msg$NL80211_CMD_CONNECT(r6, &(0x7f0000013980)={&(0x7f0000013840), 0xc, &(0x7f0000013940)={&(0x7f0000013880)={0xa0, r8, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x44}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3f}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x6b, 0x115, "aaec76352b3afce6c5e7a6ba24d54d4fdba88a8514d360666079bc6dcd2624d8051b58c4763f0600b51016d618456cccadccc0e52e744c7ad1ca57eedb7bcc871337d08d5761b17a5f68a1b68e3566eaa1264a96a0af6d45c370fdb4f98cb38889f3263ebffb45"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xa0}}, 0x24008801) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000013140)={0x3c8, r9, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xe7, 0x4}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_FILS_ERP_REALM={0xb7, 0xfa, "e755aefe823672e72618b4eb858aa4f3c7fea8535d7b8fb2f150dc39233fa42b5474330e047f9cfe8ae96fae24c44ae940a887c00a5822fc43316912ab76ac5288c63ec083c395f90c867aec2cd9c58ecc352c298aaa259e98c22d283567c19a752d26f83f36ff4387546a21de9bc434b781dd46f55543c7b3131c5880842b93db0f39cabd4ad3a64fc16548416a4d3f2bd80af0dd666e03cfe015a5b569d52463b03493e882501e8e8a0a3daf18fdd477c2bf"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "18783be1"}, @NL80211_ATTR_FILS_ERP_RRK={0xa2, 0xfc, "ec4a315a3c5bfc7b17a06b983990139d8bff3390155cabf80d6761e1fb82f89edd36d816ecbbea3954bef3a209afdc3c4a0116d1616a1f9a41f7df82594507f8d1ba4189e5ff02bcf25a3ac2fa3490042879b5fc922435ef180429e132c223847ec6a20bfc732997879bde75d13ed744fe3d670a0daf161373bd6cadec24765360f379e810e4842c45c45d8b4cdc918a777bf0981f23a4109db7ce51f150"}, @NL80211_ATTR_FILS_ERP_REALM={0xc0, 0xfa, "61edf10b52ed29ca4ca19ee03e416606356785d98e1bdbe40097de807ea28fd1b5b15dfe24bfd6b6ba2ae20ef39e6198326bd97f6e64b3cba17d4f6de041d62b1524fac150c84b2c7317b152238a09f80459643f0c353fe24b8572bb8e2e3415b38969e6197cd1980f7d726c3655ad20ae5e32383232463aefcd8f93bca718ad7a122cd71de61048c90405033ab1f0c737bd7343666dc236d50a4a0c421c1d876799ffa37ee5ab97a2b1272595830b33a2afb33fd315f95b30fd4d2f"}, @NL80211_ATTR_FILS_ERP_REALM={0x42, 0xfa, "9ab6d3559bf625008020e483dd66f01a34313f8adc68636e04a1f23f3d8de8f37c32ccfded067eae7ee77d60bd74990481afdf2d1a0b89ce1204729d93a5"}, @NL80211_ATTR_FILS_ERP_REALM={0x68, 0xfa, "b577a44fcc29fa8805fbf5842c9636a7615dd950213bdfc82ad6b45a2cd0c2cfc463a50af0007dc1d4f8e460280a50ac8514763ded78080025db845f459f0e3a9adff52b28750b780303534a8cbc5cc5f67125b34eb195aadf731ae2f52973c4b61d2841"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2d8e}], @NL80211_ATTR_IE={0x98, 0x2a, [@gcr_ga={0xbd, 0x6, @broadcast}, @measure_req={0x26, 0x7e, {0x7f, 0x3f, 0x81, "02fc809744dcb2865521c93cfb04e7d57017de308166512521bc7ab6c9dc80113a855ea9567f4c501470c7dd478f9e2bcbe03fae33eb439ad92ef254bead4d36a81d343696791d9f5e56bd9ac922da5388ef332ce51840ab4fa309109ff8088ebe29ac7f464c86a74fa1bfeaa3739bc1740a1af0153f19d33b7e27"}}, @measure_req={0x26, 0x5, {0xfd, 0x20, 0x1, "6e1f"}}, @channel_switch={0x25, 0x3, {0x1, 0x0, 0xce}}]}, @NL80211_ATTR_IE={0x2e, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @channel_switch={0x25, 0x3, {0x0, 0x2}}, @link_id={0x65, 0x12, {@random="4555deaa858f", @device_b}}, @mesh_chsw={0x76, 0x6, {0x8b, 0xeb, 0xc, 0x1}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x6, 0x5, 0x5}}]}]}, 0x3c8}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) (async) r10 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async, rerun: 32) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) (rerun: 32) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r12, &(0x7f0000013800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000137c0)={&(0x7f0000013740)={0x50, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x40}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000040}, 0x4) (async) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000013540)={0x1fc, r11, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1e0, 0x3, 0x0, 0x1, [{0xa4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x9e, 0x1, "a65c75e9bde18e91f69241fd9d61dae12042615a879c37cb0d7f30507a6f4150bc0878a46a33796ce20775f1fd4cdc21d4257259b221d542a34c4289b95c0536982633d05415850968218a6df84a33316b4d2bc36f49881c03b0f4822a7ef2bad438376164ae65788453e5268a9b0d8e9c517f9d8887183e756897245e702c408e6cf496c04deff5906f55cdc4b9c028e61cc282820655a59a9b"}}, {0x108, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x103, 0x2, "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"}}, {0x30, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x2c, 0x2, "a705b9405d27fcad128525073eb2dad811ce49e48eaac5f7dd48e06615760b5e4f379b60111b1f22"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async, rerun: 32) ioctl$vim2m_VIDIOC_G_FMT(r10, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x6, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x1}, {0x2}]}}) (rerun: 32) 13:05:49 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "84ed25f331eab2d57306d08822179f2b3af0de54fa30ff0a587dfdb1394f9ae4", 0x519487d7}) 13:05:49 executing program 2: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0x5421, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x154, r5, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x4d}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0xf4, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xeb, 0x1, "af12612a733dd95b571c9108e75c933a654e56b42ece91b0df4cdd9d060470003c5108550f824d2b095e9dc1712e508eb7f6d0b839eadbaae5e080cc48fc60b8c6e7415a191fa8c48c774fd519ed713277656cbb79a5e54f2dbcae9809b51c11553b44909187f378b903f39d276236cbdeea11dad28cdf0c62c6ce8e62e03c3f91c7c6cac138e80e5e00660e30836c377f7df64b66b1f787f385fb831bea329d2b19291d4f556aac6b0077893dab98844e48f2230e7b3c3aa2a868a70fff2d3fb1b29524413c4e877efa14ce8b5a00b3f0ba8f78150ee7e0519d120d0645bc0b6a8030925953dc"}, @NL80211_BAND_60GHZ={0x4}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x5d}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x154}, 0x1, 0x0, 0x0, 0x48000}, 0x4008041) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)) (async) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) (async) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)) (async) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) (async) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r2, 0x5421, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x154, r5, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x4d}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0xf4, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xeb, 0x1, "af12612a733dd95b571c9108e75c933a654e56b42ece91b0df4cdd9d060470003c5108550f824d2b095e9dc1712e508eb7f6d0b839eadbaae5e080cc48fc60b8c6e7415a191fa8c48c774fd519ed713277656cbb79a5e54f2dbcae9809b51c11553b44909187f378b903f39d276236cbdeea11dad28cdf0c62c6ce8e62e03c3f91c7c6cac138e80e5e00660e30836c377f7df64b66b1f787f385fb831bea329d2b19291d4f556aac6b0077893dab98844e48f2230e7b3c3aa2a868a70fff2d3fb1b29524413c4e877efa14ce8b5a00b3f0ba8f78150ee7e0519d120d0645bc0b6a8030925953dc"}, @NL80211_BAND_60GHZ={0x4}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x5d}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x154}, 0x1, 0x0, 0x0, 0x48000}, 0x4008041) (async) 13:05:49 executing program 5: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x7fffffff, 0x1, 0x0, "84ed25f331eab2d57306d08822179f2b3af0de54fa30ff0a587dfdb1394f9ae4", 0x519487d7}) 13:05:49 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x9, 0x41414770, 0x2, @discrete={0x2, 0x7fff}}) 13:05:49 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffffd, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) 13:05:49 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x7fffffff, 0x0, 0x0, "84ed25f331eab2d57306d08822179f2b3af0de54fa30ff0a587dfdb1394f9ae4", 0x519487d7}) 13:05:49 executing program 5: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x7fffffff, 0x1, 0x0, "84ed25f331eab2d57306d08822179f2b3af0de54fa30ff0a587dfdb1394f9ae4", 0x519487d7}) 13:05:49 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x9, 0x41414770, 0x2, @discrete={0x2, 0x7fff}}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x9, 0x41414770, 0x2, @discrete={0x2, 0x7fff}}) 13:05:49 executing program 2: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) (async) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) (async) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) (async, rerun: 64) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async, rerun: 64) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0x5421, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x154, r5, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x4d}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0xf4, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xeb, 0x1, "af12612a733dd95b571c9108e75c933a654e56b42ece91b0df4cdd9d060470003c5108550f824d2b095e9dc1712e508eb7f6d0b839eadbaae5e080cc48fc60b8c6e7415a191fa8c48c774fd519ed713277656cbb79a5e54f2dbcae9809b51c11553b44909187f378b903f39d276236cbdeea11dad28cdf0c62c6ce8e62e03c3f91c7c6cac138e80e5e00660e30836c377f7df64b66b1f787f385fb831bea329d2b19291d4f556aac6b0077893dab98844e48f2230e7b3c3aa2a868a70fff2d3fb1b29524413c4e877efa14ce8b5a00b3f0ba8f78150ee7e0519d120d0645bc0b6a8030925953dc"}, @NL80211_BAND_60GHZ={0x4}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x5d}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x154}, 0x1, 0x0, 0x0, 0x48000}, 0x4008041) 13:05:49 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x6, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x8}, 0x1) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c5fc3b764d6a5496f8d30e569391d1e792f029fe9005a0ed3a9eea367ffe149528606c542d1b3f7b6136a2ec0280ec0d36a6e8c8fb066f510ada97387dc71d295dbcd302e6c057d1110c3d4e3c54254b2e07a10085680e06b337dc41e5bb8933ab210c0e25f2669d0ff6a999a0e8e8a99394e8f3124588f8a53c1a30f9fc1056e04d9abd838bba4ab6da2fd780d4f73a7278f63c187e33b0a1619d903f7dc8d687c", @ANYRES16=r4, @ANYBLOB="000229bd7000fddbdf25670000000c00990007000000130000000800c300a6cc00005500c500d73404037570bd6ea4347c16c81afac62855b8c7e4f224dc8e7014d2232b193ea65865567630b6a9c64279d8e7692b141262256e04903f1954e32500227ee107542db8e9f13cf5d915996ff1753feaedab0000002d00c500ff5855cd6e70277fd557975c8e5d7a22258f198cac40a122627c0c32b207d2ba0e007a6ea44f23d705000000"], 0xb0}, 0x1, 0x0, 0x0, 0x20000089}, 0x8040) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, &(0x7f0000000580)={0x0, @sdr={0x36314d59, 0x7e2}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x5, 0x6, 0x2, {0x0, @pix_mp={0x6, 0x6, 0x32344d59, 0x9, 0xa, [{0x3f, 0x7}, {0x2, 0x5083}, {0x773d0ab9}, {0x5, 0x3f}, {0x2, 0xffff}, {0x8001, 0x6}, {0xfffeffff, 0x2}, {0x61b, 0x1}], 0xff, 0x1, 0x6, 0x2, 0x4}}, 0x6}) 13:05:49 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x7fffffff, 0x0, 0x0, "84ed25f331eab2d57306d08822179f2b3af0de54fa30ff0a587dfdb1394f9ae4", 0x519487d7}) 13:05:49 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async, rerun: 32) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffffd, 0x2) (rerun: 32) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) 13:05:49 executing program 5: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x7fffffff, 0x1, 0x0, "84ed25f331eab2d57306d08822179f2b3af0de54fa30ff0a587dfdb1394f9ae4", 0x519487d7}) 13:05:49 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x7fffffff, 0x0, 0x0, "84ed25f331eab2d57306d08822179f2b3af0de54fa30ff0a587dfdb1394f9ae4", 0x519487d7}) 13:05:49 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x9, 0x41414770, 0x2, @discrete={0x2, 0x7fff}}) 13:05:49 executing program 5: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x7fffffff, 0x1, 0x0, "84ed25f331eab2d57306d08822179f2b3af0de54fa30ff0a587dfdb1394f9ae4", 0x519487d7}) 13:05:49 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffffd, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffffd, 0x2) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) (async) 13:05:49 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x6, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x8}, 0x1) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c5fc3b764d6a5496f8d30e569391d1e792f029fe9005a0ed3a9eea367ffe149528606c542d1b3f7b6136a2ec0280ec0d36a6e8c8fb066f510ada97387dc71d295dbcd302e6c057d1110c3d4e3c54254b2e07a10085680e06b337dc41e5bb8933ab210c0e25f2669d0ff6a999a0e8e8a99394e8f3124588f8a53c1a30f9fc1056e04d9abd838bba4ab6da2fd780d4f73a7278f63c187e33b0a1619d903f7dc8d687c", @ANYRES16=r4, @ANYBLOB="000229bd7000fddbdf25670000000c00990007000000130000000800c300a6cc00005500c500d73404037570bd6ea4347c16c81afac62855b8c7e4f224dc8e7014d2232b193ea65865567630b6a9c64279d8e7692b141262256e04903f1954e32500227ee107542db8e9f13cf5d915996ff1753feaedab0000002d00c500ff5855cd6e70277fd557975c8e5d7a22258f198cac40a122627c0c32b207d2ba0e007a6ea44f23d705000000"], 0xb0}, 0x1, 0x0, 0x0, 0x20000089}, 0x8040) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, &(0x7f0000000580)={0x0, @sdr={0x36314d59, 0x7e2}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x5, 0x6, 0x2, {0x0, @pix_mp={0x6, 0x6, 0x32344d59, 0x9, 0xa, [{0x3f, 0x7}, {0x2, 0x5083}, {0x773d0ab9}, {0x5, 0x3f}, {0x2, 0xffff}, {0x8001, 0x6}, {0xfffeffff, 0x2}, {0x61b, 0x1}], 0xff, 0x1, 0x6, 0x2, 0x4}}, 0x6}) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$inet_sctp(0x2, 0x6, 0x84) (async) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x8}, 0x1) (async) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)) (async) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) (async) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) (async) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c5fc3b764d6a5496f8d30e569391d1e792f029fe9005a0ed3a9eea367ffe149528606c542d1b3f7b6136a2ec0280ec0d36a6e8c8fb066f510ada97387dc71d295dbcd302e6c057d1110c3d4e3c54254b2e07a10085680e06b337dc41e5bb8933ab210c0e25f2669d0ff6a999a0e8e8a99394e8f3124588f8a53c1a30f9fc1056e04d9abd838bba4ab6da2fd780d4f73a7278f63c187e33b0a1619d903f7dc8d687c", @ANYRES16=r4, @ANYBLOB="000229bd7000fddbdf25670000000c00990007000000130000000800c300a6cc00005500c500d73404037570bd6ea4347c16c81afac62855b8c7e4f224dc8e7014d2232b193ea65865567630b6a9c64279d8e7692b141262256e04903f1954e32500227ee107542db8e9f13cf5d915996ff1753feaedab0000002d00c500ff5855cd6e70277fd557975c8e5d7a22258f198cac40a122627c0c32b207d2ba0e007a6ea44f23d705000000"], 0xb0}, 0x1, 0x0, 0x0, 0x20000089}, 0x8040) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, &(0x7f0000000580)={0x0, @sdr={0x36314d59, 0x7e2}}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x5, 0x6, 0x2, {0x0, @pix_mp={0x6, 0x6, 0x32344d59, 0x9, 0xa, [{0x3f, 0x7}, {0x2, 0x5083}, {0x773d0ab9}, {0x5, 0x3f}, {0x2, 0xffff}, {0x8001, 0x6}, {0xfffeffff, 0x2}, {0x61b, 0x1}], 0xff, 0x1, 0x6, 0x2, 0x4}}, 0x6}) (async) 13:05:49 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x7fffffff, 0x1, 0x0, "84ed25f331eab2d57306d08822179f2b3af0de54fa30ff0a587dfdb1394f9ae4"}) 13:05:49 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x3, 0x2, 0x1, 0x0, 0x1}) 13:05:49 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x1, @pix={0x1, 0x2, 0x30314142, 0x9, 0x1, 0x6, 0x3, 0x3, 0x1, 0x0, 0x0, 0x4}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 13:05:49 executing program 5: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x7fffffff, 0x1, 0x0, "84ed25f331eab2d57306d08822179f2b3af0de54fa30ff0a587dfdb1394f9ae4", 0x519487d7}) 13:05:49 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x6, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x8}, 0x1) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c5fc3b764d6a5496f8d30e569391d1e792f029fe9005a0ed3a9eea367ffe149528606c542d1b3f7b6136a2ec0280ec0d36a6e8c8fb066f510ada97387dc71d295dbcd302e6c057d1110c3d4e3c54254b2e07a10085680e06b337dc41e5bb8933ab210c0e25f2669d0ff6a999a0e8e8a99394e8f3124588f8a53c1a30f9fc1056e04d9abd838bba4ab6da2fd780d4f73a7278f63c187e33b0a1619d903f7dc8d687c", @ANYRES16=r4, @ANYBLOB="000229bd7000fddbdf25670000000c00990007000000130000000800c300a6cc00005500c500d73404037570bd6ea4347c16c81afac62855b8c7e4f224dc8e7014d2232b193ea65865567630b6a9c64279d8e7692b141262256e04903f1954e32500227ee107542db8e9f13cf5d915996ff1753feaedab0000002d00c500ff5855cd6e70277fd557975c8e5d7a22258f198cac40a122627c0c32b207d2ba0e007a6ea44f23d705000000"], 0xb0}, 0x1, 0x0, 0x0, 0x20000089}, 0x8040) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, &(0x7f0000000580)={0x0, @sdr={0x36314d59, 0x7e2}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x5, 0x6, 0x2, {0x0, @pix_mp={0x6, 0x6, 0x32344d59, 0x9, 0xa, [{0x3f, 0x7}, {0x2, 0x5083}, {0x773d0ab9}, {0x5, 0x3f}, {0x2, 0xffff}, {0x8001, 0x6}, {0xfffeffff, 0x2}, {0x61b, 0x1}], 0xff, 0x1, 0x6, 0x2, 0x4}}, 0x6}) 13:05:49 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x3, 0x2, 0x1, 0x0, 0x1}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x3, 0x2, 0x1, 0x0, 0x1}) (async) 13:05:49 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="050affffff0000c64fb968ebff01", @ANYRES16=r2, @ANYBLOB="10002abd7000fddbdf254b00000008000300", @ANYRES32=0x0, @ANYBLOB="0800dc00020000000400ff000600f7000c070000080077004001000017002a00760640002500ff0372060303030303033e010300"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:49 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x1, @pix={0x1, 0x2, 0x30314142, 0x9, 0x1, 0x6, 0x3, 0x3, 0x1, 0x0, 0x0, 0x4}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x1, @pix={0x1, 0x2, 0x30314142, 0x9, 0x1, 0x6, 0x3, 0x3, 0x1, 0x0, 0x0, 0x4}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 13:05:49 executing program 5: syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x7fffffff, 0x1, 0x0, "84ed25f331eab2d57306d08822179f2b3af0de54fa30ff0a587dfdb1394f9ae4", 0x519487d7}) 13:05:49 executing program 4: socket$inet_sctp(0x2, 0x5, 0x84) (async) r0 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x6, 0x84) (async) r1 = socket$inet_sctp(0x2, 0x6, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x8}, 0x1) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)) (async) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c5fc3b764d6a5496f8d30e569391d1e792f029fe9005a0ed3a9eea367ffe149528606c542d1b3f7b6136a2ec0280ec0d36a6e8c8fb066f510ada97387dc71d295dbcd302e6c057d1110c3d4e3c54254b2e07a10085680e06b337dc41e5bb8933ab210c0e25f2669d0ff6a999a0e8e8a99394e8f3124588f8a53c1a30f9fc1056e04d9abd838bba4ab6da2fd780d4f73a7278f63c187e33b0a1619d903f7dc8d687c", @ANYRES16=r4, @ANYBLOB="000229bd7000fddbdf25670000000c00990007000000130000000800c300a6cc00005500c500d73404037570bd6ea4347c16c81afac62855b8c7e4f224dc8e7014d2232b193ea65865567630b6a9c64279d8e7692b141262256e04903f1954e32500227ee107542db8e9f13cf5d915996ff1753feaedab0000002d00c500ff5855cd6e70277fd557975c8e5d7a22258f198cac40a122627c0c32b207d2ba0e007a6ea44f23d705000000"], 0xb0}, 0x1, 0x0, 0x0, 0x20000089}, 0x8040) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, &(0x7f0000000580)={0x0, @sdr={0x36314d59, 0x7e2}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x5, 0x6, 0x2, {0x0, @pix_mp={0x6, 0x6, 0x32344d59, 0x9, 0xa, [{0x3f, 0x7}, {0x2, 0x5083}, {0x773d0ab9}, {0x5, 0x3f}, {0x2, 0xffff}, {0x8001, 0x6}, {0xfffeffff, 0x2}, {0x61b, 0x1}], 0xff, 0x1, 0x6, 0x2, 0x4}}, 0x6}) 13:05:50 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="050affffff0000c64fb968ebff01", @ANYRES16=r2, @ANYBLOB="10002abd7000fddbdf254b00000008000300", @ANYRES32=0x0, @ANYBLOB="0800dc00020000000400ff000600f7000c070000080077004001000017002a00760640002500ff0372060303030303033e010300"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="050affffff0000c64fb968ebff01", @ANYRES16=r2, @ANYBLOB="10002abd7000fddbdf254b00000008000300", @ANYRES32=0x0, @ANYBLOB="0800dc00020000000400ff000600f7000c070000080077004001000017002a00760640002500ff0372060303030303033e010300"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async) 13:05:50 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x3, 0x2, 0x1, 0x0, 0x1}) 13:05:50 executing program 5: syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x7fffffff, 0x1, 0x0, "84ed25f331eab2d57306d08822179f2b3af0de54fa30ff0a587dfdb1394f9ae4", 0x519487d7}) 13:05:50 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x1, @pix={0x1, 0x2, 0x30314142, 0x9, 0x1, 0x6, 0x3, 0x3, 0x1, 0x0, 0x0, 0x4}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 13:05:50 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x6, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x8}, 0x1) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c5fc3b764d6a5496f8d30e569391d1e792f029fe9005a0ed3a9eea367ffe149528606c542d1b3f7b6136a2ec0280ec0d36a6e8c8fb066f510ada97387dc71d295dbcd302e6c057d1110c3d4e3c54254b2e07a10085680e06b337dc41e5bb8933ab210c0e25f2669d0ff6a999a0e8e8a99394e8f3124588f8a53c1a30f9fc1056e04d9abd838bba4ab6da2fd780d4f73a7278f63c187e33b0a1619d903f7dc8d687c", @ANYRES16=r4, @ANYBLOB="000229bd7000fddbdf25670000000c00990007000000130000000800c300a6cc00005500c500d73404037570bd6ea4347c16c81afac62855b8c7e4f224dc8e7014d2232b193ea65865567630b6a9c64279d8e7692b141262256e04903f1954e32500227ee107542db8e9f13cf5d915996ff1753feaedab0000002d00c500ff5855cd6e70277fd557975c8e5d7a22258f198cac40a122627c0c32b207d2ba0e007a6ea44f23d705000000"], 0xb0}, 0x1, 0x0, 0x0, 0x20000089}, 0x8040) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, &(0x7f0000000580)={0x0, @sdr={0x36314d59, 0x7e2}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x5, 0x6, 0x2, {0x0, @pix_mp={0x6, 0x6, 0x32344d59, 0x9, 0xa, [{0x3f, 0x7}, {0x2, 0x5083}, {0x773d0ab9}, {0x5, 0x3f}, {0x2, 0xffff}, {0x8001, 0x6}, {0xfffeffff, 0x2}, {0x61b, 0x1}], 0xff, 0x1, 0x6, 0x2, 0x4}}, 0x6}) 13:05:50 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0xb406, 0x2, 0x3, {0x0, @sliced={0x800, [0xfffa, 0x20e9, 0x1f, 0x9, 0x6, 0x2, 0x3, 0x8, 0x0, 0x9, 0x8, 0x1, 0x40, 0x9, 0x2, 0x6, 0x40, 0x1, 0x57, 0x51d5, 0x2, 0x0, 0x4, 0x2d14, 0x7, 0xe53, 0x6, 0x9, 0x5, 0x8, 0x7ff, 0x30, 0x8001, 0x2, 0x101, 0x271e, 0x1, 0x400, 0x2, 0x2, 0x0, 0x4, 0x7, 0x2, 0x8, 0x336c, 0x80, 0x1], 0x3}}, 0x6}) 13:05:50 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="050affffff0000c64fb968ebff01", @ANYRES16=r2, @ANYBLOB="10002abd7000fddbdf254b00000008000300", @ANYRES32=0x0, @ANYBLOB="0800dc00020000000400ff000600f7000c070000080077004001000017002a00760640002500ff0372060303030303033e010300"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:50 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 13:05:50 executing program 5: syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x7fffffff, 0x1, 0x0, "84ed25f331eab2d57306d08822179f2b3af0de54fa30ff0a587dfdb1394f9ae4", 0x519487d7}) 13:05:50 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x34565559, 0x0, 0x0, [], 0x0, 0x2}}) 13:05:50 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0xb406, 0x2, 0x3, {0x0, @sliced={0x800, [0xfffa, 0x20e9, 0x1f, 0x9, 0x6, 0x2, 0x3, 0x8, 0x0, 0x9, 0x8, 0x1, 0x40, 0x9, 0x2, 0x6, 0x40, 0x1, 0x57, 0x51d5, 0x2, 0x0, 0x4, 0x2d14, 0x7, 0xe53, 0x6, 0x9, 0x5, 0x8, 0x7ff, 0x30, 0x8001, 0x2, 0x101, 0x271e, 0x1, 0x400, 0x2, 0x2, 0x0, 0x4, 0x7, 0x2, 0x8, 0x336c, 0x80, 0x1], 0x3}}, 0x6}) 13:05:50 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) prctl$PR_CAPBSET_DROP(0x18, 0x1d) 13:05:50 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x6, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x8}, 0x1) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c5fc3b764d6a5496f8d30e569391d1e792f029fe9005a0ed3a9eea367ffe149528606c542d1b3f7b6136a2ec0280ec0d36a6e8c8fb066f510ada97387dc71d295dbcd302e6c057d1110c3d4e3c54254b2e07a10085680e06b337dc41e5bb8933ab210c0e25f2669d0ff6a999a0e8e8a99394e8f3124588f8a53c1a30f9fc1056e04d9abd838bba4ab6da2fd780d4f73a7278f63c187e33b0a1619d903f7dc8d687c", @ANYRES16=r4, @ANYBLOB="000229bd7000fddbdf25670000000c00990007000000130000000800c300a6cc00005500c500d73404037570bd6ea4347c16c81afac62855b8c7e4f224dc8e7014d2232b193ea65865567630b6a9c64279d8e7692b141262256e04903f1954e32500227ee107542db8e9f13cf5d915996ff1753feaedab0000002d00c500ff5855cd6e70277fd557975c8e5d7a22258f198cac40a122627c0c32b207d2ba0e007a6ea44f23d705000000"], 0xb0}, 0x1, 0x0, 0x0, 0x20000089}, 0x8040) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, &(0x7f0000000580)={0x0, @sdr={0x36314d59, 0x7e2}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x5, 0x6, 0x2, {0x0, @pix_mp={0x6, 0x6, 0x32344d59, 0x9, 0xa, [{0x3f, 0x7}, {0x2, 0x5083}, {0x773d0ab9}, {0x5, 0x3f}, {0x2, 0xffff}, {0x8001, 0x6}, {0xfffeffff, 0x2}, {0x61b, 0x1}], 0xff, 0x1, 0x6, 0x2, 0x4}}, 0x6}) 13:05:50 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 13:05:50 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 13:05:50 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x34565559, 0x0, 0x0, [], 0x0, 0x2}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x34565559, 0x0, 0x0, [], 0x0, 0x2}}) (async) 13:05:50 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0xb406, 0x2, 0x3, {0x0, @sliced={0x800, [0xfffa, 0x20e9, 0x1f, 0x9, 0x6, 0x2, 0x3, 0x8, 0x0, 0x9, 0x8, 0x1, 0x40, 0x9, 0x2, 0x6, 0x40, 0x1, 0x57, 0x51d5, 0x2, 0x0, 0x4, 0x2d14, 0x7, 0xe53, 0x6, 0x9, 0x5, 0x8, 0x7ff, 0x30, 0x8001, 0x2, 0x101, 0x271e, 0x1, 0x400, 0x2, 0x2, 0x0, 0x4, 0x7, 0x2, 0x8, 0x336c, 0x80, 0x1], 0x3}}, 0x6}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0xb406, 0x2, 0x3, {0x0, @sliced={0x800, [0xfffa, 0x20e9, 0x1f, 0x9, 0x6, 0x2, 0x3, 0x8, 0x0, 0x9, 0x8, 0x1, 0x40, 0x9, 0x2, 0x6, 0x40, 0x1, 0x57, 0x51d5, 0x2, 0x0, 0x4, 0x2d14, 0x7, 0xe53, 0x6, 0x9, 0x5, 0x8, 0x7ff, 0x30, 0x8001, 0x2, 0x101, 0x271e, 0x1, 0x400, 0x2, 0x2, 0x0, 0x4, 0x7, 0x2, 0x8, 0x336c, 0x80, 0x1], 0x3}}, 0x6}) (async) 13:05:50 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async) prctl$PR_CAPBSET_DROP(0x18, 0x1d) 13:05:50 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 13:05:50 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 13:05:50 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x34565559, 0x0, 0x0, [], 0x0, 0x2}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x34565559, 0x0, 0x0, [], 0x0, 0x2}}) 13:05:50 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x6, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x8}, 0x1) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c5fc3b764d6a5496f8d30e569391d1e792f029fe9005a0ed3a9eea367ffe149528606c542d1b3f7b6136a2ec0280ec0d36a6e8c8fb066f510ada97387dc71d295dbcd302e6c057d1110c3d4e3c54254b2e07a10085680e06b337dc41e5bb8933ab210c0e25f2669d0ff6a999a0e8e8a99394e8f3124588f8a53c1a30f9fc1056e04d9abd838bba4ab6da2fd780d4f73a7278f63c187e33b0a1619d903f7dc8d687c", @ANYRES16=r4, @ANYBLOB="000229bd7000fddbdf25670000000c00990007000000130000000800c300a6cc00005500c500d73404037570bd6ea4347c16c81afac62855b8c7e4f224dc8e7014d2232b193ea65865567630b6a9c64279d8e7692b141262256e04903f1954e32500227ee107542db8e9f13cf5d915996ff1753feaedab0000002d00c500ff5855cd6e70277fd557975c8e5d7a22258f198cac40a122627c0c32b207d2ba0e007a6ea44f23d705000000"], 0xb0}, 0x1, 0x0, 0x0, 0x20000089}, 0x8040) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, &(0x7f0000000580)={0x0, @sdr={0x36314d59, 0x7e2}}) 13:05:50 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async, rerun: 32) prctl$PR_CAPBSET_DROP(0x18, 0x1d) (rerun: 32) 13:05:50 executing program 4: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_COOKIE={0xc}]}, 0x30}}, 0x0) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000003c0), &(0x7f0000000400)=0x4) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, r0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'gretap0\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6erspan0\x00'}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x40408b0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x0, 0x308, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:50 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x130, r3, 0x0, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x11b, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @erp={0x2a, 0x1, {0x0, 0x1}}, @perr={0x84, 0x10f, {0x6f, 0x11, [@not_ext={{}, @broadcast, 0x936, "", 0x24}, @not_ext={{}, @broadcast, 0x0, "", 0x3a}, @not_ext={{}, @device_a, 0x6, "", 0x12}, @ext={{}, @device_b, 0x4, @device_a, 0x36}, @not_ext={{}, @device_b, 0x3, "", 0x22}, @not_ext={{}, @broadcast, 0x6, "", 0x40}, @ext={{}, @device_b, 0x1, @broadcast, 0x5}, @ext={{}, @device_b, 0x2, @device_b, 0x7}, @ext={{}, @device_a, 0x4, @device_b, 0x4}, @not_ext={{}, @broadcast, 0x7ff, "", 0x1f}, @ext={{}, @device_b, 0x9, @device_b, 0xc}, @not_ext={{}, @device_b, 0x4, "", 0x41}, @not_ext={{}, @broadcast, 0xffff, "", 0x1c}, @ext={{}, @device_a, 0x16f, @broadcast, 0x27}, @ext={{}, @device_b, 0x80000001, @device_b, 0x4}, @ext={{}, @broadcast, 0x7, @device_a, 0x1}, @not_ext={{}, @device_b, 0xa200, "", 0x33}]}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4008045}, 0x40040) 13:05:50 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 13:05:50 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x10001, 0x3}) 13:05:50 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "84ed25f331eab2d57306d08822179f2b3af0de54fa30ff0a587dfdb1394f9ae4", 0x519487d7}) 13:05:50 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) (async) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x130, r3, 0x0, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x11b, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @erp={0x2a, 0x1, {0x0, 0x1}}, @perr={0x84, 0x10f, {0x6f, 0x11, [@not_ext={{}, @broadcast, 0x936, "", 0x24}, @not_ext={{}, @broadcast, 0x0, "", 0x3a}, @not_ext={{}, @device_a, 0x6, "", 0x12}, @ext={{}, @device_b, 0x4, @device_a, 0x36}, @not_ext={{}, @device_b, 0x3, "", 0x22}, @not_ext={{}, @broadcast, 0x6, "", 0x40}, @ext={{}, @device_b, 0x1, @broadcast, 0x5}, @ext={{}, @device_b, 0x2, @device_b, 0x7}, @ext={{}, @device_a, 0x4, @device_b, 0x4}, @not_ext={{}, @broadcast, 0x7ff, "", 0x1f}, @ext={{}, @device_b, 0x9, @device_b, 0xc}, @not_ext={{}, @device_b, 0x4, "", 0x41}, @not_ext={{}, @broadcast, 0xffff, "", 0x1c}, @ext={{}, @device_a, 0x16f, @broadcast, 0x27}, @ext={{}, @device_b, 0x80000001, @device_b, 0x4}, @ext={{}, @broadcast, 0x7, @device_a, 0x1}, @not_ext={{}, @device_b, 0xa200, "", 0x33}]}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4008045}, 0x40040) 13:05:50 executing program 1: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000080)={0xf}, 0xf) write$P9_RSTATu(r0, &(0x7f0000000300)={0x74, 0x7d, 0x1, {{0x0, 0x54, 0xffff, 0x3, {0x10, 0x4}, 0x10100000, 0xffffff52, 0x8000, 0xe11, 0xb, '/dev/vim2m\x00', 0xb, '/dev/vim2m\x00', 0xb, '/dev/vim2m\x00'}, 0xb, '/dev/vim2m\x00', 0xee00, 0xee00, 0xffffffffffffffff}}, 0x74) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0x5421, &(0x7f0000000580)={0x0, @win={{0x4, 0x0, 0x8, 0x10001}, 0x6, 0x3, &(0x7f0000000200)={{0x7f, 0x1, 0x27f, 0x1000}, &(0x7f00000001c0)={{0x1, 0x200, 0x7ff, 0x2}, &(0x7f0000000180)={{0x100, 0x81, 0xfffffffe, 0x9}}}}, 0x6, &(0x7f0000000240)="d2627e88fa9f90bdfff24b25ff9514948a863ddced393117c33f322cc21bd986a157e721714b52246798cb6f15fd3a01b62615af0e413adeae6523d297a2bd4a9d070edc973a45a6c14f729b656ff0dede8e6942c3dd5076f7ef2a0a1b03b5c667e37b1d927b43ae1b4d89cb1de9f8cffec90e97b95ce07cda7da7f6f8fa292439550c3867aaf03f51cc1ba229f600"}}) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3f}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000040)={0x0, 0x10001, 0x8000, &(0x7f0000000000)=0x4}) 13:05:50 executing program 4: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_COOKIE={0xc}]}, 0x30}}, 0x0) (async) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000003c0), &(0x7f0000000400)=0x4) (async) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, r0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'gretap0\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6erspan0\x00'}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x40408b0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x0, 0x308, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:50 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x10001, 0x3}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x10001, 0x3}) (async) 13:05:50 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x6, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x8}, 0x1) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c5fc3b764d6a5496f8d30e569391d1e792f029fe9005a0ed3a9eea367ffe149528606c542d1b3f7b6136a2ec0280ec0d36a6e8c8fb066f510ada97387dc71d295dbcd302e6c057d1110c3d4e3c54254b2e07a10085680e06b337dc41e5bb8933ab210c0e25f2669d0ff6a999a0e8e8a99394e8f3124588f8a53c1a30f9fc1056e04d9abd838bba4ab6da2fd780d4f73a7278f63c187e33b0a1619d903f7dc8d687c", @ANYRES16=r4, @ANYBLOB="000229bd7000fddbdf25670000000c00990007000000130000000800c300a6cc00005500c500d73404037570bd6ea4347c16c81afac62855b8c7e4f224dc8e7014d2232b193ea65865567630b6a9c64279d8e7692b141262256e04903f1954e32500227ee107542db8e9f13cf5d915996ff1753feaedab0000002d00c500ff5855cd6e70277fd557975c8e5d7a22258f198cac40a122627c0c32b207d2ba0e007a6ea44f23d705000000"], 0xb0}, 0x1, 0x0, 0x0, 0x20000089}, 0x8040) 13:05:50 executing program 1: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000080)={0xf}, 0xf) (async) write$P9_RSTATu(r0, &(0x7f0000000300)={0x74, 0x7d, 0x1, {{0x0, 0x54, 0xffff, 0x3, {0x10, 0x4}, 0x10100000, 0xffffff52, 0x8000, 0xe11, 0xb, '/dev/vim2m\x00', 0xb, '/dev/vim2m\x00', 0xb, '/dev/vim2m\x00'}, 0xb, '/dev/vim2m\x00', 0xee00, 0xee00, 0xffffffffffffffff}}, 0x74) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0x5421, &(0x7f0000000580)={0x0, @win={{0x4, 0x0, 0x8, 0x10001}, 0x6, 0x3, &(0x7f0000000200)={{0x7f, 0x1, 0x27f, 0x1000}, &(0x7f00000001c0)={{0x1, 0x200, 0x7ff, 0x2}, &(0x7f0000000180)={{0x100, 0x81, 0xfffffffe, 0x9}}}}, 0x6, &(0x7f0000000240)="d2627e88fa9f90bdfff24b25ff9514948a863ddced393117c33f322cc21bd986a157e721714b52246798cb6f15fd3a01b62615af0e413adeae6523d297a2bd4a9d070edc973a45a6c14f729b656ff0dede8e6942c3dd5076f7ef2a0a1b03b5c667e37b1d927b43ae1b4d89cb1de9f8cffec90e97b95ce07cda7da7f6f8fa292439550c3867aaf03f51cc1ba229f600"}}) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3f}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001) (async) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000040)={0x0, 0x10001, 0x8000, &(0x7f0000000000)=0x4}) 13:05:50 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "84ed25f331eab2d57306d08822179f2b3af0de54fa30ff0a587dfdb1394f9ae4", 0x519487d7}) 13:05:50 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x130, r3, 0x0, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x11b, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @erp={0x2a, 0x1, {0x0, 0x1}}, @perr={0x84, 0x10f, {0x6f, 0x11, [@not_ext={{}, @broadcast, 0x936, "", 0x24}, @not_ext={{}, @broadcast, 0x0, "", 0x3a}, @not_ext={{}, @device_a, 0x6, "", 0x12}, @ext={{}, @device_b, 0x4, @device_a, 0x36}, @not_ext={{}, @device_b, 0x3, "", 0x22}, @not_ext={{}, @broadcast, 0x6, "", 0x40}, @ext={{}, @device_b, 0x1, @broadcast, 0x5}, @ext={{}, @device_b, 0x2, @device_b, 0x7}, @ext={{}, @device_a, 0x4, @device_b, 0x4}, @not_ext={{}, @broadcast, 0x7ff, "", 0x1f}, @ext={{}, @device_b, 0x9, @device_b, 0xc}, @not_ext={{}, @device_b, 0x4, "", 0x41}, @not_ext={{}, @broadcast, 0xffff, "", 0x1c}, @ext={{}, @device_a, 0x16f, @broadcast, 0x27}, @ext={{}, @device_b, 0x80000001, @device_b, 0x4}, @ext={{}, @broadcast, 0x7, @device_a, 0x1}, @not_ext={{}, @device_b, 0xa200, "", 0x33}]}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4008045}, 0x40040) (rerun: 32) 13:05:50 executing program 4: syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_COOKIE={0xc}]}, 0x30}}, 0x0) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000003c0), &(0x7f0000000400)=0x4) (async) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000003c0), &(0x7f0000000400)=0x4) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, r0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'gretap0\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6erspan0\x00'}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x40408b0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x0, 0x308, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:50 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x10001, 0x3}) 13:05:50 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x6, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x8}, 0x1) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) 13:05:50 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "84ed25f331eab2d57306d08822179f2b3af0de54fa30ff0a587dfdb1394f9ae4", 0x519487d7}) 13:05:50 executing program 1: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000080)={0xf}, 0xf) (async) write$P9_RSTATu(r0, &(0x7f0000000300)={0x74, 0x7d, 0x1, {{0x0, 0x54, 0xffff, 0x3, {0x10, 0x4}, 0x10100000, 0xffffff52, 0x8000, 0xe11, 0xb, '/dev/vim2m\x00', 0xb, '/dev/vim2m\x00', 0xb, '/dev/vim2m\x00'}, 0xb, '/dev/vim2m\x00', 0xee00, 0xee00, 0xffffffffffffffff}}, 0x74) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0x5421, &(0x7f0000000580)={0x0, @win={{0x4, 0x0, 0x8, 0x10001}, 0x6, 0x3, &(0x7f0000000200)={{0x7f, 0x1, 0x27f, 0x1000}, &(0x7f00000001c0)={{0x1, 0x200, 0x7ff, 0x2}, &(0x7f0000000180)={{0x100, 0x81, 0xfffffffe, 0x9}}}}, 0x6, &(0x7f0000000240)="d2627e88fa9f90bdfff24b25ff9514948a863ddced393117c33f322cc21bd986a157e721714b52246798cb6f15fd3a01b62615af0e413adeae6523d297a2bd4a9d070edc973a45a6c14f729b656ff0dede8e6942c3dd5076f7ef2a0a1b03b5c667e37b1d927b43ae1b4d89cb1de9f8cffec90e97b95ce07cda7da7f6f8fa292439550c3867aaf03f51cc1ba229f600"}}) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3f}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000040)={0x0, 0x10001, 0x8000, &(0x7f0000000000)=0x4}) 13:05:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x47ee6f9c61d9cf2e}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0xc021}, 0x8004011) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:05:51 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x1, 0x1, 0x1ff, 0x80800}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:51 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x7fffffff, 0x0, 0x0, "84ed25f331eab2d57306d08822179f2b3af0de54fa30ff0a587dfdb1394f9ae4", 0x519487d7}) 13:05:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) socketpair(0x6, 0x4, 0x7fffffff, &(0x7f0000000000)) 13:05:51 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x5, 0x0, 0x4, 0x0, 0xff}) 13:05:51 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x1, 0x1, 0x1ff, 0x80800}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x47ee6f9c61d9cf2e}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0xc021}, 0x8004011) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:05:51 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x6, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x8}, 0x1) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) 13:05:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) socketpair(0x6, 0x4, 0x7fffffff, &(0x7f0000000000)) 13:05:51 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x7fffffff, 0x0, 0x0, "84ed25f331eab2d57306d08822179f2b3af0de54fa30ff0a587dfdb1394f9ae4", 0x519487d7}) 13:05:51 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x5, 0x0, 0x4, 0x0, 0xff}) 13:05:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x47ee6f9c61d9cf2e}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0xc021}, 0x8004011) (async, rerun: 64) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (rerun: 64) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:05:51 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x1, 0x1, 0x1ff, 0x80800}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) socketpair(0x6, 0x4, 0x7fffffff, &(0x7f0000000000)) 13:05:51 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x7fffffff, 0x0, 0x0, "84ed25f331eab2d57306d08822179f2b3af0de54fa30ff0a587dfdb1394f9ae4", 0x519487d7}) 13:05:51 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x6, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x8}, 0x1) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) 13:05:51 executing program 4: setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e22, @empty}], 0x60) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000000)={0x3, @win={{0xfff, 0x275, 0x8, 0x4}, 0x6, 0x6bfd665f, &(0x7f0000000100)={{0x200, 0x2, 0x23f, 0x4}}, 0x9b, &(0x7f0000000140)="4dfac2d2eadc6ff9971686bf3518689cbdd2536e1c279101e547", 0x4}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000340)=@multiplanar_mmap={0x7, 0x3, 0x4, 0x70000, 0x1800000, {r2, r3/1000+60000}, {0x6, 0x1, 0x81, 0x7f, 0x95, 0x3, "3ad79af0"}, 0x9, 0x1, {&(0x7f00000002c0)=[{0x8001, 0x1000, {0x3}, 0x1}, {0x0, 0x1, {0x1}, 0x80000000}]}, 0x80000001}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000200), &(0x7f0000000240)=0x4) 13:05:51 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async, rerun: 64) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x5, 0x0, 0x4, 0x0, 0xff}) (rerun: 64) 13:05:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:05:51 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1d4, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xc}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x8, 0x4, 0x1, 0x1]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3e9}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x20}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1f}]}, @NL80211_ATTR_CQM={0x50, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3ff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3cb}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffff886}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x6, 0x8b, 0xfffffffe, 0x0, 0x7, 0x7]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1f}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffff001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}]}, @NL80211_ATTR_CQM={0xa0, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x58}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x0, 0x23340000, 0x8, 0x2425ffde, 0x80, 0x6, 0xbdbd]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xb4f}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x8, 0x7fff, 0x1, 0x7, 0x1d0, 0x10001, 0x3, 0x3, 0x0, 0x1]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x80000000, 0x5, 0x1f, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9cc}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x20, 0x3]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xad4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0xd37, 0xffffffff, 0x40cb, 0x1c0, 0x5, 0x6, 0x1000]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x80]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x21d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xffff0001}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffff10}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c010) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000340)={0x7fffffff, 0xbc6d7d6a541d8eef, 0x0, "9de11e136006f065763f8f703098d8483c30e6513c9da50a20a40dbd55f1065a", 0x41414770}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf}, 0xf) write$P9_RXATTRWALK(r2, &(0x7f0000000300)={0xf, 0x1f, 0x2, 0x3}, 0xf) 13:05:51 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x7fffffff, 0x1, 0x0, "84ed25f331eab2d57306d08822179f2b3af0de54fa30ff0a587dfdb1394f9ae4"}) 13:05:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:05:51 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x6, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x8}, 0x1) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) socket$nl_generic(0x10, 0x3, 0x10) 13:05:51 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1d4, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xc}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x8, 0x4, 0x1, 0x1]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3e9}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x20}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1f}]}, @NL80211_ATTR_CQM={0x50, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3ff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3cb}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffff886}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x6, 0x8b, 0xfffffffe, 0x0, 0x7, 0x7]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1f}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffff001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}]}, @NL80211_ATTR_CQM={0xa0, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x58}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x0, 0x23340000, 0x8, 0x2425ffde, 0x80, 0x6, 0xbdbd]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xb4f}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x8, 0x7fff, 0x1, 0x7, 0x1d0, 0x10001, 0x3, 0x3, 0x0, 0x1]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x80000000, 0x5, 0x1f, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9cc}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x20, 0x3]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xad4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0xd37, 0xffffffff, 0x40cb, 0x1c0, 0x5, 0x6, 0x1000]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x80]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x21d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xffff0001}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffff10}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c010) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000340)={0x7fffffff, 0xbc6d7d6a541d8eef, 0x0, "9de11e136006f065763f8f703098d8483c30e6513c9da50a20a40dbd55f1065a", 0x41414770}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf}, 0xf) (async) write$P9_RXATTRWALK(r2, &(0x7f0000000300)={0xf, 0x1f, 0x2, 0x3}, 0xf) 13:05:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) 13:05:51 executing program 4: setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e22, @empty}], 0x60) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000000)={0x3, @win={{0xfff, 0x275, 0x8, 0x4}, 0x6, 0x6bfd665f, &(0x7f0000000100)={{0x200, 0x2, 0x23f, 0x4}}, 0x9b, &(0x7f0000000140)="4dfac2d2eadc6ff9971686bf3518689cbdd2536e1c279101e547", 0x4}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) clock_gettime(0x0, &(0x7f0000000280)) (async) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000340)=@multiplanar_mmap={0x7, 0x3, 0x4, 0x70000, 0x1800000, {r2, r3/1000+60000}, {0x6, 0x1, 0x81, 0x7f, 0x95, 0x3, "3ad79af0"}, 0x9, 0x1, {&(0x7f00000002c0)=[{0x8001, 0x1000, {0x3}, 0x1}, {0x0, 0x1, {0x1}, 0x80000000}]}, 0x80000001}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000200), &(0x7f0000000240)=0x4) 13:05:51 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_COOKIE={0xc}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00@\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fbdbdf2502000000060002000000000006001a004e200000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0xc04) 13:05:51 executing program 5: setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e22, @empty}], 0x60) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000000)={0x3, @win={{0xfff, 0x275, 0x8, 0x4}, 0x6, 0x6bfd665f, &(0x7f0000000100)={{0x200, 0x2, 0x23f, 0x4}}, 0x9b, &(0x7f0000000140)="4dfac2d2eadc6ff9971686bf3518689cbdd2536e1c279101e547", 0x4}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000340)=@multiplanar_mmap={0x7, 0x3, 0x4, 0x70000, 0x1800000, {r2, r3/1000+60000}, {0x6, 0x1, 0x81, 0x7f, 0x95, 0x3, "3ad79af0"}, 0x9, 0x1, {&(0x7f00000002c0)=[{0x8001, 0x1000, {0x3}, 0x1}, {0x0, 0x1, {0x1}, 0x80000000}]}, 0x80000001}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000200), &(0x7f0000000240)=0x4) 13:05:51 executing program 4: setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e22, @empty}], 0x60) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000000)={0x3, @win={{0xfff, 0x275, 0x8, 0x4}, 0x6, 0x6bfd665f, &(0x7f0000000100)={{0x200, 0x2, 0x23f, 0x4}}, 0x9b, &(0x7f0000000140)="4dfac2d2eadc6ff9971686bf3518689cbdd2536e1c279101e547", 0x4}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) clock_gettime(0x0, &(0x7f0000000280)) (async) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000340)=@multiplanar_mmap={0x7, 0x3, 0x4, 0x70000, 0x1800000, {r2, r3/1000+60000}, {0x6, 0x1, 0x81, 0x7f, 0x95, 0x3, "3ad79af0"}, 0x9, 0x1, {&(0x7f00000002c0)=[{0x8001, 0x1000, {0x3}, 0x1}, {0x0, 0x1, {0x1}, 0x80000000}]}, 0x80000001}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000200), &(0x7f0000000240)=0x4) 13:05:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) 13:05:51 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1d4, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xc}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x8, 0x4, 0x1, 0x1]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3e9}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x20}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1f}]}, @NL80211_ATTR_CQM={0x50, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3ff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3cb}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffff886}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x6, 0x8b, 0xfffffffe, 0x0, 0x7, 0x7]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1f}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffff001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}]}, @NL80211_ATTR_CQM={0xa0, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x58}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x0, 0x23340000, 0x8, 0x2425ffde, 0x80, 0x6, 0xbdbd]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xb4f}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x8, 0x7fff, 0x1, 0x7, 0x1d0, 0x10001, 0x3, 0x3, 0x0, 0x1]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x80000000, 0x5, 0x1f, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9cc}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x20, 0x3]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xad4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0xd37, 0xffffffff, 0x40cb, 0x1c0, 0x5, 0x6, 0x1000]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x80]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x21d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xffff0001}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffff10}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c010) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000340)={0x7fffffff, 0xbc6d7d6a541d8eef, 0x0, "9de11e136006f065763f8f703098d8483c30e6513c9da50a20a40dbd55f1065a", 0x41414770}) (async) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf}, 0xf) write$P9_RXATTRWALK(r2, &(0x7f0000000300)={0xf, 0x1f, 0x2, 0x3}, 0xf) 13:05:51 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x6, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x8}, 0x1) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) 13:05:51 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async, rerun: 32) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_COOKIE={0xc}]}, 0x30}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00@\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fbdbdf2502000000060002000000000006001a004e200000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0xc04) 13:05:51 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x6, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x8}, 0x1) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) 13:05:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) 13:05:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40040200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r3, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x5a}}}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "bba120cba7a3b24e0cb05b52f2"}, @NL80211_KEY_SEQ={0x7, 0x4, "f8b481"}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0xc044) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d89fcb7fa623291373217603", @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000000000000c007a800800040000000000"], 0x34}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xb56}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r4, 0x5452, &(0x7f0000000000)={0x0, @sliced={0xfff, [0x3, 0x2, 0xffff, 0x5, 0x9, 0x269, 0xffff, 0xffff, 0xffff, 0x16, 0x5, 0x9, 0x1f, 0x3, 0x1, 0x0, 0x3, 0xa833, 0x0, 0x11d1, 0x6, 0x0, 0x5, 0xffff, 0x8, 0x400, 0x5, 0x800, 0x0, 0xfff8, 0x4, 0xfffd, 0x5e3, 0x1, 0x81, 0x7, 0x3a1, 0x7, 0x0, 0x9, 0x331, 0x6, 0x7, 0x77, 0x400, 0x7, 0x1000, 0xf19], 0x101}}) 13:05:51 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x3, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000680)=@multiplanar_fd={0x0, 0x3, 0x4, 0x1000, 0x804, {0x0, 0xea60}, {0x1, 0x8, 0x0, 0x9, 0x1, 0x9, "7f54c0f7"}, 0x7, 0x4, {&(0x7f00000004c0)=[{0x3, 0x8, {}, 0x6}, {0x81, 0x4, {}, 0x6}]}, 0xffb}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x978, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x0, @sliced={0x7fff, [0x396, 0x80, 0x1f, 0xbb6b, 0xc1ec, 0x9de, 0x8001, 0x7ff, 0xe3, 0x7, 0xff, 0x14, 0x6, 0x7ff, 0x6, 0x4, 0x81, 0x1f, 0x4, 0xfffe, 0x7, 0x3, 0xfff7, 0x4e, 0xfffc, 0x2, 0xb5f, 0x7, 0xffff, 0xf180, 0x20ee, 0x8, 0x3, 0x4, 0x3651, 0x1000, 0x3, 0xa244, 0x2, 0x3ae, 0x3, 0x9, 0x5, 0xa495, 0xde8, 0x7ff, 0x3, 0xda58], 0x7f}}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000780)=@mmap={0x16, 0x1, 0x4, 0x4000, 0x7fff, {}, {0x2, 0x8, 0x8, 0x1, 0x0, 0xfb, "349787ca"}, 0x1, 0x1, {}, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@fd={0x4, 0x1, 0x4, 0x800, 0x2, {0x77359400}, {0x2, 0x1, 0x5, 0x7f, 0x3f, 0x2, "02840ad0"}, 0xb01, 0x4, {}, 0x5}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x1ff, 0x3, 0x4, {0x0, @win={{0x2, 0xf02, 0x8, 0xff}, 0x0, 0x2, &(0x7f00000002c0)={{0x19, 0x3, 0x6db, 0x101}, &(0x7f0000000280)={{0x2728, 0xfffff800, 0x4, 0x8}, &(0x7f0000000240)={{0x0, 0x9, 0xfffffffc, 0x1}}}}, 0x800, &(0x7f0000000300)="e7fb5884ca95b9114554d1380ff6be71249528ed278d94d3b9b6324008e5306219adab9cc744c8055e8e2abca1e5c5a65202c66249c0e0ef016ecce8bf7875b9ed4d53d4c00b5121c5cac14a2dfae3bf511c35a46d52eb0b7e626678d9c5cae617948859894dc10f0240c6a4f6b5e0df8bc28ef9ae853697e9c54e8c95c8ae539639b004b1653b8dd9ceef3d7f8732b202ec3245d58891bb", 0xfa}}, 0x100}) 13:05:51 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x6, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x8}, 0x1) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) 13:05:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) 13:05:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r2) (async) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40040200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r3, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x5a}}}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "bba120cba7a3b24e0cb05b52f2"}, @NL80211_KEY_SEQ={0x7, 0x4, "f8b481"}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0xc044) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d89fcb7fa623291373217603", @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000000000000c007a800800040000000000"], 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xb56}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) (async) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r4, 0x5452, &(0x7f0000000000)={0x0, @sliced={0xfff, [0x3, 0x2, 0xffff, 0x5, 0x9, 0x269, 0xffff, 0xffff, 0xffff, 0x16, 0x5, 0x9, 0x1f, 0x3, 0x1, 0x0, 0x3, 0xa833, 0x0, 0x11d1, 0x6, 0x0, 0x5, 0xffff, 0x8, 0x400, 0x5, 0x800, 0x0, 0xfff8, 0x4, 0xfffd, 0x5e3, 0x1, 0x81, 0x7, 0x3a1, 0x7, 0x0, 0x9, 0x331, 0x6, 0x7, 0x77, 0x400, 0x7, 0x1000, 0xf19], 0x101}}) 13:05:51 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x1, 0x1, 0x1ff, 0x80800}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:51 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async, rerun: 32) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_COOKIE={0xc}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00@\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fbdbdf2502000000060002000000000006001a004e200000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0xc04) 13:05:51 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x3, @pix_mp}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000680)=@multiplanar_fd={0x0, 0x3, 0x4, 0x1000, 0x804, {0x0, 0xea60}, {0x1, 0x8, 0x0, 0x9, 0x1, 0x9, "7f54c0f7"}, 0x7, 0x4, {&(0x7f00000004c0)=[{0x3, 0x8, {}, 0x6}, {0x81, 0x4, {}, 0x6}]}, 0xffb}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x978, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x0, @sliced={0x7fff, [0x396, 0x80, 0x1f, 0xbb6b, 0xc1ec, 0x9de, 0x8001, 0x7ff, 0xe3, 0x7, 0xff, 0x14, 0x6, 0x7ff, 0x6, 0x4, 0x81, 0x1f, 0x4, 0xfffe, 0x7, 0x3, 0xfff7, 0x4e, 0xfffc, 0x2, 0xb5f, 0x7, 0xffff, 0xf180, 0x20ee, 0x8, 0x3, 0x4, 0x3651, 0x1000, 0x3, 0xa244, 0x2, 0x3ae, 0x3, 0x9, 0x5, 0xa495, 0xde8, 0x7ff, 0x3, 0xda58], 0x7f}}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000780)=@mmap={0x16, 0x1, 0x4, 0x4000, 0x7fff, {}, {0x2, 0x8, 0x8, 0x1, 0x0, 0xfb, "349787ca"}, 0x1, 0x1, {}, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@fd={0x4, 0x1, 0x4, 0x800, 0x2, {0x77359400}, {0x2, 0x1, 0x5, 0x7f, 0x3f, 0x2, "02840ad0"}, 0xb01, 0x4, {}, 0x5}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x1ff, 0x3, 0x4, {0x0, @win={{0x2, 0xf02, 0x8, 0xff}, 0x0, 0x2, &(0x7f00000002c0)={{0x19, 0x3, 0x6db, 0x101}, &(0x7f0000000280)={{0x2728, 0xfffff800, 0x4, 0x8}, &(0x7f0000000240)={{0x0, 0x9, 0xfffffffc, 0x1}}}}, 0x800, &(0x7f0000000300)="e7fb5884ca95b9114554d1380ff6be71249528ed278d94d3b9b6324008e5306219adab9cc744c8055e8e2abca1e5c5a65202c66249c0e0ef016ecce8bf7875b9ed4d53d4c00b5121c5cac14a2dfae3bf511c35a46d52eb0b7e626678d9c5cae617948859894dc10f0240c6a4f6b5e0df8bc28ef9ae853697e9c54e8c95c8ae539639b004b1653b8dd9ceef3d7f8732b202ec3245d58891bb", 0xfa}}, 0x100}) 13:05:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) select(0x40, &(0x7f0000000140)={0xff, 0x4, 0x6, 0x4d, 0x100000004, 0x2, 0x3, 0x3}, &(0x7f0000000180)={0x7, 0x100, 0x0, 0x8, 0x2, 0x5, 0x8, 0xffffffffce7b218b}, &(0x7f00000001c0)={0x252, 0x3, 0x10f, 0x8000, 0x22c000000000, 0x4, 0x2, 0x4ee9}, &(0x7f0000000200)) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @remote}, &(0x7f0000000280)=0x10) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc1, 0x3a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x20040080) 13:05:52 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x3, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000680)=@multiplanar_fd={0x0, 0x3, 0x4, 0x1000, 0x804, {0x0, 0xea60}, {0x1, 0x8, 0x0, 0x9, 0x1, 0x9, "7f54c0f7"}, 0x7, 0x4, {&(0x7f00000004c0)=[{0x3, 0x8, {}, 0x6}, {0x81, 0x4, {}, 0x6}]}, 0xffb}) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x978, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x0, @sliced={0x7fff, [0x396, 0x80, 0x1f, 0xbb6b, 0xc1ec, 0x9de, 0x8001, 0x7ff, 0xe3, 0x7, 0xff, 0x14, 0x6, 0x7ff, 0x6, 0x4, 0x81, 0x1f, 0x4, 0xfffe, 0x7, 0x3, 0xfff7, 0x4e, 0xfffc, 0x2, 0xb5f, 0x7, 0xffff, 0xf180, 0x20ee, 0x8, 0x3, 0x4, 0x3651, 0x1000, 0x3, 0xa244, 0x2, 0x3ae, 0x3, 0x9, 0x5, 0xa495, 0xde8, 0x7ff, 0x3, 0xda58], 0x7f}}) (async) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000780)=@mmap={0x16, 0x1, 0x4, 0x4000, 0x7fff, {}, {0x2, 0x8, 0x8, 0x1, 0x0, 0xfb, "349787ca"}, 0x1, 0x1, {}, 0x3}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) (async) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@fd={0x4, 0x1, 0x4, 0x800, 0x2, {0x77359400}, {0x2, 0x1, 0x5, 0x7f, 0x3f, 0x2, "02840ad0"}, 0xb01, 0x4, {}, 0x5}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x1ff, 0x3, 0x4, {0x0, @win={{0x2, 0xf02, 0x8, 0xff}, 0x0, 0x2, &(0x7f00000002c0)={{0x19, 0x3, 0x6db, 0x101}, &(0x7f0000000280)={{0x2728, 0xfffff800, 0x4, 0x8}, &(0x7f0000000240)={{0x0, 0x9, 0xfffffffc, 0x1}}}}, 0x800, &(0x7f0000000300)="e7fb5884ca95b9114554d1380ff6be71249528ed278d94d3b9b6324008e5306219adab9cc744c8055e8e2abca1e5c5a65202c66249c0e0ef016ecce8bf7875b9ed4d53d4c00b5121c5cac14a2dfae3bf511c35a46d52eb0b7e626678d9c5cae617948859894dc10f0240c6a4f6b5e0df8bc28ef9ae853697e9c54e8c95c8ae539639b004b1653b8dd9ceef3d7f8732b202ec3245d58891bb", 0xfa}}, 0x100}) 13:05:52 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x6, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x8}, 0x1) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) 13:05:52 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x0, @sdr={0x33424752, 0x80000001}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:52 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x3, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000680)=@multiplanar_fd={0x0, 0x3, 0x4, 0x1000, 0x804, {0x0, 0xea60}, {0x1, 0x8, 0x0, 0x9, 0x1, 0x9, "7f54c0f7"}, 0x7, 0x4, {&(0x7f00000004c0)=[{0x3, 0x8, {}, 0x6}, {0x81, 0x4, {}, 0x6}]}, 0xffb}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x978, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x0, @sliced={0x7fff, [0x396, 0x80, 0x1f, 0xbb6b, 0xc1ec, 0x9de, 0x8001, 0x7ff, 0xe3, 0x7, 0xff, 0x14, 0x6, 0x7ff, 0x6, 0x4, 0x81, 0x1f, 0x4, 0xfffe, 0x7, 0x3, 0xfff7, 0x4e, 0xfffc, 0x2, 0xb5f, 0x7, 0xffff, 0xf180, 0x20ee, 0x8, 0x3, 0x4, 0x3651, 0x1000, 0x3, 0xa244, 0x2, 0x3ae, 0x3, 0x9, 0x5, 0xa495, 0xde8, 0x7ff, 0x3, 0xda58], 0x7f}}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000780)=@mmap={0x16, 0x1, 0x4, 0x4000, 0x7fff, {}, {0x2, 0x8, 0x8, 0x1, 0x0, 0xfb, "349787ca"}, 0x1, 0x1, {}, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@fd={0x4, 0x1, 0x4, 0x800, 0x2, {0x77359400}, {0x2, 0x1, 0x5, 0x7f, 0x3f, 0x2, "02840ad0"}, 0xb01, 0x4, {}, 0x5}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x1ff, 0x3, 0x4, {0x0, @win={{0x2, 0xf02, 0x8, 0xff}, 0x0, 0x2, &(0x7f00000002c0)={{0x19, 0x3, 0x6db, 0x101}, &(0x7f0000000280)={{0x2728, 0xfffff800, 0x4, 0x8}, &(0x7f0000000240)={{0x0, 0x9, 0xfffffffc, 0x1}}}}, 0x800, &(0x7f0000000300)="e7fb5884ca95b9114554d1380ff6be71249528ed278d94d3b9b6324008e5306219adab9cc744c8055e8e2abca1e5c5a65202c66249c0e0ef016ecce8bf7875b9ed4d53d4c00b5121c5cac14a2dfae3bf511c35a46d52eb0b7e626678d9c5cae617948859894dc10f0240c6a4f6b5e0df8bc28ef9ae853697e9c54e8c95c8ae539639b004b1653b8dd9ceef3d7f8732b202ec3245d58891bb", 0xfa}}, 0x100}) 13:05:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40040200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r3, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x5a}}}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "bba120cba7a3b24e0cb05b52f2"}, @NL80211_KEY_SEQ={0x7, 0x4, "f8b481"}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0xc044) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d89fcb7fa623291373217603", @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000000000000c007a800800040000000000"], 0x34}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xb56}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) (async) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r4, 0x5452, &(0x7f0000000000)={0x0, @sliced={0xfff, [0x3, 0x2, 0xffff, 0x5, 0x9, 0x269, 0xffff, 0xffff, 0xffff, 0x16, 0x5, 0x9, 0x1f, 0x3, 0x1, 0x0, 0x3, 0xa833, 0x0, 0x11d1, 0x6, 0x0, 0x5, 0xffff, 0x8, 0x400, 0x5, 0x800, 0x0, 0xfff8, 0x4, 0xfffd, 0x5e3, 0x1, 0x81, 0x7, 0x3a1, 0x7, 0x0, 0x9, 0x331, 0x6, 0x7, 0x77, 0x400, 0x7, 0x1000, 0xf19], 0x101}}) 13:05:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) select(0x40, &(0x7f0000000140)={0xff, 0x4, 0x6, 0x4d, 0x100000004, 0x2, 0x3, 0x3}, &(0x7f0000000180)={0x7, 0x100, 0x0, 0x8, 0x2, 0x5, 0x8, 0xffffffffce7b218b}, &(0x7f00000001c0)={0x252, 0x3, 0x10f, 0x8000, 0x22c000000000, 0x4, 0x2, 0x4ee9}, &(0x7f0000000200)) (async) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @remote}, &(0x7f0000000280)=0x10) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc1, 0x3a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x20040080) 13:05:52 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x0, @sdr={0x33424752, 0x80000001}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x0, @sdr={0x33424752, 0x80000001}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:52 executing program 4: sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="7c7e49c64cdaaae1ab5b", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fbdbdf25010000000800050064010102140006006272696467655f736c6176655f30000008000500e000000108000400ac14143514000200fe80000000000000000000000000000a14000600626f6e645f736c6176655f3000000000080005000a0101001400060076657468315f746f5f6272696467650014000300fc00"/146], 0x98}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000040) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0xf2c, 0x3, 0x2}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x8) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000780)=@multiplanar_mmap={0xffff, 0x1, 0x4, 0x400, 0x3, {r2, r3/1000+60000}, {0x0, 0xc, 0x4, 0x4, 0x9c, 0x3, "f2ee3f2c"}, 0x7, 0x1, {&(0x7f0000000700)=[{0x9, 0xd8, {0x100000000}, 0xd095}, {0xff, 0x8, {0x4}, 0x3ff}]}, 0xfb6a}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000180)={0xffff5a2f, 0x0, 0xefc40988b085f6db, "dcce83520cb0d9bc410ebbc77bcda1e68b16154a298f4101dbc9a8bf4f6a5e99", 0x32314d54}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x1, @sliced={0x400, [0x4, 0x3, 0x329, 0x3ff, 0x0, 0x5, 0x401, 0xfff, 0x9, 0x7, 0xfffe, 0x6, 0x1, 0x7, 0xb48, 0x308, 0x6, 0xf22, 0x6d4, 0x400, 0x2, 0x1, 0x73, 0xd605, 0x6, 0x8, 0x101, 0xc8, 0xff, 0x3f, 0x400, 0x3, 0x2, 0x1, 0x3a, 0x0, 0x9, 0x6, 0x4, 0xad6, 0x4, 0x9, 0x5, 0x0, 0x8, 0x101, 0xff, 0xffff], 0xffffffff}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x7}}) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000300)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000680)=@multiplanar_userptr={0xffffffff, 0x1, 0x4, 0x0, 0xe2f4, {0x0, 0xea60}, {0x1, 0x1, 0x92, 0x0, 0xff, 0x3f, "82d2f712"}, 0x10001, 0x2, {&(0x7f0000000480)=[{0x7ff, 0x41bffb74, {&(0x7f0000000280)}, 0x9}, {0x3, 0x3, {&(0x7f00000002c0)}, 0x10001}]}, 0x3}) 13:05:52 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x3, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000680)=@multiplanar_fd={0x0, 0x3, 0x4, 0x1000, 0x804, {0x0, 0xea60}, {0x1, 0x8, 0x0, 0x9, 0x1, 0x9, "7f54c0f7"}, 0x7, 0x4, {&(0x7f00000004c0)=[{0x3, 0x8, {}, 0x6}, {0x81, 0x4, {}, 0x6}]}, 0xffb}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x978, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x0, @sliced={0x7fff, [0x396, 0x80, 0x1f, 0xbb6b, 0xc1ec, 0x9de, 0x8001, 0x7ff, 0xe3, 0x7, 0xff, 0x14, 0x6, 0x7ff, 0x6, 0x4, 0x81, 0x1f, 0x4, 0xfffe, 0x7, 0x3, 0xfff7, 0x4e, 0xfffc, 0x2, 0xb5f, 0x7, 0xffff, 0xf180, 0x20ee, 0x8, 0x3, 0x4, 0x3651, 0x1000, 0x3, 0xa244, 0x2, 0x3ae, 0x3, 0x9, 0x5, 0xa495, 0xde8, 0x7ff, 0x3, 0xda58], 0x7f}}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000780)=@mmap={0x16, 0x1, 0x4, 0x4000, 0x7fff, {}, {0x2, 0x8, 0x8, 0x1, 0x0, 0xfb, "349787ca"}, 0x1, 0x1, {}, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@fd={0x4, 0x1, 0x4, 0x800, 0x2, {0x77359400}, {0x2, 0x1, 0x5, 0x7f, 0x3f, 0x2, "02840ad0"}, 0xb01, 0x4, {}, 0x5}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x1ff, 0x3, 0x4, {0x0, @win={{0x2, 0xf02, 0x8, 0xff}, 0x0, 0x2, &(0x7f00000002c0)={{0x19, 0x3, 0x6db, 0x101}, &(0x7f0000000280)={{0x2728, 0xfffff800, 0x4, 0x8}, &(0x7f0000000240)={{0x0, 0x9, 0xfffffffc, 0x1}}}}, 0x800, &(0x7f0000000300)="e7fb5884ca95b9114554d1380ff6be71249528ed278d94d3b9b6324008e5306219adab9cc744c8055e8e2abca1e5c5a65202c66249c0e0ef016ecce8bf7875b9ed4d53d4c00b5121c5cac14a2dfae3bf511c35a46d52eb0b7e626678d9c5cae617948859894dc10f0240c6a4f6b5e0df8bc28ef9ae853697e9c54e8c95c8ae539639b004b1653b8dd9ceef3d7f8732b202ec3245d58891bb", 0xfa}}, 0x100}) 13:05:52 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @raw_data="caaf7edf1eef4cd2e13268addb36cfd9bc7ab8b2445a5a46163ebe6be280c4f3e3fcddd95a4fecae9105fa37eb614702a2b08fdecd5e0a07fb70e9d6c7c9ff3b0260875a7f862d598b32d54253b0e6e9f67d90052c34ca804a6e63e5bc084d651a5ef72916b6cc19d7d973aa4d03a299e7d7039262d045d9a18b4b8fadfd5626a132696baa8c7d3d2a33452d5e6da36ea4397608189eb6ef616dda1eb8479f03a3feddca207a6e70009e4935c7b661db20ee0374431e8706a8d9cf8ee29d5cd6c82c4f06448e7206"}) 13:05:52 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x6, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x8}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) 13:05:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) select(0x40, &(0x7f0000000140)={0xff, 0x4, 0x6, 0x4d, 0x100000004, 0x2, 0x3, 0x3}, &(0x7f0000000180)={0x7, 0x100, 0x0, 0x8, 0x2, 0x5, 0x8, 0xffffffffce7b218b}, &(0x7f00000001c0)={0x252, 0x3, 0x10f, 0x8000, 0x22c000000000, 0x4, 0x2, 0x4ee9}, &(0x7f0000000200)) (async) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @remote}, &(0x7f0000000280)=0x10) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc1, 0x3a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x20040080) 13:05:52 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x3, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000680)=@multiplanar_fd={0x0, 0x3, 0x4, 0x1000, 0x804, {0x0, 0xea60}, {0x1, 0x8, 0x0, 0x9, 0x1, 0x9, "7f54c0f7"}, 0x7, 0x4, {&(0x7f00000004c0)=[{0x3, 0x8, {}, 0x6}, {0x81, 0x4, {}, 0x6}]}, 0xffb}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x978, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x0, @sliced={0x7fff, [0x396, 0x80, 0x1f, 0xbb6b, 0xc1ec, 0x9de, 0x8001, 0x7ff, 0xe3, 0x7, 0xff, 0x14, 0x6, 0x7ff, 0x6, 0x4, 0x81, 0x1f, 0x4, 0xfffe, 0x7, 0x3, 0xfff7, 0x4e, 0xfffc, 0x2, 0xb5f, 0x7, 0xffff, 0xf180, 0x20ee, 0x8, 0x3, 0x4, 0x3651, 0x1000, 0x3, 0xa244, 0x2, 0x3ae, 0x3, 0x9, 0x5, 0xa495, 0xde8, 0x7ff, 0x3, 0xda58], 0x7f}}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000780)=@mmap={0x16, 0x1, 0x4, 0x4000, 0x7fff, {}, {0x2, 0x8, 0x8, 0x1, 0x0, 0xfb, "349787ca"}, 0x1, 0x1, {}, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@fd={0x4, 0x1, 0x4, 0x800, 0x2, {0x77359400}, {0x2, 0x1, 0x5, 0x7f, 0x3f, 0x2, "02840ad0"}, 0xb01, 0x4, {}, 0x5}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x1ff, 0x3, 0x4, {0x0, @win={{0x2, 0xf02, 0x8, 0xff}, 0x0, 0x2, &(0x7f00000002c0)={{0x19, 0x3, 0x6db, 0x101}, &(0x7f0000000280)={{0x2728, 0xfffff800, 0x4, 0x8}, &(0x7f0000000240)={{0x0, 0x9, 0xfffffffc, 0x1}}}}, 0x800, &(0x7f0000000300)="e7fb5884ca95b9114554d1380ff6be71249528ed278d94d3b9b6324008e5306219adab9cc744c8055e8e2abca1e5c5a65202c66249c0e0ef016ecce8bf7875b9ed4d53d4c00b5121c5cac14a2dfae3bf511c35a46d52eb0b7e626678d9c5cae617948859894dc10f0240c6a4f6b5e0df8bc28ef9ae853697e9c54e8c95c8ae539639b004b1653b8dd9ceef3d7f8732b202ec3245d58891bb", 0xfa}}, 0x100}) 13:05:52 executing program 4: sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="7c7e49c64cdaaae1ab5b", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fbdbdf25010000000800050064010102140006006272696467655f736c6176655f30000008000500e000000108000400ac14143514000200fe80000000000000000000000000000a14000600626f6e645f736c6176655f3000000000080005000a0101001400060076657468315f746f5f6272696467650014000300fc00"/146], 0x98}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000040) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0xf2c, 0x3, 0x2}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x8) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000780)=@multiplanar_mmap={0xffff, 0x1, 0x4, 0x400, 0x3, {r2, r3/1000+60000}, {0x0, 0xc, 0x4, 0x4, 0x9c, 0x3, "f2ee3f2c"}, 0x7, 0x1, {&(0x7f0000000700)=[{0x9, 0xd8, {0x100000000}, 0xd095}, {0xff, 0x8, {0x4}, 0x3ff}]}, 0xfb6a}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000180)={0xffff5a2f, 0x0, 0xefc40988b085f6db, "dcce83520cb0d9bc410ebbc77bcda1e68b16154a298f4101dbc9a8bf4f6a5e99", 0x32314d54}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x1, @sliced={0x400, [0x4, 0x3, 0x329, 0x3ff, 0x0, 0x5, 0x401, 0xfff, 0x9, 0x7, 0xfffe, 0x6, 0x1, 0x7, 0xb48, 0x308, 0x6, 0xf22, 0x6d4, 0x400, 0x2, 0x1, 0x73, 0xd605, 0x6, 0x8, 0x101, 0xc8, 0xff, 0x3f, 0x400, 0x3, 0x2, 0x1, 0x3a, 0x0, 0x9, 0x6, 0x4, 0xad6, 0x4, 0x9, 0x5, 0x0, 0x8, 0x101, 0xff, 0xffff], 0xffffffff}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x7}}) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000300)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000680)=@multiplanar_userptr={0xffffffff, 0x1, 0x4, 0x0, 0xe2f4, {0x0, 0xea60}, {0x1, 0x1, 0x92, 0x0, 0xff, 0x3f, "82d2f712"}, 0x10001, 0x2, {&(0x7f0000000480)=[{0x7ff, 0x41bffb74, {&(0x7f0000000280)}, 0x9}, {0x3, 0x3, {&(0x7f00000002c0)}, 0x10001}]}, 0x3}) 13:05:52 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @raw_data="caaf7edf1eef4cd2e13268addb36cfd9bc7ab8b2445a5a46163ebe6be280c4f3e3fcddd95a4fecae9105fa37eb614702a2b08fdecd5e0a07fb70e9d6c7c9ff3b0260875a7f862d598b32d54253b0e6e9f67d90052c34ca804a6e63e5bc084d651a5ef72916b6cc19d7d973aa4d03a299e7d7039262d045d9a18b4b8fadfd5626a132696baa8c7d3d2a33452d5e6da36ea4397608189eb6ef616dda1eb8479f03a3feddca207a6e70009e4935c7b661db20ee0374431e8706a8d9cf8ee29d5cd6c82c4f06448e7206"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @raw_data="caaf7edf1eef4cd2e13268addb36cfd9bc7ab8b2445a5a46163ebe6be280c4f3e3fcddd95a4fecae9105fa37eb614702a2b08fdecd5e0a07fb70e9d6c7c9ff3b0260875a7f862d598b32d54253b0e6e9f67d90052c34ca804a6e63e5bc084d651a5ef72916b6cc19d7d973aa4d03a299e7d7039262d045d9a18b4b8fadfd5626a132696baa8c7d3d2a33452d5e6da36ea4397608189eb6ef616dda1eb8479f03a3feddca207a6e70009e4935c7b661db20ee0374431e8706a8d9cf8ee29d5cd6c82c4f06448e7206"}) (async) 13:05:52 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000000c0)=@multiplanar_overlay={0x1b, 0x1, 0x4, 0x800, 0x8714, {0x77359400}, {0x5, 0x8, 0x3f, 0x1, 0x3, 0x1, "351ed6a8"}, 0x100, 0x3, {&(0x7f0000000040)=[{0x8, 0x3, {0x40}, 0x4}, {0x0, 0xb14c, {0x7}, 0xffff}]}, 0xc2a, 0x0, r1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000a00)=@multiplanar_fd={0x1ff, 0x2, 0x4, 0x8, 0x77d, {r6, r7/1000+60000}, {0x3, 0x0, 0x0, 0xf9, 0x7f, 0x0, "78806d17"}, 0x1, 0x4, {&(0x7f0000000180)=[{0x7, 0x6, {}, 0x2}, {0x69, 0x861, {}, 0x7}]}, 0x8, 0x0, r4}) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r8, 0x5421, 0x0) 13:05:52 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x0, @sdr={0x33424752, 0x80000001}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x0, @sdr={0x33424752, 0x80000001}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:52 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x6, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) 13:05:52 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x3, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000680)=@multiplanar_fd={0x0, 0x3, 0x4, 0x1000, 0x804, {0x0, 0xea60}, {0x1, 0x8, 0x0, 0x9, 0x1, 0x9, "7f54c0f7"}, 0x7, 0x4, {&(0x7f00000004c0)=[{0x3, 0x8, {}, 0x6}, {0x81, 0x4, {}, 0x6}]}, 0xffb}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x978, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x0, @sliced={0x7fff, [0x396, 0x80, 0x1f, 0xbb6b, 0xc1ec, 0x9de, 0x8001, 0x7ff, 0xe3, 0x7, 0xff, 0x14, 0x6, 0x7ff, 0x6, 0x4, 0x81, 0x1f, 0x4, 0xfffe, 0x7, 0x3, 0xfff7, 0x4e, 0xfffc, 0x2, 0xb5f, 0x7, 0xffff, 0xf180, 0x20ee, 0x8, 0x3, 0x4, 0x3651, 0x1000, 0x3, 0xa244, 0x2, 0x3ae, 0x3, 0x9, 0x5, 0xa495, 0xde8, 0x7ff, 0x3, 0xda58], 0x7f}}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000780)=@mmap={0x16, 0x1, 0x4, 0x4000, 0x7fff, {}, {0x2, 0x8, 0x8, 0x1, 0x0, 0xfb, "349787ca"}, 0x1, 0x1, {}, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@fd={0x4, 0x1, 0x4, 0x800, 0x2, {0x77359400}, {0x2, 0x1, 0x5, 0x7f, 0x3f, 0x2, "02840ad0"}, 0xb01, 0x4, {}, 0x5}) 13:05:52 executing program 4: sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="7c7e49c64cdaaae1ab5b", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fbdbdf25010000000800050064010102140006006272696467655f736c6176655f30000008000500e000000108000400ac14143514000200fe80000000000000000000000000000a14000600626f6e645f736c6176655f3000000000080005000a0101001400060076657468315f746f5f6272696467650014000300fc00"/146], 0x98}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000040) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0xf2c, 0x3, 0x2}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x8) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000780)=@multiplanar_mmap={0xffff, 0x1, 0x4, 0x400, 0x3, {r2, r3/1000+60000}, {0x0, 0xc, 0x4, 0x4, 0x9c, 0x3, "f2ee3f2c"}, 0x7, 0x1, {&(0x7f0000000700)=[{0x9, 0xd8, {0x100000000}, 0xd095}, {0xff, 0x8, {0x4}, 0x3ff}]}, 0xfb6a}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000180)={0xffff5a2f, 0x0, 0xefc40988b085f6db, "dcce83520cb0d9bc410ebbc77bcda1e68b16154a298f4101dbc9a8bf4f6a5e99", 0x32314d54}) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x1, @sliced={0x400, [0x4, 0x3, 0x329, 0x3ff, 0x0, 0x5, 0x401, 0xfff, 0x9, 0x7, 0xfffe, 0x6, 0x1, 0x7, 0xb48, 0x308, 0x6, 0xf22, 0x6d4, 0x400, 0x2, 0x1, 0x73, 0xd605, 0x6, 0x8, 0x101, 0xc8, 0xff, 0x3f, 0x400, 0x3, 0x2, 0x1, 0x3a, 0x0, 0x9, 0x6, 0x4, 0xad6, 0x4, 0x9, 0x5, 0x0, 0x8, 0x101, 0xff, 0xffff], 0xffffffff}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x7}}) (async) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000300)=0x1) (async) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000680)=@multiplanar_userptr={0xffffffff, 0x1, 0x4, 0x0, 0xe2f4, {0x0, 0xea60}, {0x1, 0x1, 0x92, 0x0, 0xff, 0x3f, "82d2f712"}, 0x10001, 0x2, {&(0x7f0000000480)=[{0x7ff, 0x41bffb74, {&(0x7f0000000280)}, 0x9}, {0x3, 0x3, {&(0x7f00000002c0)}, 0x10001}]}, 0x3}) 13:05:52 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @raw_data="caaf7edf1eef4cd2e13268addb36cfd9bc7ab8b2445a5a46163ebe6be280c4f3e3fcddd95a4fecae9105fa37eb614702a2b08fdecd5e0a07fb70e9d6c7c9ff3b0260875a7f862d598b32d54253b0e6e9f67d90052c34ca804a6e63e5bc084d651a5ef72916b6cc19d7d973aa4d03a299e7d7039262d045d9a18b4b8fadfd5626a132696baa8c7d3d2a33452d5e6da36ea4397608189eb6ef616dda1eb8479f03a3feddca207a6e70009e4935c7b661db20ee0374431e8706a8d9cf8ee29d5cd6c82c4f06448e7206"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @raw_data="caaf7edf1eef4cd2e13268addb36cfd9bc7ab8b2445a5a46163ebe6be280c4f3e3fcddd95a4fecae9105fa37eb614702a2b08fdecd5e0a07fb70e9d6c7c9ff3b0260875a7f862d598b32d54253b0e6e9f67d90052c34ca804a6e63e5bc084d651a5ef72916b6cc19d7d973aa4d03a299e7d7039262d045d9a18b4b8fadfd5626a132696baa8c7d3d2a33452d5e6da36ea4397608189eb6ef616dda1eb8479f03a3feddca207a6e70009e4935c7b661db20ee0374431e8706a8d9cf8ee29d5cd6c82c4f06448e7206"}) (async) 13:05:52 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) (async, rerun: 64) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (rerun: 64) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000000c0)=@multiplanar_overlay={0x1b, 0x1, 0x4, 0x800, 0x8714, {0x77359400}, {0x5, 0x8, 0x3f, 0x1, 0x3, 0x1, "351ed6a8"}, 0x100, 0x3, {&(0x7f0000000040)=[{0x8, 0x3, {0x40}, 0x4}, {0x0, 0xb14c, {0x7}, 0xffff}]}, 0xc2a, 0x0, r1}) (async, rerun: 64) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async, rerun: 64) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000a00)=@multiplanar_fd={0x1ff, 0x2, 0x4, 0x8, 0x77d, {r6, r7/1000+60000}, {0x3, 0x0, 0x0, 0xf9, 0x7f, 0x0, "78806d17"}, 0x1, 0x4, {&(0x7f0000000180)=[{0x7, 0x6, {}, 0x2}, {0x69, 0x861, {}, 0x7}]}, 0x8, 0x0, r4}) (async) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r8, 0x5421, 0x0) 13:05:52 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0x88, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x40001) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40404004}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf253f0000001c005e8008000900018000000800090006000000080007009102000044005e800800090002000000080005001d00210008000200ff01000008000600fe00000008000200c3000000080002000200000008000200010000000800030002000000"], 0x74}}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042dbd7000ffdbdf252e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00c80008021100000100100400d0000400930008003500070000000a00060008021100000000001e009400004014d7db0000000000000800fc0005000000010080000000010000a443e6ccee9ab092"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000010) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000340)={0x1c, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", ""]}, 0x1c}}, 0x4002011) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x60, r6, 0x8, 0xb9e, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x20000080) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:52 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x3, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000680)=@multiplanar_fd={0x0, 0x3, 0x4, 0x1000, 0x804, {0x0, 0xea60}, {0x1, 0x8, 0x0, 0x9, 0x1, 0x9, "7f54c0f7"}, 0x7, 0x4, {&(0x7f00000004c0)=[{0x3, 0x8, {}, 0x6}, {0x81, 0x4, {}, 0x6}]}, 0xffb}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x978, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x0, @sliced={0x7fff, [0x396, 0x80, 0x1f, 0xbb6b, 0xc1ec, 0x9de, 0x8001, 0x7ff, 0xe3, 0x7, 0xff, 0x14, 0x6, 0x7ff, 0x6, 0x4, 0x81, 0x1f, 0x4, 0xfffe, 0x7, 0x3, 0xfff7, 0x4e, 0xfffc, 0x2, 0xb5f, 0x7, 0xffff, 0xf180, 0x20ee, 0x8, 0x3, 0x4, 0x3651, 0x1000, 0x3, 0xa244, 0x2, 0x3ae, 0x3, 0x9, 0x5, 0xa495, 0xde8, 0x7ff, 0x3, 0xda58], 0x7f}}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000780)=@mmap={0x16, 0x1, 0x4, 0x4000, 0x7fff, {}, {0x2, 0x8, 0x8, 0x1, 0x0, 0xfb, "349787ca"}, 0x1, 0x1, {}, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) 13:05:52 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) 13:05:52 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x7, 0x1, 0x2, {0x2, @win={{0x1, 0x401, 0x0, 0x80}, 0x1, 0xf74, &(0x7f0000000080)={{0x1043b43f, 0x8cc, 0x8, 0x7ff}, &(0x7f0000000040)={{0x4, 0x7, 0x400, 0x2}, &(0x7f0000000000)={{0x5000, 0x2, 0x3ff}}}}, 0x3, &(0x7f00000000c0)="076b247641eca7b6246b97d874d41f16d47a2429c45114bb44105107674d64b2f03090f31f294260ac8345dcb0a67efa48fceb7abcb98029fe50ccb3393f4b83002d204e5d574ee0f41abeaad70afe4e31db2753e79e37c0279cb0a8d2f56b443829dcf0ec91f4ef9d4bef6deb5153680e51508c21e919b9cc67d87667d0d4e5485347f77d550b2eb0e6d4bf01be2fcd151bf916a9ce3cb76b1b1cf2afd82628b109f967ec8d3122074b10b66755e10eacb794371d0116be122d", 0x40}}, 0x7}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:52 executing program 3: socketpair(0x27, 0x2, 0x20, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x83171d2ada3f8145}, 0x1) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000340), &(0x7f0000000380)=0x8) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000080)={'custom0\x00'}) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x5, 0x0, 0x0, 0x0, 0x2f29c2c2f6da9951, [{0x0, 0x349}, {0x0, 0x4000000}, {}, {}, {0x3}, {0x0, 0x23}, {}, {0x5, 0x40000}], 0xfd, 0x0, 0x0, 0x0, 0x2}}) 13:05:52 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x3, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000680)=@multiplanar_fd={0x0, 0x3, 0x4, 0x1000, 0x804, {0x0, 0xea60}, {0x1, 0x8, 0x0, 0x9, 0x1, 0x9, "7f54c0f7"}, 0x7, 0x4, {&(0x7f00000004c0)=[{0x3, 0x8, {}, 0x6}, {0x81, 0x4, {}, 0x6}]}, 0xffb}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x978, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x0, @sliced={0x7fff, [0x396, 0x80, 0x1f, 0xbb6b, 0xc1ec, 0x9de, 0x8001, 0x7ff, 0xe3, 0x7, 0xff, 0x14, 0x6, 0x7ff, 0x6, 0x4, 0x81, 0x1f, 0x4, 0xfffe, 0x7, 0x3, 0xfff7, 0x4e, 0xfffc, 0x2, 0xb5f, 0x7, 0xffff, 0xf180, 0x20ee, 0x8, 0x3, 0x4, 0x3651, 0x1000, 0x3, 0xa244, 0x2, 0x3ae, 0x3, 0x9, 0x5, 0xa495, 0xde8, 0x7ff, 0x3, 0xda58], 0x7f}}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) 13:05:52 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0x88, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x40001) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40404004}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf253f0000001c005e8008000900018000000800090006000000080007009102000044005e800800090002000000080005001d00210008000200ff01000008000600fe00000008000200c3000000080002000200000008000200010000000800030002000000"], 0x74}}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042dbd7000ffdbdf252e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00c80008021100000100100400d0000400930008003500070000000a00060008021100000000001e009400004014d7db0000000000000800fc0005000000010080000000010000a443e6ccee9ab092"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042dbd7000ffdbdf252e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00c80008021100000100100400d0000400930008003500070000000a00060008021100000000001e009400004014d7db0000000000000800fc0005000000010080000000010000a443e6ccee9ab092"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000010) (async) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000010) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000340)={0x1c, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", ""]}, 0x1c}}, 0x4002011) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x60, r6, 0x8, 0xb9e, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x20000080) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x60, r6, 0x8, 0xb9e, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x20000080) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:52 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x7, 0x1, 0x2, {0x2, @win={{0x1, 0x401, 0x0, 0x80}, 0x1, 0xf74, &(0x7f0000000080)={{0x1043b43f, 0x8cc, 0x8, 0x7ff}, &(0x7f0000000040)={{0x4, 0x7, 0x400, 0x2}, &(0x7f0000000000)={{0x5000, 0x2, 0x3ff}}}}, 0x3, &(0x7f00000000c0)="076b247641eca7b6246b97d874d41f16d47a2429c45114bb44105107674d64b2f03090f31f294260ac8345dcb0a67efa48fceb7abcb98029fe50ccb3393f4b83002d204e5d574ee0f41abeaad70afe4e31db2753e79e37c0279cb0a8d2f56b443829dcf0ec91f4ef9d4bef6deb5153680e51508c21e919b9cc67d87667d0d4e5485347f77d550b2eb0e6d4bf01be2fcd151bf916a9ce3cb76b1b1cf2afd82628b109f967ec8d3122074b10b66755e10eacb794371d0116be122d", 0x40}}, 0x7}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:52 executing program 0: setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) 13:05:52 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000000c0)=@multiplanar_overlay={0x1b, 0x1, 0x4, 0x800, 0x8714, {0x77359400}, {0x5, 0x8, 0x3f, 0x1, 0x3, 0x1, "351ed6a8"}, 0x100, 0x3, {&(0x7f0000000040)=[{0x8, 0x3, {0x40}, 0x4}, {0x0, 0xb14c, {0x7}, 0xffff}]}, 0xc2a, 0x0, r1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000a00)=@multiplanar_fd={0x1ff, 0x2, 0x4, 0x8, 0x77d, {r6, r7/1000+60000}, {0x3, 0x0, 0x0, 0xf9, 0x7f, 0x0, "78806d17"}, 0x1, 0x4, {&(0x7f0000000180)=[{0x7, 0x6, {}, 0x2}, {0x69, 0x861, {}, 0x7}]}, 0x8, 0x0, r4}) (async) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r8, 0x5421, 0x0) 13:05:52 executing program 3: socketpair(0x27, 0x2, 0x20, &(0x7f00000001c0)={0xffffffffffffffff}) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x83171d2ada3f8145}, 0x1) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000340), &(0x7f0000000380)=0x8) (async) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000080)={'custom0\x00'}) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x5, 0x0, 0x0, 0x0, 0x2f29c2c2f6da9951, [{0x0, 0x349}, {0x0, 0x4000000}, {}, {}, {0x3}, {0x0, 0x23}, {}, {0x5, 0x40000}], 0xfd, 0x0, 0x0, 0x0, 0x2}}) 13:05:52 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x3, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000680)=@multiplanar_fd={0x0, 0x3, 0x4, 0x1000, 0x804, {0x0, 0xea60}, {0x1, 0x8, 0x0, 0x9, 0x1, 0x9, "7f54c0f7"}, 0x7, 0x4, {&(0x7f00000004c0)=[{0x3, 0x8, {}, 0x6}, {0x81, 0x4, {}, 0x6}]}, 0xffb}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x978, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x0, @sliced={0x7fff, [0x396, 0x80, 0x1f, 0xbb6b, 0xc1ec, 0x9de, 0x8001, 0x7ff, 0xe3, 0x7, 0xff, 0x14, 0x6, 0x7ff, 0x6, 0x4, 0x81, 0x1f, 0x4, 0xfffe, 0x7, 0x3, 0xfff7, 0x4e, 0xfffc, 0x2, 0xb5f, 0x7, 0xffff, 0xf180, 0x20ee, 0x8, 0x3, 0x4, 0x3651, 0x1000, 0x3, 0xa244, 0x2, 0x3ae, 0x3, 0x9, 0x5, 0xa495, 0xde8, 0x7ff, 0x3, 0xda58], 0x7f}}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) 13:05:52 executing program 0: setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) 13:05:52 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x7, 0x1, 0x2, {0x2, @win={{0x1, 0x401, 0x0, 0x80}, 0x1, 0xf74, &(0x7f0000000080)={{0x1043b43f, 0x8cc, 0x8, 0x7ff}, &(0x7f0000000040)={{0x4, 0x7, 0x400, 0x2}, &(0x7f0000000000)={{0x5000, 0x2, 0x3ff}}}}, 0x3, &(0x7f00000000c0)="076b247641eca7b6246b97d874d41f16d47a2429c45114bb44105107674d64b2f03090f31f294260ac8345dcb0a67efa48fceb7abcb98029fe50ccb3393f4b83002d204e5d574ee0f41abeaad70afe4e31db2753e79e37c0279cb0a8d2f56b443829dcf0ec91f4ef9d4bef6deb5153680e51508c21e919b9cc67d87667d0d4e5485347f77d550b2eb0e6d4bf01be2fcd151bf916a9ce3cb76b1b1cf2afd82628b109f967ec8d3122074b10b66755e10eacb794371d0116be122d", 0x40}}, 0x7}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x7, 0x1, 0x2, {0x2, @win={{0x1, 0x401, 0x0, 0x80}, 0x1, 0xf74, &(0x7f0000000080)={{0x1043b43f, 0x8cc, 0x8, 0x7ff}, &(0x7f0000000040)={{0x4, 0x7, 0x400, 0x2}, &(0x7f0000000000)={{0x5000, 0x2, 0x3ff}}}}, 0x3, &(0x7f00000000c0)="076b247641eca7b6246b97d874d41f16d47a2429c45114bb44105107674d64b2f03090f31f294260ac8345dcb0a67efa48fceb7abcb98029fe50ccb3393f4b83002d204e5d574ee0f41abeaad70afe4e31db2753e79e37c0279cb0a8d2f56b443829dcf0ec91f4ef9d4bef6deb5153680e51508c21e919b9cc67d87667d0d4e5485347f77d550b2eb0e6d4bf01be2fcd151bf916a9ce3cb76b1b1cf2afd82628b109f967ec8d3122074b10b66755e10eacb794371d0116be122d", 0x40}}, 0x7}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) 13:05:52 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0x88, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x40001) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40404004}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf253f0000001c005e8008000900018000000800090006000000080007009102000044005e800800090002000000080005001d00210008000200ff01000008000600fe00000008000200c3000000080002000200000008000200010000000800030002000000"], 0x74}}, 0x4000000) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042dbd7000ffdbdf252e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00c80008021100000100100400d0000400930008003500070000000a00060008021100000000001e009400004014d7db0000000000000800fc0005000000010080000000010000a443e6ccee9ab092"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000010) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r5) (async) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000340)={0x1c, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", ""]}, 0x1c}}, 0x4002011) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r7) (async) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x60, r6, 0x8, 0xb9e, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x20000080) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:05:52 executing program 3: socketpair(0x27, 0x2, 0x20, &(0x7f00000001c0)={0xffffffffffffffff}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x83171d2ada3f8145}, 0x1) (async) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000340), &(0x7f0000000380)=0x8) (async) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000080)={'custom0\x00'}) (async) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x5, 0x0, 0x0, 0x0, 0x2f29c2c2f6da9951, [{0x0, 0x349}, {0x0, 0x4000000}, {}, {}, {0x3}, {0x0, 0x23}, {}, {0x5, 0x40000}], 0xfd, 0x0, 0x0, 0x0, 0x2}}) 13:05:52 executing program 0: setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) 13:05:53 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x1, @vbi={0x1f, 0x1, 0x0, 0xe3f8bef8, [0x269], [0x8000, 0x1000], 0x2}}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 13:05:53 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:05:53 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x3, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000680)=@multiplanar_fd={0x0, 0x3, 0x4, 0x1000, 0x804, {0x0, 0xea60}, {0x1, 0x8, 0x0, 0x9, 0x1, 0x9, "7f54c0f7"}, 0x7, 0x4, {&(0x7f00000004c0)=[{0x3, 0x8, {}, 0x6}, {0x81, 0x4, {}, 0x6}]}, 0xffb}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x978, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x0, @sliced={0x7fff, [0x396, 0x80, 0x1f, 0xbb6b, 0xc1ec, 0x9de, 0x8001, 0x7ff, 0xe3, 0x7, 0xff, 0x14, 0x6, 0x7ff, 0x6, 0x4, 0x81, 0x1f, 0x4, 0xfffe, 0x7, 0x3, 0xfff7, 0x4e, 0xfffc, 0x2, 0xb5f, 0x7, 0xffff, 0xf180, 0x20ee, 0x8, 0x3, 0x4, 0x3651, 0x1000, 0x3, 0xa244, 0x2, 0x3ae, 0x3, 0x9, 0x5, 0xa495, 0xde8, 0x7ff, 0x3, 0xda58], 0x7f}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) 13:05:53 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix={0x9, 0x1ff, 0x32314d56, 0x0, 0x4, 0x4, 0x4, 0x0, 0x1, 0x3, 0x1, 0x7}}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@multiplanar_overlay={0x6, 0x6, 0x4, 0xe000, 0x2, {r1, r2/1000+10000}, {0x2, 0x2, 0x4, 0x81, 0x3f, 0x8, "0d8d9657"}, 0x0, 0x3, {&(0x7f00000001c0)=[{0x400, 0x8, {0x103b}}, {0x401, 0x40, {0x1000}}]}, 0x7}) bind$l2tp(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, 0x10) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x3}, {0x55}, @device_a, @device_a, @broadcast, {0x1, 0x3}, @device_b}, @a_msdu=[{@broadcast, @device_b, 0xa9, "f1fec9cb8c1902fd1f974aff4fda04b3aa251f5b58588eb874123199c67891f79692486ada35e91172dec73941343b9611db15884d47a9f4fff006883a9de66f3e5cf90d590c8f98f31c43a4c13fcee848f9492e6875c0a3e42487409d19f10252ed8619d7da3921bc540656cceb54e4306fd88a2f8e8d678ab9cce059f29a0d50183e764032b3fcbc004519f59a79c5ed837863b7a2170debd98ff7734795f94f61b22c3084622443"}]}, 0xd6) 13:05:53 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RAUTH(r1, &(0x7f0000000040)={0x14, 0x67, 0x1, {0x10, 0x2, 0x4}}, 0x14) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:05:53 executing program 0: r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) 13:05:53 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x1, @vbi={0x1f, 0x1, 0x0, 0xe3f8bef8, [0x269], [0x8000, 0x1000], 0x2}}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x1, @vbi={0x1f, 0x1, 0x0, 0xe3f8bef8, [0x269], [0x8000, 0x1000], 0x2}}) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) 13:05:53 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:05:53 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RAUTH(r1, &(0x7f0000000040)={0x14, 0x67, 0x1, {0x10, 0x2, 0x4}}, 0x14) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) pipe2$9p(&(0x7f0000000000), 0x80) (async) write$P9_RAUTH(r1, &(0x7f0000000040)={0x14, 0x67, 0x1, {0x10, 0x2, 0x4}}, 0x14) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) (async) 13:05:53 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x3, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000680)=@multiplanar_fd={0x0, 0x3, 0x4, 0x1000, 0x804, {0x0, 0xea60}, {0x1, 0x8, 0x0, 0x9, 0x1, 0x9, "7f54c0f7"}, 0x7, 0x4, {&(0x7f00000004c0)=[{0x3, 0x8, {}, 0x6}, {0x81, 0x4, {}, 0x6}]}, 0xffb}) syz_open_dev$vim2m(&(0x7f0000000000), 0x978, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) [ 616.606875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 13:05:53 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:05:53 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x1, @vbi={0x1f, 0x1, 0x0, 0xe3f8bef8, [0x269], [0x8000, 0x1000], 0x2}}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x1, @vbi={0x1f, 0x1, 0x0, 0xe3f8bef8, [0x269], [0x8000, 0x1000], 0x2}}) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) 13:05:53 executing program 0: r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) 13:05:53 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RAUTH(r1, &(0x7f0000000040)={0x14, 0x67, 0x1, {0x10, 0x2, 0x4}}, 0x14) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:05:53 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) 13:05:53 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix={0x9, 0x1ff, 0x32314d56, 0x0, 0x4, 0x4, 0x4, 0x0, 0x1, 0x3, 0x1, 0x7}}) (async) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@multiplanar_overlay={0x6, 0x6, 0x4, 0xe000, 0x2, {r1, r2/1000+10000}, {0x2, 0x2, 0x4, 0x81, 0x3f, 0x8, "0d8d9657"}, 0x0, 0x3, {&(0x7f00000001c0)=[{0x400, 0x8, {0x103b}}, {0x401, 0x40, {0x1000}}]}, 0x7}) (async, rerun: 64) bind$l2tp(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, 0x10) (async, rerun: 64) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x3}, {0x55}, @device_a, @device_a, @broadcast, {0x1, 0x3}, @device_b}, @a_msdu=[{@broadcast, @device_b, 0xa9, "f1fec9cb8c1902fd1f974aff4fda04b3aa251f5b58588eb874123199c67891f79692486ada35e91172dec73941343b9611db15884d47a9f4fff006883a9de66f3e5cf90d590c8f98f31c43a4c13fcee848f9492e6875c0a3e42487409d19f10252ed8619d7da3921bc540656cceb54e4306fd88a2f8e8d678ab9cce059f29a0d50183e764032b3fcbc004519f59a79c5ed837863b7a2170debd98ff7734795f94f61b22c3084622443"}]}, 0xd6) 13:05:53 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x3, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000680)=@multiplanar_fd={0x0, 0x3, 0x4, 0x1000, 0x804, {0x0, 0xea60}, {0x1, 0x8, 0x0, 0x9, 0x1, 0x9, "7f54c0f7"}, 0x7, 0x4, {&(0x7f00000004c0)=[{0x3, 0x8, {}, 0x6}, {0x81, 0x4, {}, 0x6}]}, 0xffb}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) 13:05:53 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) socket$pppoe(0x18, 0x1, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 13:05:53 executing program 0: r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) 13:05:53 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000180)={0x1, 0x29, 0x2, 0x80}) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x6}, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="60030000", @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf253900000008000900", @ANYRES32=r3, @ANYBLOB="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"], 0x360}, 0x1, 0x0, 0x0, 0x8004}, 0x40081) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x3, 0x7, 0x7fffffff, 0x80080}) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000002c0)=@multiplanar_fd={0x8001, 0x0, 0x4, 0x401, 0x0, {r5, r6/1000+60000}, {0x4, 0x1, 0x6, 0x7, 0x40, 0x1, "c7d50fb7"}, 0xffffffff, 0x4, {&(0x7f0000000200)=[{0x3, 0x9, {}, 0xe291320}, {0x9, 0x8}]}, 0x7, 0x0, r2}) 13:05:53 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:05:53 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000080)=""/190, 0xbe, 0x1, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x17a3c0731efb1414}, 0x0) 13:05:53 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000180)={0x1, 0x29, 0x2, 0x80}) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x6}, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="60030000", @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf253900000008000900", @ANYRES32=r3, @ANYBLOB="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"], 0x360}, 0x1, 0x0, 0x0, 0x8004}, 0x40081) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x3, 0x7, 0x7fffffff, 0x80080}) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000002c0)=@multiplanar_fd={0x8001, 0x0, 0x4, 0x401, 0x0, {r5, r6/1000+60000}, {0x4, 0x1, 0x6, 0x7, 0x40, 0x1, "c7d50fb7"}, 0xffffffff, 0x4, {&(0x7f0000000200)=[{0x3, 0x9, {}, 0xe291320}, {0x9, 0x8}]}, 0x7, 0x0, r2}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000180)={0x1, 0x29, 0x2, 0x80}) (async) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x6}, 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="60030000", @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf253900000008000900", @ANYRES32=r3, @ANYBLOB="0c009900cb0300003f0000001c025a801400038005000400000000000500040001000000ac00018005000700000000001400030007005e00b8cbff7f0400ff000400050014000500010401007f000008ff010400090000000500040001000000140003000100ff07050040000100000046020100140005000100fdfff47c8000ff0101003c0f14714500020008003e2f1326510e05412c19010a41132522530c334603273d0b32482b1c2c52314318022e385425570932491f24222817011e51505728432b574d1f1d242450380000001c000280050006000200000005000400010000000500040002000000b8000080050007000000000005000400000000004f0002003412034909162026200631241248374a4140142556411918020c0b374e094a482533254c4f230d4f004b4c55032224471142044948351819290b232803232c51003e3938044e570d18560b0005000400020000001400030006000800ffff0010cff805000400a300140003000600f7ffffff0080070020000004070005000600000000000500060002000000140003000101080000000008050000100002ffff040001806000038028000200281e5449530f122f1d270a1f5f132b3f262500402f56251745350d0b2e322a21192203400c000100600b360516020b0b05000700020000001f000200043c4a3120475638274242214e391e494b350f1e33350548373c1100200002801400050004000001ffff810001001f0004000400050006000000000044005a802c000380140003000400ff030200080002000800249d0900090002000e0e0015300000000500040002000000140002800f000100481603020c010c6c01066000d8005a80d40000801400030000c0050008000300ff000000008007001d0001000c72046c6c365809051203480c484816120230361b1b0236360000001e00020030571f274e5546454e1106115139002d20333f3720372751402b000014000500080003003f00050009000700040041fe14000500800000000180ff7fad09ffff020006005100020037493b1b10335650534b32403c2c0f39320c200b292c154a090d0225472a4b51422e4e2f2a08511143414021411e3b510f2b50012c530a35561719422d0f4e0c4939270e152c30242d3552524b000000"], 0x360}, 0x1, 0x0, 0x0, 0x8004}, 0x40081) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x3, 0x7, 0x7fffffff, 0x80080}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) clock_gettime(0x0, &(0x7f00000001c0)) (async) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000002c0)=@multiplanar_fd={0x8001, 0x0, 0x4, 0x401, 0x0, {r5, r6/1000+60000}, {0x4, 0x1, 0x6, 0x7, 0x40, 0x1, "c7d50fb7"}, 0xffffffff, 0x4, {&(0x7f0000000200)=[{0x3, 0x9, {}, 0xe291320}, {0x9, 0x8}]}, 0x7, 0x0, r2}) (async) 13:05:53 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) socket$pppoe(0x18, 0x1, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) socket$pppoe(0x18, 0x1, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) 13:05:53 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x3, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) 13:05:53 executing program 0: socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) [ 617.092114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 13:05:53 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000080)=""/190, 0xbe, 0x1, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x17a3c0731efb1414}, 0x0) 13:05:53 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async, rerun: 64) socket$pppoe(0x18, 0x1, 0x0) (async, rerun: 64) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 13:05:53 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix={0x9, 0x1ff, 0x32314d56, 0x0, 0x4, 0x4, 0x4, 0x0, 0x1, 0x3, 0x1, 0x7}}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@multiplanar_overlay={0x6, 0x6, 0x4, 0xe000, 0x2, {r1, r2/1000+10000}, {0x2, 0x2, 0x4, 0x81, 0x3f, 0x8, "0d8d9657"}, 0x0, 0x3, {&(0x7f00000001c0)=[{0x400, 0x8, {0x103b}}, {0x401, 0x40, {0x1000}}]}, 0x7}) bind$l2tp(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, 0x10) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x3}, {0x55}, @device_a, @device_a, @broadcast, {0x1, 0x3}, @device_b}, @a_msdu=[{@broadcast, @device_b, 0xa9, "f1fec9cb8c1902fd1f974aff4fda04b3aa251f5b58588eb874123199c67891f79692486ada35e91172dec73941343b9611db15884d47a9f4fff006883a9de66f3e5cf90d590c8f98f31c43a4c13fcee848f9492e6875c0a3e42487409d19f10252ed8619d7da3921bc540656cceb54e4306fd88a2f8e8d678ab9cce059f29a0d50183e764032b3fcbc004519f59a79c5ed837863b7a2170debd98ff7734795f94f61b22c3084622443"}]}, 0xd6) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix={0x9, 0x1ff, 0x32314d56, 0x0, 0x4, 0x4, 0x4, 0x0, 0x1, 0x3, 0x1, 0x7}}) (async) clock_gettime(0x0, &(0x7f0000000180)) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@multiplanar_overlay={0x6, 0x6, 0x4, 0xe000, 0x2, {r1, r2/1000+10000}, {0x2, 0x2, 0x4, 0x81, 0x3f, 0x8, "0d8d9657"}, 0x0, 0x3, {&(0x7f00000001c0)=[{0x400, 0x8, {0x103b}}, {0x401, 0x40, {0x1000}}]}, 0x7}) (async) bind$l2tp(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, 0x10) (async) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x3}, {0x55}, @device_a, @device_a, @broadcast, {0x1, 0x3}, @device_b}, @a_msdu=[{@broadcast, @device_b, 0xa9, "f1fec9cb8c1902fd1f974aff4fda04b3aa251f5b58588eb874123199c67891f79692486ada35e91172dec73941343b9611db15884d47a9f4fff006883a9de66f3e5cf90d590c8f98f31c43a4c13fcee848f9492e6875c0a3e42487409d19f10252ed8619d7da3921bc540656cceb54e4306fd88a2f8e8d678ab9cce059f29a0d50183e764032b3fcbc004519f59a79c5ed837863b7a2170debd98ff7734795f94f61b22c3084622443"}]}, 0xd6) (async) 13:05:53 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000180)={0x1, 0x29, 0x2, 0x80}) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x6}, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="60030000", @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf253900000008000900", @ANYRES32=r3, @ANYBLOB="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"], 0x360}, 0x1, 0x0, 0x0, 0x8004}, 0x40081) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x3, 0x7, 0x7fffffff, 0x80080}) (async) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000002c0)=@multiplanar_fd={0x8001, 0x0, 0x4, 0x401, 0x0, {r5, r6/1000+60000}, {0x4, 0x1, 0x6, 0x7, 0x40, 0x1, "c7d50fb7"}, 0xffffffff, 0x4, {&(0x7f0000000200)=[{0x3, 0x9, {}, 0xe291320}, {0x9, 0x8}]}, 0x7, 0x0, r2}) 13:05:53 executing program 0: socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) 13:05:53 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x3, @pix_mp}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) 13:05:53 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async, rerun: 64) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (rerun: 64) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000080)=""/190, 0xbe, 0x1, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x17a3c0731efb1414}, 0x0) 13:05:54 executing program 0: socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}], 0x10) 13:05:54 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x3, @pix_mp}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) 13:05:54 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socketpair(0x1, 0xa, 0x400000, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000240)={0xff, 0x0, 0x3, 0x0, 0xd5}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r3, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x2c}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8000}]}, 0x38}}, 0x1) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0x0, 0x10004}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0xfffffffe}]}}) 13:05:54 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x4}]}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) [ 617.536983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 13:05:54 executing program 2: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) [ 617.583451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 13:05:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) 13:05:54 executing program 2: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) 13:05:54 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0xa, [{}, {0x0, 0x1}, {0x0, 0x6}, {}, {0xfffffffa}, {}, {}, {0x0, 0x9}]}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x2) 13:05:54 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x4}]}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:05:54 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socketpair(0x1, 0xa, 0x400000, &(0x7f0000000080)) (async) socketpair(0x1, 0xa, 0x400000, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000240)={0xff, 0x0, 0x3, 0x0, 0xd5}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000240)={0xff, 0x0, 0x3, 0x0, 0xd5}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r3, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x2c}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8000}]}, 0x38}}, 0x1) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0x0, 0x10004}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0xfffffffe}]}}) 13:05:54 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) 13:05:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) 13:05:54 executing program 2: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) 13:05:54 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x4}]}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:05:54 executing program 5: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) 13:05:54 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x3) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 13:05:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) 13:05:54 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socketpair(0x1, 0xa, 0x400000, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vim2m(&(0x7f0000000200), 0x1, 0x2) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000240)={0xff, 0x0, 0x3, 0x0, 0xd5}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000240)={0xff, 0x0, 0x3, 0x0, 0xd5}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r3, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x2c}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8000}]}, 0x38}}, 0x1) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0x0, 0x10004}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0xfffffffe}]}}) 13:05:54 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x61}}}}, ["", "", "", "", "", "", ""]}, 0x20}}, 0x4040041) 13:05:54 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0xa, [{}, {0x0, 0x1}, {0x0, 0x6}, {}, {0xfffffffa}, {}, {}, {0x0, 0x9}]}}) (async, rerun: 32) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x2) (rerun: 32) 13:05:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100), 0x0) 13:05:54 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x3) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 13:05:54 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) (async) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x61}}}}, ["", "", "", "", "", "", ""]}, 0x20}}, 0x4040041) 13:05:54 executing program 5: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) 13:05:54 executing program 3: write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7) 13:05:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100), 0x0) 13:05:54 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0xa, [{}, {0x0, 0x1}, {0x0, 0x6}, {}, {0xfffffffa}, {}, {}, {0x0, 0x9}]}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0xa, [{}, {0x0, 0x1}, {0x0, 0x6}, {}, {0xfffffffa}, {}, {}, {0x0, 0x9}]}}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x2) (async) 13:05:54 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x61}}}}, ["", "", "", "", "", "", ""]}, 0x20}}, 0x4040041) 13:05:54 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x3) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 13:05:54 executing program 5: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) 13:05:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100), 0x0) 13:05:54 executing program 3: write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7) 13:05:54 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) 13:05:54 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x4b, 0x5}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:54 executing program 3: write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7) 13:05:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @broadcast}], 0x10) 13:05:54 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x4b, 0x5}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:54 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000811}, 0x2400c005) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00'}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5421, 0x0) 13:05:54 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000600", @ANYRES16=0x0, @ANYBLOB="000429bd7000ffdbdf255a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x8011) 13:05:55 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) 13:05:55 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000600", @ANYRES16=0x0, @ANYBLOB="000429bd7000ffdbdf255a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x8011) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000600", @ANYRES16=0x0, @ANYBLOB="000429bd7000ffdbdf255a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x8011) (async) 13:05:55 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000811}, 0x2400c005) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 32) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00'}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5421, 0x0) 13:05:55 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x4, @pix={0x4, 0x18cc, 0x31364d59, 0xf, 0x100, 0x0, 0x3, 0xae40, 0x0, 0x6, 0x2, 0x4}}) 13:05:55 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000811}, 0x2400c005) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00'}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5421, 0x0) 13:05:55 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x4b, 0x5}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:55 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000600", @ANYRES16=0x0, @ANYBLOB="000429bd7000ffdbdf255a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x8011) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000600", @ANYRES16=0x0, @ANYBLOB="000429bd7000ffdbdf255a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x8011) (async) 13:05:55 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) 13:05:55 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x4, @pix={0x4, 0x18cc, 0x31364d59, 0xf, 0x100, 0x0, 0x3, 0xae40, 0x0, 0x6, 0x2, 0x4}}) 13:05:55 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000811}, 0x2400c005) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00'}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5421, 0x0) 13:05:55 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000811}, 0x2400c005) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00'}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5421, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000811}, 0x2400c005) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00'}) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5421, 0x0) (async) 13:05:55 executing program 1: seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:55 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) 13:05:55 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="90800000", @ANYRES16=0x0, @ANYBLOB="000426bd7000ffdbdf250200000008000500e000000114000300fc01000000000000000000000000000008000400ac1414bb14000300fe80000000000000000000000000002f08000400ac14142e14000200fe8000000000000000000000000000bb14000200fc0200000000000000000000000000071400060067726574617030000000000000000000"], 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) 13:05:55 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x4, @pix={0x4, 0x18cc, 0x31364d59, 0xf, 0x100, 0x0, 0x3, 0xae40, 0x0, 0x6, 0x2, 0x4}}) 13:05:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x4}]}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:05:55 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="90800000", @ANYRES16=0x0, @ANYBLOB="000426bd7000ffdbdf250200000008000500e000000114000300fc01000000000000000000000000000008000400ac1414bb14000300fe80000000000000000000000000002f08000400ac14142e14000200fe8000000000000000000000000000bb14000200fc0200000000000000000000000000071400060067726574617030000000000000000000"], 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) 13:05:55 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) 13:05:55 executing program 1: seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:05:55 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:05:55 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @win={{0x8, 0x1ff, 0x7, 0x9}, 0x4, 0x800, &(0x7f0000000080)={{0x8, 0x3, 0x72521cb1, 0xa94}, &(0x7f0000000040)={{0x9, 0x20, 0x1, 0xcc05}, &(0x7f0000000000)={{0x8001, 0x40, 0x5, 0x9}}}}, 0x41be, &(0x7f00000000c0)="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", 0x3}}) 13:05:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x4}]}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:05:55 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2, 0x0, 0x2}) 13:05:55 executing program 1: seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async) 13:05:55 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="90800000", @ANYRES16=0x0, @ANYBLOB="000426bd7000ffdbdf250200000008000500e000000114000300fc01000000000000000000000000000008000400ac1414bb14000300fe80000000000000000000000000002f08000400ac14142e14000200fe8000000000000000000000000000bb14000200fc0200000000000000000000000000071400060067726574617030000000000000000000"], 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) 13:05:55 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:05:55 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @win={{0x8, 0x1ff, 0x7, 0x9}, 0x4, 0x800, &(0x7f0000000080)={{0x8, 0x3, 0x72521cb1, 0xa94}, &(0x7f0000000040)={{0x9, 0x20, 0x1, 0xcc05}, &(0x7f0000000000)={{0x8001, 0x40, 0x5, 0x9}}}}, 0x41be, &(0x7f00000000c0)="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", 0x3}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @win={{0x8, 0x1ff, 0x7, 0x9}, 0x4, 0x800, &(0x7f0000000080)={{0x8, 0x3, 0x72521cb1, 0xa94}, &(0x7f0000000040)={{0x9, 0x20, 0x1, 0xcc05}, &(0x7f0000000000)={{0x8001, 0x40, 0x5, 0x9}}}}, 0x41be, &(0x7f00000000c0)="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", 0x3}}) (async) 13:05:55 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) 13:05:55 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0xfffffffe, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x3}, {}, {0x0, 0xffffffff}, {}, {}, {0x0, 0x1000000}]}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x2, @vbi={0x270, 0xc3, 0x100, 0x34324948, [0x2, 0x100], [0x54ab, 0x8000], 0x2}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x1}) 13:05:55 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x1}]}}) 13:05:55 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:05:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x4}]}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:05:55 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @win={{0x8, 0x1ff, 0x7, 0x9}, 0x4, 0x800, &(0x7f0000000080)={{0x8, 0x3, 0x72521cb1, 0xa94}, &(0x7f0000000040)={{0x9, 0x20, 0x1, 0xcc05}, &(0x7f0000000000)={{0x8001, 0x40, 0x5, 0x9}}}}, 0x41be, &(0x7f00000000c0)="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", 0x3}}) 13:05:55 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) 13:05:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x4}]}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:05:55 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0xfffffffe, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x3}, {}, {0x0, 0xffffffff}, {}, {}, {0x0, 0x1000000}]}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x2, @vbi={0x270, 0xc3, 0x100, 0x34324948, [0x2, 0x100], [0x54ab, 0x8000], 0x2}}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x1}) 13:05:55 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x1}]}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x1}]}}) (async) 13:05:55 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x7, 0x7e051518, 0x2, 0x8, 0x9, 0x1, 0x3b500452, 0x1, 0x1, 0x2, 0x5}}) 13:05:55 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x1, @sliced={0x8, [0x529, 0x9, 0x37, 0x5, 0x101, 0x6, 0x4, 0x3, 0x800, 0x0, 0x7fff, 0x5, 0x4, 0x5, 0x800, 0x7fff, 0x8, 0x3, 0x3ff, 0x20, 0x7, 0x1f, 0x7, 0x8d, 0x5, 0xfffa, 0x401, 0x9, 0xffff, 0xe7c, 0x0, 0x9, 0x1, 0xff, 0x1b, 0x9, 0x40, 0x8, 0x100, 0x200, 0x0, 0x4, 0x9, 0xff, 0x6, 0x3ff, 0x9, 0xd0], 0x4}}) 13:05:55 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) 13:05:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x4}]}}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:05:55 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0xfffffffe, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x3}, {}, {0x0, 0xffffffff}, {}, {}, {0x0, 0x1000000}]}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x2, @vbi={0x270, 0xc3, 0x100, 0x34324948, [0x2, 0x100], [0x54ab, 0x8000], 0x2}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x1}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0xfffffffe, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x3}, {}, {0x0, 0xffffffff}, {}, {}, {0x0, 0x1000000}]}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x2, @vbi={0x270, 0xc3, 0x100, 0x34324948, [0x2, 0x100], [0x54ab, 0x8000], 0x2}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x1}) (async) 13:05:55 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x1}]}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x1}]}}) (async) 13:05:55 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x7, 0x7e051518, 0x2, 0x8, 0x9, 0x1, 0x3b500452, 0x1, 0x1, 0x2, 0x5}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x7, 0x7e051518, 0x2, 0x8, 0x9, 0x1, 0x3b500452, 0x1, 0x1, 0x2, 0x5}}) (async) 13:05:55 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x0, 0x1, 0x2, 0x0, 0x2}) 13:05:55 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x1, @sliced={0x8, [0x529, 0x9, 0x37, 0x5, 0x101, 0x6, 0x4, 0x3, 0x800, 0x0, 0x7fff, 0x5, 0x4, 0x5, 0x800, 0x7fff, 0x8, 0x3, 0x3ff, 0x20, 0x7, 0x1f, 0x7, 0x8d, 0x5, 0xfffa, 0x401, 0x9, 0xffff, 0xe7c, 0x0, 0x9, 0x1, 0xff, 0x1b, 0x9, 0x40, 0x8, 0x100, 0x200, 0x0, 0x4, 0x9, 0xff, 0x6, 0x3ff, 0x9, 0xd0], 0x4}}) 13:05:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x4}]}}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:05:56 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x3, @pix_mp={0x0, 0x0, 0x36314d59, 0x0, 0x7, [{}, {0x0, 0x4}, {}, {0x401}], 0x0, 0x0, 0x0, 0x1, 0x6}}) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000140)={0x8, 0x4, 0x1, 0x5, 0x2, 0x6, 0x59, 0x1, 0xfe, 0x8, 0x8, 0x1, 0x0, 0x4}, 0xe) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="01e75b00", @ANYRES16=r2, @ANYBLOB="000428bd7000fcdbdf252500000008003500020000000800350004000000"], 0x24}}, 0x4008002) socketpair(0x25, 0x5, 0x10001, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000500)={'wpan4\x00'}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r5, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 13:05:56 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x1, @sliced={0x8, [0x529, 0x9, 0x37, 0x5, 0x101, 0x6, 0x4, 0x3, 0x800, 0x0, 0x7fff, 0x5, 0x4, 0x5, 0x800, 0x7fff, 0x8, 0x3, 0x3ff, 0x20, 0x7, 0x1f, 0x7, 0x8d, 0x5, 0xfffa, 0x401, 0x9, 0xffff, 0xe7c, 0x0, 0x9, 0x1, 0xff, 0x1b, 0x9, 0x40, 0x8, 0x100, 0x200, 0x0, 0x4, 0x9, 0xff, 0x6, 0x3ff, 0x9, 0xd0], 0x4}}) (rerun: 64) 13:05:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_SSID={0x15, 0x34, @random="93388aaa8e929b9ccdf5660a6a3b123fd4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xbb, 0x401, 0x34324948, 0x9, 0x3, 0x9, 0x7, 0x40000, 0x1, 0x0, 0x1, 0x7}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000380)=@userptr={0x40000000, 0x0, 0x4, 0x0, 0x3, {0x0, 0x2710}, {0x1, 0x2, 0x9, 0x9, 0x80, 0xea, "f8437f47"}, 0x3, 0x2, {&(0x7f0000000340)}, 0x9}) ioctl$vim2m_VIDIOC_G_FMT(r3, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x55595659, 0x0, 0x0, [{}, {}, {0xffffffff}, {}, {0x0, 0x400000}], 0x0, 0x10}}) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000140)=0x1, 0x4) 13:05:56 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x4}]}}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:05:56 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x7, 0x7e051518, 0x2, 0x8, 0x9, 0x1, 0x3b500452, 0x1, 0x1, 0x2, 0x5}}) 13:05:56 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x0, 0x1, 0x2, 0x0, 0x2}) 13:05:56 executing program 3: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_COOKIE={0xc}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x4, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40810}, 0x40800) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x3, 0x9, 0x101, 0x80800}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0xfffffffe}]}}) 13:05:56 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x0, 0x1, 0x2, 0x0, 0x2}) 13:05:56 executing program 2: ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x2, 0x0, 0x75, 0x4800}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:05:57 executing program 3: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_COOKIE={0xc}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x4, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40810}, 0x40800) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x3, 0x9, 0x101, 0x80800}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0xfffffffe}]}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0xfffffffe}]}}) 13:05:57 executing program 2: ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x2, 0x0, 0x75, 0x4800}) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:05:57 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x0, 0x2, 0x0, 0x2}) [ 625.227241] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.232917] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.676840] oom_reaper: reaped process 11392 (syz-executor.4), now anon-rss:0kB, file-rss:14336kB, shmem-rss:16kB [ 626.713566] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 626.729246] in:imklog cpuset=/ mems_allowed=0-1 [ 626.734143] CPU: 1 PID: 7799 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 626.741505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 626.750863] Call Trace: [ 626.753461] dump_stack+0x1fc/0x2ef [ 626.757097] dump_header+0x15d/0xc3f [ 626.760818] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 626.765925] ? ___ratelimit+0x319/0x590 [ 626.769907] oom_kill_process.cold+0x10/0x692 [ 626.774409] ? check_preemption_disabled+0x41/0x280 [ 626.779434] ? has_intersects_mems_allowed+0x1d6/0x290 [ 626.784713] out_of_memory+0x1072/0x1390 [ 626.788871] ? oom_killer_disable+0x270/0x270 [ 626.793355] ? mutex_trylock+0x15f/0x1a0 [ 626.797421] __alloc_pages_nodemask+0x23a2/0x2890 [ 626.802248] ? find_get_entry+0x4cd/0x8a0 [ 626.806383] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 626.811221] alloc_pages_current+0x193/0x2a0 [ 626.815645] filemap_fault+0x146e/0x2180 [ 626.819696] ext4_filemap_fault+0x84/0xb0 [ 626.823826] __do_fault+0x10b/0x4b0 [ 626.827451] __handle_mm_fault+0x273b/0x41c0 [ 626.831845] ? vm_insert_page+0x9c0/0x9c0 [ 626.835976] ? lock_downgrade+0x720/0x720 [ 626.840111] ? check_preemption_disabled+0x41/0x280 [ 626.845113] handle_mm_fault+0x436/0xb10 [ 626.849163] __do_page_fault+0x68e/0xd60 [ 626.853234] ? trace_hardirqs_off_caller+0x6e/0x210 [ 626.858257] ? spurious_fault+0x840/0x840 [ 626.862391] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 626.867222] ? page_fault+0x8/0x30 [ 626.870746] page_fault+0x1e/0x30 [ 626.874180] RIP: 0033:0x7f22356de22d [ 626.877877] Code: Bad RIP value. [ 626.881220] RSP: 002b:00007f223307a580 EFLAGS: 00010293 [ 626.886563] RAX: 0000000000000078 RBX: 0000000000000000 RCX: 00007f22356de22d [ 626.893818] RDX: 0000000000001fa0 RSI: 00007f223307ada0 RDI: 0000000000000004 [ 626.901069] RBP: 000055e596dc19d0 R08: 0000000000000000 R09: 0000000000000000 [ 626.908320] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007f223307ada0 [ 626.915579] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f223307ae20 [ 626.927814] Mem-Info: [ 626.930252] active_anon:20642 inactive_anon:4854 isolated_anon:0 [ 626.930252] active_file:16 inactive_file:17 isolated_file:0 [ 626.930252] unevictable:0 dirty:0 writeback:0 unstable:0 [ 626.930252] slab_reclaimable:21100 slab_unreclaimable:111814 [ 626.930252] mapped:22688 shmem:5410 pagetables:612 bounce:0 [ 626.930252] free:13824 free_pcp:220 free_cma:0 [ 626.931729] syz-executor.4: vmalloc: allocation failure, allocated 1791717376 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 626.968872] Node 0 active_anon:82556kB inactive_anon:19416kB active_file:64kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:90752kB dirty:0kB writeback:0kB shmem:21640kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 34816kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 626.983831] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 627.009724] Node 1 active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 627.014795] CPU: 0 PID: 11392 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 627.040978] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 627.045211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 627.045216] Call Trace: [ 627.045239] dump_stack+0x1fc/0x2ef [ 627.045256] warn_alloc.cold+0x7b/0x18f [ 627.045273] ? zone_watermark_ok_safe+0x260/0x260 [ 627.045308] __vmalloc_area_node+0x4fd/0x780 [ 627.080624] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 627.080776] ? __vmalloc_node_range+0x180/0x180 [ 627.083329] Node 0 DMA32 free:17820kB min:35996kB low:44992kB high:53988kB active_anon:82556kB inactive_anon:19416kB active_file:64kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7776kB pagetables:2448kB bounce:0kB free_pcp:632kB local_pcp:336kB free_cma:0kB [ 627.086945] ? _raw_spin_unlock+0x29/0x40 [ 627.086958] ? __get_vm_area_node+0x2e2/0x3a0 [ 627.086975] __vmalloc_node_range+0xed/0x180 [ 627.086990] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 627.087007] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 627.090976] lowmem_reserve[]: 0 0 1 1 1 [ 627.095805] vmalloc_user+0x70/0xe0 [ 627.095820] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 627.095833] vb2_vmalloc_alloc+0xb3/0x2f0 [ 627.095847] __vb2_queue_alloc+0x472/0xe60 [ 627.095873] vb2_core_create_bufs+0x273/0x7e0 [ 627.095887] ? __vb2_queue_free+0x870/0x870 [ 627.095900] ? __video_do_ioctl+0x632/0xcd0 [ 627.095920] ? pi_state_update_owner+0x450/0x450 [ 627.106955] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 627.109974] ? __mutex_lock+0x368/0x1190 [ 627.169139] lowmem_reserve[]: 0 0 0 0 0 [ 627.173466] vb2_create_bufs+0x332/0x620 [ 627.182318] Node 1 Normal free:26608kB min:53876kB low:67344kB high:80812kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 627.186297] ? mark_held_locks+0xf0/0xf0 [ 627.186312] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 627.186324] ? futex_wait_queue_me+0x404/0x5e0 [ 627.186340] ? pi_state_update_owner+0x450/0x450 [ 627.190663] lowmem_reserve[]: 0 0 0 0 0 [ 627.195067] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 627.195083] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 627.195111] v4l_create_bufs+0xb2/0x160 [ 627.195132] __video_do_ioctl+0x49a/0xcd0 [ 627.195153] ? v4l_querycap+0x340/0x340 [ 627.195175] ? __might_fault+0x192/0x1d0 [ 627.195192] ? v4l_querycap+0x340/0x340 [ 627.212229] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB [ 627.225860] video_usercopy+0x13f/0xfa0 [ 627.225880] ? v4l_enumstd+0x60/0x60 [ 627.225894] ? do_futex+0x171/0x1880 [ 627.225909] ? mark_held_locks+0xf0/0xf0 [ 627.225927] ? debug_check_no_obj_freed+0x201/0x490 [ 627.225950] ? video_usercopy+0xfa0/0xfa0 [ 627.225963] v4l2_ioctl+0x147/0x1a0 [ 627.225975] ? video_devdata+0xa0/0xa0 [ 627.225991] do_vfs_ioctl+0xcdb/0x12e0 [ 627.241152] Node 0 DMA32: 1159*4kB (UME) 576*8kB (UME) 230*16kB (UME) 67*32kB (UMEH) 21*64kB (UMH) 1*128kB (H) 1*256kB (H) 0*512kB 1*1024kB (H) 0*2048kB 0*4096kB = 17820kB [ 627.265658] ? lock_downgrade+0x720/0x720 [ 627.265674] ? check_preemption_disabled+0x41/0x280 [ 627.265687] ? ioctl_preallocate+0x200/0x200 [ 627.265705] ? __fget+0x356/0x510 [ 627.265721] ? do_dup2+0x450/0x450 [ 627.265741] ? __se_sys_futex+0x298/0x3b0 [ 627.265759] ksys_ioctl+0x9b/0xc0 [ 627.265775] __x64_sys_ioctl+0x6f/0xb0 [ 627.265790] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 627.265803] do_syscall_64+0xf9/0x620 [ 627.265821] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 627.265833] RIP: 0033:0x7f90be27e0f9 [ 627.265847] Code: Bad RIP value. [ 627.265854] RSP: 002b:00007f90bc7f0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 627.265866] RAX: ffffffffffffffda RBX: 00007f90be39df80 RCX: 00007f90be27e0f9 [ 627.265875] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000006 [ 627.265883] RBP: 00007f90be2d9ae9 R08: 0000000000000000 R09: 0000000000000000 [ 627.265890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 627.265898] R13: 00007fff4bccdd2f R14: 00007f90bc7f0300 R15: 0000000000022000 [ 627.266403] Mem-Info: [ 627.266438] active_anon:20642 inactive_anon:4854 isolated_anon:0 [ 627.266438] active_file:16 inactive_file:17 isolated_file:0 [ 627.266438] unevictable:0 dirty:0 writeback:0 unstable:0 [ 627.266438] slab_reclaimable:21100 slab_unreclaimable:111814 [ 627.266438] mapped:22688 shmem:5410 pagetables:612 bounce:0 [ 627.266438] free:13824 free_pcp:220 free_cma:0 [ 627.266468] Node 0 active_anon:82556kB inactive_anon:19416kB active_file:64kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:90752kB dirty:0kB writeback:0kB shmem:21640kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 34816kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 627.266496] Node 1 active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 627.266501] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 627.266533] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 627.266553] Node 0 DMA32 free:17820kB min:35996kB low:44992kB high:53988kB active_anon:82556kB inactive_anon:19416kB active_file:64kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7776kB pagetables:2448kB bounce:0kB free_pcp:632kB local_pcp:296kB free_cma:0kB [ 627.266587] lowmem_reserve[]: 0 0 1 1 1 [ 627.266606] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 627.266637] lowmem_reserve[]: 0 0 0 0 0 [ 627.266655] Node 1 Normal free:26608kB min:53876kB low:67344kB high:80812kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 627.266687] lowmem_reserve[]: 0 0 0 0 0 [ 627.266705] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB [ 627.266790] Node 0 DMA32: 1159*4kB (UME) 576*8kB (UME) 230*16kB (UME) 67*32kB (UMEH) 21*64kB (UMH) 1*128kB (H) 1*256kB (H) 0*512kB 1*1024kB (H) 0*2048kB 0*4096kB = 17820kB [ 627.266864] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 627.266918] Node 1 Normal: 2*4kB (ME) 3*8kB (M) 3*16kB (UME) 3*32kB (UM) 3*64kB (ME) 5*128kB (UME) 0*256kB 2*512kB (M) 2*1024kB (M) 1*2048kB (U) 5*4096kB (M) = 26608kB [ 627.267006] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 627.267016] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 627.267027] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 627.267038] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 627.267043] 5443 total pagecache pages [ 627.267056] 0 pages in swap cache [ 627.267065] Swap cache stats: add 0, delete 0, find 0/0 [ 627.267070] Free swap = 0kB [ 627.267074] Total swap = 0kB [ 627.267208] 2097051 pages RAM [ 627.292946] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 627.295064] 0 pages HighMem/MovableOnly [ 627.312228] Node 1 Normal: 2*4kB (ME) 3*8kB (M) 3*16kB (UME) 3*32kB (UM) 3*64kB (ME) 5*128kB (UME) 0*256kB 2*512kB (M) 2*1024kB (M) 1*2048kB (U) 5*4096kB (M) = 26608kB [ 627.312443] 369649 pages reserved [ 627.316565] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 627.320554] 0 pages cma reserved [ 627.350945] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 627.873872] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 627.889640] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 627.898307] 5443 total pagecache pages [ 627.902285] 0 pages in swap cache [ 627.910400] Swap cache stats: add 0, delete 0, find 0/0 [ 627.915824] Free swap = 0kB [ 627.918834] Total swap = 0kB [ 627.921933] 2097051 pages RAM [ 627.929929] 0 pages HighMem/MovableOnly [ 627.933904] 369649 pages reserved [ 627.937415] 0 pages cma reserved [ 627.940891] Unreclaimable slab info: [ 627.949849] Name Used Total [ 627.957196] pid_2 119KB 152KB [ 627.962637] batadv_tl_cache 4KB 12KB [ 627.972739] TIPC 10KB 15KB [ 627.978167] SCTPv6 14KB 18KB [ 627.990617] SCTP 98KB 170KB [ 627.996246] DCCPv6 17KB 22KB [ 628.001617] DCCP 16KB 21KB [ 628.012029] RXRPC 11KB 13KB [ 628.017486] rxrpc_call_jar 78KB 94KB [ 628.022855] bridge_fdb_cache 9KB 15KB [ 628.033317] fib6_nodes 157KB 160KB [ 628.039950] ip6_dst_cache 79KB 326KB [ 628.050270] RAWv6 70KB 74KB [ 628.055688] UDPv6 26KB 30KB [ 628.061060] TCPv6 27KB 42KB [ 628.071458] nf_conntrack 3KB 18KB [ 628.078400] t10_alua_lu_gp_cache 0KB 3KB [ 628.091279] sd_ext_cdb 0KB 7KB [ 628.100364] scsi_sense_cache 1056KB 1060KB [ 628.111465] virtio_scsi_cmd 16KB 16KB [ 628.120676] sgpool-128 8KB 8KB [ 628.131329] sgpool-64 4KB 12KB [ 628.140367] sgpool-32 2KB 15KB [ 628.150843] sgpool-16 1KB 7KB [ 628.159860] sgpool-8 0KB 7KB [ 628.170027] mqueue_inode_cache 10KB 22KB [ 628.179085] bio_post_read_ctx 14KB 15KB [ 628.193884] bio-2 14KB 15KB [ 628.202711] jfs_mp 7KB 7KB [ 628.213137] cifs_small_rq 15KB 16KB [ 628.219571] cifs_request 67KB 67KB [ 628.230369] cifs_mpx_ids 0KB 7KB [ 628.235875] nfs_commit_data 3KB 14KB [ 628.241245] nfs_write_data 34KB 44KB [ 628.251387] ext4_system_zone 1KB 7KB [ 628.256837] bio-1 1KB 7KB [ 628.262320] pid_namespace 2KB 7KB [ 628.273103] rpc_buffers 17KB 25KB [ 628.278656] rpc_tasks 2KB 7KB [ 628.291162] UNIX 56KB 82KB [ 628.297251] tcp_bind_bucket 1KB 4KB [ 628.302632] ip_fib_trie 23KB 27KB [ 628.312826] ip_fib_alias 112KB 118KB [ 628.318404] ip_dst_cache 10KB 48KB [ 628.323773] RAW 42KB 52KB [ 628.334241] UDP 25KB 47KB [ 628.339708] TCP 11KB 22KB [ 628.352185] hugetlbfs_inode_cache 3KB 15KB [ 628.358586] fscache_cookie_jar 1KB 11KB [ 628.364045] eventpoll_pwq 13KB 47KB [ 628.374351] eventpoll_epi 25KB 66KB [ 628.379768] inotify_inode_mark 31KB 55KB [ 628.391575] request_queue 199KB 199KB [ 628.397628] blkdev_requests 1KB 3KB [ 628.403005] blkdev_ioc 9KB 15KB [ 628.413170] bio-0 100KB 101KB [ 628.418789] biovec-max 1278KB 1278KB [ 628.424156] biovec-64 18KB 23KB [ 628.434372] biovec-16 0KB 3KB [ 628.441330] bio_integrity_payload 1KB 8KB [ 628.452025] khugepaged_mm_slot 18KB 34KB [ 628.458229] uid_cache 0KB 4KB [ 628.463598] dmaengine-unmap-2 0KB 3KB [ 628.473798] skbuff_fclone_cache 203KB 476KB [ 628.479386] skbuff_head_cache 2160KB 3101KB [ 628.490107] configfs_dir_cache 3KB 11KB [ 628.497630] file_lock_cache 156KB 202KB [ 628.503006] file_lock_ctx 9KB 11KB [ 628.509175] fsnotify_mark_connector 16KB 31KB [ 628.515120] net_namespace 52KB 52KB [ 628.520485] shmem_inode_cache 8363KB 8543KB [ 628.525947] task_delay_info 258KB 411KB [ 628.531318] taskstats 141KB 210KB [ 628.536988] proc_dir_entry 694KB 697KB [ 628.542971] pde_opener 12KB 66KB [ 628.548972] seq_file 248KB 543KB [ 628.554966] sigqueue 18KB 55KB [ 628.560707] kernfs_node_cache 18234KB 18246KB [ 628.566122] mnt_cache 173KB 188KB [ 628.571488] filp 5215KB 7665KB [ 628.577355] names_cache 131495KB 131533KB [ 628.583319] iint_cache 80KB 87KB [ 628.589248] key_jar 4KB 11KB [ 628.596959] uts_namespace 2KB 7KB [ 628.602335] nsproxy 13KB 19KB [ 628.607795] vm_area_struct 3454KB 5294KB [ 628.613700] mm_struct 819KB 1150KB [ 628.620157] fs_cache 142KB 388KB [ 628.626527] files_cache 555KB 896KB [ 628.632305] signal_cache 1188KB 1868KB [ 628.644559] sighand_cache 538KB 610KB [ 628.649976] task_struct 8004KB 8061KB [ 628.655386] cred_jar 967KB 2108KB [ 628.660755] anon_vma_chain 1111KB 1803KB [ 628.684565] anon_vma 145KB 269KB [ 628.689954] pid 59KB 264KB [ 628.724550] Acpi-Operand 156KB 202KB [ 628.729945] Acpi-ParseExt 8KB 11KB [ 628.735445] Acpi-Parse 41KB 47KB [ 628.740814] Acpi-State 52KB 63KB [ 628.746588] Acpi-Namespace 21KB 27KB [ 628.751958] numa_policy 0KB 3KB [ 628.757402] debug_objects_cache 2213KB 2213KB [ 628.762940] trace_event_file 297KB 298KB [ 628.768396] ftrace_event_field 398KB 401KB [ 628.773850] pool_workqueue 121KB 124KB [ 628.779317] page->ptl 744KB 1047KB [ 628.784824] kmalloc-2097152 2050KB 2050KB [ 628.790194] kmalloc-524288 2056KB 2056KB [ 628.829247] kmalloc-262144 1290KB 1290KB [ 628.835357] kmalloc-131072 650KB 650KB [ 628.840726] kmalloc-65536 1848KB 1914KB [ 628.862033] kmalloc-32768 1650KB 1650KB [ 628.872832] kmalloc-16384 940KB 940KB [ 628.878831] kmalloc-8192 3960KB 4001KB [ 628.884234] kmalloc-4096 18071KB 18126KB [ 628.896078] kmalloc-2048 13002KB 14101KB [ 628.903841] kmalloc-1024 6653KB 7756KB [ 628.916247] kmalloc-512 6304KB 7766KB [ 628.921628] kmalloc-256 5034KB 5565KB [ 628.930252] kmalloc-128 1108KB 1488KB [ 628.938869] kmalloc-96 2875KB 4020KB [ 628.944245] kmalloc-64 3441KB 4264KB [ 628.952988] kmalloc-32 1794KB 2445KB [ 628.961416] kmalloc-192 1494KB 2300KB [ 628.969769] kmem_cache 177KB 183KB [ 628.978182] Out of memory (oom_kill_allocating_task): Kill process 7799 (in:imklog) score 0 or sacrifice child [ 628.997854] Killed process 7786 (rsyslogd) total-vm:254332kB, anon-rss:616kB, file-rss:0kB, shmem-rss:0kB [ 629.014626] oom_reaper: reaped process 7786 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 13:06:06 executing program 2: ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x2, 0x0, 0x75, 0x4800}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x2, 0x0, 0x75, 0x4800}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) 13:06:06 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:06:08 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x3, @pix_mp={0x0, 0x0, 0x36314d59, 0x0, 0x7, [{}, {0x0, 0x4}, {}, {0x401}], 0x0, 0x0, 0x0, 0x1, 0x6}}) (async) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000140)={0x8, 0x4, 0x1, 0x5, 0x2, 0x6, 0x59, 0x1, 0xfe, 0x8, 0x8, 0x1, 0x0, 0x4}, 0xe) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="01e75b00", @ANYRES16=r2, @ANYBLOB="000428bd7000fcdbdf252500000008003500020000000800350004000000"], 0x24}}, 0x4008002) (async) socketpair(0x25, 0x5, 0x10001, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000500)={'wpan4\x00'}) (async) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r5, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 13:06:08 executing program 3: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_COOKIE={0xc}]}, 0x30}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_COOKIE={0xc}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x4, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40810}, 0x40800) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x3, 0x9, 0x101, 0x80800}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0xfffffffe}]}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0xfffffffe}]}}) 13:06:08 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x0, 0x2, 0x0, 0x2}) 13:06:08 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 13:06:08 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:06:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_SSID={0x15, 0x34, @random="93388aaa8e929b9ccdf5660a6a3b123fd4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async, rerun: 64) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (rerun: 64) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xbb, 0x401, 0x34324948, 0x9, 0x3, 0x9, 0x7, 0x40000, 0x1, 0x0, 0x1, 0x7}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) (async) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000380)=@userptr={0x40000000, 0x0, 0x4, 0x0, 0x3, {0x0, 0x2710}, {0x1, 0x2, 0x9, 0x9, 0x80, 0xea, "f8437f47"}, 0x3, 0x2, {&(0x7f0000000340)}, 0x9}) ioctl$vim2m_VIDIOC_G_FMT(r3, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x55595659, 0x0, 0x0, [{}, {}, {0xffffffff}, {}, {0x0, 0x400000}], 0x0, 0x10}}) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000180)) (async) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000140)=0x1, 0x4) 13:06:08 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x0, 0x2, 0x0, 0x2}) 13:06:08 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) (async) 13:06:08 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:06:08 executing program 3: write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000400)={0x15, 0x65, 0xffff, 0x1, 0x8, '9P2000.L'}, 0x15) socketpair(0xb, 0x80000, 0x2, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10682bbd708f104a4ca6b96e4cd202000000", @ANYRES32=r0, @ANYRESOCT=r2], 0x54}, 0x1, 0x0, 0x0, 0x44}, 0x4) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000004c0)=@multiplanar_overlay={0x4, 0x3, 0x4, 0x70000, 0x8001, {0x77359400}, {0x2, 0x2, 0x5f, 0x6, 0x9, 0x0, "c08ca271"}, 0x4, 0x3, {&(0x7f0000000440)=[{0x101, 0x8, {0x6}, 0x8}, {0x5, 0x6, {0x6}, 0x3be}]}, 0x8, 0x0, r3}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000080)={0xffff, 0x0, 0x1, "5aa11e6368caeab793aadf64445e405c4564c0cdeea6036eb04992025a500fe4", 0x30314247}) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:06:08 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x3, @pix_mp={0x0, 0x0, 0x36314d59, 0x0, 0x7, [{}, {0x0, 0x4}, {}, {0x401}], 0x0, 0x0, 0x0, 0x1, 0x6}}) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000140)={0x8, 0x4, 0x1, 0x5, 0x2, 0x6, 0x59, 0x1, 0xfe, 0x8, 0x8, 0x1, 0x0, 0x4}, 0xe) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="01e75b00", @ANYRES16=r2, @ANYBLOB="000428bd7000fcdbdf252500000008003500020000000800350004000000"], 0x24}}, 0x4008002) socketpair(0x25, 0x5, 0x10001, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000500)={'wpan4\x00'}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r5, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x3, @pix_mp={0x0, 0x0, 0x36314d59, 0x0, 0x7, [{}, {0x0, 0x4}, {}, {0x401}], 0x0, 0x0, 0x0, 0x1, 0x6}}) (async) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)) (async) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000140)={0x8, 0x4, 0x1, 0x5, 0x2, 0x6, 0x59, 0x1, 0xfe, 0x8, 0x8, 0x1, 0x0, 0x4}, 0xe) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="01e75b00", @ANYRES16=r2, @ANYBLOB="000428bd7000fcdbdf252500000008003500020000000800350004000000"], 0x24}}, 0x4008002) (async) socketpair(0x25, 0x5, 0x10001, &(0x7f0000000180)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000500)={'wpan4\x00'}) (async) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r5, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async) 13:06:08 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:06:08 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x0, 0x0, 0x2}) 13:06:08 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) (async) 13:06:08 executing program 3: write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000400)={0x15, 0x65, 0xffff, 0x1, 0x8, '9P2000.L'}, 0x15) socketpair(0xb, 0x80000, 0x2, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) (async, rerun: 64) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10682bbd708f104a4ca6b96e4cd202000000", @ANYRES32=r0, @ANYRESOCT=r2], 0x54}, 0x1, 0x0, 0x0, 0x44}, 0x4) (async, rerun: 64) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000004c0)=@multiplanar_overlay={0x4, 0x3, 0x4, 0x70000, 0x8001, {0x77359400}, {0x2, 0x2, 0x5f, 0x6, 0x9, 0x0, "c08ca271"}, 0x4, 0x3, {&(0x7f0000000440)=[{0x101, 0x8, {0x6}, 0x8}, {0x5, 0x6, {0x6}, 0x3be}]}, 0x8, 0x0, r3}) (async) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000080)={0xffff, 0x0, 0x1, "5aa11e6368caeab793aadf64445e405c4564c0cdeea6036eb04992025a500fe4", 0x30314247}) (async) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:06:08 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:06:08 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x0, 0x0, 0x2}) 13:06:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_SSID={0x15, 0x34, @random="93388aaa8e929b9ccdf5660a6a3b123fd4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xbb, 0x401, 0x34324948, 0x9, 0x3, 0x9, 0x7, 0x40000, 0x1, 0x0, 0x1, 0x7}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000380)=@userptr={0x40000000, 0x0, 0x4, 0x0, 0x3, {0x0, 0x2710}, {0x1, 0x2, 0x9, 0x9, 0x80, 0xea, "f8437f47"}, 0x3, 0x2, {&(0x7f0000000340)}, 0x9}) ioctl$vim2m_VIDIOC_G_FMT(r3, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x55595659, 0x0, 0x0, [{}, {}, {0xffffffff}, {}, {0x0, 0x400000}], 0x0, 0x10}}) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000140)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) (async) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_SSID={0x15, 0x34, @random="93388aaa8e929b9ccdf5660a6a3b123fd4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) (async) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xbb, 0x401, 0x34324948, 0x9, 0x3, 0x9, 0x7, 0x40000, 0x1, 0x0, 0x1, 0x7}}) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000380)=@userptr={0x40000000, 0x0, 0x4, 0x0, 0x3, {0x0, 0x2710}, {0x1, 0x2, 0x9, 0x9, 0x80, 0xea, "f8437f47"}, 0x3, 0x2, {&(0x7f0000000340)}, 0x9}) (async) ioctl$vim2m_VIDIOC_G_FMT(r3, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x55595659, 0x0, 0x0, [{}, {}, {0xffffffff}, {}, {0x0, 0x400000}], 0x0, 0x10}}) (async) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000180)) (async) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000140)=0x1, 0x4) (async) 13:06:08 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2, @pix={0x6, 0x1, 0x30395056, 0x5, 0xf78a, 0x76, 0x5, 0x80000000, 0x1, 0x7, 0x0, 0x7}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x2673, 0x20}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x8, 0x3, 0x2, 0x0, 0x8}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x2, 0x401, 0x10000007, 0x104000}) 13:06:08 executing program 3: write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000400)={0x15, 0x65, 0xffff, 0x1, 0x8, '9P2000.L'}, 0x15) socketpair(0xb, 0x80000, 0x2, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10682bbd708f104a4ca6b96e4cd202000000", @ANYRES32=r0, @ANYRESOCT=r2], 0x54}, 0x1, 0x0, 0x0, 0x44}, 0x4) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10682bbd708f104a4ca6b96e4cd202000000", @ANYRES32=r0, @ANYRESOCT=r2], 0x54}, 0x1, 0x0, 0x0, 0x44}, 0x4) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000004c0)=@multiplanar_overlay={0x4, 0x3, 0x4, 0x70000, 0x8001, {0x77359400}, {0x2, 0x2, 0x5f, 0x6, 0x9, 0x0, "c08ca271"}, 0x4, 0x3, {&(0x7f0000000440)=[{0x101, 0x8, {0x6}, 0x8}, {0x5, 0x6, {0x6}, 0x3be}]}, 0x8, 0x0, r3}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000004c0)=@multiplanar_overlay={0x4, 0x3, 0x4, 0x70000, 0x8001, {0x77359400}, {0x2, 0x2, 0x5f, 0x6, 0x9, 0x0, "c08ca271"}, 0x4, 0x3, {&(0x7f0000000440)=[{0x101, 0x8, {0x6}, 0x8}, {0x5, 0x6, {0x6}, 0x3be}]}, 0x8, 0x0, r3}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000080)={0xffff, 0x0, 0x1, "5aa11e6368caeab793aadf64445e405c4564c0cdeea6036eb04992025a500fe4", 0x30314247}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000080)={0xffff, 0x0, 0x1, "5aa11e6368caeab793aadf64445e405c4564c0cdeea6036eb04992025a500fe4", 0x30314247}) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:06:08 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:06:08 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x0, 0x0, 0x2}) [ 637.238991] oom_reaper: reaped process 11544 (syz-executor.4), now anon-rss:0kB, file-rss:14336kB, shmem-rss:4kB [ 637.261022] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 637.272726] in:imklog cpuset=/ mems_allowed=0-1 [ 637.277465] CPU: 1 PID: 11450 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 637.284914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 637.294272] Call Trace: [ 637.296874] dump_stack+0x1fc/0x2ef [ 637.300511] dump_header+0x15d/0xc3f [ 637.304234] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 637.309342] ? ___ratelimit+0x319/0x590 [ 637.313326] oom_kill_process.cold+0x10/0x692 [ 637.317831] ? check_preemption_disabled+0x41/0x280 [ 637.322857] ? has_intersects_mems_allowed+0x1d6/0x290 [ 637.328145] out_of_memory+0x1072/0x1390 [ 637.332224] ? oom_killer_disable+0x270/0x270 [ 637.336741] ? mutex_trylock+0x15f/0x1a0 [ 637.340792] __alloc_pages_nodemask+0x23a2/0x2890 [ 637.345644] ? find_get_entry+0x4cd/0x8a0 [ 637.349780] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 637.354663] alloc_pages_current+0x193/0x2a0 [ 637.359059] filemap_fault+0x146e/0x2180 [ 637.363112] ext4_filemap_fault+0x84/0xb0 [ 637.367262] __do_fault+0x10b/0x4b0 [ 637.370973] __handle_mm_fault+0x273b/0x41c0 [ 637.375421] ? vm_insert_page+0x9c0/0x9c0 [ 637.379560] ? lock_downgrade+0x720/0x720 [ 637.383700] ? check_preemption_disabled+0x41/0x280 [ 637.388706] handle_mm_fault+0x436/0xb10 [ 637.392774] __do_page_fault+0x68e/0xd60 [ 637.396851] ? trace_hardirqs_off_caller+0x6e/0x210 [ 637.401858] ? spurious_fault+0x840/0x840 [ 637.405994] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 637.410822] ? page_fault+0x8/0x30 [ 637.414347] page_fault+0x1e/0x30 [ 637.417853] RIP: 0033:0x7f7e3157b22d [ 637.421576] Code: Bad RIP value. [ 637.424941] RSP: 002b:00007f7e2ef17580 EFLAGS: 00010293 [ 637.430288] RAX: 0000000000000077 RBX: 0000000000000000 RCX: 00007f7e3157b22d [ 637.437547] RDX: 0000000000001fa0 RSI: 00007f7e2ef17da0 RDI: 0000000000000004 [ 637.444809] RBP: 0000564c390a39d0 R08: 0000000000000000 R09: 0000000000000000 [ 637.452063] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007f7e2ef17da0 [ 637.459315] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f7e2ef19458 [ 637.468697] Mem-Info: [ 637.471152] active_anon:19042 inactive_anon:4854 isolated_anon:0 [ 637.471152] active_file:55 inactive_file:14 isolated_file:0 [ 637.471152] unevictable:0 dirty:4 writeback:0 unstable:0 [ 637.471152] slab_reclaimable:20975 slab_unreclaimable:109937 [ 637.471152] mapped:22725 shmem:5410 pagetables:582 bounce:0 [ 637.471152] free:13756 free_pcp:153 free_cma:0 [ 637.483991] syz-executor.4: vmalloc: allocation failure, allocated 1807278080 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 637.506170] Node 0 active_anon:76152kB inactive_anon:19416kB active_file:200kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:90896kB dirty:16kB writeback:0kB shmem:21640kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 30720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 637.529469] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 637.552493] Node 1 active_anon:16kB inactive_anon:0kB active_file:20kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 637.555082] CPU: 0 PID: 11544 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 637.583332] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 637.586482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 637.586488] Call Trace: [ 637.586510] dump_stack+0x1fc/0x2ef [ 637.586529] warn_alloc.cold+0x7b/0x18f [ 637.619694] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 637.621990] ? zone_watermark_ok_safe+0x260/0x260 [ 637.625315] Node 0 DMA32 free:17536kB min:35996kB low:44992kB high:53988kB active_anon:76252kB inactive_anon:19416kB active_file:332kB inactive_file:304kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7712kB pagetables:2324kB bounce:0kB free_pcp:360kB local_pcp:112kB free_cma:0kB [ 637.628192] __vmalloc_area_node+0x4fd/0x780 [ 637.632133] lowmem_reserve[]: 0 0 1 1 1 [ 637.637145] ? __vmalloc_node_range+0x180/0x180 [ 637.637159] ? _raw_spin_unlock+0x29/0x40 [ 637.637171] ? __get_vm_area_node+0x2e2/0x3a0 [ 637.637188] __vmalloc_node_range+0xed/0x180 [ 637.637204] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 637.637218] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 637.637229] vmalloc_user+0x70/0xe0 [ 637.637247] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 637.643915] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 637.671119] vb2_vmalloc_alloc+0xb3/0x2f0 [ 637.671134] __vb2_queue_alloc+0x472/0xe60 [ 637.671158] vb2_core_create_bufs+0x273/0x7e0 [ 637.671171] ? __vb2_queue_free+0x870/0x870 [ 637.671189] ? __video_do_ioctl+0x632/0xcd0 [ 637.680362] lowmem_reserve[]: 0 0 0 0 0 [ 637.684410] ? pi_state_update_owner+0x450/0x450 [ 637.684425] ? __mutex_lock+0x368/0x1190 [ 637.684442] vb2_create_bufs+0x332/0x620 [ 637.684459] ? mark_held_locks+0xf0/0xf0 [ 637.688584] Node 1 Normal free:26596kB min:53876kB low:67344kB high:80812kB active_anon:16kB inactive_anon:0kB active_file:20kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:252kB local_pcp:4kB free_cma:0kB [ 637.693075] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 637.702275] lowmem_reserve[]: 0 0 0 0 0 [ 637.707151] ? futex_wait_queue_me+0x404/0x5e0 [ 637.707165] ? pi_state_update_owner+0x450/0x450 [ 637.707179] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 637.707194] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 637.707213] v4l_create_bufs+0xb2/0x160 [ 637.707228] __video_do_ioctl+0x49a/0xcd0 [ 637.707246] ? v4l_querycap+0x340/0x340 [ 637.707265] ? __might_fault+0x192/0x1d0 [ 637.707279] ? v4l_querycap+0x340/0x340 [ 637.707293] video_usercopy+0x13f/0xfa0 [ 637.707314] ? v4l_enumstd+0x60/0x60 [ 637.707327] ? do_futex+0x171/0x1880 [ 637.707341] ? mark_held_locks+0xf0/0xf0 [ 637.707358] ? debug_check_no_obj_freed+0x201/0x490 [ 637.707381] ? video_usercopy+0xfa0/0xfa0 [ 637.707392] v4l2_ioctl+0x147/0x1a0 [ 637.707404] ? video_devdata+0xa0/0xa0 [ 637.707419] do_vfs_ioctl+0xcdb/0x12e0 [ 637.707433] ? lock_downgrade+0x720/0x720 [ 637.707448] ? check_preemption_disabled+0x41/0x280 [ 637.707462] ? ioctl_preallocate+0x200/0x200 [ 637.707480] ? __fget+0x356/0x510 [ 637.707495] ? do_dup2+0x450/0x450 [ 637.707508] ? __se_sys_futex+0x298/0x3b0 [ 637.707528] ksys_ioctl+0x9b/0xc0 [ 637.707543] __x64_sys_ioctl+0x6f/0xb0 [ 637.707557] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 637.707570] do_syscall_64+0xf9/0x620 [ 637.707588] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 637.707599] RIP: 0033:0x7f90be27e0f9 [ 637.707614] Code: Bad RIP value. [ 637.707621] RSP: 002b:00007f90bc7f0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 637.707633] RAX: ffffffffffffffda RBX: 00007f90be39df80 RCX: 00007f90be27e0f9 [ 637.707641] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000006 [ 637.707648] RBP: 00007f90be2d9ae9 R08: 0000000000000000 R09: 0000000000000000 [ 637.707655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 637.707663] R13: 00007fff4bccdd2f R14: 00007f90bc7f0300 R15: 0000000000022000 [ 637.712714] Mem-Info: [ 637.717512] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 637.754462] active_anon:19042 inactive_anon:4854 isolated_anon:0 [ 637.754462] active_file:55 inactive_file:14 isolated_file:0 [ 637.754462] unevictable:0 dirty:4 writeback:0 unstable:0 [ 637.754462] slab_reclaimable:20975 slab_unreclaimable:109937 [ 637.754462] mapped:22725 shmem:5410 pagetables:582 bounce:0 [ 637.754462] free:13756 free_pcp:158 free_cma:0 [ 637.756813] Node 0 DMA32: 1282*4kB (UME) 627*8kB (UME) 153*16kB (UME) 62*32kB (UMEH) 17*64kB (UMH) 1*128kB (H) 1*256kB (H) 1*512kB (H) 1*1024kB (H) 0*2048kB 0*4096kB = 17584kB [ 637.761177] Node 0 active_anon:76152kB inactive_anon:19416kB active_file:200kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:90896kB dirty:16kB writeback:0kB shmem:21640kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 30720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 637.765675] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 637.765730] Node 1 Normal: 3*4kB (UM) 4*8kB (M) 4*16kB (UME) 5*32kB (UME) 3*64kB (M) 6*128kB (UME) 1*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (UM) 4*4096kB (M) = 26572kB [ 637.780141] Node 1 active_anon:16kB inactive_anon:0kB active_file:20kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 637.783523] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 637.793413] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 637.817276] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 637.828246] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 637.829307] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 637.836254] Node 0 DMA32 free:17584kB min:35996kB low:44992kB high:53988kB active_anon:76148kB inactive_anon:19416kB active_file:60kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7712kB pagetables:2320kB bounce:0kB free_pcp:412kB local_pcp:280kB free_cma:0kB [ 637.839172] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 637.848277] lowmem_reserve[]: 0 0 1 1 1 [ 637.848444] 5440 total pagecache pages [ 637.852661] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 637.856664] 0 pages in swap cache [ 637.856671] Swap cache stats: add 0, delete 0, find 0/0 [ 637.856676] Free swap = 0kB [ 637.856681] Total swap = 0kB [ 637.856690] 2097051 pages RAM [ 637.856695] 0 pages HighMem/MovableOnly [ 637.856699] 369649 pages reserved [ 637.856704] 0 pages cma reserved [ 637.856710] Unreclaimable slab info: [ 637.864676] lowmem_reserve[]: 0 0 0 0 0 [ 637.866623] Name Used Total [ 637.878053] Node 1 Normal free:26572kB min:53876kB low:67344kB high:80812kB active_anon:12kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:252kB local_pcp:248kB free_cma:0kB [ 637.882058] pid_2 98KB 152KB [ 637.889230] lowmem_reserve[]: 0 0 0 0 0 [ 637.891625] batadv_tl_cache 4KB 12KB [ 637.899332] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 637.902935] TIPC 10KB 15KB [ 637.911322] Node 0 DMA32: 1282*4kB (UME) 633*8kB (UME) 153*16kB (UME) 62*32kB (UMEH) 17*64kB (UMH) 1*128kB (H) 1*256kB (H) 1*512kB (H) 1*1024kB (H) 0*2048kB 0*4096kB = 17632kB [ 637.913814] SCTPv6 14KB 18KB [ 637.921019] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 637.923505] SCTP 54KB 112KB [ 637.931955] Node 1 Normal: 3*4kB (UM) 4*8kB (M) 4*16kB (UME) 5*32kB (UME) 3*64kB (M) 6*128kB (UME) 1*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (UM) 4*4096kB (M) = 26572kB [ 637.935053] DCCPv6 17KB 22KB [ 637.935068] DCCP 16KB 21KB [ 637.935111] RXRPC 11KB 13KB [ 637.943487] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 637.951147] rxrpc_call_jar 78KB 94KB [ 637.955030] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 637.955820] bridge_fdb_cache 9KB 15KB [ 637.963643] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 637.975602] fib6_nodes 157KB 160KB [ 637.979424] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 637.987946] ip6_dst_cache 77KB 326KB [ 637.992883] 5440 total pagecache pages [ 638.002513] RAWv6 70KB 74KB [ 638.006032] 0 pages in swap cache [ 638.022091] UDPv6 26KB 30KB [ 638.057668] Swap cache stats: add 0, delete 0, find 0/0 [ 638.068748] TCPv6 24KB 42KB [ 638.100238] Free swap = 0kB [ 638.103448] nf_conntrack 4KB 18KB [ 638.129254] Total swap = 0kB [ 638.146633] t10_alua_lu_gp_cache 0KB 3KB [ 638.146649] sd_ext_cdb 0KB 7KB [ 638.146658] scsi_sense_cache 1056KB 1060KB [ 638.146667] virtio_scsi_cmd 16KB 16KB [ 638.146679] sgpool-128 8KB 8KB [ 638.162302] 2097051 pages RAM [ 638.196565] sgpool-64 4KB 12KB [ 638.207879] 0 pages HighMem/MovableOnly [ 638.247133] sgpool-32 2KB 15KB [ 638.253971] 369649 pages reserved [ 638.282881] sgpool-16 1KB 7KB [ 638.293097] 0 pages cma reserved [ 638.300930] sgpool-8 0KB 7KB [ 638.616561] mqueue_inode_cache 10KB 22KB [ 638.622037] bio_post_read_ctx 14KB 15KB [ 638.633073] bio-2 14KB 15KB [ 638.639376] jfs_mp 7KB 7KB [ 638.648764] cifs_small_rq 15KB 16KB [ 638.654983] cifs_request 67KB 67KB [ 638.660371] cifs_mpx_ids 0KB 7KB [ 638.670690] nfs_commit_data 3KB 14KB [ 638.676938] nfs_write_data 34KB 44KB [ 638.682424] ext4_system_zone 1KB 7KB [ 638.691765] bio-1 1KB 7KB [ 638.698115] pid_namespace 2KB 7KB [ 638.703492] rpc_buffers 17KB 25KB [ 638.712876] rpc_tasks 2KB 7KB [ 638.719212] UNIX 91KB 105KB [ 638.728742] tcp_bind_bucket 1KB 4KB [ 638.736807] ip_fib_trie 23KB 27KB [ 638.742208] ip_fib_alias 112KB 118KB [ 638.747747] ip_dst_cache 10KB 48KB [ 638.753112] RAW 42KB 52KB [ 638.758576] UDP 30KB 47KB [ 638.764515] TCP 8KB 16KB [ 638.769888] hugetlbfs_inode_cache 3KB 15KB [ 638.775664] fscache_cookie_jar 1KB 11KB [ 638.781123] eventpoll_pwq 15KB 47KB [ 638.786566] eventpoll_epi 28KB 66KB [ 638.791934] inotify_inode_mark 26KB 55KB [ 638.797467] request_queue 199KB 199KB [ 638.802836] blkdev_requests 1KB 3KB [ 638.808294] blkdev_ioc 10KB 15KB [ 638.813664] bio-0 308KB 311KB [ 638.819121] biovec-max 1328KB 1328KB [ 638.824537] biovec-64 185KB 189KB [ 638.829907] biovec-16 10KB 15KB [ 638.837415] bio_integrity_payload 1KB 8KB [ 638.843494] khugepaged_mm_slot 14KB 34KB [ 638.849011] uid_cache 0KB 4KB [ 638.854472] dmaengine-unmap-2 0KB 3KB [ 638.859843] skbuff_fclone_cache 153KB 431KB [ 638.865447] skbuff_head_cache 2827KB 3101KB [ 638.870818] configfs_dir_cache 3KB 11KB [ 638.876378] file_lock_cache 126KB 202KB [ 638.881745] file_lock_ctx 9KB 11KB [ 638.887195] fsnotify_mark_connector 13KB 31KB [ 638.893114] net_namespace 52KB 52KB [ 638.898529] shmem_inode_cache 8292KB 8536KB [ 638.903933] task_delay_info 226KB 411KB [ 638.909299] taskstats 113KB 210KB [ 638.914711] proc_dir_entry 694KB 697KB [ 638.920076] pde_opener 8KB 62KB [ 638.925483] seq_file 223KB 539KB [ 638.930847] sigqueue 21KB 55KB [ 638.938505] kernfs_node_cache 18234KB 18246KB [ 638.944087] mnt_cache 173KB 188KB [ 638.949475] filp 5228KB 7657KB [ 638.954900] names_cache 129901KB 129939KB [ 638.960270] iint_cache 83KB 87KB [ 638.965714] key_jar 4KB 11KB [ 638.971084] uts_namespace 2KB 7KB [ 638.976571] nsproxy 5KB 15KB [ 638.982026] vm_area_struct 3275KB 5236KB [ 638.987489] mm_struct 713KB 1124KB [ 638.992860] fs_cache 118KB 384KB [ 638.998280] files_cache 475KB 870KB [ 639.003668] signal_cache 1060KB 1825KB [ 639.009076] sighand_cache 518KB 596KB [ 639.014578] task_struct 7354KB 7410KB [ 639.019946] cred_jar 958KB 2100KB [ 639.025420] anon_vma_chain 1068KB 1803KB [ 639.030895] anon_vma 150KB 269KB [ 639.036406] pid 53KB 264KB [ 639.043743] Acpi-Operand 156KB 202KB [ 639.049277] Acpi-ParseExt 8KB 11KB [ 639.054695] Acpi-Parse 41KB 47KB [ 639.060065] Acpi-State 52KB 63KB [ 639.065502] Acpi-Namespace 21KB 27KB [ 639.070874] numa_policy 0KB 3KB [ 639.076509] debug_objects_cache 2210KB 2213KB [ 639.082139] trace_event_file 297KB 298KB [ 639.088418] ftrace_event_field 398KB 401KB [ 639.093918] pool_workqueue 121KB 124KB [ 639.099283] page->ptl 681KB 1047KB [ 639.104761] kmalloc-2097152 2050KB 2050KB [ 639.110220] kmalloc-524288 2056KB 2056KB [ 639.115644] kmalloc-262144 1290KB 1290KB [ 639.121045] kmalloc-131072 650KB 650KB [ 639.126548] kmalloc-65536 1848KB 1914KB [ 639.131912] kmalloc-32768 1650KB 1650KB [ 639.137328] kmalloc-16384 940KB 940KB [ 639.144639] kmalloc-8192 3960KB 4001KB [ 639.150106] kmalloc-4096 18096KB 18134KB [ 639.155713] kmalloc-2048 12958KB 14031KB [ 639.161079] kmalloc-1024 7044KB 7756KB [ 639.166499] kmalloc-512 7553KB 7766KB [ 639.171869] kmalloc-256 5189KB 5557KB [ 639.177344] kmalloc-128 1050KB 1488KB [ 639.182718] kmalloc-96 2987KB 4020KB [ 639.188149] kmalloc-64 3452KB 4264KB [ 639.193549] kmalloc-32 1794KB 2445KB [ 639.199001] kmalloc-192 1484KB 2292KB [ 639.204435] kmem_cache 177KB 183KB [ 639.209806] Out of memory (oom_kill_allocating_task): Kill process 11450 (in:imklog) score 0 or sacrifice child [ 639.220144] Killed process 11436 (rsyslogd) total-vm:254332kB, anon-rss:528kB, file-rss:0kB, shmem-rss:0kB [ 639.232369] oom_reaper: reaped process 11436 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 13:06:16 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2, @pix={0x6, 0x1, 0x30395056, 0x5, 0xf78a, 0x76, 0x5, 0x80000000, 0x1, 0x7, 0x0, 0x7}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x2673, 0x20}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x8, 0x3, 0x2, 0x0, 0x8}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x2, 0x401, 0x10000007, 0x104000}) 13:06:16 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2}) 13:06:16 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:06:16 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:06:16 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x5, 0x3, 0x3, 0x0, 0x3f}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000440)={0x1, @vbi={0x80000001, 0x9, 0x1ff, 0x34424752, [0x7fffffff, 0xfffffff8], [0xe08, 0x4], 0x1}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000065bd7000fcdbdf2590000000041358dfae1ff4000400f4009dbe529ef58852d835d31d287117ea901caf0c"], 0x20}}, 0x4000) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000000c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x8, 0x7, {0x0, 0xea60}, {0x4, 0x1, 0x66, 0x1, 0x6, 0xdb, "441c8eb4"}, 0x7, 0x1, {&(0x7f0000000040)=[{0x7, 0x7ff, {0xe0dc}, 0x481c}, {0x2, 0x6, {0x6}, 0x80000000}]}, 0x75}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x8, 0x4f19fd21a4b648c5, 0x2, "71d5cbdb69e3dab91dd6c582e900b243e53ef3072de7969f3559408ac885df4d", 0x30314742}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000003c0)=@multiplanar_overlay={0x8, 0x0, 0x4, 0x0, 0x8, {r4, r5/1000+10000}, {0x1, 0xc, 0x1, 0xff, 0x4, 0x4, "5ccbbc85"}, 0x7, 0x3, {&(0x7f0000000340)=[{0x4b, 0x5, {0x6}, 0x5}, {0x800, 0x3, {0xd9c}, 0x3ff}]}, 0x3, 0x0, r0}) 13:06:17 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:06:17 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2, @pix={0x6, 0x1, 0x30395056, 0x5, 0xf78a, 0x76, 0x5, 0x80000000, 0x1, 0x7, 0x0, 0x7}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2, @pix={0x6, 0x1, 0x30395056, 0x5, 0xf78a, 0x76, 0x5, 0x80000000, 0x1, 0x7, 0x0, 0x7}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x2673, 0x20}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x8, 0x3, 0x2, 0x0, 0x8}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x2, 0x401, 0x10000007, 0x104000}) 13:06:19 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)=@fd={0x9, 0x3, 0x4, 0x2, 0x2, {}, {0x3, 0x2, 0x4, 0xeb, 0xff, 0x0, "25030385"}, 0x7ff, 0x4, {}, 0x8}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x1, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x0, 0x3, 0x3, 0x0, 0xfd}) ioctl$vim2m_VIDIOC_G_FMT(r2, 0x5452, &(0x7f0000000580)={0x3, @pix_mp={0x7fffffff, 0x700, 0x3136452a, 0x5, 0x2, [{}, {}, {0x200}, {0x8}, {}, {0x0, 0x200000}, {0xfffffffe}]}}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x2, @sliced={0x479, [0x0, 0x20, 0x0, 0x200, 0x4f, 0x5, 0x8, 0x722, 0x2, 0x101, 0xffe0, 0xfff7, 0x3, 0x4, 0x7, 0x29ec, 0x407, 0x0, 0x675e, 0x1, 0x3, 0x8, 0x0, 0x8, 0x40, 0x9, 0x7f, 0x3, 0x1f, 0x1ff, 0x5, 0x6, 0x4, 0x1000, 0x401, 0x1ff, 0x96, 0x1, 0x3a, 0x0, 0x927b, 0x9, 0x9bb, 0x7, 0x1, 0xec, 0x5704, 0x1f], 0xffffff01}}) 13:06:19 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000700)={0x4329, 0x1, 0x2}) 13:06:19 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x2) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:06:19 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x5, 0x3, 0x3, 0x0, 0x3f}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000440)={0x1, @vbi={0x80000001, 0x9, 0x1ff, 0x34424752, [0x7fffffff, 0xfffffff8], [0xe08, 0x4], 0x1}}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000065bd7000fcdbdf2590000000041358dfae1ff4000400f4009dbe529ef58852d835d31d287117ea901caf0c"], 0x20}}, 0x4000) (async, rerun: 64) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async, rerun: 64) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000000c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x8, 0x7, {0x0, 0xea60}, {0x4, 0x1, 0x66, 0x1, 0x6, 0xdb, "441c8eb4"}, 0x7, 0x1, {&(0x7f0000000040)=[{0x7, 0x7ff, {0xe0dc}, 0x481c}, {0x2, 0x6, {0x6}, 0x80000000}]}, 0x75}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x8, 0x4f19fd21a4b648c5, 0x2, "71d5cbdb69e3dab91dd6c582e900b243e53ef3072de7969f3559408ac885df4d", 0x30314742}) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) (rerun: 32) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000003c0)=@multiplanar_overlay={0x8, 0x0, 0x4, 0x0, 0x8, {r4, r5/1000+10000}, {0x1, 0xc, 0x1, 0xff, 0x4, 0x4, "5ccbbc85"}, 0x7, 0x3, {&(0x7f0000000340)=[{0x4b, 0x5, {0x6}, 0x5}, {0x800, 0x3, {0xd9c}, 0x3ff}]}, 0x3, 0x0, r0}) 13:06:19 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:06:19 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) 13:06:19 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)=@fd={0x9, 0x3, 0x4, 0x2, 0x2, {}, {0x3, 0x2, 0x4, 0xeb, 0xff, 0x0, "25030385"}, 0x7ff, 0x4, {}, 0x8}) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x1, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x0, 0x3, 0x3, 0x0, 0xfd}) (async) ioctl$vim2m_VIDIOC_G_FMT(r2, 0x5452, &(0x7f0000000580)={0x3, @pix_mp={0x7fffffff, 0x700, 0x3136452a, 0x5, 0x2, [{}, {}, {0x200}, {0x8}, {}, {0x0, 0x200000}, {0xfffffffe}]}}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) (async) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x2, @sliced={0x479, [0x0, 0x20, 0x0, 0x200, 0x4f, 0x5, 0x8, 0x722, 0x2, 0x101, 0xffe0, 0xfff7, 0x3, 0x4, 0x7, 0x29ec, 0x407, 0x0, 0x675e, 0x1, 0x3, 0x8, 0x0, 0x8, 0x40, 0x9, 0x7f, 0x3, 0x1f, 0x1ff, 0x5, 0x6, 0x4, 0x1000, 0x401, 0x1ff, 0x96, 0x1, 0x3a, 0x0, 0x927b, 0x9, 0x9bb, 0x7, 0x1, 0xec, 0x5704, 0x1f], 0xffffff01}}) 13:06:19 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 13:06:19 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x2) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:06:19 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r2) (async) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) 13:06:19 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)=@fd={0x9, 0x3, 0x4, 0x2, 0x2, {}, {0x3, 0x2, 0x4, 0xeb, 0xff, 0x0, "25030385"}, 0x7ff, 0x4, {}, 0x8}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x1, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x0, 0x3, 0x3, 0x0, 0xfd}) ioctl$vim2m_VIDIOC_G_FMT(r2, 0x5452, &(0x7f0000000580)={0x3, @pix_mp={0x7fffffff, 0x700, 0x3136452a, 0x5, 0x2, [{}, {}, {0x200}, {0x8}, {}, {0x0, 0x200000}, {0xfffffffe}]}}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x2, @sliced={0x479, [0x0, 0x20, 0x0, 0x200, 0x4f, 0x5, 0x8, 0x722, 0x2, 0x101, 0xffe0, 0xfff7, 0x3, 0x4, 0x7, 0x29ec, 0x407, 0x0, 0x675e, 0x1, 0x3, 0x8, 0x0, 0x8, 0x40, 0x9, 0x7f, 0x3, 0x1f, 0x1ff, 0x5, 0x6, 0x4, 0x1000, 0x401, 0x1ff, 0x96, 0x1, 0x3a, 0x0, 0x927b, 0x9, 0x9bb, 0x7, 0x1, 0xec, 0x5704, 0x1f], 0xffffff01}}) 13:06:19 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x5, 0x3, 0x3, 0x0, 0x3f}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000440)={0x1, @vbi={0x80000001, 0x9, 0x1ff, 0x34424752, [0x7fffffff, 0xfffffff8], [0xe08, 0x4], 0x1}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000065bd7000fcdbdf2590000000041358dfae1ff4000400f4009dbe529ef58852d835d31d287117ea901caf0c"], 0x20}}, 0x4000) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000000c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x8, 0x7, {0x0, 0xea60}, {0x4, 0x1, 0x66, 0x1, 0x6, 0xdb, "441c8eb4"}, 0x7, 0x1, {&(0x7f0000000040)=[{0x7, 0x7ff, {0xe0dc}, 0x481c}, {0x2, 0x6, {0x6}, 0x80000000}]}, 0x75}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x8, 0x4f19fd21a4b648c5, 0x2, "71d5cbdb69e3dab91dd6c582e900b243e53ef3072de7969f3559408ac885df4d", 0x30314742}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000003c0)=@multiplanar_overlay={0x8, 0x0, 0x4, 0x0, 0x8, {r4, r5/1000+10000}, {0x1, 0xc, 0x1, 0xff, 0x4, 0x4, "5ccbbc85"}, 0x7, 0x3, {&(0x7f0000000340)=[{0x4b, 0x5, {0x6}, 0x5}, {0x800, 0x3, {0xd9c}, 0x3ff}]}, 0x3, 0x0, r0}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x5, 0x3, 0x3, 0x0, 0x3f}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000440)={0x1, @vbi={0x80000001, 0x9, 0x1ff, 0x34424752, [0x7fffffff, 0xfffffff8], [0xe08, 0x4], 0x1}}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000065bd7000fcdbdf2590000000041358dfae1ff4000400f4009dbe529ef58852d835d31d287117ea901caf0c"], 0x20}}, 0x4000) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000000c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x8, 0x7, {0x0, 0xea60}, {0x4, 0x1, 0x66, 0x1, 0x6, 0xdb, "441c8eb4"}, 0x7, 0x1, {&(0x7f0000000040)=[{0x7, 0x7ff, {0xe0dc}, 0x481c}, {0x2, 0x6, {0x6}, 0x80000000}]}, 0x75}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x8, 0x4f19fd21a4b648c5, 0x2, "71d5cbdb69e3dab91dd6c582e900b243e53ef3072de7969f3559408ac885df4d", 0x30314742}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) clock_gettime(0x0, &(0x7f0000000200)) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000003c0)=@multiplanar_overlay={0x8, 0x0, 0x4, 0x0, 0x8, {r4, r5/1000+10000}, {0x1, 0xc, 0x1, 0xff, 0x4, 0x4, "5ccbbc85"}, 0x7, 0x3, {&(0x7f0000000340)=[{0x4b, 0x5, {0x6}, 0x5}, {0x800, 0x3, {0xd9c}, 0x3ff}]}, 0x3, 0x0, r0}) (async) 13:06:19 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 13:06:19 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)=@fd={0x9, 0x3, 0x4, 0x2, 0x2, {}, {0x3, 0x2, 0x4, 0xeb, 0xff, 0x0, "25030385"}, 0x7ff, 0x4, {}, 0x8}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x1, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x1, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x0, 0x3, 0x3, 0x0, 0xfd}) ioctl$vim2m_VIDIOC_G_FMT(r2, 0x5452, &(0x7f0000000580)={0x3, @pix_mp={0x7fffffff, 0x700, 0x3136452a, 0x5, 0x2, [{}, {}, {0x200}, {0x8}, {}, {0x0, 0x200000}, {0xfffffffe}]}}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x2, @sliced={0x479, [0x0, 0x20, 0x0, 0x200, 0x4f, 0x5, 0x8, 0x722, 0x2, 0x101, 0xffe0, 0xfff7, 0x3, 0x4, 0x7, 0x29ec, 0x407, 0x0, 0x675e, 0x1, 0x3, 0x8, 0x0, 0x8, 0x40, 0x9, 0x7f, 0x3, 0x1f, 0x1ff, 0x5, 0x6, 0x4, 0x1000, 0x401, 0x1ff, 0x96, 0x1, 0x3a, 0x0, 0x927b, 0x9, 0x9bb, 0x7, 0x1, 0xec, 0x5704, 0x1f], 0xffffff01}}) 13:06:19 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4081) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000580)={0x1, @win={{0x25a, 0x1, 0x9, 0x1}, 0x6, 0x80000000, &(0x7f0000000400)={{0xc0, 0x1, 0x46, 0x5}, &(0x7f00000003c0)={{0x0, 0x7, 0x1, 0x1}, &(0x7f0000000380)={{0x9, 0x8, 0x80000001, 0x1}}}}, 0x1, &(0x7f0000000480)="647a63c7959e8a452f2d41d05dac9943f13e26a4f5dbffbf0710a9dcd15da7d85228ce72b753bfa6b4f79838938cbb35f750b277827403481332942113146dee845c", 0x9}}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, r3, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x7e}}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x8}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x3}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x2}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa6}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x3000}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1b}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6c}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3f}]}, 0x6c}}, 0x11) socketpair(0x27, 0x3, 0x7, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x3b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000074}, 0x40080) sysinfo(&(0x7f0000000680)=""/207) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f00000008c0)={0xf, 0x1f, 0x2, 0x9}, 0xf) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) socketpair(0x10, 0x800, 0x7f, &(0x7f0000000880)) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r7, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x40, 0x68}}}}, [@NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3f}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40841) 13:06:19 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)=@fd={0x9, 0x3, 0x4, 0x2, 0x2, {}, {0x3, 0x2, 0x4, 0xeb, 0xff, 0x0, "25030385"}, 0x7ff, 0x4, {}, 0x8}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x1, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x0, 0x3, 0x3, 0x0, 0xfd}) ioctl$vim2m_VIDIOC_G_FMT(r2, 0x5452, &(0x7f0000000580)={0x3, @pix_mp={0x7fffffff, 0x700, 0x3136452a, 0x5, 0x2, [{}, {}, {0x200}, {0x8}, {}, {0x0, 0x200000}, {0xfffffffe}]}}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x2, @sliced={0x479, [0x0, 0x20, 0x0, 0x200, 0x4f, 0x5, 0x8, 0x722, 0x2, 0x101, 0xffe0, 0xfff7, 0x3, 0x4, 0x7, 0x29ec, 0x407, 0x0, 0x675e, 0x1, 0x3, 0x8, 0x0, 0x8, 0x40, 0x9, 0x7f, 0x3, 0x1f, 0x1ff, 0x5, 0x6, 0x4, 0x1000, 0x401, 0x1ff, 0x96, 0x1, 0x3a, 0x0, 0x927b, 0x9, 0x9bb, 0x7, 0x1, 0xec, 0x5704, 0x1f], 0xffffff01}}) 13:06:19 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'veth0_macvtap\x00'}}) 13:06:19 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async, rerun: 32) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) (rerun: 32) 13:06:19 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 13:06:19 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4081) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000580)={0x1, @win={{0x25a, 0x1, 0x9, 0x1}, 0x6, 0x80000000, &(0x7f0000000400)={{0xc0, 0x1, 0x46, 0x5}, &(0x7f00000003c0)={{0x0, 0x7, 0x1, 0x1}, &(0x7f0000000380)={{0x9, 0x8, 0x80000001, 0x1}}}}, 0x1, &(0x7f0000000480)="647a63c7959e8a452f2d41d05dac9943f13e26a4f5dbffbf0710a9dcd15da7d85228ce72b753bfa6b4f79838938cbb35f750b277827403481332942113146dee845c", 0x9}}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, r3, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x7e}}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x8}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x3}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x2}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa6}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x3000}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1b}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6c}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3f}]}, 0x6c}}, 0x11) socketpair(0x27, 0x3, 0x7, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x3b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000074}, 0x40080) (async) sysinfo(&(0x7f0000000680)=""/207) (async, rerun: 64) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f00000008c0)={0xf, 0x1f, 0x2, 0x9}, 0xf) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) socketpair(0x10, 0x800, 0x7f, &(0x7f0000000880)) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r7, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x40, 0x68}}}}, [@NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3f}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40841) 13:06:19 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x3) 13:06:19 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4081) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000580)={0x1, @win={{0x25a, 0x1, 0x9, 0x1}, 0x6, 0x80000000, &(0x7f0000000400)={{0xc0, 0x1, 0x46, 0x5}, &(0x7f00000003c0)={{0x0, 0x7, 0x1, 0x1}, &(0x7f0000000380)={{0x9, 0x8, 0x80000001, 0x1}}}}, 0x1, &(0x7f0000000480)="647a63c7959e8a452f2d41d05dac9943f13e26a4f5dbffbf0710a9dcd15da7d85228ce72b753bfa6b4f79838938cbb35f750b277827403481332942113146dee845c", 0x9}}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, r3, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x7e}}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x8}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x3}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x2}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa6}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x3000}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1b}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6c}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3f}]}, 0x6c}}, 0x11) socketpair(0x27, 0x3, 0x7, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x3b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000074}, 0x40080) sysinfo(&(0x7f0000000680)=""/207) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f00000008c0)={0xf, 0x1f, 0x2, 0x9}, 0xf) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) socketpair(0x10, 0x800, 0x7f, &(0x7f0000000880)) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r7, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x40, 0x68}}}}, [@NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3f}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40841) 13:06:19 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x10}}}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x12, 0x13, [{0x5}, {0x18, 0x1}, {0x24, 0x1}, {0x1b}, {0x16, 0x1}, {}, {0x68}, {0x6c, 0x1}, {0x60}, {0xc, 0x1}, {0x2, 0x1}, {0x48, 0x1}, {0x24}, {0xb, 0x1}]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x2e, 0xac, "ee2e77a2bc7ff47e9897ab1edf9da052ba7883daf4690d345fc68f8731ac2a27d6cdbad9c0563fe39995"}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8800) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) 13:06:19 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'veth0_macvtap\x00'}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)) (async) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) (async) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'veth0_macvtap\x00'}}) (async) 13:06:19 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x0, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:06:19 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x3) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x3) (async) 13:06:19 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4081) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000580)={0x1, @win={{0x25a, 0x1, 0x9, 0x1}, 0x6, 0x80000000, &(0x7f0000000400)={{0xc0, 0x1, 0x46, 0x5}, &(0x7f00000003c0)={{0x0, 0x7, 0x1, 0x1}, &(0x7f0000000380)={{0x9, 0x8, 0x80000001, 0x1}}}}, 0x1, &(0x7f0000000480)="647a63c7959e8a452f2d41d05dac9943f13e26a4f5dbffbf0710a9dcd15da7d85228ce72b753bfa6b4f79838938cbb35f750b277827403481332942113146dee845c", 0x9}}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, r3, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x7e}}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x8}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x3}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x2}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa6}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x3000}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1b}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6c}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3f}]}, 0x6c}}, 0x11) socketpair(0x27, 0x3, 0x7, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x3b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000074}, 0x40080) sysinfo(&(0x7f0000000680)=""/207) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f00000008c0)={0xf, 0x1f, 0x2, 0x9}, 0xf) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) socketpair(0x10, 0x800, 0x7f, &(0x7f0000000880)) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r7, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x40, 0x68}}}}, [@NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3f}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40841) 13:06:19 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) (async, rerun: 64) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x10}}}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x12, 0x13, [{0x5}, {0x18, 0x1}, {0x24, 0x1}, {0x1b}, {0x16, 0x1}, {}, {0x68}, {0x6c, 0x1}, {0x60}, {0xc, 0x1}, {0x2, 0x1}, {0x48, 0x1}, {0x24}, {0xb, 0x1}]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x2e, 0xac, "ee2e77a2bc7ff47e9897ab1edf9da052ba7883daf4690d345fc68f8731ac2a27d6cdbad9c0563fe39995"}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8800) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) 13:06:19 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x0, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:06:19 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4081) (async, rerun: 64) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000580)={0x1, @win={{0x25a, 0x1, 0x9, 0x1}, 0x6, 0x80000000, &(0x7f0000000400)={{0xc0, 0x1, 0x46, 0x5}, &(0x7f00000003c0)={{0x0, 0x7, 0x1, 0x1}, &(0x7f0000000380)={{0x9, 0x8, 0x80000001, 0x1}}}}, 0x1, &(0x7f0000000480)="647a63c7959e8a452f2d41d05dac9943f13e26a4f5dbffbf0710a9dcd15da7d85228ce72b753bfa6b4f79838938cbb35f750b277827403481332942113146dee845c", 0x9}}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, r3, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x7e}}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x8}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x3}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x2}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa6}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x3000}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1b}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6c}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3f}]}, 0x6c}}, 0x11) (async) socketpair(0x27, 0x3, 0x7, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x3b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000074}, 0x40080) sysinfo(&(0x7f0000000680)=""/207) (async, rerun: 32) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f00000008c0)={0xf, 0x1f, 0x2, 0x9}, 0xf) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r5) (async) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (rerun: 64) socketpair(0x10, 0x800, 0x7f, &(0x7f0000000880)) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r7, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x40, 0x68}}}}, [@NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3f}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40841) (rerun: 64) 13:06:19 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x3) 13:06:20 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x0, @pix={0x5, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:06:20 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x5, 0x3, 0x3, 0x0, 0x3f}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000440)={0x1, @vbi={0x80000001, 0x9, 0x1ff, 0x34424752, [0x7fffffff, 0xfffffff8], [0xe08, 0x4], 0x1}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000065bd7000fcdbdf2590000000041358dfae1ff4000400f4009dbe529ef58852d835d31d287117ea901caf0c"], 0x20}}, 0x4000) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000000c0)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x8, 0x7, {0x0, 0xea60}, {0x4, 0x1, 0x66, 0x1, 0x6, 0xdb, "441c8eb4"}, 0x7, 0x1, {&(0x7f0000000040)=[{0x7, 0x7ff, {0xe0dc}, 0x481c}, {0x2, 0x6, {0x6}, 0x80000000}]}, 0x75}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x8, 0x4f19fd21a4b648c5, 0x2, "71d5cbdb69e3dab91dd6c582e900b243e53ef3072de7969f3559408ac885df4d", 0x30314742}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000003c0)=@multiplanar_overlay={0x8, 0x0, 0x4, 0x0, 0x8, {r4, r5/1000+10000}, {0x1, 0xc, 0x1, 0xff, 0x4, 0x4, "5ccbbc85"}, 0x7, 0x3, {&(0x7f0000000340)=[{0x4b, 0x5, {0x6}, 0x5}, {0x800, 0x3, {0xd9c}, 0x3ff}]}, 0x3, 0x0, r0}) 13:06:20 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'veth0_macvtap\x00'}}) 13:06:20 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x3, [{}, {0x10}, {}, {0x0, 0xfe66}, {}, {}, {0x0, 0x200}], 0x0, 0x0, 0x8}}) 13:06:20 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) (async) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x10}}}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x12, 0x13, [{0x5}, {0x18, 0x1}, {0x24, 0x1}, {0x1b}, {0x16, 0x1}, {}, {0x68}, {0x6c, 0x1}, {0x60}, {0xc, 0x1}, {0x2, 0x1}, {0x48, 0x1}, {0x24}, {0xb, 0x1}]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x2e, 0xac, "ee2e77a2bc7ff47e9897ab1edf9da052ba7883daf4690d345fc68f8731ac2a27d6cdbad9c0563fe39995"}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8800) (async, rerun: 64) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) 13:06:20 executing program 5: write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000400)={0x15, 0x65, 0xffff, 0x1, 0x8, '9P2000.L'}, 0x15) socketpair(0xb, 0x80000, 0x2, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10682bbd708f104a4ca6b96e4cd202000000", @ANYRES32=r0, @ANYRESOCT=r2], 0x54}, 0x1, 0x0, 0x0, 0x44}, 0x4) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000004c0)=@multiplanar_overlay={0x4, 0x3, 0x4, 0x70000, 0x8001, {0x77359400}, {0x2, 0x2, 0x5f, 0x6, 0x9, 0x0, "c08ca271"}, 0x4, 0x3, {&(0x7f0000000440)=[{0x101, 0x8, {0x6}, 0x8}, {0x5, 0x6, {0x6}, 0x3be}]}, 0x8, 0x0, r3}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000080)={0xffff, 0x0, 0x1, "5aa11e6368caeab793aadf64445e405c4564c0cdeea6036eb04992025a500fe4", 0x30314247}) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:06:20 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x0, 0x2, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:06:20 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x3, [{}, {0x10}, {}, {0x0, 0xfe66}, {}, {}, {0x0, 0x200}], 0x0, 0x0, 0x8}}) 13:06:20 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x3, 0x7fff, 0x3}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {0x9}]}}) 13:06:20 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 13:06:20 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x1}}) 13:06:20 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x0, 0x0, 0x47504a50, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:06:20 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x3, [{}, {0x10}, {}, {0x0, 0xfe66}, {}, {}, {0x0, 0x200}], 0x0, 0x0, 0x8}}) 13:06:20 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x8000, 0x1, 0x1, "3af1cd02d7ed74f959aed2ab47fd2aaebeef453b955d110682a63635d354636d", 0x31303453}) 13:06:20 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async, rerun: 64) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x3, 0x7fff, 0x3}) (async, rerun: 64) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {0x9}]}}) (rerun: 64) 13:06:20 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 13:06:20 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x0, 0x0, 0x0, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:06:20 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000140)=@multiplanar_userptr={0x1, 0x3, 0x4, 0x1000, 0x8, {0x0, 0x2710}, {0x1, 0x1, 0x5, 0x3, 0x8, 0x70, "fa6d4804"}, 0x7, 0x2, {&(0x7f00000000c0)=[{0xf9c, 0x7, {&(0x7f0000000040)}, 0x1f}, {0x4, 0x8001, {&(0x7f0000000080)}, 0x1b57}]}, 0x6}) 13:06:20 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x1}}) 13:06:20 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 13:06:20 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x8000, 0x1, 0x1, "3af1cd02d7ed74f959aed2ab47fd2aaebeef453b955d110682a63635d354636d", 0x31303453}) 13:06:20 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000140)=@multiplanar_userptr={0x1, 0x3, 0x4, 0x1000, 0x8, {0x0, 0x2710}, {0x1, 0x1, 0x5, 0x3, 0x8, 0x70, "fa6d4804"}, 0x7, 0x2, {&(0x7f00000000c0)=[{0xf9c, 0x7, {&(0x7f0000000040)}, 0x1f}, {0x4, 0x8001, {&(0x7f0000000080)}, 0x1b57}]}, 0x6}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000140)=@multiplanar_userptr={0x1, 0x3, 0x4, 0x1000, 0x8, {0x0, 0x2710}, {0x1, 0x1, 0x5, 0x3, 0x8, 0x70, "fa6d4804"}, 0x7, 0x2, {&(0x7f00000000c0)=[{0xf9c, 0x7, {&(0x7f0000000040)}, 0x1f}, {0x4, 0x8001, {&(0x7f0000000080)}, 0x1b57}]}, 0x6}) (async) 13:06:20 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:06:20 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x8000, 0x1, 0x1, "3af1cd02d7ed74f959aed2ab47fd2aaebeef453b955d110682a63635d354636d", 0x31303453}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x8000, 0x1, 0x1, "3af1cd02d7ed74f959aed2ab47fd2aaebeef453b955d110682a63635d354636d", 0x31303453}) (async) 13:06:20 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x1}}) 13:06:20 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 13:06:20 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x3, 0x7fff, 0x3}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {0x9}]}}) 13:06:20 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) 13:06:20 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:06:20 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x3, @vbi={0x2, 0x4, 0x8ad, 0x30395056, [0x0, 0x7], [0x3ff, 0x400], 0x1}}) 13:06:20 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000140)=@multiplanar_userptr={0x1, 0x3, 0x4, 0x1000, 0x8, {0x0, 0x2710}, {0x1, 0x1, 0x5, 0x3, 0x8, 0x70, "fa6d4804"}, 0x7, 0x2, {&(0x7f00000000c0)=[{0xf9c, 0x7, {&(0x7f0000000040)}, 0x1f}, {0x4, 0x8001, {&(0x7f0000000080)}, 0x1b57}]}, 0x6}) 13:06:20 executing program 5: prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 13:06:20 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x3, @vbi={0x2, 0x4, 0x8ad, 0x30395056, [0x0, 0x7], [0x3ff, 0x400], 0x1}}) 13:06:20 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:06:20 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x3, 0x4, 0x101, 0x84800}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:06:20 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) 13:06:20 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d4fa5037"}, 0x0, 0x2, {0x0}}) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000440)={0x2, @pix={0x6, 0x344, 0x52424752, 0x7, 0x4, 0x100, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000001c0)={0x8, 0x3f, 0x4, {0x1, @win={{0x8, 0x40800, 0x9, 0x7ff}, 0x0, 0x6, &(0x7f0000000180)={{0x8, 0x1, 0x46e8, 0x1000}, &(0x7f0000000140)={{0x7f, 0x38b7, 0x8}, &(0x7f0000000100)={{0x10000000, 0xa44, 0x3f, 0x80000000}}}}, 0x40, &(0x7f0000000680)="7d76a7b0b3efa359a256988ce68721077a3d3dce63ea388ff1aa3f52c78deb4998dbe9fad353043276bc2c914b4c18d0d3c0573fd0e098ab87831b1c2a5008324c5b32fb368d2718483e17fb15669658cb41de6079731d64bc6ba8e30dc4f891b119e22271de10717a2a50894ed4782cb1320a9b8d465582aae04d2715659e7e26e801e3966aa13f9561770d75a4381a3da94956074f763f89de8abf5fcefdc45021aa7d0059e1044c3690eac7670f2dc9381bfd8e605b6afd3511ccf47cae373850c1617eb7c20bf2e765503be641a5acca71e3a8d3cfb608ad126ad08d4fb2a7847e81fca4cc558256bb3ab7410f73cf02b709a155c470fec89c0ce21dc394ae61c1ade42ba78f6419a415453277fd4a201e421bb3774492e4dd1956e818ac1d5597c5fae3c14d03e2ba61573da7ddcdaf4adf394eaa204e71c74c2ec5b2b75927d670aef5ffb17ffb107ee317d7b1ef296367dd29ac7de793c2b75d9cdb7c75a09d4779c6d428b7ebff6ce1ac9cf56f0ec59c19a4a814692cc1848fb0cd65843bd3c6c06e9f07d8d0d102c8b5dba2bfce97ac28ddc9d384666accd0591eff6297fa5e5a1ff91b216d6543fa7d4ce467b636243c376b0cf38985e97cffc6c238b8bb8195478da38201c51cb706f9eb0731ff8a6b9651474cc3cfd295915be9f0755bc6dc5f736e0c09d502b712cc5323acdc0876d5dfe3201434fb8909bff9367013802c16f62189fd45e407d9183fd818f90aac1b2b49ad95b57924412f1d5d44e71f4f0b8c98865ded06ea5c79e15bce39fb5bb901db2c212003f42e53aab0287e1edd8465e1ea9ca57335dc62affa8186bfa18e1801cde71c80bd1a5f542796d9175680834ed38020a93f7ea455bab26e0032b156c6d2f63dc6f9ccf535d1580999ef1ed71ed096be0cd1a881a026db7aa3a7581a278af4edfb53d0e728fef1cacd3a50f611129b617f3266b1e94040f874d27784b687ca517207f30ffefd49d9a7024da9e5364412d3bdf42c77f5435449c8ebca3783cf28db8156851fd3091595f50cd5e7a8c4d14476cdab98933acc6315539ffc4d97c834d1b5d61d74cd29dd6258d92b1ab1fefb6299368832526ea2e18880f4569bc93960b51150909a7978c16f261e3112e6f05f65e6dce8cf2890f21ec2954598c7bd943a0f2065da4f36a0270f8331e85bd74403a123ad67321f74a1f463aa86a98891f8701011bb2e6bea491d7c1a71fc62b33517a97445d9f5cbcec51533b1997791572bc1ab517868e4f3fe5aa88d579504a1a9c3e41b3842e7993e259098e3ecd18460dac8fc4c2899a60a99229a72d0122a82d6516258a7f6e6cddea5d453be1c0ee32789dd88713ba6a03ca18636321fa4e97e0dc2e5f34cab621212f8c9a2838a5ab0b3c80914b867f2a30854d1f1905df844ee6bb53d73bee0594d1290a29d95cd0e308e9827830e6fc06ab3dac3b11e993dd4aaf16614cd64cdb59f9a7afb295b6f41edd404ea6e2b02f51cb7803f5aa119818f25e40e12b673e100e57b81bb4fd751439504f0658dcf9e1a9b7fd0608d32cd42e3c60b800b309865e3e4e104fdd893c0e85f366ac27d61ef6bb061a93849280bc5db871692cb12cfea21a3e25375ee5c65280057674c7321b784d40a388790e44dd322e6ce2b7bc8904cc3584b5aec633a15c64d7b28c1350c18c833335a5b4ebbeeb7b1a7d7813e1b30eb717ea96d2b79af287a35a15ec67d923dc0639ddaf8deba22916d7233df4d30fe14d9bad7175bd51123ca33a8d0059a4b042b808b2d6cb16cd28e7d97f65024c17786f735b838ef8d6ad0f2f5ae92c3094e7e0d4f28036b9f07c4f68abb25e2b6c01c9687ad52f4b4bdb39b12c872586f27a151b295379cefb4a6afd11ef739d6c579752297241af1e4fa5f38b2445b492c53e3111ea6aa579062da66664e6c35a67d02fff71f451ee5ab26e19661467e188c2f2a0263c9e7b65f19192b28cc6672f9c8e3a283874aad34c4def9bf4a878abe3b4416ec5747c3edace43bdf4cbfe32b9e61e01bedfb316aff13d6a0d54f657bf8c21e83aeb6bab125af6bbd9d11394445168abaa637d52ec1487ea1ce65021af3ef4620447eed906953f83e0fe969820fef5261c3ad21ec15008b7451d1a8d8bdd61059436f4f495acc8bbcd61eabdff37dd8560558766cb1170ac6624e444ed7598e602fd65b4876c7486dafd1ec7608ebd79a3e123f44667cc1ed4486a03f29596da09e9f17cfc694db6bf6e2cad75419bca9ef03e258af04a20f8897cf0a67e0d8d498d8d23e4771c954e1f1163a8472aa452ab9c651cc8d412a008bcee452adf15e341383b261c57b115c6fda87ce1dff064d3812b85435d0ac6826078b7b5809879299012116c4c3744005d761107fd91addbdd4928cc780bbafac4d15f9e044a6276d06610265f6bb81d94d3e0fb9aa7eb919793812151a1b1f4649826d51db6541bdcaa0419133a044b0b878084f546e219ce539038a0a7d121a22f012f43c2684a97b4c67de90d738aa1d03c42111252090ea770b90d8a4850a52053b4238c60db7ff4eedf0323ab2d3cdedbb02d33e88a90bfda73d45daab6f358a5001ca91bcd07fb17746caf1ec595f5b1640b542b2c2694b78979975b6fb0e4b6382856d16c1925ff0a554c6d1ff1dc7402018c86202a8c433f6048c5d30702489ac7516e4317ebcdc88b323e0c1a7656bffffe613f2c71fc52a38d38083102b3963549bf602dec18a732c0a832e9f7dad127d23787693605ac9081fbe6d59bb732e2684726d20aef8f316edf0562a4f15f1008ac50c192d4398c63d3999667c69111c74656f7892513d3de682914012660fd463afeff18e7f3a507e27ce6ff4bd1f3cacb5e489911e3f69573cf646c152f20f2a21b6137b5f3d7f66279e2515c5e3a4bfdcdb411026764d75b5be4f981bc5fcdffde2e5c1976c91019fb5eec0dc012317bc753a7550a07b55c414f1447aa2638d3fdebd95b102ba1bc295321d31269af8b1010cc4170454709461da01c83bd88bc58d2e4377fa6cb615154df521ce80489ebe4a1f8c7b64b45e4aa6790f6146b4282376e4399d75f8aa8100d1bfd8a09e862ac18eb3a0952fb64a5b6545f50d439ed85a8dc62c83b4a15338065d85e715fc4ab4dbd2231eea10d4a7dd2d1e73503e39beec3b391d1678bf3a7cfd064f359e49bf7bf2bea923ac1321349a68186aac7828cdc722eaa50c8a1cbc6b6f9667fcb010085242ae9184ff307f7397391969897615599ffa1903890b3fa296993698281715e156f8003f74dc34cf70615dd95614532540926dbcff40bce9f72b3d9cc7832653ca0cd5b1582df710317045b3a1af3dff5b1d8e70e7050438b6c8e736bb2b247442d9f3c6df98f73e434cbb899c791854efa8d97be66716440001e542c5db1b34aa341e8ae20309f7f40c08f2aabbf25cd2560f2393d5f77adaf30385a8d5ed2a038e62510adc1612751b5261f0753a254d164b2ac595bee7ca63230531384b331af354b4bf1a7827764d4a17a40fe7d1d6af7c1b81f8318aa3345882bcf69a75ee5dfed72024a67cfced6227656884a52b922aa6bd3f5a98ee030e6c8a3ab240f42c6dd3ab07cacfe8920fdd90116ad15b626cfeddbaa4ae991bac8789386f096f8cea6f2ed92130a3215f42b2555baea793329aa6f14546ece5c7cc51e86691632715fefd11a6cbbe5adb2c8e550260a34934a4214cea164cdd252a3d33cd7c69b25984b6a957f748e1e99d49378b62f3a80091ebf55edae2022997caad9f8ea2645d97ca7e82db40e0fec827877287c5abd4d379a3e00a1b0cc87e2c1f0b92d7271b2415d85099dd6732e2433d87efe51f51f784280e3dad6dcd546eb48c3e7abdaaad04c75df9c05629b03375af459fd1096a02b43c46a7bfec0962c39c63358a0dc7c2fa0893d1585d7bf8a12f37eae7077fd8f1e37f1c9b738de9f41c243a5a497501238450a532a2e6c71800dfc3a9cec00cb26450b6fe8e59926ce38eef467341a6bbe8c222e959e5467673a8268605a9aaabd62880d8bfa8022d481958ca4045bbda8bad5e569140f51fb0887b09339f1bb97d166225578c3d97a7450f35cd33d5a0bf81506647afa1538c6c7783b6e390f64bee917e7912b55f18e25bf3e8756e20c5cf3c40db7fab1ed2e0210f215cd886677a077e7dc64b4edb3d939b5d2c0170b4117a61c0692d6a1f67af6597032919110661c49dee0d67b1c9c9d9e531907b67518a68f769cd86087be6543890141a0b5efba698ef8c4fa9597abe5cec6d0bac3053afb196c4551f6eba45aea19cb974e386d5de0551e5cb33c64d39125bef03599a6ffd6303231a693a86850e0bc00a4fb4c838d31f124b1bd3185d8ddb84d9db9e011533697a3eba3d6c62f43ad8468bf77a6b16dbe0eb6205245e25ce5127d315e300251186d274ac8271fe8416737ab16dc31c7aa85fa5b5e9dddfa7e68865a97103e89da86803a77c33abee794f589dfceed1e7105cfcf961f2e4bdb126ee0ff0c12b67100dc0768d8e8e66b367b1b4040d2d6811b03608360e1e6e7f5225d5e2aa0c1b4eae7e86c7407e78ec8700efa08bfd9dfae7891909e94dac811159e84b62e72598caa572ca6bd126ee564a53b300c1166d15abe043eb020f97f64b3ffa6ec077fed76e054e91d5904e16c73c1b2ddeb6d0e7f795d569c47aed53524ab9b72143d8d4b1531744bd3a692cb1c667c36b178f629427e53389d569bacaa5dd796c48ce58ebecdc82604117cb809a8a0a78f705dd74454b3324ee436b17e454f663b70b18d6490da33617b2d0446f8870e9192dab0dcff6f77321096618ac53538a357b88234e83a9e9910c363f6338cb9554803658491bbdda67d63c7142f7e134485bb98283fe0b9d8f93d9a7c7cf99c359b02a658bb6d34a69f161c6084644024c199a2b3f3bd629d8eb95b44a2d6ee7a3c393bdb354fb151f386ed76736502c5129675e0ccfed7a44f770a2d8615d17473e7a25985a3fd9f2ecbd938a2f32abe0e94e36ba02a0c4897612fecabcc0ba0e523b6b0a627b9346445f9028fc855b48d638975d2dd893dd8bf4b517e8a7c489f5a19e8b3949d438a2bab619bed191f1200b49e85f7548a4e1c8b5713dcd05bbf228d2a948c9f06bed481e304b21cfcd177398b9f3edd0de6326f1ecc25a4749833edf238220ff251b0b6bb36cec730d3497e694540403342c581be1e527739d81965b3cac11856e6be7d540796b340f923a74c4ab0ff7b2ad6234ecae0dbc1433bebea7e124d9eeb766ef8ac7f4aa4a2c24d6e8fdb45861dc6b1233cc63bfaaacbe4f141d1a7d0f61503f264e150b900bc73b39e700e98f6e900bd45508373cad2660bfffb4aa2b6be68092998dc52755fef0b327e9a58c5a9e7197975d9bbd901f566dc8200e44db9ce7e074c8dc09bcd1c2334ae1f37fce454f31b3fa22562f6051a0477b8414eee4dc0079cfcd5d539a1468f60b70c38fec0e6a1a80e8fe06ccec8cd46284e09b2d07afdffd440492602e213a1e593e81b5853a5e2ad8a0b50f096d22b867bd31b670aaa4e49d1f1e3492f668405b6952ccd2d377d704036fc8becbc8deda6ceef7fef85a517041f56c8238bf0c539c39ec815f4bf2633aed0680c0f7d0fe3b1dc54689e311c4c72d0a08cc4b183b8bbefbd677fab10ed8f539f4cce070d661c8f418668757983a32d00dd3be06ac8946a0b477f1e36a8cc6641056f7c167c0cbe0d302b58a5093f530a95fca9c433d0512ad4f2c5de67652ba89a786725296ed20a7", 0x9c}}, 0x80000001}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000001680)={0x3ff, 0x9b}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x61}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x400}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000054) 13:06:20 executing program 5: prctl$PR_MCE_KILL(0x21, 0x0, 0x1) 13:06:20 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x3, @vbi={0x2, 0x4, 0x8ad, 0x30395056, [0x0, 0x7], [0x3ff, 0x400], 0x1}}) 13:06:20 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x3, 0x4, 0x101, 0x84800}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x3, 0x4, 0x101, 0x84800}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:06:20 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d4fa5037"}, 0x0, 0x2, {0x0}}) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000440)={0x2, @pix={0x6, 0x344, 0x52424752, 0x7, 0x4, 0x100, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000001c0)={0x8, 0x3f, 0x4, {0x1, @win={{0x8, 0x40800, 0x9, 0x7ff}, 0x0, 0x6, &(0x7f0000000180)={{0x8, 0x1, 0x46e8, 0x1000}, &(0x7f0000000140)={{0x7f, 0x38b7, 0x8}, &(0x7f0000000100)={{0x10000000, 0xa44, 0x3f, 0x80000000}}}}, 0x40, &(0x7f0000000680)="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", 0x9c}}, 0x80000001}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000001680)={0x3ff, 0x9b}) (async) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x61}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x400}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000054) 13:06:20 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:06:20 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2}) 13:06:20 executing program 5: prctl$PR_MCE_KILL(0x21, 0x0, 0x1) 13:06:20 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r2, 0x5421, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x1) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000000c0)={0x1, @sdr={0x30324c4a, 0x7e3f}}) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x76, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x9, 0xfffffff8, 0x4e564058, 0x6, 0x247, 0xdb, 0x4, 0x100, 0x1, 0x2, 0x0, 0x2}}) 13:06:20 executing program 5: prctl$PR_MCE_KILL(0x21, 0x0, 0x1) 13:06:20 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x3, 0x4, 0x101, 0x84800}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x3, 0x4, 0x101, 0x84800}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) 13:06:20 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x104, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x2}, {0xfd}, {0x7, 0x7}, {0xd1}, {0x4, 0x6}, {0x2, 0x1}, {0x3, 0x2}, {0x20, 0x6}, {0x6}, {0x80, 0x5}], "d427ecce2a6e5bbc"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x89, 0x5}, {0x40, 0x6}, {0x3f, 0x2}, {0x0, 0x6}, {0x7}, {0x7f}], "a004d9d92938e2d7"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x1}, {0x6, 0x3}, {0x6, 0x1}, {0x45, 0x6}, {0x5, 0x1}, {0x1, 0x5}, {0x2, 0x2}, {0x9, 0x1}, {0x7, 0x1}, {0x4, 0x2}, {0x5}, {0xbc, 0x7}], "baabc20dff20ec65"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x3f, 0x3}, {0x6, 0x5}, {0x8, 0x3}, {0xc0}, {0xfc, 0x3}, {0x3d, 0x2}, {0x81, 0x5}, {0x3, 0x5}, {0x7, 0x7}], "87012b026cb8cd95"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x40, 0x3}, {0xfb, 0x7}, {0xfe}, {0x7f, 0x7}, {0x40, 0x5}, {0x7, 0x4}, {0xff, 0x4}, {0x6, 0x3}, {0x1, 0x3}, {0x62, 0x5}, {0x1, 0x5}], "dfae082c53ee05a0"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x5, 0x1}, {0x2, 0x2}, {0x7}, {0x31, 0x4}, {0x3, 0x1}, {0xed}, {0xd, 0x6}], "9e7abdb7dffa0c8f"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x0, 0x6}, {0x0, 0x3}, {0x8, 0x2}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x5}, {0x40, 0x2}, {0x9, 0x4}, {0x3, 0x5}, {0x37, 0x6}, {0x4, 0x3}, {0x81, 0x6}, {0x2, 0x4}, {0xb5, 0x4}, {0x4, 0x5}], "6d2a8a0748496481"}}]}, 0x104}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0xc}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x4c}}, 0x40001) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)={0x9a0, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x3f4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x9, 0x9, 0x4, 0x60, 0xc, 0xc, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x48, 0x6, 0x2, 0x6, 0x24, 0x5, 0x48, 0x30, 0x24, 0x7, 0x0, 0x36, 0x30, 0x36, 0x2, 0x4, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3c, 0x401, 0x86e4, 0x5, 0xfff, 0x400, 0x5, 0xfe8e]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x5, 0x60, 0x3116, 0x5b0, 0x7, 0x7, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x49, 0x5, 0x48, 0x6c, 0x2, 0x3, 0x3]}, @NL80211_TXRATE_HT={0x21, 0x2, [{}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x2}, {0x4, 0x2}, {0x0, 0x6}, {0x2, 0x5}, {0x2}, {0x0, 0x4}, {0x5, 0xa}, {0x1, 0x7}, {0x0, 0x5}, {0x2, 0x2}, {0x6, 0x2}, {0x2, 0x6}, {0x1, 0x2}, {0x6, 0x4}, {0x6, 0x4}, {0x0, 0x9}, {0x7, 0x7}, {0x3, 0x3}, {0x2, 0x9}, {0x1, 0xa}, {0x1, 0xa}, {0x0, 0x3}, {0x2, 0x9}, {0x0, 0x9}, {0x1, 0x5}, {0x6, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x36, 0x36, 0x6c, 0x2, 0xb, 0x0, 0x12, 0x4, 0xb, 0x1, 0x9, 0x60, 0x5, 0x24, 0x9, 0x3, 0x0, 0x1, 0xc5, 0x18, 0x18, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfa, 0x9, 0x0, 0x8, 0x7f, 0xfc00, 0x8, 0xffff]}}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4a, 0x9782, 0x7ff, 0x3, 0x5, 0x5, 0x6d6, 0x7]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x24, 0x9, 0x6c, 0x48, 0x5, 0xc, 0x2, 0xc, 0x18, 0x9, 0x6c, 0x1, 0x4e, 0x3, 0x3, 0x18, 0xb, 0x6]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xb, 0x4, 0x12, 0x65, 0x3, 0x16, 0x5, 0x12, 0x4, 0x3, 0xb, 0x60, 0x48, 0x6c, 0x12, 0x12, 0x2, 0x6, 0x67, 0x60, 0x16, 0x16, 0x4, 0x3, 0x60, 0x13, 0x0, 0x12, 0x4, 0x3, 0x28]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9db, 0x3, 0x7, 0x0, 0x5, 0x9, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x71ef, 0xa6, 0x5, 0x3, 0x7, 0x1, 0x1ff, 0xfffa]}}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x1, 0x9}, {0x6, 0x1}, {0x1, 0x8}, {0x3, 0x9}, {0x6, 0x1}, {}, {0x3}, {0x2, 0x4}, {0x6, 0x3}, {0x1, 0x3}, {0x5, 0x2}, {0x7, 0x4}, {0x6, 0x6}, {0x7, 0x5}, {0x6, 0xa}, {0x1, 0x2}, {0x3, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x37}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0x9, 0xcbf0, 0x1, 0x5, 0x8, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffc1, 0x1, 0x9, 0xf02e, 0x53f, 0xfff8, 0x7, 0x401]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x8, 0x369d, 0x20, 0x1000, 0x4, 0x8c8, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x7, 0x50ec, 0xc5e4, 0x3, 0x8, 0x37c]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x400, 0x1f, 0x8, 0x2, 0x3f, 0x8, 0x2]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0xb, 0x12, 0x1, 0x3, 0x24, 0x6c, 0x4, 0x9, 0x48, 0x12, 0x24, 0x16, 0x6c, 0x4, 0x6c, 0xc, 0x1, 0x9, 0x18, 0x6, 0x12, 0x6c, 0x2, 0x6, 0x3, 0x48, 0x1, 0x68]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x5, 0x8}, {0x2, 0x9}, {0x7, 0x9}, {0x6, 0x4}, {0x1, 0xa}, {0x6, 0x6}, {0x0, 0x2}, {0x0, 0x9}, {0x5, 0x5}, {0x4, 0x5}, {}, {0x1, 0x2}, {0x7, 0x2}, {0x3, 0x7}, {0x6, 0x3}, {0x5, 0xa}, {0x5, 0x8}, {0x2, 0x9}, {0x0, 0x8}, {0x5, 0x9}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x8}, {0x1, 0xa}, {0x0, 0x3}, {0x4, 0x3}, {0x7, 0x8}, {0x2, 0x5}, {0x4, 0x2}, {0x7, 0x2}, {0x6, 0x8}, {0x7, 0x3}, {0x1, 0x7}, {0x6}, {0x6, 0x4}, {0x2, 0x1}, {0x4, 0x8}, {0x6, 0x2}, {0x5, 0x6}, {0x6}, {0x3, 0x3}, {0x4, 0x3}, {0x7, 0xa}, {0x7, 0x4}, {0x4, 0x7}, {0x6, 0x1}, {}, {0x6}, {0x2, 0x5}, {0x1, 0x9}, {0x0, 0x8}, {0x4, 0x1}, {0x7}]}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x80, 0x5, 0x200, 0xe18, 0xb1, 0x9, 0x1ba8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x16, 0x24, 0xc, 0x24, 0x6c, 0x9, 0x4, 0x9, 0x3, 0x24, 0x12, 0x24, 0x1, 0x1b, 0x12, 0x6, 0xc, 0xc, 0x18, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf6, 0x4, 0x3, 0x0, 0x1000, 0xe76, 0x49a, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0x1, 0x12, 0x1b, 0x1b, 0x5, 0x6c, 0x6c, 0xb, 0xb, 0x60, 0x2, 0x1, 0x1, 0x5, 0x5, 0x36, 0x3, 0x5a, 0xb, 0x48, 0x30, 0x4, 0x5, 0x1, 0xc, 0x6c, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x1, 0xff, 0x27e, 0x30, 0x8, 0x400]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff79, 0x8001, 0x8, 0x6ed6, 0x3, 0x8, 0x2, 0xfff7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x9, 0xc, 0x60, 0x48, 0xc, 0x78, 0x48, 0x4, 0x6, 0x5, 0x16, 0x6c, 0x24, 0x24, 0x4, 0x60, 0x60, 0x5, 0x3, 0x0, 0x5]}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x51, 0x2, [{0x4, 0x8}, {}, {0x1, 0xa}, {0x6, 0x7}, {0x0, 0x5}, {0x5, 0x3}, {0x4, 0x4}, {0x6, 0xa}, {0x3, 0x8}, {0x2, 0x1}, {0x0, 0x4}, {}, {0x4, 0xa}, {0x6, 0x2}, {0x1, 0x4}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x4, 0x6}, {0x5}, {0x0, 0x8}, {0x0, 0x2}, {0x3}, {0x7, 0xa}, {0x4, 0xa}, {0x7}, {0x7, 0x2}, {0x4, 0x6}, {0x6, 0x7}, {0x7, 0x1}, {0x1, 0x6}, {0x4, 0x4}, {0x0, 0x6}, {0x2, 0x5}, {0x3, 0x9}, {0x0, 0x6}, {0x7, 0x8}, {0x3, 0x3}, {0x0, 0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x9}, {0x6, 0x9}, {0x3, 0x3}, {0x6, 0x9}, {0x2, 0x8}, {0x5, 0x9}, {0x4, 0x3}, {0x7, 0x3}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x6}, {0x2, 0x5}, {0x1, 0x9}, {0x2, 0x8}, {0x1, 0x1}, {0x6, 0xa}, {0x4, 0x2}, {0x1, 0x9}, {0x3, 0x4}, {0x2, 0x3}, {0x2, 0xa}, {0x7}, {0x1}, {0x3, 0x1}, {0x6, 0x6}, {0x4}, {0x3, 0x2}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x8}, {0x1, 0x1}, {0x5, 0x8}, {0x5, 0x6}, {0x1, 0x4}, {}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xff, 0x200, 0x6, 0xffdf, 0x6, 0xfffe, 0x7ff]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xec8, 0x3, 0x70, 0x5, 0x4, 0x6, 0x1]}}]}]}, @NL80211_ATTR_TX_RATES={0x8c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x5, 0x3}, {0x7, 0x4}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x90, 0xc, 0x30, 0x1, 0x48, 0x0, 0x6c, 0x16, 0x6c, 0x66, 0x16, 0x3, 0x12, 0x30, 0x18, 0x48, 0x24, 0x7c, 0x12, 0x66, 0x9, 0x3, 0x24, 0x60, 0xc, 0x12, 0x12, 0x36, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x7, 0x2, 0x8000, 0x7ff, 0x5, 0xd90d]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x4}, {0x1, 0xa}, {0x3, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xf9, 0xb8e1, 0x7fff, 0x3800, 0x5, 0x7, 0x400]}}]}]}, @NL80211_ATTR_TX_RATES={0x390, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0xffc1, 0x100, 0x7, 0x3, 0xdc4, 0xfe0f, 0x4b]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x2, 0x1b, 0x1, 0x0, 0x60, 0x0, 0x36, 0x30, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x8, 0x5, 0x8, 0x20, 0x73]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xc4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x5, 0x1}, {0x2, 0x9}, {0x6, 0x5}, {0x3, 0x3}, {0x2, 0x4}, {0x0, 0x1a}, {0x4}, {0x3, 0x2}, {0x5, 0xa}, {0x6, 0x9}, {0x1, 0x2}, {0x1}, {0x3, 0x6}, {0x2, 0x6}, {0x1, 0x5}, {0x3, 0x6}, {0x0, 0x2}, {0x5, 0x2}, {0x2, 0x9}, {0x7}, {0x1}, {0x2, 0x8}, {0x1, 0x2}, {0x6, 0x2}, {0x5, 0x6}, {0x1, 0x6}, {0x4, 0x8}, {0x5, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5d15, 0x1f, 0x4, 0x0, 0x8000, 0x800, 0x2, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x30, 0x6, 0x5, 0x1b, 0x60, 0xc, 0x60, 0x9, 0x16, 0x24, 0x3, 0x24, 0x6, 0x60, 0x36, 0x30, 0xc, 0xc, 0x16, 0x9]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x5, 0x1}, {0x2, 0xa}, {0x2, 0x9}, {0x0, 0x8}, {0x2, 0x9}, {0x2, 0x5}, {0x7, 0x5}, {0x5, 0x8}, {0x3, 0x3}, {0x3, 0x9}, {0x1, 0x3}, {0x7, 0x7}, {0x7, 0x4}, {0x1, 0x2}, {0x0, 0x7}, {}, {0x1, 0x4}, {0x6, 0x5}, {0x4, 0x5}, {0x5, 0x8}, {0x0, 0x2}, {0x4, 0x5}, {0x1, 0x6}, {0x2, 0xa}, {0x0, 0x8}, {0x3}, {}, {0x4, 0x8}, {0x4, 0x9}, {0x1, 0x2}, {0x7, 0x4}, {0x0, 0x7}, {0x2, 0x5}, {0x4, 0x4}, {0x4, 0x7}, {0x7, 0x6}, {0x4, 0x3}, {0x1, 0x8}, {0x1, 0x3}, {0x7, 0x1}, {0x7, 0x9}, {0x5, 0x4}, {0x4, 0x8}, {0x1, 0x2}, {0x5, 0x3}, {0x5, 0x9}, {0x7, 0x2}, {0x2, 0x4}, {0x6, 0x7}, {0x2, 0x1d}, {0x7, 0x7}, {0x0, 0x9}, {0x2, 0x5}, {0x7, 0xa}, {0x6, 0x4}, {0x2, 0x7}, {0x4, 0x3}, {0x4, 0x6}, {0x6, 0x3}, {0x5, 0x1}, {0x6, 0x3}, {0x6, 0x2}, {0x7, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0xfffd, 0xff45, 0x0, 0x0, 0x7, 0x0, 0xfff7]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6c, 0x12, 0x60, 0x11]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x6a, 0x1, 0x5, 0x1, 0x4, 0x401, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x7f, 0xfaf9, 0x9, 0x4, 0xff80, 0x8885]}}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xd7c9, 0x9ee, 0x0, 0x100, 0x5, 0x20, 0x1000, 0x2]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x5, 0x2}, {0x7}, {0x2, 0x5}, {0x6, 0x8}, {0x7, 0x3}, {0x3, 0x6}, {0x5, 0x4}, {0x0, 0xa}, {0x1, 0x3}, {0x7, 0x8}, {0x1, 0x1}, {0x4, 0x4}, {0x3, 0x2}, {0x1, 0x9}, {0x0, 0x6}, {0x2, 0x4}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x6}, {0x2, 0x8}, {0x4, 0xa}, {0x1, 0x4}, {0x0, 0x3}, {0x2, 0xa}, {0x6, 0x8}, {0x2, 0x4}, {0x5, 0x2}, {0x6, 0x3}, {0x7, 0x4}, {0x5, 0x6}, {0x1, 0x7}, {0x6, 0x9}, {0x5, 0x2}, {0x0, 0xa}, {0x0, 0x6}, {0x4, 0x7}, {0x7, 0x2}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x48, 0x60, 0x9, 0x3, 0x16, 0x0, 0x5, 0xc092a21105898e3e, 0xc, 0x9, 0x16, 0x6c, 0x48, 0x1, 0x9, 0x1]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x7, 0x9cc2, 0x7, 0x6, 0x128]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x2, 0x3, 0xfff7, 0x3, 0x1, 0x9, 0xb1a]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x1, 0x2, 0xf801, 0x100, 0x8001, 0x5]}}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x76, 0x7, 0x1000, 0xfff, 0x200, 0x4, 0xfff7, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x1, 0x3f, 0x6, 0x5a29, 0x7, 0x7ff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1ff, 0x80, 0x9, 0x5813, 0x90, 0x4, 0xe1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x2, 0x9}, {0x6}, {0x3, 0x1}, {0x2, 0x9}, {0x1, 0x2}, {0x2, 0x7}, {0x3, 0x3}, {0x0, 0x6}, {0x1, 0x1}, {0x4, 0x4}, {0x3}, {0x1, 0x6}, {0x3, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x0, 0x6}, {0x4, 0x3}, {0x7, 0x5}, {0x6, 0x7}, {0x3}, {0x7, 0x3}, {0x3, 0xa}, {0x2, 0x5}, {0x0, 0x6}, {0x5}, {0x0, 0x9}, {0x6, 0x2}, {0x2, 0x8}, {0x1, 0x5}, {0x5, 0x4}, {0x5, 0x1}, {0x7, 0x5}, {0x2, 0xa}, {0x3, 0x8}, {0x3, 0x5}, {0x6, 0x9}, {0x4, 0x3}, {0x1, 0x8}, {0x1, 0xa}, {0x7, 0x1d}, {0x7, 0x1}, {0x2, 0x7}, {0x2, 0x4}, {0x5, 0x16}, {0x1, 0x5}, {0x4, 0x5}, {0x1, 0x5}, {0x1, 0xa}, {0x2, 0x7}, {0x1, 0x2}, {0x1, 0x3}, {0x4, 0x1}, {0x0, 0xa}, {}, {0x1, 0x6}, {0x6, 0x7}, {0x2, 0x5}, {0x2, 0x3}, {0x1, 0x9}, {0x0, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3e35, 0x5, 0x9, 0x1, 0x3ff, 0x58ef, 0x7, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xaba, 0x9, 0x1, 0x3, 0xb05, 0xb0, 0x20, 0xff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x98, 0x6, 0x859, 0x5, 0xfff9, 0x0, 0x10, 0x800]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xbf, 0x200, 0x400, 0x1, 0x7ab, 0x7fff, 0x1]}}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x4, 0x48, 0x24, 0x6c, 0x9, 0x2, 0x4, 0x6c, 0xb, 0x12, 0x36, 0x36, 0x30, 0x0, 0x6, 0x16, 0x48, 0x60, 0x6c, 0x12, 0x36, 0x2, 0x18, 0x16, 0x1b, 0xb, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x33a, 0x1ff, 0x1, 0x7, 0x9, 0x2, 0x128]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x9, 0x1, 0x2, 0x7f, 0x6, 0x6, 0x8000]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x99fcf7aaeb194b64, 0x9, 0x3, 0x1b, 0x0, 0x1, 0x9, 0xc, 0x18, 0x5, 0x1b, 0x4, 0xc, 0x1b, 0x60, 0xc, 0x1, 0x5, 0x36, 0x16, 0x16, 0xc, 0x3, 0xb, 0x16, 0x18, 0x12, 0x12, 0x1]}]}]}, @NL80211_ATTR_TX_RATES={0x174, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0xa3, 0x0, 0x101, 0x2, 0x1, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x975, 0x1, 0xb637, 0x1, 0x7, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x81, 0x100, 0xf801, 0xff, 0x2, 0x6, 0x7f]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x5, 0x5, 0x36, 0x6, 0x5, 0x9, 0x48, 0x9, 0x6c, 0x0, 0x60, 0x5, 0x12, 0x24, 0x68cffd7f130d2a70, 0xb, 0x3, 0xc, 0xc, 0xc, 0x48, 0xc, 0x5]}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1, 0x30, 0x6c, 0x16, 0xf2e4f248183dbf3, 0x45, 0x30, 0x5, 0xc0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x0, 0x101, 0x3, 0x4, 0x9, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfffd, 0x80, 0x8, 0x5a84, 0x3, 0xd]}}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x24, 0x36, 0x4c, 0x60, 0x3, 0x3c, 0x3, 0x0, 0x60, 0x24, 0x1b, 0x2, 0x6c, 0x5]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x5, 0xa}, {0x5, 0x9}, {0x0, 0x4}, {0x4, 0x2}, {0x4, 0x9}, {0x7, 0x1}, {0x3, 0x1}, {0x5, 0x6}, {0x3, 0x4}, {0x4, 0x4}, {0x2, 0x9}, {0x2, 0x8}, {0x5, 0xa}, {0x7, 0xa}, {0x7, 0x5}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x3}, {0x4, 0x3}, {0x3, 0x2}, {0x6, 0x9}, {0x0, 0x3}, {0x0, 0xa}, {0x7}, {0x6, 0x5}, {0x2, 0xa}, {0x7, 0x8}, {0x2, 0x5}, {0x2, 0x8}, {0x4, 0x3}]}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x5, 0x0, 0x3f, 0x200, 0x200, 0x101]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x2, 0x5}, {0x3}, {0x2}, {0x3, 0x5}, {0x2, 0x3}, {0x3, 0x4}, {0x1, 0x3}, {0x5, 0x3}, {0x4, 0x2}, {0x2, 0x7}, {0x0, 0x2}, {0x7, 0x1}, {0x5, 0x1}, {0x4, 0xa}, {0x6, 0x7}, {0x0, 0xa}, {0x6, 0x1}, {0x7, 0xa}, {0x0, 0x4}, {0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0x7, 0x8000, 0xe91, 0x8, 0x0, 0x7]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb95c, 0x1, 0x7, 0x5, 0xf6f1, 0xfffe, 0x7, 0x2]}}]}]}]}, 0x9a0}, 0x1, 0x0, 0x0, 0x24004810}, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000001080)=0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r1) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x28, r5, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x6b}, @void, @val={0xc, 0x99, {0x1, 0x3b}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x84) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000200)={0x1ff, 0xcc6, 0x4, {0x3, @vbi={0x7, 0x1ff, 0x1, 0x52424752, [0x3, 0x8], [0x401, 0x100], 0x3}}, 0x1ff}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:06:20 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d4fa5037"}, 0x0, 0x2, {0x0}}) (async) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000440)={0x2, @pix={0x6, 0x344, 0x52424752, 0x7, 0x4, 0x100, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1}}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000001c0)={0x8, 0x3f, 0x4, {0x1, @win={{0x8, 0x40800, 0x9, 0x7ff}, 0x0, 0x6, &(0x7f0000000180)={{0x8, 0x1, 0x46e8, 0x1000}, &(0x7f0000000140)={{0x7f, 0x38b7, 0x8}, &(0x7f0000000100)={{0x10000000, 0xa44, 0x3f, 0x80000000}}}}, 0x40, &(0x7f0000000680)="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", 0x9c}}, 0x80000001}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000001680)={0x3ff, 0x9b}) (async) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x61}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x400}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000054) 13:06:20 executing program 0: prctl$PR_MCE_KILL(0x21, 0x0, 0x1) 13:06:20 executing program 5: prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 13:06:20 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r2, 0x5421, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x1) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000080)) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000000c0)={0x1, @sdr={0x30324c4a, 0x7e3f}}) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x76, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x9, 0xfffffff8, 0x4e564058, 0x6, 0x247, 0xdb, 0x4, 0x100, 0x1, 0x2, 0x0, 0x2}}) 13:06:20 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x1}}) 13:06:21 executing program 0: prctl$PR_MCE_KILL(0x21, 0x0, 0x1) 13:06:21 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:06:21 executing program 5: prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 13:06:21 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) (async, rerun: 64) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x104, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x2}, {0xfd}, {0x7, 0x7}, {0xd1}, {0x4, 0x6}, {0x2, 0x1}, {0x3, 0x2}, {0x20, 0x6}, {0x6}, {0x80, 0x5}], "d427ecce2a6e5bbc"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x89, 0x5}, {0x40, 0x6}, {0x3f, 0x2}, {0x0, 0x6}, {0x7}, {0x7f}], "a004d9d92938e2d7"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x1}, {0x6, 0x3}, {0x6, 0x1}, {0x45, 0x6}, {0x5, 0x1}, {0x1, 0x5}, {0x2, 0x2}, {0x9, 0x1}, {0x7, 0x1}, {0x4, 0x2}, {0x5}, {0xbc, 0x7}], "baabc20dff20ec65"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x3f, 0x3}, {0x6, 0x5}, {0x8, 0x3}, {0xc0}, {0xfc, 0x3}, {0x3d, 0x2}, {0x81, 0x5}, {0x3, 0x5}, {0x7, 0x7}], "87012b026cb8cd95"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x40, 0x3}, {0xfb, 0x7}, {0xfe}, {0x7f, 0x7}, {0x40, 0x5}, {0x7, 0x4}, {0xff, 0x4}, {0x6, 0x3}, {0x1, 0x3}, {0x62, 0x5}, {0x1, 0x5}], "dfae082c53ee05a0"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x5, 0x1}, {0x2, 0x2}, {0x7}, {0x31, 0x4}, {0x3, 0x1}, {0xed}, {0xd, 0x6}], "9e7abdb7dffa0c8f"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x0, 0x6}, {0x0, 0x3}, {0x8, 0x2}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x5}, {0x40, 0x2}, {0x9, 0x4}, {0x3, 0x5}, {0x37, 0x6}, {0x4, 0x3}, {0x81, 0x6}, {0x2, 0x4}, {0xb5, 0x4}, {0x4, 0x5}], "6d2a8a0748496481"}}]}, 0x104}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) (async, rerun: 64) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0xc}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x4c}}, 0x40001) (rerun: 64) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)={0x9a0, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x3f4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x9, 0x9, 0x4, 0x60, 0xc, 0xc, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x48, 0x6, 0x2, 0x6, 0x24, 0x5, 0x48, 0x30, 0x24, 0x7, 0x0, 0x36, 0x30, 0x36, 0x2, 0x4, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3c, 0x401, 0x86e4, 0x5, 0xfff, 0x400, 0x5, 0xfe8e]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x5, 0x60, 0x3116, 0x5b0, 0x7, 0x7, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x49, 0x5, 0x48, 0x6c, 0x2, 0x3, 0x3]}, @NL80211_TXRATE_HT={0x21, 0x2, [{}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x2}, {0x4, 0x2}, {0x0, 0x6}, {0x2, 0x5}, {0x2}, {0x0, 0x4}, {0x5, 0xa}, {0x1, 0x7}, {0x0, 0x5}, {0x2, 0x2}, {0x6, 0x2}, {0x2, 0x6}, {0x1, 0x2}, {0x6, 0x4}, {0x6, 0x4}, {0x0, 0x9}, {0x7, 0x7}, {0x3, 0x3}, {0x2, 0x9}, {0x1, 0xa}, {0x1, 0xa}, {0x0, 0x3}, {0x2, 0x9}, {0x0, 0x9}, {0x1, 0x5}, {0x6, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x36, 0x36, 0x6c, 0x2, 0xb, 0x0, 0x12, 0x4, 0xb, 0x1, 0x9, 0x60, 0x5, 0x24, 0x9, 0x3, 0x0, 0x1, 0xc5, 0x18, 0x18, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfa, 0x9, 0x0, 0x8, 0x7f, 0xfc00, 0x8, 0xffff]}}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4a, 0x9782, 0x7ff, 0x3, 0x5, 0x5, 0x6d6, 0x7]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x24, 0x9, 0x6c, 0x48, 0x5, 0xc, 0x2, 0xc, 0x18, 0x9, 0x6c, 0x1, 0x4e, 0x3, 0x3, 0x18, 0xb, 0x6]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xb, 0x4, 0x12, 0x65, 0x3, 0x16, 0x5, 0x12, 0x4, 0x3, 0xb, 0x60, 0x48, 0x6c, 0x12, 0x12, 0x2, 0x6, 0x67, 0x60, 0x16, 0x16, 0x4, 0x3, 0x60, 0x13, 0x0, 0x12, 0x4, 0x3, 0x28]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9db, 0x3, 0x7, 0x0, 0x5, 0x9, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x71ef, 0xa6, 0x5, 0x3, 0x7, 0x1, 0x1ff, 0xfffa]}}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x1, 0x9}, {0x6, 0x1}, {0x1, 0x8}, {0x3, 0x9}, {0x6, 0x1}, {}, {0x3}, {0x2, 0x4}, {0x6, 0x3}, {0x1, 0x3}, {0x5, 0x2}, {0x7, 0x4}, {0x6, 0x6}, {0x7, 0x5}, {0x6, 0xa}, {0x1, 0x2}, {0x3, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x37}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0x9, 0xcbf0, 0x1, 0x5, 0x8, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffc1, 0x1, 0x9, 0xf02e, 0x53f, 0xfff8, 0x7, 0x401]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x8, 0x369d, 0x20, 0x1000, 0x4, 0x8c8, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x7, 0x50ec, 0xc5e4, 0x3, 0x8, 0x37c]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x400, 0x1f, 0x8, 0x2, 0x3f, 0x8, 0x2]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0xb, 0x12, 0x1, 0x3, 0x24, 0x6c, 0x4, 0x9, 0x48, 0x12, 0x24, 0x16, 0x6c, 0x4, 0x6c, 0xc, 0x1, 0x9, 0x18, 0x6, 0x12, 0x6c, 0x2, 0x6, 0x3, 0x48, 0x1, 0x68]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x5, 0x8}, {0x2, 0x9}, {0x7, 0x9}, {0x6, 0x4}, {0x1, 0xa}, {0x6, 0x6}, {0x0, 0x2}, {0x0, 0x9}, {0x5, 0x5}, {0x4, 0x5}, {}, {0x1, 0x2}, {0x7, 0x2}, {0x3, 0x7}, {0x6, 0x3}, {0x5, 0xa}, {0x5, 0x8}, {0x2, 0x9}, {0x0, 0x8}, {0x5, 0x9}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x8}, {0x1, 0xa}, {0x0, 0x3}, {0x4, 0x3}, {0x7, 0x8}, {0x2, 0x5}, {0x4, 0x2}, {0x7, 0x2}, {0x6, 0x8}, {0x7, 0x3}, {0x1, 0x7}, {0x6}, {0x6, 0x4}, {0x2, 0x1}, {0x4, 0x8}, {0x6, 0x2}, {0x5, 0x6}, {0x6}, {0x3, 0x3}, {0x4, 0x3}, {0x7, 0xa}, {0x7, 0x4}, {0x4, 0x7}, {0x6, 0x1}, {}, {0x6}, {0x2, 0x5}, {0x1, 0x9}, {0x0, 0x8}, {0x4, 0x1}, {0x7}]}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x80, 0x5, 0x200, 0xe18, 0xb1, 0x9, 0x1ba8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x16, 0x24, 0xc, 0x24, 0x6c, 0x9, 0x4, 0x9, 0x3, 0x24, 0x12, 0x24, 0x1, 0x1b, 0x12, 0x6, 0xc, 0xc, 0x18, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf6, 0x4, 0x3, 0x0, 0x1000, 0xe76, 0x49a, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0x1, 0x12, 0x1b, 0x1b, 0x5, 0x6c, 0x6c, 0xb, 0xb, 0x60, 0x2, 0x1, 0x1, 0x5, 0x5, 0x36, 0x3, 0x5a, 0xb, 0x48, 0x30, 0x4, 0x5, 0x1, 0xc, 0x6c, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x1, 0xff, 0x27e, 0x30, 0x8, 0x400]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff79, 0x8001, 0x8, 0x6ed6, 0x3, 0x8, 0x2, 0xfff7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x9, 0xc, 0x60, 0x48, 0xc, 0x78, 0x48, 0x4, 0x6, 0x5, 0x16, 0x6c, 0x24, 0x24, 0x4, 0x60, 0x60, 0x5, 0x3, 0x0, 0x5]}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x51, 0x2, [{0x4, 0x8}, {}, {0x1, 0xa}, {0x6, 0x7}, {0x0, 0x5}, {0x5, 0x3}, {0x4, 0x4}, {0x6, 0xa}, {0x3, 0x8}, {0x2, 0x1}, {0x0, 0x4}, {}, {0x4, 0xa}, {0x6, 0x2}, {0x1, 0x4}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x4, 0x6}, {0x5}, {0x0, 0x8}, {0x0, 0x2}, {0x3}, {0x7, 0xa}, {0x4, 0xa}, {0x7}, {0x7, 0x2}, {0x4, 0x6}, {0x6, 0x7}, {0x7, 0x1}, {0x1, 0x6}, {0x4, 0x4}, {0x0, 0x6}, {0x2, 0x5}, {0x3, 0x9}, {0x0, 0x6}, {0x7, 0x8}, {0x3, 0x3}, {0x0, 0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x9}, {0x6, 0x9}, {0x3, 0x3}, {0x6, 0x9}, {0x2, 0x8}, {0x5, 0x9}, {0x4, 0x3}, {0x7, 0x3}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x6}, {0x2, 0x5}, {0x1, 0x9}, {0x2, 0x8}, {0x1, 0x1}, {0x6, 0xa}, {0x4, 0x2}, {0x1, 0x9}, {0x3, 0x4}, {0x2, 0x3}, {0x2, 0xa}, {0x7}, {0x1}, {0x3, 0x1}, {0x6, 0x6}, {0x4}, {0x3, 0x2}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x8}, {0x1, 0x1}, {0x5, 0x8}, {0x5, 0x6}, {0x1, 0x4}, {}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xff, 0x200, 0x6, 0xffdf, 0x6, 0xfffe, 0x7ff]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xec8, 0x3, 0x70, 0x5, 0x4, 0x6, 0x1]}}]}]}, @NL80211_ATTR_TX_RATES={0x8c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x5, 0x3}, {0x7, 0x4}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x90, 0xc, 0x30, 0x1, 0x48, 0x0, 0x6c, 0x16, 0x6c, 0x66, 0x16, 0x3, 0x12, 0x30, 0x18, 0x48, 0x24, 0x7c, 0x12, 0x66, 0x9, 0x3, 0x24, 0x60, 0xc, 0x12, 0x12, 0x36, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x7, 0x2, 0x8000, 0x7ff, 0x5, 0xd90d]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x4}, {0x1, 0xa}, {0x3, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xf9, 0xb8e1, 0x7fff, 0x3800, 0x5, 0x7, 0x400]}}]}]}, @NL80211_ATTR_TX_RATES={0x390, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0xffc1, 0x100, 0x7, 0x3, 0xdc4, 0xfe0f, 0x4b]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x2, 0x1b, 0x1, 0x0, 0x60, 0x0, 0x36, 0x30, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x8, 0x5, 0x8, 0x20, 0x73]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xc4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x5, 0x1}, {0x2, 0x9}, {0x6, 0x5}, {0x3, 0x3}, {0x2, 0x4}, {0x0, 0x1a}, {0x4}, {0x3, 0x2}, {0x5, 0xa}, {0x6, 0x9}, {0x1, 0x2}, {0x1}, {0x3, 0x6}, {0x2, 0x6}, {0x1, 0x5}, {0x3, 0x6}, {0x0, 0x2}, {0x5, 0x2}, {0x2, 0x9}, {0x7}, {0x1}, {0x2, 0x8}, {0x1, 0x2}, {0x6, 0x2}, {0x5, 0x6}, {0x1, 0x6}, {0x4, 0x8}, {0x5, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5d15, 0x1f, 0x4, 0x0, 0x8000, 0x800, 0x2, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x30, 0x6, 0x5, 0x1b, 0x60, 0xc, 0x60, 0x9, 0x16, 0x24, 0x3, 0x24, 0x6, 0x60, 0x36, 0x30, 0xc, 0xc, 0x16, 0x9]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x5, 0x1}, {0x2, 0xa}, {0x2, 0x9}, {0x0, 0x8}, {0x2, 0x9}, {0x2, 0x5}, {0x7, 0x5}, {0x5, 0x8}, {0x3, 0x3}, {0x3, 0x9}, {0x1, 0x3}, {0x7, 0x7}, {0x7, 0x4}, {0x1, 0x2}, {0x0, 0x7}, {}, {0x1, 0x4}, {0x6, 0x5}, {0x4, 0x5}, {0x5, 0x8}, {0x0, 0x2}, {0x4, 0x5}, {0x1, 0x6}, {0x2, 0xa}, {0x0, 0x8}, {0x3}, {}, {0x4, 0x8}, {0x4, 0x9}, {0x1, 0x2}, {0x7, 0x4}, {0x0, 0x7}, {0x2, 0x5}, {0x4, 0x4}, {0x4, 0x7}, {0x7, 0x6}, {0x4, 0x3}, {0x1, 0x8}, {0x1, 0x3}, {0x7, 0x1}, {0x7, 0x9}, {0x5, 0x4}, {0x4, 0x8}, {0x1, 0x2}, {0x5, 0x3}, {0x5, 0x9}, {0x7, 0x2}, {0x2, 0x4}, {0x6, 0x7}, {0x2, 0x1d}, {0x7, 0x7}, {0x0, 0x9}, {0x2, 0x5}, {0x7, 0xa}, {0x6, 0x4}, {0x2, 0x7}, {0x4, 0x3}, {0x4, 0x6}, {0x6, 0x3}, {0x5, 0x1}, {0x6, 0x3}, {0x6, 0x2}, {0x7, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0xfffd, 0xff45, 0x0, 0x0, 0x7, 0x0, 0xfff7]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6c, 0x12, 0x60, 0x11]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x6a, 0x1, 0x5, 0x1, 0x4, 0x401, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x7f, 0xfaf9, 0x9, 0x4, 0xff80, 0x8885]}}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xd7c9, 0x9ee, 0x0, 0x100, 0x5, 0x20, 0x1000, 0x2]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x5, 0x2}, {0x7}, {0x2, 0x5}, {0x6, 0x8}, {0x7, 0x3}, {0x3, 0x6}, {0x5, 0x4}, {0x0, 0xa}, {0x1, 0x3}, {0x7, 0x8}, {0x1, 0x1}, {0x4, 0x4}, {0x3, 0x2}, {0x1, 0x9}, {0x0, 0x6}, {0x2, 0x4}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x6}, {0x2, 0x8}, {0x4, 0xa}, {0x1, 0x4}, {0x0, 0x3}, {0x2, 0xa}, {0x6, 0x8}, {0x2, 0x4}, {0x5, 0x2}, {0x6, 0x3}, {0x7, 0x4}, {0x5, 0x6}, {0x1, 0x7}, {0x6, 0x9}, {0x5, 0x2}, {0x0, 0xa}, {0x0, 0x6}, {0x4, 0x7}, {0x7, 0x2}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x48, 0x60, 0x9, 0x3, 0x16, 0x0, 0x5, 0xc092a21105898e3e, 0xc, 0x9, 0x16, 0x6c, 0x48, 0x1, 0x9, 0x1]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x7, 0x9cc2, 0x7, 0x6, 0x128]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x2, 0x3, 0xfff7, 0x3, 0x1, 0x9, 0xb1a]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x1, 0x2, 0xf801, 0x100, 0x8001, 0x5]}}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x76, 0x7, 0x1000, 0xfff, 0x200, 0x4, 0xfff7, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x1, 0x3f, 0x6, 0x5a29, 0x7, 0x7ff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1ff, 0x80, 0x9, 0x5813, 0x90, 0x4, 0xe1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x2, 0x9}, {0x6}, {0x3, 0x1}, {0x2, 0x9}, {0x1, 0x2}, {0x2, 0x7}, {0x3, 0x3}, {0x0, 0x6}, {0x1, 0x1}, {0x4, 0x4}, {0x3}, {0x1, 0x6}, {0x3, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x0, 0x6}, {0x4, 0x3}, {0x7, 0x5}, {0x6, 0x7}, {0x3}, {0x7, 0x3}, {0x3, 0xa}, {0x2, 0x5}, {0x0, 0x6}, {0x5}, {0x0, 0x9}, {0x6, 0x2}, {0x2, 0x8}, {0x1, 0x5}, {0x5, 0x4}, {0x5, 0x1}, {0x7, 0x5}, {0x2, 0xa}, {0x3, 0x8}, {0x3, 0x5}, {0x6, 0x9}, {0x4, 0x3}, {0x1, 0x8}, {0x1, 0xa}, {0x7, 0x1d}, {0x7, 0x1}, {0x2, 0x7}, {0x2, 0x4}, {0x5, 0x16}, {0x1, 0x5}, {0x4, 0x5}, {0x1, 0x5}, {0x1, 0xa}, {0x2, 0x7}, {0x1, 0x2}, {0x1, 0x3}, {0x4, 0x1}, {0x0, 0xa}, {}, {0x1, 0x6}, {0x6, 0x7}, {0x2, 0x5}, {0x2, 0x3}, {0x1, 0x9}, {0x0, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3e35, 0x5, 0x9, 0x1, 0x3ff, 0x58ef, 0x7, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xaba, 0x9, 0x1, 0x3, 0xb05, 0xb0, 0x20, 0xff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x98, 0x6, 0x859, 0x5, 0xfff9, 0x0, 0x10, 0x800]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xbf, 0x200, 0x400, 0x1, 0x7ab, 0x7fff, 0x1]}}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x4, 0x48, 0x24, 0x6c, 0x9, 0x2, 0x4, 0x6c, 0xb, 0x12, 0x36, 0x36, 0x30, 0x0, 0x6, 0x16, 0x48, 0x60, 0x6c, 0x12, 0x36, 0x2, 0x18, 0x16, 0x1b, 0xb, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x33a, 0x1ff, 0x1, 0x7, 0x9, 0x2, 0x128]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x9, 0x1, 0x2, 0x7f, 0x6, 0x6, 0x8000]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x99fcf7aaeb194b64, 0x9, 0x3, 0x1b, 0x0, 0x1, 0x9, 0xc, 0x18, 0x5, 0x1b, 0x4, 0xc, 0x1b, 0x60, 0xc, 0x1, 0x5, 0x36, 0x16, 0x16, 0xc, 0x3, 0xb, 0x16, 0x18, 0x12, 0x12, 0x1]}]}]}, @NL80211_ATTR_TX_RATES={0x174, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0xa3, 0x0, 0x101, 0x2, 0x1, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x975, 0x1, 0xb637, 0x1, 0x7, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x81, 0x100, 0xf801, 0xff, 0x2, 0x6, 0x7f]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x5, 0x5, 0x36, 0x6, 0x5, 0x9, 0x48, 0x9, 0x6c, 0x0, 0x60, 0x5, 0x12, 0x24, 0x68cffd7f130d2a70, 0xb, 0x3, 0xc, 0xc, 0xc, 0x48, 0xc, 0x5]}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1, 0x30, 0x6c, 0x16, 0xf2e4f248183dbf3, 0x45, 0x30, 0x5, 0xc0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x0, 0x101, 0x3, 0x4, 0x9, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfffd, 0x80, 0x8, 0x5a84, 0x3, 0xd]}}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x24, 0x36, 0x4c, 0x60, 0x3, 0x3c, 0x3, 0x0, 0x60, 0x24, 0x1b, 0x2, 0x6c, 0x5]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x5, 0xa}, {0x5, 0x9}, {0x0, 0x4}, {0x4, 0x2}, {0x4, 0x9}, {0x7, 0x1}, {0x3, 0x1}, {0x5, 0x6}, {0x3, 0x4}, {0x4, 0x4}, {0x2, 0x9}, {0x2, 0x8}, {0x5, 0xa}, {0x7, 0xa}, {0x7, 0x5}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x3}, {0x4, 0x3}, {0x3, 0x2}, {0x6, 0x9}, {0x0, 0x3}, {0x0, 0xa}, {0x7}, {0x6, 0x5}, {0x2, 0xa}, {0x7, 0x8}, {0x2, 0x5}, {0x2, 0x8}, {0x4, 0x3}]}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x5, 0x0, 0x3f, 0x200, 0x200, 0x101]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x2, 0x5}, {0x3}, {0x2}, {0x3, 0x5}, {0x2, 0x3}, {0x3, 0x4}, {0x1, 0x3}, {0x5, 0x3}, {0x4, 0x2}, {0x2, 0x7}, {0x0, 0x2}, {0x7, 0x1}, {0x5, 0x1}, {0x4, 0xa}, {0x6, 0x7}, {0x0, 0xa}, {0x6, 0x1}, {0x7, 0xa}, {0x0, 0x4}, {0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0x7, 0x8000, 0xe91, 0x8, 0x0, 0x7]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb95c, 0x1, 0x7, 0x5, 0xf6f1, 0xfffe, 0x7, 0x2]}}]}]}]}, 0x9a0}, 0x1, 0x0, 0x0, 0x24004810}, 0x0) (async, rerun: 64) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (rerun: 64) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000001080)=0x3) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r4) (async) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r1) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x28, r5, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x6b}, @void, @val={0xc, 0x99, {0x1, 0x3b}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x84) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000200)={0x1ff, 0xcc6, 0x4, {0x3, @vbi={0x7, 0x1ff, 0x1, 0x52424752, [0x3, 0x8], [0x401, 0x100], 0x3}}, 0x1ff}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:06:21 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x1}}) 13:06:21 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r2, 0x5421, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x1) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000080)) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000000c0)={0x1, @sdr={0x30324c4a, 0x7e3f}}) (async) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x76, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x9, 0xfffffff8, 0x4e564058, 0x6, 0x247, 0xdb, 0x4, 0x100, 0x1, 0x2, 0x0, 0x2}}) 13:06:21 executing program 0: prctl$PR_MCE_KILL(0x21, 0x0, 0x1) 13:06:21 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x1}}) 13:06:21 executing program 5: prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 13:06:21 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async, rerun: 64) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (rerun: 64) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000000)) (async, rerun: 64) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (rerun: 64) 13:06:21 executing program 0: prctl$PR_MCE_KILL(0x21, 0x0, 0x0) 13:06:21 executing program 2: socketpair(0x2a, 0x2, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0x5421, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x1, 0x9, 0x0, 0x880}) 13:06:21 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5a0b, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f00000001c0)) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@multiplanar_overlay={0x40000000, 0x0, 0x4, 0x20, 0xff, {r1, r2/1000+60000}, {0x3, 0x7, 0x6, 0xfd, 0x26, 0x33, "9c01b7db"}, 0xe2, 0x3, {&(0x7f0000000080)=[{0x7ff, 0x7, {0x79}, 0x8001}, {0x3196, 0x20, {0x80000000}, 0x21}]}, 0x2}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x1}], 0x1}}) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000280)) 13:06:21 executing program 5: prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 13:06:21 executing program 0: prctl$PR_MCE_KILL(0x21, 0x0, 0x0) 13:06:21 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) (async) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x104, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x2}, {0xfd}, {0x7, 0x7}, {0xd1}, {0x4, 0x6}, {0x2, 0x1}, {0x3, 0x2}, {0x20, 0x6}, {0x6}, {0x80, 0x5}], "d427ecce2a6e5bbc"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x89, 0x5}, {0x40, 0x6}, {0x3f, 0x2}, {0x0, 0x6}, {0x7}, {0x7f}], "a004d9d92938e2d7"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x1}, {0x6, 0x3}, {0x6, 0x1}, {0x45, 0x6}, {0x5, 0x1}, {0x1, 0x5}, {0x2, 0x2}, {0x9, 0x1}, {0x7, 0x1}, {0x4, 0x2}, {0x5}, {0xbc, 0x7}], "baabc20dff20ec65"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x3f, 0x3}, {0x6, 0x5}, {0x8, 0x3}, {0xc0}, {0xfc, 0x3}, {0x3d, 0x2}, {0x81, 0x5}, {0x3, 0x5}, {0x7, 0x7}], "87012b026cb8cd95"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x40, 0x3}, {0xfb, 0x7}, {0xfe}, {0x7f, 0x7}, {0x40, 0x5}, {0x7, 0x4}, {0xff, 0x4}, {0x6, 0x3}, {0x1, 0x3}, {0x62, 0x5}, {0x1, 0x5}], "dfae082c53ee05a0"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x5, 0x1}, {0x2, 0x2}, {0x7}, {0x31, 0x4}, {0x3, 0x1}, {0xed}, {0xd, 0x6}], "9e7abdb7dffa0c8f"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x0, 0x6}, {0x0, 0x3}, {0x8, 0x2}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x5}, {0x40, 0x2}, {0x9, 0x4}, {0x3, 0x5}, {0x37, 0x6}, {0x4, 0x3}, {0x81, 0x6}, {0x2, 0x4}, {0xb5, 0x4}, {0x4, 0x5}], "6d2a8a0748496481"}}]}, 0x104}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0xc}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x4c}}, 0x40001) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)={0x9a0, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x3f4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x9, 0x9, 0x4, 0x60, 0xc, 0xc, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x48, 0x6, 0x2, 0x6, 0x24, 0x5, 0x48, 0x30, 0x24, 0x7, 0x0, 0x36, 0x30, 0x36, 0x2, 0x4, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3c, 0x401, 0x86e4, 0x5, 0xfff, 0x400, 0x5, 0xfe8e]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x5, 0x60, 0x3116, 0x5b0, 0x7, 0x7, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x49, 0x5, 0x48, 0x6c, 0x2, 0x3, 0x3]}, @NL80211_TXRATE_HT={0x21, 0x2, [{}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x2}, {0x4, 0x2}, {0x0, 0x6}, {0x2, 0x5}, {0x2}, {0x0, 0x4}, {0x5, 0xa}, {0x1, 0x7}, {0x0, 0x5}, {0x2, 0x2}, {0x6, 0x2}, {0x2, 0x6}, {0x1, 0x2}, {0x6, 0x4}, {0x6, 0x4}, {0x0, 0x9}, {0x7, 0x7}, {0x3, 0x3}, {0x2, 0x9}, {0x1, 0xa}, {0x1, 0xa}, {0x0, 0x3}, {0x2, 0x9}, {0x0, 0x9}, {0x1, 0x5}, {0x6, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x36, 0x36, 0x6c, 0x2, 0xb, 0x0, 0x12, 0x4, 0xb, 0x1, 0x9, 0x60, 0x5, 0x24, 0x9, 0x3, 0x0, 0x1, 0xc5, 0x18, 0x18, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfa, 0x9, 0x0, 0x8, 0x7f, 0xfc00, 0x8, 0xffff]}}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4a, 0x9782, 0x7ff, 0x3, 0x5, 0x5, 0x6d6, 0x7]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x24, 0x9, 0x6c, 0x48, 0x5, 0xc, 0x2, 0xc, 0x18, 0x9, 0x6c, 0x1, 0x4e, 0x3, 0x3, 0x18, 0xb, 0x6]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xb, 0x4, 0x12, 0x65, 0x3, 0x16, 0x5, 0x12, 0x4, 0x3, 0xb, 0x60, 0x48, 0x6c, 0x12, 0x12, 0x2, 0x6, 0x67, 0x60, 0x16, 0x16, 0x4, 0x3, 0x60, 0x13, 0x0, 0x12, 0x4, 0x3, 0x28]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9db, 0x3, 0x7, 0x0, 0x5, 0x9, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x71ef, 0xa6, 0x5, 0x3, 0x7, 0x1, 0x1ff, 0xfffa]}}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x1, 0x9}, {0x6, 0x1}, {0x1, 0x8}, {0x3, 0x9}, {0x6, 0x1}, {}, {0x3}, {0x2, 0x4}, {0x6, 0x3}, {0x1, 0x3}, {0x5, 0x2}, {0x7, 0x4}, {0x6, 0x6}, {0x7, 0x5}, {0x6, 0xa}, {0x1, 0x2}, {0x3, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x37}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0x9, 0xcbf0, 0x1, 0x5, 0x8, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffc1, 0x1, 0x9, 0xf02e, 0x53f, 0xfff8, 0x7, 0x401]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x8, 0x369d, 0x20, 0x1000, 0x4, 0x8c8, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x7, 0x50ec, 0xc5e4, 0x3, 0x8, 0x37c]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x400, 0x1f, 0x8, 0x2, 0x3f, 0x8, 0x2]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0xb, 0x12, 0x1, 0x3, 0x24, 0x6c, 0x4, 0x9, 0x48, 0x12, 0x24, 0x16, 0x6c, 0x4, 0x6c, 0xc, 0x1, 0x9, 0x18, 0x6, 0x12, 0x6c, 0x2, 0x6, 0x3, 0x48, 0x1, 0x68]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x5, 0x8}, {0x2, 0x9}, {0x7, 0x9}, {0x6, 0x4}, {0x1, 0xa}, {0x6, 0x6}, {0x0, 0x2}, {0x0, 0x9}, {0x5, 0x5}, {0x4, 0x5}, {}, {0x1, 0x2}, {0x7, 0x2}, {0x3, 0x7}, {0x6, 0x3}, {0x5, 0xa}, {0x5, 0x8}, {0x2, 0x9}, {0x0, 0x8}, {0x5, 0x9}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x8}, {0x1, 0xa}, {0x0, 0x3}, {0x4, 0x3}, {0x7, 0x8}, {0x2, 0x5}, {0x4, 0x2}, {0x7, 0x2}, {0x6, 0x8}, {0x7, 0x3}, {0x1, 0x7}, {0x6}, {0x6, 0x4}, {0x2, 0x1}, {0x4, 0x8}, {0x6, 0x2}, {0x5, 0x6}, {0x6}, {0x3, 0x3}, {0x4, 0x3}, {0x7, 0xa}, {0x7, 0x4}, {0x4, 0x7}, {0x6, 0x1}, {}, {0x6}, {0x2, 0x5}, {0x1, 0x9}, {0x0, 0x8}, {0x4, 0x1}, {0x7}]}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x80, 0x5, 0x200, 0xe18, 0xb1, 0x9, 0x1ba8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x16, 0x24, 0xc, 0x24, 0x6c, 0x9, 0x4, 0x9, 0x3, 0x24, 0x12, 0x24, 0x1, 0x1b, 0x12, 0x6, 0xc, 0xc, 0x18, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf6, 0x4, 0x3, 0x0, 0x1000, 0xe76, 0x49a, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0x1, 0x12, 0x1b, 0x1b, 0x5, 0x6c, 0x6c, 0xb, 0xb, 0x60, 0x2, 0x1, 0x1, 0x5, 0x5, 0x36, 0x3, 0x5a, 0xb, 0x48, 0x30, 0x4, 0x5, 0x1, 0xc, 0x6c, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x1, 0xff, 0x27e, 0x30, 0x8, 0x400]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff79, 0x8001, 0x8, 0x6ed6, 0x3, 0x8, 0x2, 0xfff7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x9, 0xc, 0x60, 0x48, 0xc, 0x78, 0x48, 0x4, 0x6, 0x5, 0x16, 0x6c, 0x24, 0x24, 0x4, 0x60, 0x60, 0x5, 0x3, 0x0, 0x5]}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x51, 0x2, [{0x4, 0x8}, {}, {0x1, 0xa}, {0x6, 0x7}, {0x0, 0x5}, {0x5, 0x3}, {0x4, 0x4}, {0x6, 0xa}, {0x3, 0x8}, {0x2, 0x1}, {0x0, 0x4}, {}, {0x4, 0xa}, {0x6, 0x2}, {0x1, 0x4}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x4, 0x6}, {0x5}, {0x0, 0x8}, {0x0, 0x2}, {0x3}, {0x7, 0xa}, {0x4, 0xa}, {0x7}, {0x7, 0x2}, {0x4, 0x6}, {0x6, 0x7}, {0x7, 0x1}, {0x1, 0x6}, {0x4, 0x4}, {0x0, 0x6}, {0x2, 0x5}, {0x3, 0x9}, {0x0, 0x6}, {0x7, 0x8}, {0x3, 0x3}, {0x0, 0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x9}, {0x6, 0x9}, {0x3, 0x3}, {0x6, 0x9}, {0x2, 0x8}, {0x5, 0x9}, {0x4, 0x3}, {0x7, 0x3}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x6}, {0x2, 0x5}, {0x1, 0x9}, {0x2, 0x8}, {0x1, 0x1}, {0x6, 0xa}, {0x4, 0x2}, {0x1, 0x9}, {0x3, 0x4}, {0x2, 0x3}, {0x2, 0xa}, {0x7}, {0x1}, {0x3, 0x1}, {0x6, 0x6}, {0x4}, {0x3, 0x2}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x8}, {0x1, 0x1}, {0x5, 0x8}, {0x5, 0x6}, {0x1, 0x4}, {}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xff, 0x200, 0x6, 0xffdf, 0x6, 0xfffe, 0x7ff]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xec8, 0x3, 0x70, 0x5, 0x4, 0x6, 0x1]}}]}]}, @NL80211_ATTR_TX_RATES={0x8c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x5, 0x3}, {0x7, 0x4}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x90, 0xc, 0x30, 0x1, 0x48, 0x0, 0x6c, 0x16, 0x6c, 0x66, 0x16, 0x3, 0x12, 0x30, 0x18, 0x48, 0x24, 0x7c, 0x12, 0x66, 0x9, 0x3, 0x24, 0x60, 0xc, 0x12, 0x12, 0x36, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x7, 0x2, 0x8000, 0x7ff, 0x5, 0xd90d]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x4}, {0x1, 0xa}, {0x3, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xf9, 0xb8e1, 0x7fff, 0x3800, 0x5, 0x7, 0x400]}}]}]}, @NL80211_ATTR_TX_RATES={0x390, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0xffc1, 0x100, 0x7, 0x3, 0xdc4, 0xfe0f, 0x4b]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x2, 0x1b, 0x1, 0x0, 0x60, 0x0, 0x36, 0x30, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x8, 0x5, 0x8, 0x20, 0x73]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xc4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x5, 0x1}, {0x2, 0x9}, {0x6, 0x5}, {0x3, 0x3}, {0x2, 0x4}, {0x0, 0x1a}, {0x4}, {0x3, 0x2}, {0x5, 0xa}, {0x6, 0x9}, {0x1, 0x2}, {0x1}, {0x3, 0x6}, {0x2, 0x6}, {0x1, 0x5}, {0x3, 0x6}, {0x0, 0x2}, {0x5, 0x2}, {0x2, 0x9}, {0x7}, {0x1}, {0x2, 0x8}, {0x1, 0x2}, {0x6, 0x2}, {0x5, 0x6}, {0x1, 0x6}, {0x4, 0x8}, {0x5, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5d15, 0x1f, 0x4, 0x0, 0x8000, 0x800, 0x2, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x30, 0x6, 0x5, 0x1b, 0x60, 0xc, 0x60, 0x9, 0x16, 0x24, 0x3, 0x24, 0x6, 0x60, 0x36, 0x30, 0xc, 0xc, 0x16, 0x9]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x5, 0x1}, {0x2, 0xa}, {0x2, 0x9}, {0x0, 0x8}, {0x2, 0x9}, {0x2, 0x5}, {0x7, 0x5}, {0x5, 0x8}, {0x3, 0x3}, {0x3, 0x9}, {0x1, 0x3}, {0x7, 0x7}, {0x7, 0x4}, {0x1, 0x2}, {0x0, 0x7}, {}, {0x1, 0x4}, {0x6, 0x5}, {0x4, 0x5}, {0x5, 0x8}, {0x0, 0x2}, {0x4, 0x5}, {0x1, 0x6}, {0x2, 0xa}, {0x0, 0x8}, {0x3}, {}, {0x4, 0x8}, {0x4, 0x9}, {0x1, 0x2}, {0x7, 0x4}, {0x0, 0x7}, {0x2, 0x5}, {0x4, 0x4}, {0x4, 0x7}, {0x7, 0x6}, {0x4, 0x3}, {0x1, 0x8}, {0x1, 0x3}, {0x7, 0x1}, {0x7, 0x9}, {0x5, 0x4}, {0x4, 0x8}, {0x1, 0x2}, {0x5, 0x3}, {0x5, 0x9}, {0x7, 0x2}, {0x2, 0x4}, {0x6, 0x7}, {0x2, 0x1d}, {0x7, 0x7}, {0x0, 0x9}, {0x2, 0x5}, {0x7, 0xa}, {0x6, 0x4}, {0x2, 0x7}, {0x4, 0x3}, {0x4, 0x6}, {0x6, 0x3}, {0x5, 0x1}, {0x6, 0x3}, {0x6, 0x2}, {0x7, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0xfffd, 0xff45, 0x0, 0x0, 0x7, 0x0, 0xfff7]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6c, 0x12, 0x60, 0x11]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x6a, 0x1, 0x5, 0x1, 0x4, 0x401, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x7f, 0xfaf9, 0x9, 0x4, 0xff80, 0x8885]}}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xd7c9, 0x9ee, 0x0, 0x100, 0x5, 0x20, 0x1000, 0x2]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x5, 0x2}, {0x7}, {0x2, 0x5}, {0x6, 0x8}, {0x7, 0x3}, {0x3, 0x6}, {0x5, 0x4}, {0x0, 0xa}, {0x1, 0x3}, {0x7, 0x8}, {0x1, 0x1}, {0x4, 0x4}, {0x3, 0x2}, {0x1, 0x9}, {0x0, 0x6}, {0x2, 0x4}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x6}, {0x2, 0x8}, {0x4, 0xa}, {0x1, 0x4}, {0x0, 0x3}, {0x2, 0xa}, {0x6, 0x8}, {0x2, 0x4}, {0x5, 0x2}, {0x6, 0x3}, {0x7, 0x4}, {0x5, 0x6}, {0x1, 0x7}, {0x6, 0x9}, {0x5, 0x2}, {0x0, 0xa}, {0x0, 0x6}, {0x4, 0x7}, {0x7, 0x2}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x48, 0x60, 0x9, 0x3, 0x16, 0x0, 0x5, 0xc092a21105898e3e, 0xc, 0x9, 0x16, 0x6c, 0x48, 0x1, 0x9, 0x1]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x7, 0x9cc2, 0x7, 0x6, 0x128]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x2, 0x3, 0xfff7, 0x3, 0x1, 0x9, 0xb1a]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x1, 0x2, 0xf801, 0x100, 0x8001, 0x5]}}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x76, 0x7, 0x1000, 0xfff, 0x200, 0x4, 0xfff7, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x1, 0x3f, 0x6, 0x5a29, 0x7, 0x7ff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1ff, 0x80, 0x9, 0x5813, 0x90, 0x4, 0xe1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x2, 0x9}, {0x6}, {0x3, 0x1}, {0x2, 0x9}, {0x1, 0x2}, {0x2, 0x7}, {0x3, 0x3}, {0x0, 0x6}, {0x1, 0x1}, {0x4, 0x4}, {0x3}, {0x1, 0x6}, {0x3, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x0, 0x6}, {0x4, 0x3}, {0x7, 0x5}, {0x6, 0x7}, {0x3}, {0x7, 0x3}, {0x3, 0xa}, {0x2, 0x5}, {0x0, 0x6}, {0x5}, {0x0, 0x9}, {0x6, 0x2}, {0x2, 0x8}, {0x1, 0x5}, {0x5, 0x4}, {0x5, 0x1}, {0x7, 0x5}, {0x2, 0xa}, {0x3, 0x8}, {0x3, 0x5}, {0x6, 0x9}, {0x4, 0x3}, {0x1, 0x8}, {0x1, 0xa}, {0x7, 0x1d}, {0x7, 0x1}, {0x2, 0x7}, {0x2, 0x4}, {0x5, 0x16}, {0x1, 0x5}, {0x4, 0x5}, {0x1, 0x5}, {0x1, 0xa}, {0x2, 0x7}, {0x1, 0x2}, {0x1, 0x3}, {0x4, 0x1}, {0x0, 0xa}, {}, {0x1, 0x6}, {0x6, 0x7}, {0x2, 0x5}, {0x2, 0x3}, {0x1, 0x9}, {0x0, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3e35, 0x5, 0x9, 0x1, 0x3ff, 0x58ef, 0x7, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xaba, 0x9, 0x1, 0x3, 0xb05, 0xb0, 0x20, 0xff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x98, 0x6, 0x859, 0x5, 0xfff9, 0x0, 0x10, 0x800]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xbf, 0x200, 0x400, 0x1, 0x7ab, 0x7fff, 0x1]}}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x4, 0x48, 0x24, 0x6c, 0x9, 0x2, 0x4, 0x6c, 0xb, 0x12, 0x36, 0x36, 0x30, 0x0, 0x6, 0x16, 0x48, 0x60, 0x6c, 0x12, 0x36, 0x2, 0x18, 0x16, 0x1b, 0xb, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x33a, 0x1ff, 0x1, 0x7, 0x9, 0x2, 0x128]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x9, 0x1, 0x2, 0x7f, 0x6, 0x6, 0x8000]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x99fcf7aaeb194b64, 0x9, 0x3, 0x1b, 0x0, 0x1, 0x9, 0xc, 0x18, 0x5, 0x1b, 0x4, 0xc, 0x1b, 0x60, 0xc, 0x1, 0x5, 0x36, 0x16, 0x16, 0xc, 0x3, 0xb, 0x16, 0x18, 0x12, 0x12, 0x1]}]}]}, @NL80211_ATTR_TX_RATES={0x174, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0xa3, 0x0, 0x101, 0x2, 0x1, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x975, 0x1, 0xb637, 0x1, 0x7, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x81, 0x100, 0xf801, 0xff, 0x2, 0x6, 0x7f]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x5, 0x5, 0x36, 0x6, 0x5, 0x9, 0x48, 0x9, 0x6c, 0x0, 0x60, 0x5, 0x12, 0x24, 0x68cffd7f130d2a70, 0xb, 0x3, 0xc, 0xc, 0xc, 0x48, 0xc, 0x5]}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1, 0x30, 0x6c, 0x16, 0xf2e4f248183dbf3, 0x45, 0x30, 0x5, 0xc0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x0, 0x101, 0x3, 0x4, 0x9, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfffd, 0x80, 0x8, 0x5a84, 0x3, 0xd]}}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x24, 0x36, 0x4c, 0x60, 0x3, 0x3c, 0x3, 0x0, 0x60, 0x24, 0x1b, 0x2, 0x6c, 0x5]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x5, 0xa}, {0x5, 0x9}, {0x0, 0x4}, {0x4, 0x2}, {0x4, 0x9}, {0x7, 0x1}, {0x3, 0x1}, {0x5, 0x6}, {0x3, 0x4}, {0x4, 0x4}, {0x2, 0x9}, {0x2, 0x8}, {0x5, 0xa}, {0x7, 0xa}, {0x7, 0x5}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x3}, {0x4, 0x3}, {0x3, 0x2}, {0x6, 0x9}, {0x0, 0x3}, {0x0, 0xa}, {0x7}, {0x6, 0x5}, {0x2, 0xa}, {0x7, 0x8}, {0x2, 0x5}, {0x2, 0x8}, {0x4, 0x3}]}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x5, 0x0, 0x3f, 0x200, 0x200, 0x101]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x2, 0x5}, {0x3}, {0x2}, {0x3, 0x5}, {0x2, 0x3}, {0x3, 0x4}, {0x1, 0x3}, {0x5, 0x3}, {0x4, 0x2}, {0x2, 0x7}, {0x0, 0x2}, {0x7, 0x1}, {0x5, 0x1}, {0x4, 0xa}, {0x6, 0x7}, {0x0, 0xa}, {0x6, 0x1}, {0x7, 0xa}, {0x0, 0x4}, {0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0x7, 0x8000, 0xe91, 0x8, 0x0, 0x7]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb95c, 0x1, 0x7, 0x5, 0xf6f1, 0xfffe, 0x7, 0x2]}}]}]}]}, 0x9a0}, 0x1, 0x0, 0x0, 0x24004810}, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000001080)=0x3) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r4) (async) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r1) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x28, r5, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x6b}, @void, @val={0xc, 0x99, {0x1, 0x3b}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x84) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000200)={0x1ff, 0xcc6, 0x4, {0x3, @vbi={0x7, 0x1ff, 0x1, 0x52424752, [0x3, 0x8], [0x401, 0x100], 0x3}}, 0x1ff}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:06:21 executing program 5: prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 13:06:21 executing program 0: prctl$PR_MCE_KILL(0x21, 0x0, 0x0) 13:06:21 executing program 2: socketpair(0x2a, 0x2, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) (async) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0x5421, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x1, 0x9, 0x0, 0x880}) 13:06:21 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5a0b, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f00000001c0)) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@multiplanar_overlay={0x40000000, 0x0, 0x4, 0x20, 0xff, {r1, r2/1000+60000}, {0x3, 0x7, 0x6, 0xfd, 0x26, 0x33, "9c01b7db"}, 0xe2, 0x3, {&(0x7f0000000080)=[{0x7ff, 0x7, {0x79}, 0x8001}, {0x3196, 0x20, {0x80000000}, 0x21}]}, 0x2}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x1}], 0x1}}) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000280)) syz_open_dev$vim2m(&(0x7f0000000000), 0x5a0b, 0x2) (async) clock_gettime(0x0, &(0x7f0000000040)) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f00000001c0)) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@multiplanar_overlay={0x40000000, 0x0, 0x4, 0x20, 0xff, {r1, r2/1000+60000}, {0x3, 0x7, 0x6, 0xfd, 0x26, 0x33, "9c01b7db"}, 0xe2, 0x3, {&(0x7f0000000080)=[{0x7ff, 0x7, {0x79}, 0x8001}, {0x3196, 0x20, {0x80000000}, 0x21}]}, 0x2}) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x1}], 0x1}}) (async) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000280)) (async) 13:06:21 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5a0b, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f00000001c0)) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@multiplanar_overlay={0x40000000, 0x0, 0x4, 0x20, 0xff, {r1, r2/1000+60000}, {0x3, 0x7, 0x6, 0xfd, 0x26, 0x33, "9c01b7db"}, 0xe2, 0x3, {&(0x7f0000000080)=[{0x7ff, 0x7, {0x79}, 0x8001}, {0x3196, 0x20, {0x80000000}, 0x21}]}, 0x2}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x1}], 0x1}}) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000280)) 13:06:21 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async, rerun: 32) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (rerun: 32) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (async, rerun: 32) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000000)) (rerun: 32) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:06:21 executing program 5: prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 13:06:21 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5a0b, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f00000001c0)) (async, rerun: 64) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@multiplanar_overlay={0x40000000, 0x0, 0x4, 0x20, 0xff, {r1, r2/1000+60000}, {0x3, 0x7, 0x6, 0xfd, 0x26, 0x33, "9c01b7db"}, 0xe2, 0x3, {&(0x7f0000000080)=[{0x7ff, 0x7, {0x79}, 0x8001}, {0x3196, 0x20, {0x80000000}, 0x21}]}, 0x2}) (async, rerun: 64) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x1}], 0x1}}) (async, rerun: 64) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000280)) (rerun: 64) 13:06:21 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x6, [{}, {}, {}, {}, {}, {0xffffffff}], 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1000, 0x6, 0x5, "e799faeb5a47c3bd1f1e564c166bdba2ca4a120dd6331dd96057aca53b5bd61d", 0x32314d59}) 13:06:21 executing program 2: socketpair(0x2a, 0x2, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0x5421, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x1, 0x9, 0x0, 0x880}) 13:06:21 executing program 0: prctl$PR_MCE_KILL(0x21, 0x0, 0x0) 13:06:21 executing program 5: prctl$PR_MCE_KILL(0x21, 0x0, 0x0) 13:06:21 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:06:21 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x6, [{}, {}, {}, {}, {}, {0xffffffff}], 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1000, 0x6, 0x5, "e799faeb5a47c3bd1f1e564c166bdba2ca4a120dd6331dd96057aca53b5bd61d", 0x32314d59}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x6, [{}, {}, {}, {}, {}, {0xffffffff}], 0x0, 0x0, 0x0, 0x0, 0x5}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1000, 0x6, 0x5, "e799faeb5a47c3bd1f1e564c166bdba2ca4a120dd6331dd96057aca53b5bd61d", 0x32314d59}) (async) 13:06:21 executing program 0: prctl$PR_MCE_KILL(0x21, 0x0, 0x0) 13:06:21 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) 13:06:21 executing program 5: prctl$PR_MCE_KILL(0x21, 0x0, 0x0) 13:06:21 executing program 0: prctl$PR_MCE_KILL(0x21, 0x0, 0x0) 13:06:21 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:06:21 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x6, [{}, {}, {}, {}, {}, {0xffffffff}], 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1000, 0x6, 0x5, "e799faeb5a47c3bd1f1e564c166bdba2ca4a120dd6331dd96057aca53b5bd61d", 0x32314d59}) 13:06:21 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x80}]}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x94b0, 0x7a}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x38}}, 0xc101) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0xae58c65082ac5c42, @pix={0x20, 0x0, 0x30314742, 0x6, 0x100, 0xe97e, 0xa, 0x7afe, 0x1, 0x7, 0x0, 0x1}}) 13:06:21 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:06:21 executing program 5: prctl$PR_MCE_KILL(0x21, 0x0, 0x0) 13:06:21 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r2, 0x5421, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x1) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000000c0)={0x1, @sdr={0x30324c4a, 0x7e3f}}) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x76, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x9, 0xfffffff8, 0x4e564058, 0x6, 0x247, 0xdb, 0x4, 0x100, 0x1, 0x2, 0x0, 0x2}}) 13:06:21 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:06:21 executing program 3: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x47504a4d, 0x0, 0x0, [{}, {0xfffffffd}]}}) 13:06:21 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x80}]}}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x94b0, 0x7a}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x38}}, 0xc101) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0xae58c65082ac5c42, @pix={0x20, 0x0, 0x30314742, 0x6, 0x100, 0xe97e, 0xa, 0x7afe, 0x1, 0x7, 0x0, 0x1}}) 13:06:21 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d4fa5037"}, 0x0, 0x2, {0x0}}) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000440)={0x2, @pix={0x6, 0x344, 0x52424752, 0x7, 0x4, 0x100, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000001c0)={0x8, 0x3f, 0x4, {0x1, @win={{0x8, 0x40800, 0x9, 0x7ff}, 0x0, 0x6, &(0x7f0000000180)={{0x8, 0x1, 0x46e8, 0x1000}, &(0x7f0000000140)={{0x7f, 0x38b7, 0x8}, &(0x7f0000000100)={{0x10000000, 0xa44, 0x3f, 0x80000000}}}}, 0x40, &(0x7f0000000680)="7d76a7b0b3efa359a256988ce68721077a3d3dce63ea388ff1aa3f52c78deb4998dbe9fad353043276bc2c914b4c18d0d3c0573fd0e098ab87831b1c2a5008324c5b32fb368d2718483e17fb15669658cb41de6079731d64bc6ba8e30dc4f891b119e22271de10717a2a50894ed4782cb1320a9b8d465582aae04d2715659e7e26e801e3966aa13f9561770d75a4381a3da94956074f763f89de8abf5fcefdc45021aa7d0059e1044c3690eac7670f2dc9381bfd8e605b6afd3511ccf47cae373850c1617eb7c20bf2e765503be641a5acca71e3a8d3cfb608ad126ad08d4fb2a7847e81fca4cc558256bb3ab7410f73cf02b709a155c470fec89c0ce21dc394ae61c1ade42ba78f6419a415453277fd4a201e421bb3774492e4dd1956e818ac1d5597c5fae3c14d03e2ba61573da7ddcdaf4adf394eaa204e71c74c2ec5b2b75927d670aef5ffb17ffb107ee317d7b1ef296367dd29ac7de793c2b75d9cdb7c75a09d4779c6d428b7ebff6ce1ac9cf56f0ec59c19a4a814692cc1848fb0cd65843bd3c6c06e9f07d8d0d102c8b5dba2bfce97ac28ddc9d384666accd0591eff6297fa5e5a1ff91b216d6543fa7d4ce467b636243c376b0cf38985e97cffc6c238b8bb8195478da38201c51cb706f9eb0731ff8a6b9651474cc3cfd295915be9f0755bc6dc5f736e0c09d502b712cc5323acdc0876d5dfe3201434fb8909bff9367013802c16f62189fd45e407d9183fd818f90aac1b2b49ad95b57924412f1d5d44e71f4f0b8c98865ded06ea5c79e15bce39fb5bb901db2c212003f42e53aab0287e1edd8465e1ea9ca57335dc62affa8186bfa18e1801cde71c80bd1a5f542796d9175680834ed38020a93f7ea455bab26e0032b156c6d2f63dc6f9ccf535d1580999ef1ed71ed096be0cd1a881a026db7aa3a7581a278af4edfb53d0e728fef1cacd3a50f611129b617f3266b1e94040f874d27784b687ca517207f30ffefd49d9a7024da9e5364412d3bdf42c77f5435449c8ebca3783cf28db8156851fd3091595f50cd5e7a8c4d14476cdab98933acc6315539ffc4d97c834d1b5d61d74cd29dd6258d92b1ab1fefb6299368832526ea2e18880f4569bc93960b51150909a7978c16f261e3112e6f05f65e6dce8cf2890f21ec2954598c7bd943a0f2065da4f36a0270f8331e85bd74403a123ad67321f74a1f463aa86a98891f8701011bb2e6bea491d7c1a71fc62b33517a97445d9f5cbcec51533b1997791572bc1ab517868e4f3fe5aa88d579504a1a9c3e41b3842e7993e259098e3ecd18460dac8fc4c2899a60a99229a72d0122a82d6516258a7f6e6cddea5d453be1c0ee32789dd88713ba6a03ca18636321fa4e97e0dc2e5f34cab621212f8c9a2838a5ab0b3c80914b867f2a30854d1f1905df844ee6bb53d73bee0594d1290a29d95cd0e308e9827830e6fc06ab3dac3b11e993dd4aaf16614cd64cdb59f9a7afb295b6f41edd404ea6e2b02f51cb7803f5aa119818f25e40e12b673e100e57b81bb4fd751439504f0658dcf9e1a9b7fd0608d32cd42e3c60b800b309865e3e4e104fdd893c0e85f366ac27d61ef6bb061a93849280bc5db871692cb12cfea21a3e25375ee5c65280057674c7321b784d40a388790e44dd322e6ce2b7bc8904cc3584b5aec633a15c64d7b28c1350c18c833335a5b4ebbeeb7b1a7d7813e1b30eb717ea96d2b79af287a35a15ec67d923dc0639ddaf8deba22916d7233df4d30fe14d9bad7175bd51123ca33a8d0059a4b042b808b2d6cb16cd28e7d97f65024c17786f735b838ef8d6ad0f2f5ae92c3094e7e0d4f28036b9f07c4f68abb25e2b6c01c9687ad52f4b4bdb39b12c872586f27a151b295379cefb4a6afd11ef739d6c579752297241af1e4fa5f38b2445b492c53e3111ea6aa579062da66664e6c35a67d02fff71f451ee5ab26e19661467e188c2f2a0263c9e7b65f19192b28cc6672f9c8e3a283874aad34c4def9bf4a878abe3b4416ec5747c3edace43bdf4cbfe32b9e61e01bedfb316aff13d6a0d54f657bf8c21e83aeb6bab125af6bbd9d11394445168abaa637d52ec1487ea1ce65021af3ef4620447eed906953f83e0fe969820fef5261c3ad21ec15008b7451d1a8d8bdd61059436f4f495acc8bbcd61eabdff37dd8560558766cb1170ac6624e444ed7598e602fd65b4876c7486dafd1ec7608ebd79a3e123f44667cc1ed4486a03f29596da09e9f17cfc694db6bf6e2cad75419bca9ef03e258af04a20f8897cf0a67e0d8d498d8d23e4771c954e1f1163a8472aa452ab9c651cc8d412a008bcee452adf15e341383b261c57b115c6fda87ce1dff064d3812b85435d0ac6826078b7b5809879299012116c4c3744005d761107fd91addbdd4928cc780bbafac4d15f9e044a6276d06610265f6bb81d94d3e0fb9aa7eb919793812151a1b1f4649826d51db6541bdcaa0419133a044b0b878084f546e219ce539038a0a7d121a22f012f43c2684a97b4c67de90d738aa1d03c42111252090ea770b90d8a4850a52053b4238c60db7ff4eedf0323ab2d3cdedbb02d33e88a90bfda73d45daab6f358a5001ca91bcd07fb17746caf1ec595f5b1640b542b2c2694b78979975b6fb0e4b6382856d16c1925ff0a554c6d1ff1dc7402018c86202a8c433f6048c5d30702489ac7516e4317ebcdc88b323e0c1a7656bffffe613f2c71fc52a38d38083102b3963549bf602dec18a732c0a832e9f7dad127d23787693605ac9081fbe6d59bb732e2684726d20aef8f316edf0562a4f15f1008ac50c192d4398c63d3999667c69111c74656f7892513d3de682914012660fd463afeff18e7f3a507e27ce6ff4bd1f3cacb5e489911e3f69573cf646c152f20f2a21b6137b5f3d7f66279e2515c5e3a4bfdcdb411026764d75b5be4f981bc5fcdffde2e5c1976c91019fb5eec0dc012317bc753a7550a07b55c414f1447aa2638d3fdebd95b102ba1bc295321d31269af8b1010cc4170454709461da01c83bd88bc58d2e4377fa6cb615154df521ce80489ebe4a1f8c7b64b45e4aa6790f6146b4282376e4399d75f8aa8100d1bfd8a09e862ac18eb3a0952fb64a5b6545f50d439ed85a8dc62c83b4a15338065d85e715fc4ab4dbd2231eea10d4a7dd2d1e73503e39beec3b391d1678bf3a7cfd064f359e49bf7bf2bea923ac1321349a68186aac7828cdc722eaa50c8a1cbc6b6f9667fcb010085242ae9184ff307f7397391969897615599ffa1903890b3fa296993698281715e156f8003f74dc34cf70615dd95614532540926dbcff40bce9f72b3d9cc7832653ca0cd5b1582df710317045b3a1af3dff5b1d8e70e7050438b6c8e736bb2b247442d9f3c6df98f73e434cbb899c791854efa8d97be66716440001e542c5db1b34aa341e8ae20309f7f40c08f2aabbf25cd2560f2393d5f77adaf30385a8d5ed2a038e62510adc1612751b5261f0753a254d164b2ac595bee7ca63230531384b331af354b4bf1a7827764d4a17a40fe7d1d6af7c1b81f8318aa3345882bcf69a75ee5dfed72024a67cfced6227656884a52b922aa6bd3f5a98ee030e6c8a3ab240f42c6dd3ab07cacfe8920fdd90116ad15b626cfeddbaa4ae991bac8789386f096f8cea6f2ed92130a3215f42b2555baea793329aa6f14546ece5c7cc51e86691632715fefd11a6cbbe5adb2c8e550260a34934a4214cea164cdd252a3d33cd7c69b25984b6a957f748e1e99d49378b62f3a80091ebf55edae2022997caad9f8ea2645d97ca7e82db40e0fec827877287c5abd4d379a3e00a1b0cc87e2c1f0b92d7271b2415d85099dd6732e2433d87efe51f51f784280e3dad6dcd546eb48c3e7abdaaad04c75df9c05629b03375af459fd1096a02b43c46a7bfec0962c39c63358a0dc7c2fa0893d1585d7bf8a12f37eae7077fd8f1e37f1c9b738de9f41c243a5a497501238450a532a2e6c71800dfc3a9cec00cb26450b6fe8e59926ce38eef467341a6bbe8c222e959e5467673a8268605a9aaabd62880d8bfa8022d481958ca4045bbda8bad5e569140f51fb0887b09339f1bb97d166225578c3d97a7450f35cd33d5a0bf81506647afa1538c6c7783b6e390f64bee917e7912b55f18e25bf3e8756e20c5cf3c40db7fab1ed2e0210f215cd886677a077e7dc64b4edb3d939b5d2c0170b4117a61c0692d6a1f67af6597032919110661c49dee0d67b1c9c9d9e531907b67518a68f769cd86087be6543890141a0b5efba698ef8c4fa9597abe5cec6d0bac3053afb196c4551f6eba45aea19cb974e386d5de0551e5cb33c64d39125bef03599a6ffd6303231a693a86850e0bc00a4fb4c838d31f124b1bd3185d8ddb84d9db9e011533697a3eba3d6c62f43ad8468bf77a6b16dbe0eb6205245e25ce5127d315e300251186d274ac8271fe8416737ab16dc31c7aa85fa5b5e9dddfa7e68865a97103e89da86803a77c33abee794f589dfceed1e7105cfcf961f2e4bdb126ee0ff0c12b67100dc0768d8e8e66b367b1b4040d2d6811b03608360e1e6e7f5225d5e2aa0c1b4eae7e86c7407e78ec8700efa08bfd9dfae7891909e94dac811159e84b62e72598caa572ca6bd126ee564a53b300c1166d15abe043eb020f97f64b3ffa6ec077fed76e054e91d5904e16c73c1b2ddeb6d0e7f795d569c47aed53524ab9b72143d8d4b1531744bd3a692cb1c667c36b178f629427e53389d569bacaa5dd796c48ce58ebecdc82604117cb809a8a0a78f705dd74454b3324ee436b17e454f663b70b18d6490da33617b2d0446f8870e9192dab0dcff6f77321096618ac53538a357b88234e83a9e9910c363f6338cb9554803658491bbdda67d63c7142f7e134485bb98283fe0b9d8f93d9a7c7cf99c359b02a658bb6d34a69f161c6084644024c199a2b3f3bd629d8eb95b44a2d6ee7a3c393bdb354fb151f386ed76736502c5129675e0ccfed7a44f770a2d8615d17473e7a25985a3fd9f2ecbd938a2f32abe0e94e36ba02a0c4897612fecabcc0ba0e523b6b0a627b9346445f9028fc855b48d638975d2dd893dd8bf4b517e8a7c489f5a19e8b3949d438a2bab619bed191f1200b49e85f7548a4e1c8b5713dcd05bbf228d2a948c9f06bed481e304b21cfcd177398b9f3edd0de6326f1ecc25a4749833edf238220ff251b0b6bb36cec730d3497e694540403342c581be1e527739d81965b3cac11856e6be7d540796b340f923a74c4ab0ff7b2ad6234ecae0dbc1433bebea7e124d9eeb766ef8ac7f4aa4a2c24d6e8fdb45861dc6b1233cc63bfaaacbe4f141d1a7d0f61503f264e150b900bc73b39e700e98f6e900bd45508373cad2660bfffb4aa2b6be68092998dc52755fef0b327e9a58c5a9e7197975d9bbd901f566dc8200e44db9ce7e074c8dc09bcd1c2334ae1f37fce454f31b3fa22562f6051a0477b8414eee4dc0079cfcd5d539a1468f60b70c38fec0e6a1a80e8fe06ccec8cd46284e09b2d07afdffd440492602e213a1e593e81b5853a5e2ad8a0b50f096d22b867bd31b670aaa4e49d1f1e3492f668405b6952ccd2d377d704036fc8becbc8deda6ceef7fef85a517041f56c8238bf0c539c39ec815f4bf2633aed0680c0f7d0fe3b1dc54689e311c4c72d0a08cc4b183b8bbefbd677fab10ed8f539f4cce070d661c8f418668757983a32d00dd3be06ac8946a0b477f1e36a8cc6641056f7c167c0cbe0d302b58a5093f530a95fca9c433d0512ad4f2c5de67652ba89a786725296ed20a7", 0x9c}}, 0x80000001}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000001680)={0x3ff, 0x9b}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x61}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x400}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000054) 13:06:21 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x210001}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x200, 0x70bd26, 0x6, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x60}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x8894}, 0x20000800) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) 13:06:21 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) 13:06:21 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x210001}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x200, 0x70bd26, 0x6, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x60}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x8894}, 0x20000800) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) 13:06:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_SSID={0x15, 0x34, @random="93388aaa8e929b9ccdf5660a6a3b123fd4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xbb, 0x401, 0x34324948, 0x9, 0x3, 0x9, 0x7, 0x40000, 0x1, 0x0, 0x1, 0x7}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000380)=@userptr={0x40000000, 0x0, 0x4, 0x0, 0x3, {0x0, 0x2710}, {0x1, 0x2, 0x9, 0x9, 0x80, 0xea, "f8437f47"}, 0x3, 0x2, {&(0x7f0000000340)}, 0x9}) ioctl$vim2m_VIDIOC_G_FMT(r3, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x55595659, 0x0, 0x0, [{}, {}, {0xffffffff}, {}, {0x0, 0x400000}], 0x0, 0x10}}) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000140)=0x1, 0x4) 13:06:21 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d4fa5037"}, 0x0, 0x2, {0x0}}) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000440)={0x2, @pix={0x6, 0x344, 0x52424752, 0x7, 0x4, 0x100, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000001c0)={0x8, 0x3f, 0x4, {0x1, @win={{0x8, 0x40800, 0x9, 0x7ff}, 0x0, 0x6, &(0x7f0000000180)={{0x8, 0x1, 0x46e8, 0x1000}, &(0x7f0000000140)={{0x7f, 0x38b7, 0x8}, &(0x7f0000000100)={{0x10000000, 0xa44, 0x3f, 0x80000000}}}}, 0x40, &(0x7f0000000680)="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", 0x9c}}, 0x80000001}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000001680)={0x3ff, 0x9b}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x61}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x400}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000054) 13:06:21 executing program 3: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x47504a4d, 0x0, 0x0, [{}, {0xfffffffd}]}}) 13:06:21 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2$9p(&(0x7f0000000040), 0x80000) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:06:21 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x80}]}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x94b0, 0x7a}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x38}}, 0xc101) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0xae58c65082ac5c42, @pix={0x20, 0x0, 0x30314742, 0x6, 0x100, 0xe97e, 0xa, 0x7afe, 0x1, 0x7, 0x0, 0x1}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0xae58c65082ac5c42, @pix={0x20, 0x0, 0x30314742, 0x6, 0x100, 0xe97e, 0xa, 0x7afe, 0x1, 0x7, 0x0, 0x1}}) 13:06:21 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x210001}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x200, 0x70bd26, 0x6, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x60}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x8894}, 0x20000800) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) 13:06:21 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d4fa5037"}, 0x0, 0x2, {0x0}}) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000440)={0x2, @pix={0x6, 0x344, 0x52424752, 0x7, 0x4, 0x100, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000001c0)={0x8, 0x3f, 0x4, {0x1, @win={{0x8, 0x40800, 0x9, 0x7ff}, 0x0, 0x6, &(0x7f0000000180)={{0x8, 0x1, 0x46e8, 0x1000}, &(0x7f0000000140)={{0x7f, 0x38b7, 0x8}, &(0x7f0000000100)={{0x10000000, 0xa44, 0x3f, 0x80000000}}}}, 0x40, &(0x7f0000000680)="7d76a7b0b3efa359a256988ce68721077a3d3dce63ea388ff1aa3f52c78deb4998dbe9fad353043276bc2c914b4c18d0d3c0573fd0e098ab87831b1c2a5008324c5b32fb368d2718483e17fb15669658cb41de6079731d64bc6ba8e30dc4f891b119e22271de10717a2a50894ed4782cb1320a9b8d465582aae04d2715659e7e26e801e3966aa13f9561770d75a4381a3da94956074f763f89de8abf5fcefdc45021aa7d0059e1044c3690eac7670f2dc9381bfd8e605b6afd3511ccf47cae373850c1617eb7c20bf2e765503be641a5acca71e3a8d3cfb608ad126ad08d4fb2a7847e81fca4cc558256bb3ab7410f73cf02b709a155c470fec89c0ce21dc394ae61c1ade42ba78f6419a415453277fd4a201e421bb3774492e4dd1956e818ac1d5597c5fae3c14d03e2ba61573da7ddcdaf4adf394eaa204e71c74c2ec5b2b75927d670aef5ffb17ffb107ee317d7b1ef296367dd29ac7de793c2b75d9cdb7c75a09d4779c6d428b7ebff6ce1ac9cf56f0ec59c19a4a814692cc1848fb0cd65843bd3c6c06e9f07d8d0d102c8b5dba2bfce97ac28ddc9d384666accd0591eff6297fa5e5a1ff91b216d6543fa7d4ce467b636243c376b0cf38985e97cffc6c238b8bb8195478da38201c51cb706f9eb0731ff8a6b9651474cc3cfd295915be9f0755bc6dc5f736e0c09d502b712cc5323acdc0876d5dfe3201434fb8909bff9367013802c16f62189fd45e407d9183fd818f90aac1b2b49ad95b57924412f1d5d44e71f4f0b8c98865ded06ea5c79e15bce39fb5bb901db2c212003f42e53aab0287e1edd8465e1ea9ca57335dc62affa8186bfa18e1801cde71c80bd1a5f542796d9175680834ed38020a93f7ea455bab26e0032b156c6d2f63dc6f9ccf535d1580999ef1ed71ed096be0cd1a881a026db7aa3a7581a278af4edfb53d0e728fef1cacd3a50f611129b617f3266b1e94040f874d27784b687ca517207f30ffefd49d9a7024da9e5364412d3bdf42c77f5435449c8ebca3783cf28db8156851fd3091595f50cd5e7a8c4d14476cdab98933acc6315539ffc4d97c834d1b5d61d74cd29dd6258d92b1ab1fefb6299368832526ea2e18880f4569bc93960b51150909a7978c16f261e3112e6f05f65e6dce8cf2890f21ec2954598c7bd943a0f2065da4f36a0270f8331e85bd74403a123ad67321f74a1f463aa86a98891f8701011bb2e6bea491d7c1a71fc62b33517a97445d9f5cbcec51533b1997791572bc1ab517868e4f3fe5aa88d579504a1a9c3e41b3842e7993e259098e3ecd18460dac8fc4c2899a60a99229a72d0122a82d6516258a7f6e6cddea5d453be1c0ee32789dd88713ba6a03ca18636321fa4e97e0dc2e5f34cab621212f8c9a2838a5ab0b3c80914b867f2a30854d1f1905df844ee6bb53d73bee0594d1290a29d95cd0e308e9827830e6fc06ab3dac3b11e993dd4aaf16614cd64cdb59f9a7afb295b6f41edd404ea6e2b02f51cb7803f5aa119818f25e40e12b673e100e57b81bb4fd751439504f0658dcf9e1a9b7fd0608d32cd42e3c60b800b309865e3e4e104fdd893c0e85f366ac27d61ef6bb061a93849280bc5db871692cb12cfea21a3e25375ee5c65280057674c7321b784d40a388790e44dd322e6ce2b7bc8904cc3584b5aec633a15c64d7b28c1350c18c833335a5b4ebbeeb7b1a7d7813e1b30eb717ea96d2b79af287a35a15ec67d923dc0639ddaf8deba22916d7233df4d30fe14d9bad7175bd51123ca33a8d0059a4b042b808b2d6cb16cd28e7d97f65024c17786f735b838ef8d6ad0f2f5ae92c3094e7e0d4f28036b9f07c4f68abb25e2b6c01c9687ad52f4b4bdb39b12c872586f27a151b295379cefb4a6afd11ef739d6c579752297241af1e4fa5f38b2445b492c53e3111ea6aa579062da66664e6c35a67d02fff71f451ee5ab26e19661467e188c2f2a0263c9e7b65f19192b28cc6672f9c8e3a283874aad34c4def9bf4a878abe3b4416ec5747c3edace43bdf4cbfe32b9e61e01bedfb316aff13d6a0d54f657bf8c21e83aeb6bab125af6bbd9d11394445168abaa637d52ec1487ea1ce65021af3ef4620447eed906953f83e0fe969820fef5261c3ad21ec15008b7451d1a8d8bdd61059436f4f495acc8bbcd61eabdff37dd8560558766cb1170ac6624e444ed7598e602fd65b4876c7486dafd1ec7608ebd79a3e123f44667cc1ed4486a03f29596da09e9f17cfc694db6bf6e2cad75419bca9ef03e258af04a20f8897cf0a67e0d8d498d8d23e4771c954e1f1163a8472aa452ab9c651cc8d412a008bcee452adf15e341383b261c57b115c6fda87ce1dff064d3812b85435d0ac6826078b7b5809879299012116c4c3744005d761107fd91addbdd4928cc780bbafac4d15f9e044a6276d06610265f6bb81d94d3e0fb9aa7eb919793812151a1b1f4649826d51db6541bdcaa0419133a044b0b878084f546e219ce539038a0a7d121a22f012f43c2684a97b4c67de90d738aa1d03c42111252090ea770b90d8a4850a52053b4238c60db7ff4eedf0323ab2d3cdedbb02d33e88a90bfda73d45daab6f358a5001ca91bcd07fb17746caf1ec595f5b1640b542b2c2694b78979975b6fb0e4b6382856d16c1925ff0a554c6d1ff1dc7402018c86202a8c433f6048c5d30702489ac7516e4317ebcdc88b323e0c1a7656bffffe613f2c71fc52a38d38083102b3963549bf602dec18a732c0a832e9f7dad127d23787693605ac9081fbe6d59bb732e2684726d20aef8f316edf0562a4f15f1008ac50c192d4398c63d3999667c69111c74656f7892513d3de682914012660fd463afeff18e7f3a507e27ce6ff4bd1f3cacb5e489911e3f69573cf646c152f20f2a21b6137b5f3d7f66279e2515c5e3a4bfdcdb411026764d75b5be4f981bc5fcdffde2e5c1976c91019fb5eec0dc012317bc753a7550a07b55c414f1447aa2638d3fdebd95b102ba1bc295321d31269af8b1010cc4170454709461da01c83bd88bc58d2e4377fa6cb615154df521ce80489ebe4a1f8c7b64b45e4aa6790f6146b4282376e4399d75f8aa8100d1bfd8a09e862ac18eb3a0952fb64a5b6545f50d439ed85a8dc62c83b4a15338065d85e715fc4ab4dbd2231eea10d4a7dd2d1e73503e39beec3b391d1678bf3a7cfd064f359e49bf7bf2bea923ac1321349a68186aac7828cdc722eaa50c8a1cbc6b6f9667fcb010085242ae9184ff307f7397391969897615599ffa1903890b3fa296993698281715e156f8003f74dc34cf70615dd95614532540926dbcff40bce9f72b3d9cc7832653ca0cd5b1582df710317045b3a1af3dff5b1d8e70e7050438b6c8e736bb2b247442d9f3c6df98f73e434cbb899c791854efa8d97be66716440001e542c5db1b34aa341e8ae20309f7f40c08f2aabbf25cd2560f2393d5f77adaf30385a8d5ed2a038e62510adc1612751b5261f0753a254d164b2ac595bee7ca63230531384b331af354b4bf1a7827764d4a17a40fe7d1d6af7c1b81f8318aa3345882bcf69a75ee5dfed72024a67cfced6227656884a52b922aa6bd3f5a98ee030e6c8a3ab240f42c6dd3ab07cacfe8920fdd90116ad15b626cfeddbaa4ae991bac8789386f096f8cea6f2ed92130a3215f42b2555baea793329aa6f14546ece5c7cc51e86691632715fefd11a6cbbe5adb2c8e550260a34934a4214cea164cdd252a3d33cd7c69b25984b6a957f748e1e99d49378b62f3a80091ebf55edae2022997caad9f8ea2645d97ca7e82db40e0fec827877287c5abd4d379a3e00a1b0cc87e2c1f0b92d7271b2415d85099dd6732e2433d87efe51f51f784280e3dad6dcd546eb48c3e7abdaaad04c75df9c05629b03375af459fd1096a02b43c46a7bfec0962c39c63358a0dc7c2fa0893d1585d7bf8a12f37eae7077fd8f1e37f1c9b738de9f41c243a5a497501238450a532a2e6c71800dfc3a9cec00cb26450b6fe8e59926ce38eef467341a6bbe8c222e959e5467673a8268605a9aaabd62880d8bfa8022d481958ca4045bbda8bad5e569140f51fb0887b09339f1bb97d166225578c3d97a7450f35cd33d5a0bf81506647afa1538c6c7783b6e390f64bee917e7912b55f18e25bf3e8756e20c5cf3c40db7fab1ed2e0210f215cd886677a077e7dc64b4edb3d939b5d2c0170b4117a61c0692d6a1f67af6597032919110661c49dee0d67b1c9c9d9e531907b67518a68f769cd86087be6543890141a0b5efba698ef8c4fa9597abe5cec6d0bac3053afb196c4551f6eba45aea19cb974e386d5de0551e5cb33c64d39125bef03599a6ffd6303231a693a86850e0bc00a4fb4c838d31f124b1bd3185d8ddb84d9db9e011533697a3eba3d6c62f43ad8468bf77a6b16dbe0eb6205245e25ce5127d315e300251186d274ac8271fe8416737ab16dc31c7aa85fa5b5e9dddfa7e68865a97103e89da86803a77c33abee794f589dfceed1e7105cfcf961f2e4bdb126ee0ff0c12b67100dc0768d8e8e66b367b1b4040d2d6811b03608360e1e6e7f5225d5e2aa0c1b4eae7e86c7407e78ec8700efa08bfd9dfae7891909e94dac811159e84b62e72598caa572ca6bd126ee564a53b300c1166d15abe043eb020f97f64b3ffa6ec077fed76e054e91d5904e16c73c1b2ddeb6d0e7f795d569c47aed53524ab9b72143d8d4b1531744bd3a692cb1c667c36b178f629427e53389d569bacaa5dd796c48ce58ebecdc82604117cb809a8a0a78f705dd74454b3324ee436b17e454f663b70b18d6490da33617b2d0446f8870e9192dab0dcff6f77321096618ac53538a357b88234e83a9e9910c363f6338cb9554803658491bbdda67d63c7142f7e134485bb98283fe0b9d8f93d9a7c7cf99c359b02a658bb6d34a69f161c6084644024c199a2b3f3bd629d8eb95b44a2d6ee7a3c393bdb354fb151f386ed76736502c5129675e0ccfed7a44f770a2d8615d17473e7a25985a3fd9f2ecbd938a2f32abe0e94e36ba02a0c4897612fecabcc0ba0e523b6b0a627b9346445f9028fc855b48d638975d2dd893dd8bf4b517e8a7c489f5a19e8b3949d438a2bab619bed191f1200b49e85f7548a4e1c8b5713dcd05bbf228d2a948c9f06bed481e304b21cfcd177398b9f3edd0de6326f1ecc25a4749833edf238220ff251b0b6bb36cec730d3497e694540403342c581be1e527739d81965b3cac11856e6be7d540796b340f923a74c4ab0ff7b2ad6234ecae0dbc1433bebea7e124d9eeb766ef8ac7f4aa4a2c24d6e8fdb45861dc6b1233cc63bfaaacbe4f141d1a7d0f61503f264e150b900bc73b39e700e98f6e900bd45508373cad2660bfffb4aa2b6be68092998dc52755fef0b327e9a58c5a9e7197975d9bbd901f566dc8200e44db9ce7e074c8dc09bcd1c2334ae1f37fce454f31b3fa22562f6051a0477b8414eee4dc0079cfcd5d539a1468f60b70c38fec0e6a1a80e8fe06ccec8cd46284e09b2d07afdffd440492602e213a1e593e81b5853a5e2ad8a0b50f096d22b867bd31b670aaa4e49d1f1e3492f668405b6952ccd2d377d704036fc8becbc8deda6ceef7fef85a517041f56c8238bf0c539c39ec815f4bf2633aed0680c0f7d0fe3b1dc54689e311c4c72d0a08cc4b183b8bbefbd677fab10ed8f539f4cce070d661c8f418668757983a32d00dd3be06ac8946a0b477f1e36a8cc6641056f7c167c0cbe0d302b58a5093f530a95fca9c433d0512ad4f2c5de67652ba89a786725296ed20a7", 0x9c}}, 0x80000001}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000001680)={0x3ff, 0x9b}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x61}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x400}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000054) 13:06:22 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2$9p(&(0x7f0000000040), 0x80000) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) pipe2$9p(&(0x7f0000000040), 0x80000) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) 13:06:22 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000000)=0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:06:22 executing program 3: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x47504a4d, 0x0, 0x0, [{}, {0xfffffffd}]}}) 13:06:22 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d4fa5037"}, 0x0, 0x2, {0x0}}) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000440)={0x2, @pix={0x6, 0x344, 0x52424752, 0x7, 0x4, 0x100, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000001c0)={0x8, 0x3f, 0x4, {0x1, @win={{0x8, 0x40800, 0x9, 0x7ff}, 0x0, 0x6, &(0x7f0000000180)={{0x8, 0x1, 0x46e8, 0x1000}, &(0x7f0000000140)={{0x7f, 0x38b7, 0x8}, &(0x7f0000000100)={{0x10000000, 0xa44, 0x3f, 0x80000000}}}}, 0x40, &(0x7f0000000680)="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", 0x9c}}, 0x80000001}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000001680)={0x3ff, 0x9b}) 13:06:22 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f00000000c0)) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0x0, 0x76}) syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x1, @raw_data="5c03cc05a811f411aef61d5f99630bead214210c7aa01a3dc605e2cfcd8f4d14a68f48fc6b2f6be1f3d56f6fb3d7fa2d3dcfbdfcee2c8b4799b31a70ed19fb862b426af0357650208ff0fe6d0bf1bb9adda367c1a005d290d94c4e079e0f0eaabee8549410af52775f16acfcb87c7827a0c06bac7dd8c68a6e873f2e03413a67b2ff7632ecedd35dae9d2a71e35d2cee7789dade0b87ad85dd29d819583af71fac37c55a432c6ec7f26038ef1efd77c13af2476db3e54935b7233dd12aac4b6e994de930ca592691"}) [ 650.558275] oom_reaper: reaped process 12043 (syz-executor.0), now anon-rss:0kB, file-rss:14336kB, shmem-rss:56kB [ 650.594556] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 650.616141] systemd-journal cpuset=/ mems_allowed=0-1 [ 650.621369] CPU: 0 PID: 4692 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 650.629266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 650.638619] Call Trace: [ 650.641213] dump_stack+0x1fc/0x2ef [ 650.644857] dump_header+0x15d/0xc3f [ 650.648576] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 650.653693] ? ___ratelimit+0x319/0x590 [ 650.657679] oom_kill_process.cold+0x10/0x692 [ 650.662174] ? check_preemption_disabled+0x41/0x280 [ 650.667190] ? has_intersects_mems_allowed+0x1d6/0x290 [ 650.672463] out_of_memory+0x1072/0x1390 [ 650.676608] ? oom_killer_disable+0x270/0x270 [ 650.681090] ? mutex_trylock+0x15f/0x1a0 [ 650.685141] __alloc_pages_nodemask+0x23a2/0x2890 [ 650.689967] ? find_get_entry+0x4cd/0x8a0 [ 650.694108] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 650.698957] alloc_pages_current+0x193/0x2a0 [ 650.703374] filemap_fault+0x146e/0x2180 [ 650.707434] ext4_filemap_fault+0x84/0xb0 [ 650.711582] __do_fault+0x10b/0x4b0 [ 650.715204] __handle_mm_fault+0x273b/0x41c0 [ 650.719601] ? vm_insert_page+0x9c0/0x9c0 [ 650.723745] ? check_preemption_disabled+0x41/0x280 [ 650.728766] handle_mm_fault+0x436/0xb10 [ 650.732837] __do_page_fault+0x68e/0xd60 [ 650.737119] ? trace_hardirqs_off_caller+0x6e/0x210 [ 650.742128] ? spurious_fault+0x840/0x840 [ 650.746280] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 650.751124] ? page_fault+0x8/0x30 [ 650.754651] page_fault+0x1e/0x30 [ 650.758088] RIP: 0033:0x7f9387a382e3 [ 650.761787] Code: Bad RIP value. [ 650.765131] RSP: 002b:00007ffcdd895638 EFLAGS: 00010246 [ 650.770475] RAX: 0000000000000001 RBX: 000055b66ef5b1e0 RCX: 00007f9387a382e3 [ 650.777726] RDX: 0000000000000013 RSI: 00007ffcdd895640 RDI: 0000000000000008 [ 650.785065] RBP: 00007ffcdd895830 R08: 00007ffcdd9c4000 R09: 000000a4be7a29f5 [ 650.792315] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcdd895640 [ 650.799654] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005f5c242cae7d0 [ 650.807149] Mem-Info: [ 650.809570] active_anon:19045 inactive_anon:4854 isolated_anon:0 [ 650.809570] active_file:0 inactive_file:10 isolated_file:0 [ 650.809570] unevictable:0 dirty:25 writeback:0 unstable:0 [ 650.809570] slab_reclaimable:20946 slab_unreclaimable:108744 [ 650.809570] mapped:22774 shmem:5410 pagetables:582 bounce:0 [ 650.809570] free:13827 free_pcp:986 free_cma:0 [ 650.822965] syz-executor.0: vmalloc: allocation failure, allocated 1808740352 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 650.845340] Node 0 active_anon:75120kB inactive_anon:19412kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:91052kB dirty:0kB writeback:0kB shmem:21636kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 28672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 650.865472] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 650.884254] Node 1 active_anon:1040kB inactive_anon:4kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 650.896080] CPU: 1 PID: 12043 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 650.917283] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 650.923258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 650.923263] Call Trace: [ 650.923284] dump_stack+0x1fc/0x2ef [ 650.923302] warn_alloc.cold+0x7b/0x18f [ 650.923322] ? zone_watermark_ok_safe+0x260/0x260 [ 650.950527] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 650.958780] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 650.958816] __vmalloc_area_node+0x4fd/0x780 [ 650.958836] ? __vmalloc_node_range+0x180/0x180 [ 650.962576] Node 0 DMA32 free:17768kB min:35996kB low:44992kB high:53988kB active_anon:75120kB inactive_anon:19412kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7584kB pagetables:2200kB bounce:0kB free_pcp:1636kB local_pcp:92kB free_cma:0kB [ 650.965106] ? _raw_spin_unlock+0x29/0x40 [ 650.965122] ? __get_vm_area_node+0x2e2/0x3a0 [ 650.965141] __vmalloc_node_range+0xed/0x180 [ 650.965155] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 650.965173] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 650.969121] lowmem_reserve[]: 0 0 1 1 1 [ 650.973962] vmalloc_user+0x70/0xe0 [ 650.973976] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 650.973989] vb2_vmalloc_alloc+0xb3/0x2f0 [ 650.974004] __vb2_queue_alloc+0x472/0xe60 [ 650.974031] vb2_core_create_bufs+0x273/0x7e0 [ 650.981327] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 650.983946] ? __vb2_queue_free+0x870/0x870 [ 650.983961] ? __video_do_ioctl+0x632/0xcd0 [ 650.983979] ? pi_state_update_owner+0x450/0x450 [ 650.983994] ? __mutex_lock+0x368/0x1190 [ 650.984010] vb2_create_bufs+0x332/0x620 [ 650.984029] ? mark_held_locks+0xf0/0xf0 [ 650.988410] lowmem_reserve[]: 0 0 0 0 0 [ 650.993066] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 650.993081] ? futex_wait_queue_me+0x404/0x5e0 [ 650.993095] ? pi_state_update_owner+0x450/0x450 [ 650.993113] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 651.024064] Node 1 Normal free:26664kB min:53876kB low:67344kB high:80812kB active_anon:1040kB inactive_anon:4kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:128kB pagetables:124kB bounce:0kB free_pcp:2284kB local_pcp:1544kB free_cma:0kB [ 651.026135] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 651.030596] lowmem_reserve[]: 0 0 0 0 0 [ 651.035002] v4l_create_bufs+0xb2/0x160 [ 651.035020] __video_do_ioctl+0x49a/0xcd0 [ 651.035040] ? v4l_querycap+0x340/0x340 [ 651.035059] ? __might_fault+0x192/0x1d0 [ 651.035077] ? v4l_querycap+0x340/0x340 [ 651.039457] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 651.044812] video_usercopy+0x13f/0xfa0 [ 651.044833] ? v4l_enumstd+0x60/0x60 [ 651.044847] ? do_futex+0x171/0x1880 [ 651.044866] ? mark_held_locks+0xf0/0xf0 [ 651.050981] Node 0 DMA32: 1314*4kB (UME) 532*8kB (ME) 182*16kB (ME) 65*32kB (MEH) 21*64kB (UMH) 1*128kB (H) 1*256kB (H) 1*512kB (H) 1*1024kB (H) 0*2048kB 0*4096kB = 17768kB [ 651.052462] ? debug_check_no_obj_freed+0x201/0x490 [ 651.056814] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 651.060899] ? video_usercopy+0xfa0/0xfa0 [ 651.066533] Node 1 Normal: 52*4kB (UME) 53*8kB (ME) 41*16kB (UME) 35*32kB (ME) 29*64kB (UME) 21*128kB (ME) 9*256kB (ME) 2*512kB (ME) 2*1024kB (UE) 1*2048kB (E) 3*4096kB (M) = 26664kB [ 651.069592] v4l2_ioctl+0x147/0x1a0 [ 651.098954] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 651.099730] ? video_devdata+0xa0/0xa0 [ 651.104078] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 651.108790] do_vfs_ioctl+0xcdb/0x12e0 [ 651.112826] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 651.116871] ? lock_downgrade+0x720/0x720 [ 651.116887] ? check_preemption_disabled+0x41/0x280 [ 651.116901] ? ioctl_preallocate+0x200/0x200 [ 651.116919] ? __fget+0x356/0x510 [ 651.116936] ? do_dup2+0x450/0x450 [ 651.123720] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 651.124940] ? __se_sys_futex+0x298/0x3b0 [ 651.130019] 5441 total pagecache pages [ 651.134591] ksys_ioctl+0x9b/0xc0 [ 651.134609] __x64_sys_ioctl+0x6f/0xb0 [ 651.134623] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 651.134636] do_syscall_64+0xf9/0x620 [ 651.134656] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 651.140768] 0 pages in swap cache [ 651.144469] RIP: 0033:0x7f68c24140f9 [ 651.144485] Code: Bad RIP value. [ 651.144492] RSP: 002b:00007f68c0986168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 651.144503] RAX: ffffffffffffffda RBX: 00007f68c2533f80 RCX: 00007f68c24140f9 [ 651.144510] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000006 [ 651.144521] RBP: 00007f68c246fae9 R08: 0000000000000000 R09: 0000000000000000 [ 651.144528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.144540] R13: 00007fff6155d44f R14: 00007f68c0986300 R15: 0000000000022000 [ 651.176502] Swap cache stats: add 0, delete 0, find 0/0 [ 651.192540] Mem-Info: [ 651.208744] Free swap = 0kB [ 651.222913] active_anon:19040 inactive_anon:4854 isolated_anon:0 [ 651.222913] active_file:15 inactive_file:16 isolated_file:0 [ 651.222913] unevictable:0 dirty:0 writeback:0 unstable:0 [ 651.222913] slab_reclaimable:20947 slab_unreclaimable:108772 [ 651.222913] mapped:22763 shmem:5410 pagetables:581 bounce:0 [ 651.222913] free:13827 free_pcp:977 free_cma:0 [ 651.232265] Total swap = 0kB [ 651.254332] Node 0 active_anon:75120kB inactive_anon:19412kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:91052kB dirty:0kB writeback:0kB shmem:21636kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 28672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 651.273935] 2097051 pages RAM [ 651.291104] Node 1 active_anon:1040kB inactive_anon:4kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 651.304761] 0 pages HighMem/MovableOnly [ 651.316043] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 651.331303] 369649 pages reserved [ 651.342227] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 651.342419] 0 pages cma reserved [ 651.351032] Node 0 DMA32 free:17768kB min:35996kB low:44992kB high:53988kB active_anon:75120kB inactive_anon:19412kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7584kB pagetables:2200kB bounce:0kB free_pcp:1616kB local_pcp:1544kB free_cma:0kB [ 651.351067] lowmem_reserve[]: 0 0 1 1 1 [ 651.351086] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 651.351113] lowmem_reserve[]: 0 0 0 0 0 [ 651.351133] Node 1 Normal free:26664kB min:53876kB low:67344kB high:80812kB active_anon:1040kB inactive_anon:4kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:128kB pagetables:124kB bounce:0kB free_pcp:2284kB local_pcp:740kB free_cma:0kB [ 651.363450] Unreclaimable slab info: [ 651.373374] lowmem_reserve[]: 0 0 0 0 0 [ 651.379548] Name Used Total [ 651.380076] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 651.389555] pid_2 102KB 152KB [ 651.396336] Node 0 DMA32: 1314*4kB (UME) 532*8kB (ME) 182*16kB (ME) 65*32kB (MEH) 21*64kB (UMH) 1*128kB (H) 1*256kB (H) 1*512kB (H) 1*1024kB (H) 0*2048kB 0*4096kB = 17768kB [ 651.406747] batadv_tl_cache 4KB 12KB [ 651.417499] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 651.429201] TIPC 10KB 15KB [ 651.441990] Node 1 Normal: 52*4kB (UME) 53*8kB (ME) 41*16kB (UME) 35*32kB (ME) 29*64kB (UME) 21*128kB (ME) 9*256kB (ME) 2*512kB (ME) 2*1024kB (UE) 1*2048kB (E) 3*4096kB (M) = 26664kB [ 651.446562] SCTPv6 14KB 18KB [ 651.486086] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 651.518658] SCTP 0KB 62KB [ 651.546065] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 651.575431] DCCPv6 17KB 22KB [ 651.588853] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 651.619385] DCCP 16KB 21KB [ 651.647854] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 651.682606] RXRPC 11KB 13KB [ 651.694128] 5441 total pagecache pages [ 651.709038] rxrpc_call_jar 78KB 94KB [ 651.728321] 0 pages in swap cache [ 651.746705] bridge_fdb_cache 9KB 15KB [ 651.766786] Swap cache stats: add 0, delete 0, find 0/0 [ 651.778890] fib6_nodes 157KB 160KB [ 651.781795] Free swap = 0kB [ 651.788376] ip6_dst_cache 80KB 326KB [ 651.801838] Total swap = 0kB [ 651.803037] RAWv6 70KB 74KB [ 651.808080] 2097051 pages RAM [ 651.820863] UDPv6 26KB 30KB [ 651.829614] 0 pages HighMem/MovableOnly [ 651.831309] TCPv6 33KB 42KB [ 651.834777] 369649 pages reserved [ 651.834781] 0 pages cma reserved [ 651.899548] nf_conntrack 5KB 18KB [ 651.905038] t10_alua_lu_gp_cache 0KB 3KB [ 651.910688] sd_ext_cdb 0KB 7KB [ 651.920968] scsi_sense_cache 1056KB 1060KB [ 651.926390] virtio_scsi_cmd 16KB 16KB [ 651.931763] sgpool-128 8KB 8KB [ 651.942311] sgpool-64 4KB 12KB [ 651.947735] sgpool-32 2KB 15KB [ 651.957977] sgpool-16 1KB 7KB [ 651.963388] sgpool-8 0KB 7KB [ 651.968760] mqueue_inode_cache 10KB 22KB [ 651.979187] bio_post_read_ctx 14KB 15KB [ 651.984674] bio-2 14KB 15KB [ 651.990037] jfs_mp 7KB 7KB [ 652.000163] cifs_small_rq 15KB 16KB [ 652.005583] cifs_request 67KB 67KB [ 652.011292] cifs_mpx_ids 0KB 7KB [ 652.021422] nfs_commit_data 3KB 14KB [ 652.026898] nfs_write_data 34KB 44KB [ 652.032297] ext4_system_zone 1KB 7KB [ 652.043143] bio-1 1KB 7KB [ 652.048519] pid_namespace 2KB 7KB [ 652.057902] rpc_buffers 17KB 25KB [ 652.064191] rpc_tasks 2KB 7KB [ 652.069562] UNIX 125KB 127KB [ 652.079083] tcp_bind_bucket 1KB 4KB [ 652.085346] ip_fib_trie 23KB 27KB [ 652.090715] ip_fib_alias 112KB 118KB [ 652.100030] ip_dst_cache 10KB 48KB [ 652.106367] RAW 42KB 52KB [ 652.111778] UDP 35KB 47KB [ 652.121410] TCP 11KB 16KB [ 652.127629] hugetlbfs_inode_cache 3KB 15KB [ 652.137514] fscache_cookie_jar 1KB 11KB [ 652.144283] eventpoll_pwq 16KB 47KB [ 652.149654] eventpoll_epi 37KB 66KB [ 652.158949] inotify_inode_mark 24KB 55KB [ 652.165323] request_queue 199KB 199KB [ 652.170693] blkdev_requests 1KB 3KB [ 652.180028] blkdev_ioc 13KB 19KB [ 652.186263] bio-0 519KB 521KB [ 652.191628] biovec-max 1361KB 1361KB [ 652.201105] biovec-64 351KB 354KB [ 652.207318] biovec-16 20KB 26KB [ 652.212686] bio_integrity_payload 1KB 8KB [ 652.222673] khugepaged_mm_slot 17KB 34KB [ 652.229027] uid_cache 0KB 4KB [ 652.238428] dmaengine-unmap-2 0KB 3KB [ 652.244644] skbuff_fclone_cache 190KB 408KB [ 652.250689] skbuff_head_cache 4293KB 4293KB [ 652.260185] configfs_dir_cache 3KB 11KB [ 652.272290] file_lock_cache 122KB 202KB [ 652.281644] file_lock_ctx 9KB 11KB [ 652.287903] fsnotify_mark_connector 13KB 31KB [ 652.297858] net_namespace 52KB 52KB [ 652.304090] shmem_inode_cache 8290KB 8536KB [ 652.309452] task_delay_info 225KB 411KB [ 652.318967] taskstats 111KB 210KB [ 652.325377] proc_dir_entry 694KB 697KB [ 652.330745] pde_opener 6KB 58KB [ 652.340402] seq_file 214KB 539KB [ 652.349556] sigqueue 42KB 55KB [ 652.358919] kernfs_node_cache 18234KB 18246KB [ 652.365168] mnt_cache 173KB 188KB [ 652.370533] filp 5340KB 7657KB [ 652.380037] names_cache 125506KB 125545KB [ 652.386323] iint_cache 87KB 87KB [ 652.391690] key_jar 4KB 11KB [ 652.401138] uts_namespace 2KB 7KB [ 652.407400] nsproxy 3KB 15KB [ 652.412773] vm_area_struct 3141KB 5212KB [ 652.422237] mm_struct 656KB 1124KB [ 652.430933] fs_cache 120KB 384KB [ 652.440477] files_cache 435KB 851KB [ 652.446694] signal_cache 1012KB 1804KB [ 652.452567] sighand_cache 568KB 596KB [ 652.461920] task_struct 7051KB 7107KB [ 652.468224] cred_jar 1012KB 2100KB [ 652.477537] anon_vma_chain 1029KB 1803KB [ 652.483841] anon_vma 161KB 269KB [ 652.489237] pid 50KB 264KB [ 652.498890] Acpi-Operand 156KB 202KB [ 652.505158] Acpi-ParseExt 8KB 11KB [ 652.510525] Acpi-Parse 41KB 47KB [ 652.520034] Acpi-State 52KB 63KB [ 652.529938] Acpi-Namespace 21KB 27KB [ 652.539340] numa_policy 0KB 3KB [ 652.549627] debug_objects_cache 2251KB 2252KB [ 652.562366] trace_event_file 297KB 298KB [ 652.571179] ftrace_event_field 398KB 401KB [ 652.581889] pool_workqueue 121KB 124KB [ 652.589811] page->ptl 634KB 1047KB [ 652.599348] kmalloc-2097152 2050KB 2050KB [ 652.605897] kmalloc-524288 2056KB 2056KB [ 652.611343] kmalloc-262144 1290KB 1290KB [ 652.621349] kmalloc-131072 650KB 650KB [ 652.628248] kmalloc-65536 1848KB 1914KB [ 652.637696] kmalloc-32768 1650KB 1650KB [ 652.643957] kmalloc-16384 940KB 940KB [ 652.649535] kmalloc-8192 3960KB 4001KB [ 652.661499] kmalloc-4096 18908KB 18946KB [ 652.668563] kmalloc-2048 13529KB 13903KB [ 652.678741] kmalloc-1024 7738KB 7756KB [ 652.685017] kmalloc-512 8820KB 8820KB [ 652.690391] kmalloc-256 5434KB 5501KB [ 652.700259] kmalloc-128 1018KB 1488KB [ 652.706509] kmalloc-96 3370KB 4020KB [ 652.711994] kmalloc-64 3500KB 4264KB [ 652.721871] kmalloc-32 1820KB 2445KB [ 652.729475] kmalloc-192 1478KB 2292KB [ 652.739500] kmem_cache 177KB 183KB [ 652.749502] Out of memory (oom_kill_allocating_task): Kill process 4692 (systemd-journal) score 0 or sacrifice child [ 652.763560] Killed process 4692 (systemd-journal) total-vm:46096kB, anon-rss:512kB, file-rss:0kB, shmem-rss:3056kB [ 652.775532] oom_reaper: reaped process 4692 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:3192kB [ 652.899657] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 652.909084] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 652.937781] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 652.946180] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 652.957502] systemd[1]: Stopped Journal Service. [ 652.975369] systemd[1]: Starting Journal Service... [ 653.293802] systemd-journald[12100]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 653.769602] systemd[1]: Started Journal Service. 13:06:32 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2$9p(&(0x7f0000000040), 0x80000) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:06:32 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000000)=0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000000)=0x2) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async) 13:06:32 executing program 3: sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x101}]}, 0x1c}}, 0x20040) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:06:32 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f00000000c0)) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0x0, 0x76}) syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x1, @raw_data="5c03cc05a811f411aef61d5f99630bead214210c7aa01a3dc605e2cfcd8f4d14a68f48fc6b2f6be1f3d56f6fb3d7fa2d3dcfbdfcee2c8b4799b31a70ed19fb862b426af0357650208ff0fe6d0bf1bb9adda367c1a005d290d94c4e079e0f0eaabee8549410af52775f16acfcb87c7827a0c06bac7dd8c68a6e873f2e03413a67b2ff7632ecedd35dae9d2a71e35d2cee7789dade0b87ad85dd29d819583af71fac37c55a432c6ec7f26038ef1efd77c13af2476db3e54935b7233dd12aac4b6e994de930ca592691"}) 13:06:32 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d4fa5037"}, 0x0, 0x2, {0x0}}) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000440)={0x2, @pix={0x6, 0x344, 0x52424752, 0x7, 0x4, 0x100, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000001c0)={0x8, 0x3f, 0x4, {0x1, @win={{0x8, 0x40800, 0x9, 0x7ff}, 0x0, 0x6, &(0x7f0000000180)={{0x8, 0x1, 0x46e8, 0x1000}, &(0x7f0000000140)={{0x7f, 0x38b7, 0x8}, &(0x7f0000000100)={{0x10000000, 0xa44, 0x3f, 0x80000000}}}}, 0x40, &(0x7f0000000680)="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", 0x9c}}, 0x80000001}) 13:06:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_SSID={0x15, 0x34, @random="93388aaa8e929b9ccdf5660a6a3b123fd4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xbb, 0x401, 0x34324948, 0x9, 0x3, 0x9, 0x7, 0x40000, 0x1, 0x0, 0x1, 0x7}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000380)=@userptr={0x40000000, 0x0, 0x4, 0x0, 0x3, {0x0, 0x2710}, {0x1, 0x2, 0x9, 0x9, 0x80, 0xea, "f8437f47"}, 0x3, 0x2, {&(0x7f0000000340)}, 0x9}) ioctl$vim2m_VIDIOC_G_FMT(r3, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x55595659, 0x0, 0x0, [{}, {}, {0xffffffff}, {}, {0x0, 0x400000}], 0x0, 0x10}}) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000140)=0x1, 0x4) 13:06:33 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d4fa5037"}, 0x0, 0x2, {0x0}}) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000440)={0x2, @pix={0x6, 0x344, 0x52424752, 0x7, 0x4, 0x100, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1}}) 13:06:33 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x33d, 0xce25ce7db943775e, 0x1, "dfe52c0a73b204d45eeaaaf489e64346b74ef777ea8f43912743957d264f4a75", 0x30324c4a}) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0xe48, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000080)=0x2) 13:06:33 executing program 3: sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x101}]}, 0x1c}}, 0x20040) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:06:33 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f00000000c0)) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0x0, 0x76}) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x1, @raw_data="5c03cc05a811f411aef61d5f99630bead214210c7aa01a3dc605e2cfcd8f4d14a68f48fc6b2f6be1f3d56f6fb3d7fa2d3dcfbdfcee2c8b4799b31a70ed19fb862b426af0357650208ff0fe6d0bf1bb9adda367c1a005d290d94c4e079e0f0eaabee8549410af52775f16acfcb87c7827a0c06bac7dd8c68a6e873f2e03413a67b2ff7632ecedd35dae9d2a71e35d2cee7789dade0b87ad85dd29d819583af71fac37c55a432c6ec7f26038ef1efd77c13af2476db3e54935b7233dd12aac4b6e994de930ca592691"}) 13:06:33 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x33d, 0xce25ce7db943775e, 0x1, "dfe52c0a73b204d45eeaaaf489e64346b74ef777ea8f43912743957d264f4a75", 0x30324c4a}) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0xe48, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000080)=0x2) 13:06:33 executing program 3: sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x101}]}, 0x1c}}, 0x20040) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:06:33 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d4fa5037"}, 0x0, 0x2, {0x0}}) syz_open_dev$vim2m(&(0x7f00000002c0), 0xffffffffffffffff, 0x2) 13:06:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000d84a612d9b57725072716c13f8cca9a8359c1a5f219a8577fd39b88c0c7cd9d3444feb1b6c8de5607fb2a466122380afa23c0e5dfd47aa0e2de9e630c65e4564f11620f13bbcafb4d3f38c403803441e6bc", @ANYRES16=r2, @ANYBLOB="000129bd7000fedbdf25650000000800020000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4004085) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r3, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f00000001c0)=@userptr={0x5, 0x1, 0x4, 0x100, 0x5b68, {0x77359400}, {0x3, 0x1, 0xf4, 0x0, 0x8c, 0x6, "0b10d7de"}, 0x8dc, 0x2, {&(0x7f0000000180)}, 0x8001}) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x101, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0xcd6d, 0x3, 0x3, "b6e7364b11c1f12a6b1d7c8cb29809fce3545b00ed1e5d32a44b5829afd67cdc", 0x32314142}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) 13:06:34 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async, rerun: 64) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (rerun: 64) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x33d, 0xce25ce7db943775e, 0x1, "dfe52c0a73b204d45eeaaaf489e64346b74ef777ea8f43912743957d264f4a75", 0x30324c4a}) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0xe48, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000080)=0x2) [ 661.691471] oom_reaper: reaped process 12113 (syz-executor.0), now anon-rss:0kB, file-rss:14332kB, shmem-rss:56kB [ 661.719075] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 661.743935] in:imklog cpuset=/ mems_allowed=0-1 [ 661.748647] CPU: 0 PID: 11564 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 661.756183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 661.765532] Call Trace: [ 661.768138] dump_stack+0x1fc/0x2ef [ 661.771768] dump_header+0x15d/0xc3f [ 661.775470] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 661.780554] ? ___ratelimit+0x319/0x590 [ 661.784531] oom_kill_process.cold+0x10/0x692 [ 661.789019] ? check_preemption_disabled+0x41/0x280 [ 661.794027] ? has_intersects_mems_allowed+0x1d6/0x290 [ 661.799288] out_of_memory+0x1072/0x1390 [ 661.803335] ? oom_killer_disable+0x270/0x270 [ 661.807823] ? mutex_trylock+0x15f/0x1a0 [ 661.811870] __alloc_pages_nodemask+0x23a2/0x2890 [ 661.816701] ? find_get_entry+0x4cd/0x8a0 [ 661.820837] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 661.825681] alloc_pages_current+0x193/0x2a0 [ 661.830072] filemap_fault+0x146e/0x2180 [ 661.834123] ext4_filemap_fault+0x84/0xb0 [ 661.838252] __do_fault+0x10b/0x4b0 [ 661.841875] __handle_mm_fault+0x273b/0x41c0 [ 661.846301] ? vm_insert_page+0x9c0/0x9c0 [ 661.850434] ? lock_downgrade+0x720/0x720 [ 661.854612] ? check_preemption_disabled+0x41/0x280 [ 661.859655] handle_mm_fault+0x436/0xb10 [ 661.863728] __do_page_fault+0x68e/0xd60 [ 661.867841] ? trace_hardirqs_off_caller+0x6e/0x210 [ 661.872870] ? spurious_fault+0x840/0x840 [ 661.877003] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 661.881831] ? page_fault+0x8/0x30 [ 661.885368] page_fault+0x1e/0x30 [ 661.888804] RIP: 0033:0x7f8e66a9222d [ 661.892507] Code: Bad RIP value. [ 661.895852] RSP: 002b:00007f8e6442e580 EFLAGS: 00010293 [ 661.901205] RAX: 0000000000000078 RBX: 0000000000000000 RCX: 00007f8e66a9222d [ 661.908471] RDX: 0000000000001fa0 RSI: 00007f8e6442eda0 RDI: 0000000000000004 [ 661.915728] RBP: 0000558bd17369d0 R08: 00007f8e65c0b940 R09: 0000000004000001 [ 661.923002] R10: 0000000000000001 R11: 0000000000000293 R12: 00007f8e6442eda0 [ 661.930361] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f8e6442edd8 [ 661.942726] syz-executor.0: vmalloc: allocation failure, allocated 1799856128 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 661.948393] Mem-Info: [ 661.956615] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 661.961410] active_anon:20096 inactive_anon:6882 isolated_anon:0 [ 661.961410] active_file:16 inactive_file:16 isolated_file:0 [ 661.961410] unevictable:0 dirty:0 writeback:0 unstable:0 [ 661.961410] slab_reclaimable:20849 slab_unreclaimable:108065 [ 661.961410] mapped:22311 shmem:7458 pagetables:597 bounce:0 [ 661.961410] free:13807 free_pcp:863 free_cma:0 [ 661.967694] CPU: 1 PID: 12113 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 662.002804] Node 0 active_anon:78828kB inactive_anon:19324kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 32768kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 662.005324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 662.005336] Call Trace: [ 662.037794] Node 1 active_anon:1556kB inactive_anon:8204kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1376kB dirty:0kB writeback:0kB shmem:8204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 662.042308] dump_stack+0x1fc/0x2ef [ 662.044932] Node 0 DMA free:10880kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 662.071667] warn_alloc.cold+0x7b/0x18f [ 662.071686] ? zone_watermark_ok_safe+0x260/0x260 [ 662.071699] ? retint_kernel+0x2d/0x2d [ 662.071734] __vmalloc_area_node+0x4fd/0x780 [ 662.071754] ? __vmalloc_node_range+0x180/0x180 [ 662.071767] ? _raw_spin_unlock+0x29/0x40 [ 662.071782] ? __get_vm_area_node+0x2e2/0x3a0 [ 662.080574] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 662.101687] __vmalloc_node_range+0xed/0x180 [ 662.101703] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 662.101718] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 662.101730] vmalloc_user+0x70/0xe0 [ 662.101743] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 662.101757] vb2_vmalloc_alloc+0xb3/0x2f0 [ 662.101773] __vb2_queue_alloc+0x472/0xe60 [ 662.101799] vb2_core_create_bufs+0x273/0x7e0 [ 662.101814] ? __vb2_queue_free+0x870/0x870 [ 662.110486] Node 0 DMA32 free:17848kB min:35996kB low:44992kB high:53988kB active_anon:78804kB inactive_anon:19324kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7584kB pagetables:2168kB bounce:0kB free_pcp:1824kB local_pcp:220kB free_cma:0kB [ 662.110622] ? __video_do_ioctl+0x632/0xcd0 [ 662.114549] lowmem_reserve[]: 0 0 1 1 1 [ 662.118879] ? pi_state_update_owner+0x450/0x450 [ 662.128190] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 662.132162] ? __mutex_lock+0x368/0x1190 [ 662.137220] lowmem_reserve[]: 0 0 0 0 0 [ 662.141550] vb2_create_bufs+0x332/0x620 [ 662.157306] Node 1 Normal free:26492kB min:53876kB low:67344kB high:80812kB active_anon:1556kB inactive_anon:8204kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:220kB bounce:0kB free_pcp:1620kB local_pcp:1308kB free_cma:0kB [ 662.159126] ? mark_held_locks+0xf0/0xf0 [ 662.167771] lowmem_reserve[]: 0 0 0 0 0 [ 662.171961] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 662.177160] Node 0 DMA: 2*4kB (M) 1*8kB (U) 1*16kB (U) 1*32kB (M) 1*64kB (M) 2*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 10880kB [ 662.205273] ? futex_wait_queue_me+0x404/0x5e0 [ 662.205290] ? pi_state_update_owner+0x450/0x450 [ 662.205306] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 662.205327] v4l_create_bufs+0xb2/0x160 [ 662.205344] __video_do_ioctl+0x49a/0xcd0 [ 662.205364] ? v4l_querycap+0x340/0x340 [ 662.205381] ? __might_fault+0x192/0x1d0 [ 662.205397] ? v4l_querycap+0x340/0x340 [ 662.205414] video_usercopy+0x13f/0xfa0 [ 662.205436] ? v4l_enumstd+0x60/0x60 [ 662.205451] ? do_futex+0x171/0x1880 [ 662.205469] ? mark_held_locks+0xf0/0xf0 [ 662.205489] ? debug_check_no_obj_freed+0x201/0x490 [ 662.205513] ? video_usercopy+0xfa0/0xfa0 [ 662.205525] v4l2_ioctl+0x147/0x1a0 [ 662.205538] ? video_devdata+0xa0/0xa0 [ 662.205555] do_vfs_ioctl+0xcdb/0x12e0 [ 662.205578] ? lock_downgrade+0x720/0x720 [ 662.205593] ? check_preemption_disabled+0x41/0x280 [ 662.205608] ? ioctl_preallocate+0x200/0x200 [ 662.205627] ? __fget+0x356/0x510 [ 662.205644] ? do_dup2+0x450/0x450 [ 662.205659] ? __se_sys_futex+0x298/0x3b0 [ 662.205682] ksys_ioctl+0x9b/0xc0 [ 662.205698] __x64_sys_ioctl+0x6f/0xb0 [ 662.205713] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 662.205727] do_syscall_64+0xf9/0x620 [ 662.205747] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 662.205760] RIP: 0033:0x7f68c24140f9 [ 662.205775] Code: Bad RIP value. [ 662.205783] RSP: 002b:00007f68c0986168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 662.205798] RAX: ffffffffffffffda RBX: 00007f68c2533f80 RCX: 00007f68c24140f9 [ 662.205805] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000006 [ 662.205813] RBP: 00007f68c246fae9 R08: 0000000000000000 R09: 0000000000000000 [ 662.205819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 662.205826] R13: 00007fff6155d44f R14: 00007f68c0986300 R15: 0000000000022000 [ 662.216318] Mem-Info: [ 662.228003] Node 0 DMA32: 1256*4kB (UME) 556*8kB (UME) 173*16kB (UME) 69*32kB (UMEH) 24*64kB (UMH) 1*128kB (H) 1*256kB (H) 1*512kB (H) 1*1024kB (H) 0*2048kB 0*4096kB = 17904kB [ 662.252108] active_anon:20096 inactive_anon:6882 isolated_anon:0 [ 662.252108] active_file:16 inactive_file:16 isolated_file:0 [ 662.252108] unevictable:0 dirty:0 writeback:0 unstable:0 [ 662.252108] slab_reclaimable:20849 slab_unreclaimable:108065 [ 662.252108] mapped:22311 shmem:7458 pagetables:597 bounce:0 [ 662.252108] free:13807 free_pcp:860 free_cma:0 [ 662.261299] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 662.292872] Node 0 active_anon:78828kB inactive_anon:19324kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 32768kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 662.303426] Node 1 Normal: 149*4kB (UME) 115*8kB (ME) 75*16kB (UME) 53*32kB (UME) 29*64kB (UME) 12*128kB (M) 1*256kB (M) 0*512kB 2*1024kB (UM) 0*2048kB 4*4096kB (UME) = 26492kB [ 662.320934] Node 1 active_anon:1556kB inactive_anon:8204kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1376kB dirty:0kB writeback:0kB shmem:8204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 662.331457] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 662.339862] Node 0 DMA free:10880kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 662.340965] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 662.345061] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 662.345083] Node 0 DMA32 free:17848kB min:35996kB low:44992kB high:53988kB active_anon:78804kB inactive_anon:19324kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7584kB pagetables:2168kB bounce:0kB free_pcp:1816kB local_pcp:1604kB free_cma:0kB [ 662.345122] lowmem_reserve[]: 0 0 1 1 1 [ 662.356728] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 662.362810] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 662.366149] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 662.369703] lowmem_reserve[]: 0 0 0 0 0 [ 662.379005] 7490 total pagecache pages [ 662.386115] Node 1 Normal free:26492kB min:53876kB low:67344kB high:80812kB active_anon:1556kB inactive_anon:8204kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:220kB bounce:0kB free_pcp:1620kB local_pcp:312kB free_cma:0kB [ 662.397368] 0 pages in swap cache [ 662.401789] lowmem_reserve[]: 0 0 0 0 0 [ 662.403174] Swap cache stats: add 0, delete 0, find 0/0 [ 662.411408] Node 0 DMA: 2*4kB (M) 1*8kB (U) 1*16kB (U) 1*32kB (M) 1*64kB (M) 2*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 10880kB [ 662.420004] Free swap = 0kB [ 662.429618] Node 0 DMA32: 1256*4kB (UME) 556*8kB (UME) 173*16kB (UME) 69*32kB (UMEH) 24*64kB (UMH) 1*128kB (H) 1*256kB (H) 1*512kB (H) 1*1024kB (H) 0*2048kB 0*4096kB = 17904kB [ 662.431826] Total swap = 0kB [ 662.435555] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 662.435610] Node 1 Normal: 149*4kB (UME) 115*8kB (ME) 75*16kB (UME) 53*32kB (UME) 29*64kB (UME) 12*128kB (M) 1*256kB (M) 0*512kB 2*1024kB (UM) 0*2048kB 4*4096kB (UME) = 26492kB [ 662.446716] 2097051 pages RAM [ 662.446722] 0 pages HighMem/MovableOnly [ 662.446726] 369649 pages reserved [ 662.446734] 0 pages cma reserved [ 662.460824] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 662.466744] Unreclaimable slab info: [ 662.468668] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 662.475920] Name Used Total [ 662.475932] pid_2 89KB 152KB [ 662.494704] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 662.505584] batadv_tl_cache 4KB 12KB [ 662.546699] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 662.577389] TIPC 10KB 15KB [ 662.601757] 7490 total pagecache pages [ 662.624123] SCTPv6 14KB 18KB [ 662.634064] 0 pages in swap cache [ 662.659255] SCTP 0KB 15KB [ 662.660920] Swap cache stats: add 0, delete 0, find 0/0 [ 662.665983] DCCPv6 17KB 22KB [ 662.665997] DCCP 16KB 21KB [ 662.666040] RXRPC 11KB 13KB [ 662.666050] rxrpc_call_jar 78KB 94KB [ 662.666063] bridge_fdb_cache 9KB 15KB [ 662.666078] fib6_nodes 157KB 160KB [ 662.666087] ip6_dst_cache 83KB 326KB [ 662.666099] RAWv6 70KB 74KB [ 662.716670] Free swap = 0kB [ 662.735622] UDPv6 33KB 37KB [ 662.735636] TCPv6 33KB 48KB [ 662.735655] nf_conntrack 5KB 18KB [ 662.735717] t10_alua_lu_gp_cache 0KB 3KB [ 662.761291] Total swap = 0kB [ 662.784518] sd_ext_cdb 0KB 7KB [ 662.800204] 2097051 pages RAM [ 662.812248] scsi_sense_cache 1056KB 1060KB [ 662.839150] 0 pages HighMem/MovableOnly [ 662.845267] virtio_scsi_cmd 16KB 16KB [ 662.869156] 369649 pages reserved [ 662.872353] sgpool-128 8KB 8KB [ 662.882815] 0 pages cma reserved [ 662.886920] sgpool-64 4KB 12KB [ 663.068513] sgpool-32 2KB 15KB [ 663.073936] sgpool-16 1KB 7KB [ 663.079300] sgpool-8 0KB 7KB [ 663.084738] mqueue_inode_cache 10KB 22KB [ 663.090195] bio_post_read_ctx 14KB 15KB [ 663.095688] bio-2 14KB 15KB [ 663.101565] jfs_mp 7KB 7KB [ 663.107052] cifs_small_rq 15KB 16KB [ 663.112582] cifs_request 67KB 67KB [ 663.117946] cifs_mpx_ids 0KB 7KB [ 663.123392] nfs_commit_data 3KB 14KB [ 663.128758] nfs_write_data 34KB 44KB [ 663.134218] ext4_system_zone 1KB 7KB [ 663.139609] bio-1 1KB 7KB [ 663.145105] pid_namespace 2KB 7KB [ 663.150512] rpc_buffers 17KB 25KB [ 663.155928] rpc_tasks 2KB 7KB [ 663.161287] UNIX 148KB 150KB [ 663.166718] tcp_bind_bucket 1KB 4KB [ 663.172089] ip_fib_trie 23KB 27KB [ 663.177557] ip_fib_alias 112KB 118KB [ 663.182992] ip_dst_cache 10KB 48KB [ 663.188361] RAW 42KB 52KB [ 663.193779] UDP 35KB 47KB [ 663.199169] TCP 14KB 28KB [ 663.205224] hugetlbfs_inode_cache 3KB 15KB [ 663.211033] fscache_cookie_jar 1KB 11KB [ 663.216553] eventpoll_pwq 22KB 47KB [ 663.221920] eventpoll_epi 33KB 66KB [ 663.227365] inotify_inode_mark 28KB 55KB [ 663.232884] request_queue 199KB 199KB [ 663.238245] blkdev_requests 1KB 3KB [ 663.243685] blkdev_ioc 17KB 19KB [ 663.249054] bio-0 711KB 712KB [ 663.254463] biovec-max 1419KB 1419KB [ 663.259831] biovec-64 529KB 535KB [ 663.265266] biovec-16 34KB 37KB [ 663.270627] bio_integrity_payload 1KB 8KB [ 663.276391] khugepaged_mm_slot 12KB 34KB [ 663.281848] uid_cache 0KB 4KB [ 663.287291] dmaengine-unmap-2 0KB 3KB [ 663.292697] skbuff_fclone_cache 153KB 315KB [ 663.298237] skbuff_head_cache 4995KB 4998KB [ 663.303687] configfs_dir_cache 3KB 11KB [ 663.309657] file_lock_cache 102KB 202KB [ 663.315090] file_lock_ctx 9KB 11KB [ 663.320455] fsnotify_mark_connector 11KB 31KB [ 663.326428] net_namespace 52KB 52KB [ 663.331801] shmem_inode_cache 8228KB 8501KB [ 663.337227] task_delay_info 206KB 411KB [ 663.342669] taskstats 99KB 206KB [ 663.348036] proc_dir_entry 694KB 697KB [ 663.353443] pde_opener 10KB 58KB [ 663.358805] seq_file 214KB 539KB [ 663.364242] sigqueue 37KB 55KB [ 663.369604] kernfs_node_cache 18230KB 18246KB [ 663.375008] mnt_cache 173KB 188KB [ 663.380378] filp 5471KB 7646KB [ 663.388024] names_cache 123169KB 123207KB [ 663.395793] iint_cache 89KB 95KB [ 663.401597] key_jar 4KB 11KB [ 663.416048] uts_namespace 2KB 7KB [ 663.421437] nsproxy 1KB 11KB [ 663.429259] vm_area_struct 3100KB 5201KB [ 663.440544] mm_struct 563KB 1085KB [ 663.448590] fs_cache 96KB 380KB [ 663.459918] files_cache 367KB 810KB [ 663.467799] signal_cache 925KB 1782KB [ 663.479400] sighand_cache 531KB 596KB [ 663.487347] task_struct 6558KB 6615KB [ 663.498736] cred_jar 1102KB 2100KB [ 663.506662] anon_vma_chain 1015KB 1803KB [ 663.518253] anon_vma 142KB 269KB [ 663.526101] pid 48KB 264KB [ 663.531523] Acpi-Operand 156KB 202KB [ 663.545153] Acpi-ParseExt 8KB 11KB [ 663.550536] Acpi-Parse 41KB 47KB [ 663.558333] Acpi-State 52KB 63KB [ 663.569968] Acpi-Namespace 21KB 27KB [ 663.577803] numa_policy 0KB 3KB [ 663.589129] debug_objects_cache 2249KB 2252KB [ 663.597294] trace_event_file 297KB 298KB [ 663.609549] ftrace_event_field 398KB 401KB [ 663.617955] pool_workqueue 121KB 124KB [ 663.629624] page->ptl 585KB 1047KB [ 663.637947] kmalloc-2097152 2050KB 2050KB [ 663.650005] kmalloc-524288 2056KB 2056KB [ 663.658037] kmalloc-262144 1290KB 1290KB [ 663.669793] kmalloc-131072 650KB 650KB [ 663.678387] kmalloc-65536 1848KB 1914KB [ 663.687231] kmalloc-32768 1650KB 1650KB [ 663.695889] kmalloc-16384 973KB 973KB [ 663.702000] kmalloc-8192 3960KB 4001KB [ 663.711800] kmalloc-4096 18717KB 18755KB [ 663.728604] kmalloc-2048 13181KB 13878KB [ 663.734924] kmalloc-1024 8011KB 8016KB [ 663.742287] kmalloc-512 10027KB 10027KB [ 663.755437] kmalloc-256 5396KB 5501KB [ 663.761297] kmalloc-128 958KB 1488KB [ 663.776749] kmalloc-96 3542KB 4020KB [ 663.786281] kmalloc-64 3401KB 4264KB [ 663.792121] kmalloc-32 1824KB 2445KB [ 663.807240] kmalloc-192 1475KB 2288KB [ 663.814532] kmem_cache 177KB 183KB [ 663.826688] Out of memory (oom_kill_allocating_task): Kill process 11564 (in:imklog) score 0 or sacrifice child [ 663.838616] Killed process 11562 (rsyslogd) total-vm:254332kB, anon-rss:696kB, file-rss:0kB, shmem-rss:0kB [ 663.855235] oom_reaper: reaped process 11562 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 13:06:43 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000001c0)=@multiplanar_mmap={0x20, 0x2, 0x4, 0x40, 0x200, {}, {0x7, 0x2, 0x2, 0x80, 0x7f, 0x3, "e315c974"}, 0x400, 0x1, {&(0x7f0000000140)=[{0xbf2, 0x3, {0x8}, 0x9}, {0x2, 0x41, {}, 0xe69d}]}, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000003c0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x70000, 0x1, {0x0, 0xea60}, {0x2, 0xc, 0x80, 0x5, 0x3, 0xc7, "5e37fd3b"}, 0x2, 0x2, {&(0x7f0000000340)=[{0x1, 0x3, {&(0x7f00000002c0)}}, {0x5, 0x8, {&(0x7f0000000300)}, 0x7}]}, 0x0, 0x0, r2}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000040)={0x9, 0xffffffff, 0x3, {0x0, @pix_mp={0x401, 0x2e8e, 0x3032344d, 0x9, 0x2, [{0x951, 0x2}, {0x70, 0xffff}, {0x84bc, 0xffff}, {0x101, 0x4}, {0x2, 0x81}, {0x10001, 0x96}, {0xe6a, 0x1ff}, {0x9, 0x8}], 0x9, 0x3, 0x7, 0x2, 0x2}}, 0x7}) 13:06:43 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000000)=0x2) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) 13:06:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_SSID={0x15, 0x34, @random="93388aaa8e929b9ccdf5660a6a3b123fd4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xbb, 0x401, 0x34324948, 0x9, 0x3, 0x9, 0x7, 0x40000, 0x1, 0x0, 0x1, 0x7}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000380)=@userptr={0x40000000, 0x0, 0x4, 0x0, 0x3, {0x0, 0x2710}, {0x1, 0x2, 0x9, 0x9, 0x80, 0xea, "f8437f47"}, 0x3, 0x2, {&(0x7f0000000340)}, 0x9}) ioctl$vim2m_VIDIOC_G_FMT(r3, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x55595659, 0x0, 0x0, [{}, {}, {0xffffffff}, {}, {0x0, 0x400000}], 0x0, 0x10}}) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000140)=0x1, 0x4) 13:06:43 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)=@multiplanar_mmap={0x1ff, 0x2, 0x4, 0x0, 0x2, {0x0, 0x2710}, {0x4, 0xc, 0xc7, 0x7f, 0x1, 0x9, "5799825b"}, 0x800, 0x1, {&(0x7f0000000080)=[{0x9, 0x6abd, {0x344}, 0x7886339c}, {0xa0b2, 0x4, {0x100000001}, 0x6cf81f18}]}, 0x6}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000000)=@fd={0x9, 0x1, 0x4, 0x100000, 0x4, {}, {0x5, 0x8, 0x88, 0x7, 0x1, 0xa8, "25eb4201"}, 0x4, 0x4, {}, 0x8}) 13:06:43 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0xffffffffffffffff, 0x2) 13:06:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000d84a612d9b57725072716c13f8cca9a8359c1a5f219a8577fd39b88c0c7cd9d3444feb1b6c8de5607fb2a466122380afa23c0e5dfd47aa0e2de9e630c65e4564f11620f13bbcafb4d3f38c403803441e6bc", @ANYRES16=r2, @ANYBLOB="000129bd7000fedbdf25650000000800020000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4004085) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r3, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f00000001c0)=@userptr={0x5, 0x1, 0x4, 0x100, 0x5b68, {0x77359400}, {0x3, 0x1, 0xf4, 0x0, 0x8c, 0x6, "0b10d7de"}, 0x8dc, 0x2, {&(0x7f0000000180)}, 0x8001}) (async) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x101, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0xcd6d, 0x3, 0x3, "b6e7364b11c1f12a6b1d7c8cb29809fce3545b00ed1e5d32a44b5829afd67cdc", 0x32314142}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r5) (async) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) 13:06:43 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fffffffffffffff, 0x2) (async, rerun: 32) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async, rerun: 32) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000001c0)=@multiplanar_mmap={0x20, 0x2, 0x4, 0x40, 0x200, {}, {0x7, 0x2, 0x2, 0x80, 0x7f, 0x3, "e315c974"}, 0x400, 0x1, {&(0x7f0000000140)=[{0xbf2, 0x3, {0x8}, 0x9}, {0x2, 0x41, {}, 0xe69d}]}, 0x0, 0x0, 0xffffffffffffffff}) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000003c0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x70000, 0x1, {0x0, 0xea60}, {0x2, 0xc, 0x80, 0x5, 0x3, 0xc7, "5e37fd3b"}, 0x2, 0x2, {&(0x7f0000000340)=[{0x1, 0x3, {&(0x7f00000002c0)}}, {0x5, 0x8, {&(0x7f0000000300)}, 0x7}]}, 0x0, 0x0, r2}) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000040)={0x9, 0xffffffff, 0x3, {0x0, @pix_mp={0x401, 0x2e8e, 0x3032344d, 0x9, 0x2, [{0x951, 0x2}, {0x70, 0xffff}, {0x84bc, 0xffff}, {0x101, 0x4}, {0x2, 0x81}, {0x10001, 0x96}, {0xe6a, 0x1ff}, {0x9, 0x8}], 0x9, 0x3, 0x7, 0x2, 0x2}}, 0x7}) 13:06:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000d84a612d9b57725072716c13f8cca9a8359c1a5f219a8577fd39b88c0c7cd9d3444feb1b6c8de5607fb2a466122380afa23c0e5dfd47aa0e2de9e630c65e4564f11620f13bbcafb4d3f38c403803441e6bc", @ANYRES16=r2, @ANYBLOB="000129bd7000fedbdf25650000000800020000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4004085) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000d84a612d9b57725072716c13f8cca9a8359c1a5f219a8577fd39b88c0c7cd9d3444feb1b6c8de5607fb2a466122380afa23c0e5dfd47aa0e2de9e630c65e4564f11620f13bbcafb4d3f38c403803441e6bc", @ANYRES16=r2, @ANYBLOB="000129bd7000fedbdf25650000000800020000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4004085) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r3, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f00000001c0)=@userptr={0x5, 0x1, 0x4, 0x100, 0x5b68, {0x77359400}, {0x3, 0x1, 0xf4, 0x0, 0x8c, 0x6, "0b10d7de"}, 0x8dc, 0x2, {&(0x7f0000000180)}, 0x8001}) (async) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f00000001c0)=@userptr={0x5, 0x1, 0x4, 0x100, 0x5b68, {0x77359400}, {0x3, 0x1, 0xf4, 0x0, 0x8c, 0x6, "0b10d7de"}, 0x8dc, 0x2, {&(0x7f0000000180)}, 0x8001}) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x101, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0xcd6d, 0x3, 0x3, "b6e7364b11c1f12a6b1d7c8cb29809fce3545b00ed1e5d32a44b5829afd67cdc", 0x32314142}) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) 13:06:44 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) syz_open_dev$vim2m(&(0x7f00000002c0), 0xffffffffffffffff, 0x2) 13:06:44 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x1e4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8000}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc001}, 0x44845) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @raw_data="2f7363758a2baafbf003e347e8209847006ecf4384d5891f5e8b0ff0f9cf50ac7835f06a845a3613b5eee270839e378c2fd86c96a4cb5f7c0347a9e05f2c94b44657562c854f8319f25577d33fdaaa187840372fe0b544ed11bbab97e4204a87015646163d65df50093e306abf59998d637b8eb4cb37f5461bc54f5d23cdbad0fffb032199ca594bdeb054841bbdf79fa2aa84898a50875f5a828375b222759192cd08c9150d5453f35acedc5df33fe53ed883479e6202edf645d08b5a0e388d88bbe7e7c2970940"}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10001000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 13:06:44 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000001c0)=@multiplanar_mmap={0x20, 0x2, 0x4, 0x40, 0x200, {}, {0x7, 0x2, 0x2, 0x80, 0x7f, 0x3, "e315c974"}, 0x400, 0x1, {&(0x7f0000000140)=[{0xbf2, 0x3, {0x8}, 0x9}, {0x2, 0x41, {}, 0xe69d}]}, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000003c0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x70000, 0x1, {0x0, 0xea60}, {0x2, 0xc, 0x80, 0x5, 0x3, 0xc7, "5e37fd3b"}, 0x2, 0x2, {&(0x7f0000000340)=[{0x1, 0x3, {&(0x7f00000002c0)}}, {0x5, 0x8, {&(0x7f0000000300)}, 0x7}]}, 0x0, 0x0, r2}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000040)={0x9, 0xffffffff, 0x3, {0x0, @pix_mp={0x401, 0x2e8e, 0x3032344d, 0x9, 0x2, [{0x951, 0x2}, {0x70, 0xffff}, {0x84bc, 0xffff}, {0x101, 0x4}, {0x2, 0x81}, {0x10001, 0x96}, {0xe6a, 0x1ff}, {0x9, 0x8}], 0x9, 0x3, 0x7, 0x2, 0x2}}, 0x7}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fffffffffffffff, 0x2) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000001c0)=@multiplanar_mmap={0x20, 0x2, 0x4, 0x40, 0x200, {}, {0x7, 0x2, 0x2, 0x80, 0x7f, 0x3, "e315c974"}, 0x400, 0x1, {&(0x7f0000000140)=[{0xbf2, 0x3, {0x8}, 0x9}, {0x2, 0x41, {}, 0xe69d}]}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000003c0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x70000, 0x1, {0x0, 0xea60}, {0x2, 0xc, 0x80, 0x5, 0x3, 0xc7, "5e37fd3b"}, 0x2, 0x2, {&(0x7f0000000340)=[{0x1, 0x3, {&(0x7f00000002c0)}}, {0x5, 0x8, {&(0x7f0000000300)}, 0x7}]}, 0x0, 0x0, r2}) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000040)={0x9, 0xffffffff, 0x3, {0x0, @pix_mp={0x401, 0x2e8e, 0x3032344d, 0x9, 0x2, [{0x951, 0x2}, {0x70, 0xffff}, {0x84bc, 0xffff}, {0x101, 0x4}, {0x2, 0x81}, {0x10001, 0x96}, {0xe6a, 0x1ff}, {0x9, 0x8}], 0x9, 0x3, 0x7, 0x2, 0x2}}, 0x7}) (async) 13:06:45 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)=@overlay={0x9d, 0x3, 0x4, 0xe000, 0x5, {0x77359400}, {0x1, 0x2, 0x80, 0x1, 0x8, 0x3, "b2d2866c"}, 0x5, 0x3, {}, 0x8}) 13:06:45 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x1e4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8000}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc001}, 0x44845) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @raw_data="2f7363758a2baafbf003e347e8209847006ecf4384d5891f5e8b0ff0f9cf50ac7835f06a845a3613b5eee270839e378c2fd86c96a4cb5f7c0347a9e05f2c94b44657562c854f8319f25577d33fdaaa187840372fe0b544ed11bbab97e4204a87015646163d65df50093e306abf59998d637b8eb4cb37f5461bc54f5d23cdbad0fffb032199ca594bdeb054841bbdf79fa2aa84898a50875f5a828375b222759192cd08c9150d5453f35acedc5df33fe53ed883479e6202edf645d08b5a0e388d88bbe7e7c2970940"}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10001000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 13:06:45 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0xffffffffffffffff, 0x2) [ 672.570312] oom_reaper: reaped process 12199 (syz-executor.0), now anon-rss:0kB, file-rss:14332kB, shmem-rss:56kB [ 672.627003] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 672.639384] systemd-journal cpuset=/ mems_allowed=0-1 [ 672.644745] CPU: 0 PID: 12100 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 672.652713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 672.662058] Call Trace: [ 672.664638] dump_stack+0x1fc/0x2ef [ 672.668248] dump_header+0x15d/0xc3f [ 672.671945] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 672.677026] ? ___ratelimit+0x319/0x590 [ 672.680982] oom_kill_process.cold+0x10/0x692 [ 672.685535] ? check_preemption_disabled+0x41/0x280 [ 672.690561] ? has_intersects_mems_allowed+0x1d6/0x290 [ 672.695833] out_of_memory+0x1072/0x1390 [ 672.699890] ? oom_killer_disable+0x270/0x270 [ 672.704383] ? mutex_trylock+0x15f/0x1a0 [ 672.708469] __alloc_pages_nodemask+0x23a2/0x2890 [ 672.713409] ? find_get_entry+0x4cd/0x8a0 [ 672.717555] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 672.722396] alloc_pages_current+0x193/0x2a0 [ 672.726789] filemap_fault+0x146e/0x2180 [ 672.730846] ext4_filemap_fault+0x84/0xb0 [ 672.735011] __do_fault+0x10b/0x4b0 [ 672.738622] __handle_mm_fault+0x273b/0x41c0 [ 672.743029] ? vm_insert_page+0x9c0/0x9c0 [ 672.747166] ? check_preemption_disabled+0x41/0x280 [ 672.752166] handle_mm_fault+0x436/0xb10 [ 672.756213] __do_page_fault+0x68e/0xd60 [ 672.760259] ? trace_hardirqs_off_caller+0x6e/0x210 [ 672.765257] ? spurious_fault+0x840/0x840 [ 672.769390] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 672.774219] ? page_fault+0x8/0x30 [ 672.777741] page_fault+0x1e/0x30 [ 672.781178] RIP: 0033:0x7ff16ca802e3 [ 672.784900] Code: Bad RIP value. [ 672.788242] RSP: 002b:00007ffced5c97d8 EFLAGS: 00010246 [ 672.793595] RAX: 0000000000000001 RBX: 000055989e0a51e0 RCX: 00007ff16ca802e3 [ 672.800847] RDX: 0000000000000013 RSI: 00007ffced5c97e0 RDI: 000000000000000c [ 672.808109] RBP: 00007ffced5c99d0 R08: 0000000000000000 R09: 000000ab151cd9b3 [ 672.815370] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffced5c97e0 [ 672.822623] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005f5c244448f99 [ 672.837443] syz-executor.0: vmalloc: allocation failure, allocated 1783181312 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 672.840378] Mem-Info: [ 672.851269] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 672.851297] CPU: 1 PID: 12199 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 672.851308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 672.864050] active_anon:19588 inactive_anon:6882 isolated_anon:0 [ 672.864050] active_file:16 inactive_file:16 isolated_file:0 [ 672.864050] unevictable:0 dirty:0 writeback:0 unstable:0 [ 672.864050] slab_reclaimable:19472 slab_unreclaimable:114620 [ 672.864050] mapped:22350 shmem:7458 pagetables:597 bounce:0 [ 672.864050] free:13796 free_pcp:269 free_cma:0 [ 672.866674] Call Trace: [ 672.876074] Node 0 active_anon:76704kB inactive_anon:19324kB active_file:60kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 30720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 672.909084] dump_stack+0x1fc/0x2ef [ 672.909103] warn_alloc.cold+0x7b/0x18f [ 672.909119] ? zone_watermark_ok_safe+0x260/0x260 [ 672.909134] ? rcu_nmi_exit+0xb3/0x180 [ 672.909168] __vmalloc_area_node+0x4fd/0x780 [ 672.909187] ? __vmalloc_node_range+0x180/0x180 [ 672.909203] ? _raw_spin_unlock+0x29/0x40 [ 672.922086] Node 1 active_anon:1648kB inactive_anon:8204kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1532kB dirty:0kB writeback:0kB shmem:8204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 672.939434] ? __get_vm_area_node+0x2e2/0x3a0 [ 672.939456] __vmalloc_node_range+0xed/0x180 [ 672.939472] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 672.939487] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 672.939498] vmalloc_user+0x70/0xe0 [ 672.939510] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 672.939523] vb2_vmalloc_alloc+0xb3/0x2f0 [ 672.939537] __vb2_queue_alloc+0x472/0xe60 [ 672.939563] vb2_core_create_bufs+0x273/0x7e0 [ 672.939579] ? __vb2_queue_free+0x870/0x870 [ 672.939594] ? __video_do_ioctl+0x632/0xcd0 [ 672.939614] ? pi_state_update_owner+0x450/0x450 [ 672.939630] ? __mutex_lock+0x368/0x1190 [ 672.939649] vb2_create_bufs+0x332/0x620 [ 672.939666] ? mark_held_locks+0xf0/0xf0 [ 672.939681] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 672.939694] ? futex_wait_queue_me+0x404/0x5e0 [ 672.939710] ? pi_state_update_owner+0x450/0x450 [ 672.939724] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 672.939754] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 672.939776] v4l_create_bufs+0xb2/0x160 [ 672.939794] __video_do_ioctl+0x49a/0xcd0 [ 672.939817] ? v4l_querycap+0x340/0x340 [ 672.939837] ? __might_fault+0x192/0x1d0 [ 672.939854] ? v4l_querycap+0x340/0x340 [ 672.939870] video_usercopy+0x13f/0xfa0 [ 672.939893] ? v4l_enumstd+0x60/0x60 [ 672.939906] ? do_futex+0x171/0x1880 [ 672.939922] ? mark_held_locks+0xf0/0xf0 [ 672.939941] ? debug_check_no_obj_freed+0x201/0x490 [ 672.939966] ? video_usercopy+0xfa0/0xfa0 [ 672.939978] v4l2_ioctl+0x147/0x1a0 [ 672.939990] ? video_devdata+0xa0/0xa0 [ 672.940006] do_vfs_ioctl+0xcdb/0x12e0 [ 672.940020] ? lock_downgrade+0x720/0x720 [ 672.940038] ? check_preemption_disabled+0x41/0x280 [ 672.953742] Node 0 DMA free:10864kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 672.956319] ? ioctl_preallocate+0x200/0x200 [ 672.960700] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 672.965364] ? __fget+0x356/0x510 [ 672.965378] ? do_dup2+0x450/0x450 [ 672.965392] ? __se_sys_futex+0x298/0x3b0 [ 672.965412] ksys_ioctl+0x9b/0xc0 [ 672.965427] __x64_sys_ioctl+0x6f/0xb0 [ 672.965444] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 672.978499] Node 0 DMA32 free:17876kB min:35996kB low:44992kB high:53988kB active_anon:76704kB inactive_anon:19324kB active_file:60kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7584kB pagetables:2164kB bounce:0kB free_pcp:584kB local_pcp:336kB free_cma:0kB [ 672.996281] do_syscall_64+0xf9/0x620 [ 672.996301] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 672.996312] RIP: 0033:0x7f68c24140f9 [ 672.996326] Code: Bad RIP value. [ 672.996333] RSP: 002b:00007f68c0986168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 672.996350] RAX: ffffffffffffffda RBX: 00007f68c2533f80 RCX: 00007f68c24140f9 [ 672.996357] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000006 [ 672.996365] RBP: 00007f68c246fae9 R08: 0000000000000000 R09: 0000000000000000 [ 672.996373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 672.996380] R13: 00007fff6155d44f R14: 00007f68c0986300 R15: 0000000000022000 [ 673.005320] Mem-Info: [ 673.013065] lowmem_reserve[]: 0 0 1 1 1 [ 673.021095] active_anon:19588 inactive_anon:6882 isolated_anon:0 [ 673.021095] active_file:16 inactive_file:16 isolated_file:0 [ 673.021095] unevictable:0 dirty:0 writeback:0 unstable:0 [ 673.021095] slab_reclaimable:19472 slab_unreclaimable:114620 [ 673.021095] mapped:22350 shmem:7458 pagetables:597 bounce:0 [ 673.021095] free:13796 free_pcp:268 free_cma:0 [ 673.023197] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 673.023225] lowmem_reserve[]: 0 0 0 0 0 [ 673.029521] Node 0 active_anon:76704kB inactive_anon:19324kB active_file:60kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 30720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 673.035528] Node 1 Normal free:26436kB min:53876kB low:67344kB high:80812kB active_anon:1648kB inactive_anon:8204kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:224kB bounce:0kB free_pcp:488kB local_pcp:240kB free_cma:0kB [ 673.045675] Node 1 active_anon:1648kB inactive_anon:8204kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1532kB dirty:0kB writeback:0kB shmem:8204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 673.049480] lowmem_reserve[]: 0 0 0 0 0 [ 673.061652] Node 0 DMA free:10864kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 673.061733] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 673.070226] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10864kB [ 673.071396] Node 0 DMA32 free:17876kB min:35996kB low:44992kB high:53988kB active_anon:76704kB inactive_anon:19324kB active_file:60kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7584kB pagetables:2164kB bounce:0kB free_pcp:580kB local_pcp:248kB free_cma:0kB [ 673.076200] Node 0 DMA32: 1677*4kB (UME) 638*8kB (UME) 189*16kB (UME) 67*32kB (UME) 14*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17876kB [ 673.076267] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 673.094717] lowmem_reserve[]: 0 0 1 1 1 [ 673.098549] Node 1 Normal: 121*4kB (UM) 102*8kB (ME) 69*16kB (M) 59*32kB (UME) 32*64kB (M) 15*128kB (UM) 11*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 2*2048kB (UM) 2*4096kB (UE) = 26436kB [ 673.099048] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 673.103158] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 673.103169] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 673.103179] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 673.103188] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 673.103194] 7490 total pagecache pages [ 673.103206] 0 pages in swap cache [ 673.103213] Swap cache stats: add 0, delete 0, find 0/0 [ 673.103223] Free swap = 0kB [ 673.117704] lowmem_reserve[]: 0 0 0 0 0 [ 673.121024] Total swap = 0kB [ 673.128774] Node 1 Normal free:26436kB min:53876kB low:67344kB high:80812kB active_anon:1648kB inactive_anon:8204kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:224kB bounce:0kB free_pcp:488kB local_pcp:248kB free_cma:0kB [ 673.132973] 2097051 pages RAM [ 673.138662] lowmem_reserve[]: 0 0 0 0 0 [ 673.139972] 0 pages HighMem/MovableOnly [ 673.154864] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10864kB [ 673.182895] 369649 pages reserved [ 673.195501] Node 0 DMA32: 1677*4kB (UME) 638*8kB (UME) 189*16kB (UME) 67*32kB (UME) 14*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17876kB [ 673.195886] 0 pages cma reserved [ 673.200054] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 673.207129] Unreclaimable slab info: [ 673.211703] Node 1 Normal: 121*4kB (UM) 102*8kB (ME) 69*16kB (M) 59*32kB (UME) 32*64kB (M) 15*128kB (UM) 11*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 2*2048kB (UM) 2*4096kB (UE) = 26436kB [ 673.212497] Name Used Total [ 673.252548] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 673.258075] pid_2 92KB 152KB [ 673.277290] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 673.281809] batadv_tl_cache 4KB 12KB [ 673.292339] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 673.297132] TIPC 10KB 15KB [ 673.310278] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 673.348894] SCTPv6 14KB 18KB [ 673.383084] 7490 total pagecache pages [ 673.399882] DCCPv6 17KB 22KB [ 673.399898] DCCP 16KB 21KB [ 673.399937] RXRPC 11KB 13KB [ 673.445231] 0 pages in swap cache [ 673.462754] rxrpc_call_jar 78KB 94KB [ 673.493847] Swap cache stats: add 0, delete 0, find 0/0 [ 673.510749] bridge_fdb_cache 9KB 15KB [ 673.536296] Free swap = 0kB [ 673.559071] fib6_nodes 157KB 160KB [ 673.565666] Total swap = 0kB [ 673.590327] ip6_dst_cache 75KB 326KB [ 673.608077] 2097051 pages RAM [ 673.625062] RAWv6 70KB 74KB [ 673.631679] 0 pages HighMem/MovableOnly [ 673.653640] UDPv6 33KB 37KB [ 673.658399] 369649 pages reserved [ 673.659433] TCPv6 30KB 36KB [ 673.662458] 0 pages cma reserved [ 673.917499] nf_conntrack 6KB 18KB [ 673.924702] t10_alua_lu_gp_cache 0KB 3KB [ 673.930334] sd_ext_cdb 0KB 7KB [ 673.937381] scsi_sense_cache 1056KB 1060KB [ 673.946076] virtio_scsi_cmd 16KB 16KB [ 673.951448] sgpool-128 8KB 8KB [ 673.959193] sgpool-64 4KB 12KB [ 673.967818] sgpool-32 2KB 15KB [ 673.974902] sgpool-16 1KB 7KB [ 673.980269] sgpool-8 0KB 7KB [ 673.988807] mqueue_inode_cache 10KB 22KB [ 673.995991] bio_post_read_ctx 14KB 15KB [ 674.001425] bio-2 14KB 15KB [ 674.010126] jfs_mp 7KB 7KB [ 674.017156] cifs_small_rq 15KB 16KB [ 674.025697] cifs_request 67KB 67KB [ 674.031069] cifs_mpx_ids 0KB 7KB [ 674.038172] nfs_commit_data 3KB 14KB [ 674.046701] nfs_write_data 34KB 44KB [ 674.053709] ext4_system_zone 1KB 7KB [ 674.059607] bio-1 1KB 7KB [ 674.068579] pid_namespace 2KB 7KB [ 674.075644] rpc_buffers 17KB 25KB [ 674.081009] rpc_tasks 2KB 7KB [ 674.089706] UNIX 185KB 187KB [ 674.097457] tcp_bind_bucket 1KB 4KB [ 674.106466] ip_fib_trie 23KB 27KB [ 674.116883] ip_fib_alias 112KB 118KB [ 674.125733] ip_dst_cache 10KB 48KB [ 674.131123] RAW 42KB 52KB [ 674.138398] UDP 40KB 47KB [ 674.147107] TCP 14KB 16KB [ 674.154456] hugetlbfs_inode_cache 3KB 15KB [ 674.161323] fscache_cookie_jar 1KB 11KB [ 674.170902] eventpoll_pwq 24KB 47KB [ 674.178448] eventpoll_epi 42KB 66KB [ 674.187419] inotify_inode_mark 22KB 55KB [ 674.197402] request_queue 199KB 199KB [ 674.206245] blkdev_requests 1KB 3KB [ 674.213491] blkdev_ioc 19KB 23KB [ 674.218874] bio-0 941KB 941KB [ 674.227608] biovec-max 1476KB 1476KB [ 674.234716] biovec-64 733KB 740KB [ 674.240088] biovec-16 59KB 63KB [ 674.248657] bio_integrity_payload 1KB 8KB [ 674.256138] khugepaged_mm_slot 15KB 34KB [ 674.265476] uid_cache 0KB 4KB [ 674.270848] dmaengine-unmap-2 0KB 3KB [ 674.278014] skbuff_fclone_cache 158KB 307KB [ 674.287398] skbuff_head_cache 5235KB 5238KB [ 674.294586] configfs_dir_cache 3KB 11KB [ 674.300046] file_lock_cache 101KB 198KB [ 674.308666] file_lock_ctx 9KB 11KB [ 674.315755] fsnotify_mark_connector 17KB 31KB [ 674.325006] net_namespace 52KB 52KB [ 674.330380] shmem_inode_cache 8220KB 8493KB [ 674.337380] task_delay_info 207KB 407KB [ 674.346215] taskstats 101KB 206KB [ 674.355057] proc_dir_entry 694KB 697KB [ 674.360514] pde_opener 7KB 58KB [ 674.371007] seq_file 242KB 539KB [ 674.378208] sigqueue 34KB 55KB [ 674.386907] kernfs_node_cache 18234KB 18246KB [ 674.393952] mnt_cache 173KB 188KB [ 674.399317] filp 6038KB 7646KB [ 674.408694] names_cache 135889KB 135910KB [ 674.415989] iint_cache 85KB 95KB [ 674.421492] key_jar 4KB 11KB [ 674.430427] uts_namespace 2KB 7KB [ 674.439431] nsproxy 1KB 11KB [ 674.448213] vm_area_struct 3257KB 5185KB [ 674.455388] mm_struct 523KB 1046KB [ 674.460844] fs_cache 108KB 372KB [ 674.471286] files_cache 375KB 791KB [ 674.478423] signal_cache 886KB 1775KB [ 674.487019] sighand_cache 564KB 596KB [ 674.494128] task_struct 6868KB 6868KB [ 674.499503] cred_jar 1276KB 2100KB [ 674.508864] anon_vma_chain 1041KB 1803KB [ 674.519438] anon_vma 147KB 269KB [ 674.529211] pid 54KB 264KB [ 674.536952] Acpi-Operand 156KB 202KB [ 674.548872] Acpi-ParseExt 8KB 11KB [ 674.556042] Acpi-Parse 41KB 47KB [ 674.561508] Acpi-State 52KB 63KB [ 674.573314] Acpi-Namespace 21KB 27KB [ 674.578697] numa_policy 0KB 3KB [ 674.587542] debug_objects_cache 1616KB 2046KB [ 674.596621] trace_event_file 297KB 298KB [ 674.605338] ftrace_event_field 398KB 401KB [ 674.610807] pool_workqueue 121KB 124KB [ 674.617965] page->ptl 575KB 1047KB [ 674.626714] kmalloc-2097152 2050KB 2050KB [ 674.633868] kmalloc-524288 2056KB 2056KB [ 674.639236] kmalloc-262144 1290KB 1290KB [ 674.647943] kmalloc-131072 650KB 650KB [ 674.655095] kmalloc-65536 1848KB 1914KB [ 674.660466] kmalloc-32768 1650KB 1650KB [ 674.669234] kmalloc-16384 973KB 973KB [ 674.677499] kmalloc-8192 3960KB 4001KB [ 674.683000] kmalloc-4096 19295KB 19295KB [ 674.688780] kmalloc-2048 13124KB 13872KB [ 674.694250] kmalloc-1024 7849KB 8016KB [ 674.699810] kmalloc-512 10571KB 10575KB [ 674.705272] kmalloc-256 5362KB 5497KB [ 674.710811] kmalloc-128 950KB 1488KB [ 674.716266] kmalloc-96 3715KB 4020KB [ 674.721911] kmalloc-64 3006KB 4252KB [ 674.727413] kmalloc-32 1857KB 2445KB [ 674.732860] kmalloc-192 1489KB 2288KB [ 674.738377] kmem_cache 177KB 183KB [ 674.744053] Out of memory (oom_kill_allocating_task): Kill process 12100 (systemd-journal) score 0 or sacrifice child [ 674.754890] Killed process 12100 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:0kB, shmem-rss:1532kB [ 674.766645] oom_reaper: reaped process 12100 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1532kB [ 674.927900] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 674.937865] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 674.967465] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 674.976624] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 674.987567] systemd[1]: Stopped Journal Service. [ 675.007786] systemd[1]: Starting Journal Service... [ 675.234745] systemd-journald[12280]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 675.707502] systemd[1]: Started Journal Service. 13:06:54 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)=@overlay={0x9d, 0x3, 0x4, 0xe000, 0x5, {0x77359400}, {0x1, 0x2, 0x80, 0x1, 0x8, 0x3, "b2d2866c"}, 0x5, 0x3, {}, 0x8}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)=@overlay={0x9d, 0x3, 0x4, 0xe000, 0x5, {0x77359400}, {0x1, 0x2, 0x80, 0x1, 0x8, 0x3, "b2d2866c"}, 0x5, 0x3, {}, 0x8}) (async) 13:06:54 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x1e4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8000}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc001}, 0x44845) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @raw_data="2f7363758a2baafbf003e347e8209847006ecf4384d5891f5e8b0ff0f9cf50ac7835f06a845a3613b5eee270839e378c2fd86c96a4cb5f7c0347a9e05f2c94b44657562c854f8319f25577d33fdaaa187840372fe0b544ed11bbab97e4204a87015646163d65df50093e306abf59998d637b8eb4cb37f5461bc54f5d23cdbad0fffb032199ca594bdeb054841bbdf79fa2aa84898a50875f5a828375b222759192cd08c9150d5453f35acedc5df33fe53ed883479e6202edf645d08b5a0e388d88bbe7e7c2970940"}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10001000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 13:06:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_SSID={0x15, 0x34, @random="93388aaa8e929b9ccdf5660a6a3b123fd4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xbb, 0x401, 0x34324948, 0x9, 0x3, 0x9, 0x7, 0x40000, 0x1, 0x0, 0x1, 0x7}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000380)=@userptr={0x40000000, 0x0, 0x4, 0x0, 0x3, {0x0, 0x2710}, {0x1, 0x2, 0x9, 0x9, 0x80, 0xea, "f8437f47"}, 0x3, 0x2, {&(0x7f0000000340)}, 0x9}) ioctl$vim2m_VIDIOC_G_FMT(r3, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x55595659, 0x0, 0x0, [{}, {}, {0xffffffff}, {}, {0x0, 0x400000}], 0x0, 0x10}}) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000180)) 13:06:54 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x1}, {}, {}, {0x0, 0xdb1}]}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x0, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20008004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000001640)={0x1018, r7, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}]}, 0x1018}, 0x1, 0x0, 0x0, 0x400c040}, 0x24000001) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000000340), 0xc, &(0x7f0000003c40)={&(0x7f0000000200)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0xb}}}}, [@NL80211_ATTR_REKEY_DATA={0xffffffffffffff0b, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="00032b4b76b92dee5991cbff83aae43abd7000fddbdf255300000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x41) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r8) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r5, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x63}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x1, 0x5]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xcf9}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 13:06:54 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)=@multiplanar_mmap={0x1ff, 0x2, 0x4, 0x0, 0x2, {0x0, 0x2710}, {0x4, 0xc, 0xc7, 0x7f, 0x1, 0x9, "5799825b"}, 0x800, 0x1, {&(0x7f0000000080)=[{0x9, 0x6abd, {0x344}, 0x7886339c}, {0xa0b2, 0x4, {0x100000001}, 0x6cf81f18}]}, 0x6}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000000)=@fd={0x9, 0x1, 0x4, 0x100000, 0x4, {}, {0x5, 0x8, 0x88, 0x7, 0x1, 0xa8, "25eb4201"}, 0x4, 0x4, {}, 0x8}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)=@multiplanar_mmap={0x1ff, 0x2, 0x4, 0x0, 0x2, {0x0, 0x2710}, {0x4, 0xc, 0xc7, 0x7f, 0x1, 0x9, "5799825b"}, 0x800, 0x1, {&(0x7f0000000080)=[{0x9, 0x6abd, {0x344}, 0x7886339c}, {0xa0b2, 0x4, {0x100000001}, 0x6cf81f18}]}, 0x6}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000000)=@fd={0x9, 0x1, 0x4, 0x100000, 0x4, {}, {0x5, 0x8, 0x88, 0x7, 0x1, 0xa8, "25eb4201"}, 0x4, 0x4, {}, 0x8}) (async) 13:06:54 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) syz_open_dev$vim2m(&(0x7f00000002c0), 0xffffffffffffffff, 0x2) 13:06:54 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x1, [{}, {}, {0x0, 0xeebe}, {}, {0x6}], 0x0, 0x0, 0x0, 0x0, 0x1}}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x800, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="100000001702002e2f66696c6530"], 0x10) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000040)={'binder1\x00'}) [ 678.180510] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 13:06:55 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0xffffffffffffffff, 0x2) 13:06:55 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x1, [{}, {}, {0x0, 0xeebe}, {}, {0x6}], 0x0, 0x0, 0x0, 0x0, 0x1}}) (async) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x800, 0x0) (async) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="100000001702002e2f66696c6530"], 0x10) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000040)={'binder1\x00'}) 13:06:56 executing program 5: syz_open_dev$vim2m(&(0x7f00000002c0), 0xffffffffffffffff, 0x2) 13:06:56 executing program 5: syz_open_dev$vim2m(0x0, 0xffffffffffffffff, 0x2) 13:06:56 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x1, [{}, {}, {0x0, 0xeebe}, {}, {0x6}], 0x0, 0x0, 0x0, 0x0, 0x1}}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x800, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="100000001702002e2f66696c6530"], 0x10) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000040)={'binder1\x00'}) (async) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000040)={'binder1\x00'}) [ 683.536930] oom_reaper: reaped process 12291 (syz-executor.0), now anon-rss:0kB, file-rss:14332kB, shmem-rss:16kB [ 683.574986] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 683.588921] systemd-journal cpuset=/ mems_allowed=0-1 [ 683.598014] CPU: 0 PID: 12280 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 683.606049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 683.615402] Call Trace: [ 683.618003] dump_stack+0x1fc/0x2ef [ 683.621636] dump_header+0x15d/0xc3f [ 683.625357] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 683.630473] ? ___ratelimit+0x319/0x590 [ 683.634452] oom_kill_process.cold+0x10/0x692 [ 683.638985] ? check_preemption_disabled+0x41/0x280 [ 683.644008] ? has_intersects_mems_allowed+0x1d6/0x290 [ 683.649285] out_of_memory+0x1072/0x1390 [ 683.653355] ? oom_killer_disable+0x270/0x270 [ 683.657877] ? mutex_trylock+0x15f/0x1a0 [ 683.661942] __alloc_pages_nodemask+0x23a2/0x2890 [ 683.666798] ? find_get_entry+0x4cd/0x8a0 [ 683.670955] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 683.675842] alloc_pages_current+0x193/0x2a0 [ 683.680247] filemap_fault+0x146e/0x2180 [ 683.684317] ext4_filemap_fault+0x84/0xb0 [ 683.688457] __do_fault+0x10b/0x4b0 [ 683.691967] syz-executor.0: vmalloc: allocation failure, allocated 1768480768 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 683.692086] __handle_mm_fault+0x273b/0x41c0 [ 683.706687] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 683.710343] ? vm_insert_page+0x9c0/0x9c0 [ 683.719584] ? check_preemption_disabled+0x41/0x280 [ 683.724593] handle_mm_fault+0x436/0xb10 [ 683.728657] __do_page_fault+0x68e/0xd60 [ 683.732797] ? trace_hardirqs_off_caller+0x6e/0x210 [ 683.737802] ? spurious_fault+0x840/0x840 [ 683.741946] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 683.746780] ? page_fault+0x8/0x30 [ 683.750307] page_fault+0x1e/0x30 [ 683.753783] RIP: 0033:0x7f4ed3a8c2e3 [ 683.757572] Code: Bad RIP value. [ 683.760936] RSP: 002b:00007ffe26107518 EFLAGS: 00010246 [ 683.766296] RAX: 0000000000000001 RBX: 0000561c940c61e0 RCX: 00007f4ed3a8c2e3 [ 683.773551] RDX: 0000000000000013 RSI: 00007ffe26107520 RDI: 000000000000000c [ 683.780808] RBP: 00007ffe26107710 R08: 00007ffe261f7000 R09: 000000ae9a938c67 [ 683.788066] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe26107520 [ 683.795324] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005f5c245165e6a [ 683.802603] CPU: 1 PID: 12291 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 683.808400] Mem-Info: [ 683.810493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 683.813034] active_anon:20137 inactive_anon:8913 isolated_anon:0 [ 683.813034] active_file:16 inactive_file:16 isolated_file:0 [ 683.813034] unevictable:0 dirty:0 writeback:0 unstable:0 [ 683.813034] slab_reclaimable:15873 slab_unreclaimable:119085 [ 683.813034] mapped:22311 shmem:9506 pagetables:611 bounce:0 [ 683.813034] free:14013 free_pcp:189 free_cma:0 [ 683.822313] Call Trace: [ 683.822334] dump_stack+0x1fc/0x2ef [ 683.822351] warn_alloc.cold+0x7b/0x18f [ 683.822388] ? zone_watermark_ok_safe+0x260/0x260 [ 683.855466] Node 0 active_anon:78820kB inactive_anon:19320kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 32768kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 683.858008] ? write_comp_data+0x23/0x70 [ 683.861641] Node 1 active_anon:1728kB inactive_anon:16332kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1376kB dirty:0kB writeback:0kB shmem:16396kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 683.865589] __vmalloc_area_node+0x4fd/0x780 [ 683.870396] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 683.897984] ? __vmalloc_node_range+0x180/0x180 [ 683.897999] ? _raw_spin_unlock+0x29/0x40 [ 683.898013] ? __get_vm_area_node+0x2e2/0x3a0 [ 683.898033] __vmalloc_node_range+0xed/0x180 [ 683.898047] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 683.898061] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 683.898074] vmalloc_user+0x70/0xe0 [ 683.898089] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 683.898101] vb2_vmalloc_alloc+0xb3/0x2f0 [ 683.898117] __vb2_queue_alloc+0x472/0xe60 [ 683.898145] vb2_core_create_bufs+0x273/0x7e0 [ 683.898159] ? __vb2_queue_free+0x870/0x870 [ 683.898179] ? __mutex_lock+0x368/0x1190 [ 683.898197] vb2_create_bufs+0x332/0x620 [ 683.898215] ? mark_held_locks+0xf0/0xf0 [ 683.898229] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 683.898247] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 683.898264] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 683.898287] v4l_create_bufs+0xb2/0x160 [ 683.898306] __video_do_ioctl+0x49a/0xcd0 [ 683.898328] ? v4l_querycap+0x340/0x340 [ 683.898347] ? __might_fault+0x192/0x1d0 [ 683.898372] ? v4l_querycap+0x340/0x340 [ 683.898389] video_usercopy+0x13f/0xfa0 [ 683.898411] ? v4l_enumstd+0x60/0x60 [ 683.898426] ? do_futex+0x171/0x1880 [ 683.898442] ? mark_held_locks+0xf0/0xf0 [ 683.898467] ? debug_check_no_obj_freed+0x201/0x490 [ 683.898491] ? video_usercopy+0xfa0/0xfa0 [ 683.898504] v4l2_ioctl+0x147/0x1a0 [ 683.898517] ? video_devdata+0xa0/0xa0 [ 683.898533] do_vfs_ioctl+0xcdb/0x12e0 [ 683.898549] ? lock_downgrade+0x720/0x720 [ 683.898566] ? check_preemption_disabled+0x41/0x280 [ 683.898580] ? ioctl_preallocate+0x200/0x200 [ 683.898599] ? __fget+0x356/0x510 [ 683.898615] ? do_dup2+0x450/0x450 [ 683.898630] ? __se_sys_futex+0x298/0x3b0 [ 683.898652] ksys_ioctl+0x9b/0xc0 [ 683.898676] __x64_sys_ioctl+0x6f/0xb0 [ 683.898690] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 683.898704] do_syscall_64+0xf9/0x620 [ 683.898723] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 683.898735] RIP: 0033:0x7f68c24140f9 [ 683.898750] Code: Bad RIP value. [ 683.898757] RSP: 002b:00007f68c0986168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 683.898771] RAX: ffffffffffffffda RBX: 00007f68c2533f80 RCX: 00007f68c24140f9 [ 683.898779] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000006 [ 683.898787] RBP: 00007f68c246fae9 R08: 0000000000000000 R09: 0000000000000000 [ 683.898795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 683.898804] R13: 00007fff6155d44f R14: 00007f68c0986300 R15: 0000000000022000 [ 683.907079] Mem-Info: [ 683.934819] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 683.940317] active_anon:20137 inactive_anon:8913 isolated_anon:0 [ 683.940317] active_file:16 inactive_file:16 isolated_file:0 [ 683.940317] unevictable:0 dirty:0 writeback:0 unstable:0 [ 683.940317] slab_reclaimable:15873 slab_unreclaimable:119085 [ 683.940317] mapped:22311 shmem:9506 pagetables:611 bounce:0 [ 683.940317] free:13954 free_pcp:250 free_cma:0 [ 683.965443] Node 0 DMA32 free:17996kB min:35996kB low:44992kB high:53988kB active_anon:78820kB inactive_anon:19320kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7616kB pagetables:2224kB bounce:0kB free_pcp:748kB local_pcp:248kB free_cma:0kB [ 683.971128] Node 0 active_anon:78820kB inactive_anon:19320kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21628kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 32768kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 683.975218] lowmem_reserve[]: 0 0 1 1 1 [ 683.979822] Node 1 active_anon:1728kB inactive_anon:16332kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1376kB dirty:0kB writeback:0kB shmem:16396kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 683.988177] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 683.993743] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 683.997541] lowmem_reserve[]: 0 0 0 0 0 [ 684.003273] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 684.008150] Node 1 Normal free:26928kB min:53876kB low:67344kB high:80812kB active_anon:1728kB inactive_anon:16332kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:220kB bounce:0kB free_pcp:252kB local_pcp:0kB free_cma:0kB [ 684.010449] Node 0 DMA32 free:17996kB min:35996kB low:44992kB high:53988kB active_anon:78820kB inactive_anon:19320kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7616kB pagetables:2224kB bounce:0kB free_pcp:744kB local_pcp:500kB free_cma:0kB [ 684.016186] lowmem_reserve[]: 0 0 0 0 0 [ 684.023848] lowmem_reserve[]: 0 0 1 1 1 [ 684.027189] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 684.033855] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 684.039676] Node 0 DMA32: 2081*4kB (UME) 730*8kB (UME) 163*16kB (UME) 39*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18020kB [ 684.045718] lowmem_reserve[]: 0 0 0 0 0 [ 684.046623] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 684.050755] Node 1 Normal free:26928kB min:53876kB low:67344kB high:80812kB active_anon:1728kB inactive_anon:16332kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:220kB bounce:0kB free_pcp:252kB local_pcp:252kB free_cma:0kB [ 684.056341] Node 1 Normal: 148*4kB (M) 130*8kB (UME) 99*16kB (M) 75*32kB (UME) 41*64kB (M) 14*128kB (UM) 4*256kB (UM) 1*512kB (M) 1*1024kB (M) 1*2048kB (M) 3*4096kB (U) = 26928kB [ 684.060620] lowmem_reserve[]: 0 0 0 0 0 [ 684.063151] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 684.070157] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 684.070821] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 684.074563] Node 0 DMA32: 2081*4kB (UME) 730*8kB (UME) 163*16kB (UME) 39*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18020kB [ 684.080783] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 684.088232] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 684.093381] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 684.095345] Node 1 Normal: 148*4kB (M) 130*8kB (UME) 99*16kB (M) 75*32kB (UME) 41*64kB (M) 14*128kB (UM) 4*256kB (UM) 1*512kB (M) 1*1024kB (M) 1*2048kB (M) 3*4096kB (U) = 26928kB [ 684.099221] 9538 total pagecache pages [ 684.108148] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 684.108412] 0 pages in swap cache [ 684.112859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 684.112868] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 684.112880] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 684.119064] Swap cache stats: add 0, delete 0, find 0/0 [ 684.119837] 9538 total pagecache pages [ 684.124133] Free swap = 0kB [ 684.124139] Total swap = 0kB [ 684.124148] 2097051 pages RAM [ 684.124156] 0 pages HighMem/MovableOnly [ 684.131068] 0 pages in swap cache [ 684.132342] 369649 pages reserved [ 684.136082] Swap cache stats: add 0, delete 0, find 0/0 [ 684.139863] 0 pages cma reserved [ 684.149705] Free swap = 0kB [ 684.159102] Unreclaimable slab info: [ 684.172106] Total swap = 0kB [ 684.178029] Name Used Total [ 684.190911] 2097051 pages RAM [ 684.200344] pid_2 97KB 152KB [ 684.215710] 0 pages HighMem/MovableOnly [ 684.240719] batadv_tl_cache 4KB 12KB [ 684.270778] 369649 pages reserved [ 684.304946] TIPC 10KB 15KB [ 684.329950] 0 pages cma reserved [ 684.361363] SCTPv6 14KB 18KB [ 684.792066] DCCPv6 17KB 22KB [ 684.797465] DCCP 16KB 21KB [ 684.802913] RXRPC 11KB 13KB [ 684.810075] rxrpc_call_jar 78KB 94KB [ 684.815519] bridge_fdb_cache 9KB 15KB [ 684.820894] fib6_nodes 157KB 160KB [ 684.826366] ip6_dst_cache 75KB 326KB [ 684.831810] RAWv6 70KB 74KB [ 684.837184] UDPv6 33KB 37KB [ 684.842651] TCPv6 33KB 42KB [ 684.848024] nf_conntrack 6KB 18KB [ 684.853521] t10_alua_lu_gp_cache 0KB 3KB [ 684.859150] sd_ext_cdb 0KB 7KB [ 684.864588] scsi_sense_cache 1056KB 1060KB [ 684.869957] virtio_scsi_cmd 16KB 16KB [ 684.875376] sgpool-128 8KB 8KB [ 684.880744] sgpool-64 4KB 12KB [ 684.886183] sgpool-32 2KB 15KB [ 684.891615] sgpool-16 1KB 7KB [ 684.896979] sgpool-8 0KB 7KB [ 684.902599] mqueue_inode_cache 10KB 22KB [ 684.908058] bio_post_read_ctx 14KB 15KB [ 684.915778] bio-2 14KB 15KB [ 684.921235] jfs_mp 7KB 7KB [ 684.926637] cifs_small_rq 15KB 16KB [ 684.932094] cifs_request 67KB 67KB [ 684.937459] cifs_mpx_ids 0KB 7KB [ 684.943056] nfs_commit_data 3KB 14KB [ 684.948511] nfs_write_data 34KB 44KB [ 684.954067] ext4_system_zone 1KB 7KB [ 684.959460] bio-1 1KB 7KB [ 684.964915] pid_namespace 2KB 7KB [ 684.970291] rpc_buffers 17KB 25KB [ 684.975737] rpc_tasks 2KB 7KB [ 684.981222] UNIX 206KB 210KB [ 684.986595] tcp_bind_bucket 1KB 4KB [ 684.992030] ip_fib_trie 23KB 27KB [ 684.997396] ip_fib_alias 112KB 118KB [ 685.002817] ip_dst_cache 10KB 48KB [ 685.008186] RAW 42KB 52KB [ 685.015279] UDP 40KB 47KB [ 685.020660] TCP 14KB 22KB [ 685.026461] hugetlbfs_inode_cache 3KB 15KB [ 685.032290] fscache_cookie_jar 1KB 11KB [ 685.037753] eventpoll_pwq 21KB 47KB [ 685.043178] eventpoll_epi 40KB 66KB [ 685.048546] inotify_inode_mark 23KB 55KB [ 685.054112] request_queue 199KB 199KB [ 685.059533] blkdev_requests 1KB 3KB [ 685.065036] blkdev_ioc 22KB 27KB [ 685.070399] bio-0 1041KB 1068KB [ 685.075877] biovec-max 1493KB 1493KB [ 685.081277] biovec-64 920KB 921KB [ 685.086643] biovec-16 73KB 75KB [ 685.092083] bio_integrity_payload 1KB 8KB [ 685.097799] khugepaged_mm_slot 13KB 34KB [ 685.103322] uid_cache 0KB 4KB [ 685.108706] dmaengine-unmap-2 0KB 3KB [ 685.115921] skbuff_fclone_cache 170KB 303KB [ 685.121546] skbuff_head_cache 5745KB 5748KB [ 685.126910] configfs_dir_cache 3KB 11KB [ 685.132422] file_lock_cache 107KB 198KB [ 685.137784] file_lock_ctx 9KB 11KB [ 685.143234] fsnotify_mark_connector 12KB 31KB [ 685.149119] net_namespace 52KB 52KB [ 685.154585] shmem_inode_cache 8228KB 8485KB [ 685.160077] task_delay_info 208KB 407KB [ 685.165492] taskstats 100KB 206KB [ 685.171019] proc_dir_entry 694KB 697KB [ 685.176423] pde_opener 9KB 58KB [ 685.181835] seq_file 274KB 539KB [ 685.187198] sigqueue 49KB 55KB [ 685.192642] kernfs_node_cache 18230KB 18246KB [ 685.198095] mnt_cache 173KB 188KB [ 685.203546] filp 6547KB 7642KB [ 685.209028] names_cache 143458KB 143518KB [ 685.214575] iint_cache 43KB 79KB [ 685.221836] key_jar 4KB 11KB [ 685.227244] uts_namespace 2KB 7KB [ 685.232687] nsproxy 1KB 11KB [ 685.238068] vm_area_struct 3576KB 5185KB [ 685.243524] mm_struct 531KB 1040KB [ 685.248894] fs_cache 108KB 372KB [ 685.254320] files_cache 383KB 791KB [ 685.259684] signal_cache 863KB 1760KB [ 685.265217] sighand_cache 518KB 589KB [ 685.270583] task_struct 7253KB 7253KB [ 685.276012] cred_jar 1405KB 2100KB [ 685.281451] anon_vma_chain 1142KB 1803KB [ 685.286816] anon_vma 129KB 269KB [ 685.292268] pid 51KB 264KB [ 685.297633] Acpi-Operand 156KB 202KB [ 685.303083] Acpi-ParseExt 8KB 11KB [ 685.308445] Acpi-Parse 41KB 47KB [ 685.313861] Acpi-State 52KB 63KB [ 685.321564] Acpi-Namespace 21KB 27KB [ 685.326976] numa_policy 0KB 3KB [ 685.332411] debug_objects_cache 1198KB 1770KB [ 685.337950] trace_event_file 297KB 298KB [ 685.343758] ftrace_event_field 398KB 401KB [ 685.349209] pool_workqueue 121KB 124KB [ 685.354655] page->ptl 622KB 1047KB [ 685.360060] kmalloc-2097152 2050KB 2050KB [ 685.369885] kmalloc-524288 2056KB 2056KB [ 685.396707] kmalloc-262144 1290KB 1290KB [ 685.420356] kmalloc-131072 650KB 650KB [ 685.441006] kmalloc-65536 1848KB 1914KB [ 685.446403] kmalloc-32768 1650KB 1650KB [ 685.451955] kmalloc-16384 1006KB 1006KB [ 685.457339] kmalloc-8192 3960KB 4001KB [ 685.462831] kmalloc-4096 19975KB 20013KB [ 685.468197] kmalloc-2048 13192KB 13865KB [ 685.473664] kmalloc-1024 7777KB 8016KB [ 685.479067] kmalloc-512 11580KB 11580KB [ 685.484489] kmalloc-256 5331KB 5482KB [ 685.489856] kmalloc-128 962KB 1488KB [ 685.495327] kmalloc-96 3295KB 4020KB [ 685.502956] kmalloc-64 3002KB 4248KB [ 685.508334] kmalloc-32 1905KB 2445KB [ 685.513922] kmalloc-192 1485KB 2288KB [ 685.519293] kmem_cache 177KB 183KB [ 685.526491] Out of memory (oom_kill_allocating_task): Kill process 12280 (systemd-journal) score 0 or sacrifice child [ 685.537467] Killed process 12280 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:0kB, shmem-rss:1292kB [ 685.549265] oom_reaper: reaped process 12280 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1384kB [ 685.694356] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 685.708349] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 685.723415] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 685.742873] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 685.749846] systemd[1]: Stopped Journal Service. [ 685.777793] systemd[1]: Starting Journal Service... [ 685.959076] systemd-journald[12341]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 686.444999] systemd[1]: Started Journal Service. [ 686.663626] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.669336] ieee802154 phy1 wpan1: encryption failed: -22 13:07:03 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)=@multiplanar_mmap={0x1ff, 0x2, 0x4, 0x0, 0x2, {0x0, 0x2710}, {0x4, 0xc, 0xc7, 0x7f, 0x1, 0x9, "5799825b"}, 0x800, 0x1, {&(0x7f0000000080)=[{0x9, 0x6abd, {0x344}, 0x7886339c}, {0xa0b2, 0x4, {0x100000001}, 0x6cf81f18}]}, 0x6}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000000)=@fd={0x9, 0x1, 0x4, 0x100000, 0x4, {}, {0x5, 0x8, 0x88, 0x7, 0x1, 0xa8, "25eb4201"}, 0x4, 0x4, {}, 0x8}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)=@multiplanar_mmap={0x1ff, 0x2, 0x4, 0x0, 0x2, {0x0, 0x2710}, {0x4, 0xc, 0xc7, 0x7f, 0x1, 0x9, "5799825b"}, 0x800, 0x1, {&(0x7f0000000080)=[{0x9, 0x6abd, {0x344}, 0x7886339c}, {0xa0b2, 0x4, {0x100000001}, 0x6cf81f18}]}, 0x6}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000000)=@fd={0x9, 0x1, 0x4, 0x100000, 0x4, {}, {0x5, 0x8, 0x88, 0x7, 0x1, 0xa8, "25eb4201"}, 0x4, 0x4, {}, 0x8}) (async) 13:07:05 executing program 5: syz_open_dev$vim2m(0x0, 0xffffffffffffffff, 0x2) 13:07:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_SSID={0x15, 0x34, @random="93388aaa8e929b9ccdf5660a6a3b123fd4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xbb, 0x401, 0x34324948, 0x9, 0x3, 0x9, 0x7, 0x40000, 0x1, 0x0, 0x1, 0x7}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000380)=@userptr={0x40000000, 0x0, 0x4, 0x0, 0x3, {0x0, 0x2710}, {0x1, 0x2, 0x9, 0x9, 0x80, 0xea, "f8437f47"}, 0x3, 0x2, {&(0x7f0000000340)}, 0x9}) ioctl$vim2m_VIDIOC_G_FMT(r3, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x55595659, 0x0, 0x0, [{}, {}, {0xffffffff}, {}, {0x0, 0x400000}], 0x0, 0x10}}) 13:07:05 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000140)={0x3, 0x2}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x4, [{0x1}, {0x2, 0x4}, {}, {0x0, 0xffffffff}, {0x93}, {}, {0x1}, {0x2}]}}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xa5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x4008881) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r7, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_COOKIE={0xc}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000a80)=ANY=[@ANYBLOB="b0080000", @ANYRES16=r5, @ANYBLOB="0000000008000300", @ANYRES32=0x0, @ANYBLOB="38005a803400018014000500ff000004098d010006004000800005001400050020000900de000800020007000002000005000600010000007c015a802000018019000200202f25372637293b480c4f402c3b55350f1a04374500000030000380140003000008ff000040050005000900080000000500040000000000050007000000000006000100020200007c00018016000100023030460c6c0604020009185a05242e243000002d00020055064345380f3741001c35383c432d232d3b063a08394001143a043d2829333e341d0b55134630081c0000000500070001000000140005000400f8fff8ff00040900620f81000400140005000300000003006a0d070001000008ffff48000280140005000500ff07ff03ff000000020003000800140003000008ff00090040000002080004006b0014000300a50a068e7003485edd074a977f0040000500060001000000440001803f0002002c3c4b030d51041a531e54111326283140072f49d541470e430e473b001f193134080a3b02384308064340374840413a1d4f0f32073404341a0b50002000028005000600020000001400050007000400e8004000000000000900faffac025a804400028014000500090001000200090000000200040005000500070000000000050007000200000005000600020000001400030004000000080000008100ffff0900d700900001801a00010060240c182424031b30120c02141201480b0c18760224000014000300004009000004fc0007000300810003001400050000e004003f000000ff01d002ff000600140003000000030001007f0023003f0080000104140005003603000408000700010000000300010014000300050003000001001000000700020001000a00010005164a651b0b000034000380140003008100020008000700040000800700df050500040000000000140003008d71cf0000000400f6008100ff7f01803c00028016000200470210473b2131341a231e1c091218280f28000020000100032412092a6c0904010b300160240201053006060c48050548122409440003802a0002001007331d4a0f0642183a3a35373d51433b48311e4c091a050419360136304e3a494d55440a0700001400030008000080b70800000001ff03ffffff01340003801e000100056c0b0c04160630521b6929096c366036184d2d06060518014800000f000100600460050c051b050b00030038000380050006000100000029000200311043551b0b4a38212a0e080c140f110a293f1b333d490947101a181e2e4e4f2e451c3a2b0000001800028014000300ff070008fbff800058090200f8ff090098000280050004000000000005000600000000000500070001000000050006000100000014000500c1000400070004000010020081000600390002004033094120101c3001f014044a29203d501a503c024c2631404d34190e14042b55454038021230490d2620524b1b29133841192b2f000000140003007f00060b780001804cfb00000180090005000600010000000500060001000000040002807c005a80180003801200010006181618066c0904011604604812000060000080310002004d322b4e181244404031091c3c20024d4a210d3d4852544711012e4a1a33472d522e252d1056253e0f532e153f00000014000300040006000900000007000000d700070014000500dd8e02000700000406001f00000005000c015a80a0000180200002000048511541161205070b163e0252011907012131392e1244094e11042d00020056442109324a4f54064a22572c0b2e5610522e343e345110221c200219545403194248190b180d162d0000000900010006020c040c00000021000100010b18032430090c48241f019e24012416061d1616180b0c6001000c48000000110001001b2b126c050c1b06185e306c4800000005000700010000006800018014000500010009002000010000fc060000000004050006000000000014000500f9ff00003f000100020001001509030014000500fcff2b07ea89070001000400000006001000010048030c600618160202a006160500070000000000050006000000000070005a801800018014000500f73633b2070007000100ff00090003003c000180140005000200af08ffff08000101720b0900ff011400030001003f0000010000090000006f04080005000700000000000500040000000000180001801400050000000500000000000600ff01000101003c025a807400038005000400020000001400050000000000000093c33f0009000000020014000300040006000001030081000605070006000500060000000000140003000300ffff20000900c7c0ff01d700009121000200492947495718192151511e070a31005302140f2749553907532b402d56000000c00003804d000200200f1e48215034414a0830543d33323c120b013a0a1d0f03210856513f004c3516554e455403314d1501221629152c413a003b3919003b242844130d3b4b49161301121f0c0405034f00000005000400020000000500070000000000050006000200000014000500080026007f00050000022c00ff038100050007000000000005000400010000001400030007000500ff037ac704000004020003001c000100016b1b0c16010c6c481648126c06483018600b486c1809054c00018036000200482a4f573e5331411f3a2b1f42553a561c390d102d31402e531409053e45042f2520040916201f4953442850251c223c4121000005000600020000000500040001000000240002801f0001000b0b0c043036481b03301b6c1648160c24060b1218e8020b60010900940001800500070001000000140005000200080007000800a30a040004000004140003001f00ffff0400ff003f000900000107001400030000800101080005000700ff0f2f030500140005004c0108007fff08000000400001013c0c210002003c204f3039222f320027563c4a484b083d21321753073b2251344606340000000b00010018020236246048000500060002000000"], 0x8b0}, 0x1, 0x0, 0x0, 0x4004}, 0x1) 13:07:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)=@overlay={0x9d, 0x3, 0x4, 0xe000, 0x5, {0x77359400}, {0x1, 0x2, 0x80, 0x1, 0x8, 0x3, "b2d2866c"}, 0x5, 0x3, {}, 0x8}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)=@overlay={0x9d, 0x3, 0x4, 0xe000, 0x5, {0x77359400}, {0x1, 0x2, 0x80, 0x1, 0x8, 0x3, "b2d2866c"}, 0x5, 0x3, {}, 0x8}) (async) 13:07:05 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @win={{0x3ff, 0x5, 0x7ff}, 0xdbf78d85fdd1cf50, 0x2, &(0x7f0000000080)={{0x7ff, 0x6, 0x5, 0xddc8}, &(0x7f0000000040)={{0x6, 0x9, 0x2, 0x8cc}, &(0x7f00000001c0)={{0x7c0e, 0xfffffffc, 0x0, 0x1}}}}, 0x3, &(0x7f00000000c0)="8da58809ab3722f9a3413886b36f5e570071e1e825c1fd957f1720bdbb4b5f63058fedbad5d1b0a7f779983593165db6e01fa29d752c865b7ae64a9668d1580aa341c723454be849be5556f72d5e0d9b1a3b7c245dbbb2f9f0b8dcc33ce0843a195a5bfcd5eb3489c1cbe9b4162ee408b425043faaf869984a8e58cbaa1fc1321aed95684232f9d2c8b301567739710fcc86a6f357672f5fec67bdb3110adaf575a3d8e3918553d80e14a29db2f1f5bc5175999ca08b111aa38e7305118e967f478c8dacd5f9771da7115b1c7f2e84b59dc0dfcd6a", 0x6}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x80000001, 0x4, 0x4000}) 13:07:05 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x1}, {}, {}, {0x0, 0xdb1}]}}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) (async) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x0, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20008004) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000001640)={0x1018, r7, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}]}, 0x1018}, 0x1, 0x0, 0x0, 0x400c040}, 0x24000001) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000000340), 0xc, &(0x7f0000003c40)={&(0x7f0000000200)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0xb}}}}, [@NL80211_ATTR_REKEY_DATA={0xffffffffffffff0b, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="00032b4b76b92dee5991cbff83aae43abd7000fddbdf255300000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x41) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r8) (async) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r5, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x63}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x1, 0x5]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xcf9}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 13:07:05 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000140)={0x3, 0x2}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000140)={0x3, 0x2}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x4, [{0x1}, {0x2, 0x4}, {}, {0x0, 0xffffffff}, {0x93}, {}, {0x1}, {0x2}]}}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xa5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x4008881) (async) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xa5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x4008881) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r4) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r7, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_COOKIE={0xc}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4) (async) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000a80)=ANY=[@ANYBLOB="b0080000", @ANYRES16=r5, @ANYBLOB="0000000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x8b0}, 0x1, 0x0, 0x0, 0x4004}, 0x1) 13:07:05 executing program 5: syz_open_dev$vim2m(0x0, 0xffffffffffffffff, 0x2) 13:07:05 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @win={{0x3ff, 0x5, 0x7ff}, 0xdbf78d85fdd1cf50, 0x2, &(0x7f0000000080)={{0x7ff, 0x6, 0x5, 0xddc8}, &(0x7f0000000040)={{0x6, 0x9, 0x2, 0x8cc}, &(0x7f00000001c0)={{0x7c0e, 0xfffffffc, 0x0, 0x1}}}}, 0x3, &(0x7f00000000c0)="8da58809ab3722f9a3413886b36f5e570071e1e825c1fd957f1720bdbb4b5f63058fedbad5d1b0a7f779983593165db6e01fa29d752c865b7ae64a9668d1580aa341c723454be849be5556f72d5e0d9b1a3b7c245dbbb2f9f0b8dcc33ce0843a195a5bfcd5eb3489c1cbe9b4162ee408b425043faaf869984a8e58cbaa1fc1321aed95684232f9d2c8b301567739710fcc86a6f357672f5fec67bdb3110adaf575a3d8e3918553d80e14a29db2f1f5bc5175999ca08b111aa38e7305118e967f478c8dacd5f9771da7115b1c7f2e84b59dc0dfcd6a", 0x6}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x80000001, 0x4, 0x4000}) 13:07:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) [ 689.347984] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 13:07:05 executing program 5: syz_open_dev$vim2m(&(0x7f00000002c0), 0x0, 0x2) 13:07:06 executing program 5: syz_open_dev$vim2m(&(0x7f00000002c0), 0x0, 0x2) 13:07:06 executing program 5: syz_open_dev$vim2m(&(0x7f00000002c0), 0x0, 0x2) 13:07:06 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @win={{0x3ff, 0x5, 0x7ff}, 0xdbf78d85fdd1cf50, 0x2, &(0x7f0000000080)={{0x7ff, 0x6, 0x5, 0xddc8}, &(0x7f0000000040)={{0x6, 0x9, 0x2, 0x8cc}, &(0x7f00000001c0)={{0x7c0e, 0xfffffffc, 0x0, 0x1}}}}, 0x3, &(0x7f00000000c0)="8da58809ab3722f9a3413886b36f5e570071e1e825c1fd957f1720bdbb4b5f63058fedbad5d1b0a7f779983593165db6e01fa29d752c865b7ae64a9668d1580aa341c723454be849be5556f72d5e0d9b1a3b7c245dbbb2f9f0b8dcc33ce0843a195a5bfcd5eb3489c1cbe9b4162ee408b425043faaf869984a8e58cbaa1fc1321aed95684232f9d2c8b301567739710fcc86a6f357672f5fec67bdb3110adaf575a3d8e3918553d80e14a29db2f1f5bc5175999ca08b111aa38e7305118e967f478c8dacd5f9771da7115b1c7f2e84b59dc0dfcd6a", 0x6}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x80000001, 0x4, 0x4000}) [ 694.426236] oom_reaper: reaped process 12371 (syz-executor.0), now anon-rss:0kB, file-rss:14336kB, shmem-rss:16kB [ 694.460405] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 694.477813] in:imklog cpuset=/ mems_allowed=0-1 [ 694.482563] CPU: 1 PID: 12188 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 694.490016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 694.499372] Call Trace: [ 694.501974] dump_stack+0x1fc/0x2ef [ 694.505590] dump_header+0x15d/0xc3f [ 694.509287] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 694.514372] ? ___ratelimit+0x319/0x590 [ 694.518450] oom_kill_process.cold+0x10/0x692 [ 694.520554] syz-executor.0: vmalloc: allocation failure, allocated 1751748608 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 694.522966] ? check_preemption_disabled+0x41/0x280 [ 694.538756] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 694.541941] ? has_intersects_mems_allowed+0x1d6/0x290 [ 694.541956] out_of_memory+0x1072/0x1390 [ 694.541975] ? oom_killer_disable+0x270/0x270 [ 694.541990] ? mutex_trylock+0x15f/0x1a0 [ 694.542007] __alloc_pages_nodemask+0x23a2/0x2890 [ 694.569728] ? find_get_entry+0x4cd/0x8a0 [ 694.573877] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 694.578730] alloc_pages_current+0x193/0x2a0 [ 694.583128] filemap_fault+0x146e/0x2180 [ 694.587287] ext4_filemap_fault+0x84/0xb0 [ 694.591426] __do_fault+0x10b/0x4b0 [ 694.595046] __handle_mm_fault+0x273b/0x41c0 [ 694.599447] ? vm_insert_page+0x9c0/0x9c0 [ 694.603586] ? lock_downgrade+0x720/0x720 [ 694.607731] ? check_preemption_disabled+0x41/0x280 [ 694.612741] handle_mm_fault+0x436/0xb10 [ 694.616800] __do_page_fault+0x68e/0xd60 [ 694.620861] ? trace_hardirqs_off_caller+0x6e/0x210 [ 694.625883] ? spurious_fault+0x840/0x840 [ 694.630022] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 694.634859] ? page_fault+0x8/0x30 [ 694.638391] page_fault+0x1e/0x30 [ 694.641837] RIP: 0033:0x7f5c0cfd222d [ 694.645541] Code: Bad RIP value. [ 694.648893] RSP: 002b:00007f5c0a96e580 EFLAGS: 00010293 [ 694.654243] RAX: 0000000000000078 RBX: 0000000000000000 RCX: 00007f5c0cfd222d [ 694.661503] RDX: 0000000000001fa0 RSI: 00007f5c0a96eda0 RDI: 0000000000000004 [ 694.668776] RBP: 0000563b58dbc9d0 R08: 0000000000000000 R09: 0000000004000001 [ 694.676040] R10: 0000000000000001 R11: 0000000000000293 R12: 00007f5c0a96eda0 [ 694.683324] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f5c0a96ee03 [ 694.690603] CPU: 0 PID: 12371 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 694.698503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 694.705233] Mem-Info: [ 694.707944] Call Trace: [ 694.710370] active_anon:20672 inactive_anon:10945 isolated_anon:0 [ 694.710370] active_file:12 inactive_file:12 isolated_file:0 [ 694.710370] unevictable:0 dirty:0 writeback:0 unstable:0 [ 694.710370] slab_reclaimable:15836 slab_unreclaimable:119785 [ 694.710370] mapped:22311 shmem:11554 pagetables:612 bounce:0 [ 694.710370] free:13857 free_pcp:221 free_cma:0 [ 694.712951] dump_stack+0x1fc/0x2ef [ 694.712970] warn_alloc.cold+0x7b/0x18f [ 694.713005] ? zone_watermark_ok_safe+0x260/0x260 [ 694.746556] Node 0 active_anon:80896kB inactive_anon:19328kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21636kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 36864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 694.750008] ? rcu_nmi_exit+0xb3/0x180 [ 694.754001] Node 1 active_anon:1792kB inactive_anon:24452kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1376kB dirty:0kB writeback:0kB shmem:24580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 694.758808] __vmalloc_area_node+0x4fd/0x780 [ 694.786391] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 694.790287] ? __vmalloc_node_range+0x180/0x180 [ 694.817162] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 694.821543] ? _raw_spin_unlock+0x29/0x40 [ 694.821556] ? __get_vm_area_node+0x2e2/0x3a0 [ 694.821577] __vmalloc_node_range+0xed/0x180 [ 694.847787] Node 0 DMA32 free:17844kB min:35996kB low:44992kB high:53988kB active_anon:80996kB inactive_anon:19328kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:2228kB bounce:0kB free_pcp:364kB local_pcp:116kB free_cma:0kB [ 694.852421] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 694.852438] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 694.852449] vmalloc_user+0x70/0xe0 [ 694.852465] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 694.857476] lowmem_reserve[]: 0 0 1 1 1 [ 694.861599] vb2_vmalloc_alloc+0xb3/0x2f0 [ 694.861613] __vb2_queue_alloc+0x472/0xe60 [ 694.861640] vb2_core_create_bufs+0x273/0x7e0 [ 694.866115] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 694.870520] ? __vb2_queue_free+0x870/0x870 [ 694.870533] ? __video_do_ioctl+0x632/0xcd0 [ 694.870553] ? __mutex_lock+0x368/0x1190 [ 694.899545] lowmem_reserve[]: 0 0 0 0 0 [ 694.903843] vb2_create_bufs+0x332/0x620 [ 694.903863] ? mark_held_locks+0xf0/0xf0 [ 694.909198] Node 1 Normal free:26692kB min:53876kB low:67344kB high:80812kB active_anon:1792kB inactive_anon:24452kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:220kB bounce:0kB free_pcp:520kB local_pcp:252kB free_cma:0kB [ 694.912813] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 694.912828] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 694.912846] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 694.917141] lowmem_reserve[]: 0 0 0 0 0 [ 694.921131] v4l_create_bufs+0xb2/0x160 [ 694.921151] __video_do_ioctl+0x49a/0xcd0 [ 694.925276] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 694.929508] ? v4l_querycap+0x340/0x340 [ 694.933998] Node 0 DMA32: 2031*4kB (UME) 757*8kB (UME) 153*16kB (UME) 38*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17844kB [ 694.959821] ? __might_fault+0x192/0x1d0 [ 694.959836] ? v4l_querycap+0x340/0x340 [ 694.959854] video_usercopy+0x13f/0xfa0 [ 694.964185] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 694.968490] ? v4l_enumstd+0x60/0x60 [ 694.972554] Node 1 Normal: 183*4kB (M) 153*8kB (ME) 120*16kB (M) 97*32kB (ME) 38*64kB (UM) 13*128kB (UM) 1*256kB (M) 0*512kB 1*1024kB (M) 1*2048kB (M) 3*4096kB (U) = 26692kB [ 694.976589] ? do_futex+0x171/0x1880 [ 694.980648] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 694.984772] ? mark_held_locks+0xf0/0xf0 [ 695.013397] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 695.018474] ? debug_check_no_obj_freed+0x201/0x490 [ 695.023583] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 695.028769] ? video_usercopy+0xfa0/0xfa0 [ 695.032742] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 695.036685] v4l2_ioctl+0x147/0x1a0 [ 695.040833] 11601 total pagecache pages [ 695.053286] ? video_devdata+0xa0/0xa0 [ 695.053302] do_vfs_ioctl+0xcdb/0x12e0 [ 695.053319] ? lock_downgrade+0x720/0x720 [ 695.057269] 0 pages in swap cache [ 695.071973] ? check_preemption_disabled+0x41/0x280 [ 695.071987] ? ioctl_preallocate+0x200/0x200 [ 695.072006] ? __fget+0x356/0x510 [ 695.076186] Swap cache stats: add 0, delete 0, find 0/0 [ 695.080277] ? do_dup2+0x450/0x450 [ 695.084387] Free swap = 0kB [ 695.095360] ? __se_sys_futex+0x298/0x3b0 [ 695.095384] ksys_ioctl+0x9b/0xc0 [ 695.099698] Total swap = 0kB [ 695.115655] __x64_sys_ioctl+0x6f/0xb0 [ 695.115670] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 695.115687] do_syscall_64+0xf9/0x620 [ 695.119518] 2097051 pages RAM [ 695.128357] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 695.128370] RIP: 0033:0x7f68c24140f9 [ 695.128386] Code: Bad RIP value. [ 695.132480] 0 pages HighMem/MovableOnly [ 695.141554] RSP: 002b:00007f68c0986168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 695.141568] RAX: ffffffffffffffda RBX: 00007f68c2533f80 RCX: 00007f68c24140f9 [ 695.141575] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000006 [ 695.141582] RBP: 00007f68c246fae9 R08: 0000000000000000 R09: 0000000000000000 [ 695.141589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 695.141595] R13: 00007fff6155d44f R14: 00007f68c0986300 R15: 0000000000022000 [ 695.151096] Mem-Info: [ 695.186042] 369649 pages reserved [ 695.188620] active_anon:20668 inactive_anon:10945 isolated_anon:0 [ 695.188620] active_file:12 inactive_file:12 isolated_file:0 [ 695.188620] unevictable:0 dirty:0 writeback:0 unstable:0 [ 695.188620] slab_reclaimable:15836 slab_unreclaimable:119785 [ 695.188620] mapped:22311 shmem:11554 pagetables:611 bounce:0 [ 695.188620] free:13857 free_pcp:221 free_cma:0 [ 695.198813] 0 pages cma reserved [ 695.206539] Node 0 active_anon:80884kB inactive_anon:19328kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21636kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 34816kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 695.220703] Unreclaimable slab info: [ 695.222030] Node 1 active_anon:1788kB inactive_anon:24452kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1376kB dirty:0kB writeback:0kB shmem:24580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 695.229815] Name Used Total [ 695.232198] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 695.232230] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 695.245496] pid_2 88KB 152KB [ 695.248952] Node 0 DMA32 free:17844kB min:35996kB low:44992kB high:53988kB active_anon:80884kB inactive_anon:19328kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:2224kB bounce:0kB free_pcp:364kB local_pcp:248kB free_cma:0kB [ 695.258715] batadv_tl_cache 4KB 12KB [ 695.260724] lowmem_reserve[]: 0 0 1 1 1 [ 695.273717] TIPC 10KB 15KB [ 695.275783] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 695.294271] SCTPv6 14KB 18KB [ 695.298991] lowmem_reserve[]: 0 0 0 0 0 [ 695.316098] DCCPv6 17KB 22KB [ 695.347624] Node 1 Normal free:26692kB min:53876kB low:67344kB high:80812kB active_anon:1788kB inactive_anon:24452kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:220kB bounce:0kB free_pcp:520kB local_pcp:268kB free_cma:0kB [ 695.386751] DCCP 16KB 21KB [ 695.410192] lowmem_reserve[]: 0 0 0 0 0 [ 695.425266] RXRPC 11KB 13KB [ 695.442140] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 695.455007] rxrpc_call_jar 78KB 94KB [ 695.485251] Node 0 DMA32: 2031*4kB (UME) 757*8kB (UME) 153*16kB (UME) 38*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17844kB [ 695.496101] bridge_fdb_cache 9KB 15KB [ 695.525860] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 695.536520] fib6_nodes 157KB 160KB [ 695.574464] Node 1 Normal: 183*4kB (M) 153*8kB (ME) 120*16kB (M) 97*32kB (ME) 38*64kB (UM) 13*128kB (UM) 1*256kB (M) 0*512kB 1*1024kB (M) 1*2048kB (M) 3*4096kB (U) = 26692kB [ 695.580971] ip6_dst_cache 72KB 326KB [ 695.601822] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 695.612766] RAWv6 70KB 74KB [ 695.619373] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 695.629123] UDPv6 33KB 37KB [ 695.642245] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 695.650182] TCPv6 24KB 42KB [ 695.663925] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 695.668517] nf_conntrack 6KB 18KB [ 695.677371] 11578 total pagecache pages [ 695.681843] t10_alua_lu_gp_cache 0KB 3KB [ 695.698094] 0 pages in swap cache [ 695.706849] sd_ext_cdb 0KB 7KB [ 695.708821] Swap cache stats: add 0, delete 0, find 0/0 [ 695.712814] scsi_sense_cache 1056KB 1060KB [ 695.712824] virtio_scsi_cmd 16KB 16KB [ 695.712837] sgpool-128 8KB 8KB [ 695.712846] sgpool-64 4KB 12KB [ 695.712855] sgpool-32 2KB 15KB [ 695.712865] sgpool-16 1KB 7KB [ 695.712874] sgpool-8 0KB 7KB [ 695.712891] mqueue_inode_cache 10KB 22KB [ 695.712906] bio_post_read_ctx 14KB 15KB [ 695.729061] Free swap = 0kB [ 695.736262] bio-2 14KB 15KB [ 695.738284] Total swap = 0kB [ 695.743704] jfs_mp 7KB 7KB [ 695.743745] cifs_small_rq 15KB 16KB [ 695.743755] cifs_request 67KB 67KB [ 695.743763] cifs_mpx_ids 0KB 7KB [ 695.743792] nfs_commit_data 3KB 14KB [ 695.758298] 2097051 pages RAM [ 695.761992] nfs_write_data 34KB 44KB [ 695.767968] 0 pages HighMem/MovableOnly [ 695.771942] ext4_system_zone 1KB 7KB [ 695.786044] 369649 pages reserved [ 695.789934] bio-1 1KB 7KB [ 695.795755] 0 pages cma reserved [ 695.800383] pid_namespace 2KB 7KB [ 695.857001] rpc_buffers 17KB 25KB [ 695.862702] rpc_tasks 2KB 7KB [ 695.868076] UNIX 196KB 217KB [ 695.877105] tcp_bind_bucket 1KB 4KB [ 695.882542] ip_fib_trie 23KB 27KB [ 695.887911] ip_fib_alias 112KB 118KB [ 695.896883] ip_dst_cache 10KB 48KB [ 695.902312] RAW 42KB 52KB [ 695.907681] UDP 38KB 47KB [ 695.916682] TCP 11KB 16KB [ 695.922097] hugetlbfs_inode_cache 3KB 15KB [ 695.927809] fscache_cookie_jar 1KB 11KB [ 695.937022] eventpoll_pwq 25KB 47KB [ 695.942447] eventpoll_epi 46KB 66KB [ 695.947816] inotify_inode_mark 21KB 55KB [ 695.956882] request_queue 199KB 199KB [ 695.962303] blkdev_requests 1KB 3KB [ 695.967704] blkdev_ioc 23KB 27KB [ 695.978787] bio-0 1059KB 1098KB [ 695.987358] biovec-max 1518KB 1559KB [ 696.004235] biovec-64 977KB 1008KB [ 696.009628] biovec-16 79KB 86KB [ 696.020187] bio_integrity_payload 1KB 8KB [ 696.037847] khugepaged_mm_slot 12KB 34KB [ 696.044973] uid_cache 0KB 4KB [ 696.060310] dmaengine-unmap-2 0KB 3KB [ 696.067342] skbuff_fclone_cache 185KB 300KB [ 696.084839] skbuff_head_cache 5827KB 5846KB [ 696.090229] configfs_dir_cache 3KB 11KB [ 696.107257] file_lock_cache 100KB 198KB [ 696.112933] file_lock_ctx 9KB 11KB [ 696.118304] fsnotify_mark_connector 14KB 31KB [ 696.135661] net_namespace 52KB 52KB [ 696.144440] shmem_inode_cache 8223KB 8473KB [ 696.149822] task_delay_info 210KB 407KB [ 696.167420] taskstats 95KB 206KB [ 696.175783] proc_dir_entry 694KB 697KB [ 696.190126] pde_opener 7KB 58KB [ 696.211209] seq_file 279KB 539KB [ 696.216607] sigqueue 38KB 55KB [ 696.234199] kernfs_node_cache 18230KB 18250KB [ 696.239600] mnt_cache 173KB 188KB [ 696.248467] filp 6685KB 7638KB [ 696.263863] names_cache 144912KB 144971KB [ 696.269264] iint_cache 30KB 71KB [ 696.274675] key_jar 4KB 11KB [ 696.280044] uts_namespace 2KB 7KB [ 696.289103] nsproxy 1KB 7KB [ 696.294520] vm_area_struct 3541KB 5166KB [ 696.299979] mm_struct 524KB 1020KB [ 696.308749] fs_cache 100KB 372KB [ 696.314164] files_cache 376KB 787KB [ 696.319538] signal_cache 856KB 1760KB [ 696.328344] sighand_cache 548KB 589KB [ 696.333806] task_struct 6899KB 6956KB [ 696.339177] cred_jar 1477KB 2096KB [ 696.348043] anon_vma_chain 1142KB 1803KB [ 696.353456] anon_vma 135KB 269KB [ 696.358825] pid 49KB 264KB [ 696.367761] Acpi-Operand 156KB 202KB [ 696.373185] Acpi-ParseExt 8KB 11KB [ 696.378640] Acpi-Parse 41KB 47KB [ 696.387493] Acpi-State 52KB 63KB [ 696.392929] Acpi-Namespace 21KB 27KB [ 696.398298] numa_policy 0KB 3KB [ 696.407016] debug_objects_cache 1184KB 1692KB [ 696.417391] trace_event_file 297KB 298KB [ 696.429381] ftrace_event_field 398KB 401KB [ 696.448044] pool_workqueue 121KB 124KB [ 696.456964] page->ptl 616KB 1047KB [ 696.474877] kmalloc-2097152 2050KB 2050KB [ 696.487577] kmalloc-524288 2056KB 2056KB [ 696.493549] kmalloc-262144 1290KB 1290KB [ 696.499669] kmalloc-131072 650KB 650KB [ 696.511365] kmalloc-65536 1848KB 1914KB [ 696.517512] kmalloc-32768 1650KB 1650KB [ 696.527362] kmalloc-16384 1039KB 1039KB [ 696.533730] kmalloc-8192 3960KB 4001KB [ 696.539176] kmalloc-4096 19953KB 19962KB [ 696.551580] kmalloc-2048 13007KB 13833KB [ 696.556972] kmalloc-1024 7396KB 8016KB [ 696.565806] kmalloc-512 11760KB 11760KB [ 696.573841] kmalloc-256 5124KB 5478KB [ 696.579799] kmalloc-128 960KB 1488KB [ 696.593937] kmalloc-96 3295KB 4020KB [ 696.599488] kmalloc-64 2923KB 4248KB [ 696.606618] kmalloc-32 1897KB 2445KB [ 696.616002] kmalloc-192 1481KB 2288KB [ 696.623350] kmem_cache 177KB 183KB [ 696.628730] Out of memory (oom_kill_allocating_task): Kill process 12188 (in:imklog) score 0 or sacrifice child [ 696.646272] Killed process 12186 (rsyslogd) total-vm:254332kB, anon-rss:724kB, file-rss:0kB, shmem-rss:0kB [ 696.659816] oom_reaper: reaped process 12186 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 13:07:16 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000140)={0x3, 0x2}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x4, [{0x1}, {0x2, 0x4}, {}, {0x0, 0xffffffff}, {0x93}, {}, {0x1}, {0x2}]}}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xa5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x4008881) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r4) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r7, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_COOKIE={0xc}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000a80)=ANY=[@ANYBLOB="b0080000", @ANYRES16=r5, @ANYBLOB="0000000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x8b0}, 0x1, 0x0, 0x0, 0x4004}, 0x1) 13:07:16 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @win={{0x3ff, 0x5, 0x7ff}, 0xdbf78d85fdd1cf50, 0x2, &(0x7f0000000080)={{0x7ff, 0x6, 0x5, 0xddc8}, &(0x7f0000000040)={{0x6, 0x9, 0x2, 0x8cc}, &(0x7f00000001c0)={{0x7c0e, 0xfffffffc, 0x0, 0x1}}}}, 0x3, &(0x7f00000000c0)="8da58809ab3722f9a3413886b36f5e570071e1e825c1fd957f1720bdbb4b5f63058fedbad5d1b0a7f779983593165db6e01fa29d752c865b7ae64a9668d1580aa341c723454be849be5556f72d5e0d9b1a3b7c245dbbb2f9f0b8dcc33ce0843a195a5bfcd5eb3489c1cbe9b4162ee408b425043faaf869984a8e58cbaa1fc1321aed95684232f9d2c8b301567739710fcc86a6f357672f5fec67bdb3110adaf575a3d8e3918553d80e14a29db2f1f5bc5175999ca08b111aa38e7305118e967f478c8dacd5f9771da7115b1c7f2e84b59dc0dfcd6a", 0x6}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x80000001, 0x4, 0x4000}) 13:07:16 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @win={{0x3ff, 0x5, 0x7ff}, 0xdbf78d85fdd1cf50, 0x2, &(0x7f0000000080)={{0x7ff, 0x6, 0x5, 0xddc8}, &(0x7f0000000040)={{0x6, 0x9, 0x2, 0x8cc}, &(0x7f00000001c0)={{0x7c0e, 0xfffffffc, 0x0, 0x1}}}}, 0x3, &(0x7f00000000c0)="8da58809ab3722f9a3413886b36f5e570071e1e825c1fd957f1720bdbb4b5f63058fedbad5d1b0a7f779983593165db6e01fa29d752c865b7ae64a9668d1580aa341c723454be849be5556f72d5e0d9b1a3b7c245dbbb2f9f0b8dcc33ce0843a195a5bfcd5eb3489c1cbe9b4162ee408b425043faaf869984a8e58cbaa1fc1321aed95684232f9d2c8b301567739710fcc86a6f357672f5fec67bdb3110adaf575a3d8e3918553d80e14a29db2f1f5bc5175999ca08b111aa38e7305118e967f478c8dacd5f9771da7115b1c7f2e84b59dc0dfcd6a", 0x6}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x80000001, 0x4, 0x4000}) 13:07:16 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:07:16 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2}, {0x1}, {}, {}, {0x0, 0xdb1}]}}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) (async, rerun: 64) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x0, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20008004) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000001640)={0x1018, r7, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}]}, 0x1018}, 0x1, 0x0, 0x0, 0x400c040}, 0x24000001) (async, rerun: 64) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000000340), 0xc, &(0x7f0000003c40)={&(0x7f0000000200)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0xb}}}}, [@NL80211_ATTR_REKEY_DATA={0xffffffffffffff0b, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="00032b4b76b92dee5991cbff83aae43abd7000fddbdf255300000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x41) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r8) (async) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r5, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x63}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x1, 0x5]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xcf9}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 13:07:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_SSID={0x15, 0x34, @random="93388aaa8e929b9ccdf5660a6a3b123fd4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xbb, 0x401, 0x34324948, 0x9, 0x3, 0x9, 0x7, 0x40000, 0x1, 0x0, 0x1, 0x7}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000380)=@userptr={0x40000000, 0x0, 0x4, 0x0, 0x3, {0x0, 0x2710}, {0x1, 0x2, 0x9, 0x9, 0x80, 0xea, "f8437f47"}, 0x3, 0x2, {&(0x7f0000000340)}, 0x9}) 13:07:16 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socketpair(0x28, 0x209b0ca5c191ef56, 0xfffff778, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1c8, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x94, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x12, 0x16, 0x9, 0x6, 0x16, 0x16, 0x12, 0x5, 0x18, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x2, 0x0, 0x1, 0x1, 0x8001, 0x7f]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6, 0xb, 0x30, 0x6, 0x0, 0x16, 0x1b, 0xc, 0x3, 0x6c, 0x1b, 0x12, 0x5, 0x18, 0x3, 0x30, 0x6d, 0x2, 0x24, 0x0, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x22, 0x101, 0x7, 0x40, 0x8, 0x8, 0xa3, 0x8000]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x2, 0x1b, 0x24, 0x1b, 0x1, 0x5, 0xc, 0x24, 0x6e, 0x1b, 0x18, 0x6, 0x6c, 0x1b, 0x6, 0x18, 0x24, 0x6c, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}]}, @NL80211_ATTR_TX_RATES={0x120, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf723, 0x8, 0x15e, 0x3, 0x6, 0xfff, 0xf2f5, 0x1]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x6, 0xa}, {0x4, 0x7}, {0x0, 0x9}, {0x7, 0x9}, {0x5, 0x8}, {0x4, 0x8}, {0x6, 0x6}, {0x3, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x2, 0x6}, {0x6, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x7, 0xa}, {0x1, 0x8}, {0x2, 0x7}, {0x5, 0x5}, {0x0, 0x3}, {0x6, 0x9}, {0x1, 0x9}, {0x0, 0x5}, {0x3}, {0x1, 0xa}, {0x0, 0x2}, {0x2, 0x9}, {0x0, 0x8}, {0x1, 0x8}, {0x3, 0x8}, {0x2, 0x6}, {0x1, 0x1}, {0x1, 0x3}, {0x2, 0x9}, {0x0, 0x4}, {0x7, 0x3}, {0x0, 0x9}, {0x0, 0x2}, {0x1, 0x4}, {0x6, 0x6}, {0x1, 0x5}, {0x0, 0x6}, {0x0, 0x7}, {0x1, 0x5}, {0x6, 0x8}, {0x6, 0x7}, {0x2, 0x4}, {0x3, 0x1}, {0x5, 0x4}, {0x0, 0x2}, {0x5, 0x8}, {0x6, 0x2}, {0x5, 0x9}, {0x2, 0x8}, {0x7, 0x3}, {0x0, 0x3}, {0x7, 0x1}, {0x7, 0x8}, {0x2, 0x6}, {0x0, 0x9}, {0x3, 0xa}, {0x4}, {0x1, 0x3}, {0x3, 0x1}, {0x7}, {0x1, 0x3}, {0x5, 0x6}, {0x0, 0x2}, {0x2}, {0x6, 0x4}, {0x4, 0x2}, {0x0, 0x3}, {0x1, 0x7}, {0x3}, {0x3, 0x3}, {0x5, 0x7}, {0x1, 0x9}, {0x2, 0x5}, {0x2, 0x4}, {0x7, 0x1}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6, 0xff3e, 0x2, 0x401, 0x1, 0x0, 0x868]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x24, 0x6c, 0x48, 0x4, 0x36, 0x12, 0x18, 0x36, 0x4, 0xc, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x6, 0x81, 0x5, 0x1000, 0x56a7, 0x3, 0x2b]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x5, 0x8}, {0x6, 0x9}, {0x0, 0x5}, {0x4, 0x8}, {0x3, 0xa}, {0x3, 0x5}, {0x6, 0x4}, {0x7, 0x3}, {}, {0x6, 0x3}, {0x6, 0x5}, {0x5, 0x6}, {0x2, 0x4}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x8000, 0x984f, 0x9, 0x3, 0x2, 0x9, 0x2]}}]}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4001}, 0x4) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) 13:07:16 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) 13:07:16 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @win={{0x3ff, 0x5, 0x7ff}, 0xdbf78d85fdd1cf50, 0x2, &(0x7f0000000080)={{0x7ff, 0x6, 0x5, 0xddc8}, &(0x7f0000000040)={{0x6, 0x9, 0x2, 0x8cc}, &(0x7f00000001c0)={{0x7c0e, 0xfffffffc, 0x0, 0x1}}}}, 0x3, &(0x7f00000000c0)="8da58809ab3722f9a3413886b36f5e570071e1e825c1fd957f1720bdbb4b5f63058fedbad5d1b0a7f779983593165db6e01fa29d752c865b7ae64a9668d1580aa341c723454be849be5556f72d5e0d9b1a3b7c245dbbb2f9f0b8dcc33ce0843a195a5bfcd5eb3489c1cbe9b4162ee408b425043faaf869984a8e58cbaa1fc1321aed95684232f9d2c8b301567739710fcc86a6f357672f5fec67bdb3110adaf575a3d8e3918553d80e14a29db2f1f5bc5175999ca08b111aa38e7305118e967f478c8dacd5f9771da7115b1c7f2e84b59dc0dfcd6a", 0x6}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x80000001, 0x4, 0x4000}) [ 700.336198] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 700.365070] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 700.384104] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 700.400049] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 700.414995] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 700.450416] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 700.459551] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 700.469955] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 700.484156] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 700.494313] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 13:07:17 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x401, 0x8aae, 0x30385056, 0x6, 0x1, 0x3, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:07:17 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socketpair(0x28, 0x209b0ca5c191ef56, 0xfffff778, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1c8, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x94, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x12, 0x16, 0x9, 0x6, 0x16, 0x16, 0x12, 0x5, 0x18, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x2, 0x0, 0x1, 0x1, 0x8001, 0x7f]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6, 0xb, 0x30, 0x6, 0x0, 0x16, 0x1b, 0xc, 0x3, 0x6c, 0x1b, 0x12, 0x5, 0x18, 0x3, 0x30, 0x6d, 0x2, 0x24, 0x0, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x22, 0x101, 0x7, 0x40, 0x8, 0x8, 0xa3, 0x8000]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x2, 0x1b, 0x24, 0x1b, 0x1, 0x5, 0xc, 0x24, 0x6e, 0x1b, 0x18, 0x6, 0x6c, 0x1b, 0x6, 0x18, 0x24, 0x6c, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}]}, @NL80211_ATTR_TX_RATES={0x120, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf723, 0x8, 0x15e, 0x3, 0x6, 0xfff, 0xf2f5, 0x1]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x6, 0xa}, {0x4, 0x7}, {0x0, 0x9}, {0x7, 0x9}, {0x5, 0x8}, {0x4, 0x8}, {0x6, 0x6}, {0x3, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x2, 0x6}, {0x6, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x7, 0xa}, {0x1, 0x8}, {0x2, 0x7}, {0x5, 0x5}, {0x0, 0x3}, {0x6, 0x9}, {0x1, 0x9}, {0x0, 0x5}, {0x3}, {0x1, 0xa}, {0x0, 0x2}, {0x2, 0x9}, {0x0, 0x8}, {0x1, 0x8}, {0x3, 0x8}, {0x2, 0x6}, {0x1, 0x1}, {0x1, 0x3}, {0x2, 0x9}, {0x0, 0x4}, {0x7, 0x3}, {0x0, 0x9}, {0x0, 0x2}, {0x1, 0x4}, {0x6, 0x6}, {0x1, 0x5}, {0x0, 0x6}, {0x0, 0x7}, {0x1, 0x5}, {0x6, 0x8}, {0x6, 0x7}, {0x2, 0x4}, {0x3, 0x1}, {0x5, 0x4}, {0x0, 0x2}, {0x5, 0x8}, {0x6, 0x2}, {0x5, 0x9}, {0x2, 0x8}, {0x7, 0x3}, {0x0, 0x3}, {0x7, 0x1}, {0x7, 0x8}, {0x2, 0x6}, {0x0, 0x9}, {0x3, 0xa}, {0x4}, {0x1, 0x3}, {0x3, 0x1}, {0x7}, {0x1, 0x3}, {0x5, 0x6}, {0x0, 0x2}, {0x2}, {0x6, 0x4}, {0x4, 0x2}, {0x0, 0x3}, {0x1, 0x7}, {0x3}, {0x3, 0x3}, {0x5, 0x7}, {0x1, 0x9}, {0x2, 0x5}, {0x2, 0x4}, {0x7, 0x1}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6, 0xff3e, 0x2, 0x401, 0x1, 0x0, 0x868]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x24, 0x6c, 0x48, 0x4, 0x36, 0x12, 0x18, 0x36, 0x4, 0xc, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x6, 0x81, 0x5, 0x1000, 0x56a7, 0x3, 0x2b]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x5, 0x8}, {0x6, 0x9}, {0x0, 0x5}, {0x4, 0x8}, {0x3, 0xa}, {0x3, 0x5}, {0x6, 0x4}, {0x7, 0x3}, {}, {0x6, 0x3}, {0x6, 0x5}, {0x5, 0x6}, {0x2, 0x4}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x8000, 0x984f, 0x9, 0x3, 0x2, 0x9, 0x2]}}]}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4001}, 0x4) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) socketpair(0x28, 0x209b0ca5c191ef56, 0xfffff778, &(0x7f0000000000)) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1c8, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x94, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x12, 0x16, 0x9, 0x6, 0x16, 0x16, 0x12, 0x5, 0x18, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x2, 0x0, 0x1, 0x1, 0x8001, 0x7f]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6, 0xb, 0x30, 0x6, 0x0, 0x16, 0x1b, 0xc, 0x3, 0x6c, 0x1b, 0x12, 0x5, 0x18, 0x3, 0x30, 0x6d, 0x2, 0x24, 0x0, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x22, 0x101, 0x7, 0x40, 0x8, 0x8, 0xa3, 0x8000]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x2, 0x1b, 0x24, 0x1b, 0x1, 0x5, 0xc, 0x24, 0x6e, 0x1b, 0x18, 0x6, 0x6c, 0x1b, 0x6, 0x18, 0x24, 0x6c, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}]}, @NL80211_ATTR_TX_RATES={0x120, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf723, 0x8, 0x15e, 0x3, 0x6, 0xfff, 0xf2f5, 0x1]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x6, 0xa}, {0x4, 0x7}, {0x0, 0x9}, {0x7, 0x9}, {0x5, 0x8}, {0x4, 0x8}, {0x6, 0x6}, {0x3, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x2, 0x6}, {0x6, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x7, 0xa}, {0x1, 0x8}, {0x2, 0x7}, {0x5, 0x5}, {0x0, 0x3}, {0x6, 0x9}, {0x1, 0x9}, {0x0, 0x5}, {0x3}, {0x1, 0xa}, {0x0, 0x2}, {0x2, 0x9}, {0x0, 0x8}, {0x1, 0x8}, {0x3, 0x8}, {0x2, 0x6}, {0x1, 0x1}, {0x1, 0x3}, {0x2, 0x9}, {0x0, 0x4}, {0x7, 0x3}, {0x0, 0x9}, {0x0, 0x2}, {0x1, 0x4}, {0x6, 0x6}, {0x1, 0x5}, {0x0, 0x6}, {0x0, 0x7}, {0x1, 0x5}, {0x6, 0x8}, {0x6, 0x7}, {0x2, 0x4}, {0x3, 0x1}, {0x5, 0x4}, {0x0, 0x2}, {0x5, 0x8}, {0x6, 0x2}, {0x5, 0x9}, {0x2, 0x8}, {0x7, 0x3}, {0x0, 0x3}, {0x7, 0x1}, {0x7, 0x8}, {0x2, 0x6}, {0x0, 0x9}, {0x3, 0xa}, {0x4}, {0x1, 0x3}, {0x3, 0x1}, {0x7}, {0x1, 0x3}, {0x5, 0x6}, {0x0, 0x2}, {0x2}, {0x6, 0x4}, {0x4, 0x2}, {0x0, 0x3}, {0x1, 0x7}, {0x3}, {0x3, 0x3}, {0x5, 0x7}, {0x1, 0x9}, {0x2, 0x5}, {0x2, 0x4}, {0x7, 0x1}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6, 0xff3e, 0x2, 0x401, 0x1, 0x0, 0x868]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x24, 0x6c, 0x48, 0x4, 0x36, 0x12, 0x18, 0x36, 0x4, 0xc, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x6, 0x81, 0x5, 0x1000, 0x56a7, 0x3, 0x2b]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x5, 0x8}, {0x6, 0x9}, {0x0, 0x5}, {0x4, 0x8}, {0x3, 0xa}, {0x3, 0x5}, {0x6, 0x4}, {0x7, 0x3}, {}, {0x6, 0x3}, {0x6, 0x5}, {0x5, 0x6}, {0x2, 0x4}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x8000, 0x984f, 0x9, 0x3, 0x2, 0x9, 0x2]}}]}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4001}, 0x4) (async) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)) (async) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x4) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) (async) 13:07:17 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x80000001, 0x4, 0x4000}) 13:07:17 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) socketpair(0x28, 0x209b0ca5c191ef56, 0xfffff778, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1c8, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x94, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x12, 0x16, 0x9, 0x6, 0x16, 0x16, 0x12, 0x5, 0x18, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x2, 0x0, 0x1, 0x1, 0x8001, 0x7f]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6, 0xb, 0x30, 0x6, 0x0, 0x16, 0x1b, 0xc, 0x3, 0x6c, 0x1b, 0x12, 0x5, 0x18, 0x3, 0x30, 0x6d, 0x2, 0x24, 0x0, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x22, 0x101, 0x7, 0x40, 0x8, 0x8, 0xa3, 0x8000]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x2, 0x1b, 0x24, 0x1b, 0x1, 0x5, 0xc, 0x24, 0x6e, 0x1b, 0x18, 0x6, 0x6c, 0x1b, 0x6, 0x18, 0x24, 0x6c, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}]}, @NL80211_ATTR_TX_RATES={0x120, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf723, 0x8, 0x15e, 0x3, 0x6, 0xfff, 0xf2f5, 0x1]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x6, 0xa}, {0x4, 0x7}, {0x0, 0x9}, {0x7, 0x9}, {0x5, 0x8}, {0x4, 0x8}, {0x6, 0x6}, {0x3, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x2, 0x6}, {0x6, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x7, 0xa}, {0x1, 0x8}, {0x2, 0x7}, {0x5, 0x5}, {0x0, 0x3}, {0x6, 0x9}, {0x1, 0x9}, {0x0, 0x5}, {0x3}, {0x1, 0xa}, {0x0, 0x2}, {0x2, 0x9}, {0x0, 0x8}, {0x1, 0x8}, {0x3, 0x8}, {0x2, 0x6}, {0x1, 0x1}, {0x1, 0x3}, {0x2, 0x9}, {0x0, 0x4}, {0x7, 0x3}, {0x0, 0x9}, {0x0, 0x2}, {0x1, 0x4}, {0x6, 0x6}, {0x1, 0x5}, {0x0, 0x6}, {0x0, 0x7}, {0x1, 0x5}, {0x6, 0x8}, {0x6, 0x7}, {0x2, 0x4}, {0x3, 0x1}, {0x5, 0x4}, {0x0, 0x2}, {0x5, 0x8}, {0x6, 0x2}, {0x5, 0x9}, {0x2, 0x8}, {0x7, 0x3}, {0x0, 0x3}, {0x7, 0x1}, {0x7, 0x8}, {0x2, 0x6}, {0x0, 0x9}, {0x3, 0xa}, {0x4}, {0x1, 0x3}, {0x3, 0x1}, {0x7}, {0x1, 0x3}, {0x5, 0x6}, {0x0, 0x2}, {0x2}, {0x6, 0x4}, {0x4, 0x2}, {0x0, 0x3}, {0x1, 0x7}, {0x3}, {0x3, 0x3}, {0x5, 0x7}, {0x1, 0x9}, {0x2, 0x5}, {0x2, 0x4}, {0x7, 0x1}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6, 0xff3e, 0x2, 0x401, 0x1, 0x0, 0x868]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x24, 0x6c, 0x48, 0x4, 0x36, 0x12, 0x18, 0x36, 0x4, 0xc, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x6, 0x81, 0x5, 0x1000, 0x56a7, 0x3, 0x2b]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x5, 0x8}, {0x6, 0x9}, {0x0, 0x5}, {0x4, 0x8}, {0x3, 0xa}, {0x3, 0x5}, {0x6, 0x4}, {0x7, 0x3}, {}, {0x6, 0x3}, {0x6, 0x5}, {0x5, 0x6}, {0x2, 0x4}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x8000, 0x984f, 0x9, 0x3, 0x2, 0x9, 0x2]}}]}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4001}, 0x4) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) [ 705.416594] oom_reaper: reaped process 12427 (syz-executor.0), now anon-rss:0kB, file-rss:14332kB, shmem-rss:16kB [ 705.461739] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 705.477713] in:imklog cpuset=/ mems_allowed=0-1 [ 705.482451] CPU: 1 PID: 12414 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 705.489900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 705.499287] Call Trace: [ 705.501885] dump_stack+0x1fc/0x2ef [ 705.505548] dump_header+0x15d/0xc3f [ 705.509271] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 705.514380] ? ___ratelimit+0x319/0x590 [ 705.518681] oom_kill_process.cold+0x10/0x692 [ 705.523189] ? check_preemption_disabled+0x41/0x280 [ 705.528220] ? has_intersects_mems_allowed+0x1d6/0x290 [ 705.533595] out_of_memory+0x1072/0x1390 [ 705.538110] ? oom_killer_disable+0x270/0x270 [ 705.542619] ? mutex_trylock+0x15f/0x1a0 [ 705.546721] __alloc_pages_nodemask+0x23a2/0x2890 [ 705.551601] ? find_get_entry+0x4cd/0x8a0 [ 705.556478] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 705.561421] alloc_pages_current+0x193/0x2a0 [ 705.565844] filemap_fault+0x146e/0x2180 [ 705.569923] ext4_filemap_fault+0x84/0xb0 [ 705.573327] syz-executor.0: vmalloc: allocation failure, allocated 1747664896 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 705.574088] __do_fault+0x10b/0x4b0 [ 705.588129] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 705.591660] __handle_mm_fault+0x273b/0x41c0 [ 705.591678] ? vm_insert_page+0x9c0/0x9c0 [ 705.591693] ? lock_downgrade+0x720/0x720 [ 705.591718] ? check_preemption_disabled+0x41/0x280 [ 705.591736] handle_mm_fault+0x436/0xb10 [ 705.618539] __do_page_fault+0x68e/0xd60 [ 705.622598] ? trace_hardirqs_off_caller+0x6e/0x210 [ 705.627619] ? spurious_fault+0x840/0x840 [ 705.631770] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 705.636612] ? page_fault+0x8/0x30 [ 705.640146] page_fault+0x1e/0x30 [ 705.643600] RIP: 0033:0x7f3a1cd4822d [ 705.647305] Code: Bad RIP value. [ 705.650662] RSP: 002b:00007f3a1a6e4580 EFLAGS: 00010293 [ 705.656015] RAX: 0000000000000078 RBX: 0000000000000000 RCX: 00007f3a1cd4822d [ 705.663270] RDX: 0000000000001fa0 RSI: 00007f3a1a6e4da0 RDI: 0000000000000004 [ 705.670533] RBP: 000055b75d4a49d0 R08: 0000000000000000 R09: 0000000004000001 [ 705.677795] R10: 0000000000000001 R11: 0000000000000293 R12: 00007f3a1a6e4da0 [ 705.685054] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f3a1a6e4e03 [ 705.692765] Mem-Info: [ 705.695187] active_anon:20664 inactive_anon:10945 isolated_anon:0 [ 705.695187] active_file:21 inactive_file:28 isolated_file:0 [ 705.695187] unevictable:0 dirty:5 writeback:0 unstable:0 [ 705.695187] slab_reclaimable:15807 slab_unreclaimable:119913 [ 705.695187] mapped:22355 shmem:11554 pagetables:611 bounce:0 [ 705.695187] free:13928 free_pcp:925 free_cma:0 [ 705.713734] CPU: 0 PID: 12427 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 705.729343] Node 0 active_anon:80904kB inactive_anon:19328kB active_file:100kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87884kB dirty:4kB writeback:0kB shmem:21636kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 36864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 705.736315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 705.736321] Call Trace: [ 705.736342] dump_stack+0x1fc/0x2ef [ 705.736362] warn_alloc.cold+0x7b/0x18f [ 705.764058] Node 1 active_anon:1752kB inactive_anon:24452kB active_file:0kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1536kB dirty:16kB writeback:0kB shmem:24580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 705.773364] ? zone_watermark_ok_safe+0x260/0x260 [ 705.773378] ? rcu_nmi_exit+0xb3/0x180 [ 705.773414] __vmalloc_area_node+0x4fd/0x780 [ 705.775957] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 705.779578] ? __vmalloc_node_range+0x180/0x180 [ 705.783543] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 705.810574] ? _raw_spin_unlock+0x29/0x40 [ 705.810588] ? __get_vm_area_node+0x2e2/0x3a0 [ 705.810608] __vmalloc_node_range+0xed/0x180 [ 705.815423] Node 0 DMA32 free:18228kB min:35996kB low:44992kB high:53988kB active_anon:81004kB inactive_anon:19324kB active_file:100kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:2228kB bounce:0kB free_pcp:2072kB local_pcp:1500kB free_cma:0kB [ 705.819306] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 705.823707] lowmem_reserve[]: 0 0 1 1 1 [ 705.849782] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 705.849796] vmalloc_user+0x70/0xe0 [ 705.849812] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 705.854453] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 705.859461] vb2_vmalloc_alloc+0xb3/0x2f0 [ 705.863601] lowmem_reserve[]: 0 0 0 0 0 [ 705.868068] __vb2_queue_alloc+0x472/0xe60 [ 705.872470] Node 1 Normal free:26876kB min:53876kB low:67344kB high:80812kB active_anon:1752kB inactive_anon:24452kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:216kB bounce:0kB free_pcp:1756kB local_pcp:24kB free_cma:0kB [ 705.901636] vb2_core_create_bufs+0x273/0x7e0 [ 705.901652] ? __vb2_queue_free+0x870/0x870 [ 705.905950] lowmem_reserve[]: 0 0 0 0 0 [ 705.910009] ? __video_do_ioctl+0x632/0xcd0 [ 705.910035] ? __mutex_lock+0x368/0x1190 [ 705.915369] Node 0 DMA: 1*4kB (M) 1*8kB (M) 2*16kB (UM) 2*32kB (UM) 2*64kB (UM) 1*128kB (M) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 10860kB [ 705.918989] vb2_create_bufs+0x332/0x620 [ 705.923301] Node 0 DMA32: 1973*4kB (UME) 818*8kB (UME) 149*16kB (ME) 22*32kB (ME) 12*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18292kB [ 705.949124] ? mark_held_locks+0xf0/0xf0 [ 705.949136] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 705.949156] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 705.953296] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 705.957254] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 705.961482] Node 1 Normal: 234*4kB (UM) 169*8kB (UME) 115*16kB (M) 59*32kB (UME) 25*64kB (UM) 14*128kB (UM) 3*256kB (UM) 1*512kB (U) 2*1024kB (UM) 1*2048kB (M) 3*4096kB (U) = 27072kB [ 705.990183] v4l_create_bufs+0xb2/0x160 [ 705.990204] __video_do_ioctl+0x49a/0xcd0 [ 705.994677] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 705.998989] ? v4l_querycap+0x340/0x340 [ 706.002972] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 706.007258] ? __might_fault+0x192/0x1d0 [ 706.011311] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 706.025842] ? v4l_querycap+0x340/0x340 [ 706.025863] video_usercopy+0x13f/0xfa0 [ 706.029916] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 706.043938] ? v4l_enumstd+0x60/0x60 [ 706.043956] ? do_futex+0x171/0x1880 [ 706.047990] 11613 total pagecache pages [ 706.053078] ? mark_held_locks+0xf0/0xf0 [ 706.053101] ? debug_check_no_obj_freed+0x201/0x490 [ 706.058179] 0 pages in swap cache [ 706.069274] ? video_usercopy+0xfa0/0xfa0 [ 706.069283] v4l2_ioctl+0x147/0x1a0 [ 706.069300] ? video_devdata+0xa0/0xa0 [ 706.074483] Swap cache stats: add 0, delete 0, find 0/0 [ 706.090925] do_vfs_ioctl+0xcdb/0x12e0 [ 706.090940] ? lock_downgrade+0x720/0x720 [ 706.090962] ? check_preemption_disabled+0x41/0x280 [ 706.094903] Free swap = 0kB [ 706.099051] ? ioctl_preallocate+0x200/0x200 [ 706.107879] Total swap = 0kB [ 706.111825] ? __fget+0x356/0x510 [ 706.111843] ? do_dup2+0x450/0x450 [ 706.120415] 2097051 pages RAM [ 706.124528] ? __se_sys_futex+0x298/0x3b0 [ 706.133353] 0 pages HighMem/MovableOnly [ 706.137317] ksys_ioctl+0x9b/0xc0 [ 706.141277] 369649 pages reserved [ 706.149833] __x64_sys_ioctl+0x6f/0xb0 [ 706.149846] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 706.149862] do_syscall_64+0xf9/0x620 [ 706.153549] 0 pages cma reserved [ 706.157251] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 706.161215] Unreclaimable slab info: [ 706.165245] RIP: 0033:0x7f68c24140f9 [ 706.170255] Name Used Total [ 706.173683] Code: Bad RIP value. [ 706.177810] pid_2 89KB 152KB [ 706.181413] RSP: 002b:00007f68c0986168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 706.181427] RAX: ffffffffffffffda RBX: 00007f68c2533f80 RCX: 00007f68c24140f9 [ 706.181434] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000006 [ 706.181445] RBP: 00007f68c246fae9 R08: 0000000000000000 R09: 0000000000000000 [ 706.185382] batadv_tl_cache 4KB 12KB [ 706.190663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 706.190671] R13: 00007fff6155d44f R14: 00007f68c0986300 R15: 0000000000022000 [ 706.216730] Mem-Info: [ 706.218229] TIPC 10KB 15KB [ 706.229286] active_anon:20663 inactive_anon:10945 isolated_anon:0 [ 706.229286] active_file:13 inactive_file:12 isolated_file:0 [ 706.229286] unevictable:0 dirty:0 writeback:0 unstable:0 [ 706.229286] slab_reclaimable:15777 slab_unreclaimable:119934 [ 706.229286] mapped:22351 shmem:11554 pagetables:610 bounce:0 [ 706.229286] free:14058 free_pcp:927 free_cma:0 [ 706.232829] SCTPv6 14KB 18KB [ 706.232850] DCCPv6 17KB 22KB [ 706.232862] DCCP 16KB 21KB [ 706.232900] RXRPC 11KB 13KB [ 706.232913] rxrpc_call_jar 78KB 94KB [ 706.250474] Node 0 active_anon:80892kB inactive_anon:19328kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21636kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 34816kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 706.252087] bridge_fdb_cache 9KB 15KB [ 706.255422] Node 1 active_anon:1760kB inactive_anon:24452kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1536kB dirty:0kB writeback:0kB shmem:24580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 706.260614] fib6_nodes 157KB 160KB [ 706.260625] ip6_dst_cache 70KB 326KB [ 706.260638] RAWv6 70KB 74KB [ 706.260650] UDPv6 33KB 37KB [ 706.260662] TCPv6 30KB 36KB [ 706.260681] nf_conntrack 7KB 18KB [ 706.274749] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 706.277078] t10_alua_lu_gp_cache 0KB 3KB [ 706.282443] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 706.294480] sd_ext_cdb 0KB 7KB [ 706.306360] Node 0 DMA32 free:18292kB min:35996kB low:44992kB high:53988kB active_anon:80892kB inactive_anon:19324kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:2224kB bounce:0kB free_pcp:1952kB local_pcp:452kB free_cma:0kB [ 706.312020] scsi_sense_cache 1056KB 1060KB [ 706.312030] virtio_scsi_cmd 16KB 16KB [ 706.312043] sgpool-128 8KB 8KB [ 706.312052] sgpool-64 4KB 12KB [ 706.312060] sgpool-32 2KB 15KB [ 706.312067] sgpool-16 1KB 7KB [ 706.312075] sgpool-8 0KB 7KB [ 706.312091] mqueue_inode_cache 10KB 22KB [ 706.312106] bio_post_read_ctx 14KB 15KB [ 706.312178] bio-2 14KB 15KB [ 706.312187] jfs_mp 7KB 7KB [ 706.312226] cifs_small_rq 15KB 16KB [ 706.312235] cifs_request 67KB 67KB [ 706.312245] cifs_mpx_ids 0KB 7KB [ 706.312274] nfs_commit_data 3KB 14KB [ 706.312284] nfs_write_data 34KB 44KB [ 706.312326] ext4_system_zone 1KB 7KB [ 706.312357] bio-1 1KB 7KB [ 706.312374] pid_namespace 2KB 7KB [ 706.312395] rpc_buffers 17KB 25KB [ 706.312405] rpc_tasks 2KB 7KB [ 706.312414] UNIX 213KB 217KB [ 706.312430] tcp_bind_bucket 1KB 4KB [ 706.312448] ip_fib_trie 23KB 27KB [ 706.312457] ip_fib_alias 112KB 118KB [ 706.312467] ip_dst_cache 10KB 48KB [ 706.312478] RAW 42KB 52KB [ 706.312488] UDP 42KB 47KB [ 706.312501] TCP 14KB 22KB [ 706.312512] hugetlbfs_inode_cache 3KB 15KB [ 706.312522] fscache_cookie_jar 1KB 11KB [ 706.312532] eventpoll_pwq 27KB 47KB [ 706.312541] eventpoll_epi 49KB 66KB [ 706.312551] inotify_inode_mark 29KB 55KB [ 706.312563] request_queue 199KB 199KB [ 706.312572] blkdev_requests 1KB 3KB [ 706.312581] blkdev_ioc 22KB 27KB [ 706.312591] bio-0 1128KB 1132KB [ 706.312601] biovec-max 1575KB 1575KB [ 706.312613] biovec-64 1035KB 1063KB [ 706.312622] biovec-16 88KB 93KB [ 706.312632] bio_integrity_payload 1KB 8KB [ 706.312641] khugepaged_mm_slot 13KB 34KB [ 706.312660] uid_cache 0KB 4KB [ 706.312669] dmaengine-unmap-2 0KB 3KB [ 706.312681] skbuff_fclone_cache 173KB 285KB [ 706.312691] skbuff_head_cache 6283KB 6285KB [ 706.312700] configfs_dir_cache 3KB 11KB [ 706.312710] file_lock_cache 106KB 198KB [ 706.312720] file_lock_ctx 9KB 11KB [ 706.312730] fsnotify_mark_connector 12KB 31KB [ 706.312739] net_namespace 52KB 52KB [ 706.312749] shmem_inode_cache 8219KB 8462KB [ 706.312758] task_delay_info 199KB 407KB [ 706.312768] taskstats 94KB 206KB [ 706.312777] proc_dir_entry 694KB 697KB [ 706.312787] pde_opener 8KB 58KB [ 706.312796] seq_file 282KB 539KB [ 706.312805] sigqueue 48KB 55KB [ 706.312816] kernfs_node_cache 18234KB 18250KB [ 706.312826] mnt_cache 173KB 188KB [ 706.312835] filp 6637KB 7635KB [ 706.312845] names_cache 144495KB 144551KB [ 706.312855] iint_cache 32KB 71KB [ 706.312864] key_jar 4KB 11KB [ 706.312873] uts_namespace 2KB 7KB [ 706.312882] nsproxy 1KB 7KB [ 706.312892] vm_area_struct 3525KB 5154KB [ 706.312902] mm_struct 529KB 1014KB [ 706.312911] fs_cache 105KB 364KB [ 706.312920] files_cache 373KB 765KB [ 706.312930] signal_cache 839KB 1746KB [ 706.312939] sighand_cache 527KB 589KB [ 706.312949] task_struct 6691KB 6735KB [ 706.312959] cred_jar 1478KB 2096KB [ 706.312968] anon_vma_chain 1132KB 1803KB [ 706.312978] anon_vma 147KB 269KB [ 706.312988] pid 50KB 264KB [ 706.312997] Acpi-Operand 156KB 202KB [ 706.313012] Acpi-ParseExt 8KB 11KB [ 706.313021] Acpi-Parse 41KB 47KB [ 706.313031] Acpi-State 52KB 63KB [ 706.313041] Acpi-Namespace 21KB 27KB [ 706.313052] numa_policy 0KB 3KB [ 706.313061] debug_objects_cache 1173KB 1619KB [ 706.313071] trace_event_file 297KB 298KB [ 706.313081] ftrace_event_field 398KB 401KB [ 706.313090] pool_workqueue 121KB 124KB [ 706.313102] page->ptl 600KB 1047KB [ 706.313148] kmalloc-2097152 2050KB 2050KB [ 706.313159] kmalloc-524288 2056KB 2056KB [ 706.313169] kmalloc-262144 1290KB 1290KB [ 706.313178] kmalloc-131072 650KB 650KB [ 706.313187] kmalloc-65536 1848KB 1914KB [ 706.313196] kmalloc-32768 1650KB 1650KB [ 706.313205] kmalloc-16384 1039KB 1039KB [ 706.313214] kmalloc-8192 3960KB 4001KB [ 706.313223] kmalloc-4096 20170KB 20230KB [ 706.313233] kmalloc-2048 12922KB 13821KB [ 706.313242] kmalloc-1024 7201KB 8008KB [ 706.313251] kmalloc-512 12506KB 12506KB [ 706.313260] kmalloc-256 5045KB 5478KB [ 706.313270] kmalloc-128 964KB 1488KB [ 706.313279] kmalloc-96 3370KB 4020KB [ 706.313288] kmalloc-64 2853KB 4244KB [ 706.313297] kmalloc-32 1896KB 2445KB [ 706.313307] kmalloc-192 1482KB 2288KB [ 706.313317] kmem_cache 177KB 183KB [ 706.313328] Out of memory (oom_kill_allocating_task): Kill process 12414 (in:imklog) score 0 or sacrifice child [ 706.313810] Killed process 12412 (rsyslogd) total-vm:254332kB, anon-rss:524kB, file-rss:0kB, shmem-rss:0kB [ 706.327796] lowmem_reserve[]: 0 0 1 1 1 [ 706.340624] oom_reaper: reaped process 12412 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 706.352398] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 706.417723] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 706.438792] lowmem_reserve[]: 0 0 0 0 0 [ 706.471387] oom_reaper: reaped process 12418 (syz-executor.1), now anon-rss:0kB, file-rss:13640kB, shmem-rss:0kB [ 706.480041] Node 1 Normal free:29872kB min:53876kB low:67344kB high:80812kB active_anon:960kB inactive_anon:24452kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:32kB pagetables:68kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 706.505542] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 706.535033] lowmem_reserve[]: 0 0 0 0 0 [ 706.544683] CPU: 1 PID: 27237 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 706.573453] Node 0 DMA: 1*4kB (M) 1*8kB (M) 2*16kB (UM) 2*32kB (UM) 2*64kB (UM) 1*128kB (M) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 10860kB [ 706.576966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 706.582411] Node 0 DMA32: 2217*4kB (ME) 823*8kB (ME) 176*16kB (ME) 26*32kB (ME) 13*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 2*2048kB (M) 0*4096kB = 24028kB [ 706.587659] Call Trace: [ 706.599930] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 706.603723] dump_stack+0x1fc/0x2ef [ 706.609145] Node 1 Normal: 147*4kB (UM) 110*8kB (UME) 94*16kB (UM) 77*32kB (UME) 39*64kB (UM) 20*128kB (UM) 4*256kB (M) 2*512kB (M) 1*1024kB (M) 2*2048kB (UM) 3*4096kB (U) = 29948kB [ 706.614518] dump_header+0x15d/0xc3f [ 706.614534] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 706.614547] ? ___ratelimit+0x319/0x590 [ 706.614563] oom_kill_process.cold+0x10/0x692 [ 706.614583] ? check_preemption_disabled+0x41/0x280 [ 706.628757] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 706.631098] ? has_intersects_mems_allowed+0x1d6/0x290 [ 706.631114] out_of_memory+0x1072/0x1390 [ 706.631132] ? oom_killer_disable+0x270/0x270 [ 706.631149] ? mutex_trylock+0x15f/0x1a0 [ 706.636497] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 706.641848] __alloc_pages_nodemask+0x23a2/0x2890 [ 706.641868] ? find_get_entry+0x4cd/0x8a0 [ 706.641891] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 706.641934] alloc_pages_current+0x193/0x2a0 [ 706.654077] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 706.657977] filemap_fault+0x146e/0x2180 [ 706.663514] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 706.668708] ext4_filemap_fault+0x84/0xb0 [ 706.680924] 11579 total pagecache pages [ 706.684888] __do_fault+0x10b/0x4b0 [ 706.690289] 0 pages in swap cache [ 706.695594] __handle_mm_fault+0x273b/0x41c0 [ 706.707763] Swap cache stats: add 0, delete 0, find 0/0 [ 706.711664] ? vm_insert_page+0x9c0/0x9c0 [ 706.711675] ? __fget+0x356/0x510 [ 706.711700] ? check_preemption_disabled+0x41/0x280 [ 706.711718] handle_mm_fault+0x436/0xb10 [ 706.717072] Free swap = 0kB [ 706.722434] __do_page_fault+0x68e/0xd60 [ 706.722455] ? trace_hardirqs_off_caller+0x6e/0x210 [ 706.722468] ? spurious_fault+0x840/0x840 [ 706.722482] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 706.722497] ? page_fault+0x8/0x30 [ 706.722509] page_fault+0x1e/0x30 [ 706.722519] RIP: 0033:0x403ace [ 706.722533] Code: Bad RIP value. [ 706.722540] RSP: 002b:000000c0004a1778 EFLAGS: 00010246 [ 706.722550] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000403ace [ 706.722557] RDX: 0000000000000080 RSI: 000000c0004a1840 RDI: 0000000000000004 [ 706.722563] RBP: 000000c0004a17c0 R08: 0000000000000000 R09: 0000000000000000 [ 706.722569] R10: 000000000000022f R11: 0000000000000246 R12: 000000c0004a1850 [ 706.722577] R13: 0000000000000000 R14: 000000c0006d1a00 R15: 000000a6485ba88e [ 706.736078] Mem-Info: [ 706.754006] Total swap = 0kB [ 706.764005] active_anon:19429 inactive_anon:10945 isolated_anon:0 [ 706.764005] active_file:13 inactive_file:12 isolated_file:0 [ 706.764005] unevictable:0 dirty:0 writeback:0 unstable:0 [ 706.764005] slab_reclaimable:15777 slab_unreclaimable:119959 [ 706.764005] mapped:22351 shmem:11554 pagetables:573 bounce:0 [ 706.764005] free:16154 free_pcp:66 free_cma:0 [ 706.779619] 2097051 pages RAM [ 706.795941] Node 0 active_anon:76756kB inactive_anon:19328kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21636kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 34816kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 706.808000] 0 pages HighMem/MovableOnly [ 706.823904] Node 1 active_anon:960kB inactive_anon:24452kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1536kB dirty:0kB writeback:0kB shmem:24580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 706.823911] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 706.823941] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 706.823961] Node 0 DMA32 free:23876kB min:35996kB low:44992kB high:53988kB active_anon:76756kB inactive_anon:19324kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:2224kB bounce:0kB free_pcp:248kB local_pcp:80kB free_cma:0kB [ 706.823991] lowmem_reserve[]: 0 0 1 1 1 [ 706.824009] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 706.824038] lowmem_reserve[]: 0 0 0 0 0 [ 706.824057] Node 1 Normal free:29872kB min:53876kB low:67344kB high:80812kB active_anon:960kB inactive_anon:24452kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:32kB pagetables:68kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 706.824086] lowmem_reserve[]: 0 0 0 0 0 [ 706.824104] Node 0 DMA: 1*4kB (M) 1*8kB (M) 2*16kB (UM) 2*32kB (UM) 2*64kB (UM) 1*128kB (M) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 10860kB [ 706.824179] Node 0 DMA32: 2217*4kB (ME) 823*8kB (ME) 176*16kB (ME) 26*32kB (ME) 13*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 2*2048kB (M) 0*4096kB = 24028kB [ 706.824244] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 706.824296] Node 1 Normal: 147*4kB (UM) 110*8kB (UME) 94*16kB (UM) 77*32kB (UME) 39*64kB (UM) 20*128kB (UM) 4*256kB (M) 2*512kB (M) 1*1024kB (M) 2*2048kB (UM) 3*4096kB (U) = 29948kB [ 706.824379] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 706.824389] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 706.824399] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 706.824415] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 706.824421] 11579 total pagecache pages [ 706.824434] 0 pages in swap cache [ 706.824441] Swap cache stats: add 0, delete 0, find 0/0 [ 706.824446] Free swap = 0kB [ 706.824451] Total swap = 0kB [ 706.824459] 2097051 pages RAM [ 706.824463] 0 pages HighMem/MovableOnly [ 706.824468] 369649 pages reserved [ 706.824473] 0 pages cma reserved [ 706.824479] Unreclaimable slab info: [ 706.824484] Name Used Total [ 706.824495] pid_2 89KB 152KB [ 706.824574] batadv_tl_cache 4KB 12KB [ 706.824601] TIPC 10KB 15KB [ 706.824622] SCTPv6 14KB 18KB [ 706.824641] DCCPv6 17KB 22KB [ 706.824654] DCCP 16KB 21KB [ 706.824695] RXRPC 11KB 13KB [ 706.824705] rxrpc_call_jar 78KB 94KB [ 706.824718] bridge_fdb_cache 9KB 15KB [ 706.824733] fib6_nodes 157KB 160KB [ 706.824743] ip6_dst_cache 70KB 326KB [ 706.824756] RAWv6 70KB 74KB [ 706.824768] UDPv6 33KB 37KB [ 706.824781] TCPv6 30KB 36KB [ 706.824801] nf_conntrack 7KB 18KB [ 706.824864] t10_alua_lu_gp_cache 0KB 3KB [ 706.824878] sd_ext_cdb 0KB 7KB [ 706.837320] 369649 pages reserved [ 706.846347] scsi_sense_cache 1056KB 1060KB [ 706.847115] 0 pages cma reserved [ 706.862648] virtio_scsi_cmd 16KB 16KB [ 708.045760] sgpool-128 8KB 8KB [ 708.051171] sgpool-64 4KB 12KB [ 708.056549] sgpool-32 2KB 15KB [ 708.065275] sgpool-16 1KB 7KB [ 708.070691] sgpool-8 0KB 7KB [ 708.076060] mqueue_inode_cache 10KB 22KB [ 708.085071] bio_post_read_ctx 14KB 15KB [ 708.090542] bio-2 14KB 15KB [ 708.095905] jfs_mp 7KB 7KB [ 708.104968] cifs_small_rq 15KB 16KB [ 708.110404] cifs_request 67KB 67KB [ 708.115768] cifs_mpx_ids 0KB 7KB [ 708.124836] nfs_commit_data 3KB 14KB [ 708.130245] nfs_write_data 34KB 44KB [ 708.135639] ext4_system_zone 1KB 7KB [ 708.144632] bio-1 1KB 7KB [ 708.150047] pid_namespace 2KB 7KB [ 708.155418] rpc_buffers 17KB 25KB [ 708.164401] rpc_tasks 2KB 7KB [ 708.169811] UNIX 213KB 217KB [ 708.175178] tcp_bind_bucket 1KB 4KB [ 708.184293] ip_fib_trie 23KB 27KB [ 708.189696] ip_fib_alias 112KB 118KB [ 708.195083] ip_dst_cache 10KB 48KB [ 708.204161] RAW 42KB 52KB [ 708.209553] UDP 42KB 47KB [ 708.214977] TCP 14KB 22KB [ 708.224001] hugetlbfs_inode_cache 3KB 15KB [ 708.229755] fscache_cookie_jar 1KB 11KB [ 708.235212] eventpoll_pwq 27KB 47KB [ 708.244266] eventpoll_epi 49KB 66KB [ 708.249713] inotify_inode_mark 29KB 55KB [ 708.255169] request_queue 199KB 199KB [ 708.264652] blkdev_requests 1KB 3KB [ 708.270081] blkdev_ioc 22KB 27KB [ 708.275443] bio-0 1128KB 1132KB [ 708.284395] biovec-max 1575KB 1575KB [ 708.289814] biovec-64 1035KB 1063KB [ 708.295174] biovec-16 88KB 93KB [ 708.304164] bio_integrity_payload 1KB 8KB [ 708.309914] khugepaged_mm_slot 13KB 34KB [ 708.315369] uid_cache 0KB 4KB [ 708.327963] dmaengine-unmap-2 0KB 3KB [ 708.348475] skbuff_fclone_cache 173KB 285KB [ 708.354191] skbuff_head_cache 6433KB 6435KB [ 708.376745] configfs_dir_cache 3KB 11KB [ 708.383874] file_lock_cache 106KB 198KB [ 708.389373] file_lock_ctx 9KB 11KB [ 708.401072] fsnotify_mark_connector 12KB 31KB [ 708.406984] net_namespace 52KB 52KB [ 708.412408] shmem_inode_cache 8219KB 8462KB [ 708.418356] task_delay_info 199KB 407KB [ 708.423967] taskstats 94KB 206KB [ 708.429454] proc_dir_entry 694KB 697KB [ 708.434874] pde_opener 8KB 58KB [ 708.440282] seq_file 282KB 539KB [ 708.445661] sigqueue 48KB 55KB [ 708.451651] kernfs_node_cache 18234KB 18250KB [ 708.457067] mnt_cache 173KB 188KB [ 708.462470] filp 6637KB 7635KB [ 708.467839] names_cache 143849KB 143871KB [ 708.474527] iint_cache 37KB 71KB [ 708.483438] key_jar 4KB 11KB [ 708.494006] uts_namespace 2KB 7KB [ 708.503317] nsproxy 1KB 7KB [ 708.509146] vm_area_struct 3525KB 5154KB [ 708.518680] mm_struct 529KB 1014KB [ 708.527781] fs_cache 105KB 364KB [ 708.538918] files_cache 373KB 765KB [ 708.559694] signal_cache 839KB 1746KB [ 708.565111] sighand_cache 527KB 589KB [ 708.590100] task_struct 6666KB 6722KB [ 708.595498] cred_jar 1508KB 2096KB [ 708.609660] anon_vma_chain 1132KB 1803KB [ 708.615088] anon_vma 147KB 269KB [ 708.629663] pid 50KB 264KB [ 708.635112] Acpi-Operand 156KB 202KB [ 708.640969] Acpi-ParseExt 8KB 11KB [ 708.659689] Acpi-Parse 41KB 47KB [ 708.665128] Acpi-State 52KB 63KB [ 708.670555] Acpi-Namespace 21KB 27KB [ 708.675918] numa_policy 0KB 3KB [ 708.695354] debug_objects_cache 1173KB 1619KB [ 708.749719] trace_event_file 297KB 298KB [ 708.755241] ftrace_event_field 398KB 401KB [ 708.770062] pool_workqueue 121KB 124KB [ 708.775783] page->ptl 600KB 1047KB [ 708.783133] kmalloc-2097152 2050KB 2050KB [ 708.789341] kmalloc-524288 2056KB 2056KB [ 708.807414] kmalloc-262144 1290KB 1290KB [ 708.812880] kmalloc-131072 650KB 650KB [ 708.818246] kmalloc-65536 1848KB 1914KB [ 708.824393] kmalloc-32768 1650KB 1650KB [ 708.832099] kmalloc-16384 1039KB 1039KB [ 708.838652] kmalloc-8192 3960KB 4001KB [ 708.844073] kmalloc-4096 18967KB 19027KB [ 708.849439] kmalloc-2048 12361KB 13629KB [ 708.855238] kmalloc-1024 7093KB 8008KB [ 708.861900] kmalloc-512 12607KB 12723KB [ 708.867827] kmalloc-256 4969KB 5471KB [ 708.873927] kmalloc-128 964KB 1488KB [ 708.879575] kmalloc-96 3422KB 4020KB [ 708.889412] kmalloc-64 2793KB 4244KB [ 708.898525] kmalloc-32 1881KB 2445KB [ 708.903945] kmalloc-192 1482KB 2288KB [ 708.909401] kmem_cache 177KB 183KB [ 708.915194] Out of memory (oom_kill_allocating_task): Kill process 27237 (syz-fuzzer) score 0 or sacrifice child [ 708.925828] Killed process 8135 (syz-executor.2) total-vm:48512kB, anon-rss:440kB, file-rss:12292kB, shmem-rss:0kB [ 708.936968] oom_reaper: reaped process 8135 (syz-executor.2), now anon-rss:0kB, file-rss:14336kB, shmem-rss:0kB [ 709.707244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 709.721085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.734340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 709.742687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 709.757047] device bridge_slave_1 left promiscuous mode [ 709.764107] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.829084] device bridge_slave_0 left promiscuous mode [ 709.838062] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.864234] device veth1_macvtap left promiscuous mode [ 709.873200] device veth0_macvtap left promiscuous mode [ 709.878628] device veth1_vlan left promiscuous mode [ 709.886037] device veth0_vlan left promiscuous mode [ 710.047080] device hsr_slave_1 left promiscuous mode [ 710.059144] device hsr_slave_0 left promiscuous mode [ 710.086106] team0 (unregistering): Port device team_slave_1 removed [ 710.104578] team0 (unregistering): Port device team_slave_0 removed [ 710.122447] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 710.138935] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 710.189330] bond0 (unregistering): Released all slaves 13:07:29 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x80000001, 0x4, 0x4000}) 13:07:29 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x401, 0x8aae, 0x30385056, 0x6, 0x1, 0x3, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:07:29 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x3) 13:07:29 executing program 4: socketpair(0x1e, 0x3, 0x7, &(0x7f0000000000)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:07:29 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x5, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x5, 0x0, 0x3, {0x1, @raw_data="225f50a7111826e3f01cee0d662d67ee0f87bfb36ff72ad5557fee03318ba430b2368e64016682d2acfdfa7c50088ff06e4fee874ff0229e99fc8fd779c4fc8bbc42acb0a2d2125f8b8567b6b1b6b8f1fe206acc829f12c4d840bc13182560a27a99ee25b43c0f99df794e30a1641db33485457013fb1ec1a6d80df6437e2dac1f6785e1b019907af06eed8ca4beeb2da415f857e0f545c373e30c8db32efe9324c35eec43e2143334ff8122fe8b2cbdd0d4c0a3ace8931800aa9740eb035f0911175856dcc08415"}, 0x25}) socketpair(0x28, 0x2, 0x9fa, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0xffffffff}], 0x0, 0x0, 0x8}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000008}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 13:07:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_SSID={0x15, 0x34, @random="93388aaa8e929b9ccdf5660a6a3b123fd4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xbb, 0x401, 0x34324948, 0x9, 0x3, 0x9, 0x7, 0x40000, 0x1, 0x0, 0x1, 0x7}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000380)=@userptr={0x40000000, 0x0, 0x4, 0x0, 0x3, {0x0, 0x2710}, {0x1, 0x2, 0x9, 0x9, 0x80, 0xea, "f8437f47"}, 0x3, 0x2, {&(0x7f0000000340)}, 0x9}) 13:07:29 executing program 5: ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x80000001, 0x4, 0x4000}) 13:07:29 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x5, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x5, 0x0, 0x3, {0x1, @raw_data="225f50a7111826e3f01cee0d662d67ee0f87bfb36ff72ad5557fee03318ba430b2368e64016682d2acfdfa7c50088ff06e4fee874ff0229e99fc8fd779c4fc8bbc42acb0a2d2125f8b8567b6b1b6b8f1fe206acc829f12c4d840bc13182560a27a99ee25b43c0f99df794e30a1641db33485457013fb1ec1a6d80df6437e2dac1f6785e1b019907af06eed8ca4beeb2da415f857e0f545c373e30c8db32efe9324c35eec43e2143334ff8122fe8b2cbdd0d4c0a3ace8931800aa9740eb035f0911175856dcc08415"}, 0x25}) (async) socketpair(0x28, 0x2, 0x9fa, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0xffffffff}], 0x0, 0x0, 0x8}}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) (async) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000008}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 13:07:29 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x3) 13:07:29 executing program 4: socketpair(0x1e, 0x3, 0x7, &(0x7f0000000000)) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:07:29 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x3) 13:07:29 executing program 5: ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x80000001, 0x4, 0x4000}) 13:07:29 executing program 5: ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x80000001, 0x4, 0x4000}) [ 714.286018] IPVS: ftp: loaded support on port[0] = 21 [ 714.614768] chnl_net:caif_netlink_parms(): no params data found [ 714.698006] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.706069] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.718967] device bridge_slave_0 entered promiscuous mode [ 714.726852] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.738026] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.746751] device bridge_slave_1 entered promiscuous mode [ 714.781090] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 714.795666] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 714.827345] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 714.845765] team0: Port device team_slave_0 added [ 714.852341] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 714.860254] team0: Port device team_slave_1 added [ 714.880208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.886475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.912221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.924543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.931097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.956754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.971980] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 714.980056] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 715.011119] device hsr_slave_0 entered promiscuous mode [ 715.017415] device hsr_slave_1 entered promiscuous mode [ 715.028926] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 715.036527] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 715.159229] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.165859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.172793] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.179180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 715.244050] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 715.255317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.266135] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 715.281746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 715.294256] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.303549] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.316343] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 715.328510] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 715.342413] 8021q: adding VLAN 0 to HW filter on device team0 [ 715.355487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 715.366915] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.373369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 715.394760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 715.407050] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.413500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.446306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 715.454863] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 715.468006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 715.480774] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 715.489137] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 715.504933] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 715.511144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 715.518445] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 715.528821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 715.536604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 715.582245] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 715.594727] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 715.601590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 715.608311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 715.623071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 715.672971] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 715.688727] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 715.697741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 715.712239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 715.765767] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 715.775456] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 715.785547] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 715.798727] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 715.808190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 715.819194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 715.836086] device veth0_vlan entered promiscuous mode [ 715.846563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 715.857357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 715.871753] device veth1_vlan entered promiscuous mode [ 715.877871] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 715.894068] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 715.913328] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 715.929830] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 715.938585] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 715.947089] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 715.954922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 715.963103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 715.978076] device veth0_macvtap entered promiscuous mode [ 715.985560] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 716.001044] device veth1_macvtap entered promiscuous mode [ 716.007555] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 716.024164] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 716.041606] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 716.055986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.065866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.080580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.093700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.106076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.120914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.133416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.146955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.161145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.173548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.187767] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 716.197894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 716.207774] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 716.218361] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 716.228830] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 716.244234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 716.256770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.269491] Bluetooth: hci4: command 0x0409 tx timeout [ 716.272321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.286925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.302340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.313281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.326368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.337422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.354110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.364019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.378576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.394683] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 716.401687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 716.408705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 716.422450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 716.638131] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 716.644813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.666912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.688163] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 716.704935] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 716.715198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.723911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.735784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 13:07:34 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x401, 0x8aae, 0x30385056, 0x6, 0x1, 0x3, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) [ 718.339280] Bluetooth: hci4: command 0x041b tx timeout [ 718.931476] oom_reaper: reaped process 12522 (syz-executor.0), now anon-rss:0kB, file-rss:14336kB, shmem-rss:16kB [ 718.995766] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 719.034562] systemd-journal cpuset=/ mems_allowed=0-1 [ 719.043153] CPU: 1 PID: 12341 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 719.051128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 719.060482] Call Trace: [ 719.063074] dump_stack+0x1fc/0x2ef [ 719.066705] dump_header+0x15d/0xc3f [ 719.070446] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 719.075550] ? ___ratelimit+0x319/0x590 [ 719.079550] oom_kill_process.cold+0x10/0x692 [ 719.084055] ? check_preemption_disabled+0x41/0x280 [ 719.089074] ? has_intersects_mems_allowed+0x1d6/0x290 [ 719.094453] out_of_memory+0x1072/0x1390 [ 719.098519] ? oom_killer_disable+0x270/0x270 [ 719.103017] ? mutex_trylock+0x15f/0x1a0 [ 719.107082] __alloc_pages_nodemask+0x23a2/0x2890 [ 719.111935] ? find_get_entry+0x4cd/0x8a0 [ 719.116107] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 719.120977] alloc_pages_current+0x193/0x2a0 [ 719.125404] filemap_fault+0x146e/0x2180 [ 719.129479] ext4_filemap_fault+0x84/0xb0 [ 719.133626] __do_fault+0x10b/0x4b0 [ 719.137243] ? do_raw_spin_unlock+0x171/0x230 [ 719.141753] __handle_mm_fault+0x273b/0x41c0 [ 719.146275] ? vm_insert_page+0x9c0/0x9c0 [ 719.150433] ? fsnotify+0x84e/0xe10 [ 719.154075] ? check_preemption_disabled+0x41/0x280 [ 719.158331] syz-executor.0: vmalloc: allocation failure, allocated 1768828928 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 719.159091] handle_mm_fault+0x436/0xb10 [ 719.159111] __do_page_fault+0x68e/0xd60 [ 719.159129] ? trace_hardirqs_off_caller+0x6e/0x210 [ 719.159145] ? spurious_fault+0x840/0x840 [ 719.178832] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 719.181180] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 719.181198] ? page_fault+0x8/0x30 [ 719.181211] page_fault+0x1e/0x30 [ 719.181222] RIP: 0033:0x7fcc67e20fe3 [ 719.181236] Code: Bad RIP value. [ 719.181247] RSP: 002b:00007ffd2a53ff70 EFLAGS: 00010203 [ 719.219781] RAX: 0000000000000008 RBX: 00005596d68e6268 RCX: 00007fcc67711210 [ 719.227057] RDX: 0000000000000008 RSI: 00007ffd2a53ff70 RDI: 0000000000000013 [ 719.234324] RBP: 00007ffd2a540180 R08: 00007ffd2a5c9000 R09: 000000b8f1ce0b0d [ 719.241591] R10: 001d3648930248fd R11: 0000000000000246 R12: 00005596d68e6250 [ 719.248856] R13: 0000000000000001 R14: 00007ffd2a53ff9c R15: 00007ffd2a53ff90 [ 719.256138] CPU: 0 PID: 12522 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 719.260794] Mem-Info: [ 719.264027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 719.266433] active_anon:18107 inactive_anon:10947 isolated_anon:0 [ 719.266433] active_file:26 inactive_file:9 isolated_file:0 [ 719.266433] unevictable:0 dirty:0 writeback:0 unstable:0 [ 719.266433] slab_reclaimable:15404 slab_unreclaimable:118534 [ 719.266433] mapped:22458 shmem:11555 pagetables:619 bounce:0 [ 719.266433] free:13894 free_pcp:137 free_cma:0 [ 719.266463] Node 0 active_anon:71272kB inactive_anon:19328kB active_file:48kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87928kB dirty:0kB writeback:0kB shmem:21624kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 719.275785] Call Trace: [ 719.275809] dump_stack+0x1fc/0x2ef [ 719.275827] warn_alloc.cold+0x7b/0x18f [ 719.275864] ? zone_watermark_ok_safe+0x260/0x260 [ 719.309069] Node 1 active_anon:1156kB inactive_anon:24460kB active_file:56kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1904kB dirty:0kB writeback:0kB shmem:24596kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 719.336696] ? retint_kernel+0x2d/0x2d [ 719.336732] __vmalloc_area_node+0x4fd/0x780 [ 719.336751] ? __vmalloc_node_range+0x180/0x180 [ 719.336764] ? _raw_spin_unlock+0x29/0x40 [ 719.336775] ? __get_vm_area_node+0x2e2/0x3a0 [ 719.336793] __vmalloc_node_range+0xed/0x180 [ 719.336808] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 719.336827] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 719.336841] vmalloc_user+0x70/0xe0 [ 719.336855] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 719.336871] vb2_vmalloc_alloc+0xb3/0x2f0 [ 719.336886] __vb2_queue_alloc+0x472/0xe60 [ 719.336914] vb2_core_create_bufs+0x273/0x7e0 [ 719.336930] ? __vb2_queue_free+0x870/0x870 [ 719.336946] ? __video_do_ioctl+0x632/0xcd0 [ 719.336966] ? __mutex_lock+0x368/0x1190 [ 719.336985] vb2_create_bufs+0x332/0x620 [ 719.337003] ? mark_held_locks+0xf0/0xf0 [ 719.337017] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 719.337035] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 719.337052] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 719.337073] v4l_create_bufs+0xb2/0x160 [ 719.337092] __video_do_ioctl+0x49a/0xcd0 [ 719.337114] ? v4l_querycap+0x340/0x340 [ 719.337134] ? __might_fault+0x192/0x1d0 [ 719.337152] ? v4l_querycap+0x340/0x340 [ 719.337168] video_usercopy+0x13f/0xfa0 [ 719.337191] ? v4l_enumstd+0x60/0x60 [ 719.337206] ? do_futex+0x171/0x1880 [ 719.337222] ? mark_held_locks+0xf0/0xf0 [ 719.337241] ? debug_check_no_obj_freed+0x201/0x490 [ 719.337264] ? video_usercopy+0xfa0/0xfa0 [ 719.339858] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 719.343452] v4l2_ioctl+0x147/0x1a0 [ 719.347408] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 719.352242] ? video_devdata+0xa0/0xa0 [ 719.352259] do_vfs_ioctl+0xcdb/0x12e0 [ 719.352277] ? lock_downgrade+0x720/0x720 [ 719.379357] Node 0 DMA32 free:17884kB min:35996kB low:44992kB high:53988kB active_anon:71372kB inactive_anon:19328kB active_file:44kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7712kB pagetables:2304kB bounce:0kB free_pcp:232kB local_pcp:232kB free_cma:0kB [ 719.383214] ? check_preemption_disabled+0x41/0x280 [ 719.387585] lowmem_reserve[]: 0 0 1 1 1 [ 719.392242] ? ioctl_preallocate+0x200/0x200 [ 719.392260] ? __fget+0x356/0x510 [ 719.392277] ? do_dup2+0x450/0x450 [ 719.396411] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 719.401008] ? __se_sys_futex+0x298/0x3b0 [ 719.401029] ksys_ioctl+0x9b/0xc0 [ 719.401049] __x64_sys_ioctl+0x6f/0xb0 [ 719.405440] lowmem_reserve[]: 0 0 0 0 0 [ 719.409756] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 719.409772] do_syscall_64+0xf9/0x620 [ 719.409793] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 719.415127] Node 1 Normal free:26816kB min:53876kB low:67344kB high:80812kB active_anon:1156kB inactive_anon:24460kB active_file:56kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:128kB pagetables:172kB bounce:0kB free_pcp:312kB local_pcp:64kB free_cma:0kB [ 719.418741] RIP: 0033:0x7f68c24140f9 [ 719.418757] Code: Bad RIP value. [ 719.418764] RSP: 002b:00007f68c0986168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 719.418777] RAX: ffffffffffffffda RBX: 00007f68c2533f80 RCX: 00007f68c24140f9 [ 719.418783] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000006 [ 719.418790] RBP: 00007f68c246fae9 R08: 0000000000000000 R09: 0000000000000000 [ 719.418797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 719.418804] R13: 00007fff6155d44f R14: 00007f68c0986300 R15: 0000000000022000 [ 719.435839] Mem-Info: [ 719.440011] lowmem_reserve[]: 0 0 0 0 0 [ 719.452415] active_anon:18107 inactive_anon:10947 isolated_anon:0 [ 719.452415] active_file:26 inactive_file:9 isolated_file:0 [ 719.452415] unevictable:0 dirty:0 writeback:0 unstable:0 [ 719.452415] slab_reclaimable:15404 slab_unreclaimable:118534 [ 719.452415] mapped:22458 shmem:11555 pagetables:619 bounce:0 [ 719.452415] free:13894 free_pcp:197 free_cma:0 [ 719.455299] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 719.457261] Node 0 active_anon:71272kB inactive_anon:19328kB active_file:48kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87928kB dirty:0kB writeback:0kB shmem:21624kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 719.463665] Node 0 DMA32: 1890*4kB (ME) 726*8kB (UME) 184*16kB (UME) 17*32kB (ME) 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 17880kB [ 719.478697] Node 1 active_anon:1156kB inactive_anon:24460kB active_file:56kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1904kB dirty:0kB writeback:0kB shmem:24596kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 719.484196] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 719.484887] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 719.488940] Node 1 Normal: 175*4kB (M) 131*8kB (UME) 99*16kB (UM) 76*32kB (UME) 37*64kB (M) 20*128kB (UM) 6*256kB (UM) 0*512kB 2*1024kB (UM) 2*2048kB (UM) 2*4096kB (U) = 26564kB [ 719.504377] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 719.509050] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 719.517314] Node 0 DMA32 free:17884kB min:35996kB low:44992kB high:53988kB active_anon:71372kB inactive_anon:19328kB active_file:44kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7712kB pagetables:2304kB bounce:0kB free_pcp:476kB local_pcp:248kB free_cma:0kB [ 719.517504] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 719.555151] lowmem_reserve[]: 0 0 1 1 1 [ 719.559399] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 719.565244] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 719.597066] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 719.610170] lowmem_reserve[]: 0 0 0 0 0 [ 719.613888] 11602 total pagecache pages [ 719.614057] Node 1 Normal free:26816kB min:53876kB low:67344kB high:80812kB active_anon:1156kB inactive_anon:24460kB active_file:56kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:128kB pagetables:172kB bounce:0kB free_pcp:312kB local_pcp:248kB free_cma:0kB [ 719.640208] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 719.643650] 0 pages in swap cache [ 719.656232] lowmem_reserve[]: 0 0 0 0 0 [ 719.663869] Swap cache stats: add 0, delete 0, find 0/0 [ 719.664417] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 719.669670] Free swap = 0kB [ 719.669676] Total swap = 0kB [ 719.669684] 2097051 pages RAM [ 719.669688] 0 pages HighMem/MovableOnly [ 719.669692] 369649 pages reserved [ 719.669702] 0 pages cma reserved [ 719.715120] Node 0 DMA32: 1890*4kB (ME) 726*8kB (UME) 184*16kB (UME) 17*32kB (ME) 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 17880kB [ 719.724438] Unreclaimable slab info: [ 719.735733] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 719.745814] Name Used Total [ 719.760645] Node 1 Normal: 175*4kB (M) 131*8kB (UME) 99*16kB (UM) 76*32kB (UME) 37*64kB (M) 20*128kB (UM) 6*256kB (UM) 0*512kB 2*1024kB (UM) 2*2048kB (UM) 2*4096kB (U) = 26564kB [ 719.792792] pid_2 77KB 152KB [ 719.813860] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 719.834146] batadv_tt_change_cache 1KB 3KB [ 719.855650] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 719.874827] batadv_tl_cache 6KB 12KB [ 719.900575] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 719.912183] TIPC 13KB 15KB [ 719.936123] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 719.942495] SCTPv6 18KB 24KB [ 719.980752] 11579 total pagecache pages [ 719.980767] 0 pages in swap cache [ 719.992954] DCCPv6 17KB 22KB [ 720.026939] Swap cache stats: add 0, delete 0, find 0/0 [ 720.032012] DCCP 16KB 21KB [ 720.035263] Free swap = 0kB [ 720.064273] RXRPC 13KB 13KB [ 720.078839] Total swap = 0kB [ 720.083649] rxrpc_call_jar 90KB 94KB [ 720.106286] 2097051 pages RAM [ 720.110093] bridge_fdb_cache 12KB 15KB [ 720.110270] 0 pages HighMem/MovableOnly [ 720.113546] fib6_nodes 188KB 188KB [ 720.138938] 369649 pages reserved [ 720.145998] ip6_dst_cache 199KB 326KB [ 720.148613] 0 pages cma reserved [ 720.167201] RAWv6 81KB 81KB [ 720.259103] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 720.264995] UDPv6 37KB 41KB [ 720.321109] TCPv6 36KB 36KB [ 720.326495] nf_conntrack 18KB 18KB [ 720.335480] t10_alua_lu_gp_cache 0KB 3KB [ 720.344858] sd_ext_cdb 0KB 7KB [ 720.353806] scsi_sense_cache 1056KB 1060KB [ 720.362474] virtio_scsi_cmd 16KB 16KB [ 720.367848] sgpool-128 8KB 8KB [ 720.376823] sgpool-64 4KB 12KB [ 720.385498] sgpool-32 2KB 15KB [ 720.394451] sgpool-16 1KB 7KB [ 720.403018] sgpool-8 0KB 7KB [ 720.408397] mqueue_inode_cache 13KB 22KB [ 720.417444] bio_post_read_ctx 14KB 15KB [ 720.419084] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 720.426263] bio-2 14KB 15KB [ 720.429429] Bluetooth: hci4: command 0x040f tx timeout [ 720.436778] jfs_mp 7KB 7KB [ 720.450327] cifs_small_rq 15KB 16KB [ 720.455693] cifs_request 67KB 67KB [ 720.461084] cifs_mpx_ids 0KB 7KB [ 720.466462] nfs_commit_data 3KB 14KB [ 720.478208] nfs_write_data 34KB 44KB [ 720.483650] ext4_system_zone 1KB 7KB [ 720.495491] bio-1 1KB 7KB [ 720.499089] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 720.500971] pid_namespace 3KB 7KB [ 720.519380] rpc_buffers 17KB 25KB [ 720.524745] rpc_tasks 2KB 7KB [ 720.533677] UNIX 667KB 667KB [ 720.542851] tcp_bind_bucket 2KB 4KB [ 720.548230] ip_fib_trie 30KB 31KB [ 720.557221] ip_fib_alias 132KB 134KB [ 720.565955] ip_dst_cache 18KB 48KB [ 720.574872] RAW 48KB 52KB [ 720.579055] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 720.583599] UDP 55KB 60KB [ 720.586765] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 720.595418] TCP 19KB 22KB [ 720.598611] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 720.607216] hugetlbfs_inode_cache 3KB 15KB [ 720.618424] fscache_cookie_jar 1KB 11KB [ 720.628288] eventpoll_pwq 30KB 47KB [ 720.633691] eventpoll_epi 56KB 66KB [ 720.645912] inotify_inode_mark 18KB 55KB [ 720.651412] request_queue 199KB 199KB [ 720.656776] blkdev_requests 1KB 3KB [ 720.659050] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 720.668796] blkdev_ioc 27KB 30KB [ 720.674242] bio-0 1393KB 1395KB [ 720.685956] biovec-max 1650KB 1650KB [ 720.691368] biovec-64 1307KB 1307KB [ 720.696731] biovec-16 107KB 108KB [ 720.708494] bio_integrity_payload 1KB 8KB [ 720.714259] khugepaged_mm_slot 11KB 34KB [ 720.726294] uid_cache 0KB 4KB [ 720.731704] dmaengine-unmap-2 0KB 3KB [ 720.737065] skbuff_fclone_cache 143KB 262KB [ 720.739154] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 720.749796] skbuff_head_cache 7366KB 7368KB [ 720.755163] configfs_dir_cache 3KB 11KB [ 720.763961] file_lock_cache 83KB 194KB [ 720.772962] file_lock_ctx 9KB 11KB [ 720.778330] fsnotify_mark_connector 9KB 31KB [ 720.787415] net_namespace 61KB 61KB [ 720.796136] shmem_inode_cache 8167KB 8430KB [ 720.804877] task_delay_info 210KB 407KB [ 720.813842] taskstats 86KB 206KB [ 720.819304] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 720.827923] proc_dir_entry 760KB 761KB [ 720.839337] pde_opener 11KB 58KB [ 720.844717] seq_file 304KB 539KB [ 720.854796] sigqueue 55KB 55KB [ 720.863580] kernfs_node_cache 18240KB 18254KB [ 720.873905] mnt_cache 190KB 192KB [ 720.882506] filp 7025KB 7631KB [ 720.887875] names_cache 136310KB 136310KB [ 720.898017] iint_cache 40KB 71KB [ 720.907748] key_jar 4KB 11KB [ 720.917869] uts_namespace 5KB 7KB [ 720.926949] nsproxy 2KB 7KB [ 720.937222] vm_area_struct 3518KB 5139KB [ 720.945960] mm_struct 497KB 1001KB [ 720.956228] fs_cache 150KB 364KB [ 720.965225] files_cache 550KB 765KB [ 720.975563] signal_cache 1081KB 1746KB [ 720.984658] sighand_cache 612KB 617KB [ 720.995642] task_struct 6779KB 6836KB [ 721.004489] cred_jar 1898KB 2096KB [ 721.014714] anon_vma_chain 1171KB 1803KB [ 721.023894] anon_vma 161KB 269KB [ 721.034054] pid 87KB 264KB [ 721.040957] Acpi-Operand 156KB 202KB [ 721.047026] Acpi-ParseExt 8KB 11KB [ 721.060838] Acpi-Parse 41KB 47KB [ 721.066826] Acpi-State 52KB 63KB [ 721.075750] Acpi-Namespace 21KB 27KB [ 721.083283] numa_policy 0KB 3KB [ 721.088758] debug_objects_cache 1257KB 1619KB [ 721.097786] trace_event_file 297KB 298KB [ 721.104978] ftrace_event_field 398KB 401KB [ 721.114451] pool_workqueue 128KB 128KB [ 721.122640] page->ptl 563KB 1047KB [ 721.128699] kmalloc-2097152 2050KB 2050KB [ 721.138619] kmalloc-524288 2056KB 2056KB [ 721.147974] kmalloc-262144 1290KB 1290KB [ 721.157702] kmalloc-131072 650KB 650KB [ 721.166511] kmalloc-65536 2112KB 2178KB [ 721.176303] kmalloc-32768 1815KB 1815KB [ 721.184395] kmalloc-16384 1155KB 1155KB [ 721.194351] kmalloc-8192 4455KB 4496KB [ 721.202800] kmalloc-4096 21993KB 22015KB [ 721.208731] kmalloc-2048 12692KB 13444KB [ 721.218094] kmalloc-1024 7984KB 8008KB [ 721.227375] kmalloc-512 15037KB 15037KB [ 721.237706] kmalloc-256 4623KB 5343KB [ 721.245824] kmalloc-128 998KB 1488KB [ 721.255571] kmalloc-96 3677KB 4020KB [ 721.263886] kmalloc-64 2511KB 4236KB [ 721.273621] kmalloc-32 1877KB 2445KB [ 721.282576] kmalloc-192 1707KB 2288KB [ 721.288597] kmem_cache 177KB 183KB [ 721.297919] Out of memory (oom_kill_allocating_task): Kill process 12341 (systemd-journal) score 0 or sacrifice child [ 721.316587] Killed process 12341 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:0kB, shmem-rss:1808kB [ 721.329176] oom_reaper: reaped process 12341 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1808kB [ 721.461126] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 721.475383] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 721.505770] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 721.517392] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 721.528111] systemd[1]: Stopped Journal Service. [ 721.547765] systemd[1]: Starting Journal Service... [ 721.747781] systemd-journald[12817]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 722.251788] systemd[1]: Started Journal Service. [ 722.499018] Bluetooth: hci4: command 0x0419 tx timeout 13:07:41 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x80000001, 0x4, 0x4000}) 13:07:41 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x5, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x5, 0x0, 0x3, {0x1, @raw_data="225f50a7111826e3f01cee0d662d67ee0f87bfb36ff72ad5557fee03318ba430b2368e64016682d2acfdfa7c50088ff06e4fee874ff0229e99fc8fd779c4fc8bbc42acb0a2d2125f8b8567b6b1b6b8f1fe206acc829f12c4d840bc13182560a27a99ee25b43c0f99df794e30a1641db33485457013fb1ec1a6d80df6437e2dac1f6785e1b019907af06eed8ca4beeb2da415f857e0f545c373e30c8db32efe9324c35eec43e2143334ff8122fe8b2cbdd0d4c0a3ace8931800aa9740eb035f0911175856dcc08415"}, 0x25}) socketpair(0x28, 0x2, 0x9fa, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0xffffffff}], 0x0, 0x0, 0x8}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000008}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x5, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x5, 0x0, 0x3, {0x1, @raw_data="225f50a7111826e3f01cee0d662d67ee0f87bfb36ff72ad5557fee03318ba430b2368e64016682d2acfdfa7c50088ff06e4fee874ff0229e99fc8fd779c4fc8bbc42acb0a2d2125f8b8567b6b1b6b8f1fe206acc829f12c4d840bc13182560a27a99ee25b43c0f99df794e30a1641db33485457013fb1ec1a6d80df6437e2dac1f6785e1b019907af06eed8ca4beeb2da415f857e0f545c373e30c8db32efe9324c35eec43e2143334ff8122fe8b2cbdd0d4c0a3ace8931800aa9740eb035f0911175856dcc08415"}, 0x25}) (async) socketpair(0x28, 0x2, 0x9fa, &(0x7f0000000000)) (async) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0xffffffff}], 0x0, 0x0, 0x8}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) (async) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000008}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) 13:07:41 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000200)={0x1, @win={{0x5, 0x2906, 0x9, 0x1}, 0x9, 0xfffffffc, &(0x7f0000000340)={{0x3, 0x10000, 0x9, 0x8}, &(0x7f0000000300)={{0x1, 0x800, 0x6, 0x10000}}}, 0x4, &(0x7f0000000380)="6447629fa1e7aa630001728b1cc39b38329651df84609874e040c448f980713e9cc3f139fb90c17e407b4dd82d6d867391c31201b74bf6aff5832a47f5879b046367f248cc9c2177611ba89ad2475cb5a311fdd0746b139b061e36a3e11bbf64e6ca8cdcfd4c1250ed9aceda7f7aa3845bff6fa35c7d7913768104665472340e3a9054f93105c6f888cf570ddbeb787a40de256896235f26e868f68d70e0259ca10f207a7e3dca4b052d8f850ebb847f6c9e7802c28a374c6b1f27bc8fe2c552d3af7ce75589bfcb", 0x3f}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x9bb3}]}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000140)=@multiplanar_userptr={0xb2c2, 0x6, 0x4, 0x0, 0x1, {0x0, 0x2710}, {0x4, 0x8, 0xc8, 0x40, 0x2, 0x8, "15e82d36"}, 0x5, 0x2, {&(0x7f00000000c0)=[{0x3, 0x6, {&(0x7f0000000040)}, 0x1455}, {0xffffffff, 0x6, {&(0x7f0000000080)}, 0x8}]}, 0xffff}) 13:07:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_SSID={0x15, 0x34, @random="93388aaa8e929b9ccdf5660a6a3b123fd4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xbb, 0x401, 0x34324948, 0x9, 0x3, 0x9, 0x7, 0x40000, 0x1, 0x0, 0x1, 0x7}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 13:07:41 executing program 4: socketpair(0x1e, 0x3, 0x7, &(0x7f0000000000)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:07:41 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:07:41 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x80000001, 0x4, 0x4000}) 13:07:41 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000180)={0xff, 0x0, 0x1, "f754b5f18408c11696b9754deca3043d093423d2d53ff337efd4069749f16f86", 0x31384142}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000040)={0x2, 0x10001, 0x0, {0x2, @pix_mp={0x4, 0x0, 0x47504a50, 0x7, 0x2, [{0x2, 0x5}, {0x40, 0x81}, {0x8}, {0x89ac, 0x7dcb}, {0x6, 0x7}, {0x8001, 0x1ff}, {0x7f5c, 0x200}, {0x8, 0x4}], 0x0, 0x1, 0x1, 0x1}}, 0x5}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:07:41 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x80000001, 0x4, 0x4000}) 13:07:41 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x80000001, 0x4, 0x4000}) 13:07:42 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:07:42 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000180)={0xff, 0x0, 0x1, "f754b5f18408c11696b9754deca3043d093423d2d53ff337efd4069749f16f86", 0x31384142}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000180)={0xff, 0x0, 0x1, "f754b5f18408c11696b9754deca3043d093423d2d53ff337efd4069749f16f86", 0x31384142}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000040)={0x2, 0x10001, 0x0, {0x2, @pix_mp={0x4, 0x0, 0x47504a50, 0x7, 0x2, [{0x2, 0x5}, {0x40, 0x81}, {0x8}, {0x89ac, 0x7dcb}, {0x6, 0x7}, {0x8001, 0x1ff}, {0x7f5c, 0x200}, {0x8, 0x4}], 0x0, 0x1, 0x1, 0x1}}, 0x5}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000040)={0x2, 0x10001, 0x0, {0x2, @pix_mp={0x4, 0x0, 0x47504a50, 0x7, 0x2, [{0x2, 0x5}, {0x40, 0x81}, {0x8}, {0x89ac, 0x7dcb}, {0x6, 0x7}, {0x8001, 0x1ff}, {0x7f5c, 0x200}, {0x8, 0x4}], 0x0, 0x1, 0x1, 0x1}}, 0x5}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:07:42 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x80000001, 0x4, 0x4000}) [ 729.872218] oom_reaper: reaped process 12829 (syz-executor.0), now anon-rss:0kB, file-rss:14332kB, shmem-rss:16kB [ 729.910303] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 729.926281] in:imklog cpuset=/ mems_allowed=0-1 [ 729.931020] CPU: 1 PID: 12496 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 729.938466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 729.947902] Call Trace: [ 729.950510] dump_stack+0x1fc/0x2ef [ 729.954234] dump_header+0x15d/0xc3f [ 729.957933] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 729.963034] ? ___ratelimit+0x319/0x590 [ 729.967098] oom_kill_process.cold+0x10/0x692 [ 729.968586] syz-executor.0: vmalloc: allocation failure, allocated 1760251904 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 729.971590] ? check_preemption_disabled+0x41/0x280 [ 729.988931] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 729.990370] ? has_intersects_mems_allowed+0x1d6/0x290 [ 730.000707] out_of_memory+0x1072/0x1390 [ 730.004760] ? oom_killer_disable+0x270/0x270 [ 730.009254] ? mutex_trylock+0x15f/0x1a0 [ 730.013328] __alloc_pages_nodemask+0x23a2/0x2890 [ 730.018169] ? find_get_entry+0x4cd/0x8a0 [ 730.022314] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 730.027172] alloc_pages_current+0x193/0x2a0 [ 730.031579] filemap_fault+0x146e/0x2180 [ 730.035649] ext4_filemap_fault+0x84/0xb0 [ 730.039795] __do_fault+0x10b/0x4b0 [ 730.043429] __handle_mm_fault+0x273b/0x41c0 [ 730.047828] ? vm_insert_page+0x9c0/0x9c0 [ 730.051985] ? lock_downgrade+0x720/0x720 [ 730.056219] ? check_preemption_disabled+0x41/0x280 [ 730.061230] handle_mm_fault+0x436/0xb10 [ 730.065285] __do_page_fault+0x68e/0xd60 [ 730.069363] ? trace_hardirqs_off_caller+0x6e/0x210 [ 730.074398] ? spurious_fault+0x840/0x840 [ 730.078567] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 730.083410] ? page_fault+0x8/0x30 [ 730.086938] page_fault+0x1e/0x30 [ 730.090382] RIP: 0033:0x7f096a8a722d [ 730.094091] Code: Bad RIP value. [ 730.097552] RSP: 002b:00007f0968243580 EFLAGS: 00010293 [ 730.102903] RAX: 0000000000000078 RBX: 0000000000000000 RCX: 00007f096a8a722d [ 730.110163] RDX: 0000000000001fa0 RSI: 00007f0968243da0 RDI: 0000000000000004 [ 730.117428] RBP: 0000558670dd99d0 R08: 0000000000000000 R09: 0000000004000001 [ 730.124691] R10: 0000000000000001 R11: 0000000000000293 R12: 00007f0968243da0 [ 730.131948] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f0968243ddd [ 730.139227] CPU: 0 PID: 12829 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 730.141203] Mem-Info: [ 730.147115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 730.149626] active_anon:17508 inactive_anon:12978 isolated_anon:0 [ 730.149626] active_file:13 inactive_file:22 isolated_file:0 [ 730.149626] unevictable:0 dirty:0 writeback:0 unstable:0 [ 730.149626] slab_reclaimable:15250 slab_unreclaimable:118807 [ 730.149626] mapped:22326 shmem:13602 pagetables:596 bounce:0 [ 730.149626] free:13808 free_pcp:868 free_cma:0 [ 730.159147] Call Trace: [ 730.159174] dump_stack+0x1fc/0x2ef [ 730.159207] warn_alloc.cold+0x7b/0x18f [ 730.194279] Node 0 active_anon:68872kB inactive_anon:19324kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21620kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 730.195009] ? zone_watermark_ok_safe+0x260/0x260 [ 730.198662] Node 1 active_anon:1160kB inactive_anon:32588kB active_file:8kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1436kB dirty:0kB writeback:0kB shmem:32788kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 730.202582] ? retint_kernel+0x2d/0x2d [ 730.230198] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 730.235015] __vmalloc_area_node+0x4fd/0x780 [ 730.262006] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 730.265852] ? __vmalloc_node_range+0x180/0x180 [ 730.293701] Node 0 DMA32 free:17660kB min:35996kB low:44992kB high:53988kB active_anon:68972kB inactive_anon:19324kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7712kB pagetables:2216kB bounce:0kB free_pcp:1860kB local_pcp:1620kB free_cma:0kB [ 730.296327] ? _raw_spin_unlock+0x29/0x40 [ 730.301349] lowmem_reserve[]: 0 0 1 1 1 [ 730.305981] ? __get_vm_area_node+0x2e2/0x3a0 [ 730.335082] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 730.339182] __vmalloc_node_range+0xed/0x180 [ 730.339201] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 730.343145] lowmem_reserve[]: 0 0 0 0 0 [ 730.347635] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 730.374991] Node 1 Normal free:26696kB min:53876kB low:67344kB high:80812kB active_anon:1160kB inactive_anon:32588kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:128kB pagetables:168kB bounce:0kB free_pcp:1596kB local_pcp:4kB free_cma:0kB [ 730.377947] vmalloc_user+0x70/0xe0 [ 730.382268] lowmem_reserve[]: 0 0 0 0 0 [ 730.386205] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 730.391563] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 730.420097] vb2_vmalloc_alloc+0xb3/0x2f0 [ 730.420114] __vb2_queue_alloc+0x472/0xe60 [ 730.420138] vb2_core_create_bufs+0x273/0x7e0 [ 730.420154] ? __vb2_queue_free+0x870/0x870 [ 730.423794] Node 0 DMA32: 1750*4kB (ME) 797*8kB (UME) 206*16kB (UME) 23*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17408kB [ 730.427768] ? _raw_spin_unlock+0x29/0x40 [ 730.432104] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 730.445255] ? __mutex_lock+0x368/0x1190 [ 730.445273] vb2_create_bufs+0x332/0x620 [ 730.445292] ? mark_held_locks+0xf0/0xf0 [ 730.449438] Node 1 Normal: 216*4kB (UME) 183*8kB (M) 133*16kB (M) 109*32kB (UM) 53*64kB (ME) 10*128kB (UME) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 2*4096kB (U) = 26696kB [ 730.453649] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 730.458144] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 730.462980] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 730.462996] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 730.463020] v4l_create_bufs+0xb2/0x160 [ 730.477168] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 730.480761] __video_do_ioctl+0x49a/0xcd0 [ 730.480783] ? v4l_querycap+0x340/0x340 [ 730.480802] ? __might_fault+0x192/0x1d0 [ 730.491816] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 730.495936] ? v4l_querycap+0x340/0x340 [ 730.500002] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 730.504037] video_usercopy+0x13f/0xfa0 [ 730.520888] 13640 total pagecache pages [ 730.525970] ? v4l_enumstd+0x60/0x60 [ 730.535009] 0 pages in swap cache [ 730.540169] ? do_futex+0x171/0x1880 [ 730.540184] ? mark_held_locks+0xf0/0xf0 [ 730.540203] ? debug_check_no_obj_freed+0x201/0x490 [ 730.545485] Swap cache stats: add 0, delete 0, find 0/0 [ 730.549472] ? video_usercopy+0xfa0/0xfa0 [ 730.549484] v4l2_ioctl+0x147/0x1a0 [ 730.549498] ? video_devdata+0xa0/0xa0 [ 730.558138] Free swap = 0kB [ 730.562276] do_vfs_ioctl+0xcdb/0x12e0 [ 730.562293] ? lock_downgrade+0x720/0x720 [ 730.562314] ? check_preemption_disabled+0x41/0x280 [ 730.566260] Total swap = 0kB [ 730.570310] ? ioctl_preallocate+0x200/0x200 [ 730.570328] ? __fget+0x356/0x510 [ 730.570344] ? do_dup2+0x450/0x450 [ 730.579789] 2097051 pages RAM [ 730.583304] ? __se_sys_futex+0x298/0x3b0 [ 730.591878] 0 pages HighMem/MovableOnly [ 730.595945] ksys_ioctl+0x9b/0xc0 [ 730.599915] 369649 pages reserved [ 730.603620] __x64_sys_ioctl+0x6f/0xb0 [ 730.607058] 0 pages cma reserved [ 730.610854] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 730.610868] do_syscall_64+0xf9/0x620 [ 730.610887] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 730.614920] Unreclaimable slab info: [ 730.619932] RIP: 0033:0x7f68c24140f9 [ 730.619948] Code: Bad RIP value. [ 730.619955] RSP: 002b:00007f68c0986168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 730.619971] RAX: ffffffffffffffda RBX: 00007f68c2533f80 RCX: 00007f68c24140f9 [ 730.625319] Name Used Total [ 730.629465] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000006 [ 730.629473] RBP: 00007f68c246fae9 R08: 0000000000000000 R09: 0000000000000000 [ 730.629480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 730.629488] R13: 00007fff6155d44f R14: 00007f68c0986300 R15: 0000000000022000 [ 730.629744] net_ratelimit: 4 callbacks suppressed [ 730.629750] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 730.633199] pid_2 58KB 152KB [ 730.637306] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 730.640369] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 730.644206] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 730.648343] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 730.653386] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 730.656386] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 730.706449] Mem-Info: [ 730.707430] batadv_tt_change_cache 0KB 3KB [ 730.732152] active_anon:17508 inactive_anon:12978 isolated_anon:0 [ 730.732152] active_file:13 inactive_file:22 isolated_file:0 [ 730.732152] unevictable:0 dirty:0 writeback:0 unstable:0 [ 730.732152] slab_reclaimable:15250 slab_unreclaimable:118807 [ 730.732152] mapped:22326 shmem:13602 pagetables:596 bounce:0 [ 730.732152] free:13808 free_pcp:858 free_cma:0 [ 730.732885] batadv_tl_cache 5KB 12KB [ 730.738315] Node 0 active_anon:68872kB inactive_anon:19324kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21620kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 730.745666] TIPC 12KB 15KB [ 730.745686] SCTPv6 16KB 24KB [ 730.745697] SCTP 3KB 3KB [ 730.767409] Node 1 active_anon:1156kB inactive_anon:32588kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1380kB dirty:0kB writeback:0kB shmem:32788kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 730.767642] DCCPv6 17KB 22KB [ 730.777176] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 730.779012] DCCP 16KB 21KB [ 730.779054] RXRPC 13KB 13KB [ 730.779063] rxrpc_call_jar 90KB 94KB [ 730.779079] bridge_fdb_cache 11KB 15KB [ 730.797986] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 730.804473] fib6_nodes 186KB 188KB [ 730.804488] ip6_dst_cache 216KB 326KB [ 730.818485] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 730.824060] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 730.826415] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 730.832421] RAWv6 81KB 81KB [ 730.878262] Node 0 DMA32 free:17408kB min:35996kB low:44992kB high:53988kB active_anon:68864kB inactive_anon:19324kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7712kB pagetables:2212kB bounce:0kB free_pcp:1828kB local_pcp:232kB free_cma:0kB [ 730.910441] UDPv6 37KB 41KB [ 730.918072] lowmem_reserve[]: 0 0 1 1 1 [ 730.953262] TCPv6 36KB 42KB [ 730.976861] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 730.990668] nf_conntrack 10KB 18KB [ 730.997226] lowmem_reserve[]: 0 0 0 0 0 [ 731.004853] t10_alua_lu_gp_cache 0KB 3KB [ 731.005565] Node 1 Normal free:26696kB min:53876kB low:67344kB high:80812kB active_anon:1156kB inactive_anon:32588kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:128kB pagetables:168kB bounce:0kB free_pcp:1596kB local_pcp:1592kB free_cma:0kB [ 731.017710] sd_ext_cdb 0KB 7KB [ 731.025305] lowmem_reserve[]: 0 0 0 0 0 [ 731.041905] scsi_sense_cache 1056KB 1060KB [ 731.068359] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 731.083357] virtio_scsi_cmd 16KB 16KB [ 731.117866] Node 0 DMA32: 1750*4kB (ME) 797*8kB (UME) 206*16kB (UME) 23*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17408kB [ 731.125008] sgpool-128 8KB 8KB [ 731.161979] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 731.168754] sgpool-64 4KB 12KB [ 731.190124] Node 1 Normal: 216*4kB (UME) 183*8kB (M) 133*16kB (M) 109*32kB (UM) 53*64kB (ME) 10*128kB (UME) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 2*4096kB (U) = 26696kB [ 731.201705] sgpool-32 2KB 15KB [ 731.208111] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 731.217597] sgpool-16 1KB 7KB [ 731.231025] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 731.241447] sgpool-8 0KB 7KB [ 731.247274] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 731.255581] mqueue_inode_cache 12KB 22KB [ 731.265069] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 731.266140] bio_post_read_ctx 14KB 15KB [ 731.276103] 13626 total pagecache pages [ 731.283825] bio-2 14KB 15KB [ 731.296059] 0 pages in swap cache [ 731.303926] jfs_mp 7KB 7KB [ 731.304579] Swap cache stats: add 0, delete 0, find 0/0 [ 731.309991] cifs_small_rq 15KB 16KB [ 731.310001] cifs_request 67KB 67KB [ 731.310010] cifs_mpx_ids 0KB 7KB [ 731.310044] nfs_commit_data 3KB 14KB [ 731.321700] Free swap = 0kB [ 731.333095] nfs_write_data 34KB 44KB [ 731.336390] Total swap = 0kB [ 731.339320] ext4_system_zone 1KB 7KB [ 731.339353] bio-1 1KB 7KB [ 731.348456] 2097051 pages RAM [ 731.356774] pid_namespace 3KB 7KB [ 731.364442] 0 pages HighMem/MovableOnly [ 731.366973] rpc_buffers 17KB 25KB [ 731.372345] 369649 pages reserved [ 731.372352] 0 pages cma reserved [ 731.404973] rpc_tasks 2KB 7KB [ 731.410405] UNIX 693KB 693KB [ 731.415780] tcp_bind_bucket 1KB 4KB [ 731.428494] ip_fib_trie 27KB 31KB [ 731.433971] ip_fib_alias 131KB 134KB [ 731.443150] ip_dst_cache 15KB 48KB [ 731.451917] RAW 48KB 52KB [ 731.457386] UDP 54KB 60KB [ 731.468041] TCP 19KB 22KB [ 731.477600] hugetlbfs_inode_cache 3KB 15KB [ 731.486951] fscache_cookie_jar 1KB 11KB [ 731.495822] eventpoll_pwq 30KB 47KB [ 731.505223] eventpoll_epi 56KB 66KB [ 731.513927] inotify_inode_mark 24KB 55KB [ 731.527546] request_queue 199KB 199KB [ 731.536173] blkdev_requests 1KB 3KB [ 731.552969] blkdev_ioc 33KB 34KB [ 731.558358] bio-0 1453KB 1473KB [ 731.575294] biovec-max 1674KB 1691KB [ 731.587215] biovec-64 1395KB 1441KB [ 731.597628] biovec-16 121KB 123KB [ 731.614578] bio_integrity_payload 1KB 8KB [ 731.625152] khugepaged_mm_slot 12KB 34KB [ 731.636940] uid_cache 0KB 4KB [ 731.647069] dmaengine-unmap-2 0KB 3KB [ 731.664083] skbuff_fclone_cache 111KB 243KB [ 731.672815] skbuff_head_cache 7505KB 7507KB [ 731.678196] configfs_dir_cache 3KB 11KB [ 731.694815] file_lock_cache 70KB 186KB [ 731.717088] file_lock_ctx 9KB 11KB [ 731.723332] fsnotify_mark_connector 10KB 31KB [ 731.740597] net_namespace 61KB 61KB [ 731.745988] shmem_inode_cache 8122KB 8392KB [ 731.763332] task_delay_info 203KB 407KB [ 731.772779] taskstats 64KB 191KB [ 731.778161] proc_dir_entry 760KB 761KB [ 731.801811] pde_opener 10KB 58KB [ 731.807212] seq_file 310KB 539KB [ 731.812636] sigqueue 54KB 55KB [ 731.818006] kernfs_node_cache 18239KB 18250KB [ 731.831565] mnt_cache 190KB 192KB [ 731.836953] filp 7242KB 7631KB [ 731.845523] names_cache 136433KB 136493KB [ 731.856095] iint_cache 47KB 71KB [ 731.864642] key_jar 4KB 11KB [ 731.875024] uts_namespace 4KB 7KB [ 731.883769] nsproxy 1KB 7KB [ 731.894052] vm_area_struct 3456KB 5112KB [ 731.902603] mm_struct 445KB 962KB [ 731.907981] fs_cache 154KB 364KB [ 731.921808] files_cache 516KB 765KB [ 731.927197] signal_cache 1063KB 1746KB [ 731.934215] sighand_cache 564KB 617KB [ 731.946082] task_struct 6470KB 6470KB [ 731.953108] cred_jar 2021KB 2096KB [ 731.965212] anon_vma_chain 1121KB 1803KB [ 731.972439] anon_vma 144KB 269KB [ 731.977817] pid 83KB 264KB [ 731.991576] Acpi-Operand 156KB 202KB [ 731.996964] Acpi-ParseExt 8KB 11KB [ 732.002528] Acpi-Parse 41KB 47KB [ 732.007895] Acpi-State 52KB 63KB [ 732.014821] Acpi-Namespace 21KB 27KB [ 732.020820] numa_policy 0KB 3KB [ 732.027186] debug_objects_cache 1237KB 1607KB [ 732.033302] trace_event_file 297KB 298KB [ 732.039490] ftrace_event_field 398KB 401KB [ 732.045229] pool_workqueue 128KB 128KB [ 732.050868] page->ptl 510KB 1047KB [ 732.056546] kmalloc-2097152 2050KB 2050KB [ 732.062165] kmalloc-524288 2056KB 2056KB [ 732.067606] kmalloc-262144 1290KB 1290KB [ 732.073075] kmalloc-131072 650KB 650KB [ 732.078688] kmalloc-65536 2112KB 2178KB [ 732.084309] kmalloc-32768 1815KB 1815KB [ 732.089903] kmalloc-16384 1188KB 1188KB [ 732.095442] kmalloc-8192 4455KB 4496KB [ 732.100969] kmalloc-4096 22231KB 22253KB [ 732.106532] kmalloc-2048 12611KB 13413KB [ 732.112006] kmalloc-1024 7786KB 8008KB [ 732.117523] kmalloc-512 15446KB 15446KB [ 732.126096] kmalloc-256 4555KB 5321KB [ 732.133110] kmalloc-128 993KB 1488KB [ 732.141851] kmalloc-96 3556KB 4020KB [ 732.147301] kmalloc-64 2428KB 4228KB [ 732.154336] kmalloc-32 1868KB 2445KB [ 732.162927] kmalloc-192 1703KB 2288KB [ 732.168302] kmem_cache 177KB 183KB [ 732.175699] Out of memory (oom_kill_allocating_task): Kill process 12496 (in:imklog) score 0 or sacrifice child [ 732.189251] Killed process 12484 (rsyslogd) total-vm:254332kB, anon-rss:728kB, file-rss:0kB, shmem-rss:0kB [ 732.208281] oom_reaper: reaped process 12484 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 13:07:52 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000180)={0xff, 0x0, 0x1, "f754b5f18408c11696b9754deca3043d093423d2d53ff337efd4069749f16f86", 0x31384142}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000040)={0x2, 0x10001, 0x0, {0x2, @pix_mp={0x4, 0x0, 0x47504a50, 0x7, 0x2, [{0x2, 0x5}, {0x40, 0x81}, {0x8}, {0x89ac, 0x7dcb}, {0x6, 0x7}, {0x8001, 0x1ff}, {0x7f5c, 0x200}, {0x8, 0x4}], 0x0, 0x1, 0x1, 0x1}}, 0x5}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:07:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) 13:07:52 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x80000001, 0x4, 0x4000}) 13:07:52 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x59565955, 0x0, 0x0, [{}, {}, {0x7498}, {}, {}, {}, {0x0, 0xfffffffc}], 0x0, 0x0, 0x0, 0x2}}) 13:07:52 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000200)={0x1, @win={{0x5, 0x2906, 0x9, 0x1}, 0x9, 0xfffffffc, &(0x7f0000000340)={{0x3, 0x10000, 0x9, 0x8}, &(0x7f0000000300)={{0x1, 0x800, 0x6, 0x10000}}}, 0x4, &(0x7f0000000380)="6447629fa1e7aa630001728b1cc39b38329651df84609874e040c448f980713e9cc3f139fb90c17e407b4dd82d6d867391c31201b74bf6aff5832a47f5879b046367f248cc9c2177611ba89ad2475cb5a311fdd0746b139b061e36a3e11bbf64e6ca8cdcfd4c1250ed9aceda7f7aa3845bff6fa35c7d7913768104665472340e3a9054f93105c6f888cf570ddbeb787a40de256896235f26e868f68d70e0259ca10f207a7e3dca4b052d8f850ebb847f6c9e7802c28a374c6b1f27bc8fe2c552d3af7ce75589bfcb", 0x3f}}) (async, rerun: 64) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x9bb3}]}}) (async, rerun: 64) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000140)=@multiplanar_userptr={0xb2c2, 0x6, 0x4, 0x0, 0x1, {0x0, 0x2710}, {0x4, 0x8, 0xc8, 0x40, 0x2, 0x8, "15e82d36"}, 0x5, 0x2, {&(0x7f00000000c0)=[{0x3, 0x6, {&(0x7f0000000040)}, 0x1455}, {0xffffffff, 0x6, {&(0x7f0000000080)}, 0x8}]}, 0xffff}) 13:07:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_SSID={0x15, 0x34, @random="93388aaa8e929b9ccdf5660a6a3b123fd4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xbb, 0x401, 0x34324948, 0x9, 0x3, 0x9, 0x7, 0x40000, 0x1, 0x0, 0x1, 0x7}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) 13:07:52 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 13:07:52 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x59565955, 0x0, 0x0, [{}, {}, {0x7498}, {}, {}, {}, {0x0, 0xfffffffc}], 0x0, 0x0, 0x0, 0x2}}) 13:07:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) socketpair(0x10, 0x800, 0x20, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000c80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000004500)={0xb20, r2, 0x0, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_NAN_FUNC={0x2c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x0, 0xe, 0x0, 0x1, [{0x0, 0x0, "ae90be9e0add9e64861eb785b0ebe4c645fc18b5ab13f77ede18598808dbe8315472f1072384d2af2d920cb1c7ea23d24f9239866e86fe7d0e7c20dbe495ff2ae06760ef3bc0ba61680953d2990eecde1b38b9a093638f6e9947fb51a34771517a7d20d3fc287e2c7a937fdc8b3156e4609aa71f36e207977a1d0b68d4da6fc8189df00dfcdef48d7621554c3a6882ca8abcb92db96374c2a987e41925a3c6529f272f322b5d3f8a25105f03ceab5a46636553c380557b0a2e2995d67e3e44dd71b11e5ca571e6c4873ceaa2bdb40c2052c1d1c001f37002df81182f817cbaae20"}, {0x0, 0x0, "21123634c2848f955866c04e54900fbf0b8cb91ee412303c62488b695a7d951441de64e002dd85e8f3259fd13da65a173d408918f96832fe1b3e6eef9742dfaee6a6ec67c0954b81f1c48bbda6358c19f59762f8e3fbaeb77a6308789ba5cd0c02"}]}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "4b858fc4b181"}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x9}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x5}]}, @NL80211_ATTR_NAN_FUNC={0x28, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x3}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_SERVICE_ID={0x0, 0x2, "5441faefdd34"}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x9}]}, @NL80211_ATTR_NAN_FUNC={0x43c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xfb}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xe2}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x1}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x6}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x414, 0xe, 0x0, 0x1, [{0x28, 0x0, "eb6f9075cc56db86e1baecccf174d9cfde3ab93807fd3a9885ad5d810d1f5c306eda9411"}, {0xc2, 0x0, "817bc05a7fe8f82a2c12cedee2a6ba2e02499ed56d70ee652d6b838f5b4f21d51f57eea130663abaec08a5f7561f7755b96422d934fc116ff4d4d225ebf1a5fbdc326064b7d5fafb5e8cbfe70f7c199cd1ab997dc00a7bac6049d762c5d2d9bf3bad80387a2050a388b8bced4082cf67f44d82a89b0de57e38e913be356159075aecb7887ccf79620499c70273c34876bbc440f56552f19e71e074465c437398767f9f1746565e3aa1df91b651af4da4512b78bdd92a7c305d26c5ec5fff"}, {0xe9, 0x0, "3cc95a713b727a45ad3468c3af896ab8ebb82050a2355affbd752315a635f39133c7a659149b6ad1b942e06d3ab4f86eb57b9ac5398ae99c987aec7a96e8bfeca831eaf7241b99c7c34ffe5517c4dd9c0bf443b81edd255d35112cd9a3fccac0e5ad7585cf2c69dd4425564a13b10cb1f47a65e11d47b54becb06a867d25d62c4a4444a0a8458356c9126f4c54bd5c74374ce5aab3e1bc25825dde0c40d5450e4cdf1abb49480ba12858dbff28dfee1a6a1e84570c671ae8935a4fe41910e0ac9460ab158d56fd698eb60819469d24b5e51d8cdf471a5a624fe9a85411cf5a98528e6f4f3d"}, {0xcc, 0x0, "b4ec4e3ddb8c4ccd69b8fe21dfe57d3c8682f58c35e2cc58b644c430dccdf1974613e33ece3e2baa7b14ab9b0a1af4749c3bb93dad499f4907114bab47b0bae20b301c4bf63c1a7fdb300c4ba379a02068d0b42bacb0538a92967b5e355e906697e2b1ff2af5743b9319fb0ac4998d0d50ff2d44c7f63e7562a9734b88cb7bebc301db4c338792e9d260f55fa236331fab3705007efd26ce4a441cd780bd492648f034dba7e44ba674b37a3c56dd81c0972dced07db6f41f450fd6c5b09b0828170c0e89741b7cbd"}, {0xd0, 0x0, "9afc7779b11e7fcd8f4ad0583e44150d113eb3d1a59d7e33bae191721b09622823557f5b03f579fe896dba18883ed4da4272cb034425bc69d8585d0a1caf87fb626af7a27328fbbe13076d1d0c41b6ddcd26000bed76420ede7dd93d347dae439b0253f04d6ed0f556bbfa23dd1945630d8db7bc13f67e7da2aff13ba6822c1f8e0dfe56a3a69beb0e8271de15d2ecdd59cb4f6d0c22e0a36a8a7d07c2f3a12421bd8f9e6a5361e566beceaccf8b754f71cef6d0008998fcb3af5fc604dfcd4b45409e006936cedd674e3843"}, {0x60, 0x0, "78148ce6ecfe6e3379c19383ce0674193735a1dfd8f3c74f15369d98ce1403192d8015aff2ab6c89ab38d763edfc23e5ad3401bb09d84a5ac8f1439dad529310c053c28d622b30c10ab0b27685fa60f9c2a9394fcb74aa7efe25321a"}, {0x39, 0x0, "c4ccb0c052ee35d55264cb69faf95c9f50d7441a6bcbb6b872185464ba2823bb46f7ca53161628318bc52a745b9f702776e425fe57"}]}]}, @NL80211_ATTR_NAN_FUNC={0x18c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_SRF={0x17c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x58, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xffffff40}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x3f}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x0, 0x7, 0x3f}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x0, 0x7, 0x8}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST, @NL80211_NAN_FUNC_SERVICE_ID={0x0, 0x2, "0503df4ad2be"}, @NL80211_NAN_FUNC_TYPE]}, @NL80211_ATTR_NAN_FUNC={0x4c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x1}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xba}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xfffffe01}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "3fc5cd4bb006"}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x1f}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x9}]}, @NL80211_ATTR_NAN_FUNC={0x2fc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x2f8, 0xd, 0x0, 0x1, [{0x6f, 0x0, "ace5a4ae1586814e992fac00dbbc5277c5fc14a21823d8c3d5c11fefdfc1eb7261f2c26f2dc20ba7c15ad198bbc97de345ecc8b41a2c7e4f37b4ff4236867267be18e94f38b7249f539c4115785ec25a417ae2b111ab004f03a07b2f875d47e7f64daf11f666caa585e6a7"}, {0xd2, 0x0, "b39e1ff144fa583913392f556b563e959c5603e2e145909faa28e9a18434c28829b6c8c7bb6a236dc63285a56f3fc63da1944a746938cb01ba9308bc7cd5e03da4d879eca3e69f107046819a530670607a1f8b0aafceb1277611140b4cef23d2f7e0d9167894a177ec0e6a90f7f54d865ee325c67a0192c01b1f1cdf2736a1e28d53d67ae1ee90e3729e35eae6ba83bb3fbd8c6b087ad8c2e89600e3550ced9098b7de8bd97ed7b3ef730129e0bffd641074bed2ae6f33b9c83ac69fbef713ca754a2e4d187d5aae3a6fecf9163b"}, {0x9b, 0x0, "c7c1fc772dc5ff53d0b36c647aa41ef62cea8bf022efdb6371810326503a6ad17205057a4d56ba4a9b3a20cb715a5044d483cf13215def215aa124b8dd0dbc80740ca635e953a93bb40cc93c0c24229e7769d4469ad1004d85d67c490ca9d017c151857362ef3410a99d8bc1696fb3657f25ae30f8b5580159698a378f27c0ca0e7973ffdee226610094cd36fbaca48eb846eabfb1ec5c"}, {0x6, 0x0, "c372"}, {0x75, 0x0, "ff348c6a07c632373ff22d94236fc7f0410df7879186897948f48005afe2aff9ea2fb216bb2f8c63e28b77194e1aa5666e17929e2104624582a532d344485019b913c3e9192413cec61e1914adfd987cbae4c0ee5d5abdf863c78fdef13885915969a03feb74f19444e7620c39a18dd4bd"}, {0x94, 0x0, "a28fd8105f49cd0bb36bda89519cdb3e2dd47aeb4c4e0de996ddc9500f75aa295c25932d631dbf72968f77d57c2e87dc231e08fec9d5709aa08af66d9e53eb713a7f31fb250d71d72e8d7499371215c5e398d68a868b82296d51d577036a639706e572b8b71ec45ce6ef54b6df5c2c3377c658ea2d46b20f08d1ad1318127ccd56d363d252af8670fdd78a69d9d5fdd2"}]}]}, @NL80211_ATTR_NAN_FUNC={0x188, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x1}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "0800b6ecccf9"}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x16}, @NL80211_NAN_FUNC_SRF={0x150, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x34, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1f}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x1f}]}]}, 0xb20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 13:07:53 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x59565955, 0x0, 0x0, [{}, {}, {0x7498}, {}, {}, {}, {0x0, 0xfffffffc}], 0x0, 0x0, 0x0, 0x2}}) 13:07:53 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 13:07:53 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) socketpair(0x10, 0x800, 0x20, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000c80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000004500)={0xb20, r2, 0x0, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_NAN_FUNC={0x2c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x0, 0xe, 0x0, 0x1, [{0x0, 0x0, "ae90be9e0add9e64861eb785b0ebe4c645fc18b5ab13f77ede18598808dbe8315472f1072384d2af2d920cb1c7ea23d24f9239866e86fe7d0e7c20dbe495ff2ae06760ef3bc0ba61680953d2990eecde1b38b9a093638f6e9947fb51a34771517a7d20d3fc287e2c7a937fdc8b3156e4609aa71f36e207977a1d0b68d4da6fc8189df00dfcdef48d7621554c3a6882ca8abcb92db96374c2a987e41925a3c6529f272f322b5d3f8a25105f03ceab5a46636553c380557b0a2e2995d67e3e44dd71b11e5ca571e6c4873ceaa2bdb40c2052c1d1c001f37002df81182f817cbaae20"}, {0x0, 0x0, "21123634c2848f955866c04e54900fbf0b8cb91ee412303c62488b695a7d951441de64e002dd85e8f3259fd13da65a173d408918f96832fe1b3e6eef9742dfaee6a6ec67c0954b81f1c48bbda6358c19f59762f8e3fbaeb77a6308789ba5cd0c02"}]}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "4b858fc4b181"}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x9}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x5}]}, @NL80211_ATTR_NAN_FUNC={0x28, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x3}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_SERVICE_ID={0x0, 0x2, "5441faefdd34"}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x9}]}, @NL80211_ATTR_NAN_FUNC={0x43c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xfb}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xe2}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x1}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x6}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x414, 0xe, 0x0, 0x1, [{0x28, 0x0, "eb6f9075cc56db86e1baecccf174d9cfde3ab93807fd3a9885ad5d810d1f5c306eda9411"}, {0xc2, 0x0, "817bc05a7fe8f82a2c12cedee2a6ba2e02499ed56d70ee652d6b838f5b4f21d51f57eea130663abaec08a5f7561f7755b96422d934fc116ff4d4d225ebf1a5fbdc326064b7d5fafb5e8cbfe70f7c199cd1ab997dc00a7bac6049d762c5d2d9bf3bad80387a2050a388b8bced4082cf67f44d82a89b0de57e38e913be356159075aecb7887ccf79620499c70273c34876bbc440f56552f19e71e074465c437398767f9f1746565e3aa1df91b651af4da4512b78bdd92a7c305d26c5ec5fff"}, {0xe9, 0x0, "3cc95a713b727a45ad3468c3af896ab8ebb82050a2355affbd752315a635f39133c7a659149b6ad1b942e06d3ab4f86eb57b9ac5398ae99c987aec7a96e8bfeca831eaf7241b99c7c34ffe5517c4dd9c0bf443b81edd255d35112cd9a3fccac0e5ad7585cf2c69dd4425564a13b10cb1f47a65e11d47b54becb06a867d25d62c4a4444a0a8458356c9126f4c54bd5c74374ce5aab3e1bc25825dde0c40d5450e4cdf1abb49480ba12858dbff28dfee1a6a1e84570c671ae8935a4fe41910e0ac9460ab158d56fd698eb60819469d24b5e51d8cdf471a5a624fe9a85411cf5a98528e6f4f3d"}, {0xcc, 0x0, "b4ec4e3ddb8c4ccd69b8fe21dfe57d3c8682f58c35e2cc58b644c430dccdf1974613e33ece3e2baa7b14ab9b0a1af4749c3bb93dad499f4907114bab47b0bae20b301c4bf63c1a7fdb300c4ba379a02068d0b42bacb0538a92967b5e355e906697e2b1ff2af5743b9319fb0ac4998d0d50ff2d44c7f63e7562a9734b88cb7bebc301db4c338792e9d260f55fa236331fab3705007efd26ce4a441cd780bd492648f034dba7e44ba674b37a3c56dd81c0972dced07db6f41f450fd6c5b09b0828170c0e89741b7cbd"}, {0xd0, 0x0, "9afc7779b11e7fcd8f4ad0583e44150d113eb3d1a59d7e33bae191721b09622823557f5b03f579fe896dba18883ed4da4272cb034425bc69d8585d0a1caf87fb626af7a27328fbbe13076d1d0c41b6ddcd26000bed76420ede7dd93d347dae439b0253f04d6ed0f556bbfa23dd1945630d8db7bc13f67e7da2aff13ba6822c1f8e0dfe56a3a69beb0e8271de15d2ecdd59cb4f6d0c22e0a36a8a7d07c2f3a12421bd8f9e6a5361e566beceaccf8b754f71cef6d0008998fcb3af5fc604dfcd4b45409e006936cedd674e3843"}, {0x60, 0x0, "78148ce6ecfe6e3379c19383ce0674193735a1dfd8f3c74f15369d98ce1403192d8015aff2ab6c89ab38d763edfc23e5ad3401bb09d84a5ac8f1439dad529310c053c28d622b30c10ab0b27685fa60f9c2a9394fcb74aa7efe25321a"}, {0x39, 0x0, "c4ccb0c052ee35d55264cb69faf95c9f50d7441a6bcbb6b872185464ba2823bb46f7ca53161628318bc52a745b9f702776e425fe57"}]}]}, @NL80211_ATTR_NAN_FUNC={0x18c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_SRF={0x17c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x58, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xffffff40}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x3f}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "e29bfdb77012b0277d05284cce1cb52c0af8e62a685032a0dad27ce0e4401199aec1be0b570fe10464047fcf1852df02e83b8ba94f98a293ad91277e7f43f4baa1aaff0de14baf75c79ed07135dd073d5fdd439a5238fd4f88c62f6b8ac78de029579054f4cf4d06b7a9200b996e2a7259f62472d9ac56b76a3ab3cdf19a803e09e2541a613b911a950184b75de5ce8e86477486f201093155259b35f7154920a660f98ac9093f816ddd23f81c82a33112d034b044f82db49e6d51ac0e61afe91cf2958cd0183fd2b61a7efa7a308b4c296f2d3b3af0ffc5e53d3cf83513a0a09530a5f9f86b93147ef85ba13f49a5a736404900763f7b366b7169a9521152"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x0, 0x7, 0x3f}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x0, 0x7, 0x8}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST, @NL80211_NAN_FUNC_SERVICE_ID={0x0, 0x2, "0503df4ad2be"}, @NL80211_NAN_FUNC_TYPE]}, @NL80211_ATTR_NAN_FUNC={0x4c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x1}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xba}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xfffffe01}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "3fc5cd4bb006"}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x1f}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x9}]}, @NL80211_ATTR_NAN_FUNC={0x2fc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x2f8, 0xd, 0x0, 0x1, [{0x6f, 0x0, "ace5a4ae1586814e992fac00dbbc5277c5fc14a21823d8c3d5c11fefdfc1eb7261f2c26f2dc20ba7c15ad198bbc97de345ecc8b41a2c7e4f37b4ff4236867267be18e94f38b7249f539c4115785ec25a417ae2b111ab004f03a07b2f875d47e7f64daf11f666caa585e6a7"}, {0xd2, 0x0, "b39e1ff144fa583913392f556b563e959c5603e2e145909faa28e9a18434c28829b6c8c7bb6a236dc63285a56f3fc63da1944a746938cb01ba9308bc7cd5e03da4d879eca3e69f107046819a530670607a1f8b0aafceb1277611140b4cef23d2f7e0d9167894a177ec0e6a90f7f54d865ee325c67a0192c01b1f1cdf2736a1e28d53d67ae1ee90e3729e35eae6ba83bb3fbd8c6b087ad8c2e89600e3550ced9098b7de8bd97ed7b3ef730129e0bffd641074bed2ae6f33b9c83ac69fbef713ca754a2e4d187d5aae3a6fecf9163b"}, {0x9b, 0x0, "c7c1fc772dc5ff53d0b36c647aa41ef62cea8bf022efdb6371810326503a6ad17205057a4d56ba4a9b3a20cb715a5044d483cf13215def215aa124b8dd0dbc80740ca635e953a93bb40cc93c0c24229e7769d4469ad1004d85d67c490ca9d017c151857362ef3410a99d8bc1696fb3657f25ae30f8b5580159698a378f27c0ca0e7973ffdee226610094cd36fbaca48eb846eabfb1ec5c"}, {0x6, 0x0, "c372"}, {0x75, 0x0, "ff348c6a07c632373ff22d94236fc7f0410df7879186897948f48005afe2aff9ea2fb216bb2f8c63e28b77194e1aa5666e17929e2104624582a532d344485019b913c3e9192413cec61e1914adfd987cbae4c0ee5d5abdf863c78fdef13885915969a03feb74f19444e7620c39a18dd4bd"}, {0x94, 0x0, "a28fd8105f49cd0bb36bda89519cdb3e2dd47aeb4c4e0de996ddc9500f75aa295c25932d631dbf72968f77d57c2e87dc231e08fec9d5709aa08af66d9e53eb713a7f31fb250d71d72e8d7499371215c5e398d68a868b82296d51d577036a639706e572b8b71ec45ce6ef54b6df5c2c3377c658ea2d46b20f08d1ad1318127ccd56d363d252af8670fdd78a69d9d5fdd2"}]}]}, @NL80211_ATTR_NAN_FUNC={0x188, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x1}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "0800b6ecccf9"}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x16}, @NL80211_NAN_FUNC_SRF={0x150, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x34, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1f}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x1f}]}]}, 0xb20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) [ 740.846697] oom_reaper: reaped process 12899 (syz-executor.0), now anon-rss:0kB, file-rss:14332kB, shmem-rss:16kB [ 740.892181] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 740.904817] in:imklog cpuset=/ mems_allowed=0-1 [ 740.909579] CPU: 0 PID: 12887 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 740.917025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 740.926377] Call Trace: [ 740.928973] dump_stack+0x1fc/0x2ef [ 740.932602] dump_header+0x15d/0xc3f [ 740.936305] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 740.941391] ? ___ratelimit+0x319/0x590 [ 740.945349] oom_kill_process.cold+0x10/0x692 [ 740.949829] ? check_preemption_disabled+0x41/0x280 [ 740.954831] ? has_intersects_mems_allowed+0x1d6/0x290 [ 740.960093] out_of_memory+0x1072/0x1390 [ 740.964150] ? oom_killer_disable+0x270/0x270 [ 740.968641] ? mutex_trylock+0x15f/0x1a0 [ 740.972685] __alloc_pages_nodemask+0x23a2/0x2890 [ 740.977514] ? find_get_entry+0x4cd/0x8a0 [ 740.981651] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 740.986502] alloc_pages_current+0x193/0x2a0 [ 740.990893] filemap_fault+0x146e/0x2180 [ 740.994941] ext4_filemap_fault+0x84/0xb0 [ 740.999072] __do_fault+0x10b/0x4b0 [ 741.002695] __handle_mm_fault+0x273b/0x41c0 [ 741.007088] ? vm_insert_page+0x9c0/0x9c0 [ 741.011230] ? lock_downgrade+0x720/0x720 [ 741.015379] ? check_preemption_disabled+0x41/0x280 [ 741.020492] handle_mm_fault+0x436/0xb10 [ 741.024539] __do_page_fault+0x68e/0xd60 [ 741.028585] ? trace_hardirqs_off_caller+0x6e/0x210 [ 741.033582] ? spurious_fault+0x840/0x840 [ 741.037723] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 741.042563] ? page_fault+0x8/0x30 [ 741.046094] page_fault+0x1e/0x30 [ 741.049532] RIP: 0033:0x7fef741a722d [ 741.053235] Code: Bad RIP value. [ 741.056666] RSP: 002b:00007fef71b43580 EFLAGS: 00010293 [ 741.062011] RAX: 0000000000000078 RBX: 0000000000000000 RCX: 00007fef741a722d [ 741.069263] RDX: 0000000000001fa0 RSI: 00007fef71b43da0 RDI: 0000000000000004 [ 741.076522] RBP: 000055f7b35489d0 R08: 0000000000000000 R09: 0000000000000000 [ 741.083790] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007fef71b43da0 [ 741.091051] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007fef71b457ae [ 741.103049] Mem-Info: [ 741.105503] active_anon:18166 inactive_anon:12978 isolated_anon:0 [ 741.105503] active_file:12 inactive_file:13 isolated_file:0 [ 741.105503] unevictable:0 dirty:1 writeback:0 unstable:0 [ 741.105503] slab_reclaimable:15250 slab_unreclaimable:118463 [ 741.105503] mapped:22352 shmem:13602 pagetables:611 bounce:0 [ 741.105503] free:13820 free_pcp:587 free_cma:0 [ 741.108171] syz-executor.0: vmalloc: allocation failure, allocated 1759723520 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 741.154757] Node 0 active_anon:70756kB inactive_anon:19320kB active_file:44kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 741.166809] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 741.187331] Node 1 active_anon:1908kB inactive_anon:32592kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1540kB dirty:4kB writeback:0kB shmem:32792kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 741.200479] CPU: 1 PID: 12899 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 741.219811] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 741.223934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 741.254126] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 741.259413] Call Trace: [ 741.259435] dump_stack+0x1fc/0x2ef [ 741.259456] warn_alloc.cold+0x7b/0x18f [ 741.259475] ? zone_watermark_ok_safe+0x260/0x260 [ 741.259491] ? retint_kernel+0x2d/0x2d [ 741.264496] Node 0 DMA32 free:17768kB min:35996kB low:44992kB high:53988kB active_anon:70756kB inactive_anon:19320kB active_file:44kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7680kB pagetables:2228kB bounce:0kB free_pcp:436kB local_pcp:80kB free_cma:0kB [ 741.267092] __vmalloc_area_node+0x4fd/0x780 [ 741.274181] lowmem_reserve[]: 0 0 1 1 1 [ 741.274673] ? __vmalloc_node_range+0x180/0x180 [ 741.279534] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 741.283368] ? _raw_spin_unlock+0x29/0x40 [ 741.315712] lowmem_reserve[]: 0 0 0 0 0 [ 741.316649] ? __get_vm_area_node+0x2e2/0x3a0 [ 741.320662] Node 1 Normal free:26636kB min:53876kB low:67344kB high:80812kB active_anon:1908kB inactive_anon:32592kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:224kB pagetables:216kB bounce:0kB free_pcp:1904kB local_pcp:248kB free_cma:0kB [ 741.325293] __vmalloc_node_range+0xed/0x180 [ 741.355117] lowmem_reserve[]: 0 0 0 0 0 [ 741.355261] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 741.359274] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 741.363724] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 741.395998] Node 0 DMA32: 1960*4kB (UME) 775*8kB (UME) 183*16kB (UME) 25*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17768kB [ 741.396743] vmalloc_user+0x70/0xe0 [ 741.400745] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 741.404999] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 741.421788] Node 1 Normal: 217*4kB (UME) 177*8kB (ME) 148*16kB (UME) 97*32kB (UM) 49*64kB (M) 11*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (UE) 1*2048kB (E) 2*4096kB (U) = 26636kB [ 741.423625] vb2_vmalloc_alloc+0xb3/0x2f0 [ 741.441451] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 741.451911] __vb2_queue_alloc+0x472/0xe60 [ 741.451937] vb2_core_create_bufs+0x273/0x7e0 [ 741.451951] ? __vb2_queue_free+0x870/0x870 [ 741.451968] ? __video_do_ioctl+0x632/0xcd0 [ 741.456271] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 741.472911] ? __mutex_lock+0x368/0x1190 [ 741.472928] vb2_create_bufs+0x332/0x620 [ 741.472945] ? mark_held_locks+0xf0/0xf0 [ 741.472959] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 741.472975] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 741.472989] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 741.473010] v4l_create_bufs+0xb2/0x160 [ 741.479392] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 741.485981] __video_do_ioctl+0x49a/0xcd0 [ 741.491601] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 741.494705] ? v4l_querycap+0x340/0x340 [ 741.499051] 13627 total pagecache pages [ 741.503301] ? __might_fault+0x192/0x1d0 [ 741.515444] 0 pages in swap cache [ 741.515913] ? v4l_querycap+0x340/0x340 [ 741.519996] Swap cache stats: add 0, delete 0, find 0/0 [ 741.524001] video_usercopy+0x13f/0xfa0 [ 741.532531] Free swap = 0kB [ 741.534178] ? v4l_enumstd+0x60/0x60 [ 741.534193] ? do_futex+0x171/0x1880 [ 741.534208] ? mark_held_locks+0xf0/0xf0 [ 741.534224] ? debug_check_no_obj_freed+0x201/0x490 [ 741.534245] ? video_usercopy+0xfa0/0xfa0 [ 741.534255] v4l2_ioctl+0x147/0x1a0 [ 741.534267] ? video_devdata+0xa0/0xa0 [ 741.534283] do_vfs_ioctl+0xcdb/0x12e0 [ 741.534299] ? lock_downgrade+0x720/0x720 [ 741.534314] ? check_preemption_disabled+0x41/0x280 [ 741.534328] ? ioctl_preallocate+0x200/0x200 [ 741.534347] ? __fget+0x356/0x510 [ 741.534364] ? do_dup2+0x450/0x450 [ 741.534378] ? __se_sys_futex+0x298/0x3b0 [ 741.534401] ksys_ioctl+0x9b/0xc0 [ 741.534418] __x64_sys_ioctl+0x6f/0xb0 [ 741.534432] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 741.534447] do_syscall_64+0xf9/0x620 [ 741.534467] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 741.534479] RIP: 0033:0x7f68c24140f9 [ 741.534494] Code: Bad RIP value. [ 741.534502] RSP: 002b:00007f68c0986168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 741.534516] RAX: ffffffffffffffda RBX: 00007f68c2533f80 RCX: 00007f68c24140f9 [ 741.534524] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000006 [ 741.534532] RBP: 00007f68c246fae9 R08: 0000000000000000 R09: 0000000000000000 [ 741.534540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.534548] R13: 00007fff6155d44f R14: 00007f68c0986300 R15: 0000000000022000 [ 741.541449] Mem-Info: [ 741.552777] Total swap = 0kB [ 741.556601] active_anon:18166 inactive_anon:12978 isolated_anon:0 [ 741.556601] active_file:12 inactive_file:13 isolated_file:0 [ 741.556601] unevictable:0 dirty:1 writeback:0 unstable:0 [ 741.556601] slab_reclaimable:15250 slab_unreclaimable:118463 [ 741.556601] mapped:22352 shmem:13602 pagetables:611 bounce:0 [ 741.556601] free:13820 free_pcp:582 free_cma:0 [ 741.557028] 2097051 pages RAM [ 741.569044] Node 0 active_anon:70756kB inactive_anon:19320kB active_file:44kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21616kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 741.577757] 0 pages HighMem/MovableOnly [ 741.587741] Node 1 active_anon:1908kB inactive_anon:32592kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1540kB dirty:4kB writeback:0kB shmem:32792kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 741.598643] 369649 pages reserved [ 741.608283] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 741.613657] 0 pages cma reserved [ 741.614017] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 741.621627] Unreclaimable slab info: [ 741.628495] Node 0 DMA32 free:17768kB min:35996kB low:44992kB high:53988kB active_anon:70756kB inactive_anon:19320kB active_file:44kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7680kB pagetables:2228kB bounce:0kB free_pcp:424kB local_pcp:356kB free_cma:0kB [ 741.634352] Name Used Total [ 741.643357] lowmem_reserve[]: 0 0 1 1 1 [ 741.645846] pid_2 47KB 152KB [ 741.647167] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 741.656826] batadv_tt_change_cache 0KB 3KB [ 741.665322] lowmem_reserve[]: 0 0 0 0 0 [ 741.666825] batadv_tl_cache 5KB 12KB [ 741.670690] Node 1 Normal free:26636kB min:53876kB low:67344kB high:80812kB active_anon:1908kB inactive_anon:32592kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:224kB pagetables:216kB bounce:0kB free_pcp:1904kB local_pcp:1656kB free_cma:0kB [ 741.670723] lowmem_reserve[]: 0 0 0 0 0 [ 741.670740] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 741.682474] TIPC 12KB 15KB [ 741.689471] Node 0 DMA32: 1960*4kB (UME) 775*8kB (UME) 183*16kB (UME) 25*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17768kB [ 741.692612] SCTPv6 16KB 24KB [ 741.698339] net_ratelimit: 7 callbacks suppressed [ 741.698345] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 741.703035] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 741.711398] SCTP 5KB 7KB [ 741.712979] Node 1 Normal: 217*4kB (UME) 177*8kB (ME) 148*16kB (UME) 97*32kB (UM) 49*64kB (M) 11*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (UE) 1*2048kB (E) 2*4096kB (U) = 26636kB [ 741.724255] DCCPv6 17KB 22KB [ 741.734426] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 741.770315] DCCP 16KB 21KB [ 741.812111] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 741.828352] RXRPC 13KB 13KB [ 741.846499] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 741.858467] rxrpc_call_jar 90KB 94KB [ 741.875929] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 741.899165] bridge_fdb_cache 10KB 15KB [ 741.899187] fib6_nodes 184KB 188KB [ 741.899200] ip6_dst_cache 207KB 326KB [ 741.918409] 13627 total pagecache pages [ 741.944361] RAWv6 81KB 81KB [ 741.955370] 0 pages in swap cache [ 741.955585] UDPv6 30KB 37KB [ 741.995594] Swap cache stats: add 0, delete 0, find 0/0 [ 742.005038] TCPv6 36KB 36KB [ 742.007863] Free swap = 0kB [ 742.025410] nf_conntrack 12KB 18KB [ 742.034574] Total swap = 0kB [ 742.037602] t10_alua_lu_gp_cache 0KB 3KB [ 742.056670] 2097051 pages RAM [ 742.075934] sd_ext_cdb 0KB 7KB [ 742.082698] 0 pages HighMem/MovableOnly [ 742.085519] scsi_sense_cache 1056KB 1060KB [ 742.097872] 369649 pages reserved [ 742.106292] virtio_scsi_cmd 16KB 16KB [ 742.121762] 0 pages cma reserved [ 742.131231] sgpool-128 8KB 8KB [ 742.229732] sgpool-64 4KB 12KB [ 742.235109] sgpool-32 2KB 15KB [ 742.240524] sgpool-16 1KB 7KB [ 742.245886] sgpool-8 0KB 7KB [ 742.255093] mqueue_inode_cache 12KB 22KB [ 742.260753] bio_post_read_ctx 14KB 15KB [ 742.266189] bio-2 14KB 15KB [ 742.274826] jfs_mp 7KB 7KB [ 742.280284] cifs_small_rq 15KB 16KB [ 742.285645] cifs_request 67KB 67KB [ 742.294707] cifs_mpx_ids 0KB 7KB [ 742.300160] nfs_commit_data 3KB 14KB [ 742.305520] nfs_write_data 34KB 44KB [ 742.314403] ext4_system_zone 1KB 7KB [ 742.319880] bio-1 1KB 7KB [ 742.325251] pid_namespace 2KB 7KB [ 742.334020] rpc_buffers 17KB 25KB [ 742.339685] rpc_tasks 2KB 7KB [ 742.345050] UNIX 708KB 716KB [ 742.358264] tcp_bind_bucket 1KB 4KB [ 742.363655] ip_fib_trie 27KB 31KB [ 742.369114] ip_fib_alias 130KB 134KB [ 742.374488] ip_dst_cache 13KB 48KB [ 742.386603] RAW 48KB 52KB [ 742.392071] UDP 59KB 60KB [ 742.397437] TCP 19KB 22KB [ 742.409768] hugetlbfs_inode_cache 3KB 15KB [ 742.415491] fscache_cookie_jar 1KB 11KB [ 742.421010] eventpoll_pwq 29KB 47KB [ 742.426369] eventpoll_epi 54KB 66KB [ 742.446392] inotify_inode_mark 17KB 55KB [ 742.451916] request_queue 199KB 199KB [ 742.457280] blkdev_requests 1KB 3KB [ 742.471041] blkdev_ioc 27KB 34KB [ 742.476437] bio-0 1511KB 1537KB [ 742.484395] biovec-max 1674KB 1699KB [ 742.495563] biovec-64 1400KB 1464KB [ 742.503457] biovec-16 123KB 131KB [ 742.514502] bio_integrity_payload 1KB 8KB [ 742.522761] khugepaged_mm_slot 9KB 34KB [ 742.533645] uid_cache 0KB 4KB [ 742.541429] dmaengine-unmap-2 0KB 3KB [ 742.546801] skbuff_fclone_cache 93KB 206KB [ 742.560659] skbuff_head_cache 7471KB 7473KB [ 742.566080] configfs_dir_cache 3KB 11KB [ 742.573931] file_lock_cache 62KB 186KB [ 742.585673] file_lock_ctx 9KB 11KB [ 742.593434] fsnotify_mark_connector 9KB 31KB [ 742.605431] net_namespace 61KB 61KB [ 742.613191] shmem_inode_cache 8108KB 8388KB [ 742.624757] task_delay_info 185KB 407KB [ 742.632487] taskstats 66KB 179KB [ 742.643998] proc_dir_entry 759KB 761KB [ 742.651814] pde_opener 10KB 58KB [ 742.657185] seq_file 316KB 539KB [ 742.670980] sigqueue 54KB 55KB [ 742.676360] kernfs_node_cache 18234KB 18250KB [ 742.684229] mnt_cache 190KB 192KB [ 742.695471] filp 7201KB 7631KB [ 742.703456] names_cache 135876KB 135936KB [ 742.714540] iint_cache 44KB 71KB [ 742.722428] key_jar 4KB 11KB [ 742.733526] uts_namespace 3KB 7KB [ 742.741485] nsproxy 1KB 7KB [ 742.746864] vm_area_struct 3395KB 5100KB [ 742.760563] mm_struct 422KB 936KB [ 742.765956] fs_cache 144KB 364KB [ 742.774161] files_cache 495KB 753KB [ 742.785565] signal_cache 1035KB 1717KB [ 742.793359] sighand_cache 536KB 603KB [ 742.804917] task_struct 6268KB 6268KB [ 742.812699] cred_jar 1985KB 2096KB [ 742.824255] anon_vma_chain 1109KB 1803KB [ 742.832156] anon_vma 150KB 269KB [ 742.837526] pid 82KB 264KB [ 742.851547] Acpi-Operand 156KB 202KB [ 742.864189] Acpi-ParseExt 8KB 11KB [ 742.872786] Acpi-Parse 41KB 47KB [ 742.880861] Acpi-State 52KB 63KB [ 742.886324] Acpi-Namespace 21KB 27KB [ 742.894357] numa_policy 0KB 3KB [ 742.902279] debug_objects_cache 1219KB 1595KB [ 742.910769] trace_event_file 297KB 298KB [ 742.916207] ftrace_event_field 398KB 401KB [ 742.924247] pool_workqueue 128KB 128KB [ 742.932234] page->ptl 497KB 1047KB [ 742.937706] kmalloc-2097152 2050KB 2050KB [ 742.946150] kmalloc-524288 2056KB 2056KB [ 742.954622] kmalloc-262144 1290KB 1290KB [ 742.963649] kmalloc-131072 650KB 650KB [ 742.972067] kmalloc-65536 2112KB 2178KB [ 742.980925] kmalloc-32768 1815KB 1815KB [ 742.986917] kmalloc-16384 1155KB 1155KB [ 742.994810] kmalloc-8192 4455KB 4496KB [ 743.002595] kmalloc-4096 22265KB 22265KB [ 743.010746] kmalloc-2048 12484KB 13381KB [ 743.016114] kmalloc-1024 7522KB 7953KB [ 743.023907] kmalloc-512 15535KB 15536KB [ 743.031704] kmalloc-256 4507KB 5317KB [ 743.037075] kmalloc-128 979KB 1488KB [ 743.045027] kmalloc-96 3594KB 4020KB [ 743.052783] kmalloc-64 2416KB 4228KB [ 743.060568] kmalloc-32 1863KB 2445KB [ 743.066013] kmalloc-192 1702KB 2288KB [ 743.074425] kmem_cache 177KB 183KB [ 743.082221] Out of memory (oom_kill_allocating_task): Kill process 12887 (in:imklog) score 0 or sacrifice child [ 743.095245] Killed process 12885 (rsyslogd) total-vm:254332kB, anon-rss:516kB, file-rss:0kB, shmem-rss:0kB [ 743.109348] oom_reaper: reaped process 12885 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 13:08:00 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x6}]}}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x2, 0x2, 0x0, 0x4800}) 13:08:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_SSID={0x15, 0x34, @random="93388aaa8e929b9ccdf5660a6a3b123fd4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xbb, 0x401, 0x34324948, 0x9, 0x3, 0x9, 0x7, 0x40000, 0x1, 0x0, 0x1, 0x7}}) 13:08:03 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x7, 0x34325842, 0x6, 0xb, [{0x8, 0x7}, {0xfffffc34, 0x6}, {0x2, 0x7315}, {0x300000, 0x80000000}, {0xc67, 0x5}, {0x80000000, 0x4b1}, {0x0, 0x9}, {0x9d, 0x7}], 0x0, 0x7f, 0x6, 0x2, 0x1}}) 13:08:03 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 13:08:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x6}]}}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x2, 0x2, 0x0, 0x4800}) 13:08:03 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000200)={0x1, @win={{0x5, 0x2906, 0x9, 0x1}, 0x9, 0xfffffffc, &(0x7f0000000340)={{0x3, 0x10000, 0x9, 0x8}, &(0x7f0000000300)={{0x1, 0x800, 0x6, 0x10000}}}, 0x4, &(0x7f0000000380)="6447629fa1e7aa630001728b1cc39b38329651df84609874e040c448f980713e9cc3f139fb90c17e407b4dd82d6d867391c31201b74bf6aff5832a47f5879b046367f248cc9c2177611ba89ad2475cb5a311fdd0746b139b061e36a3e11bbf64e6ca8cdcfd4c1250ed9aceda7f7aa3845bff6fa35c7d7913768104665472340e3a9054f93105c6f888cf570ddbeb787a40de256896235f26e868f68d70e0259ca10f207a7e3dca4b052d8f850ebb847f6c9e7802c28a374c6b1f27bc8fe2c552d3af7ce75589bfcb", 0x3f}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x9bb3}]}}) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000140)=@multiplanar_userptr={0xb2c2, 0x6, 0x4, 0x0, 0x1, {0x0, 0x2710}, {0x4, 0x8, 0xc8, 0x40, 0x2, 0x8, "15e82d36"}, 0x5, 0x2, {&(0x7f00000000c0)=[{0x3, 0x6, {&(0x7f0000000040)}, 0x1455}, {0xffffffff, 0x6, {&(0x7f0000000080)}, 0x8}]}, 0xffff}) 13:08:03 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x7, 0x34325842, 0x6, 0xb, [{0x8, 0x7}, {0xfffffc34, 0x6}, {0x2, 0x7315}, {0x300000, 0x80000000}, {0xc67, 0x5}, {0x80000000, 0x4b1}, {0x0, 0x9}, {0x9d, 0x7}], 0x0, 0x7f, 0x6, 0x2, 0x1}}) 13:08:03 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x0, 0x80000001, 0x4, 0x4000}) 13:08:03 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) socketpair(0x10, 0x800, 0x20, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000c80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000004500)={0xb20, r2, 0x0, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_NAN_FUNC={0x2c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x0, 0xe, 0x0, 0x1, [{0x0, 0x0, "ae90be9e0add9e64861eb785b0ebe4c645fc18b5ab13f77ede18598808dbe8315472f1072384d2af2d920cb1c7ea23d24f9239866e86fe7d0e7c20dbe495ff2ae06760ef3bc0ba61680953d2990eecde1b38b9a093638f6e9947fb51a34771517a7d20d3fc287e2c7a937fdc8b3156e4609aa71f36e207977a1d0b68d4da6fc8189df00dfcdef48d7621554c3a6882ca8abcb92db96374c2a987e41925a3c6529f272f322b5d3f8a25105f03ceab5a46636553c380557b0a2e2995d67e3e44dd71b11e5ca571e6c4873ceaa2bdb40c2052c1d1c001f37002df81182f817cbaae20"}, {0x0, 0x0, "21123634c2848f955866c04e54900fbf0b8cb91ee412303c62488b695a7d951441de64e002dd85e8f3259fd13da65a173d408918f96832fe1b3e6eef9742dfaee6a6ec67c0954b81f1c48bbda6358c19f59762f8e3fbaeb77a6308789ba5cd0c02"}]}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "4b858fc4b181"}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x9}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x5}]}, @NL80211_ATTR_NAN_FUNC={0x28, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x3}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_SERVICE_ID={0x0, 0x2, "5441faefdd34"}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x9}]}, @NL80211_ATTR_NAN_FUNC={0x43c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xfb}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xe2}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x1}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x6}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x414, 0xe, 0x0, 0x1, [{0x28, 0x0, "eb6f9075cc56db86e1baecccf174d9cfde3ab93807fd3a9885ad5d810d1f5c306eda9411"}, {0xc2, 0x0, "817bc05a7fe8f82a2c12cedee2a6ba2e02499ed56d70ee652d6b838f5b4f21d51f57eea130663abaec08a5f7561f7755b96422d934fc116ff4d4d225ebf1a5fbdc326064b7d5fafb5e8cbfe70f7c199cd1ab997dc00a7bac6049d762c5d2d9bf3bad80387a2050a388b8bced4082cf67f44d82a89b0de57e38e913be356159075aecb7887ccf79620499c70273c34876bbc440f56552f19e71e074465c437398767f9f1746565e3aa1df91b651af4da4512b78bdd92a7c305d26c5ec5fff"}, {0xe9, 0x0, "3cc95a713b727a45ad3468c3af896ab8ebb82050a2355affbd752315a635f39133c7a659149b6ad1b942e06d3ab4f86eb57b9ac5398ae99c987aec7a96e8bfeca831eaf7241b99c7c34ffe5517c4dd9c0bf443b81edd255d35112cd9a3fccac0e5ad7585cf2c69dd4425564a13b10cb1f47a65e11d47b54becb06a867d25d62c4a4444a0a8458356c9126f4c54bd5c74374ce5aab3e1bc25825dde0c40d5450e4cdf1abb49480ba12858dbff28dfee1a6a1e84570c671ae8935a4fe41910e0ac9460ab158d56fd698eb60819469d24b5e51d8cdf471a5a624fe9a85411cf5a98528e6f4f3d"}, {0xcc, 0x0, "b4ec4e3ddb8c4ccd69b8fe21dfe57d3c8682f58c35e2cc58b644c430dccdf1974613e33ece3e2baa7b14ab9b0a1af4749c3bb93dad499f4907114bab47b0bae20b301c4bf63c1a7fdb300c4ba379a02068d0b42bacb0538a92967b5e355e906697e2b1ff2af5743b9319fb0ac4998d0d50ff2d44c7f63e7562a9734b88cb7bebc301db4c338792e9d260f55fa236331fab3705007efd26ce4a441cd780bd492648f034dba7e44ba674b37a3c56dd81c0972dced07db6f41f450fd6c5b09b0828170c0e89741b7cbd"}, {0xd0, 0x0, "9afc7779b11e7fcd8f4ad0583e44150d113eb3d1a59d7e33bae191721b09622823557f5b03f579fe896dba18883ed4da4272cb034425bc69d8585d0a1caf87fb626af7a27328fbbe13076d1d0c41b6ddcd26000bed76420ede7dd93d347dae439b0253f04d6ed0f556bbfa23dd1945630d8db7bc13f67e7da2aff13ba6822c1f8e0dfe56a3a69beb0e8271de15d2ecdd59cb4f6d0c22e0a36a8a7d07c2f3a12421bd8f9e6a5361e566beceaccf8b754f71cef6d0008998fcb3af5fc604dfcd4b45409e006936cedd674e3843"}, {0x60, 0x0, "78148ce6ecfe6e3379c19383ce0674193735a1dfd8f3c74f15369d98ce1403192d8015aff2ab6c89ab38d763edfc23e5ad3401bb09d84a5ac8f1439dad529310c053c28d622b30c10ab0b27685fa60f9c2a9394fcb74aa7efe25321a"}, {0x39, 0x0, "c4ccb0c052ee35d55264cb69faf95c9f50d7441a6bcbb6b872185464ba2823bb46f7ca53161628318bc52a745b9f702776e425fe57"}]}]}, @NL80211_ATTR_NAN_FUNC={0x18c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_SRF={0x17c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x58, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xffffff40}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x3f}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x0, 0x7, 0x3f}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x0, 0x7, 0x8}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST, @NL80211_NAN_FUNC_SERVICE_ID={0x0, 0x2, "0503df4ad2be"}, @NL80211_NAN_FUNC_TYPE]}, @NL80211_ATTR_NAN_FUNC={0x4c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x1}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xba}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xfffffe01}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "3fc5cd4bb006"}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x1f}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x9}]}, @NL80211_ATTR_NAN_FUNC={0x2fc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x2f8, 0xd, 0x0, 0x1, [{0x6f, 0x0, "ace5a4ae1586814e992fac00dbbc5277c5fc14a21823d8c3d5c11fefdfc1eb7261f2c26f2dc20ba7c15ad198bbc97de345ecc8b41a2c7e4f37b4ff4236867267be18e94f38b7249f539c4115785ec25a417ae2b111ab004f03a07b2f875d47e7f64daf11f666caa585e6a7"}, {0xd2, 0x0, "b39e1ff144fa583913392f556b563e959c5603e2e145909faa28e9a18434c28829b6c8c7bb6a236dc63285a56f3fc63da1944a746938cb01ba9308bc7cd5e03da4d879eca3e69f107046819a530670607a1f8b0aafceb1277611140b4cef23d2f7e0d9167894a177ec0e6a90f7f54d865ee325c67a0192c01b1f1cdf2736a1e28d53d67ae1ee90e3729e35eae6ba83bb3fbd8c6b087ad8c2e89600e3550ced9098b7de8bd97ed7b3ef730129e0bffd641074bed2ae6f33b9c83ac69fbef713ca754a2e4d187d5aae3a6fecf9163b"}, {0x9b, 0x0, "c7c1fc772dc5ff53d0b36c647aa41ef62cea8bf022efdb6371810326503a6ad17205057a4d56ba4a9b3a20cb715a5044d483cf13215def215aa124b8dd0dbc80740ca635e953a93bb40cc93c0c24229e7769d4469ad1004d85d67c490ca9d017c151857362ef3410a99d8bc1696fb3657f25ae30f8b5580159698a378f27c0ca0e7973ffdee226610094cd36fbaca48eb846eabfb1ec5c"}, {0x6, 0x0, "c372"}, {0x75, 0x0, "ff348c6a07c632373ff22d94236fc7f0410df7879186897948f48005afe2aff9ea2fb216bb2f8c63e28b77194e1aa5666e17929e2104624582a532d344485019b913c3e9192413cec61e1914adfd987cbae4c0ee5d5abdf863c78fdef13885915969a03feb74f19444e7620c39a18dd4bd"}, {0x94, 0x0, "a28fd8105f49cd0bb36bda89519cdb3e2dd47aeb4c4e0de996ddc9500f75aa295c25932d631dbf72968f77d57c2e87dc231e08fec9d5709aa08af66d9e53eb713a7f31fb250d71d72e8d7499371215c5e398d68a868b82296d51d577036a639706e572b8b71ec45ce6ef54b6df5c2c3377c658ea2d46b20f08d1ad1318127ccd56d363d252af8670fdd78a69d9d5fdd2"}]}]}, @NL80211_ATTR_NAN_FUNC={0x188, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x1}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "0800b6ecccf9"}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x16}, @NL80211_NAN_FUNC_SRF={0x150, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x34, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1f}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x1f}]}]}, 0xb20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 13:08:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x6}]}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x6}]}}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x2, 0x2, 0x0, 0x4800}) 13:08:03 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x7, 0x34325842, 0x6, 0xb, [{0x8, 0x7}, {0xfffffc34, 0x6}, {0x2, 0x7315}, {0x300000, 0x80000000}, {0xc67, 0x5}, {0x80000000, 0x4b1}, {0x0, 0x9}, {0x9d, 0x7}], 0x0, 0x7f, 0x6, 0x2, 0x1}}) 13:08:03 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x0, 0x80000001, 0x4, 0x4000}) 13:08:03 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x3, @win={{0x29a7, 0x9, 0x7ff, 0xffffffff}, 0x6, 0x2, &(0x7f0000000000)={{0x1f, 0x2000000, 0x3, 0x1000}}, 0xbaa, &(0x7f0000000040)="a017295552323d72ad528dadfe63e60d97b67582d3dc389992e3f52bc590cb4a077a3264a3814b465d259a907a79296bb7369978899dd6ea259543a77a40c8bc3b77b96b8ae3c80b5b1ac887c7e5d27db185aa94d91fda03185fb284f1e37a99ca4dee12b77c663a5108c2ae2f4d98244bc5c16f667a4ef3a0316dc5068ba2eb5ab03134b6dc5dbe070aa40a29c687c2a0fa67bc2932466ff1ac798a8b9bdc7a0947382fa4d0948ce9e5e9a3455ed976405e5999572b12fa87d929983a2f22236cbf0f660eca575d983f3d7adba29e9db036297a4885ff63c598dd3b", 0x8}}) [ 748.111197] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.116801] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.602799] oom_reaper: reaped process 12967 (syz-executor.0), now anon-rss:0kB, file-rss:14336kB, shmem-rss:16kB [ 751.627209] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 751.643265] in:imklog cpuset=/ mems_allowed=0-1 [ 751.648017] CPU: 1 PID: 12942 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 751.655465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 751.664826] Call Trace: [ 751.667423] dump_stack+0x1fc/0x2ef [ 751.671057] dump_header+0x15d/0xc3f [ 751.674777] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 751.679884] ? ___ratelimit+0x319/0x590 [ 751.683870] oom_kill_process.cold+0x10/0x692 [ 751.688398] ? check_preemption_disabled+0x41/0x280 [ 751.693422] ? has_intersects_mems_allowed+0x1d6/0x290 [ 751.698706] out_of_memory+0x1072/0x1390 [ 751.702778] ? oom_killer_disable+0x270/0x270 [ 751.707371] ? mutex_trylock+0x15f/0x1a0 [ 751.711442] __alloc_pages_nodemask+0x23a2/0x2890 [ 751.716296] ? find_get_entry+0x4cd/0x8a0 [ 751.720457] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 751.725322] alloc_pages_current+0x193/0x2a0 [ 751.729730] filemap_fault+0x146e/0x2180 [ 751.733805] ext4_filemap_fault+0x84/0xb0 [ 751.737962] __do_fault+0x10b/0x4b0 [ 751.741592] __handle_mm_fault+0x273b/0x41c0 [ 751.746007] ? vm_insert_page+0x9c0/0x9c0 [ 751.750160] ? lock_downgrade+0x720/0x720 [ 751.754306] ? check_preemption_disabled+0x41/0x280 [ 751.759331] handle_mm_fault+0x436/0xb10 [ 751.763389] __do_page_fault+0x68e/0xd60 [ 751.767406] syz-executor.0: vmalloc: allocation failure, allocated 1760366592 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 751.767448] ? trace_hardirqs_off_caller+0x6e/0x210 [ 751.784764] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 751.786224] ? spurious_fault+0x840/0x840 [ 751.795547] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 751.800392] ? page_fault+0x8/0x30 [ 751.803931] page_fault+0x1e/0x30 [ 751.807376] RIP: 0033:0x7f7eec2bf22d [ 751.811081] Code: Bad RIP value. [ 751.814434] RSP: 002b:00007f7ee9c5b580 EFLAGS: 00010293 [ 751.819794] RAX: 0000000000000078 RBX: 0000000000000000 RCX: 00007f7eec2bf22d [ 751.827075] RDX: 0000000000001fa0 RSI: 00007f7ee9c5bda0 RDI: 0000000000000004 [ 751.834339] RBP: 000056139a2c79d0 R08: 0000000000000000 R09: 0000000000000000 [ 751.841595] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007f7ee9c5bda0 [ 751.849319] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f7ee9c5be20 [ 751.856626] CPU: 0 PID: 12967 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 751.864616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 751.866319] Mem-Info: [ 751.874012] Call Trace: [ 751.874033] dump_stack+0x1fc/0x2ef [ 751.874054] warn_alloc.cold+0x7b/0x18f [ 751.874071] ? zone_watermark_ok_safe+0x260/0x260 [ 751.874088] ? retint_kernel+0x2d/0x2d [ 751.878926] active_anon:17120 inactive_anon:12978 isolated_anon:0 [ 751.878926] active_file:13 inactive_file:13 isolated_file:0 [ 751.878926] unevictable:0 dirty:0 writeback:0 unstable:0 [ 751.878926] slab_reclaimable:15252 slab_unreclaimable:118741 [ 751.878926] mapped:22384 shmem:13602 pagetables:580 bounce:0 [ 751.878926] free:13942 free_pcp:1148 free_cma:0 [ 751.879088] __vmalloc_area_node+0x4fd/0x780 [ 751.882694] Node 0 active_anon:66668kB inactive_anon:19324kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21620kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 751.886655] ? __vmalloc_node_range+0x180/0x180 [ 751.891673] Node 1 active_anon:1812kB inactive_anon:32588kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1668kB dirty:0kB writeback:0kB shmem:32788kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 751.895514] ? _raw_spin_unlock+0x29/0x40 [ 751.928839] Node 0 DMA free:10880kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 751.933476] ? __get_vm_area_node+0x2e2/0x3a0 [ 751.961140] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 751.965781] __vmalloc_node_range+0xed/0x180 [ 751.994630] Node 0 DMA32 free:17864kB min:35996kB low:44992kB high:53988kB active_anon:66668kB inactive_anon:19324kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:2100kB bounce:0kB free_pcp:2136kB local_pcp:508kB free_cma:0kB [ 751.997444] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 751.997461] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 751.997479] vmalloc_user+0x70/0xe0 [ 752.023588] lowmem_reserve[]: 0 0 1 1 1 [ 752.028055] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 752.028069] vb2_vmalloc_alloc+0xb3/0x2f0 [ 752.028085] __vb2_queue_alloc+0x472/0xe60 [ 752.033084] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 752.037941] vb2_core_create_bufs+0x273/0x7e0 [ 752.037959] ? __vb2_queue_free+0x870/0x870 [ 752.066939] lowmem_reserve[]: 0 0 0 0 0 [ 752.071232] ? __video_do_ioctl+0x632/0xcd0 [ 752.071256] ? __mutex_lock+0x368/0x1190 [ 752.076596] Node 1 Normal free:26764kB min:53876kB low:67344kB high:80812kB active_anon:1812kB inactive_anon:32588kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:224kB pagetables:220kB bounce:0kB free_pcp:2704kB local_pcp:1592kB free_cma:0kB [ 752.080215] vb2_create_bufs+0x332/0x620 [ 752.080233] ? mark_held_locks+0xf0/0xf0 [ 752.080246] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 752.080265] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 752.080283] v4l_create_bufs+0xb2/0x160 [ 752.080300] __video_do_ioctl+0x49a/0xcd0 [ 752.080321] ? v4l_querycap+0x340/0x340 [ 752.080342] ? __might_fault+0x192/0x1d0 [ 752.080359] ? v4l_querycap+0x340/0x340 [ 752.080376] video_usercopy+0x13f/0xfa0 [ 752.080398] ? v4l_enumstd+0x60/0x60 [ 752.080413] ? do_futex+0x171/0x1880 [ 752.080429] ? mark_held_locks+0xf0/0xf0 [ 752.080448] ? debug_check_no_obj_freed+0x201/0x490 [ 752.080471] ? video_usercopy+0xfa0/0xfa0 [ 752.080484] v4l2_ioctl+0x147/0x1a0 [ 752.080497] ? video_devdata+0xa0/0xa0 [ 752.080513] do_vfs_ioctl+0xcdb/0x12e0 [ 752.080529] ? lock_downgrade+0x720/0x720 [ 752.080545] ? check_preemption_disabled+0x41/0x280 [ 752.080559] ? ioctl_preallocate+0x200/0x200 [ 752.080577] ? __fget+0x356/0x510 [ 752.080594] ? do_dup2+0x450/0x450 [ 752.080609] ? __se_sys_futex+0x298/0x3b0 [ 752.080631] ksys_ioctl+0x9b/0xc0 [ 752.080648] __x64_sys_ioctl+0x6f/0xb0 [ 752.080662] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 752.080677] do_syscall_64+0xf9/0x620 [ 752.080696] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 752.080708] RIP: 0033:0x7f68c24140f9 [ 752.080723] Code: Bad RIP value. [ 752.080731] RSP: 002b:00007f68c0986168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 752.080746] RAX: ffffffffffffffda RBX: 00007f68c2533f80 RCX: 00007f68c24140f9 [ 752.084697] lowmem_reserve[]: 0 0 0 0 0 [ 752.089010] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000006 [ 752.089023] RBP: 00007f68c246fae9 R08: 0000000000000000 R09: 0000000000000000 [ 752.089031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 752.089042] R13: 00007fff6155d44f R14: 00007f68c0986300 R15: 0000000000022000 [ 752.093166] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10880kB [ 752.101040] Mem-Info: [ 752.128885] Node 0 DMA32: 1802*4kB (ME) 766*8kB (ME) 193*16kB (UME) 37*32kB (UME) 4*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17864kB [ 752.135768] active_anon:17120 inactive_anon:12978 isolated_anon:0 [ 752.135768] active_file:13 inactive_file:13 isolated_file:0 [ 752.135768] unevictable:0 dirty:0 writeback:0 unstable:0 [ 752.135768] slab_reclaimable:15252 slab_unreclaimable:118741 [ 752.135768] mapped:22384 shmem:13602 pagetables:580 bounce:0 [ 752.135768] free:13879 free_pcp:1210 free_cma:0 [ 752.136231] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 752.140647] Node 0 active_anon:66668kB inactive_anon:19324kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21620kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 752.140671] Node 1 active_anon:1812kB inactive_anon:32588kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1668kB dirty:0kB writeback:0kB shmem:32788kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 752.140679] Node 0 DMA free:10880kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 752.156485] Node 1 Normal: 269*4kB (ME) 221*8kB (UM) 163*16kB (ME) 96*32kB (UM) 39*64kB (UM) 7*128kB (UME) 2*256kB (UE) 2*512kB (ME) 1*1024kB (E) 2*2048kB (UE) 2*4096kB (U) = 26764kB [ 752.177738] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 752.188470] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 752.192537] Node 0 DMA32 free:17864kB min:35996kB low:44992kB high:53988kB active_anon:66668kB inactive_anon:19324kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:2100kB bounce:0kB free_pcp:2136kB local_pcp:1628kB free_cma:0kB [ 752.196414] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 752.196427] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 752.204102] lowmem_reserve[]: 0 0 1 1 1 [ 752.215066] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 752.216745] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 752.220573] 13628 total pagecache pages [ 752.220585] 0 pages in swap cache [ 752.220593] Swap cache stats: add 0, delete 0, find 0/0 [ 752.220598] Free swap = 0kB [ 752.220607] Total swap = 0kB [ 752.226754] lowmem_reserve[]: 0 0 0 0 0 [ 752.237058] 2097051 pages RAM [ 752.240248] Node 1 Normal free:26764kB min:53876kB low:67344kB high:80812kB active_anon:1812kB inactive_anon:32588kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:224kB pagetables:220kB bounce:0kB free_pcp:2704kB local_pcp:1112kB free_cma:0kB [ 752.241829] 0 pages HighMem/MovableOnly [ 752.245692] lowmem_reserve[]: 0 0 0 0 0 [ 752.257725] 369649 pages reserved [ 752.265603] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10880kB [ 752.266605] 0 pages cma reserved [ 752.270187] Node 0 DMA32: 1802*4kB (ME) 766*8kB (ME) 193*16kB (UME) 37*32kB (UME) 4*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17864kB [ 752.270256] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 752.281141] Unreclaimable slab info: [ 752.287642] Node 1 Normal: 269*4kB (ME) 221*8kB (UM) 163*16kB (ME) 96*32kB (UM) 39*64kB (UM) 7*128kB (UME) 2*256kB (UE) 2*512kB (ME) 1*1024kB (E) 2*2048kB (UE) 2*4096kB (U) = 26764kB [ 752.292940] Name Used Total [ 752.295957] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 752.303533] pid_2 43KB 152KB [ 752.315319] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 752.326184] batadv_tt_change_cache 0KB 3KB [ 752.336247] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 752.336722] batadv_tl_cache 5KB 12KB [ 752.344041] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 752.344048] 13628 total pagecache pages [ 752.344062] 0 pages in swap cache [ 752.344069] Swap cache stats: add 0, delete 0, find 0/0 [ 752.344075] Free swap = 0kB [ 752.344079] Total swap = 0kB [ 752.344088] 2097051 pages RAM [ 752.344096] 0 pages HighMem/MovableOnly [ 752.359919] TIPC 12KB 15KB [ 752.370427] 369649 pages reserved [ 752.388808] SCTPv6 16KB 24KB [ 752.420642] 0 pages cma reserved [ 752.432652] SCTP 5KB 7KB [ 752.860449] DCCPv6 17KB 22KB [ 752.865818] DCCP 16KB 21KB [ 752.871276] RXRPC 13KB 13KB [ 752.876640] rxrpc_call_jar 90KB 94KB [ 752.882048] bridge_fdb_cache 10KB 15KB [ 752.887520] fib6_nodes 183KB 188KB [ 752.892883] ip6_dst_cache 232KB 326KB [ 752.898289] RAWv6 81KB 81KB [ 752.905414] UDPv6 30KB 37KB [ 752.910846] TCPv6 36KB 42KB [ 752.916215] nf_conntrack 9KB 18KB [ 752.921703] t10_alua_lu_gp_cache 0KB 3KB [ 752.927365] sd_ext_cdb 0KB 7KB [ 752.932728] scsi_sense_cache 1056KB 1060KB [ 752.938129] virtio_scsi_cmd 16KB 16KB [ 752.943492] sgpool-128 8KB 8KB [ 752.948888] sgpool-64 4KB 12KB [ 752.954247] sgpool-32 2KB 15KB [ 752.959640] sgpool-16 1KB 7KB [ 752.964998] sgpool-8 0KB 7KB [ 752.970414] mqueue_inode_cache 12KB 22KB [ 752.975871] bio_post_read_ctx 14KB 15KB [ 752.981328] bio-2 14KB 15KB [ 752.986691] jfs_mp 7KB 7KB [ 752.992151] cifs_small_rq 15KB 16KB [ 752.997553] cifs_request 67KB 67KB [ 753.004733] cifs_mpx_ids 0KB 7KB [ 753.010449] nfs_commit_data 3KB 14KB [ 753.015835] nfs_write_data 34KB 44KB [ 753.021296] ext4_system_zone 1KB 7KB [ 753.026688] bio-1 1KB 7KB [ 753.032108] pid_namespace 2KB 7KB [ 753.037530] rpc_buffers 17KB 25KB [ 753.042891] rpc_tasks 2KB 7KB [ 753.048295] UNIX 738KB 742KB [ 753.053678] tcp_bind_bucket 1KB 4KB [ 753.059122] ip_fib_trie 27KB 31KB [ 753.064486] ip_fib_alias 130KB 134KB [ 753.069885] ip_dst_cache 12KB 48KB [ 753.075250] RAW 48KB 52KB [ 753.080653] UDP 59KB 60KB [ 753.086022] TCP 16KB 22KB [ 753.091511] hugetlbfs_inode_cache 3KB 15KB [ 753.097262] fscache_cookie_jar 1KB 11KB [ 753.102710] eventpoll_pwq 27KB 47KB [ 753.109875] eventpoll_epi 49KB 66KB [ 753.115247] inotify_inode_mark 15KB 51KB [ 753.120749] request_queue 199KB 199KB [ 753.126118] blkdev_requests 1KB 3KB [ 753.132918] blkdev_ioc 29KB 34KB [ 753.138430] bio-0 1448KB 1481KB [ 753.143795] biovec-max 1674KB 1749KB [ 753.152797] biovec-64 1348KB 1425KB [ 753.158232] biovec-16 117KB 131KB [ 753.163606] bio_integrity_payload 1KB 8KB [ 753.173085] khugepaged_mm_slot 7KB 34KB [ 753.178607] uid_cache 0KB 4KB [ 753.183975] dmaengine-unmap-2 0KB 3KB [ 753.193222] skbuff_fclone_cache 78KB 187KB [ 753.198865] skbuff_head_cache 7441KB 7443KB [ 753.204236] configfs_dir_cache 3KB 11KB [ 753.215135] file_lock_cache 60KB 186KB [ 753.220735] file_lock_ctx 9KB 11KB [ 753.226190] fsnotify_mark_connector 7KB 31KB [ 753.235469] net_namespace 61KB 61KB [ 753.240888] shmem_inode_cache 8101KB 8388KB [ 753.246255] task_delay_info 179KB 407KB [ 753.255127] taskstats 62KB 176KB [ 753.260554] proc_dir_entry 759KB 761KB [ 753.265917] pde_opener 11KB 58KB [ 753.274739] seq_file 306KB 539KB [ 753.280154] sigqueue 57KB 59KB [ 753.285638] kernfs_node_cache 18234KB 18250KB [ 753.294501] mnt_cache 190KB 192KB [ 753.299919] filp 7178KB 7627KB [ 753.305299] names_cache 137024KB 137083KB [ 753.315822] iint_cache 42KB 71KB [ 753.321261] key_jar 4KB 11KB [ 753.326631] uts_namespace 3KB 7KB [ 753.335386] nsproxy 1KB 7KB [ 753.340806] vm_area_struct 3319KB 5096KB [ 753.346172] mm_struct 445KB 936KB [ 753.354955] fs_cache 138KB 364KB [ 753.360374] files_cache 484KB 742KB [ 753.365741] signal_cache 1027KB 1717KB [ 753.374679] sighand_cache 531KB 603KB [ 753.380100] task_struct 6078KB 6135KB [ 753.385464] cred_jar 2039KB 2096KB [ 753.394355] anon_vma_chain 1104KB 1803KB [ 753.400058] anon_vma 156KB 269KB [ 753.405433] pid 81KB 264KB [ 753.420555] Acpi-Operand 156KB 202KB [ 753.425936] Acpi-ParseExt 8KB 11KB [ 753.436476] Acpi-Parse 41KB 47KB [ 753.445464] Acpi-State 52KB 63KB [ 753.455589] Acpi-Namespace 21KB 27KB [ 753.464686] numa_policy 0KB 3KB [ 753.474789] debug_objects_cache 1211KB 1580KB [ 753.484159] trace_event_file 297KB 298KB [ 753.494311] ftrace_event_field 398KB 401KB [ 753.503509] pool_workqueue 128KB 128KB [ 753.514983] page->ptl 493KB 1047KB [ 753.523995] kmalloc-2097152 2050KB 2050KB [ 753.529559] kmalloc-524288 2056KB 2056KB [ 753.534922] kmalloc-262144 1290KB 1290KB [ 753.543979] kmalloc-131072 650KB 650KB [ 753.549523] kmalloc-65536 2112KB 2178KB [ 753.554890] kmalloc-32768 1815KB 1815KB [ 753.563891] kmalloc-16384 1122KB 1155KB [ 753.569319] kmalloc-8192 4455KB 4496KB [ 753.574687] kmalloc-4096 21904KB 21934KB [ 753.583773] kmalloc-2048 12454KB 13374KB [ 753.589175] kmalloc-1024 7538KB 7945KB [ 753.594537] kmalloc-512 15480KB 15480KB [ 753.604910] kmalloc-256 4490KB 5313KB [ 753.610323] kmalloc-128 978KB 1488KB [ 753.615690] kmalloc-96 3586KB 4020KB [ 753.628621] kmalloc-64 2404KB 4228KB [ 753.634002] kmalloc-32 1863KB 2445KB [ 753.643085] kmalloc-192 1698KB 2288KB [ 753.652035] kmem_cache 177KB 183KB [ 753.661082] Out of memory (oom_kill_allocating_task): Kill process 12942 (in:imklog) score 0 or sacrifice child [ 753.675154] Killed process 12940 (rsyslogd) total-vm:254332kB, anon-rss:520kB, file-rss:0kB, shmem-rss:0kB [ 753.687488] oom_reaper: reaped process 12940 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 13:08:13 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x0, 0x80000001, 0x4, 0x4000}) 13:08:13 executing program 4: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="06000000d800a8efff0f56e034594eed"], &(0x7f0000000180)=0x10) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x5, 0x0, 0x2, 0x0, 0x3}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x2, 0x1, 0x4, 0xe000, 0x2, {0x77359400}, {0x3, 0x0, 0x20, 0x1, 0x5, 0x0, "473569ec"}, 0x81, 0x1, {&(0x7f0000000040)=[{0xd7bf, 0x9, {0x4}, 0x90}, {0x0, 0x7f, {0x91c5}, 0x7fffffff}]}, 0x5, 0x0, r3}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:08:13 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x3, @win={{0x29a7, 0x9, 0x7ff, 0xffffffff}, 0x6, 0x2, &(0x7f0000000000)={{0x1f, 0x2000000, 0x3, 0x1000}}, 0xbaa, &(0x7f0000000040)="a017295552323d72ad528dadfe63e60d97b67582d3dc389992e3f52bc590cb4a077a3264a3814b465d259a907a79296bb7369978899dd6ea259543a77a40c8bc3b77b96b8ae3c80b5b1ac887c7e5d27db185aa94d91fda03185fb284f1e37a99ca4dee12b77c663a5108c2ae2f4d98244bc5c16f667a4ef3a0316dc5068ba2eb5ab03134b6dc5dbe070aa40a29c687c2a0fa67bc2932466ff1ac798a8b9bdc7a0947382fa4d0948ce9e5e9a3455ed976405e5999572b12fa87d929983a2f22236cbf0f660eca575d983f3d7adba29e9db036297a4885ff63c598dd3b", 0x8}}) 13:08:13 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x3}]}}) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x3, 0x550, 0x0, 0x4000}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x3, 0x1d88}) 13:08:13 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000040)=@fd={0x13, 0x0, 0x4, 0x20, 0x10001, {}, {0x2, 0x0, 0x0, 0x2, 0x3f, 0x5f, "c639ecc3"}, 0x1, 0x4, {}, 0x40, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0xd9c, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000100)=@overlay={0x5, 0x3, 0x4, 0x1000, 0x401, {0x77359400}, {0x2, 0x1, 0x54, 0x8e, 0x0, 0x80, "aa1739ff"}, 0x7ff, 0x3, {}, 0x1, 0x0, r2}) 13:08:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xfbc5fe667a0cbb47}, 0xc, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003c80)={&(0x7f0000003b00), 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_SSID={0x15, 0x34, @random="93388aaa8e929b9ccdf5660a6a3b123fd4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8080) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000200)={0xfffffffe, 0x3, 0x1, {0x2, @sliced={0x1b0, [0x3f, 0x40, 0x3, 0x8732, 0x4, 0x6, 0x3, 0x1, 0xfffa, 0x9, 0x8000, 0xb08c, 0xcd, 0xb5, 0x7f, 0x3, 0x4, 0x6, 0x9, 0x7, 0x5, 0x2, 0x3fc, 0xffd7, 0xfffb, 0x7, 0x7, 0x9ba6, 0x80, 0x7fff, 0x3, 0x1, 0xfd02, 0x1, 0x400, 0x7, 0x2838, 0x0, 0x6, 0x0, 0x101, 0x0, 0x101, 0x2, 0xa3b6, 0x4, 0x0, 0xa779], 0x9}}, 0x7fff}) 13:08:13 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x0, 0x4, 0x4000}) 13:08:13 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x3}]}}) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x3, 0x550, 0x0, 0x4000}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x3, 0x1d88}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x3, 0x1d88}) 13:08:14 executing program 4: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="06000000d800a8efff0f56e034594eed"], &(0x7f0000000180)=0x10) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x5, 0x0, 0x2, 0x0, 0x3}) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x2, 0x1, 0x4, 0xe000, 0x2, {0x77359400}, {0x3, 0x0, 0x20, 0x1, 0x5, 0x0, "473569ec"}, 0x81, 0x1, {&(0x7f0000000040)=[{0xd7bf, 0x9, {0x4}, 0x90}, {0x0, 0x7f, {0x91c5}, 0x7fffffff}]}, 0x5, 0x0, r3}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) 13:08:14 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x0, 0x4, 0x4000}) 13:08:14 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000580)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x3}]}}) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x3, 0x550, 0x0, 0x4000}) (async) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x3, 0x550, 0x0, 0x4000}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x3, 0x1d88}) 13:08:15 executing program 4: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="06000000d800a8efff0f56e034594eed"], &(0x7f0000000180)=0x10) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x5, 0x0, 0x2, 0x0, 0x3}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x2, 0x1, 0x4, 0xe000, 0x2, {0x77359400}, {0x3, 0x0, 0x20, 0x1, 0x5, 0x0, "473569ec"}, 0x81, 0x1, {&(0x7f0000000040)=[{0xd7bf, 0x9, {0x4}, 0x90}, {0x0, 0x7f, {0x91c5}, 0x7fffffff}]}, 0x5, 0x0, r3}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000b80)) (async) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="06000000d800a8efff0f56e034594eed"], &(0x7f0000000180)=0x10) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x5, 0x0, 0x2, 0x0, 0x3}) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x2, 0x1, 0x4, 0xe000, 0x2, {0x77359400}, {0x3, 0x0, 0x20, 0x1, 0x5, 0x0, "473569ec"}, 0x81, 0x1, {&(0x7f0000000040)=[{0xd7bf, 0x9, {0x4}, 0x90}, {0x0, 0x7f, {0x91c5}, 0x7fffffff}]}, 0x5, 0x0, r3}) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) (async) [ 762.292180] oom_reaper: reaped process 13006 (syz-executor.0), now anon-rss:0kB, file-rss:13576kB, shmem-rss:0kB [ 762.329858] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 762.347117] in:imklog cpuset=/ mems_allowed=0-1 [ 762.351920] CPU: 0 PID: 12996 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 762.359367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 762.368724] Call Trace: [ 762.371319] dump_stack+0x1fc/0x2ef [ 762.374957] dump_header+0x15d/0xc3f [ 762.378675] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 762.383777] ? ___ratelimit+0x319/0x590 [ 762.387754] oom_kill_process.cold+0x10/0x692 [ 762.392258] ? check_preemption_disabled+0x41/0x280 [ 762.397293] ? has_intersects_mems_allowed+0x1d6/0x290 [ 762.402582] out_of_memory+0x1072/0x1390 [ 762.406685] ? oom_killer_disable+0x270/0x270 [ 762.411218] ? mutex_trylock+0x15f/0x1a0 [ 762.415285] __alloc_pages_nodemask+0x23a2/0x2890 [ 762.420136] ? find_get_entry+0x4cd/0x8a0 [ 762.424296] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 762.429153] alloc_pages_current+0x193/0x2a0 [ 762.433557] filemap_fault+0x146e/0x2180 [ 762.436837] syz-executor.0: vmalloc: allocation failure, allocated 1756983296 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 762.437634] ext4_filemap_fault+0x84/0xb0 [ 762.451432] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 762.455531] __do_fault+0x10b/0x4b0 [ 762.464334] __handle_mm_fault+0x273b/0x41c0 [ 762.468736] ? vm_insert_page+0x9c0/0x9c0 [ 762.472870] ? lock_downgrade+0x720/0x720 [ 762.477017] ? check_preemption_disabled+0x41/0x280 [ 762.482032] handle_mm_fault+0x436/0xb10 [ 762.486083] __do_page_fault+0x68e/0xd60 [ 762.490141] ? trace_hardirqs_off_caller+0x6e/0x210 [ 762.495145] ? spurious_fault+0x840/0x840 [ 762.499282] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 762.504115] ? page_fault+0x8/0x30 [ 762.507647] page_fault+0x1e/0x30 [ 762.511090] RIP: 0033:0x7f36061c122d [ 762.514793] Code: Bad RIP value. [ 762.518141] RSP: 002b:00007f3603b5d580 EFLAGS: 00010293 [ 762.523491] RAX: 0000000000000077 RBX: 0000000000000000 RCX: 00007f36061c122d [ 762.530750] RDX: 0000000000001fa0 RSI: 00007f3603b5dda0 RDI: 0000000000000004 [ 762.538006] RBP: 000055e21e6f49d0 R08: 0000000000000000 R09: 0000000000000000 [ 762.545278] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007f3603b5dda0 [ 762.552532] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f3603b5f41d [ 762.559809] CPU: 1 PID: 13006 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 762.563510] Mem-Info: [ 762.567696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 762.567702] Call Trace: [ 762.567724] dump_stack+0x1fc/0x2ef [ 762.567741] warn_alloc.cold+0x7b/0x18f [ 762.567761] ? zone_watermark_ok_safe+0x260/0x260 [ 762.567775] ? rcu_nmi_exit+0xb3/0x180 [ 762.567813] __vmalloc_area_node+0x4fd/0x780 [ 762.567835] ? __vmalloc_node_range+0x180/0x180 [ 762.567848] ? _raw_spin_unlock+0x29/0x40 [ 762.567863] ? __get_vm_area_node+0x2e2/0x3a0 [ 762.570276] active_anon:18714 inactive_anon:12978 isolated_anon:0 [ 762.570276] active_file:28 inactive_file:17 isolated_file:0 [ 762.570276] unevictable:0 dirty:23 writeback:0 unstable:0 [ 762.570276] slab_reclaimable:15252 slab_unreclaimable:119127 [ 762.570276] mapped:22466 shmem:13602 pagetables:613 bounce:0 [ 762.570276] free:13778 free_pcp:146 free_cma:0 [ 762.579603] __vmalloc_node_range+0xed/0x180 [ 762.579619] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 762.579637] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 762.582224] Node 0 active_anon:73032kB inactive_anon:19324kB active_file:88kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88012kB dirty:80kB writeback:0kB shmem:21620kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 20480kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 762.585810] vmalloc_user+0x70/0xe0 [ 762.589799] Node 1 active_anon:1824kB inactive_anon:32588kB active_file:24kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1852kB dirty:12kB writeback:0kB shmem:32788kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 762.594605] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 762.598501] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:20kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 762.602880] vb2_vmalloc_alloc+0xb3/0x2f0 [ 762.607536] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 762.611663] __vb2_queue_alloc+0x472/0xe60 [ 762.616145] Node 0 DMA32 free:17796kB min:35996kB low:44992kB high:53988kB active_anon:73032kB inactive_anon:19324kB active_file:320kB inactive_file:68kB unevictable:0kB writepending:80kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7616kB pagetables:2232kB bounce:0kB free_pcp:332kB local_pcp:0kB free_cma:0kB [ 762.649458] vb2_core_create_bufs+0x273/0x7e0 [ 762.649477] ? __vb2_queue_free+0x870/0x870 [ 762.653861] lowmem_reserve[]: 0 0 1 1 1 [ 762.658181] ? __video_do_ioctl+0x632/0xcd0 [ 762.658206] ? __mutex_lock+0x368/0x1190 [ 762.663540] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 762.691311] vb2_create_bufs+0x332/0x620 [ 762.691331] ? mark_held_locks+0xf0/0xf0 [ 762.691348] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 762.694956] lowmem_reserve[]: 0 0 0 0 0 [ 762.722134] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 762.722150] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 762.722170] v4l_create_bufs+0xb2/0x160 [ 762.722189] __video_do_ioctl+0x49a/0xcd0 [ 762.722207] ? v4l_querycap+0x340/0x340 [ 762.735093] Node 1 Normal free:26440kB min:53876kB low:67344kB high:80812kB active_anon:1824kB inactive_anon:32588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:112kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:224kB pagetables:220kB bounce:0kB free_pcp:252kB local_pcp:0kB free_cma:0kB [ 762.752877] ? __might_fault+0x192/0x1d0 [ 762.752895] ? v4l_querycap+0x340/0x340 [ 762.752912] video_usercopy+0x13f/0xfa0 [ 762.761960] lowmem_reserve[]: 0 0 0 0 0 [ 762.762065] ? v4l_enumstd+0x60/0x60 [ 762.766267] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10892kB [ 762.795230] ? do_futex+0x171/0x1880 [ 762.795246] ? mark_held_locks+0xf0/0xf0 [ 762.795262] ? debug_check_no_obj_freed+0x201/0x490 [ 762.795286] ? video_usercopy+0xfa0/0xfa0 [ 762.799769] Node 0 DMA32: 2010*4kB (UME) 777*8kB (UME) 179*16kB (UME) 24*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17888kB [ 762.804064] v4l2_ioctl+0x147/0x1a0 [ 762.808026] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 762.812319] ? video_devdata+0xa0/0xa0 [ 762.816353] Node 1 Normal: 198*4kB (ME) 166*8kB (UME) 135*16kB (M) 91*32kB (M) 52*64kB (M) 20*128kB (ME) 5*256kB (UME) 3*512kB (UME) 2*1024kB (UE) 2*2048kB (UE) 1*4096kB (U) = 26136kB [ 762.842192] do_vfs_ioctl+0xcdb/0x12e0 [ 762.842208] ? lock_downgrade+0x720/0x720 [ 762.842223] ? check_preemption_disabled+0x41/0x280 [ 762.842239] ? ioctl_preallocate+0x200/0x200 [ 762.846318] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 762.850337] ? __fget+0x356/0x510 [ 762.850352] ? do_dup2+0x450/0x450 [ 762.850369] ? __se_sys_futex+0x298/0x3b0 [ 762.855449] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 762.859414] ksys_ioctl+0x9b/0xc0 [ 762.859432] __x64_sys_ioctl+0x6f/0xb0 [ 762.864515] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 762.869684] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 762.869697] do_syscall_64+0xf9/0x620 [ 762.869716] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 762.873663] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 762.877789] RIP: 0033:0x7f68c24140f9 [ 762.877807] Code: Bad RIP value. [ 762.881760] 13627 total pagecache pages [ 762.910276] RSP: 002b:00007f68c0986168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 762.910289] RAX: ffffffffffffffda RBX: 00007f68c2533f80 RCX: 00007f68c24140f9 [ 762.910297] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000006 [ 762.910308] RBP: 00007f68c246fae9 R08: 0000000000000000 R09: 0000000000000000 [ 762.914351] 0 pages in swap cache [ 762.918302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 762.918310] R13: 00007fff6155d44f R14: 00007f68c0986300 R15: 0000000000022000 [ 762.925725] Mem-Info: [ 762.926435] Swap cache stats: add 0, delete 0, find 0/0 [ 762.930214] active_anon:18689 inactive_anon:12978 isolated_anon:0 [ 762.930214] active_file:16 inactive_file:8 isolated_file:0 [ 762.930214] unevictable:0 dirty:23 writeback:0 unstable:0 [ 762.930214] slab_reclaimable:15252 slab_unreclaimable:119151 [ 762.930214] mapped:22435 shmem:13602 pagetables:612 bounce:0 [ 762.930214] free:13778 free_pcp:145 free_cma:0 [ 762.930243] Node 0 active_anon:72936kB inactive_anon:19324kB active_file:80kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87936kB dirty:80kB writeback:0kB shmem:21620kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 762.930270] Node 1 active_anon:1820kB inactive_anon:32588kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1804kB dirty:12kB writeback:0kB shmem:32788kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 762.958233] Free swap = 0kB [ 762.961179] Node 0 DMA free:10892kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 762.984670] Total swap = 0kB [ 763.000811] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 763.024660] 2097051 pages RAM [ 763.027549] Node 0 DMA32 free:17888kB min:35996kB low:44992kB high:53988kB active_anon:72936kB inactive_anon:19324kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7616kB pagetables:2228kB bounce:0kB free_pcp:324kB local_pcp:320kB free_cma:0kB [ 763.036480] 0 pages HighMem/MovableOnly [ 763.036486] 369649 pages reserved [ 763.036490] 0 pages cma reserved [ 763.036497] Unreclaimable slab info: [ 763.036501] Name Used Total [ 763.036510] pid_2 49KB 152KB [ 763.036576] batadv_tt_change_cache 0KB 3KB [ 763.036592] batadv_tl_cache 5KB 12KB [ 763.036619] TIPC 12KB 15KB [ 763.036638] SCTPv6 16KB 24KB [ 763.036646] SCTP 5KB 7KB [ 763.036663] DCCPv6 17KB 22KB [ 763.036676] DCCP 16KB 21KB [ 763.046845] RXRPC 13KB 13KB [ 763.054950] lowmem_reserve[]: 0 0 1 1 1 [ 763.068116] rxrpc_call_jar 90KB 94KB [ 763.074171] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 763.093628] bridge_fdb_cache 10KB 15KB [ 763.096482] lowmem_reserve[]: 0 0 0 0 0 [ 763.104976] fib6_nodes 183KB 188KB [ 763.107612] Node 1 Normal free:26136kB min:53876kB low:67344kB high:80812kB active_anon:1820kB inactive_anon:32588kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:224kB pagetables:220kB bounce:0kB free_pcp:252kB local_pcp:252kB free_cma:0kB [ 763.107646] lowmem_reserve[]: 0 0 0 0 0 [ 763.125464] ip6_dst_cache 221KB 326KB [ 763.130025] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10876kB [ 763.152646] RAWv6 81KB 81KB [ 763.156810] Node 0 DMA32: 2010*4kB (UME) 782*8kB (UME) 179*16kB (UME) 24*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17928kB [ 763.168278] UDPv6 30KB 37KB [ 763.206006] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 763.232477] TCPv6 27KB 36KB [ 763.261522] Node 1 Normal: 198*4kB (ME) 166*8kB (UME) 135*16kB (M) 91*32kB (M) 52*64kB (M) 20*128kB (ME) 5*256kB (UME) 3*512kB (UME) 2*1024kB (UE) 2*2048kB (UE) 1*4096kB (U) = 26136kB [ 763.285643] nf_conntrack 7KB 18KB [ 763.301670] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 763.325802] t10_alua_lu_gp_cache 0KB 3KB [ 763.336773] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 763.340323] sd_ext_cdb 0KB 7KB [ 763.342456] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 763.347831] scsi_sense_cache 1056KB 1060KB [ 763.347840] virtio_scsi_cmd 16KB 16KB [ 763.347853] sgpool-128 8KB 8KB [ 763.347862] sgpool-64 4KB 12KB [ 763.347869] sgpool-32 2KB 15KB [ 763.347877] sgpool-16 1KB 7KB [ 763.347885] sgpool-8 0KB 7KB [ 763.347901] mqueue_inode_cache 12KB 22KB [ 763.347916] bio_post_read_ctx 14KB 15KB [ 763.347989] bio-2 14KB 15KB [ 763.347999] jfs_mp 7KB 7KB [ 763.348039] cifs_small_rq 15KB 16KB [ 763.348048] cifs_request 67KB 67KB [ 763.348063] cifs_mpx_ids 0KB 7KB [ 763.348092] nfs_commit_data 3KB 14KB [ 763.348102] nfs_write_data 34KB 44KB [ 763.348144] ext4_system_zone 1KB 7KB [ 763.348175] bio-1 1KB 7KB [ 763.348187] pid_namespace 2KB 7KB [ 763.348207] rpc_buffers 17KB 25KB [ 763.348216] rpc_tasks 2KB 7KB [ 763.348226] UNIX 753KB 757KB [ 763.348241] tcp_bind_bucket 1KB 4KB [ 763.348259] ip_fib_trie 27KB 31KB [ 763.348268] ip_fib_alias 130KB 134KB [ 763.348277] ip_dst_cache 12KB 48KB [ 763.348289] RAW 48KB 52KB [ 763.348299] UDP 64KB 67KB [ 763.348312] TCP 14KB 16KB [ 763.348324] hugetlbfs_inode_cache 3KB 15KB [ 763.348333] fscache_cookie_jar 1KB 11KB [ 763.348342] eventpoll_pwq 26KB 47KB [ 763.348350] eventpoll_epi 49KB 66KB [ 763.348359] inotify_inode_mark 15KB 51KB [ 763.348371] request_queue 199KB 199KB [ 763.348380] blkdev_requests 1KB 3KB [ 763.348390] blkdev_ioc 27KB 34KB [ 763.348399] bio-0 1458KB 1485KB [ 763.348407] biovec-max 1674KB 1749KB [ 763.348418] biovec-64 1364KB 1417KB [ 763.348425] biovec-16 115KB 131KB [ 763.348437] bio_integrity_payload 1KB 8KB [ 763.365408] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 763.373781] khugepaged_mm_slot 7KB 34KB [ 763.375763] 13626 total pagecache pages [ 763.381166] uid_cache 0KB 4KB [ 763.381175] dmaengine-unmap-2 0KB 3KB [ 763.381188] skbuff_fclone_cache 73KB 180KB [ 763.381197] skbuff_head_cache 7509KB 7511KB [ 763.381206] configfs_dir_cache 3KB 11KB [ 763.381218] file_lock_cache 58KB 186KB [ 763.397924] 0 pages in swap cache [ 763.404639] file_lock_ctx 9KB 11KB [ 763.432022] Swap cache stats: add 0, delete 0, find 0/0 [ 763.441546] fsnotify_mark_connector 7KB 31KB [ 763.442384] Free swap = 0kB [ 763.478892] net_namespace 61KB 61KB [ 763.485269] Total swap = 0kB [ 763.504302] shmem_inode_cache 8102KB 8380KB [ 763.518009] 2097051 pages RAM [ 763.528914] task_delay_info 177KB 407KB [ 763.532925] 0 pages HighMem/MovableOnly [ 763.535232] taskstats 65KB 176KB [ 763.557045] 369649 pages reserved [ 763.567117] proc_dir_entry 759KB 761KB [ 763.575829] 0 pages cma reserved [ 763.590185] pde_opener 9KB 58KB [ 763.953236] seq_file 296KB 539KB [ 763.958681] sigqueue 53KB 59KB [ 763.964072] kernfs_node_cache 18234KB 18250KB [ 763.972889] mnt_cache 190KB 192KB [ 763.978373] filp 7168KB 7627KB [ 763.983742] names_cache 137776KB 137823KB [ 763.992644] iint_cache 43KB 71KB [ 763.998082] key_jar 4KB 11KB [ 764.003570] uts_namespace 3KB 7KB [ 764.012551] nsproxy 1KB 7KB [ 764.017993] vm_area_struct 3321KB 5096KB [ 764.023361] mm_struct 429KB 923KB [ 764.032332] fs_cache 139KB 364KB [ 764.037850] files_cache 481KB 735KB [ 764.043218] signal_cache 1020KB 1710KB [ 764.057118] sighand_cache 557KB 603KB [ 764.062531] task_struct 6085KB 6097KB [ 764.075436] cred_jar 2016KB 2096KB [ 764.081694] anon_vma_chain 1085KB 1803KB [ 764.094791] anon_vma 140KB 269KB [ 764.101091] pid 79KB 264KB [ 764.106467] Acpi-Operand 156KB 202KB [ 764.120105] Acpi-ParseExt 8KB 11KB [ 764.125482] Acpi-Parse 41KB 47KB [ 764.133378] Acpi-State 52KB 63KB [ 764.144467] Acpi-Namespace 21KB 27KB [ 764.152350] numa_policy 0KB 3KB [ 764.163312] debug_objects_cache 1211KB 1580KB [ 764.171411] trace_event_file 297KB 298KB [ 764.182618] ftrace_event_field 398KB 401KB [ 764.190598] pool_workqueue 128KB 128KB [ 764.196021] page->ptl 491KB 1047KB [ 764.210057] kmalloc-2097152 2050KB 2050KB [ 764.215444] kmalloc-524288 2056KB 2056KB [ 764.223335] kmalloc-262144 1290KB 1290KB [ 764.234754] kmalloc-131072 650KB 650KB [ 764.242540] kmalloc-65536 2112KB 2178KB [ 764.254014] kmalloc-32768 1815KB 1815KB [ 764.262203] kmalloc-16384 1089KB 1155KB [ 764.273825] kmalloc-8192 4455KB 4496KB [ 764.281602] kmalloc-4096 21908KB 21955KB [ 764.293139] kmalloc-2048 12405KB 13362KB [ 764.300931] kmalloc-1024 7614KB 7945KB [ 764.306318] kmalloc-512 15510KB 15510KB [ 764.319964] kmalloc-256 4495KB 5313KB [ 764.325566] kmalloc-128 983KB 1488KB [ 764.333471] kmalloc-96 3628KB 4020KB [ 764.344859] kmalloc-64 2377KB 4224KB [ 764.352803] kmalloc-32 1861KB 2445KB [ 764.363793] kmalloc-192 1697KB 2288KB [ 764.371708] kmem_cache 177KB 183KB [ 764.382859] Out of memory (oom_kill_allocating_task): Kill process 12996 (in:imklog) score 0 or sacrifice child [ 764.395669] Killed process 12994 (rsyslogd) total-vm:254332kB, anon-rss:520kB, file-rss:0kB, shmem-rss:0kB [ 764.416202] oom_reaper: reaped process 12994 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 764.433095] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 764.453610] in:imklog cpuset=/ mems_allowed=0-1 [ 764.458670] CPU: 0 PID: 12996 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 764.466117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 764.475499] Call Trace: [ 764.478095] dump_stack+0x1fc/0x2ef [ 764.481732] dump_header+0x15d/0xc3f [ 764.485457] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 764.490568] ? ___ratelimit+0x319/0x590 [ 764.494551] oom_kill_process.cold+0x10/0x692 [ 764.499063] ? check_preemption_disabled+0x41/0x280 [ 764.504091] ? has_intersects_mems_allowed+0x1d6/0x290 [ 764.509378] out_of_memory+0x1072/0x1390 [ 764.513450] ? oom_killer_disable+0x270/0x270 [ 764.517957] ? mutex_trylock+0x15f/0x1a0 [ 764.522025] __alloc_pages_nodemask+0x23a2/0x2890 [ 764.526883] ? find_get_entry+0x4cd/0x8a0 [ 764.531047] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 764.535922] alloc_pages_current+0x193/0x2a0 [ 764.540338] filemap_fault+0x146e/0x2180 [ 764.544419] ext4_filemap_fault+0x84/0xb0 [ 764.548572] __do_fault+0x10b/0x4b0 [ 764.552236] __handle_mm_fault+0x273b/0x41c0 [ 764.556676] ? vm_insert_page+0x9c0/0x9c0 [ 764.560836] ? lock_downgrade+0x720/0x720 [ 764.565000] ? check_preemption_disabled+0x41/0x280 [ 764.570025] handle_mm_fault+0x436/0xb10 [ 764.574100] __do_page_fault+0x68e/0xd60 [ 764.578175] ? trace_hardirqs_off_caller+0x6e/0x210 [ 764.583199] ? spurious_fault+0x840/0x840 [ 764.587354] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 764.592218] ? page_fault+0x8/0x30 [ 764.595764] page_fault+0x1e/0x30 [ 764.599219] RIP: 0033:0x7f36061c122d [ 764.603028] Code: Bad RIP value. [ 764.606388] RSP: 002b:00007f3603b5d580 EFLAGS: 00010293 [ 764.611771] RAX: 0000000000000077 RBX: 0000000000000000 RCX: 00007f36061c122d [ 764.619130] RDX: 0000000000001fa0 RSI: 00007f3603b5dda0 RDI: 0000000000000004 [ 764.626871] RBP: 000055e21e6f49d0 R08: 0000000000000000 R09: 0000000000000000 [ 764.634228] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007f3603b5dda0 [ 764.641589] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f3603b5f41d [ 764.650258] Mem-Info: [ 764.652705] active_anon:18489 inactive_anon:12978 isolated_anon:0 [ 764.652705] active_file:12 inactive_file:12 isolated_file:0 [ 764.652705] unevictable:0 dirty:0 writeback:0 unstable:0 [ 764.652705] slab_reclaimable:15252 slab_unreclaimable:119152 [ 764.652705] mapped:22422 shmem:13602 pagetables:612 bounce:0 [ 764.652705] free:91531 free_pcp:618 free_cma:0 [ 764.687066] Node 0 active_anon:72936kB inactive_anon:19324kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87868kB dirty:0kB writeback:0kB shmem:21620kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 764.715446] Node 1 active_anon:1020kB inactive_anon:32588kB active_file:8kB inactive_file:408kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1920kB dirty:0kB writeback:0kB shmem:32788kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 764.743437] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 764.770872] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 764.776082] Node 0 DMA32 free:17928kB min:35996kB low:44992kB high:53988kB active_anon:72936kB inactive_anon:19324kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7616kB pagetables:2228kB bounce:0kB free_pcp:236kB local_pcp:4kB free_cma:0kB [ 764.805085] lowmem_reserve[]: 0 0 1 1 1 [ 764.809248] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 764.837091] lowmem_reserve[]: 0 0 0 0 0 [ 764.842453] Node 1 Normal free:535760kB min:53876kB low:67344kB high:80812kB active_anon:972kB inactive_anon:32588kB active_file:40kB inactive_file:1836kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:128kB pagetables:220kB bounce:0kB free_pcp:1524kB local_pcp:176kB free_cma:0kB [ 764.873072] lowmem_reserve[]: 0 0 0 0 0 [ 764.878158] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10872kB [ 764.892588] Node 0 DMA32: 2010*4kB (UME) 782*8kB (UME) 179*16kB (UME) 24*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17928kB [ 764.906409] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 764.918206] Node 1 Normal: 9*4kB (UME) 26*8kB (UME) 128*16kB (UM) 102*32kB (UM) 61*64kB (UM) 26*128kB (UME) 11*256kB (UME) 9*512kB (UME) 27*1024kB (UE) 273*2048kB (UE) 2*4096kB (U) = 615156kB [ 764.936278] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 764.945351] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 764.955434] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 764.965465] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 764.975603] 14584 total pagecache pages [ 764.980900] 0 pages in swap cache [ 764.985547] Swap cache stats: add 0, delete 0, find 0/0 [ 764.992056] Free swap = 0kB [ 764.996137] Total swap = 0kB [ 764.999992] 2097051 pages RAM [ 765.004543] 0 pages HighMem/MovableOnly [ 765.009700] 369649 pages reserved [ 765.017349] 0 pages cma reserved [ 765.022968] Unreclaimable slab info: [ 765.027914] Name Used Total [ 765.034368] pid_2 49KB 152KB [ 765.047253] batadv_tt_change_cache 0KB 3KB [ 765.064262] batadv_tl_cache 5KB 12KB [ 765.070120] TIPC 12KB 15KB [ 765.075584] SCTPv6 16KB 24KB [ 765.106866] SCTP 5KB 7KB [ 765.112270] DCCPv6 17KB 22KB [ 765.126976] DCCP 16KB 21KB [ 765.132394] RXRPC 13KB 13KB [ 765.146666] rxrpc_call_jar 90KB 94KB [ 765.152151] bridge_fdb_cache 10KB 15KB [ 765.166980] fib6_nodes 183KB 188KB [ 765.172487] ip6_dst_cache 221KB 326KB [ 765.196994] RAWv6 81KB 81KB [ 765.202412] UDPv6 30KB 37KB [ 765.208302] TCPv6 27KB 36KB [ 765.213679] nf_conntrack 7KB 18KB [ 765.219321] t10_alua_lu_gp_cache 0KB 3KB [ 765.224954] sd_ext_cdb 0KB 7KB [ 765.230830] scsi_sense_cache 1056KB 1060KB [ 765.236200] virtio_scsi_cmd 16KB 16KB [ 765.241641] sgpool-128 8KB 8KB [ 765.247090] sgpool-64 4KB 12KB [ 765.252462] sgpool-32 2KB 15KB [ 765.257922] sgpool-16 1KB 7KB [ 765.263460] sgpool-8 0KB 7KB [ 765.268925] mqueue_inode_cache 12KB 22KB [ 765.274384] bio_post_read_ctx 14KB 15KB [ 765.279885] bio-2 14KB 15KB [ 765.285258] jfs_mp 7KB 7KB [ 765.290729] cifs_small_rq 15KB 16KB [ 765.296097] cifs_request 67KB 67KB [ 765.301529] cifs_mpx_ids 0KB 7KB [ 765.306983] nfs_commit_data 3KB 14KB [ 765.312347] nfs_write_data 34KB 44KB [ 765.317867] ext4_system_zone 1KB 7KB [ 765.323259] bio-1 1KB 7KB [ 765.346651] pid_namespace 2KB 7KB [ 765.352054] rpc_buffers 17KB 25KB [ 765.366647] rpc_tasks 2KB 7KB [ 765.372033] UNIX 753KB 757KB [ 765.377492] tcp_bind_bucket 1KB 4KB [ 765.382880] ip_fib_trie 27KB 31KB [ 765.388318] ip_fib_alias 130KB 134KB [ 765.393691] ip_dst_cache 12KB 48KB [ 765.399142] RAW 48KB 52KB [ 765.404512] UDP 64KB 67KB [ 765.409953] TCP 14KB 16KB [ 765.415332] hugetlbfs_inode_cache 3KB 15KB [ 765.421121] fscache_cookie_jar 1KB 11KB [ 765.426651] eventpoll_pwq 26KB 47KB [ 765.432021] eventpoll_epi 49KB 66KB [ 765.437488] inotify_inode_mark 15KB 51KB [ 765.442950] request_queue 199KB 199KB [ 765.448398] blkdev_requests 1KB 3KB [ 765.453784] blkdev_ioc 27KB 34KB [ 765.459265] bio-0 1483KB 1485KB [ 765.464645] biovec-max 1674KB 1749KB [ 765.470186] biovec-64 1422KB 1425KB [ 765.475666] biovec-16 123KB 131KB [ 765.481144] bio_integrity_payload 1KB 8KB [ 765.486934] khugepaged_mm_slot 7KB 34KB [ 765.492399] uid_cache 0KB 4KB [ 765.497849] dmaengine-unmap-2 0KB 3KB [ 765.503219] skbuff_fclone_cache 73KB 180KB [ 765.508814] skbuff_head_cache 7561KB 7597KB [ 765.514182] configfs_dir_cache 3KB 11KB [ 765.519727] file_lock_cache 58KB 186KB [ 765.525092] file_lock_ctx 9KB 11KB [ 765.530547] fsnotify_mark_connector 7KB 31KB [ 765.536451] net_namespace 61KB 61KB [ 765.541915] shmem_inode_cache 8102KB 8380KB [ 765.547342] task_delay_info 177KB 407KB [ 765.552708] taskstats 65KB 176KB [ 765.558153] proc_dir_entry 759KB 761KB [ 765.563521] pde_opener 9KB 58KB [ 765.568942] seq_file 296KB 539KB [ 765.574311] sigqueue 59KB 59KB [ 765.579774] kernfs_node_cache 18234KB 18250KB [ 765.585142] mnt_cache 190KB 192KB [ 765.590583] filp 7168KB 7627KB [ 765.595956] names_cache 138554KB 138554KB [ 765.603157] iint_cache 43KB 71KB [ 765.608633] key_jar 4KB 11KB [ 765.614000] uts_namespace 3KB 7KB [ 765.624176] nsproxy 1KB 7KB [ 765.629623] vm_area_struct 3168KB 5077KB [ 765.634990] mm_struct 429KB 923KB [ 765.645182] fs_cache 139KB 364KB [ 765.650665] files_cache 481KB 735KB [ 765.656037] signal_cache 1020KB 1710KB [ 765.666198] sighand_cache 557KB 603KB [ 765.671674] task_struct 6034KB 6097KB [ 765.681918] cred_jar 2046KB 2096KB [ 765.687469] anon_vma_chain 1072KB 1803KB [ 765.692833] anon_vma 140KB 269KB [ 765.700341] pid 79KB 264KB [ 765.705718] Acpi-Operand 156KB 202KB [ 765.711177] Acpi-ParseExt 8KB 11KB [ 765.716547] Acpi-Parse 41KB 47KB [ 765.722005] Acpi-State 52KB 63KB [ 765.727473] Acpi-Namespace 21KB 27KB [ 765.732839] numa_policy 0KB 3KB [ 765.738357] debug_objects_cache 1211KB 1580KB [ 765.743933] trace_event_file 297KB 298KB [ 765.749367] ftrace_event_field 398KB 401KB [ 765.754817] pool_workqueue 128KB 128KB [ 765.760285] page->ptl 491KB 1047KB [ 765.765725] kmalloc-2097152 2050KB 2050KB [ 765.771160] kmalloc-524288 2056KB 2056KB [ 765.776525] kmalloc-262144 1290KB 1290KB [ 765.782103] kmalloc-131072 650KB 650KB [ 765.787545] kmalloc-65536 2112KB 2178KB [ 765.792912] kmalloc-32768 1815KB 1815KB [ 765.798994] kmalloc-16384 1089KB 1155KB [ 765.804476] kmalloc-8192 4455KB 4496KB [ 765.810854] kmalloc-4096 21483KB 21543KB [ 765.816228] kmalloc-2048 12405KB 13362KB [ 765.827424] kmalloc-1024 7627KB 7945KB [ 765.832806] kmalloc-512 15535KB 15603KB [ 765.843903] kmalloc-256 4495KB 5313KB [ 765.849904] kmalloc-128 983KB 1488KB [ 765.855275] kmalloc-96 3628KB 4020KB [ 765.866368] kmalloc-64 2377KB 4224KB [ 765.872411] kmalloc-32 1861KB 2445KB [ 765.883045] kmalloc-192 1697KB 2288KB [ 765.888996] kmem_cache 177KB 183KB [ 765.894369] Out of memory (oom_kill_allocating_task): Kill process 12996 (in:imklog) score 0 or sacrifice child [ 765.906498] Killed process 12996 (in:imklog) total-vm:254332kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 765.917276] in:imklog: page allocation failure: order:0, mode:0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null) [ 765.927915] in:imklog cpuset=/ mems_allowed=0-1 [ 765.932851] CPU: 0 PID: 12996 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 765.940385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 765.949739] Call Trace: [ 765.952339] dump_stack+0x1fc/0x2ef [ 765.955983] warn_alloc.cold+0x7b/0x18f [ 765.959965] ? zone_watermark_ok_safe+0x260/0x260 [ 765.964819] ? wait_for_completion_io+0x10/0x10 [ 765.969502] __alloc_pages_nodemask+0x232f/0x2890 [ 765.974364] ? find_get_entry+0x4cd/0x8a0 [ 765.978524] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 765.983394] alloc_pages_current+0x193/0x2a0 [ 765.987806] filemap_fault+0x146e/0x2180 [ 765.991885] ext4_filemap_fault+0x84/0xb0 [ 765.996036] __do_fault+0x10b/0x4b0 [ 765.999667] __handle_mm_fault+0x273b/0x41c0 [ 766.004168] ? vm_insert_page+0x9c0/0x9c0 [ 766.008325] ? lock_downgrade+0x720/0x720 [ 766.012508] ? check_preemption_disabled+0x41/0x280 [ 766.017624] handle_mm_fault+0x436/0xb10 [ 766.021696] __do_page_fault+0x68e/0xd60 [ 766.025771] ? trace_hardirqs_off_caller+0x6e/0x210 [ 766.030886] ? spurious_fault+0x840/0x840 [ 766.035057] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 766.039920] ? page_fault+0x8/0x30 [ 766.043476] page_fault+0x1e/0x30 [ 766.046947] RIP: 0033:0x7f36061c122d [ 766.050777] Code: Bad RIP value. [ 766.054230] RSP: 002b:00007f3603b5d580 EFLAGS: 00010293 [ 766.059597] RAX: 0000000000000077 RBX: 0000000000000000 RCX: 00007f36061c122d [ 766.066869] RDX: 0000000000001fa0 RSI: 00007f3603b5dda0 RDI: 0000000000000004 [ 766.074150] RBP: 000055e21e6f49d0 R08: 0000000000000000 R09: 0000000000000000 [ 766.081440] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007f3603b5dda0 [ 766.088900] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f3603b5f41d [ 766.109010] Mem-Info: 13:08:22 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000a00)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6d3cd36"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x3, @win={{0x29a7, 0x9, 0x7ff, 0xffffffff}, 0x6, 0x2, &(0x7f0000000000)={{0x1f, 0x2000000, 0x3, 0x1000}}, 0xbaa, &(0x7f0000000040)="a017295552323d72ad528dadfe63e60d97b67582d3dc389992e3f52bc590cb4a077a3264a3814b465d259a907a79296bb7369978899dd6ea259543a77a40c8bc3b77b96b8ae3c80b5b1ac887c7e5d27db185aa94d91fda03185fb284f1e37a99ca4dee12b77c663a5108c2ae2f4d98244bc5c16f667a4ef3a0316dc5068ba2eb5ab03134b6dc5dbe070aa40a29c687c2a0fa67bc2932466ff1ac798a8b9bdc7a0947382fa4d0948ce9e5e9a3455ed976405e5999572b12fa87d929983a2f22236cbf0f660eca575d983f3d7adba29e9db036297a4885ff63c598dd3b", 0x8}}) 13:08:22 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x1328f63fca81d4ae, 0x0, 0x4, 0x4000}) 13:08:22 executing program 4: write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000000)={0xf, 0x1f, 0x1, 0x3}, 0xf) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0x5452, &(0x7f0000000580)={0x0, @pix_mp}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r1 = getuid() r2 = getegid() write$P9_RSTATu(r0, &(0x7f0000000080)={0x52, 0x7d, 0x1, {{0x0, 0x3b, 0x471, 0xfffffffb, {0x66, 0x3, 0x6}, 0xc5100000, 0x7, 0x80000001, 0x101, 0x4, ']\xba)!', 0x3, '{-[', 0x0, '', 0x1, '\x00'}, 0x2, ':\'', r1, r2, 0xee00}}, 0x52) 13:08:22 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000040)=@fd={0x13, 0x0, 0x4, 0x20, 0x10001, {}, {0x2, 0x0, 0x0, 0x2, 0x3f, 0x5f, "c639ecc3"}, 0x1, 0x4, {}, 0x40, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0xd9c, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000100)=@overlay={0x5, 0x3, 0x4, 0x1000, 0x401, {0x77359400}, {0x2, 0x1, 0x54, 0x8e, 0x0, 0x80, "aa1739ff"}, 0x7ff, 0x3, {}, 0x1, 0x0, r2}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000040)=@fd={0x13, 0x0, 0x4, 0x20, 0x10001, {}, {0x2, 0x0, 0x0, 0x2, 0x3f, 0x5f, "c639ecc3"}, 0x1, 0x4, {}, 0x40}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000580)={0x0, @pix_mp}) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0xd9c, 0x2) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000100)=@overlay={0x5, 0x3, 0x4, 0x1000, 0x401, {0x77359400}, {0x2, 0x1, 0x54, 0x8e, 0x0, 0x80, "aa1739ff"}, 0x7ff, 0x3, {}, 0x1, 0x0, r2}) (async) [ 766.116114] active_anon:16923 inactive_anon:12978 isolated_anon:0 [ 766.116114] active_file:49 inactive_file:2406 isolated_file:0 [ 766.116114] unevictable:0 dirty:0 writeback:0 unstable:0 [ 766.116114] slab_reclaimable:15226 slab_unreclaimable:119202 [ 766.116114] mapped:24202 shmem:13602 pagetables:575 bounce:0 [ 766.116114] free:442373 free_pcp:884 free_cma:0 [ 766.178677] Node 0 active_anon:75020kB inactive_anon:19324kB active_file:140kB inactive_file:2440kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:89668kB dirty:0kB writeback:0kB shmem:21620kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 766.214602] Node 1 active_anon:944kB inactive_anon:32588kB active_file:56kB inactive_file:8184kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8340kB dirty:0kB writeback:0kB shmem:32788kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 766.247493] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 766.274500] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 766.287723] Node 0 DMA32 free:54196kB min:35996kB low:44992kB high:53988kB active_anon:70908kB inactive_anon:19324kB active_file:740kB inactive_file:2240kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7744kB pagetables:2228kB bounce:0kB free_pcp:1056kB local_pcp:332kB free_cma:0kB [ 766.322921] lowmem_reserve[]: 0 0 1 1 1 [ 766.332411] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 766.359685] lowmem_reserve[]: 0 0 0 0 0 [ 766.364241] Node 1 Normal free:1696272kB min:53876kB low:67344kB high:80812kB active_anon:944kB inactive_anon:32588kB active_file:56kB inactive_file:8184kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:128kB pagetables:220kB bounce:0kB free_pcp:2740kB local_pcp:1388kB free_cma:0kB [ 766.400593] lowmem_reserve[]: 0 0 0 0 0 [ 766.405156] Node 0 DMA: 2*4kB (U) 2*8kB (U) 3*16kB (U) 2*32kB (U) 3*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 11080kB [ 766.420298] Node 0 DMA32: 1866*4kB (UME) 1416*8kB (UME) 305*16kB (UME) 63*32kB (UME) 29*64kB (UME) 10*128kB (UME) 5*256kB (UM) 6*512kB (UM) 3*1024kB (U) 3*2048kB (UM) 3*4096kB (UM) = 54680kB [ 766.438998] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 766.451055] Node 1 Normal: 57*4kB (UME) 30*8kB (UME) 23*16kB (U) 394*32kB (UM) 326*64kB (UM) 292*128kB (UME) 146*256kB (UME) 110*512kB (UME) 87*1024kB (UE) 386*2048kB (UE) 159*4096kB (U) = 1696260kB [ 766.469648] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 766.479158] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 766.488343] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 766.498512] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 766.511600] 16536 total pagecache pages [ 766.518244] 0 pages in swap cache [ 766.525046] Swap cache stats: add 0, delete 0, find 0/0 [ 766.531935] Free swap = 0kB [ 766.535013] Total swap = 0kB [ 766.539065] 2097051 pages RAM [ 766.542225] 0 pages HighMem/MovableOnly [ 766.546269] 369649 pages reserved [ 766.551669] 0 pages cma reserved [ 766.555617] in:imklog invoked oom-killer: gfp_mask=0x0(), nodemask=(null), order=0, oom_score_adj=0 [ 766.566739] in:imklog cpuset=/ mems_allowed=0-1 [ 766.571768] CPU: 0 PID: 12996 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 766.579214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 766.588590] Call Trace: [ 766.591185] dump_stack+0x1fc/0x2ef [ 766.594826] dump_header+0x15d/0xc3f [ 766.598549] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 766.603678] ? ___ratelimit+0x319/0x590 [ 766.607662] oom_kill_process.cold+0x10/0x692 [ 766.612166] ? check_preemption_disabled+0x41/0x280 [ 766.617199] ? has_intersects_mems_allowed+0x1d6/0x290 [ 766.622486] out_of_memory+0x1072/0x1390 [ 766.626559] ? lock_acquire+0x170/0x3c0 [ 766.630540] ? oom_killer_disable+0x270/0x270 [ 766.635055] ? mutex_trylock+0x15f/0x1a0 [ 766.639127] pagefault_out_of_memory+0x102/0x120 [ 766.643894] ? out_of_memory+0x1390/0x1390 [ 766.648140] ? lock_downgrade+0x720/0x720 [ 766.652294] mm_fault_error+0x106/0x390 [ 766.656277] __do_page_fault+0xc34/0xd60 [ 766.660381] ? trace_hardirqs_off_caller+0x6e/0x210 [ 766.665494] ? spurious_fault+0x840/0x840 [ 766.669650] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 766.674502] ? page_fault+0x8/0x30 [ 766.678052] page_fault+0x1e/0x30 [ 766.681508] RIP: 0033:0x7f36061c122d [ 766.685225] Code: Bad RIP value. [ 766.688596] RSP: 002b:00007f3603b5d580 EFLAGS: 00010293 [ 766.694049] RAX: 0000000000000077 RBX: 0000000000000000 RCX: 00007f36061c122d [ 766.701323] RDX: 0000000000001fa0 RSI: 00007f3603b5dda0 RDI: 0000000000000004 [ 766.708596] RBP: 000055e21e6f49d0 R08: 0000000000000000 R09: 0000000000000000 [ 766.715960] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007f3603b5dda0 [ 766.723233] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f3603b5f41d [ 766.756886] Mem-Info: [ 766.759409] active_anon:17984 inactive_anon:12978 isolated_anon:0 [ 766.759409] active_file:285 inactive_file:2955 isolated_file:0 [ 766.759409] unevictable:0 dirty:15 writeback:0 unstable:0 [ 766.759409] slab_reclaimable:15226 slab_unreclaimable:119721 [ 766.759409] mapped:24842 shmem:13602 pagetables:620 bounce:0 [ 766.759409] free:440131 free_pcp:1138 free_cma:0 [ 766.794301] Node 0 active_anon:70972kB inactive_anon:19324kB active_file:1084kB inactive_file:3624kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:90696kB dirty:56kB writeback:0kB shmem:21620kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 766.823947] Node 1 active_anon:964kB inactive_anon:32588kB active_file:56kB inactive_file:8196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8672kB dirty:4kB writeback:0kB shmem:32788kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 766.852266] Node 0 DMA free:11080kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 766.880396] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 766.885653] Node 0 DMA32 free:183112kB min:35996kB low:44992kB high:53988kB active_anon:70972kB inactive_anon:19324kB active_file:1084kB inactive_file:3624kB unevictable:0kB writepending:56kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7744kB pagetables:2260kB bounce:0kB free_pcp:1856kB local_pcp:480kB free_cma:0kB [ 766.916276] lowmem_reserve[]: 0 0 1 1 1 [ 766.920897] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 766.947577] lowmem_reserve[]: 0 0 0 0 0 [ 766.951680] Node 1 Normal free:1696260kB min:53876kB low:67344kB high:80812kB active_anon:964kB inactive_anon:32588kB active_file:56kB inactive_file:8196kB unevictable:0kB writepending:4kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:128kB pagetables:220kB bounce:0kB free_pcp:2740kB local_pcp:1388kB free_cma:0kB [ 766.982216] lowmem_reserve[]: 0 0 0 0 0 [ 766.987024] Node 0 DMA: 2*4kB (U) 2*8kB (U) 3*16kB (U) 2*32kB (U) 3*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 11080kB [ 767.001285] Node 0 DMA32: 4845*4kB (UME) 9265*8kB (UME) 8021*16kB (UME) 1741*32kB (UME) 36*64kB (UME) 10*128kB (UME) 5*256kB (UM) 6*512kB (UM) 3*1024kB (U) 3*2048kB (UM) 3*4096kB (UM) = 306988kB [ 767.056726] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 767.076757] Node 1 Normal: 57*4kB (UME) 30*8kB (UME) 23*16kB (U) 394*32kB (UM) 326*64kB (UM) 292*128kB (UME) 146*256kB (UME) 110*512kB (UME) 87*1024kB (UE) 386*2048kB (UE) 159*4096kB (U) = 1696260kB [ 767.094797] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 767.103757] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 767.112416] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 767.121516] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 767.130150] 17005 total pagecache pages [ 767.135894] 0 pages in swap cache [ 767.139605] Swap cache stats: add 0, delete 0, find 0/0 [ 767.145126] Free swap = 0kB [ 767.148213] Total swap = 0kB [ 767.151235] 2097051 pages RAM [ 767.154338] 0 pages HighMem/MovableOnly [ 767.158381] 369649 pages reserved [ 767.161828] 0 pages cma reserved [ 767.165241] Unreclaimable slab info: [ 767.169385] Name Used Total [ 767.174970] pid_2 49KB 152KB [ 767.180479] batadv_tt_change_cache 0KB 3KB [ 767.186314] batadv_tl_cache 5KB 12KB [ 767.191784] TIPC 12KB 15KB [ 767.197246] SCTPv6 16KB 24KB [ 767.202757] SCTP 5KB 7KB [ 767.208228] DCCPv6 17KB 22KB [ 767.213602] DCCP 16KB 21KB [ 767.219080] RXRPC 13KB 13KB [ 767.224461] rxrpc_call_jar 90KB 94KB [ 767.229898] bridge_fdb_cache 10KB 15KB [ 767.237485] fib6_nodes 183KB 188KB [ 767.242860] ip6_dst_cache 221KB 326KB [ 767.248301] RAWv6 81KB 81KB [ 767.253667] UDPv6 30KB 37KB [ 767.259106] TCPv6 36KB 36KB [ 767.264485] nf_conntrack 7KB 18KB [ 767.270014] t10_alua_lu_gp_cache 0KB 3KB [ 767.275645] sd_ext_cdb 0KB 7KB [ 767.281169] scsi_sense_cache 1056KB 1060KB [ 767.286598] virtio_scsi_cmd 16KB 16KB [ 767.291988] sgpool-128 8KB 8KB [ 767.297422] sgpool-64 4KB 12KB [ 767.302792] sgpool-32 2KB 15KB [ 767.308240] sgpool-16 1KB 7KB [ 767.313621] sgpool-8 0KB 7KB [ 767.319072] mqueue_inode_cache 12KB 22KB [ 767.324533] bio_post_read_ctx 14KB 15KB [ 767.330212] bio-2 14KB 15KB [ 767.335582] jfs_mp 7KB 7KB [ 767.342758] cifs_small_rq 15KB 16KB [ 767.348288] cifs_request 67KB 67KB