 898.539865] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 898.544720] ? page_fault+0x8/0x30 [ 898.548261] page_fault+0x1e/0x30 [ 898.551712] RIP: 0033:0x4491de [ 898.554904] Code: Bad RIP value. [ 898.558265] RSP: 002b:000000c0009cfe18 EFLAGS: 00010212 [ 898.563626] RAX: 0000000000000000 RBX: 00000000004390d6 RCX: 000000c0009cf800 [ 898.570891] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000c0075fe000 [ 898.578276] RBP: 000000c0009cff48 R08: 00007ffde85ca001 R09: 000000e5bdd8edd1 [ 898.585544] R10: 001ad015675f24d1 R11: 0000000000000001 R12: 000000c00049fde8 [ 898.592876] R13: 0000000000000000 R14: 000000c0075fe000 R15: 0000000000000001 [ 898.618354] Mem-Info: [ 898.621243] active_anon:16178 inactive_anon:23145 isolated_anon:0 [ 898.621243] active_file:19 inactive_file:11 isolated_file:0 [ 898.621243] unevictable:0 dirty:0 writeback:0 unstable:0 [ 898.621243] slab_reclaimable:15373 slab_unreclaimable:115909 [ 898.621243] mapped:11656 shmem:23838 pagetables:460 bounce:0 [ 898.621243] free:26938 free_pcp:415 free_cma:0 [ 898.684068] Node 0 active_anon:63332kB inactive_anon:19284kB active_file:1324kB inactive_file:1296kB unevictable:0kB isolated(anon):0kB isolated(file):88kB mapped:47320kB dirty:0kB writeback:0kB shmem:21604kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 898.866077] Node 1 active_anon:1368kB inactive_anon:73296kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1704kB dirty:0kB writeback:0kB shmem:73748kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 898.902286] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 898.932302] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 898.938130] Node 0 DMA32 free:36628kB min:35996kB low:44992kB high:53988kB active_anon:63216kB inactive_anon:19284kB active_file:356kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:1780kB bounce:0kB free_pcp:648kB local_pcp:604kB free_cma:0kB [ 898.969478] lowmem_reserve[]: 0 0 1 1 1 [ 898.978367] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 899.010115] lowmem_reserve[]: 0 0 0 0 0 [ 899.048097] Node 1 Normal free:53676kB min:53876kB low:67344kB high:80812kB active_anon:1368kB inactive_anon:73296kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:104kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 899.111738] lowmem_reserve[]: 0 0 0 0 0 [ 899.115755] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10984kB [ 899.139336] Node 0 DMA32: 1572*4kB (ME) 1161*8kB (UME) 336*16kB (UME) 93*32kB (UME) 32*64kB (UME) 11*128kB (ME) 7*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (M) 0*4096kB = 35832kB [ 899.173565] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 899.195184] Node 1 Normal: 138*4kB (UME) 114*8kB (UME) 100*16kB (UME) 76*32kB (UME) 61*64kB (UME) 26*128kB (ME) 4*256kB (ME) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 8*4096kB (U) = 53688kB [ 899.218813] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 899.228673] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 899.237468] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 899.246625] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 899.255255] 23905 total pagecache pages [ 899.259234] 0 pages in swap cache [ 899.270179] Swap cache stats: add 0, delete 0, find 0/0 [ 899.275545] Free swap = 0kB [ 899.278595] Total swap = 0kB [ 899.281733] 2097051 pages RAM [ 899.284848] 0 pages HighMem/MovableOnly [ 899.288832] 369649 pages reserved [ 899.292610] 0 pages cma reserved [ 899.295975] Unreclaimable slab info: [ 899.299680] Name Used Total [ 899.305284] pid_2 78KB 152KB [ 899.310753] batadv_tt_change_cache 1KB 3KB [ 899.316554] batadv_tl_cache 5KB 12KB [ 899.322008] TIPC 12KB 15KB [ 899.327385] SCTPv6 16KB 24KB [ 899.333551] SCTP 5KB 7KB [ 899.340182] DCCPv6 17KB 30KB [ 899.345562] DCCP 16KB 21KB [ 899.367124] RXRPC 13KB 13KB [ 899.372934] rxrpc_call_jar 90KB 94KB [ 899.378310] bridge_fdb_cache 10KB 15KB [ 899.383739] fib6_nodes 180KB 188KB [ 899.389108] ip6_dst_cache 188KB 311KB [ 899.394702] RAWv6 81KB 81KB [ 899.400068] UDPv6 28KB 33KB [ 899.405545] TCPv6 24KB 36KB [ 899.410986] nf_conntrack 4KB 15KB [ 899.416418] t10_alua_lu_gp_cache 0KB 3KB [ 899.422101] sd_ext_cdb 0KB 7KB [ 899.427507] scsi_sense_cache 1056KB 1060KB [ 899.432961] virtio_scsi_cmd 16KB 16KB [ 899.438378] sgpool-128 8KB 8KB [ 899.444288] sgpool-64 4KB 12KB [ 899.449643] sgpool-32 2KB 15KB [ 899.455761] sgpool-16 1KB 7KB [ 899.461153] sgpool-8 0KB 7KB [ 899.466504] mqueue_inode_cache 12KB 22KB [ 899.475055] bio_post_read_ctx 14KB 15KB [ 899.495549] bio-2 14KB 15KB [ 899.501024] jfs_mp 7KB 7KB [ 899.506420] cifs_small_rq 15KB 16KB [ 899.516791] cifs_request 67KB 67KB [ 899.523380] cifs_mpx_ids 0KB 7KB [ 899.528765] nfs_commit_data 3KB 14KB [ 899.539874] nfs_write_data 34KB 44KB [ 899.545379] ext4_system_zone 1KB 7KB [ 899.555770] bio-1 1KB 7KB [ 899.561214] pid_namespace 2KB 7KB [ 899.566587] rpc_buffers 17KB 25KB [ 899.577443] rpc_tasks 2KB 7KB [ 899.582917] UNIX 733KB 735KB [ 899.588286] tcp_bind_bucket 1KB 4KB [ 899.598954] ip_fib_trie 28KB 31KB [ 899.604532] ip_fib_alias 131KB 134KB [ 899.609897] ip_dst_cache 9KB 48KB [ 899.620771] RAW 48KB 52KB [ 899.626149] UDP 45KB 67KB [ 899.636182] TCP 8KB 11KB [ 899.643691] hugetlbfs_inode_cache 3KB 15KB [ 899.649405] fscache_cookie_jar 1KB 11KB [ 899.659366] eventpoll_pwq 23KB 47KB [ 899.665668] eventpoll_epi 43KB 66KB [ 899.671190] inotify_inode_mark 16KB 51KB [ 899.676636] request_queue 199KB 199KB [ 899.682048] blkdev_requests 1KB 3KB [ 899.687413] blkdev_ioc 32KB 34KB [ 899.693104] bio-0 1520KB 1548KB [ 899.698455] biovec-max 1765KB 1765KB [ 899.703877] biovec-64 1535KB 1535KB [ 899.709345] biovec-16 163KB 165KB [ 899.714794] bio_integrity_payload 1KB 8KB [ 899.720565] khugepaged_mm_slot 10KB 34KB [ 899.726026] uid_cache 0KB 4KB [ 899.731527] dmaengine-unmap-2 0KB 3KB [ 899.736923] skbuff_fclone_cache 123KB 138KB [ 899.743849] skbuff_head_cache 7615KB 7650KB [ 899.749221] configfs_dir_cache 3KB 11KB [ 899.755676] file_lock_cache 70KB 150KB [ 899.808726] file_lock_ctx 9KB 11KB [ 899.827130] fsnotify_mark_connector 8KB 31KB [ 899.858803] net_namespace 61KB 61KB [ 899.889521] shmem_inode_cache 8134KB 8267KB [ 899.917078] task_delay_info 234KB 407KB [ 899.929505] taskstats 76KB 141KB [ 899.954345] proc_dir_entry 758KB 761KB [ 899.959738] pde_opener 7KB 54KB [ 900.009758] seq_file 261KB 511KB [ 900.073079] sigqueue 59KB 59KB [ 900.078499] kernfs_node_cache 18136KB 18171KB [ 900.139962] mnt_cache 190KB 200KB [ 900.188118] filp 6686KB 7612KB [ 900.214204] names_cache 129429KB 129480KB [ 900.219596] iint_cache 32KB 67KB [ 900.259151] key_jar 4KB 11KB [ 900.279199] uts_namespace 3KB 7KB [ 900.307403] nsproxy 1KB 7KB [ 900.315017] vm_area_struct 3543KB 4876KB [ 900.337692] mm_struct 511KB 793KB [ 900.346422] fs_cache 148KB 336KB [ 900.375792] files_cache 558KB 558KB [ 900.381274] signal_cache 1131KB 1487KB [ 900.386657] sighand_cache 559KB 638KB [ 900.404555] task_struct 7840KB 7840KB [ 900.409936] cred_jar 1673KB 2152KB [ 900.434689] anon_vma_chain 1183KB 1803KB [ 900.440144] anon_vma 108KB 261KB [ 900.445512] pid 86KB 260KB [ 900.474188] Acpi-Operand 156KB 202KB [ 900.479588] Acpi-ParseExt 8KB 11KB [ 900.486127] Acpi-Parse 41KB 47KB [ 900.508843] Acpi-State 52KB 63KB [ 900.517332] Acpi-Namespace 21KB 27KB [ 900.534726] numa_policy 0KB 3KB [ 900.548032] debug_objects_cache 1179KB 1568KB [ 900.560003] trace_event_file 297KB 298KB [ 900.588435] ftrace_event_field 398KB 401KB [ 900.597359] pool_workqueue 126KB 128KB [ 900.607243] page->ptl 591KB 1047KB [ 900.619958] kmalloc-2097152 2050KB 2050KB [ 900.625412] kmalloc-524288 2056KB 2056KB [ 900.648494] kmalloc-262144 1290KB 1290KB [ 900.653936] kmalloc-131072 650KB 650KB [ 900.659296] kmalloc-65536 2112KB 2178KB [ 900.682492] kmalloc-32768 1815KB 1815KB [ 900.687873] kmalloc-16384 1056KB 1138KB [ 900.693317] kmalloc-8192 4240KB 4240KB [ 900.698673] kmalloc-4096 21764KB 21785KB [ 900.706098] kmalloc-2048 13750KB 13750KB [ 900.718895] kmalloc-1024 7763KB 7819KB [ 900.742035] kmalloc-512 15882KB 15982KB [ 900.747522] kmalloc-256 4715KB 5223KB [ 900.753346] kmalloc-128 1100KB 1488KB [ 900.783688] kmalloc-96 3633KB 4020KB [ 900.789071] kmalloc-64 2644KB 4208KB [ 900.799388] kmalloc-32 1951KB 2445KB [ 900.825147] kmalloc-192 1695KB 2280KB [ 900.834914] kmem_cache 177KB 183KB [ 900.857816] Out of memory (oom_kill_allocating_task): Kill process 9576 (syz-fuzzer) score 0 or sacrifice child [ 900.869636] Killed process 14164 (syz-executor.1) total-vm:48512kB, anon-rss:428kB, file-rss:0kB, shmem-rss:0kB [ 900.897908] oom_reaper: reaped process 14164 (syz-executor.1), now anon-rss:0kB, file-rss:14336kB, shmem-rss:0kB [ 900.901041] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 900.937871] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 900.942723] CPU: 0 PID: 9576 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 900.950173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 900.959625] Call Trace: [ 900.962232] dump_stack+0x1fc/0x2ef [ 900.965882] dump_header+0x15d/0xc3f [ 900.969678] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 900.974765] ? ___ratelimit+0x319/0x590 [ 900.979881] oom_kill_process.cold+0x10/0x692 [ 900.984465] ? check_preemption_disabled+0x41/0x280 [ 900.989467] ? has_intersects_mems_allowed+0x1d6/0x290 [ 900.994808] out_of_memory+0x1072/0x1390 [ 900.998969] ? oom_killer_disable+0x270/0x270 [ 901.003646] ? mutex_trylock+0x15f/0x1a0 [ 901.007696] __alloc_pages_nodemask+0x23a2/0x2890 [ 901.012529] ? find_get_entry+0x4cd/0x8a0 [ 901.016666] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 901.021523] alloc_pages_current+0x193/0x2a0 [ 901.025935] filemap_fault+0x146e/0x2180 [ 901.030001] ext4_filemap_fault+0x84/0xb0 [ 901.034135] __do_fault+0x10b/0x4b0 [ 901.037742] ? do_raw_spin_unlock+0x171/0x230 [ 901.042232] __handle_mm_fault+0x273b/0x41c0 [ 901.046627] ? vm_insert_page+0x9c0/0x9c0 [ 901.050764] ? check_preemption_disabled+0x41/0x280 [ 901.055762] handle_mm_fault+0x436/0xb10 [ 901.059809] __do_page_fault+0x68e/0xd60 [ 901.063856] ? trace_hardirqs_off_caller+0x6e/0x210 [ 901.068853] ? spurious_fault+0x840/0x840 [ 901.072984] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 901.077811] ? page_fault+0x8/0x30 [ 901.081335] page_fault+0x1e/0x30 [ 901.084794] RIP: 0033:0x4491de [ 901.087972] Code: Bad RIP value. [ 901.091316] RSP: 002b:000000c0009cfe18 EFLAGS: 00010212 [ 901.096658] RAX: 0000000000000000 RBX: 00000000004390d6 RCX: 000000c0009cf800 [ 901.103909] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000c0075fe000 [ 901.111177] RBP: 000000c0009cff48 R08: 00007ffde85ca001 R09: 000000e5bdd8edd1 [ 901.118429] R10: 001ad015675f24d1 R11: 0000000000000001 R12: 000000c00049fde8 [ 901.125701] R13: 0000000000000000 R14: 000000c0075fe000 R15: 0000000000000001 [ 901.135646] Mem-Info: [ 901.138103] active_anon:16146 inactive_anon:23145 isolated_anon:0 [ 901.138103] active_file:42 inactive_file:0 isolated_file:0 [ 901.138103] unevictable:0 dirty:0 writeback:0 unstable:0 [ 901.138103] slab_reclaimable:15392 slab_unreclaimable:115563 [ 901.138103] mapped:11641 shmem:23838 pagetables:471 bounce:0 [ 901.138103] free:25056 free_pcp:264 free_cma:0 [ 901.199708] Node 0 active_anon:63220kB inactive_anon:19284kB active_file:156kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44860kB dirty:0kB writeback:0kB shmem:21604kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 901.254406] Node 1 active_anon:1364kB inactive_anon:73296kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1704kB dirty:0kB writeback:0kB shmem:73748kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 901.293773] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 901.338209] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 901.343359] Node 0 DMA32 free:35540kB min:35996kB low:44992kB high:53988kB active_anon:63220kB inactive_anon:19284kB active_file:52kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7424kB pagetables:1780kB bounce:0kB free_pcp:984kB local_pcp:348kB free_cma:0kB [ 901.385385] lowmem_reserve[]: 0 0 1 1 1 [ 901.389400] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 901.449655] lowmem_reserve[]: 0 0 0 0 0 [ 901.469670] Node 1 Normal free:53692kB min:53876kB low:67344kB high:80812kB active_anon:1364kB inactive_anon:73296kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:104kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 901.526337] lowmem_reserve[]: 0 0 0 0 0 [ 901.539315] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10984kB [ 901.575267] Node 0 DMA32: 1983*4kB (ME) 1128*8kB (UME) 332*16kB (ME) 91*32kB (UME) 29*64kB (ME) 11*128kB (ME) 7*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (M) 0*4096kB = 35356kB [ 901.593560] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 901.617023] Node 1 Normal: 139*4kB (UME) 114*8kB (UME) 100*16kB (UME) 76*32kB (UME) 61*64kB (UME) 26*128kB (ME) 4*256kB (ME) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 8*4096kB (U) = 53692kB [ 901.637662] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 901.666930] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 901.689548] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 901.698570] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 901.721329] 23869 total pagecache pages [ 901.725414] 0 pages in swap cache [ 901.728868] Swap cache stats: add 0, delete 0, find 0/0 [ 901.734276] Free swap = 0kB [ 901.737296] Total swap = 0kB [ 901.754305] 2097051 pages RAM [ 901.757617] 0 pages HighMem/MovableOnly [ 901.761640] 369649 pages reserved [ 901.765088] 0 pages cma reserved [ 901.768449] Unreclaimable slab info: [ 901.775617] Name Used Total [ 901.785204] pid_2 78KB 152KB [ 901.811295] batadv_tt_change_cache 0KB 3KB [ 901.817172] batadv_tl_cache 5KB 12KB [ 901.823483] TIPC 12KB 15KB [ 901.828871] SCTPv6 16KB 24KB [ 901.855362] SCTP 5KB 7KB [ 901.867662] DCCPv6 17KB 30KB [ 901.876818] DCCP 16KB 21KB [ 901.893529] RXRPC 13KB 13KB [ 901.898914] rxrpc_call_jar 90KB 94KB [ 901.919841] bridge_fdb_cache 10KB 15KB [ 901.936865] fib6_nodes 188KB 188KB [ 901.966291] ip6_dst_cache 205KB 311KB [ 901.975272] RAWv6 81KB 81KB [ 901.987899] UDPv6 28KB 33KB [ 902.026062] TCPv6 24KB 36KB [ 902.035416] nf_conntrack 4KB 15KB [ 902.047021] t10_alua_lu_gp_cache 0KB 3KB [ 902.059644] sd_ext_cdb 0KB 7KB [ 902.079017] scsi_sense_cache 1056KB 1060KB [ 902.087935] virtio_scsi_cmd 16KB 16KB [ 902.096674] sgpool-128 8KB 8KB [ 902.108481] sgpool-64 4KB 12KB [ 902.118945] sgpool-32 2KB 15KB [ 902.154731] sgpool-16 1KB 7KB [ 902.166746] sgpool-8 0KB 7KB [ 902.187657] mqueue_inode_cache 12KB 22KB [ 902.215935] bio_post_read_ctx 14KB 15KB [ 902.223360] bio-2 14KB 15KB [ 902.228730] jfs_mp 7KB 7KB [ 902.246980] cifs_small_rq 15KB 16KB [ 902.259636] cifs_request 67KB 67KB [ 902.282873] cifs_mpx_ids 0KB 7KB [ 902.288276] nfs_commit_data 3KB 14KB [ 902.295195] nfs_write_data 34KB 44KB [ 902.301746] ext4_system_zone 1KB 7KB [ 902.307142] bio-1 1KB 7KB [ 902.317230] pid_namespace 2KB 7KB [ 902.329712] rpc_buffers 17KB 25KB [ 902.352879] rpc_tasks 2KB 7KB [ 902.358263] UNIX 733KB 735KB [ 902.366206] tcp_bind_bucket 1KB 4KB [ 902.384412] ip_fib_trie 28KB 31KB [ 902.389796] ip_fib_alias 130KB 134KB [ 902.414531] ip_dst_cache 9KB 48KB [ 902.419922] RAW 48KB 52KB [ 902.425322] UDP 45KB 67KB [ 902.448596] TCP 8KB 11KB [ 902.454061] hugetlbfs_inode_cache 3KB 15KB [ 902.459770] fscache_cookie_jar 1KB 11KB [ 902.478027] eventpoll_pwq 23KB 47KB [ 902.502266] eventpoll_epi 43KB 66KB [ 902.507678] inotify_inode_mark 16KB 51KB [ 902.516070] request_queue 199KB 199KB [ 902.538137] blkdev_requests 1KB 3KB [ 902.543608] blkdev_ioc 32KB 34KB [ 902.548972] bio-0 1523KB 1552KB [ 902.566026] biovec-max 1765KB 1765KB [ 902.589089] biovec-64 1535KB 1535KB [ 902.594568] biovec-16 163KB 165KB [ 902.599940] bio_integrity_payload 1KB 8KB [ 902.616876] khugepaged_mm_slot 10KB 34KB [ 902.625980] uid_cache 0KB 4KB [ 902.638388] dmaengine-unmap-2 0KB 3KB [ 902.647335] skbuff_fclone_cache 123KB 138KB [ 902.659886] skbuff_head_cache 7822KB 7822KB [ 902.679381] configfs_dir_cache 3KB 11KB [ 902.684946] file_lock_cache 70KB 150KB [ 902.705879] file_lock_ctx 9KB 11KB [ 902.711359] fsnotify_mark_connector 8KB 31KB [ 902.717240] net_namespace 61KB 61KB [ 902.737844] shmem_inode_cache 8132KB 8267KB [ 902.743270] task_delay_info 234KB 407KB [ 902.748641] taskstats 76KB 141KB [ 902.764696] proc_dir_entry 758KB 761KB [ 902.770128] pde_opener 7KB 54KB [ 902.775487] seq_file 259KB 511KB [ 902.791616] sigqueue 59KB 59KB [ 902.796992] kernfs_node_cache 18117KB 18159KB [ 902.802431] mnt_cache 190KB 200KB [ 902.809347] filp 6659KB 7612KB [ 902.825039] names_cache 129425KB 129480KB [ 902.834112] iint_cache 32KB 67KB [ 902.839495] key_jar 4KB 11KB [ 902.855501] uts_namespace 3KB 7KB [ 902.860929] nsproxy 1KB 7KB [ 902.866295] vm_area_struct 3540KB 4876KB [ 902.877928] mm_struct 510KB 793KB [ 902.896556] fs_cache 148KB 336KB [ 902.904181] files_cache 558KB 558KB [ 902.909561] signal_cache 1131KB 1487KB [ 902.938771] sighand_cache 559KB 638KB [ 902.962282] task_struct 7840KB 7840KB [ 902.967662] cred_jar 1649KB 2152KB [ 902.979783] anon_vma_chain 1172KB 1803KB [ 903.009634] anon_vma 102KB 261KB [ 903.027733] pid 86KB 260KB [ 903.035474] Acpi-Operand 156KB 202KB [ 903.066463] Acpi-ParseExt 8KB 11KB [ 903.084233] Acpi-Parse 41KB 47KB [ 903.089604] Acpi-State 52KB 63KB [ 903.119470] Acpi-Namespace 21KB 27KB [ 903.137928] numa_policy 0KB 3KB [ 903.159781] debug_objects_cache 1179KB 1568KB [ 903.166953] trace_event_file 297KB 298KB [ 903.172421] ftrace_event_field 398KB 401KB [ 903.177867] pool_workqueue 126KB 128KB [ 903.203692] page->ptl 586KB 1047KB [ 903.209124] kmalloc-2097152 2050KB 2050KB [ 903.219454] kmalloc-524288 2056KB 2056KB [ 903.233698] kmalloc-262144 1290KB 1290KB [ 903.239074] kmalloc-131072 650KB 650KB [ 903.275679] kmalloc-65536 2112KB 2178KB [ 903.285491] kmalloc-32768 1815KB 1815KB [ 903.305145] kmalloc-16384 1056KB 1138KB [ 903.326866] kmalloc-8192 4240KB 4240KB [ 903.333166] kmalloc-4096 21764KB 21785KB [ 903.338538] kmalloc-2048 13750KB 13750KB [ 903.349063] kmalloc-1024 7803KB 7859KB [ 903.386737] kmalloc-512 16250KB 16338KB [ 903.394392] kmalloc-256 4715KB 5223KB [ 903.399780] kmalloc-128 1100KB 1488KB [ 903.438890] kmalloc-96 3655KB 4020KB [ 903.445414] kmalloc-64 2644KB 4208KB [ 903.455880] kmalloc-32 1951KB 2445KB [ 903.487502] kmalloc-192 1695KB 2280KB [ 903.497937] kmem_cache 177KB 183KB [ 903.513122] Out of memory (oom_kill_allocating_task): Kill process 9576 (syz-fuzzer) score 0 or sacrifice child [ 903.552803] Killed process 12544 (syz-executor.2) total-vm:48512kB, anon-rss:428kB, file-rss:0kB, shmem-rss:0kB [ 903.608401] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 903.626817] systemd-journal cpuset=/ mems_allowed=0-1 [ 903.635657] CPU: 1 PID: 13630 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 903.643636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 903.652990] Call Trace: [ 903.655590] dump_stack+0x1fc/0x2ef [ 903.659310] dump_header+0x15d/0xc3f [ 903.663033] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 903.668159] ? ___ratelimit+0x319/0x590 [ 903.672147] oom_kill_process.cold+0x10/0x692 [ 903.676668] ? check_preemption_disabled+0x41/0x280 [ 903.681702] ? has_intersects_mems_allowed+0x1d6/0x290 [ 903.686984] out_of_memory+0x1072/0x1390 [ 903.691054] ? oom_killer_disable+0x270/0x270 [ 903.695559] ? mutex_trylock+0x15f/0x1a0 [ 903.699639] __alloc_pages_nodemask+0x23a2/0x2890 [ 903.704499] ? find_get_entry+0x4cd/0x8a0 [ 903.708669] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 903.713546] alloc_pages_current+0x193/0x2a0 [ 903.717957] filemap_fault+0x146e/0x2180 [ 903.722038] ext4_filemap_fault+0x84/0xb0 [ 903.726196] __do_fault+0x10b/0x4b0 [ 903.729832] __handle_mm_fault+0x273b/0x41c0 [ 903.734422] ? vm_insert_page+0x9c0/0x9c0 [ 903.738584] ? check_preemption_disabled+0x41/0x280 [ 903.743609] handle_mm_fault+0x436/0xb10 [ 903.747691] __do_page_fault+0x68e/0xd60 [ 903.751768] ? trace_hardirqs_off_caller+0x6e/0x210 [ 903.756797] ? spurious_fault+0x840/0x840 [ 903.760987] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 903.765929] ? page_fault+0x8/0x30 [ 903.769478] page_fault+0x1e/0x30 [ 903.772932] RIP: 0033:0x7fc5e35a0f9d [ 903.776658] Code: Bad RIP value. [ 903.780029] RSP: 002b:00007fff5ea2a928 EFLAGS: 00010206 [ 903.785394] RAX: 0000000000000043 RBX: 0000565330297f20 RCX: 00007fc5e15294e8 [ 903.792669] RDX: 000000000000001b RSI: 0000565330297e0b RDI: 00007fc5e152952b [ 903.800064] RBP: 0441f0e2fa9bf6df R08: 000000000012d52b R09: 00005653302981f0 [ 903.807341] R10: 00007fc5e3f97ee8 R11: 00007fc5e35c7060 R12: 00007fff5ea2a950 [ 903.814625] R13: 000000000000001b R14: 0000565330297df0 R15: 000000000012d4e8 [ 904.102749] Mem-Info: [ 904.105258] active_anon:15885 inactive_anon:23145 isolated_anon:0 [ 904.105258] active_file:77 inactive_file:185 isolated_file:4 [ 904.105258] unevictable:0 dirty:0 writeback:0 unstable:0 [ 904.105258] slab_reclaimable:15388 slab_unreclaimable:115199 [ 904.105258] mapped:4592 shmem:23838 pagetables:439 bounce:0 [ 904.105258] free:26280 free_pcp:111 free_cma:0 [ 904.178475] Node 0 active_anon:62216kB inactive_anon:19284kB active_file:300kB inactive_file:688kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:16764kB dirty:0kB writeback:0kB shmem:21604kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 904.217580] Node 1 active_anon:1324kB inactive_anon:73296kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1704kB dirty:0kB writeback:0kB shmem:73748kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 904.257999] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 904.285286] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 904.291007] Node 0 DMA32 free:36632kB min:35996kB low:44992kB high:53988kB active_anon:62316kB inactive_anon:19284kB active_file:300kB inactive_file:244kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7392kB pagetables:1656kB bounce:0kB free_pcp:1984kB local_pcp:288kB free_cma:0kB [ 904.321288] lowmem_reserve[]: 0 0 1 1 1 [ 904.326128] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 904.354572] lowmem_reserve[]: 0 0 0 0 0 [ 904.358765] Node 1 Normal free:53692kB min:53876kB low:67344kB high:80812kB active_anon:1324kB inactive_anon:73296kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:100kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 904.395564] lowmem_reserve[]: 0 0 0 0 0 [ 904.406158] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10984kB [ 904.447762] Node 0 DMA32: 2059*4kB (ME) 1151*8kB (ME) 351*16kB (UME) 92*32kB (UME) 31*64kB (UME) 10*128kB (UME) 7*256kB (UM) 2*512kB (UM) 0*1024kB 2*2048kB (M) 0*4096kB = 36180kB [ 904.483152] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 904.522193] Node 1 Normal: 129*4kB (UME) 108*8kB (UME) 98*16kB (UME) 73*32kB (UME) 62*64kB (UME) 26*128kB (ME) 5*256kB (ME) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 8*4096kB (U) = 53796kB [ 904.573128] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 904.606270] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 904.634060] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 904.666643] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 904.694518] 23911 total pagecache pages [ 904.698522] 0 pages in swap cache [ 904.717571] Swap cache stats: add 0, delete 0, find 0/0 [ 904.729680] Free swap = 0kB [ 904.759596] Total swap = 0kB [ 904.768958] 2097051 pages RAM [ 904.787921] 0 pages HighMem/MovableOnly [ 904.798214] 369649 pages reserved [ 904.817704] 0 pages cma reserved [ 904.827653] Unreclaimable slab info: [ 904.837178] Name Used Total [ 904.857646] pid_2 77KB 152KB [ 904.863193] batadv_tt_change_cache 0KB 3KB [ 904.869257] batadv_tl_cache 5KB 12KB [ 904.879299] TIPC 12KB 15KB [ 904.884908] SCTPv6 16KB 24KB [ 904.890435] SCTP 5KB 7KB [ 904.895809] DCCPv6 17KB 30KB [ 904.901262] DCCP 16KB 21KB [ 904.906666] RXRPC 13KB 13KB [ 904.912099] rxrpc_call_jar 90KB 94KB [ 904.917466] bridge_fdb_cache 10KB 15KB [ 904.922932] fib6_nodes 185KB 188KB [ 904.928301] ip6_dst_cache 205KB 311KB [ 904.933715] RAWv6 81KB 81KB [ 904.939188] UDPv6 28KB 33KB [ 904.944627] TCPv6 21KB 36KB [ 904.950051] nf_conntrack 4KB 15KB [ 904.955445] t10_alua_lu_gp_cache 0KB 3KB [ 904.964101] sd_ext_cdb 0KB 7KB [ 904.969473] scsi_sense_cache 1056KB 1060KB [ 904.974892] virtio_scsi_cmd 16KB 16KB [ 904.983539] sgpool-128 8KB 8KB [ 904.988908] sgpool-64 4KB 12KB [ 904.997573] sgpool-32 2KB 15KB [ 905.009439] sgpool-16 1KB 7KB [ 905.024548] sgpool-8 0KB 7KB [ 905.036414] mqueue_inode_cache 12KB 22KB [ 905.048495] bio_post_read_ctx 14KB 15KB [ 905.076981] bio-2 14KB 15KB [ 905.088783] jfs_mp 7KB 7KB [ 905.115188] cifs_small_rq 15KB 16KB [ 905.127578] cifs_request 67KB 67KB [ 905.148341] cifs_mpx_ids 0KB 7KB [ 905.157773] nfs_commit_data 3KB 14KB [ 905.176372] nfs_write_data 34KB 44KB [ 905.188310] ext4_system_zone 1KB 7KB [ 905.199523] bio-1 1KB 7KB [ 905.227262] pid_namespace 2KB 7KB [ 905.234367] rpc_buffers 17KB 25KB [ 905.239723] rpc_tasks 2KB 7KB [ 905.249238] UNIX 720KB 735KB [ 905.268263] tcp_bind_bucket 1KB 4KB [ 905.279745] ip_fib_trie 27KB 31KB [ 905.294259] ip_fib_alias 130KB 134KB [ 905.299677] ip_dst_cache 9KB 48KB [ 905.324520] RAW 48KB 52KB [ 905.335105] UDP 45KB 67KB [ 905.347821] TCP 8KB 11KB [ 905.371830] hugetlbfs_inode_cache 3KB 15KB [ 905.377572] fscache_cookie_jar 1KB 11KB [ 905.387075] eventpoll_pwq 23KB 47KB [ 905.395253] eventpoll_epi 42KB 66KB [ 905.413301] inotify_inode_mark 16KB 51KB [ 905.418778] request_queue 199KB 199KB [ 905.425146] blkdev_requests 1KB 3KB [ 905.446726] blkdev_ioc 34KB 34KB [ 905.455548] bio-0 1791KB 1818KB [ 905.478687] biovec-max 1872KB 1872KB [ 905.485432] biovec-64 1669KB 1669KB [ 905.504823] biovec-16 208KB 210KB [ 905.515848] bio_integrity_payload 1KB 8KB [ 905.527504] khugepaged_mm_slot 10KB 34KB [ 905.537053] uid_cache 0KB 4KB [ 905.556430] dmaengine-unmap-2 0KB 3KB [ 905.567684] skbuff_fclone_cache 116KB 138KB [ 905.589510] skbuff_head_cache 8021KB 8021KB [ 905.598202] configfs_dir_cache 3KB 11KB [ 905.615451] file_lock_cache 69KB 150KB [ 905.628706] file_lock_ctx 9KB 11KB [ 905.638307] fsnotify_mark_connector 8KB 31KB [ 905.646202] net_namespace 61KB 61KB [ 905.666342] shmem_inode_cache 8132KB 8267KB [ 905.676746] task_delay_info 230KB 407KB [ 905.694188] taskstats 76KB 141KB [ 905.699588] proc_dir_entry 758KB 761KB [ 905.706884] pde_opener 7KB 54KB [ 905.744684] seq_file 255KB 507KB [ 905.787360] sigqueue 57KB 59KB [ 905.799670] kernfs_node_cache 18067KB 18120KB [ 905.854696] mnt_cache 190KB 200KB [ 905.879199] filp 6635KB 7612KB [ 905.884659] names_cache 127270KB 127325KB [ 905.899674] iint_cache 32KB 67KB [ 905.927870] key_jar 4KB 11KB [ 905.939395] uts_namespace 3KB 7KB [ 905.946173] nsproxy 1KB 7KB [ 905.987674] vm_area_struct 3516KB 4872KB [ 905.994504] mm_struct 508KB 793KB [ 906.008571] fs_cache 146KB 336KB [ 906.029559] files_cache 558KB 558KB [ 906.038182] signal_cache 1147KB 1487KB [ 906.050022] sighand_cache 582KB 638KB [ 906.055420] task_struct 7846KB 7846KB [ 906.073513] cred_jar 1643KB 2152KB [ 906.079012] anon_vma_chain 1171KB 1803KB [ 906.089308] anon_vma 114KB 261KB [ 906.115813] pid 83KB 260KB [ 906.124866] Acpi-Operand 156KB 202KB [ 906.139531] Acpi-ParseExt 8KB 11KB [ 906.149176] Acpi-Parse 41KB 47KB [ 906.177991] Acpi-State 52KB 63KB [ 906.185904] Acpi-Namespace 21KB 27KB [ 906.207197] numa_policy 0KB 3KB [ 906.216617] debug_objects_cache 1179KB 1568KB [ 906.238002] trace_event_file 297KB 298KB [ 906.248054] ftrace_event_field 398KB 401KB [ 906.264110] pool_workqueue 126KB 128KB [ 906.269511] page->ptl 586KB 1047KB [ 906.278001] kmalloc-2097152 2050KB 2050KB [ 906.297619] kmalloc-524288 2056KB 2056KB [ 906.304939] kmalloc-262144 1290KB 1290KB [ 906.327895] kmalloc-131072 650KB 650KB [ 906.339016] kmalloc-65536 2112KB 2178KB [ 906.346008] kmalloc-32768 1815KB 1815KB [ 906.367413] kmalloc-16384 1056KB 1138KB [ 906.379301] kmalloc-8192 4240KB 4240KB [ 906.388841] kmalloc-4096 21636KB 21675KB [ 906.416123] kmalloc-2048 13748KB 13750KB [ 906.427869] kmalloc-1024 7890KB 7945KB [ 906.449615] kmalloc-512 16577KB 16665KB [ 906.456336] kmalloc-256 4715KB 5223KB [ 906.469166] kmalloc-128 1098KB 1488KB [ 906.485801] kmalloc-96 3685KB 4020KB [ 906.494484] kmalloc-64 2644KB 4208KB [ 906.515778] kmalloc-32 1959KB 2445KB [ 906.537722] kmalloc-192 1709KB 2280KB [ 906.549415] kmem_cache 177KB 183KB [ 906.574687] Out of memory (oom_kill_allocating_task): Kill process 13630 (systemd-journal) score 0 or sacrifice child [ 906.589923] Killed process 13630 (systemd-journal) total-vm:46096kB, anon-rss:484kB, file-rss:0kB, shmem-rss:1712kB [ 906.610479] oom_reaper: reaped process 13630 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1712kB [ 906.663327] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 906.699503] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 906.704415] CPU: 1 PID: 8108 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 906.711952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 906.721307] Call Trace: [ 906.723905] dump_stack+0x1fc/0x2ef [ 906.727541] dump_header+0x15d/0xc3f [ 906.731268] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 906.736467] ? ___ratelimit+0x319/0x590 [ 906.740452] oom_kill_process.cold+0x10/0x692 [ 906.745047] ? check_preemption_disabled+0x41/0x280 [ 906.750073] ? has_intersects_mems_allowed+0x1d6/0x290 [ 906.755356] out_of_memory+0x1072/0x1390 [ 906.759424] ? oom_killer_disable+0x270/0x270 [ 906.763923] ? mutex_trylock+0x15f/0x1a0 [ 906.767990] __alloc_pages_nodemask+0x23a2/0x2890 [ 906.772851] ? find_get_entry+0x4cd/0x8a0 [ 906.777013] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 906.781886] alloc_pages_current+0x193/0x2a0 [ 906.786302] filemap_fault+0x146e/0x2180 [ 906.790480] ext4_filemap_fault+0x84/0xb0 [ 906.794631] __do_fault+0x10b/0x4b0 [ 906.798283] __handle_mm_fault+0x273b/0x41c0 [ 906.802694] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 906.807822] ? vm_insert_page+0x9c0/0x9c0 [ 906.811982] ? check_preemption_disabled+0x41/0x280 [ 906.817013] handle_mm_fault+0x436/0xb10 [ 906.821085] __do_page_fault+0x68e/0xd60 [ 906.825157] ? trace_hardirqs_off_caller+0x6e/0x210 [ 906.841743] ? spurious_fault+0x840/0x840 [ 906.846018] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 906.851586] ? page_fault+0x8/0x30 [ 906.855735] page_fault+0x1e/0x30 [ 906.859180] RIP: 0033:0x46af7d [ 906.862384] Code: Bad RIP value. [ 906.865839] RSP: 002b:000000c000067f10 EFLAGS: 00010202 [ 906.871202] RAX: 0000000000000000 RBX: 0000000000002710 RCX: 000000000046af7d [ 906.878475] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000c000067f10 [ 906.885764] RBP: 000000c000067f20 R08: 0000000000006454 R09: 0000000000000000 [ 906.893026] R10: 0000000000000000 R11: 0000000000000202 R12: 000000c000067930 [ 906.900298] R13: 000000c00086a000 R14: 000000c0000064e0 R15: 0000000000000001 [ 906.915237] Mem-Info: [ 906.917772] active_anon:15770 inactive_anon:23143 isolated_anon:0 [ 906.917772] active_file:17 inactive_file:17 isolated_file:0 [ 906.917772] unevictable:0 dirty:0 writeback:0 unstable:0 [ 906.917772] slab_reclaimable:15398 slab_unreclaimable:114999 [ 906.917772] mapped:4046 shmem:23837 pagetables:438 bounce:0 [ 906.917772] free:25035 free_pcp:172 free_cma:0 [ 906.959098] Node 0 active_anon:62268kB inactive_anon:19280kB active_file:60kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:16184kB dirty:0kB writeback:0kB shmem:21600kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 906.993392] Node 1 active_anon:812kB inactive_anon:73292kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:73748kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 907.029958] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 907.078384] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 907.086439] Node 0 DMA32 free:35472kB min:35996kB low:44992kB high:53988kB active_anon:62268kB inactive_anon:19280kB active_file:160kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7456kB pagetables:1752kB bounce:0kB free_pcp:420kB local_pcp:212kB free_cma:0kB [ 907.136497] lowmem_reserve[]: 0 0 1 1 1 [ 907.147011] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 907.183159] lowmem_reserve[]: 0 0 0 0 0 [ 907.187179] Node 1 Normal free:53676kB min:53876kB low:67344kB high:80812kB active_anon:812kB inactive_anon:73292kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:128kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 907.216251] lowmem_reserve[]: 0 0 0 0 0 [ 907.224746] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10984kB [ 907.247554] Node 0 DMA32: 2132*4kB (UME) 1155*8kB (UME) 350*16kB (ME) 92*32kB (UME) 31*64kB (UME) 10*128kB (ME) 7*256kB (M) 2*512kB (UM) 1*1024kB (U) 1*2048kB (M) 0*4096kB = 35464kB [ 907.265031] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 907.286240] Node 1 Normal: 87*4kB (ME) 78*8kB (ME) 74*16kB (UME) 58*32kB (UME) 50*64kB (UME) 37*128kB (ME) 7*256kB (ME) 4*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 8*4096kB (U) = 53676kB [ 907.313191] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 907.337939] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 907.349735] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 907.371453] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 907.388796] 23871 total pagecache pages [ 907.406316] 0 pages in swap cache [ 907.412959] Swap cache stats: add 0, delete 0, find 0/0 [ 907.426337] Free swap = 0kB [ 907.429374] Total swap = 0kB [ 907.435642] 2097051 pages RAM [ 907.438749] 0 pages HighMem/MovableOnly [ 907.448893] 369649 pages reserved [ 907.455751] 0 pages cma reserved [ 907.459123] Unreclaimable slab info: [ 907.469180] Name Used Total [ 907.478494] pid_2 77KB 152KB [ 907.485540] batadv_tt_change_cache 0KB 3KB [ 907.496092] batadv_tl_cache 5KB 12KB [ 907.504786] TIPC 12KB 15KB [ 907.524315] SCTPv6 16KB 24KB [ 907.533603] SCTP 5KB 7KB [ 907.539017] DCCPv6 17KB 30KB [ 907.557163] DCCP 16KB 21KB [ 907.565836] RXRPC 13KB 13KB [ 907.579157] rxrpc_call_jar 90KB 94KB [ 907.596994] bridge_fdb_cache 10KB 15KB [ 907.606069] fib6_nodes 185KB 188KB [ 907.628922] ip6_dst_cache 205KB 311KB [ 907.636899] RAWv6 81KB 81KB [ 907.649732] UDPv6 28KB 33KB [ 907.658281] TCPv6 21KB 36KB [ 907.668950] nf_conntrack 4KB 15KB [ 907.679106] t10_alua_lu_gp_cache 0KB 3KB [ 907.688051] sd_ext_cdb 0KB 7KB [ 907.708647] scsi_sense_cache 1056KB 1060KB [ 907.715949] virtio_scsi_cmd 16KB 16KB [ 907.738861] sgpool-128 8KB 8KB [ 907.746913] sgpool-64 4KB 12KB [ 907.759619] sgpool-32 2KB 15KB [ 907.768105] sgpool-16 1KB 7KB [ 907.779391] sgpool-8 0KB 7KB [ 907.788898] mqueue_inode_cache 12KB 22KB [ 907.813627] bio_post_read_ctx 14KB 15KB [ 907.819078] bio-2 14KB 15KB [ 907.828547] jfs_mp 7KB 7KB [ 907.839466] cifs_small_rq 15KB 16KB [ 907.849218] cifs_request 67KB 67KB [ 907.859191] cifs_mpx_ids 0KB 7KB [ 907.876448] nfs_commit_data 3KB 14KB [ 907.888796] nfs_write_data 34KB 44KB [ 907.903682] ext4_system_zone 1KB 7KB [ 907.909200] bio-1 1KB 7KB [ 907.917945] pid_namespace 2KB 7KB [ 907.933464] rpc_buffers 17KB 25KB [ 907.938848] rpc_tasks 2KB 7KB [ 907.947003] UNIX 720KB 735KB [ 907.959592] tcp_bind_bucket 1KB 4KB [ 907.966625] ip_fib_trie 27KB 31KB [ 907.978746] ip_fib_alias 130KB 134KB [ 907.987346] ip_dst_cache 9KB 48KB [ 907.996065] RAW 48KB 52KB [ 908.009128] UDP 45KB 67KB [ 908.016853] TCP 8KB 11KB [ 908.035379] hugetlbfs_inode_cache 3KB 15KB [ 908.043830] fscache_cookie_jar 1KB 11KB [ 908.049293] eventpoll_pwq 23KB 47KB [ 908.059391] eventpoll_epi 42KB 66KB [ 908.066330] inotify_inode_mark 16KB 51KB [ 908.083796] request_queue 199KB 199KB [ 908.089171] blkdev_requests 1KB 3KB [ 908.095455] blkdev_ioc 34KB 34KB [ 908.116088] bio-0 1791KB 1818KB [ 908.145837] biovec-max 1872KB 1872KB [ 908.157073] biovec-64 1669KB 1669KB [ 908.176254] biovec-16 208KB 210KB [ 908.189705] bio_integrity_payload 1KB 8KB [ 908.197779] khugepaged_mm_slot 10KB 34KB [ 908.206464] uid_cache 0KB 4KB [ 908.215138] dmaengine-unmap-2 0KB 3KB [ 908.223780] skbuff_fclone_cache 116KB 138KB [ 908.229317] skbuff_head_cache 8193KB 8193KB [ 908.239043] configfs_dir_cache 3KB 11KB [ 908.249672] file_lock_cache 69KB 150KB [ 908.257154] file_lock_ctx 9KB 11KB [ 908.268426] fsnotify_mark_connector 8KB 31KB [ 908.277553] net_namespace 61KB 61KB [ 908.286010] shmem_inode_cache 8132KB 8267KB [ 908.293979] task_delay_info 230KB 407KB [ 908.299347] taskstats 76KB 141KB [ 908.306269] proc_dir_entry 758KB 761KB [ 908.318313] pde_opener 7KB 54KB [ 908.326479] seq_file 255KB 507KB [ 908.339017] sigqueue 57KB 59KB [ 908.376911] kernfs_node_cache 18067KB 18120KB [ 908.385356] mnt_cache 190KB 200KB [ 908.394842] filp 6635KB 7612KB [ 908.429607] names_cache 127270KB 127325KB [ 908.450552] iint_cache 32KB 67KB [ 908.455941] key_jar 4KB 11KB [ 908.476413] uts_namespace 3KB 7KB [ 908.486134] nsproxy 1KB 7KB [ 908.506332] vm_area_struct 3516KB 4872KB [ 908.517041] mm_struct 508KB 793KB [ 908.529620] fs_cache 146KB 336KB [ 908.552818] files_cache 558KB 558KB [ 908.558204] signal_cache 1147KB 1487KB [ 908.566932] sighand_cache 582KB 638KB [ 908.601675] task_struct 7846KB 7846KB [ 908.607072] cred_jar 1643KB 2152KB [ 908.618950] anon_vma_chain 1171KB 1803KB [ 908.636845] anon_vma 114KB 261KB [ 908.668048] pid 83KB 260KB [ 908.676616] Acpi-Operand 156KB 202KB [ 908.697825] Acpi-ParseExt 8KB 11KB [ 908.718011] Acpi-Parse 41KB 47KB [ 908.726258] Acpi-State 52KB 63KB [ 908.746462] Acpi-Namespace 21KB 27KB [ 908.752525] numa_policy 0KB 3KB [ 908.757894] debug_objects_cache 1179KB 1568KB [ 908.765210] trace_event_file 297KB 298KB [ 908.770628] ftrace_event_field 398KB 401KB [ 908.776072] pool_workqueue 126KB 128KB [ 908.781607] page->ptl 586KB 1047KB [ 908.786985] kmalloc-2097152 2050KB 2050KB [ 908.792409] kmalloc-524288 2056KB 2056KB [ 908.797772] kmalloc-262144 1290KB 1290KB [ 908.803147] kmalloc-131072 650KB 650KB [ 908.808492] kmalloc-65536 2112KB 2178KB [ 908.813856] kmalloc-32768 1815KB 1815KB [ 908.819201] kmalloc-16384 1056KB 1138KB [ 908.824691] kmalloc-8192 4240KB 4240KB [ 908.830083] kmalloc-4096 21636KB 21675KB [ 908.835433] kmalloc-2048 13748KB 13750KB [ 908.840816] kmalloc-1024 7930KB 7985KB [ 908.846171] kmalloc-512 16866KB 16953KB [ 908.851650] kmalloc-256 4724KB 5223KB [ 908.857006] kmalloc-128 1098KB 1488KB [ 908.864064] kmalloc-96 3715KB 4020KB [ 908.869429] kmalloc-64 2644KB 4208KB [ 908.875360] kmalloc-32 1962KB 2445KB [ 908.881285] kmalloc-192 1709KB 2280KB [ 908.886653] kmem_cache 177KB 183KB [ 908.892029] Out of memory (oom_kill_allocating_task): Kill process 8108 (syz-fuzzer) score 0 or sacrifice child [ 908.902401] Killed process 8107 (syz-fuzzer) total-vm:931452kB, anon-rss:48532kB, file-rss:0kB, shmem-rss:1736kB [ 908.941888] oom_reaper: reaped process 8107 (syz-fuzzer), now anon-rss:0kB, file-rss:0kB, shmem-rss:1844kB [ 909.102096] systemd-udevd invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=-1000 [ 909.122590] systemd-udevd cpuset=/ mems_allowed=0-1 [ 909.128525] CPU: 1 PID: 4700 Comm: systemd-udevd Not tainted 4.19.211-syzkaller #0 [ 909.136243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 909.145601] Call Trace: [ 909.148194] dump_stack+0x1fc/0x2ef [ 909.151834] dump_header+0x15d/0xc3f [ 909.155568] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 909.160682] ? ___ratelimit+0x319/0x590 [ 909.164925] oom_kill_process.cold+0x10/0x692 [ 909.169430] ? oom_badness.part.0+0x135/0x6e0 [ 909.173931] ? lock_downgrade+0x720/0x720 [ 909.178115] ? check_preemption_disabled+0x41/0x280 [ 909.183147] out_of_memory+0x34d/0x1390 [ 909.187138] ? oom_killer_disable+0x270/0x270 [ 909.191654] ? mutex_trylock+0x15f/0x1a0 [ 909.195729] __alloc_pages_nodemask+0x23a2/0x2890 [ 909.200607] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 909.205478] ? __lock_acquire+0x6de/0x3ff0 [ 909.209724] alloc_pages_vma+0xf2/0x780 [ 909.213808] wp_page_copy+0x219/0x2c40 [ 909.217715] ? _vm_normal_page+0x132/0x510 [ 909.221971] ? follow_pte_pmd+0x60/0x60 [ 909.225965] do_wp_page+0x2d4/0x2210 [ 909.229695] ? finish_mkwrite_fault+0x640/0x640 [ 909.234367] ? __handle_mm_fault+0x15f6/0x41c0 [ 909.238953] ? mark_held_locks+0xf0/0xf0 [ 909.243037] __handle_mm_fault+0x258b/0x41c0 [ 909.247458] ? vm_insert_page+0x9c0/0x9c0 [ 909.251617] ? wake_up_new_task+0x648/0xb10 [ 909.255968] ? check_preemption_disabled+0x41/0x280 [ 909.260996] handle_mm_fault+0x436/0xb10 [ 909.265073] __do_page_fault+0x68e/0xd60 [ 909.269146] ? trace_hardirqs_off_caller+0x6e/0x210 [ 909.274169] ? spurious_fault+0x840/0x840 [ 909.278411] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 909.283298] ? page_fault+0x8/0x30 [ 909.286846] page_fault+0x1e/0x30 [ 909.290322] RIP: 0033:0x7f1fe4c640fd [ 909.294040] Code: Bad RIP value. [ 909.297403] RSP: 002b:00007ffe53f1c600 EFLAGS: 00010293 [ 909.302768] RAX: 000055cbe9ba9c50 RBX: 00007f1fe4f84b58 RCX: 0000000000000350 [ 909.310047] RDX: 0000000000000390 RSI: 0000000000000390 RDI: 0000000000000077 [ 909.317346] RBP: 0000000000002710 R08: 00007f1fe5e548c0 R09: 0000000000000040 [ 909.324620] R10: 00007f1fe5e54b90 R11: 0000000000000246 R12: 0000000000000040 [ 909.331893] R13: 00007f1fe4f84b58 R14: 000055cbe9ba9c10 R15: 00007f1fe4f84b00 [ 909.342659] Mem-Info: [ 909.345112] active_anon:3267 inactive_anon:23043 isolated_anon:0 [ 909.345112] active_file:129 inactive_file:100 isolated_file:42 [ 909.345112] unevictable:0 dirty:0 writeback:0 unstable:0 [ 909.345112] slab_reclaimable:15398 slab_unreclaimable:114771 [ 909.345112] mapped:3783 shmem:23487 pagetables:438 bounce:0 [ 909.345112] free:25121 free_pcp:413 free_cma:0 [ 909.382827] Node 0 active_anon:12256kB inactive_anon:18880kB active_file:100kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):40kB mapped:14432kB dirty:0kB writeback:0kB shmem:20200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 909.412529] Node 1 active_anon:812kB inactive_anon:73292kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:73748kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 909.442493] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 909.470250] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 909.475700] Node 0 DMA32 free:36036kB min:35996kB low:44992kB high:53988kB active_anon:12348kB inactive_anon:19280kB active_file:464kB inactive_file:712kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7040kB pagetables:1752kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 909.505305] lowmem_reserve[]: 0 0 1 1 1 [ 909.509812] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 909.538472] lowmem_reserve[]: 0 0 0 0 0 [ 909.545209] Node 1 Normal free:53840kB min:53876kB low:67344kB high:80812kB active_anon:812kB inactive_anon:73292kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 909.573347] lowmem_reserve[]: 0 0 0 0 0 [ 909.577336] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10984kB [ 909.594948] Node 0 DMA32: 1709*4kB (UME) 951*8kB (UME) 315*16kB (UME) 141*32kB (UME) 65*64kB (UME) 35*128kB (UME) 13*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35964kB [ 909.610772] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 909.621874] Node 1 Normal: 86*4kB (UME) 77*8kB (UME) 73*16kB (ME) 56*32kB (ME) 49*64kB (UME) 36*128kB (ME) 9*256kB (UME) 4*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 8*4096kB (U) = 53904kB [ 909.638891] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 909.647752] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 909.656363] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 909.665222] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 909.674983] 23529 total pagecache pages [ 909.678962] 0 pages in swap cache [ 909.682422] Swap cache stats: add 0, delete 0, find 0/0 [ 909.687760] Free swap = 0kB [ 909.691440] Total swap = 0kB [ 909.694512] 2097051 pages RAM [ 909.697605] 0 pages HighMem/MovableOnly [ 909.701605] 369649 pages reserved [ 909.705035] 0 pages cma reserved [ 909.708511] Unreclaimable slab info: [ 909.713539] Name Used Total [ 909.719133] pid_2 77KB 152KB [ 909.724611] batadv_tt_change_cache 0KB 3KB [ 909.730471] batadv_tl_cache 5KB 12KB [ 909.735847] TIPC 12KB 15KB [ 909.741279] SCTPv6 16KB 24KB [ 909.746632] SCTP 5KB 7KB [ 909.752460] DCCPv6 17KB 30KB [ 909.757822] DCCP 16KB 21KB [ 909.763215] RXRPC 13KB 13KB [ 909.769445] rxrpc_call_jar 90KB 94KB [ 909.774858] bridge_fdb_cache 10KB 15KB [ 909.780257] fib6_nodes 185KB 188KB [ 909.785610] ip6_dst_cache 213KB 311KB [ 909.790998] RAWv6 81KB 81KB [ 909.796351] UDPv6 28KB 33KB [ 909.801739] TCPv6 21KB 30KB [ 909.807535] nf_conntrack 4KB 15KB [ 909.813002] t10_alua_lu_gp_cache 0KB 3KB [ 909.818826] sd_ext_cdb 0KB 7KB [ 909.824228] scsi_sense_cache 1056KB 1060KB [ 909.829590] virtio_scsi_cmd 16KB 16KB [ 909.887710] sgpool-128 8KB 8KB [ 909.917750] sgpool-64 4KB 12KB [ 909.965247] sgpool-32 2KB 15KB [ 910.007337] sgpool-16 1KB 7KB [ 910.086702] sgpool-8 0KB 7KB [ 910.152505] mqueue_inode_cache 12KB 22KB [ 910.157988] bio_post_read_ctx 14KB 15KB [ 910.236369] bio-2 14KB 15KB [ 910.284723] jfs_mp 7KB 7KB [ 910.316682] cifs_small_rq 15KB 16KB [ 910.376094] cifs_request 67KB 67KB [ 910.418704] cifs_mpx_ids 0KB 7KB [ 910.478444] nfs_commit_data 3KB 14KB [ 910.535401] nfs_write_data 34KB 44KB [ 910.586491] ext4_system_zone 1KB 7KB [ 910.639058] bio-1 1KB 7KB [ 910.709423] pid_namespace 2KB 7KB [ 910.776938] rpc_buffers 17KB 25KB [ 910.813172] rpc_tasks 2KB 7KB [ 910.818565] UNIX 718KB 731KB [ 910.906200] tcp_bind_bucket 1KB 4KB [ 910.956127] ip_fib_trie 27KB 31KB [ 911.025550] ip_fib_alias 130KB 134KB [ 911.065528] ip_dst_cache 17KB 48KB [ 911.117466] RAW 48KB 52KB [ 911.174235] UDP 45KB 67KB [ 911.217927] TCP 5KB 5KB [ 911.274816] hugetlbfs_inode_cache 3KB 15KB [ 911.325140] fscache_cookie_jar 1KB 11KB [ 911.373407] eventpoll_pwq 23KB 47KB [ 911.378796] eventpoll_epi 42KB 66KB [ 911.462837] inotify_inode_mark 16KB 51KB [ 911.468317] request_queue 199KB 199KB [ 911.544948] blkdev_requests 1KB 3KB [ 911.592883] blkdev_ioc 34KB 34KB [ 911.598270] bio-0 1825KB 1852KB [ 911.677631] biovec-max 1872KB 1872KB [ 911.730186] biovec-64 1680KB 1685KB [ 911.735576] biovec-16 215KB 217KB [ 911.836642] bio_integrity_payload 1KB 8KB [ 911.882187] khugepaged_mm_slot 10KB 34KB [ 911.887673] uid_cache 0KB 4KB [ 911.972885] dmaengine-unmap-2 0KB 3KB [ 911.978283] skbuff_fclone_cache 113KB 138KB [ 912.055655] skbuff_head_cache 8422KB 8422KB [ 912.105412] configfs_dir_cache 3KB 11KB [ 912.141045] file_lock_cache 69KB 150KB [ 912.146447] file_lock_ctx 9KB 11KB [ 912.168911] fsnotify_mark_connector 8KB 31KB [ 912.178039] net_namespace 61KB 61KB [ 912.183517] shmem_inode_cache 8130KB 8263KB [ 912.188880] task_delay_info 230KB 407KB [ 912.207493] taskstats 75KB 141KB [ 912.217715] proc_dir_entry 758KB 761KB [ 912.223152] pde_opener 7KB 54KB [ 912.228509] seq_file 255KB 507KB [ 912.239247] sigqueue 57KB 59KB [ 912.276242] kernfs_node_cache 18015KB 18108KB [ 912.303060] mnt_cache 190KB 200KB [ 912.308440] filp 6591KB 7608KB [ 912.374809] names_cache 126556KB 126611KB [ 912.417973] iint_cache 32KB 67KB [ 912.468533] key_jar 4KB 11KB [ 912.514164] uts_namespace 3KB 7KB [ 912.562829] nsproxy 1KB 7KB [ 912.568221] vm_area_struct 3507KB 4872KB [ 912.656283] mm_struct 507KB 793KB [ 912.722437] fs_cache 146KB 336KB [ 912.727829] files_cache 558KB 558KB [ 912.825173] signal_cache 1147KB 1487KB [ 912.866969] sighand_cache 582KB 638KB [ 912.918881] task_struct 7846KB 7846KB [ 912.967805] cred_jar 1619KB 2152KB [ 913.013004] anon_vma_chain 1158KB 1803KB [ 913.018399] anon_vma 113KB 261KB [ 913.124122] pid 83KB 260KB [ 913.195509] Acpi-Operand 156KB 202KB [ 913.237448] Acpi-ParseExt 8KB 11KB [ 913.296876] Acpi-Parse 41KB 47KB [ 913.348058] Acpi-State 52KB 63KB [ 913.395690] Acpi-Namespace 21KB 27KB [ 913.438953] numa_policy 0KB 3KB [ 913.485340] debug_objects_cache 1179KB 1568KB [ 913.527964] trace_event_file 297KB 298KB [ 913.574133] ftrace_event_field 398KB 401KB [ 913.623119] pool_workqueue 126KB 128KB [ 913.628510] page->ptl 584KB 1047KB [ 913.713370] kmalloc-2097152 2050KB 2050KB [ 913.718784] kmalloc-524288 2056KB 2056KB [ 913.788628] kmalloc-262144 1290KB 1290KB [ 913.853121] kmalloc-131072 650KB 650KB [ 913.858513] kmalloc-65536 2112KB 2178KB [ 913.958796] kmalloc-32768 1815KB 1815KB [ 914.005013] kmalloc-16384 1056KB 1138KB [ 914.046386] kmalloc-8192 4240KB 4240KB [ 914.083684] kmalloc-4096 21534KB 21573KB [ 914.089074] kmalloc-2048 13748KB 13750KB [ 914.177215] kmalloc-1024 8008KB 8064KB [ 914.206704] kmalloc-512 17470KB 17557KB [ 914.259508] kmalloc-256 4732KB 5223KB [ 914.264921] kmalloc-128 1098KB 1488KB [ 914.348685] kmalloc-96 3775KB 4020KB [ 914.392720] kmalloc-64 2640KB 4200KB [ 914.398114] kmalloc-32 1977KB 2445KB [ 914.468076] kmalloc-192 1709KB 2280KB [ 914.516757] kmem_cache 177KB 183KB [ 914.569537] Out of memory: Kill process 14128 (syz-executor.0) score 1002 or sacrifice child [ 914.578649] Killed process 14133 (syz-executor.0) total-vm:60680kB, anon-rss:2548kB, file-rss:14336kB, shmem-rss:72kB [ 914.740112] oom_reaper: reaped process 14133 (syz-executor.0), now anon-rss:0kB, file-rss:14332kB, shmem-rss:8kB [ 914.815215] kthreadd invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 914.875563] kthreadd cpuset=/ mems_allowed=0-1 [ 914.939510] CPU: 0 PID: 2 Comm: kthreadd Not tainted 4.19.211-syzkaller #0 [ 914.946551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 914.955904] Call Trace: [ 914.959804] dump_stack+0x1fc/0x2ef [ 914.963967] dump_header+0x15d/0xc3f [ 914.967698] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 914.972804] ? ___ratelimit+0x319/0x590 [ 914.976872] oom_kill_process.cold+0x10/0x692 [ 914.981371] ? oom_badness.part.0+0x135/0x6e0 [ 914.985891] ? lock_downgrade+0x720/0x720 [ 914.990043] ? check_preemption_disabled+0x41/0x280 [ 914.995062] out_of_memory+0x34d/0x1390 [ 914.999043] ? oom_killer_disable+0x270/0x270 [ 915.003560] ? mutex_trylock+0x15f/0x1a0 [ 915.007632] __alloc_pages_nodemask+0x23a2/0x2890 [ 915.012474] ? mark_held_locks+0xf0/0xf0 [ 915.016522] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 915.021367] ? should_fail+0x142/0x7b0 [ 915.025235] ? fs_reclaim_release+0xd0/0x110 [ 915.029652] ? check_preemption_disabled+0x41/0x280 [ 915.034655] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 915.039653] ? kmem_cache_alloc_node+0x351/0x3b0 [ 915.044391] copy_process.part.0+0x3cf/0x8260 [ 915.048870] ? update_curr+0x3b9/0x870 [ 915.052743] ? mark_held_locks+0xf0/0xf0 [ 915.056802] ? kthread_park+0x180/0x180 [ 915.060760] ? __cleanup_sighand+0x60/0x60 [ 915.064979] ? mark_held_locks+0xf0/0xf0 [ 915.069024] ? _raw_spin_unlock_irq+0x24/0x80 [ 915.073515] _do_fork+0x22f/0xf30 [ 915.076949] ? kthread_park+0x180/0x180 [ 915.080909] ? fork_idle+0x220/0x220 [ 915.084602] ? kthreadd+0x4eb/0x7b0 [ 915.088216] ? lock_downgrade+0x720/0x720 [ 915.092367] ? lock_acquire+0x170/0x3c0 [ 915.096321] ? kthreadd+0x3ec/0x7b0 [ 915.099931] ? kthread_park+0x180/0x180 [ 915.103889] kernel_thread+0x2f/0x40 [ 915.107584] kthreadd+0x544/0x7b0 [ 915.111021] ? kthread_is_per_cpu+0xe0/0xe0 [ 915.115321] ? kthread_is_per_cpu+0xe0/0xe0 [ 915.119624] ret_from_fork+0x24/0x30 [ 915.131921] Mem-Info: [ 915.134372] active_anon:2666 inactive_anon:23040 isolated_anon:0 [ 915.134372] active_file:35 inactive_file:15 isolated_file:0 [ 915.134372] unevictable:0 dirty:0 writeback:0 unstable:0 [ 915.134372] slab_reclaimable:15378 slab_unreclaimable:114678 [ 915.134372] mapped:3603 shmem:23470 pagetables:364 bounce:0 [ 915.134372] free:13846 free_pcp:207 free_cma:0 [ 915.173987] Node 0 active_anon:9860kB inactive_anon:18868kB active_file:132kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:14412kB dirty:0kB writeback:0kB shmem:20132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 915.205174] syz-executor.0: vmalloc: allocation failure, allocated 1876791296 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 915.208925] Node 1 active_anon:804kB inactive_anon:73292kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:73748kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 915.243694] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 915.251933] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 915.284478] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 915.289590] Node 0 DMA32 free:18656kB min:35996kB low:44992kB high:53988kB active_anon:9860kB inactive_anon:18868kB active_file:132kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:6912kB pagetables:1456kB bounce:0kB free_pcp:476kB local_pcp:224kB free_cma:0kB [ 915.326235] lowmem_reserve[]: 0 0 1 1 1 [ 915.330507] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 915.355089] CPU: 1 PID: 14133 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 915.363005] lowmem_reserve[]: 0 0 0 0 0 [ 915.364361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 915.368322] Node 1 Normal free:26668kB min:53876kB low:67344kB high:80812kB active_anon:804kB inactive_anon:73292kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:0kB bounce:0kB free_pcp:356kB local_pcp:108kB free_cma:0kB [ 915.377659] Call Trace: [ 915.377681] dump_stack+0x1fc/0x2ef [ 915.377698] warn_alloc.cold+0x7b/0x18f [ 915.377715] ? zone_watermark_ok_safe+0x260/0x260 [ 915.377728] ? retint_kernel+0x2d/0x2d [ 915.377763] __vmalloc_area_node+0x4fd/0x780 [ 915.419912] lowmem_reserve[]: 0 0 0 0 0 [ 915.421102] ? __vmalloc_node_range+0x180/0x180 [ 915.424965] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 915.429371] ? _raw_spin_unlock+0x29/0x40 [ 915.445809] Node 0 DMA32: 1592*4kB (UME) 813*8kB (UME) 207*16kB (UME) 58*32kB (UME) 12*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18808kB [ 915.450458] ? __get_vm_area_node+0x2e2/0x3a0 [ 915.450478] __vmalloc_node_range+0xed/0x180 [ 915.450495] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 915.450509] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 915.450521] vmalloc_user+0x70/0xe0 [ 915.450541] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 915.456828] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 915.468943] vb2_vmalloc_alloc+0xb3/0x2f0 [ 915.468959] __vb2_queue_alloc+0x472/0xe60 [ 915.468984] vb2_core_create_bufs+0x273/0x7e0 [ 915.468999] ? __vb2_queue_free+0x870/0x870 [ 915.469013] ? __video_do_ioctl+0x632/0xcd0 [ 915.469032] ? pi_state_update_owner+0x450/0x450 [ 915.469048] ? __mutex_lock+0x368/0x1190 [ 915.469065] vb2_create_bufs+0x332/0x620 [ 915.469082] ? mark_held_locks+0xf0/0xf0 [ 915.469095] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 915.469105] ? futex_wait_queue_me+0x404/0x5e0 [ 915.469121] ? pi_state_update_owner+0x450/0x450 [ 915.496682] Node 1 Normal: 85*4kB (UME) 75*8kB (ME) 72*16kB (ME) 56*32kB (UME) 48*64kB (UME) 36*128kB (UME) 9*256kB (ME) 3*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (U) = 26668kB [ 915.506645] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 915.506663] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 915.506685] v4l_create_bufs+0xb2/0x160 [ 915.506703] __video_do_ioctl+0x49a/0xcd0 [ 915.506721] ? v4l_querycap+0x340/0x340 [ 915.506739] ? __might_fault+0x192/0x1d0 [ 915.506756] ? v4l_querycap+0x340/0x340 [ 915.506769] video_usercopy+0x13f/0xfa0 [ 915.506790] ? v4l_enumstd+0x60/0x60 [ 915.506805] ? do_futex+0x171/0x1880 [ 915.506826] ? mark_held_locks+0xf0/0xf0 [ 915.506844] ? debug_check_no_obj_freed+0x201/0x490 [ 915.506867] ? video_usercopy+0xfa0/0xfa0 [ 915.506880] v4l2_ioctl+0x147/0x1a0 [ 915.506893] ? video_devdata+0xa0/0xa0 [ 915.506909] do_vfs_ioctl+0xcdb/0x12e0 [ 915.506925] ? lock_downgrade+0x720/0x720 [ 915.506941] ? check_preemption_disabled+0x41/0x280 [ 915.506955] ? ioctl_preallocate+0x200/0x200 [ 915.506974] ? __fget+0x356/0x510 [ 915.506991] ? do_dup2+0x450/0x450 [ 915.507005] ? __se_sys_futex+0x298/0x3b0 [ 915.507027] ksys_ioctl+0x9b/0xc0 [ 915.507043] __x64_sys_ioctl+0x6f/0xb0 [ 915.507057] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 915.507072] do_syscall_64+0xf9/0x620 [ 915.507089] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 915.507102] RIP: 0033:0x7f68c24140f9 [ 915.507116] Code: Bad RIP value. [ 915.507124] RSP: 002b:00007f68c0986168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 915.507137] RAX: ffffffffffffffda RBX: 00007f68c2533f80 RCX: 00007f68c24140f9 [ 915.507145] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000003 [ 915.507153] RBP: 00007f68c246fae9 R08: 0000000000000000 R09: 0000000000000000 [ 915.507160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 915.507169] R13: 00007fff6155d44f R14: 00007f68c0986300 R15: 0000000000022000 [ 915.766180] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 915.837911] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 915.880275] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 915.889140] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 915.896851] Mem-Info: [ 915.956949] active_anon:2641 inactive_anon:23040 isolated_anon:0 [ 915.956949] active_file:37 inactive_file:0 isolated_file:0 [ 915.956949] unevictable:0 dirty:0 writeback:0 unstable:0 [ 915.956949] slab_reclaimable:15353 slab_unreclaimable:114434 [ 915.956949] mapped:3587 shmem:23470 pagetables:363 bounce:0 [ 915.956949] free:14317 free_pcp:0 free_cma:0 [ 915.996454] 23504 total pagecache pages [ 916.047135] Node 0 active_anon:9764kB inactive_anon:18868kB active_file:116kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:14348kB dirty:0kB writeback:0kB shmem:20132kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 916.055645] 0 pages in swap cache [ 916.133390] Node 1 active_anon:800kB inactive_anon:73292kB active_file:16kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:73748kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 916.166314] Swap cache stats: add 0, delete 0, find 0/0 [ 916.187069] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 916.208812] Free swap = 0kB [ 916.231193] Total swap = 0kB [ 916.234230] 2097051 pages RAM [ 916.237325] 0 pages HighMem/MovableOnly [ 916.244764] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 916.267240] 369649 pages reserved [ 916.277650] Node 0 DMA32 free:19284kB min:35996kB low:44992kB high:53988kB active_anon:9764kB inactive_anon:18868kB active_file:108kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:6912kB pagetables:1452kB bounce:0kB free_pcp:232kB local_pcp:0kB free_cma:0kB [ 916.297266] 0 pages cma reserved [ 916.348427] Unreclaimable slab info: [ 916.353938] lowmem_reserve[]: 0 0 1 1 1 [ 916.357941] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 916.358911] Name Used Total [ 916.434407] lowmem_reserve[]: 0 0 0 0 0 [ 916.438426] Node 1 Normal free:26868kB min:53876kB low:67344kB high:80812kB active_anon:800kB inactive_anon:73292kB active_file:16kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 916.447661] pid_2 75KB 152KB [ 916.488592] lowmem_reserve[]: 0 0 0 0 0 [ 916.492648] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 916.527202] Node 0 DMA32: 1612*4kB (UME) 833*8kB (UME) 209*16kB (UME) 61*32kB (UME) 14*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19304kB [ 916.563917] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 916.574113] batadv_tt_change_cache 0KB 3KB [ 916.621987] Node 1 Normal: 86*4kB (UME) 77*8kB (UME) 75*16kB (UME) 55*32kB (ME) 49*64kB (UME) 36*128kB (UME) 10*256kB (UME) 3*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (U) = 27024kB [ 916.634026] batadv_tl_cache 5KB 12KB [ 916.659304] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 916.668267] TIPC 12KB 15KB [ 916.677269] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 916.719124] SCTPv6 16KB 24KB [ 916.721163] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 916.758675] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 916.788361] 23504 total pagecache pages [ 916.789458] SCTP 5KB 7KB [ 916.797719] DCCPv6 17KB 30KB [ 916.828389] DCCP 16KB 21KB [ 916.874090] RXRPC 13KB 13KB [ 916.877965] 0 pages in swap cache [ 916.882986] Swap cache stats: add 0, delete 0, find 0/0 [ 916.888349] Free swap = 0kB [ 916.924403] Total swap = 0kB [ 916.924977] rxrpc_call_jar 90KB 94KB [ 916.927453] 2097051 pages RAM [ 916.959115] bridge_fdb_cache 10KB 15KB [ 916.961093] 0 pages HighMem/MovableOnly [ 916.968458] 369649 pages reserved [ 917.008346] fib6_nodes 183KB 188KB [ 917.013232] 0 pages cma reserved [ 917.046996] ip6_dst_cache 221KB 311KB [ 917.052460] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 917.088691] RAWv6 81KB 81KB [ 917.148940] UDPv6 28KB 33KB [ 917.174075] TCPv6 21KB 30KB [ 917.188053] nf_conntrack 4KB 15KB [ 917.228660] t10_alua_lu_gp_cache 0KB 3KB [ 917.254416] sd_ext_cdb 0KB 7KB [ 917.288193] scsi_sense_cache 1056KB 1060KB [ 917.316408] virtio_scsi_cmd 16KB 16KB [ 917.366655] sgpool-128 8KB 8KB [ 917.375833] sgpool-64 4KB 12KB [ 917.426267] sgpool-32 2KB 15KB [ 917.451516] sgpool-16 1KB 7KB [ 917.456904] sgpool-8 0KB 7KB [ 917.465548] mqueue_inode_cache 12KB 22KB [ 917.488869] bio_post_read_ctx 14KB 15KB [ 917.516456] bio-2 14KB 15KB [ 917.541810] jfs_mp 7KB 7KB [ 917.547233] cifs_small_rq 15KB 16KB [ 917.577347] cifs_request 67KB 67KB [ 917.608127] cifs_mpx_ids 0KB 7KB [ 917.685470] nfs_commit_data 3KB 14KB [ 917.695885] nfs_write_data 34KB 44KB [ 917.707838] ext4_system_zone 1KB 7KB [ 917.763451] bio-1 1KB 7KB [ 917.768851] pid_namespace 2KB 7KB [ 917.777668] rpc_buffers 17KB 25KB [ 917.846706] rpc_tasks 2KB 7KB [ 917.878334] UNIX 714KB 731KB [ 917.942520] tcp_bind_bucket 1KB 4KB [ 917.947921] ip_fib_trie 27KB 31KB [ 917.981080] ip_fib_alias 130KB 134KB [ 917.986474] ip_dst_cache 15KB 48KB [ 918.005730] RAW 48KB 52KB [ 918.017747] UDP 45KB 67KB [ 918.037837] TCP 5KB 5KB [ 918.048577] hugetlbfs_inode_cache 3KB 15KB [ 918.067235] fscache_cookie_jar 1KB 11KB [ 918.097152] eventpoll_pwq 23KB 47KB [ 918.105444] eventpoll_epi 42KB 66KB [ 918.137238] inotify_inode_mark 16KB 47KB [ 918.167039] request_queue 199KB 199KB [ 918.206226] blkdev_requests 1KB 3KB [ 918.229112] blkdev_ioc 34KB 34KB [ 918.265895] bio-0 1830KB 1856KB [ 918.296333] biovec-max 1872KB 1872KB [ 918.328797] biovec-64 1680KB 1685KB [ 918.358683] biovec-16 215KB 217KB [ 918.389338] bio_integrity_payload 1KB 8KB [ 918.395076] khugepaged_mm_slot 10KB 34KB [ 918.437107] uid_cache 0KB 4KB [ 918.468211] dmaengine-unmap-2 0KB 3KB [ 918.504669] skbuff_fclone_cache 111KB 138KB [ 918.537980] skbuff_head_cache 8733KB 8733KB [ 918.573629] configfs_dir_cache 3KB 11KB [ 918.598114] file_lock_cache 66KB 146KB [ 918.632539] file_lock_ctx 9KB 11KB [ 918.637938] fsnotify_mark_connector 8KB 31KB [ 918.716775] net_namespace 61KB 61KB [ 918.759037] shmem_inode_cache 8123KB 8259KB [ 918.784315] task_delay_info 226KB 407KB [ 918.818540] taskstats 75KB 141KB [ 918.848747] proc_dir_entry 758KB 761KB [ 918.882382] pde_opener 7KB 54KB [ 918.887768] seq_file 252KB 507KB [ 918.969316] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 918.977101] sigqueue 56KB 59KB [ 919.039206] kernfs_node_cache 17983KB 18084KB [ 919.105031] mnt_cache 190KB 200KB [ 919.158925] filp 6540KB 7605KB [ 919.183348] names_cache 125400KB 125447KB [ 919.188751] iint_cache 32KB 67KB [ 919.216279] key_jar 4KB 11KB [ 919.238901] uts_namespace 3KB 7KB [ 919.308767] nsproxy 1KB 7KB [ 919.342883] vm_area_struct 3423KB 4861KB [ 919.348272] mm_struct 498KB 786KB [ 919.388956] fs_cache 145KB 332KB [ 919.423780] files_cache 554KB 558KB [ 919.429195] signal_cache 1139KB 1487KB [ 919.516092] sighand_cache 571KB 638KB [ 919.525522] task_struct 7732KB 7777KB [ 919.536890] cred_jar 1604KB 2152KB [ 919.546741] anon_vma_chain 1132KB 1803KB [ 919.554777] anon_vma 113KB 261KB [ 919.581667] pid 80KB 260KB [