VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000540)={0x0, @win={{0xffffffe1, 0x6, 0x5, 0x6}, 0xf, 0xfffffff7, &(0x7f0000000440)={{0x8, 0x7, 0x6, 0x3}, &(0x7f0000000400)={{0x2, 0xca, 0xc4, 0xff}, &(0x7f0000000140)={{0x7, 0x5, 0x200, 0x8}}}}, 0x1, &(0x7f0000000480)="4e9fd99a22fc41ded89f22e9038a8b2537a1cb36ad0683a4c33ddfabd188bc5a4fb384abf49481e96f90ff56628cadb3ceb9cc8d70f8c962ee9a11fde7c524763a7f9891a6aec8d24aa6520da3bacf74747b967b08f1c94b1b169a00db97af064b03e42081b91d3655cad632bc11d861f05e7a595eb968b4bdb30eb4faf84f9f6c2ebfc097135df2dda49713221e09533732c6a54b08eb33bcdff10ffca3d44606a2a038745103946dee845856712b67428387b2814c386f71a08f4da69c", 0x81}}) (async) r4 = syz_open_dev$mouse(&(0x7f0000000200), 0x1, 0x18000) write$UHID_CREATE2(r4, &(0x7f0000000240)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x7c, 0x4d, 0x1, 0x7, 0x4, 0x1f, "d17b9fbbab44c81789615ea7c3f77977efcff07a6d1c2711b901d51f703c58a7eb37b0fc5f97b1dff0d8ed1d9c9e9720a5684cb28644be054f7283b3dd571153a53b2dd63d6dfc2ee2dd3950f74c4bdf9b5e844a92f7b98657389630846e6506fa82ba635b2072b70fe272910000692449d537c005de08a58a0fa688"}}, 0x194) 08:49:06 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 08:49:06 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @win={{}, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)="3e1a3797bf9c2177b8cf27adef040ca5660415114cecfc3d1928d0a1ea4e62c80ce36cbdffeb4c", 0x9f}}) 08:49:06 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@mmap={0x9, 0x0, 0x4, 0x100, 0x66, {0x0, 0xea60}, {0x4, 0x0, 0x2, 0x20, 0x7, 0x4, "457d3ba0"}, 0x7, 0x1, {}, 0x9, 0x0, 0xffffffffffffffff}) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x81, 0x101001) (async) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)=@multiplanar_overlay={0x8, 0x1, 0x4, 0x400, 0x3f, {0x0, 0x2710}, {0x1, 0x8, 0xbd, 0x6, 0x8, 0x1, "7c5bfac8"}, 0x7ff, 0x3, {&(0x7f0000000100)=[{0x1, 0x9, {0xfffffb57}, 0x8}, {0x81, 0x8000, {0x8b0}, 0x7ff}]}, 0x5, 0x0, r1}) 08:49:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x101040) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000040)={0x0, 0x1}) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000c00), 0x100200, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async, rerun: 64) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x2, 0x200, 0x3, {0x2, @sliced={0x6, [0x7, 0x0, 0x7, 0xfa37, 0xfffa, 0x1, 0x5, 0x7ff, 0xff7e, 0x81, 0x2, 0x2, 0x8, 0x5, 0x5, 0x2, 0xe1d, 0x8001, 0xffff, 0x8, 0x0, 0x5, 0x81, 0x3f, 0x2, 0x7, 0x4, 0x3ca, 0x8, 0x3, 0x0, 0x2c, 0x6a, 0x96, 0x6, 0x1, 0x7fff, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3f, 0x2, 0x2, 0x2, 0x800], 0xffffffff}}, 0x3}) (rerun: 64) 08:49:06 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff], 0x10004}}, 0xffffffe1}) 08:49:06 executing program 2: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x4282, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000080)={{0x1000, 0xc518}, {0x2, 0x4}, 0x3}) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:06 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 08:49:06 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8], 0x10004}}, 0xffffffe1}) 08:49:06 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @win={{}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="3e1a3797bf9c2177b8cf27adef040ca5660415114cecfc3d1928d0a1ea4e62c80ce36cbdffeb4c", 0x9f}}) 08:49:06 executing program 2: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x4282, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000080)={{0x1000, 0xc518}, {0x2, 0x4}, 0x3}) (async) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:06 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@mmap={0x9, 0x0, 0x4, 0x100, 0x66, {0x0, 0xea60}, {0x4, 0x0, 0x2, 0x20, 0x7, 0x4, "457d3ba0"}, 0x7, 0x1, {}, 0x9, 0x0, 0xffffffffffffffff}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x81, 0x101001) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)=@multiplanar_overlay={0x8, 0x1, 0x4, 0x400, 0x3f, {0x0, 0x2710}, {0x1, 0x8, 0xbd, 0x6, 0x8, 0x1, "7c5bfac8"}, 0x7ff, 0x3, {&(0x7f0000000100)=[{0x1, 0x9, {0xfffffb57}, 0x8}, {0x81, 0x8000, {0x8b0}, 0x7ff}]}, 0x5, 0x0, r1}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@mmap={0x9, 0x0, 0x4, 0x100, 0x66, {0x0, 0xea60}, {0x4, 0x0, 0x2, 0x20, 0x7, 0x4, "457d3ba0"}, 0x7, 0x1, {}, 0x9}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x81, 0x101001) (async) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)=@multiplanar_overlay={0x8, 0x1, 0x4, 0x400, 0x3f, {0x0, 0x2710}, {0x1, 0x8, 0xbd, 0x6, 0x8, 0x1, "7c5bfac8"}, 0x7ff, 0x3, {&(0x7f0000000100)=[{0x1, 0x9, {0xfffffb57}, 0x8}, {0x81, 0x8000, {0x8b0}, 0x7ff}]}, 0x5, 0x0, r1}) (async) 08:49:06 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 08:49:06 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f}}) 08:49:06 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40], 0x10004}}, 0xffffffe1}) 08:49:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x101040) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000040)={0x0, 0x1}) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000c00), 0x100200, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x2, 0x200, 0x3, {0x2, @sliced={0x6, [0x7, 0x0, 0x7, 0xfa37, 0xfffa, 0x1, 0x5, 0x7ff, 0xff7e, 0x81, 0x2, 0x2, 0x8, 0x5, 0x5, 0x2, 0xe1d, 0x8001, 0xffff, 0x8, 0x0, 0x5, 0x81, 0x3f, 0x2, 0x7, 0x4, 0x3ca, 0x8, 0x3, 0x0, 0x2c, 0x6a, 0x96, 0x6, 0x1, 0x7fff, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3f, 0x2, 0x2, 0x2, 0x800], 0xffffffff}}, 0x3}) 08:49:06 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x4, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) 08:49:06 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 08:49:06 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:06 executing program 2: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x4282, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000080)={{0x1000, 0xc518}, {0x2, 0x4}, 0x3}) (async) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:06 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81], 0x10004}}, 0xffffffe1}) 08:49:06 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x4, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x4, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async) 08:49:06 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1], 0x10004}}, 0xffffffe1}) 08:49:06 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7fffffff, 0x4, {0x2, @sliced={0x0, [0x1, 0x8, 0x8, 0x3ff, 0xffff, 0x4, 0x5, 0x40, 0x7, 0xc60, 0x4, 0x3, 0x3, 0x8000, 0x8001, 0x8, 0x515, 0xf001, 0x3f, 0x923, 0x0, 0x1, 0xfff9, 0x6, 0x6, 0x9, 0x401, 0x200, 0x8000, 0x1, 0x7, 0xca, 0x4, 0x984b, 0x0, 0x623, 0xad5, 0x2, 0x1, 0x3f, 0x8, 0x1, 0x200, 0x28, 0x4, 0x3afa, 0x3, 0xfff], 0x9}}, 0x20000}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) 08:49:06 executing program 0: syz_open_dev$vim2m(&(0x7f00000000c0), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:06 executing program 2: select(0x40, &(0x7f0000000080)={0x2, 0xe976, 0xfb0, 0x4, 0xb39, 0x6, 0x0, 0x3}, &(0x7f0000000180)={0x8, 0xc65, 0x0, 0x7, 0x20, 0x10001, 0x9, 0x2}, &(0x7f00000001c0)={0x1, 0x8300000000000000, 0x7f, 0x2, 0x1, 0x1, 0x101, 0xffffffffffffffff}, &(0x7f0000000200)) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000000670200c1f4490d84803f58ba79234c7b0bcf4bdf476f1b87183b90ff4f089679995ab02df05fd57ec517559ff6731699734f126db502f6a2660ac76a7dcd15db47868840816f2fa2ebdf9ebd6007cdcf342b3371e44e64b612a75180b2333f6e691373feba884435491ba1036c06c7bd68e1"], 0x6) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x3ff, 0x1, 0x3, "dbb3232ae615594f583540ac13bf04f0820607e3906f26079d7fea0c7ecfa05c", 0x31303553}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x86, 0x102000}) 08:49:06 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:06 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x4, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) 08:49:06 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5], 0x10004}}, 0xffffffe1}) 08:49:06 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7fffffff, 0x4, {0x2, @sliced={0x0, [0x1, 0x8, 0x8, 0x3ff, 0xffff, 0x4, 0x5, 0x40, 0x7, 0xc60, 0x4, 0x3, 0x3, 0x8000, 0x8001, 0x8, 0x515, 0xf001, 0x3f, 0x923, 0x0, 0x1, 0xfff9, 0x6, 0x6, 0x9, 0x401, 0x200, 0x8000, 0x1, 0x7, 0xca, 0x4, 0x984b, 0x0, 0x623, 0xad5, 0x2, 0x1, 0x3f, 0x8, 0x1, 0x200, 0x28, 0x4, 0x3afa, 0x3, 0xfff], 0x9}}, 0x20000}) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) 08:49:06 executing program 2: select(0x40, &(0x7f0000000080)={0x2, 0xe976, 0xfb0, 0x4, 0xb39, 0x6, 0x0, 0x3}, &(0x7f0000000180)={0x8, 0xc65, 0x0, 0x7, 0x20, 0x10001, 0x9, 0x2}, &(0x7f00000001c0)={0x1, 0x8300000000000000, 0x7f, 0x2, 0x1, 0x1, 0x101, 0xffffffffffffffff}, &(0x7f0000000200)) (async) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000000670200c1f4490d84803f58ba79234c7b0bcf4bdf476f1b87183b90ff4f089679995ab02df05fd57ec517559ff6731699734f126db502f6a2660ac76a7dcd15db47868840816f2fa2ebdf9ebd6007cdcf342b3371e44e64b612a75180b2333f6e691373feba884435491ba1036c06c7bd68e1"], 0x6) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x3ff, 0x1, 0x3, "dbb3232ae615594f583540ac13bf04f0820607e3906f26079d7fea0c7ecfa05c", 0x31303553}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x86, 0x102000}) 08:49:06 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:06 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5], 0x10004}}, 0xffffffe1}) 08:49:06 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac], 0x10004}}, 0xffffffe1}) 08:49:06 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7fffffff, 0x4, {0x2, @sliced={0x0, [0x1, 0x8, 0x8, 0x3ff, 0xffff, 0x4, 0x5, 0x40, 0x7, 0xc60, 0x4, 0x3, 0x3, 0x8000, 0x8001, 0x8, 0x515, 0xf001, 0x3f, 0x923, 0x0, 0x1, 0xfff9, 0x6, 0x6, 0x9, 0x401, 0x200, 0x8000, 0x1, 0x7, 0xca, 0x4, 0x984b, 0x0, 0x623, 0xad5, 0x2, 0x1, 0x3f, 0x8, 0x1, 0x200, 0x28, 0x4, 0x3afa, 0x3, 0xfff], 0x9}}, 0x20000}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) 08:49:06 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f, 0x48, 0x2, 0x584d, 0x3ff, 0x483, 0x100], 0x10004}}, 0xffffffe1}) 08:49:06 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x80) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000100)={0xfff, 0xc, [0x4000000, 0x6, 0x0]}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) 08:49:06 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac], 0x10004}}, 0xffffffe1}) 08:49:06 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x0, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:06 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x4000000000000000, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:06 executing program 2: select(0x40, &(0x7f0000000080)={0x2, 0xe976, 0xfb0, 0x4, 0xb39, 0x6, 0x0, 0x3}, &(0x7f0000000180)={0x8, 0xc65, 0x0, 0x7, 0x20, 0x10001, 0x9, 0x2}, &(0x7f00000001c0)={0x1, 0x8300000000000000, 0x7f, 0x2, 0x1, 0x1, 0x101, 0xffffffffffffffff}, &(0x7f0000000200)) (async, rerun: 32) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async, rerun: 32) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000000670200c1f4490d84803f58ba79234c7b0bcf4bdf476f1b87183b90ff4f089679995ab02df05fd57ec517559ff6731699734f126db502f6a2660ac76a7dcd15db47868840816f2fa2ebdf9ebd6007cdcf342b3371e44e64b612a75180b2333f6e691373feba884435491ba1036c06c7bd68e1"], 0x6) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x3ff, 0x1, 0x3, "dbb3232ae615594f583540ac13bf04f0820607e3906f26079d7fea0c7ecfa05c", 0x31303553}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x86, 0x102000}) 08:49:06 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f, 0x48, 0x2, 0x584d, 0x3ff, 0x483, 0x100, 0x7ff, 0x200, 0x8fe6, 0x100, 0xffff, 0x80, 0x3ff, 0xc9d6], 0x10004}}, 0xffffffe1}) 08:49:06 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x80) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000100)={0xfff, 0xc, [0x4000000, 0x6, 0x0]}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x80) (async) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000100)={0xfff, 0xc, [0x4000000, 0x6, 0x0]}) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async) 08:49:06 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x4000000000000000, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:06 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f, 0x48, 0x2, 0x584d, 0x3ff, 0x483, 0x100, 0x7ff, 0x200, 0x8fe6, 0x100, 0xffff, 0x80, 0x3ff, 0xc9d6], 0x10004}}, 0xffffffe1}) 08:49:06 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac], 0x10004}}, 0xffffffe1}) 08:49:06 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:06 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x0, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:06 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x4000000000000000, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x4000000000000000, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) 08:49:06 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async, rerun: 64) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x80) (rerun: 64) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000100)={0xfff, 0xc, [0x4000000, 0x6, 0x0]}) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) 08:49:06 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:06 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f, 0x48, 0x2, 0x584d, 0x3ff, 0x483, 0x100, 0x7ff, 0x200, 0x8fe6, 0x100, 0xffff, 0x80, 0x3ff, 0xc9d6], 0x10004}}, 0xffffffe1}) 08:49:06 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x0, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:06 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0x0, 0xb5], 0x10004}}, 0xffffffe1}) 08:49:06 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) 08:49:06 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:06 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x20, 0x5, 0x1, {0x2, @pix={0x3, 0x10001, 0x35323645, 0x0, 0x33, 0x739, 0x8, 0x0, 0x1, 0x0, 0x0, 0x5}}, 0x1}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) write$P9_RFSYNC(r1, &(0x7f0000000100)={0x7, 0x33, 0x4}, 0x7) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x14c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x74, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x517f1e44}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3e25}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f086895}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb940}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1083}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1383a2e3}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4c5d}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd9f5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x53a3}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74052985}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d85eb7e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x769e482f}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb0, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x219a278d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x1, 0x5, 0x1e796349}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8054630}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa492b47}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x723493c3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f86dea2}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 08:49:06 executing program 0: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f, 0x48, 0x2, 0x584d, 0x3ff, 0x483, 0x100, 0x7ff, 0x200, 0x8fe6, 0x100, 0xffff, 0x80, 0x3ff, 0xc9d6], 0x10004}}, 0xffffffe1}) 08:49:07 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x0, 0x0, 0xb5], 0x10004}}, 0xffffffe1}) 08:49:07 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) 08:49:07 executing program 2: r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000a7bb829cf1cc8b95305c22c1ee9ed8d70"], 0x6) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r0, r1, 0x4}, 0x10) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)={0xe, {0x2, 0x5, 0x3, 0x34, "a483031f3b05f257f2c7fbf4f9c1897dde8fa1e64b22f585f6e424ea4c4c539a9ffc014273b397bcad970d0d09a14c884553b8b1"}}, 0x40) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000cc0), 0x6) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r3) 08:49:07 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x0, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:07 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x20, 0x5, 0x1, {0x2, @pix={0x3, 0x10001, 0x35323645, 0x0, 0x33, 0x739, 0x8, 0x0, 0x1, 0x0, 0x0, 0x5}}, 0x1}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) write$P9_RFSYNC(r1, &(0x7f0000000100)={0x7, 0x33, 0x4}, 0x7) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x14c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x74, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x517f1e44}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3e25}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f086895}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb940}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1083}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1383a2e3}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4c5d}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd9f5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x53a3}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74052985}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d85eb7e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x769e482f}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb0, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x219a278d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x1, 0x5, 0x1e796349}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8054630}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa492b47}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x723493c3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f86dea2}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x20, 0x5, 0x1, {0x2, @pix={0x3, 0x10001, 0x35323645, 0x0, 0x33, 0x739, 0x8, 0x0, 0x1, 0x0, 0x0, 0x5}}, 0x1}) (async) pipe2$9p(&(0x7f0000000000), 0x4880) (async) write$P9_RFSYNC(r1, &(0x7f0000000100)={0x7, 0x33, 0x4}, 0x7) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x14c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x74, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x517f1e44}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3e25}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f086895}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb940}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1083}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1383a2e3}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4c5d}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd9f5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x53a3}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74052985}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d85eb7e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x769e482f}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb0, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x219a278d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x1, 0x5, 0x1e796349}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8054630}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa492b47}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x723493c3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f86dea2}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) (async) 08:49:07 executing program 0: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f, 0x48, 0x2, 0x584d, 0x3ff, 0x483, 0x100, 0x7ff, 0x200, 0x8fe6, 0x100, 0xffff, 0x80, 0x3ff, 0xc9d6], 0x10004}}, 0xffffffe1}) 08:49:07 executing program 2: r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000a7bb829cf1cc8b95305c22c1ee9ed8d70"], 0x6) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r0, r1, 0x4}, 0x10) (async) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)={0xe, {0x2, 0x5, 0x3, 0x34, "a483031f3b05f257f2c7fbf4f9c1897dde8fa1e64b22f585f6e424ea4c4c539a9ffc014273b397bcad970d0d09a14c884553b8b1"}}, 0x40) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000cc0), 0x6) (async, rerun: 32) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r3) (rerun: 32) 08:49:07 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x0, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:07 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) (async) 08:49:07 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0x0, 0x0, 0x0, 0xb5], 0x10004}}, 0xffffffe1}) 08:49:07 executing program 0: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f, 0x48, 0x2, 0x584d, 0x3ff, 0x483, 0x100, 0x7ff, 0x200, 0x8fe6, 0x100, 0xffff, 0x80, 0x3ff, 0xc9d6], 0x10004}}, 0xffffffe1}) 08:49:07 executing program 2: r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000a7bb829cf1cc8b95305c22c1ee9ed8d70"], 0x6) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r0, r1, 0x4}, 0x10) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)={0xe, {0x2, 0x5, 0x3, 0x34, "a483031f3b05f257f2c7fbf4f9c1897dde8fa1e64b22f585f6e424ea4c4c539a9ffc014273b397bcad970d0d09a14c884553b8b1"}}, 0x40) (async) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000cc0), 0x6) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r3) 08:49:07 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x20, 0x5, 0x1, {0x2, @pix={0x3, 0x10001, 0x35323645, 0x0, 0x33, 0x739, 0x8, 0x0, 0x1, 0x0, 0x0, 0x5}}, 0x1}) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) write$P9_RFSYNC(r1, &(0x7f0000000100)={0x7, 0x33, 0x4}, 0x7) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x14c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x74, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x517f1e44}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3e25}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f086895}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb940}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1083}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1383a2e3}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4c5d}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd9f5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x53a3}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74052985}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d85eb7e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x769e482f}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb0, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x219a278d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x1, 0x5, 0x1e796349}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8054630}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa492b47}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x723493c3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f86dea2}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 08:49:07 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x1, 0x31303453, 0x1, @discrete={0x6, 0x66e7bbc9}}) 08:49:07 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x0, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f, 0x48, 0x2, 0x584d, 0x3ff, 0x483, 0x100, 0x7ff, 0x200, 0x8fe6, 0x100, 0xffff, 0x80, 0x3ff, 0xc9d6], 0x10004}}, 0xffffffe1}) 08:49:07 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0xb5], 0x10004}}, 0xffffffe1}) 08:49:07 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x1, 0x31303453, 0x1, @discrete={0x6, 0x66e7bbc9}}) 08:49:07 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f, 0x48, 0x2, 0x584d, 0x3ff, 0x483, 0x100, 0x7ff, 0x200, 0x8fe6, 0x100, 0xffff, 0x80, 0x3ff, 0xc9d6, 0x3, 0x82, 0x7ff, 0x6000, 0x200, 0x0, 0x1], 0x10004}}, 0xffffffe1}) 08:49:07 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)=@multiplanar_userptr={0x24714e66, 0x0, 0x4, 0x2050, 0x9, {r2, r3/1000+60000}, {0x1, 0xe, 0x2, 0x11, 0xf3, 0x9, "22439a5b"}, 0x9, 0x2, {&(0x7f0000000140)=[{0x54858259, 0x10001, {&(0x7f0000000080)}, 0x8000}, {0x527, 0x101, {&(0x7f0000000100)}, 0x7}]}, 0x8}) 08:49:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f, 0x48, 0x2, 0x584d, 0x3ff, 0x483, 0x100, 0x7ff, 0x200, 0x8fe6, 0x100, 0xffff, 0x80, 0x3ff, 0xc9d6], 0x10004}}, 0xffffffe1}) 08:49:07 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) ioctl$PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434) 08:49:07 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x1, 0x31303453, 0x1, @discrete={0x6, 0x66e7bbc9}}) 08:49:07 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5], 0x10004}}, 0xffffffe1}) 08:49:07 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)=@multiplanar_userptr={0x24714e66, 0x0, 0x4, 0x2050, 0x9, {r2, r3/1000+60000}, {0x1, 0xe, 0x2, 0x11, 0xf3, 0x9, "22439a5b"}, 0x9, 0x2, {&(0x7f0000000140)=[{0x54858259, 0x10001, {&(0x7f0000000080)}, 0x8000}, {0x527, 0x101, {&(0x7f0000000100)}, 0x7}]}, 0x8}) 08:49:07 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x3, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000300)) 08:49:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f, 0x48, 0x2, 0x584d, 0x3ff, 0x483, 0x100, 0x7ff, 0x200, 0x8fe6, 0x100, 0xffff, 0x80, 0x3ff, 0xc9d6], 0x10004}}, 0xffffffe1}) 08:49:07 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) ioctl$PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434) 08:49:07 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5], 0x10004}}, 0xffffffe1}) 08:49:07 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x2000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x1, &(0x7f0000000000)=@raw=[@alu={0x7, 0x0, 0x5, 0xa, 0x1, 0xc, 0xffffffffffffffff}], &(0x7f0000000040)='syzkaller\x00', 0xaa5, 0xaa, &(0x7f0000000440)=""/170, 0x41100, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0xd, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2]}, 0x80) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x6, 0x30314247, 0x5, 0x8, [{0xff, 0x9}, {0x3, 0x7}, {0x7ff, 0x2}, {0x0, 0xfffff649}, {0x1}, {0x10001, 0x7f}, {0x0, 0x1}, {0x9, 0xfffffffd}], 0x6, 0xff, 0x13, 0x2, 0x2}}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000340)={0x0, @sliced={0x4, [0x1d, 0x4, 0x5854, 0xffc0, 0x6, 0x9, 0x3, 0x9502, 0x6, 0x7, 0x401, 0xd5, 0x2, 0x45e, 0x800, 0x4, 0x461, 0x3f, 0xf317, 0x0, 0x1f, 0x4, 0x3, 0x5, 0x5, 0x9, 0x20, 0x0, 0x3, 0x20, 0x0, 0x79, 0x9122, 0x0, 0x3f, 0x2, 0x2e, 0x2, 0x8, 0x6, 0x80, 0xffe9, 0x4, 0x401, 0x120, 0x0, 0x0, 0x99dd], 0xfffffffe}}) 08:49:07 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) (rerun: 64) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)=@multiplanar_userptr={0x24714e66, 0x0, 0x4, 0x2050, 0x9, {r2, r3/1000+60000}, {0x1, 0xe, 0x2, 0x11, 0xf3, 0x9, "22439a5b"}, 0x9, 0x2, {&(0x7f0000000140)=[{0x54858259, 0x10001, {&(0x7f0000000080)}, 0x8000}, {0x527, 0x101, {&(0x7f0000000100)}, 0x7}]}, 0x8}) 08:49:07 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f, 0x48, 0x2, 0x584d, 0x3ff, 0x483, 0x100, 0x7ff, 0x200, 0x8fe6, 0x100, 0xffff, 0x80, 0x3ff, 0xc9d6], 0x10004}}, 0xffffffe1}) 08:49:07 executing program 1: syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:07 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) ioctl$PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async) ioctl$PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434) (async) 08:49:07 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5], 0x10004}}, 0xffffffe1}) 08:49:07 executing program 2: syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2b4481, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000200)={0x1, @pix={0x0, 0x6, 0x32314752, 0x3, 0x7, 0x10000, 0x4, 0x5, 0x0, 0x3, 0x3, 0x2}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x1) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000100)={0x3, 0x3136564e, 0x2, @stepwise={0x7fffffff, 0x9, 0x1, 0x3, 0x0, 0xffffffff}}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8, 0x1000002}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000300)) 08:49:07 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x2000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x1, &(0x7f0000000000)=@raw=[@alu={0x7, 0x0, 0x5, 0xa, 0x1, 0xc, 0xffffffffffffffff}], &(0x7f0000000040)='syzkaller\x00', 0xaa5, 0xaa, &(0x7f0000000440)=""/170, 0x41100, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0xd, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2]}, 0x80) (async) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x6, 0x30314247, 0x5, 0x8, [{0xff, 0x9}, {0x3, 0x7}, {0x7ff, 0x2}, {0x0, 0xfffff649}, {0x1}, {0x10001, 0x7f}, {0x0, 0x1}, {0x9, 0xfffffffd}], 0x6, 0xff, 0x13, 0x2, 0x2}}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000340)={0x0, @sliced={0x4, [0x1d, 0x4, 0x5854, 0xffc0, 0x6, 0x9, 0x3, 0x9502, 0x6, 0x7, 0x401, 0xd5, 0x2, 0x45e, 0x800, 0x4, 0x461, 0x3f, 0xf317, 0x0, 0x1f, 0x4, 0x3, 0x5, 0x5, 0x9, 0x20, 0x0, 0x3, 0x20, 0x0, 0x79, 0x9122, 0x0, 0x3f, 0x2, 0x2e, 0x2, 0x8, 0x6, 0x80, 0xffe9, 0x4, 0x401, 0x120, 0x0, 0x0, 0x99dd], 0xfffffffe}}) 08:49:07 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f, 0x48, 0x2, 0x584d, 0x3ff, 0x483, 0x100, 0x7ff, 0x200, 0x8fe6, 0x100, 0xffff, 0x80, 0x3ff, 0xc9d6], 0x10004}}, 0xffffffe1}) 08:49:07 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5], 0x10004}}, 0xffffffe1}) 08:49:07 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x2000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x1, &(0x7f0000000000)=@raw=[@alu={0x7, 0x0, 0x5, 0xa, 0x1, 0xc, 0xffffffffffffffff}], &(0x7f0000000040)='syzkaller\x00', 0xaa5, 0xaa, &(0x7f0000000440)=""/170, 0x41100, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0xd, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2]}, 0x80) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x6, 0x30314247, 0x5, 0x8, [{0xff, 0x9}, {0x3, 0x7}, {0x7ff, 0x2}, {0x0, 0xfffff649}, {0x1}, {0x10001, 0x7f}, {0x0, 0x1}, {0x9, 0xfffffffd}], 0x6, 0xff, 0x13, 0x2, 0x2}}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000340)={0x0, @sliced={0x4, [0x1d, 0x4, 0x5854, 0xffc0, 0x6, 0x9, 0x3, 0x9502, 0x6, 0x7, 0x401, 0xd5, 0x2, 0x45e, 0x800, 0x4, 0x461, 0x3f, 0xf317, 0x0, 0x1f, 0x4, 0x3, 0x5, 0x5, 0x9, 0x20, 0x0, 0x3, 0x20, 0x0, 0x79, 0x9122, 0x0, 0x3f, 0x2, 0x2e, 0x2, 0x8, 0x6, 0x80, 0xffe9, 0x4, 0x401, 0x120, 0x0, 0x0, 0x99dd], 0xfffffffe}}) 08:49:07 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)=@overlay={0x7, 0x1, 0x4, 0x100000, 0x1, {r1, r2/1000+10000}, {0x1, 0xc, 0xc9, 0x1, 0x3, 0x8}, 0x1, 0x3, {}, 0x7, 0x0, r0}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0xfffffffc, 0x3, 0x4, 0x0, 0x2}) 08:49:07 executing program 2: syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2b4481, 0x0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000200)={0x1, @pix={0x0, 0x6, 0x32314752, 0x3, 0x7, 0x10000, 0x4, 0x5, 0x0, 0x3, 0x3, 0x2}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x1) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000100)={0x3, 0x3136564e, 0x2, @stepwise={0x7fffffff, 0x9, 0x1, 0x3, 0x0, 0xffffffff}}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8, 0x1000002}) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000300)) 08:49:07 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x2000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x1, &(0x7f0000000000)=@raw=[@alu={0x7, 0x0, 0x5, 0xa, 0x1, 0xc, 0xffffffffffffffff}], &(0x7f0000000040)='syzkaller\x00', 0xaa5, 0xaa, &(0x7f0000000440)=""/170, 0x41100, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0xd, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2]}, 0x80) (async) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x6, 0x30314247, 0x5, 0x8, [{0xff, 0x9}, {0x3, 0x7}, {0x7ff, 0x2}, {0x0, 0xfffff649}, {0x1}, {0x10001, 0x7f}, {0x0, 0x1}, {0x9, 0xfffffffd}], 0x6, 0xff, 0x13, 0x2, 0x2}}) (async) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000340)={0x0, @sliced={0x4, [0x1d, 0x4, 0x5854, 0xffc0, 0x6, 0x9, 0x3, 0x9502, 0x6, 0x7, 0x401, 0xd5, 0x2, 0x45e, 0x800, 0x4, 0x461, 0x3f, 0xf317, 0x0, 0x1f, 0x4, 0x3, 0x5, 0x5, 0x9, 0x20, 0x0, 0x3, 0x20, 0x0, 0x79, 0x9122, 0x0, 0x3f, 0x2, 0x2e, 0x2, 0x8, 0x6, 0x80, 0xffe9, 0x4, 0x401, 0x120, 0x0, 0x0, 0x99dd], 0xfffffffe}}) 08:49:07 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f, 0x48, 0x2, 0x584d, 0x3ff, 0x483, 0x100, 0x7ff, 0x200, 0x8fe6, 0x100, 0xffff, 0x80, 0x3ff, 0xc9d6], 0x10004}}, 0xffffffe1}) 08:49:07 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5], 0x10004}}, 0xffffffe1}) 08:49:07 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x2000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x1, &(0x7f0000000000)=@raw=[@alu={0x7, 0x0, 0x5, 0xa, 0x1, 0xc, 0xffffffffffffffff}], &(0x7f0000000040)='syzkaller\x00', 0xaa5, 0xaa, &(0x7f0000000440)=""/170, 0x41100, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0xd, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2]}, 0x80) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x6, 0x30314247, 0x5, 0x8, [{0xff, 0x9}, {0x3, 0x7}, {0x7ff, 0x2}, {0x0, 0xfffff649}, {0x1}, {0x10001, 0x7f}, {0x0, 0x1}, {0x9, 0xfffffffd}], 0x6, 0xff, 0x13, 0x2, 0x2}}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000340)={0x0, @sliced={0x4, [0x1d, 0x4, 0x5854, 0xffc0, 0x6, 0x9, 0x3, 0x9502, 0x6, 0x7, 0x401, 0xd5, 0x2, 0x45e, 0x800, 0x4, 0x461, 0x3f, 0xf317, 0x0, 0x1f, 0x4, 0x3, 0x5, 0x5, 0x9, 0x20, 0x0, 0x3, 0x20, 0x0, 0x79, 0x9122, 0x0, 0x3f, 0x2, 0x2e, 0x2, 0x8, 0x6, 0x80, 0xffe9, 0x4, 0x401, 0x120, 0x0, 0x0, 0x99dd], 0xfffffffe}}) 08:49:07 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)=@overlay={0x7, 0x1, 0x4, 0x100000, 0x1, {r1, r2/1000+10000}, {0x1, 0xc, 0xc9, 0x1, 0x3, 0x8}, 0x1, 0x3, {}, 0x7, 0x0, r0}) (async, rerun: 64) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0xfffffffc, 0x3, 0x4, 0x0, 0x2}) (rerun: 64) 08:49:07 executing program 2: syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2b4481, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000200)={0x1, @pix={0x0, 0x6, 0x32314752, 0x3, 0x7, 0x10000, 0x4, 0x5, 0x0, 0x3, 0x3, 0x2}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x1) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000100)={0x3, 0x3136564e, 0x2, @stepwise={0x7fffffff, 0x9, 0x1, 0x3, 0x0, 0xffffffff}}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8, 0x1000002}) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000300)) 08:49:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 08:49:07 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @vbi={0x2, 0x4964, 0x9, 0x41495043, [0x2, 0x400], [0x80003], 0x13a}}, 0xff}) 08:49:07 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5], 0x10004}}, 0xffffffe1}) 08:49:07 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x2000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x1, &(0x7f0000000000)=@raw=[@alu={0x7, 0x0, 0x5, 0xa, 0x1, 0xc, 0xffffffffffffffff}], &(0x7f0000000040)='syzkaller\x00', 0xaa5, 0xaa, &(0x7f0000000440)=""/170, 0x41100, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0xd, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2]}, 0x80) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x6, 0x30314247, 0x5, 0x8, [{0xff, 0x9}, {0x3, 0x7}, {0x7ff, 0x2}, {0x0, 0xfffff649}, {0x1}, {0x10001, 0x7f}, {0x0, 0x1}, {0x9, 0xfffffffd}], 0x6, 0xff, 0x13, 0x2, 0x2}}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000340)={0x0, @sliced={0x4, [0x1d, 0x4, 0x5854, 0xffc0, 0x6, 0x9, 0x3, 0x9502, 0x6, 0x7, 0x401, 0xd5, 0x2, 0x45e, 0x800, 0x4, 0x461, 0x3f, 0xf317, 0x0, 0x1f, 0x4, 0x3, 0x5, 0x5, 0x9, 0x20, 0x0, 0x3, 0x20, 0x0, 0x79, 0x9122, 0x0, 0x3f, 0x2, 0x2e, 0x2, 0x8, 0x6, 0x80, 0xffe9, 0x4, 0x401, 0x120, 0x0, 0x0, 0x99dd], 0xfffffffe}}) 08:49:07 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}, 0xffffffe1}) 08:49:07 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)=@overlay={0x7, 0x1, 0x4, 0x100000, 0x1, {r1, r2/1000+10000}, {0x1, 0xc, 0xc9, 0x1, 0x3, 0x8}, 0x1, 0x3, {}, 0x7, 0x0, r0}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0xfffffffc, 0x3, 0x4, 0x0, 0x2}) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)=@overlay={0x7, 0x1, 0x4, 0x100000, 0x1, {r1, r2/1000+10000}, {0x1, 0xc, 0xc9, 0x1, 0x3, 0x8}, 0x1, 0x3, {}, 0x7, 0x0, r0}) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0xfffffffc, 0x3, 0x4, 0x0, 0x2}) (async) 08:49:07 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x40, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 08:49:07 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x2000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x1, &(0x7f0000000000)=@raw=[@alu={0x7, 0x0, 0x5, 0xa, 0x1, 0xc, 0xffffffffffffffff}], &(0x7f0000000040)='syzkaller\x00', 0xaa5, 0xaa, &(0x7f0000000440)=""/170, 0x41100, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0xd, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2]}, 0x80) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x6, 0x30314247, 0x5, 0x8, [{0xff, 0x9}, {0x3, 0x7}, {0x7ff, 0x2}, {0x0, 0xfffff649}, {0x1}, {0x10001, 0x7f}, {0x0, 0x1}, {0x9, 0xfffffffd}], 0x6, 0xff, 0x13, 0x2, 0x2}}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) 08:49:07 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @vbi={0x2, 0x4964, 0x9, 0x41495043, [0x2, 0x400], [0x80003], 0x13a}}, 0xff}) 08:49:07 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:07 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x40, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:07 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x2000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x1, &(0x7f0000000000)=@raw=[@alu={0x7, 0x0, 0x5, 0xa, 0x1, 0xc, 0xffffffffffffffff}], &(0x7f0000000040)='syzkaller\x00', 0xaa5, 0xaa, &(0x7f0000000440)=""/170, 0x41100, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0xd, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2]}, 0x80) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x6, 0x30314247, 0x5, 0x8, [{0xff, 0x9}, {0x3, 0x7}, {0x7ff, 0x2}, {0x0, 0xfffff649}, {0x1}, {0x10001, 0x7f}, {0x0, 0x1}, {0x9, 0xfffffffd}], 0x6, 0xff, 0x13, 0x2, 0x2}}) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) 08:49:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 08:49:07 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (fail_nth: 1) 08:49:07 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x2000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x1, &(0x7f0000000000)=@raw=[@alu={0x7, 0x0, 0x5, 0xa, 0x1, 0xc, 0xffffffffffffffff}], &(0x7f0000000040)='syzkaller\x00', 0xaa5, 0xaa, &(0x7f0000000440)=""/170, 0x41100, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0xd, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2]}, 0x80) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x6, 0x30314247, 0x5, 0x8, [{0xff, 0x9}, {0x3, 0x7}, {0x7ff, 0x2}, {0x0, 0xfffff649}, {0x1}, {0x10001, 0x7f}, {0x0, 0x1}, {0x9, 0xfffffffd}], 0x6, 0xff, 0x13, 0x2, 0x2}}) 08:49:07 executing program 4: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) 08:49:07 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @vbi={0x2, 0x4964, 0x9, 0x41495043, [0x2, 0x400], [0x80003], 0x13a}}, 0xff}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @vbi={0x2, 0x4964, 0x9, 0x41495043, [0x2, 0x400], [0x80003], 0x13a}}, 0xff}) (async) 08:49:07 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x40, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x40, 0x2) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async) 08:49:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x0, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f, 0x48, 0x2, 0x584d, 0x3ff, 0x483, 0x100, 0x7ff, 0x200, 0x8fe6, 0x100, 0xffff, 0x80, 0x3ff, 0xc9d6], 0x10004}}, 0xffffffe1}) 08:49:07 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x2000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x1, &(0x7f0000000000)=@raw=[@alu={0x7, 0x0, 0x5, 0xa, 0x1, 0xc, 0xffffffffffffffff}], &(0x7f0000000040)='syzkaller\x00', 0xaa5, 0xaa, &(0x7f0000000440)=""/170, 0x41100, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0xd, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2]}, 0x80) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x6, 0x30314247, 0x5, 0x8, [{0xff, 0x9}, {0x3, 0x7}, {0x7ff, 0x2}, {0x0, 0xfffff649}, {0x1}, {0x10001, 0x7f}, {0x0, 0x1}, {0x9, 0xfffffffd}], 0x6, 0xff, 0x13, 0x2, 0x2}}) 08:49:07 executing program 4: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async) [ 649.207849] FAULT_INJECTION: forcing a failure. [ 649.207849] name failslab, interval 1, probability 0, space 0, times 0 [ 649.253082] CPU: 1 PID: 27231 Comm: syz-executor.5 Not tainted 4.14.302-syzkaller #0 [ 649.260977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 649.270325] Call Trace: [ 649.272917] dump_stack+0x1b2/0x281 [ 649.276545] should_fail.cold+0x10a/0x149 [ 649.280697] should_failslab+0xd6/0x130 [ 649.284673] kmem_cache_alloc_node_trace+0x25a/0x400 [ 649.289777] __kmalloc_node+0x38/0x70 [ 649.293665] kvmalloc_node+0x46/0xd0 [ 649.297461] ? video_ioctl2+0x30/0x30 [ 649.301258] video_usercopy+0x330/0xe70 [ 649.305235] ? v4l_g_ctrl+0x390/0x390 [ 649.309034] ? proc_fail_nth_write+0x7b/0x180 [ 649.313527] ? trace_hardirqs_on+0x10/0x10 [ 649.317760] ? fsnotify+0x974/0x11b0 [ 649.321478] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 649.326405] ? __handle_mm_fault+0x80f/0x4620 [ 649.330904] v4l2_ioctl+0x1bb/0x2f0 [ 649.334524] ? v4l2_open+0x2f0/0x2f0 [ 649.338234] do_vfs_ioctl+0x75a/0xff0 [ 649.342027] ? lock_acquire+0x170/0x3f0 [ 649.345997] ? ioctl_preallocate+0x1a0/0x1a0 08:49:07 executing program 4: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async) [ 649.350402] ? __fget+0x265/0x3e0 [ 649.353852] ? do_vfs_ioctl+0xff0/0xff0 [ 649.357823] ? security_file_ioctl+0x83/0xb0 [ 649.362226] SyS_ioctl+0x7f/0xb0 [ 649.365583] ? do_vfs_ioctl+0xff0/0xff0 [ 649.369560] do_syscall_64+0x1d5/0x640 [ 649.373450] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 649.378630] RIP: 0033:0x7fdbb66540a9 [ 649.382331] RSP: 002b:00007fdbb4bc6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 649.390050] RAX: ffffffffffffffda RBX: 00007fdbb6773f80 RCX: 00007fdbb66540a9 08:49:07 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) 08:49:08 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x2000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x1, &(0x7f0000000000)=@raw=[@alu={0x7, 0x0, 0x5, 0xa, 0x1, 0xc, 0xffffffffffffffff}], &(0x7f0000000040)='syzkaller\x00', 0xaa5, 0xaa, &(0x7f0000000440)=""/170, 0x41100, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0xd, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2]}, 0x80) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x6, 0x30314247, 0x5, 0x8, [{0xff, 0x9}, {0x3, 0x7}, {0x7ff, 0x2}, {0x0, 0xfffff649}, {0x1}, {0x10001, 0x7f}, {0x0, 0x1}, {0x9, 0xfffffffd}], 0x6, 0xff, 0x13, 0x2, 0x2}}) 08:49:08 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r1}, 0x8) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000003c0)=@multiplanar_userptr={0x6, 0x2, 0x4, 0x10, 0x6, {0x0, 0x2710}, {0x5, 0x2, 0x5, 0x84, 0xc7, 0x9, "ad64e75b"}, 0x1, 0x2, {&(0x7f0000000300)=[{0x1, 0x6ba, {&(0x7f0000000080)}, 0x400}, {0xfffffffe, 0x5, {&(0x7f00000002c0)}, 0x8}]}, 0x62, 0x0, r3}) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) r4 = syz_open_dev$mouse(&(0x7f0000000100), 0x4, 0x900) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000240)=@multiplanar_fd={0x9, 0x3, 0x4, 0xe000, 0x7, {0x0, 0x2710}, {0x3, 0x1, 0x10, 0x7, 0x40, 0xb8, "2dd3f2fd"}, 0x3, 0x4, {&(0x7f0000000000)=[{0x6a, 0x10000, {r1}, 0x4}, {0x4, 0x6, {}, 0x4}]}, 0x2, 0x0, r4}) [ 649.397313] RDX: 0000000020000300 RSI: 00000000c100565c RDI: 0000000000000003 [ 649.404581] RBP: 00007fdbb4bc61d0 R08: 0000000000000000 R09: 0000000000000000 [ 649.411847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.419130] R13: 00007ffc2c45f6bf R14: 00007fdbb4bc6300 R15: 0000000000022000 08:49:08 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (fail_nth: 2) 08:49:08 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x2000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x1, &(0x7f0000000000)=@raw=[@alu={0x7, 0x0, 0x5, 0xa, 0x1, 0xc, 0xffffffffffffffff}], &(0x7f0000000040)='syzkaller\x00', 0xaa5, 0xaa, &(0x7f0000000440)=""/170, 0x41100, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0xd, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2]}, 0x80) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x6, 0x30314247, 0x5, 0x8, [{0xff, 0x9}, {0x3, 0x7}, {0x7ff, 0x2}, {0x0, 0xfffff649}, {0x1}, {0x10001, 0x7f}, {0x0, 0x1}, {0x9, 0xfffffffd}], 0x6, 0xff, 0x13, 0x2, 0x2}}) 08:49:08 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async) 08:49:08 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000100)=@userptr={0x8, 0x2, 0x4, 0x4, 0x7f, {r1, r2/1000+60000}, {0x3, 0x8, 0x6, 0x81, 0x61, 0x5, "df7242e7"}, 0x1ff, 0x2, {&(0x7f0000000080)}, 0xf6}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:08 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x0, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f, 0x48, 0x2, 0x584d, 0x3ff, 0x483, 0x100, 0x7ff, 0x200, 0x8fe6, 0x100, 0xffff, 0x80, 0x3ff, 0xc9d6], 0x10004}}, 0xffffffe1}) 08:49:08 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r1}, 0x8) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000003c0)=@multiplanar_userptr={0x6, 0x2, 0x4, 0x10, 0x6, {0x0, 0x2710}, {0x5, 0x2, 0x5, 0x84, 0xc7, 0x9, "ad64e75b"}, 0x1, 0x2, {&(0x7f0000000300)=[{0x1, 0x6ba, {&(0x7f0000000080)}, 0x400}, {0xfffffffe, 0x5, {&(0x7f00000002c0)}, 0x8}]}, 0x62, 0x0, r3}) (async) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) r4 = syz_open_dev$mouse(&(0x7f0000000100), 0x4, 0x900) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000240)=@multiplanar_fd={0x9, 0x3, 0x4, 0xe000, 0x7, {0x0, 0x2710}, {0x3, 0x1, 0x10, 0x7, 0x40, 0xb8, "2dd3f2fd"}, 0x3, 0x4, {&(0x7f0000000000)=[{0x6a, 0x10000, {r1}, 0x4}, {0x4, 0x6, {}, 0x4}]}, 0x2, 0x0, r4}) 08:49:08 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x2000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x1, &(0x7f0000000000)=@raw=[@alu={0x7, 0x0, 0x5, 0xa, 0x1, 0xc, 0xffffffffffffffff}], &(0x7f0000000040)='syzkaller\x00', 0xaa5, 0xaa, &(0x7f0000000440)=""/170, 0x41100, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0xd, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2]}, 0x80) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x6, 0x30314247, 0x5, 0x8, [{0xff, 0x9}, {0x3, 0x7}, {0x7ff, 0x2}, {0x0, 0xfffff649}, {0x1}, {0x10001, 0x7f}, {0x0, 0x1}, {0x9, 0xfffffffd}], 0x6, 0xff, 0x13, 0x2, 0x2}}) 08:49:08 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000100)=@userptr={0x8, 0x2, 0x4, 0x4, 0x7f, {r1, r2/1000+60000}, {0x3, 0x8, 0x6, 0x81, 0x61, 0x5, "df7242e7"}, 0x1ff, 0x2, {&(0x7f0000000080)}, 0xf6}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:08 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async) 08:49:08 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r1}, 0x8) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000003c0)=@multiplanar_userptr={0x6, 0x2, 0x4, 0x10, 0x6, {0x0, 0x2710}, {0x5, 0x2, 0x5, 0x84, 0xc7, 0x9, "ad64e75b"}, 0x1, 0x2, {&(0x7f0000000300)=[{0x1, 0x6ba, {&(0x7f0000000080)}, 0x400}, {0xfffffffe, 0x5, {&(0x7f00000002c0)}, 0x8}]}, 0x62, 0x0, r3}) (async) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) r4 = syz_open_dev$mouse(&(0x7f0000000100), 0x4, 0x900) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000240)=@multiplanar_fd={0x9, 0x3, 0x4, 0xe000, 0x7, {0x0, 0x2710}, {0x3, 0x1, 0x10, 0x7, 0x40, 0xb8, "2dd3f2fd"}, 0x3, 0x4, {&(0x7f0000000000)=[{0x6a, 0x10000, {r1}, 0x4}, {0x4, 0x6, {}, 0x4}]}, 0x2, 0x0, r4}) 08:49:08 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x2000, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x6, 0x30314247, 0x5, 0x8, [{0xff, 0x9}, {0x3, 0x7}, {0x7ff, 0x2}, {0x0, 0xfffff649}, {0x1}, {0x10001, 0x7f}, {0x0, 0x1}, {0x9, 0xfffffffd}], 0x6, 0xff, 0x13, 0x2, 0x2}}) 08:49:08 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000100)=@userptr={0x8, 0x2, 0x4, 0x4, 0x7f, {r1, r2/1000+60000}, {0x3, 0x8, 0x6, 0x81, 0x61, 0x5, "df7242e7"}, 0x1ff, 0x2, {&(0x7f0000000080)}, 0xf6}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) [ 649.573022] FAULT_INJECTION: forcing a failure. [ 649.573022] name failslab, interval 1, probability 0, space 0, times 0 [ 649.620164] CPU: 1 PID: 27285 Comm: syz-executor.5 Not tainted 4.14.302-syzkaller #0 [ 649.628062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 649.637413] Call Trace: [ 649.639999] dump_stack+0x1b2/0x281 [ 649.643625] should_fail.cold+0x10a/0x149 [ 649.647773] should_failslab+0xd6/0x130 [ 649.651745] __kmalloc+0x2c1/0x400 [ 649.655279] ? __vb2_queue_alloc+0xf4/0xd90 [ 649.659599] __vb2_queue_alloc+0xf4/0xd90 [ 649.663739] ? __kernel_text_address+0x9/0x30 [ 649.668231] ? unwind_get_return_address+0x51/0x90 [ 649.673157] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 649.678515] ? __save_stack_trace+0xa0/0x160 [ 649.682923] ? vim2m_queue_setup+0x221/0x330 [ 649.687331] vb2_core_create_bufs+0x279/0x5a0 [ 649.691822] ? __vb2_queue_free+0x7a0/0x7a0 [ 649.696146] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 649.701505] ? trace_hardirqs_on+0x10/0x10 [ 649.705743] vb2_create_bufs+0x2e1/0x5b0 [ 649.709805] ? vb2_thread_start+0x310/0x310 [ 649.714136] v4l_create_bufs+0xa4/0x150 [ 649.718108] __video_do_ioctl+0x65b/0x6a0 [ 649.722259] ? video_ioctl2+0x30/0x30 [ 649.726056] ? __might_fault+0x177/0x1b0 [ 649.730113] ? video_ioctl2+0x30/0x30 [ 649.733910] video_usercopy+0xfd/0xe70 [ 649.737807] ? v4l_g_ctrl+0x390/0x390 [ 649.741600] ? proc_fail_nth_write+0x7b/0x180 [ 649.746072] ? trace_hardirqs_on+0x10/0x10 [ 649.750285] ? fsnotify+0x974/0x11b0 [ 649.753974] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 649.758886] ? __handle_mm_fault+0x80f/0x4620 [ 649.763365] v4l2_ioctl+0x1bb/0x2f0 [ 649.766965] ? v4l2_open+0x2f0/0x2f0 [ 649.770656] do_vfs_ioctl+0x75a/0xff0 [ 649.774434] ? lock_acquire+0x170/0x3f0 [ 649.778386] ? ioctl_preallocate+0x1a0/0x1a0 [ 649.782774] ? __fget+0x265/0x3e0 [ 649.786302] ? do_vfs_ioctl+0xff0/0xff0 [ 649.790280] ? security_file_ioctl+0x83/0xb0 [ 649.794685] SyS_ioctl+0x7f/0xb0 [ 649.798028] ? do_vfs_ioctl+0xff0/0xff0 [ 649.801979] do_syscall_64+0x1d5/0x640 [ 649.805869] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 649.811047] RIP: 0033:0x7fdbb66540a9 08:49:08 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (fail_nth: 3) 08:49:08 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x6, 0x30314247, 0x5, 0x8, [{0xff, 0x9}, {0x3, 0x7}, {0x7ff, 0x2}, {0x0, 0xfffff649}, {0x1}, {0x10001, 0x7f}, {0x0, 0x1}, {0x9, 0xfffffffd}], 0x6, 0xff, 0x13, 0x2, 0x2}}) 08:49:08 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x6c8, 0x410042) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000001c0)=@multiplanar_fd={0x80000000, 0x1, 0x4, 0x40, 0x1000, {0x0, 0xea60}, {0x5, 0x1, 0xff, 0xd0, 0x6, 0x6d, "cb5c507b"}, 0x8, 0x4, {&(0x7f0000000100)=[{0x8, 0x83, {r0}, 0x9}, {0x31e, 0x4, {}, 0x1}]}, 0x7ff8003, 0x0, r1}) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000080)={0x0, 0x552, 0x2, 0x80}) 08:49:08 executing program 3: write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000340)={0x62, 0x7d, 0x2, {0x0, 0x5b, 0xb7c9, 0xff, {0x10, 0x0, 0x6}, 0x200000, 0x4, 0xffffffff, 0x5, 0x9, '//--..+-\x04', 0xc, '/dev/video#\x00', 0x7, '\'\xe4\xa1\xc2*-:', 0xc, '/dev/video#\x00'}}, 0x62) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000002c0)=@multiplanar_userptr={0x82, 0x2, 0x4, 0x1000, 0x3ff, {}, {0x1, 0x8, 0x8, 0x4, 0xfb, 0x6, "e330ecaa"}, 0x1f, 0x2, {&(0x7f0000000240)=[{0xffffffff, 0x5, {}, 0x3f}, {0xebfb, 0x6, {&(0x7f0000000040)}, 0x7}]}, 0x7}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:08 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)=@multiplanar_overlay={0x1, 0x2, 0x4, 0x400, 0xffffff0d, {0x77359400}, {0x4, 0x2, 0x4, 0x3f, 0x1, 0xff, "678c3ff1"}, 0xfffffffd, 0x3, {&(0x7f0000000100)=[{0x1ff, 0x100, {0x6}, 0x1}, {0x8, 0x200, {}, 0x85}]}, 0x5, 0x0, r1}) 08:49:08 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x0, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f, 0x48, 0x2, 0x584d, 0x3ff, 0x483, 0x100, 0x7ff, 0x200, 0x8fe6, 0x100, 0xffff, 0x80, 0x3ff, 0xc9d6], 0x10004}}, 0xffffffe1}) [ 649.814734] RSP: 002b:00007fdbb4bc6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 649.822416] RAX: ffffffffffffffda RBX: 00007fdbb6773f80 RCX: 00007fdbb66540a9 [ 649.829685] RDX: 0000000020000300 RSI: 00000000c100565c RDI: 0000000000000003 [ 649.836958] RBP: 00007fdbb4bc61d0 R08: 0000000000000000 R09: 0000000000000000 [ 649.844290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.851548] R13: 00007ffc2c45f6bf R14: 00007fdbb4bc6300 R15: 0000000000022000 08:49:08 executing program 3: write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000340)={0x62, 0x7d, 0x2, {0x0, 0x5b, 0xb7c9, 0xff, {0x10, 0x0, 0x6}, 0x200000, 0x4, 0xffffffff, 0x5, 0x9, '//--..+-\x04', 0xc, '/dev/video#\x00', 0x7, '\'\xe4\xa1\xc2*-:', 0xc, '/dev/video#\x00'}}, 0x62) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000002c0)=@multiplanar_userptr={0x82, 0x2, 0x4, 0x1000, 0x3ff, {}, {0x1, 0x8, 0x8, 0x4, 0xfb, 0x6, "e330ecaa"}, 0x1f, 0x2, {&(0x7f0000000240)=[{0xffffffff, 0x5, {}, 0x3f}, {0xebfb, 0x6, {&(0x7f0000000040)}, 0x7}]}, 0x7}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:08 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)=@multiplanar_overlay={0x1, 0x2, 0x4, 0x400, 0xffffff0d, {0x77359400}, {0x4, 0x2, 0x4, 0x3f, 0x1, 0xff, "678c3ff1"}, 0xfffffffd, 0x3, {&(0x7f0000000100)=[{0x1ff, 0x100, {0x6}, 0x1}, {0x8, 0x200, {}, 0x85}]}, 0x5, 0x0, r1}) 08:49:08 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x6, 0x30314247, 0x5, 0x8, [{0xff, 0x9}, {0x3, 0x7}, {0x7ff, 0x2}, {0x0, 0xfffff649}, {0x1}, {0x10001, 0x7f}, {0x0, 0x1}, {0x9, 0xfffffffd}], 0x6, 0xff, 0x13, 0x2, 0x2}}) 08:49:08 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x6c8, 0x410042) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000001c0)=@multiplanar_fd={0x80000000, 0x1, 0x4, 0x40, 0x1000, {0x0, 0xea60}, {0x5, 0x1, 0xff, 0xd0, 0x6, 0x6d, "cb5c507b"}, 0x8, 0x4, {&(0x7f0000000100)=[{0x8, 0x83, {r0}, 0x9}, {0x31e, 0x4, {}, 0x1}]}, 0x7ff8003, 0x0, r1}) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000080)={0x0, 0x552, 0x2, 0x80}) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) (async) syz_open_dev$mouse(&(0x7f0000000180), 0x6c8, 0x410042) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000001c0)=@multiplanar_fd={0x80000000, 0x1, 0x4, 0x40, 0x1000, {0x0, 0xea60}, {0x5, 0x1, 0xff, 0xd0, 0x6, 0x6d, "cb5c507b"}, 0x8, 0x4, {&(0x7f0000000100)=[{0x8, 0x83, {r0}, 0x9}, {0x31e, 0x4, {}, 0x1}]}, 0x7ff8003, 0x0, r1}) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000080)={0x0, 0x552, 0x2, 0x80}) (async) [ 649.945897] FAULT_INJECTION: forcing a failure. [ 649.945897] name failslab, interval 1, probability 0, space 0, times 0 08:49:08 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)=@multiplanar_overlay={0x1, 0x2, 0x4, 0x400, 0xffffff0d, {0x77359400}, {0x4, 0x2, 0x4, 0x3f, 0x1, 0xff, "678c3ff1"}, 0xfffffffd, 0x3, {&(0x7f0000000100)=[{0x1ff, 0x100, {0x6}, 0x1}, {0x8, 0x200, {}, 0x85}]}, 0x5, 0x0, r1}) 08:49:08 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) (async) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x6c8, 0x410042) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000001c0)=@multiplanar_fd={0x80000000, 0x1, 0x4, 0x40, 0x1000, {0x0, 0xea60}, {0x5, 0x1, 0xff, 0xd0, 0x6, 0x6d, "cb5c507b"}, 0x8, 0x4, {&(0x7f0000000100)=[{0x8, 0x83, {r0}, 0x9}, {0x31e, 0x4, {}, 0x1}]}, 0x7ff8003, 0x0, r1}) (async) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async, rerun: 32) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (rerun: 32) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000080)={0x0, 0x552, 0x2, 0x80}) [ 649.994930] CPU: 1 PID: 27322 Comm: syz-executor.5 Not tainted 4.14.302-syzkaller #0 [ 650.002828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 650.012180] Call Trace: [ 650.014775] dump_stack+0x1b2/0x281 [ 650.018411] should_fail.cold+0x10a/0x149 [ 650.022566] should_failslab+0xd6/0x130 [ 650.026543] __kmalloc+0x2c1/0x400 [ 650.030098] ? __vb2_queue_alloc+0xf4/0xd90 [ 650.034421] __vb2_queue_alloc+0xf4/0xd90 [ 650.038570] ? unwind_get_return_address+0x51/0x90 [ 650.043503] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 650.048865] ? __save_stack_trace+0xa0/0x160 [ 650.053274] ? vim2m_queue_setup+0x221/0x330 [ 650.057691] vb2_core_create_bufs+0x279/0x5a0 [ 650.062186] ? __vb2_queue_free+0x7a0/0x7a0 [ 650.066514] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 650.071877] ? trace_hardirqs_on+0x10/0x10 [ 650.076112] vb2_create_bufs+0x2e1/0x5b0 [ 650.080194] ? vb2_thread_start+0x310/0x310 [ 650.084529] v4l_create_bufs+0xa4/0x150 [ 650.088510] __video_do_ioctl+0x65b/0x6a0 [ 650.092662] ? video_ioctl2+0x30/0x30 [ 650.096456] ? __might_fault+0x177/0x1b0 [ 650.100518] ? video_ioctl2+0x30/0x30 [ 650.104319] video_usercopy+0xfd/0xe70 [ 650.108209] ? v4l_g_ctrl+0x390/0x390 [ 650.112023] ? proc_fail_nth_write+0x7b/0x180 [ 650.116521] ? trace_hardirqs_on+0x10/0x10 [ 650.120846] ? fsnotify+0x974/0x11b0 [ 650.124565] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 650.129491] ? __handle_mm_fault+0x80f/0x4620 [ 650.133991] v4l2_ioctl+0x1bb/0x2f0 [ 650.137622] ? v4l2_open+0x2f0/0x2f0 [ 650.141336] do_vfs_ioctl+0x75a/0xff0 [ 650.145262] ? lock_acquire+0x170/0x3f0 [ 650.149235] ? ioctl_preallocate+0x1a0/0x1a0 [ 650.153644] ? __fget+0x265/0x3e0 [ 650.157098] ? do_vfs_ioctl+0xff0/0xff0 [ 650.161074] ? security_file_ioctl+0x83/0xb0 [ 650.165480] SyS_ioctl+0x7f/0xb0 [ 650.168835] ? do_vfs_ioctl+0xff0/0xff0 [ 650.172794] do_syscall_64+0x1d5/0x640 [ 650.176666] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 650.181857] RIP: 0033:0x7fdbb66540a9 [ 650.185546] RSP: 002b:00007fdbb4bc6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 08:49:08 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (fail_nth: 4) 08:49:08 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000000)={0x0, 0x2}) 08:49:08 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000100)={{0x9, 0x4, 0x7, 0x3ff, 'syz1\x00', 0x4}, 0x0, [0x7, 0xc0a, 0x9, 0x2, 0x5, 0x3ff, 0x19, 0x7, 0x8001, 0x3, 0x5, 0x1ff, 0x5, 0x1, 0x4, 0xa94, 0xffffffff, 0x1000000000, 0xfffffffffffffff9, 0x1, 0xffffffffffff7fff, 0x7, 0x100000001, 0x1, 0x9, 0x2aa1, 0x8, 0x0, 0x6, 0xc5e, 0x8, 0x0, 0x6, 0x7fff, 0xffffffffffffff22, 0x8000, 0x1, 0xf5c, 0x1ba2, 0x1, 0x7074, 0x7fffffff, 0x3, 0x0, 0x4, 0x5, 0x7, 0x8000000000000001, 0xf0, 0x6, 0x2, 0x5, 0x3, 0xa18, 0x6, 0x100000001, 0x48b1, 0x1, 0xbb, 0x9, 0x7, 0x24, 0x3, 0x8, 0x2, 0x9, 0x42, 0x1, 0x80000000, 0x8001, 0x0, 0x8, 0x7, 0xf1, 0x20, 0x100, 0x80000000, 0x7fff, 0x9, 0xe0000, 0x2, 0x800000, 0x3ff, 0x8000000000000000, 0x7ff, 0x7, 0x8, 0x2, 0x8, 0x2, 0x4, 0x1c6e, 0x4, 0xff, 0x23, 0x4, 0x0, 0x7fff, 0xbe3, 0x20, 0xe, 0x0, 0x41, 0x913f, 0xdf8, 0x0, 0x5, 0x8, 0x5, 0x5, 0x0, 0xfffffffffffffff7, 0x3c6b, 0xffffffffffffffff, 0x440000000000, 0x7, 0x2, 0x7fffffff, 0x2, 0x0, 0x3, 0x7, 0x8, 0xdce4, 0x8000000000000000, 0x80000000, 0x7, 0x7]}) 08:49:08 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x6, 0x30314247, 0x5, 0x8, [{0xff, 0x9}, {0x3, 0x7}, {0x7ff, 0x2}, {0x0, 0xfffff649}, {0x1}, {0x10001, 0x7f}, {0x0, 0x1}, {0x9, 0xfffffffd}], 0x6, 0xff, 0x13, 0x2, 0x2}}) 08:49:08 executing program 3: write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000340)={0x62, 0x7d, 0x2, {0x0, 0x5b, 0xb7c9, 0xff, {0x10, 0x0, 0x6}, 0x200000, 0x4, 0xffffffff, 0x5, 0x9, '//--..+-\x04', 0xc, '/dev/video#\x00', 0x7, '\'\xe4\xa1\xc2*-:', 0xc, '/dev/video#\x00'}}, 0x62) (async) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000002c0)=@multiplanar_userptr={0x82, 0x2, 0x4, 0x1000, 0x3ff, {}, {0x1, 0x8, 0x8, 0x4, 0xfb, 0x6, "e330ecaa"}, 0x1f, 0x2, {&(0x7f0000000240)=[{0xffffffff, 0x5, {}, 0x3f}, {0xebfb, 0x6, {&(0x7f0000000040)}, 0x7}]}, 0x7}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:08 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x0, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f, 0x48, 0x2, 0x584d, 0x3ff, 0x483, 0x100, 0x7ff, 0x200, 0x8fe6, 0x100, 0xffff, 0x80, 0x3ff, 0xc9d6], 0x10004}}, 0xffffffe1}) [ 650.193302] RAX: ffffffffffffffda RBX: 00007fdbb6773f80 RCX: 00007fdbb66540a9 [ 650.200554] RDX: 0000000020000300 RSI: 00000000c100565c RDI: 0000000000000003 [ 650.207889] RBP: 00007fdbb4bc61d0 R08: 0000000000000000 R09: 0000000000000000 [ 650.215137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.222383] R13: 00007ffc2c45f6bf R14: 00007fdbb4bc6300 R15: 0000000000022000 08:49:08 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000000)={0x0, 0x2}) 08:49:08 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x6, 0x30314247, 0x5, 0x8, [{0xff, 0x9}, {0x3, 0x7}, {0x7ff, 0x2}, {0x0, 0xfffff649}, {0x1}, {0x10001, 0x7f}, {0x0, 0x1}, {0x9, 0xfffffffd}], 0x6, 0xff, 0x13, 0x2, 0x2}}) 08:49:08 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000100)={{0x9, 0x4, 0x7, 0x3ff, 'syz1\x00', 0x4}, 0x0, [0x7, 0xc0a, 0x9, 0x2, 0x5, 0x3ff, 0x19, 0x7, 0x8001, 0x3, 0x5, 0x1ff, 0x5, 0x1, 0x4, 0xa94, 0xffffffff, 0x1000000000, 0xfffffffffffffff9, 0x1, 0xffffffffffff7fff, 0x7, 0x100000001, 0x1, 0x9, 0x2aa1, 0x8, 0x0, 0x6, 0xc5e, 0x8, 0x0, 0x6, 0x7fff, 0xffffffffffffff22, 0x8000, 0x1, 0xf5c, 0x1ba2, 0x1, 0x7074, 0x7fffffff, 0x3, 0x0, 0x4, 0x5, 0x7, 0x8000000000000001, 0xf0, 0x6, 0x2, 0x5, 0x3, 0xa18, 0x6, 0x100000001, 0x48b1, 0x1, 0xbb, 0x9, 0x7, 0x24, 0x3, 0x8, 0x2, 0x9, 0x42, 0x1, 0x80000000, 0x8001, 0x0, 0x8, 0x7, 0xf1, 0x20, 0x100, 0x80000000, 0x7fff, 0x9, 0xe0000, 0x2, 0x800000, 0x3ff, 0x8000000000000000, 0x7ff, 0x7, 0x8, 0x2, 0x8, 0x2, 0x4, 0x1c6e, 0x4, 0xff, 0x23, 0x4, 0x0, 0x7fff, 0xbe3, 0x20, 0xe, 0x0, 0x41, 0x913f, 0xdf8, 0x0, 0x5, 0x8, 0x5, 0x5, 0x0, 0xfffffffffffffff7, 0x3c6b, 0xffffffffffffffff, 0x440000000000, 0x7, 0x2, 0x7fffffff, 0x2, 0x0, 0x3, 0x7, 0x8, 0xdce4, 0x8000000000000000, 0x80000000, 0x7, 0x7]}) 08:49:08 executing program 3: ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000100)) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000240)={{0x9, 0x5, 0x401, 0x9, 'syz1\x00', 0x60}, 0x1, [0x1f, 0x7, 0x4, 0x0, 0x4, 0xb31, 0xfffffffffffffff8, 0x2, 0x5, 0x8, 0x9, 0x1, 0x811, 0x1, 0x4, 0xfffffffffffff800, 0x9, 0x3, 0xdfa8, 0x3, 0x4, 0x2, 0x100, 0x9, 0x3, 0x2, 0x1, 0xfffffffffffffff7, 0x80000001, 0x1, 0x2, 0x7, 0x9, 0xff, 0xfff, 0x6, 0xa2b, 0x1e0, 0x1, 0x80000000, 0x1f, 0x6, 0x8000000000000000, 0x9, 0x7, 0x9, 0x82e, 0x6fe7, 0x11e3, 0x3, 0xfffffffeffffffff, 0xfffffffffffff801, 0x7f, 0x1, 0x52ce3afe, 0x7, 0x573, 0xffffffff, 0x6e, 0x80, 0x5, 0x9, 0x80000001, 0x3, 0x2, 0x3f, 0x1, 0x7, 0x6, 0x7, 0xffff, 0x80000001, 0x4, 0x8aa, 0x4, 0x4, 0x8, 0x7, 0x1, 0x40, 0x4, 0x3, 0x10000, 0x9, 0x7a2, 0x18ea, 0x80000001, 0x6, 0x8000000000000000, 0x6c9, 0x8000000000000001, 0x1aab, 0x4, 0x7fffffff, 0x4, 0x4, 0x400, 0xca, 0x0, 0x7, 0x100000001, 0x0, 0x1, 0x3, 0x0, 0x1, 0xe000000000, 0x9, 0x80, 0x1ff, 0x3ff, 0x3, 0x8000000000000000, 0x7ff, 0x1f, 0x3, 0x7, 0x9, 0x1, 0x4, 0x7, 0x7fff, 0x8, 0x8e, 0x7, 0x8000, 0xfb0]}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000080)=0x8) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) [ 650.300904] FAULT_INJECTION: forcing a failure. [ 650.300904] name failslab, interval 1, probability 0, space 0, times 0 [ 650.327000] CPU: 1 PID: 27370 Comm: syz-executor.5 Not tainted 4.14.302-syzkaller #0 [ 650.334986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 650.344341] Call Trace: [ 650.346939] dump_stack+0x1b2/0x281 08:49:08 executing program 3: ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000100)) (async) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000240)={{0x9, 0x5, 0x401, 0x9, 'syz1\x00', 0x60}, 0x1, [0x1f, 0x7, 0x4, 0x0, 0x4, 0xb31, 0xfffffffffffffff8, 0x2, 0x5, 0x8, 0x9, 0x1, 0x811, 0x1, 0x4, 0xfffffffffffff800, 0x9, 0x3, 0xdfa8, 0x3, 0x4, 0x2, 0x100, 0x9, 0x3, 0x2, 0x1, 0xfffffffffffffff7, 0x80000001, 0x1, 0x2, 0x7, 0x9, 0xff, 0xfff, 0x6, 0xa2b, 0x1e0, 0x1, 0x80000000, 0x1f, 0x6, 0x8000000000000000, 0x9, 0x7, 0x9, 0x82e, 0x6fe7, 0x11e3, 0x3, 0xfffffffeffffffff, 0xfffffffffffff801, 0x7f, 0x1, 0x52ce3afe, 0x7, 0x573, 0xffffffff, 0x6e, 0x80, 0x5, 0x9, 0x80000001, 0x3, 0x2, 0x3f, 0x1, 0x7, 0x6, 0x7, 0xffff, 0x80000001, 0x4, 0x8aa, 0x4, 0x4, 0x8, 0x7, 0x1, 0x40, 0x4, 0x3, 0x10000, 0x9, 0x7a2, 0x18ea, 0x80000001, 0x6, 0x8000000000000000, 0x6c9, 0x8000000000000001, 0x1aab, 0x4, 0x7fffffff, 0x4, 0x4, 0x400, 0xca, 0x0, 0x7, 0x100000001, 0x0, 0x1, 0x3, 0x0, 0x1, 0xe000000000, 0x9, 0x80, 0x1ff, 0x3ff, 0x3, 0x8000000000000000, 0x7ff, 0x1f, 0x3, 0x7, 0x9, 0x1, 0x4, 0x7, 0x7fff, 0x8, 0x8e, 0x7, 0x8000, 0xfb0]}) (async, rerun: 32) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000080)=0x8) (async, rerun: 32) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) [ 650.350568] should_fail.cold+0x10a/0x149 [ 650.354721] should_failslab+0xd6/0x130 [ 650.358785] __kmalloc+0x2c1/0x400 [ 650.362326] ? __vb2_queue_alloc+0xf4/0xd90 [ 650.366657] __vb2_queue_alloc+0xf4/0xd90 [ 650.370811] ? unwind_get_return_address+0x51/0x90 [ 650.375752] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 650.381117] ? __save_stack_trace+0xa0/0x160 [ 650.385534] ? vim2m_queue_setup+0x221/0x330 [ 650.389968] vb2_core_create_bufs+0x279/0x5a0 [ 650.394476] ? __vb2_queue_free+0x7a0/0x7a0 08:49:09 executing program 3: ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000100)) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000240)={{0x9, 0x5, 0x401, 0x9, 'syz1\x00', 0x60}, 0x1, [0x1f, 0x7, 0x4, 0x0, 0x4, 0xb31, 0xfffffffffffffff8, 0x2, 0x5, 0x8, 0x9, 0x1, 0x811, 0x1, 0x4, 0xfffffffffffff800, 0x9, 0x3, 0xdfa8, 0x3, 0x4, 0x2, 0x100, 0x9, 0x3, 0x2, 0x1, 0xfffffffffffffff7, 0x80000001, 0x1, 0x2, 0x7, 0x9, 0xff, 0xfff, 0x6, 0xa2b, 0x1e0, 0x1, 0x80000000, 0x1f, 0x6, 0x8000000000000000, 0x9, 0x7, 0x9, 0x82e, 0x6fe7, 0x11e3, 0x3, 0xfffffffeffffffff, 0xfffffffffffff801, 0x7f, 0x1, 0x52ce3afe, 0x7, 0x573, 0xffffffff, 0x6e, 0x80, 0x5, 0x9, 0x80000001, 0x3, 0x2, 0x3f, 0x1, 0x7, 0x6, 0x7, 0xffff, 0x80000001, 0x4, 0x8aa, 0x4, 0x4, 0x8, 0x7, 0x1, 0x40, 0x4, 0x3, 0x10000, 0x9, 0x7a2, 0x18ea, 0x80000001, 0x6, 0x8000000000000000, 0x6c9, 0x8000000000000001, 0x1aab, 0x4, 0x7fffffff, 0x4, 0x4, 0x400, 0xca, 0x0, 0x7, 0x100000001, 0x0, 0x1, 0x3, 0x0, 0x1, 0xe000000000, 0x9, 0x80, 0x1ff, 0x3ff, 0x3, 0x8000000000000000, 0x7ff, 0x1f, 0x3, 0x7, 0x9, 0x1, 0x4, 0x7, 0x7fff, 0x8, 0x8e, 0x7, 0x8000, 0xfb0]}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000080)=0x8) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000100)) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) (async) syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0x80) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000240)={{0x9, 0x5, 0x401, 0x9, 'syz1\x00', 0x60}, 0x1, [0x1f, 0x7, 0x4, 0x0, 0x4, 0xb31, 0xfffffffffffffff8, 0x2, 0x5, 0x8, 0x9, 0x1, 0x811, 0x1, 0x4, 0xfffffffffffff800, 0x9, 0x3, 0xdfa8, 0x3, 0x4, 0x2, 0x100, 0x9, 0x3, 0x2, 0x1, 0xfffffffffffffff7, 0x80000001, 0x1, 0x2, 0x7, 0x9, 0xff, 0xfff, 0x6, 0xa2b, 0x1e0, 0x1, 0x80000000, 0x1f, 0x6, 0x8000000000000000, 0x9, 0x7, 0x9, 0x82e, 0x6fe7, 0x11e3, 0x3, 0xfffffffeffffffff, 0xfffffffffffff801, 0x7f, 0x1, 0x52ce3afe, 0x7, 0x573, 0xffffffff, 0x6e, 0x80, 0x5, 0x9, 0x80000001, 0x3, 0x2, 0x3f, 0x1, 0x7, 0x6, 0x7, 0xffff, 0x80000001, 0x4, 0x8aa, 0x4, 0x4, 0x8, 0x7, 0x1, 0x40, 0x4, 0x3, 0x10000, 0x9, 0x7a2, 0x18ea, 0x80000001, 0x6, 0x8000000000000000, 0x6c9, 0x8000000000000001, 0x1aab, 0x4, 0x7fffffff, 0x4, 0x4, 0x400, 0xca, 0x0, 0x7, 0x100000001, 0x0, 0x1, 0x3, 0x0, 0x1, 0xe000000000, 0x9, 0x80, 0x1ff, 0x3ff, 0x3, 0x8000000000000000, 0x7ff, 0x1f, 0x3, 0x7, 0x9, 0x1, 0x4, 0x7, 0x7fff, 0x8, 0x8e, 0x7, 0x8000, 0xfb0]}) (async) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000080)=0x8) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) [ 650.398803] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 650.404168] ? trace_hardirqs_on+0x10/0x10 [ 650.408404] vb2_create_bufs+0x2e1/0x5b0 [ 650.412469] ? vb2_thread_start+0x310/0x310 [ 650.416797] v4l_create_bufs+0xa4/0x150 [ 650.420771] __video_do_ioctl+0x65b/0x6a0 [ 650.424928] ? video_ioctl2+0x30/0x30 [ 650.428726] ? __might_fault+0x177/0x1b0 [ 650.432871] ? video_ioctl2+0x30/0x30 [ 650.436672] video_usercopy+0xfd/0xe70 [ 650.440562] ? v4l_g_ctrl+0x390/0x390 [ 650.444368] ? proc_fail_nth_write+0x7b/0x180 [ 650.448860] ? trace_hardirqs_on+0x10/0x10 [ 650.453101] ? fsnotify+0x974/0x11b0 [ 650.456812] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 650.461738] ? __handle_mm_fault+0x80f/0x4620 [ 650.466231] v4l2_ioctl+0x1bb/0x2f0 [ 650.469853] ? v4l2_open+0x2f0/0x2f0 [ 650.473567] do_vfs_ioctl+0x75a/0xff0 [ 650.477367] ? lock_acquire+0x170/0x3f0 [ 650.481337] ? ioctl_preallocate+0x1a0/0x1a0 [ 650.485745] ? __fget+0x265/0x3e0 [ 650.489285] ? do_vfs_ioctl+0xff0/0xff0 [ 650.493260] ? security_file_ioctl+0x83/0xb0 [ 650.497676] SyS_ioctl+0x7f/0xb0 [ 650.501040] ? do_vfs_ioctl+0xff0/0xff0 [ 650.505014] do_syscall_64+0x1d5/0x640 [ 650.508906] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 650.514104] RIP: 0033:0x7fdbb66540a9 [ 650.517810] RSP: 002b:00007fdbb4bc6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 650.525512] RAX: ffffffffffffffda RBX: 00007fdbb6773f80 RCX: 00007fdbb66540a9 [ 650.532776] RDX: 0000000020000300 RSI: 00000000c100565c RDI: 0000000000000003 [ 650.540046] RBP: 00007fdbb4bc61d0 R08: 0000000000000000 R09: 0000000000000000 08:49:09 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (fail_nth: 5) 08:49:09 executing program 3: syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:09 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000000)={0x0, 0x2}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000000)={0x0, 0x2}) (async) 08:49:09 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x0, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f, 0x48, 0x2, 0x584d, 0x3ff, 0x483, 0x100, 0x7ff, 0x200, 0x8fe6, 0x100, 0xffff, 0x80, 0x3ff, 0xc9d6], 0x10004}}, 0xffffffe1}) 08:49:09 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x6, 0x30314247, 0x5, 0x8, [{0xff, 0x9}, {0x3, 0x7}, {0x7ff, 0x2}, {0x0, 0xfffff649}, {0x1}, {0x10001, 0x7f}, {0x0, 0x1}, {0x9, 0xfffffffd}], 0x6, 0xff, 0x13, 0x2, 0x2}}) 08:49:09 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000100)={{0x9, 0x4, 0x7, 0x3ff, 'syz1\x00', 0x4}, 0x0, [0x7, 0xc0a, 0x9, 0x2, 0x5, 0x3ff, 0x19, 0x7, 0x8001, 0x3, 0x5, 0x1ff, 0x5, 0x1, 0x4, 0xa94, 0xffffffff, 0x1000000000, 0xfffffffffffffff9, 0x1, 0xffffffffffff7fff, 0x7, 0x100000001, 0x1, 0x9, 0x2aa1, 0x8, 0x0, 0x6, 0xc5e, 0x8, 0x0, 0x6, 0x7fff, 0xffffffffffffff22, 0x8000, 0x1, 0xf5c, 0x1ba2, 0x1, 0x7074, 0x7fffffff, 0x3, 0x0, 0x4, 0x5, 0x7, 0x8000000000000001, 0xf0, 0x6, 0x2, 0x5, 0x3, 0xa18, 0x6, 0x100000001, 0x48b1, 0x1, 0xbb, 0x9, 0x7, 0x24, 0x3, 0x8, 0x2, 0x9, 0x42, 0x1, 0x80000000, 0x8001, 0x0, 0x8, 0x7, 0xf1, 0x20, 0x100, 0x80000000, 0x7fff, 0x9, 0xe0000, 0x2, 0x800000, 0x3ff, 0x8000000000000000, 0x7ff, 0x7, 0x8, 0x2, 0x8, 0x2, 0x4, 0x1c6e, 0x4, 0xff, 0x23, 0x4, 0x0, 0x7fff, 0xbe3, 0x20, 0xe, 0x0, 0x41, 0x913f, 0xdf8, 0x0, 0x5, 0x8, 0x5, 0x5, 0x0, 0xfffffffffffffff7, 0x3c6b, 0xffffffffffffffff, 0x440000000000, 0x7, 0x2, 0x7fffffff, 0x2, 0x0, 0x3, 0x7, 0x8, 0xdce4, 0x8000000000000000, 0x80000000, 0x7, 0x7]}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000100)={{0x9, 0x4, 0x7, 0x3ff, 'syz1\x00', 0x4}, 0x0, [0x7, 0xc0a, 0x9, 0x2, 0x5, 0x3ff, 0x19, 0x7, 0x8001, 0x3, 0x5, 0x1ff, 0x5, 0x1, 0x4, 0xa94, 0xffffffff, 0x1000000000, 0xfffffffffffffff9, 0x1, 0xffffffffffff7fff, 0x7, 0x100000001, 0x1, 0x9, 0x2aa1, 0x8, 0x0, 0x6, 0xc5e, 0x8, 0x0, 0x6, 0x7fff, 0xffffffffffffff22, 0x8000, 0x1, 0xf5c, 0x1ba2, 0x1, 0x7074, 0x7fffffff, 0x3, 0x0, 0x4, 0x5, 0x7, 0x8000000000000001, 0xf0, 0x6, 0x2, 0x5, 0x3, 0xa18, 0x6, 0x100000001, 0x48b1, 0x1, 0xbb, 0x9, 0x7, 0x24, 0x3, 0x8, 0x2, 0x9, 0x42, 0x1, 0x80000000, 0x8001, 0x0, 0x8, 0x7, 0xf1, 0x20, 0x100, 0x80000000, 0x7fff, 0x9, 0xe0000, 0x2, 0x800000, 0x3ff, 0x8000000000000000, 0x7ff, 0x7, 0x8, 0x2, 0x8, 0x2, 0x4, 0x1c6e, 0x4, 0xff, 0x23, 0x4, 0x0, 0x7fff, 0xbe3, 0x20, 0xe, 0x0, 0x41, 0x913f, 0xdf8, 0x0, 0x5, 0x8, 0x5, 0x5, 0x0, 0xfffffffffffffff7, 0x3c6b, 0xffffffffffffffff, 0x440000000000, 0x7, 0x2, 0x7fffffff, 0x2, 0x0, 0x3, 0x7, 0x8, 0xdce4, 0x8000000000000000, 0x80000000, 0x7, 0x7]}) (async) [ 650.547311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.554579] R13: 00007ffc2c45f6bf R14: 00007fdbb4bc6300 R15: 0000000000022000 08:49:09 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x6, 0x30314247, 0x5, 0x8, [{0xff, 0x9}, {0x3, 0x7}, {0x7ff, 0x2}, {0x0, 0xfffff649}, {0x1}, {0x10001, 0x7f}, {0x0, 0x1}, {0x9, 0xfffffffd}], 0x6, 0xff, 0x13, 0x2, 0x2}}) 08:49:09 executing program 3: syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:09 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x4, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000240)=0x1) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000100)={0x5, 0x6, 0x3, {0x1, @vbi={0x10001, 0x1, 0x3800000, 0x34325842, [0x5, 0x40], [0x4, 0x6], 0x1}}, 0x5d66}) syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) 08:49:09 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x6, 0x30314247, 0x5, 0x8, [{0xff, 0x9}, {0x3, 0x7}, {0x7ff, 0x2}, {0x0, 0xfffff649}, {0x1}, {0x10001, 0x7f}, {0x0, 0x1}, {0x9, 0xfffffffd}], 0x6, 0xff, 0x13, 0x2, 0x2}}) 08:49:09 executing program 4: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000200)={0x401, "fa95197bdb370ae06215bf34cb49c72525d1850f697f6ed5fcade45abb050088", 0x1, 0x7, 0x4, 0x200, 0x200, 0x2}) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000100)={0x84efcd11d9fb8019, @pix={0x4, 0x402, 0x31303453, 0x1, 0xbe25, 0x2, 0x0, 0x52dcd2c1, 0x1, 0x1, 0x1, 0x4}}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) [ 650.700060] FAULT_INJECTION: forcing a failure. [ 650.700060] name failslab, interval 1, probability 0, space 0, times 0 [ 650.740146] CPU: 1 PID: 27433 Comm: syz-executor.5 Not tainted 4.14.302-syzkaller #0 [ 650.748047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 650.757396] Call Trace: [ 650.759984] dump_stack+0x1b2/0x281 [ 650.763614] should_fail.cold+0x10a/0x149 [ 650.767943] should_failslab+0xd6/0x130 [ 650.771917] __kmalloc+0x2c1/0x400 [ 650.775462] ? __vb2_queue_alloc+0xf4/0xd90 [ 650.779787] __vb2_queue_alloc+0xf4/0xd90 [ 650.783940] ? unwind_get_return_address+0x51/0x90 [ 650.788866] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 650.794322] ? __save_stack_trace+0xa0/0x160 08:49:09 executing program 4: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000200)={0x401, "fa95197bdb370ae06215bf34cb49c72525d1850f697f6ed5fcade45abb050088", 0x1, 0x7, 0x4, 0x200, 0x200, 0x2}) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000100)={0x84efcd11d9fb8019, @pix={0x4, 0x402, 0x31303453, 0x1, 0xbe25, 0x2, 0x0, 0x52dcd2c1, 0x1, 0x1, 0x1, 0x4}}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000200)={0x401, "fa95197bdb370ae06215bf34cb49c72525d1850f697f6ed5fcade45abb050088", 0x1, 0x7, 0x4, 0x200, 0x200, 0x2}) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000100)={0x84efcd11d9fb8019, @pix={0x4, 0x402, 0x31303453, 0x1, 0xbe25, 0x2, 0x0, 0x52dcd2c1, 0x1, 0x1, 0x1, 0x4}}) (async) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async) [ 650.798731] ? vim2m_queue_setup+0x221/0x330 [ 650.803144] vb2_core_create_bufs+0x279/0x5a0 [ 650.807639] ? __vb2_queue_free+0x7a0/0x7a0 [ 650.811975] ? finish_task_switch+0x178/0x610 [ 650.816465] ? finish_task_switch+0x14d/0x610 [ 650.821048] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 650.826410] ? trace_hardirqs_on+0x10/0x10 [ 650.830645] vb2_create_bufs+0x2e1/0x5b0 [ 650.834829] ? vb2_thread_start+0x310/0x310 [ 650.839149] ? finish_task_switch+0x178/0x610 [ 650.843644] ? finish_task_switch+0x14d/0x610 [ 650.848140] v4l_create_bufs+0xa4/0x150 [ 650.852116] __video_do_ioctl+0x65b/0x6a0 [ 650.856265] ? video_ioctl2+0x30/0x30 [ 650.860061] ? __might_fault+0x177/0x1b0 [ 650.864118] ? video_ioctl2+0x30/0x30 [ 650.867941] video_usercopy+0xfd/0xe70 [ 650.871818] ? v4l_g_ctrl+0x390/0x390 [ 650.875597] ? proc_fail_nth_write+0x7b/0x180 [ 650.880070] ? trace_hardirqs_on+0x10/0x10 [ 650.884279] ? fsnotify+0x974/0x11b0 [ 650.888060] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 650.892963] ? __handle_mm_fault+0x80f/0x4620 [ 650.897438] v4l2_ioctl+0x1bb/0x2f0 [ 650.901040] ? v4l2_open+0x2f0/0x2f0 [ 650.904733] do_vfs_ioctl+0x75a/0xff0 [ 650.908508] ? lock_acquire+0x170/0x3f0 [ 650.912467] ? ioctl_preallocate+0x1a0/0x1a0 [ 650.916863] ? __fget+0x265/0x3e0 [ 650.920291] ? do_vfs_ioctl+0xff0/0xff0 [ 650.924240] ? security_file_ioctl+0x83/0xb0 [ 650.928624] SyS_ioctl+0x7f/0xb0 [ 650.931963] ? do_vfs_ioctl+0xff0/0xff0 [ 650.935924] do_syscall_64+0x1d5/0x640 [ 650.939791] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 650.944958] RIP: 0033:0x7fdbb66540a9 08:49:09 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (fail_nth: 6) 08:49:09 executing program 4: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000200)={0x401, "fa95197bdb370ae06215bf34cb49c72525d1850f697f6ed5fcade45abb050088", 0x1, 0x7, 0x4, 0x200, 0x200, 0x2}) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000100)={0x84efcd11d9fb8019, @pix={0x4, 0x402, 0x31303453, 0x1, 0xbe25, 0x2, 0x0, 0x52dcd2c1, 0x1, 0x1, 0x1, 0x4}}) (async) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) 08:49:09 executing program 3: syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) 08:49:09 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x4, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000240)=0x1) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000100)={0x5, 0x6, 0x3, {0x1, @vbi={0x10001, 0x1, 0x3800000, 0x34325842, [0x5, 0x40], [0x4, 0x6], 0x1}}, 0x5d66}) syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) 08:49:09 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x6, 0x30314247, 0x5, 0x8, [{0xff, 0x9}, {0x3, 0x7}, {0x7ff, 0x2}, {0x0, 0xfffff649}, {0x1}, {0x10001, 0x7f}, {0x0, 0x1}, {0x9, 0xfffffffd}], 0x6, 0xff, 0x13, 0x2, 0x2}}) 08:49:09 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x0, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f, 0x48, 0x2, 0x584d, 0x3ff, 0x483, 0x100, 0x7ff, 0x200, 0x8fe6, 0x100, 0xffff, 0x80, 0x3ff, 0xc9d6], 0x10004}}, 0xffffffe1}) [ 650.948642] RSP: 002b:00007fdbb4bc6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 650.956324] RAX: ffffffffffffffda RBX: 00007fdbb6773f80 RCX: 00007fdbb66540a9 [ 650.963613] RDX: 0000000020000300 RSI: 00000000c100565c RDI: 0000000000000003 [ 650.970957] RBP: 00007fdbb4bc61d0 R08: 0000000000000000 R09: 0000000000000000 [ 650.978208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.985547] R13: 00007ffc2c45f6bf R14: 00007fdbb4bc6300 R15: 0000000000022000 08:49:09 executing program 1: syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x6, 0x30314247, 0x5, 0x8, [{0xff, 0x9}, {0x3, 0x7}, {0x7ff, 0x2}, {0x0, 0xfffff649}, {0x1}, {0x10001, 0x7f}, {0x0, 0x1}, {0x9, 0xfffffffd}], 0x6, 0xff, 0x13, 0x2, 0x2}}) 08:49:09 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x0, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f, 0x48, 0x2, 0x584d, 0x3ff, 0x483, 0x100, 0x7ff, 0x200, 0x8fe6, 0x100, 0xffff, 0x80, 0x3ff, 0xc9d6], 0x10004}}, 0xffffffe1}) 08:49:09 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0x7) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@multiplanar_userptr={0x8000, 0x1, 0x4, 0x40, 0xb, {}, {0x2, 0x2, 0x1f, 0x7f, 0x4, 0x40, "b60117e0"}, 0x2, 0x2, {&(0x7f0000000180)=[{0x3, 0x10001, {&(0x7f0000000100)}, 0x7}, {0xffffffff, 0x0, {&(0x7f0000000140)}, 0x6e4}]}, 0x0, 0x0, r1}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000cc0), 0x6) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000280)={0x298e, 0x1e, [{0x8, 0x1}, {0x6, 0x1}, {0xc}, {0xc, 0x1}, {0x8}, {0xa}, {0x5, 0x1}, {0x4}, {0xe}, {0x6, 0x1}, {0xf, 0x1}, {0x9, 0x1}, {}, {0x1}, {0x8}, {}, {0x1, 0x1}, {0xd, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0xf, 0x1}, {0x9, 0x1}, {0x8}, {0xe}, {0xe}, {0x6, 0x1}, {0x5}, {0xe}, {0x9}, {0x4, 0x1}]}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000080)={0x9, 0x5, 0x20, 0xffff6208, '\x00', 0xffff8001}) 08:49:09 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x4, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000240)=0x1) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000100)={0x5, 0x6, 0x3, {0x1, @vbi={0x10001, 0x1, 0x3800000, 0x34325842, [0x5, 0x40], [0x4, 0x6], 0x1}}, 0x5d66}) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) [ 651.098205] FAULT_INJECTION: forcing a failure. [ 651.098205] name failslab, interval 1, probability 0, space 0, times 0 [ 651.129899] CPU: 1 PID: 27474 Comm: syz-executor.5 Not tainted 4.14.302-syzkaller #0 [ 651.137795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 08:49:09 executing program 1: syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x6, 0x30314247, 0x5, 0x8, [{0xff, 0x9}, {0x3, 0x7}, {0x7ff, 0x2}, {0x0, 0xfffff649}, {0x1}, {0x10001, 0x7f}, {0x0, 0x1}, {0x9, 0xfffffffd}], 0x6, 0xff, 0x13, 0x2, 0x2}}) 08:49:09 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000140)={0xc, {0xb, "be08185fe76afd2c85d074"}}, 0x11) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x2, 0x7, 0x7, 0x4080}) pipe2$9p(&(0x7f0000000080), 0x0) [ 651.147144] Call Trace: [ 651.149728] dump_stack+0x1b2/0x281 [ 651.153362] should_fail.cold+0x10a/0x149 [ 651.157508] should_failslab+0xd6/0x130 [ 651.161488] __kmalloc+0x2c1/0x400 [ 651.165024] ? __vb2_queue_alloc+0xf4/0xd90 [ 651.169344] __vb2_queue_alloc+0xf4/0xd90 [ 651.173492] ? mark_held_locks+0xa6/0xf0 [ 651.177640] ? retint_kernel+0x2d/0x2d [ 651.181788] ? vim2m_queue_setup+0x221/0x330 [ 651.186201] vb2_core_create_bufs+0x279/0x5a0 [ 651.190696] ? __vb2_queue_free+0x7a0/0x7a0 [ 651.195023] vb2_create_bufs+0x2e1/0x5b0 [ 651.199096] ? vb2_thread_start+0x310/0x310 [ 651.203426] v4l_create_bufs+0xa4/0x150 [ 651.207402] __video_do_ioctl+0x65b/0x6a0 [ 651.211550] ? video_ioctl2+0x30/0x30 [ 651.215347] ? __might_fault+0x177/0x1b0 [ 651.219403] ? video_ioctl2+0x30/0x30 [ 651.223204] video_usercopy+0xfd/0xe70 [ 651.227096] ? v4l_g_ctrl+0x390/0x390 [ 651.230891] ? proc_fail_nth_write+0x7b/0x180 [ 651.235380] ? trace_hardirqs_on+0x10/0x10 [ 651.239607] ? fsnotify+0x974/0x11b0 [ 651.243298] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 651.248203] ? __handle_mm_fault+0x80f/0x4620 [ 651.252688] v4l2_ioctl+0x1bb/0x2f0 [ 651.256298] ? v4l2_open+0x2f0/0x2f0 [ 651.259988] do_vfs_ioctl+0x75a/0xff0 [ 651.263766] ? lock_acquire+0x170/0x3f0 [ 651.267716] ? ioctl_preallocate+0x1a0/0x1a0 [ 651.272101] ? __fget+0x265/0x3e0 [ 651.275532] ? do_vfs_ioctl+0xff0/0xff0 [ 651.279490] ? security_file_ioctl+0x83/0xb0 [ 651.283873] SyS_ioctl+0x7f/0xb0 [ 651.287216] ? do_vfs_ioctl+0xff0/0xff0 [ 651.291169] do_syscall_64+0x1d5/0x640 [ 651.295038] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 651.300205] RIP: 0033:0x7fdbb66540a9 [ 651.303891] RSP: 002b:00007fdbb4bc6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 651.311578] RAX: ffffffffffffffda RBX: 00007fdbb6773f80 RCX: 00007fdbb66540a9 [ 651.318826] RDX: 0000000020000300 RSI: 00000000c100565c RDI: 0000000000000003 [ 651.326077] RBP: 00007fdbb4bc61d0 R08: 0000000000000000 R09: 0000000000000000 [ 651.333322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.340564] R13: 00007ffc2c45f6bf R14: 00007fdbb4bc6300 R15: 0000000000022000 08:49:10 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (fail_nth: 7) 08:49:10 executing program 1: syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x6, 0x30314247, 0x5, 0x8, [{0xff, 0x9}, {0x3, 0x7}, {0x7ff, 0x2}, {0x0, 0xfffff649}, {0x1}, {0x10001, 0x7f}, {0x0, 0x1}, {0x9, 0xfffffffd}], 0x6, 0xff, 0x13, 0x2, 0x2}}) 08:49:10 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000140)={0xc, {0xb, "be08185fe76afd2c85d074"}}, 0x11) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x2, 0x7, 0x7, 0x4080}) pipe2$9p(&(0x7f0000000080), 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) (async) write$UHID_INPUT2(r2, &(0x7f0000000140)={0xc, {0xb, "be08185fe76afd2c85d074"}}, 0x11) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x2, 0x7, 0x7, 0x4080}) (async) pipe2$9p(&(0x7f0000000080), 0x0) (async) 08:49:10 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0x7) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@multiplanar_userptr={0x8000, 0x1, 0x4, 0x40, 0xb, {}, {0x2, 0x2, 0x1f, 0x7f, 0x4, 0x40, "b60117e0"}, 0x2, 0x2, {&(0x7f0000000180)=[{0x3, 0x10001, {&(0x7f0000000100)}, 0x7}, {0xffffffff, 0x0, {&(0x7f0000000140)}, 0x6e4}]}, 0x0, 0x0, r1}) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) (async, rerun: 64) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (rerun: 64) write$UHID_INPUT2(r3, &(0x7f0000000cc0), 0x6) (async, rerun: 64) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000280)={0x298e, 0x1e, [{0x8, 0x1}, {0x6, 0x1}, {0xc}, {0xc, 0x1}, {0x8}, {0xa}, {0x5, 0x1}, {0x4}, {0xe}, {0x6, 0x1}, {0xf, 0x1}, {0x9, 0x1}, {}, {0x1}, {0x8}, {}, {0x1, 0x1}, {0xd, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0xf, 0x1}, {0x9, 0x1}, {0x8}, {0xe}, {0xe}, {0x6, 0x1}, {0x5}, {0xe}, {0x9}, {0x4, 0x1}]}) (rerun: 64) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000080)={0x9, 0x5, 0x20, 0xffff6208, '\x00', 0xffff8001}) 08:49:10 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @win={{0x1, 0x5, 0x2, 0xe9}, 0x7, 0x1, &(0x7f0000000080)={{0x662, 0xbd9, 0x9, 0x7ff}, &(0x7f0000000040)={{0x5, 0x207ff, 0x3, 0xfffffffc}, &(0x7f0000000000)={{0x10001, 0x6, 0x7}}}}, 0x5, &(0x7f0000000100), 0x49}}, 0x7}) 08:49:10 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x0, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f, 0x48, 0x2, 0x584d, 0x3ff, 0x483, 0x100, 0x7ff, 0x200, 0x8fe6, 0x100, 0xffff, 0x80, 0x3ff, 0xc9d6], 0x10004}}, 0xffffffe1}) 08:49:10 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 08:49:10 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0x7) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@multiplanar_userptr={0x8000, 0x1, 0x4, 0x40, 0xb, {}, {0x2, 0x2, 0x1f, 0x7f, 0x4, 0x40, "b60117e0"}, 0x2, 0x2, {&(0x7f0000000180)=[{0x3, 0x10001, {&(0x7f0000000100)}, 0x7}, {0xffffffff, 0x0, {&(0x7f0000000140)}, 0x6e4}]}, 0x0, 0x0, r1}) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000cc0), 0x6) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000280)={0x298e, 0x1e, [{0x8, 0x1}, {0x6, 0x1}, {0xc}, {0xc, 0x1}, {0x8}, {0xa}, {0x5, 0x1}, {0x4}, {0xe}, {0x6, 0x1}, {0xf, 0x1}, {0x9, 0x1}, {}, {0x1}, {0x8}, {}, {0x1, 0x1}, {0xd, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0xf, 0x1}, {0x9, 0x1}, {0x8}, {0xe}, {0xe}, {0x6, 0x1}, {0x5}, {0xe}, {0x9}, {0x4, 0x1}]}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000080)={0x9, 0x5, 0x20, 0xffff6208, '\x00', 0xffff8001}) 08:49:10 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000140)={0xc, {0xb, "be08185fe76afd2c85d074"}}, 0x11) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x2, 0x7, 0x7, 0x4080}) (async, rerun: 32) pipe2$9p(&(0x7f0000000080), 0x0) (rerun: 32) 08:49:10 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @win={{0x1, 0x5, 0x2, 0xe9}, 0x7, 0x1, &(0x7f0000000080)={{0x662, 0xbd9, 0x9, 0x7ff}, &(0x7f0000000040)={{0x5, 0x207ff, 0x3, 0xfffffffc}, &(0x7f0000000000)={{0x10001, 0x6, 0x7}}}}, 0x5, &(0x7f0000000100), 0x49}}, 0x7}) [ 651.494554] FAULT_INJECTION: forcing a failure. [ 651.494554] name failslab, interval 1, probability 0, space 0, times 0 [ 651.517772] CPU: 0 PID: 27528 Comm: syz-executor.5 Not tainted 4.14.302-syzkaller #0 [ 651.525751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 651.535095] Call Trace: [ 651.537682] dump_stack+0x1b2/0x281 08:49:10 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x1ff, 0x201341) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@overlay={0xf0, 0x1, 0x4, 0x4, 0x3ff, {}, {0x28d7ea3891b62b9c, 0xc, 0x5, 0x7, 0xb, 0xd, "925a8669"}, 0x45c33a52, 0x3, {}, 0xa1ed, 0x0, r1}) [ 651.541310] should_fail.cold+0x10a/0x149 [ 651.545466] should_failslab+0xd6/0x130 [ 651.549438] __kmalloc+0x2c1/0x400 [ 651.552975] ? __vb2_queue_alloc+0xf4/0xd90 [ 651.557297] __vb2_queue_alloc+0xf4/0xd90 [ 651.561441] ? unwind_get_return_address+0x51/0x90 [ 651.566364] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 651.571726] ? __save_stack_trace+0xa0/0x160 [ 651.576141] ? vim2m_queue_setup+0x221/0x330 [ 651.580562] vb2_core_create_bufs+0x279/0x5a0 [ 651.585240] ? __vb2_queue_free+0x7a0/0x7a0 [ 651.589567] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 08:49:10 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x1ff, 0x201341) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@overlay={0xf0, 0x1, 0x4, 0x4, 0x3ff, {}, {0x28d7ea3891b62b9c, 0xc, 0x5, 0x7, 0xb, 0xd, "925a8669"}, 0x45c33a52, 0x3, {}, 0xa1ed, 0x0, r1}) [ 651.594930] ? trace_hardirqs_on+0x10/0x10 [ 651.599162] vb2_create_bufs+0x2e1/0x5b0 [ 651.603230] ? vb2_thread_start+0x310/0x310 [ 651.607563] v4l_create_bufs+0xa4/0x150 [ 651.611544] __video_do_ioctl+0x65b/0x6a0 [ 651.617757] ? video_ioctl2+0x30/0x30 [ 651.621561] ? __might_fault+0x177/0x1b0 [ 651.625620] ? video_ioctl2+0x30/0x30 [ 651.629421] video_usercopy+0xfd/0xe70 [ 651.633310] ? v4l_g_ctrl+0x390/0x390 [ 651.637118] ? proc_fail_nth_write+0x7b/0x180 [ 651.641614] ? trace_hardirqs_on+0x10/0x10 [ 651.645855] ? fsnotify+0x974/0x11b0 [ 651.649568] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 651.654490] ? __handle_mm_fault+0x80f/0x4620 [ 651.658983] v4l2_ioctl+0x1bb/0x2f0 [ 651.662601] ? v4l2_open+0x2f0/0x2f0 [ 651.666312] do_vfs_ioctl+0x75a/0xff0 [ 651.670108] ? lock_acquire+0x170/0x3f0 [ 651.674076] ? ioctl_preallocate+0x1a0/0x1a0 [ 651.678487] ? __fget+0x265/0x3e0 [ 651.681937] ? do_vfs_ioctl+0xff0/0xff0 [ 651.685908] ? security_file_ioctl+0x83/0xb0 [ 651.690315] SyS_ioctl+0x7f/0xb0 [ 651.693673] ? do_vfs_ioctl+0xff0/0xff0 [ 651.697652] do_syscall_64+0x1d5/0x640 [ 651.701548] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 651.706737] RIP: 0033:0x7fdbb66540a9 [ 651.710446] RSP: 002b:00007fdbb4bc6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 651.718253] RAX: ffffffffffffffda RBX: 00007fdbb6773f80 RCX: 00007fdbb66540a9 [ 651.725526] RDX: 0000000020000300 RSI: 00000000c100565c RDI: 0000000000000003 [ 651.732791] RBP: 00007fdbb4bc61d0 R08: 0000000000000000 R09: 0000000000000000 [ 651.740052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.747315] R13: 00007ffc2c45f6bf R14: 00007fdbb4bc6300 R15: 0000000000022000 08:49:10 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (fail_nth: 8) 08:49:10 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x1ff, 0x201341) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@overlay={0xf0, 0x1, 0x4, 0x4, 0x3ff, {}, {0x28d7ea3891b62b9c, 0xc, 0x5, 0x7, 0xb, 0xd, "925a8669"}, 0x45c33a52, 0x3, {}, 0xa1ed, 0x0, r1}) 08:49:10 executing program 2: write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x79, 0x1}, 0x7) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) 08:49:10 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 08:49:10 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @win={{0x1, 0x5, 0x2, 0xe9}, 0x7, 0x1, &(0x7f0000000080)={{0x662, 0xbd9, 0x9, 0x7ff}, &(0x7f0000000040)={{0x5, 0x207ff, 0x3, 0xfffffffc}, &(0x7f0000000000)={{0x10001, 0x6, 0x7}}}}, 0x5, &(0x7f0000000100), 0x49}}, 0x7}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @win={{0x1, 0x5, 0x2, 0xe9}, 0x7, 0x1, &(0x7f0000000080)={{0x662, 0xbd9, 0x9, 0x7ff}, &(0x7f0000000040)={{0x5, 0x207ff, 0x3, 0xfffffffc}, &(0x7f0000000000)={{0x10001, 0x6, 0x7}}}}, 0x5, &(0x7f0000000100), 0x49}}, 0x7}) (async) 08:49:10 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x0, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f, 0x48, 0x2, 0x584d, 0x3ff, 0x483, 0x100, 0x7ff, 0x200, 0x8fe6, 0x100, 0xffff, 0x80, 0x3ff, 0xc9d6], 0x10004}}, 0xffffffe1}) 08:49:10 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x3, 0x0, 0x3, @discrete={0x1800, 0xfb25}}) 08:49:10 executing program 2: write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x79, 0x1}, 0x7) (async) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) 08:49:10 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f, 0x48, 0x2, 0x584d, 0x3ff, 0x483, 0x100, 0x7ff, 0x200, 0x8fe6, 0x100, 0xffff, 0x80, 0x3ff], 0x10004}}, 0xffffffe1}) 08:49:10 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 08:49:10 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000240)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0xd2, 0x80, 0x5, 0x8000, 0x6df5, 0x9, "aef99f9dd7db5bfbebf7ca39cec9a64287d2e87784395719ca296b92616fbf5acd813434e213a73109be4d8cf17ab5764e380285de9e8b2854f42fc0b7f7d46b960adb1160942e229b6713d216f289bc8556187b600227833d712ca9ba212a3642450f16de57e9656e8791ea01f3267e6f80dc2a49a50ebf3c1d973eeb643cb85f925c0e3f603c29e7e4ac1a28a7f43ae6c6c376de06bc0951df644d35c2e72c3870e5f595f55ce52347281fd08a5c84286869af2156ea49dd349e484b07b7000c595b222bbef7629da4efe3942208baec6f"}}, 0x1ea) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000040)) syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffff9, 0x2) [ 651.874780] FAULT_INJECTION: forcing a failure. [ 651.874780] name failslab, interval 1, probability 0, space 0, times 0 08:49:10 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x3, 0x0, 0x3, @discrete={0x1800, 0xfb25}}) [ 651.934000] CPU: 0 PID: 27572 Comm: syz-executor.5 Not tainted 4.14.302-syzkaller #0 [ 651.941902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 651.951259] Call Trace: [ 651.953845] dump_stack+0x1b2/0x281 [ 651.957477] should_fail.cold+0x10a/0x149 [ 651.961636] should_failslab+0xd6/0x130 [ 651.965619] __kmalloc+0x2c1/0x400 [ 651.969156] ? __vb2_queue_alloc+0xf4/0xd90 [ 651.973476] __vb2_queue_alloc+0xf4/0xd90 [ 651.977628] ? unwind_get_return_address+0x51/0x90 [ 651.982556] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 651.987924] ? __save_stack_trace+0xa0/0x160 [ 651.992331] ? vim2m_queue_setup+0x221/0x330 [ 651.996750] vb2_core_create_bufs+0x279/0x5a0 [ 652.001248] ? __vb2_queue_free+0x7a0/0x7a0 [ 652.005570] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 652.010938] ? trace_hardirqs_on+0x10/0x10 [ 652.015171] vb2_create_bufs+0x2e1/0x5b0 [ 652.019232] ? vb2_thread_start+0x310/0x310 [ 652.023561] v4l_create_bufs+0xa4/0x150 [ 652.027537] __video_do_ioctl+0x65b/0x6a0 [ 652.031806] ? video_ioctl2+0x30/0x30 [ 652.035608] ? __might_fault+0x177/0x1b0 [ 652.039670] ? video_ioctl2+0x30/0x30 [ 652.043469] video_usercopy+0xfd/0xe70 [ 652.047366] ? v4l_g_ctrl+0x390/0x390 [ 652.051184] ? proc_fail_nth_write+0x7b/0x180 [ 652.055676] ? trace_hardirqs_on+0x10/0x10 [ 652.059913] ? fsnotify+0x974/0x11b0 [ 652.063623] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 652.068548] ? __handle_mm_fault+0x80f/0x4620 [ 652.073043] v4l2_ioctl+0x1bb/0x2f0 [ 652.076668] ? v4l2_open+0x2f0/0x2f0 [ 652.080383] do_vfs_ioctl+0x75a/0xff0 [ 652.084180] ? lock_acquire+0x170/0x3f0 [ 652.088150] ? ioctl_preallocate+0x1a0/0x1a0 [ 652.092535] ? __fget+0x265/0x3e0 [ 652.095973] ? do_vfs_ioctl+0xff0/0xff0 [ 652.099931] ? security_file_ioctl+0x83/0xb0 [ 652.104325] SyS_ioctl+0x7f/0xb0 [ 652.107670] ? do_vfs_ioctl+0xff0/0xff0 [ 652.111622] do_syscall_64+0x1d5/0x640 [ 652.115491] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 652.120660] RIP: 0033:0x7fdbb66540a9 [ 652.124344] RSP: 002b:00007fdbb4bc6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 08:49:10 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (fail_nth: 9) 08:49:10 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000240)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0xd2, 0x80, 0x5, 0x8000, 0x6df5, 0x9, "aef99f9dd7db5bfbebf7ca39cec9a64287d2e87784395719ca296b92616fbf5acd813434e213a73109be4d8cf17ab5764e380285de9e8b2854f42fc0b7f7d46b960adb1160942e229b6713d216f289bc8556187b600227833d712ca9ba212a3642450f16de57e9656e8791ea01f3267e6f80dc2a49a50ebf3c1d973eeb643cb85f925c0e3f603c29e7e4ac1a28a7f43ae6c6c376de06bc0951df644d35c2e72c3870e5f595f55ce52347281fd08a5c84286869af2156ea49dd349e484b07b7000c595b222bbef7629da4efe3942208baec6f"}}, 0x1ea) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async, rerun: 64) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (rerun: 64) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000040)) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffff9, 0x2) 08:49:10 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x3, 0x0, 0x3, @discrete={0x1800, 0xfb25}}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x3, 0x0, 0x3, @discrete={0x1800, 0xfb25}}) (async) 08:49:10 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x0, @pix_mp={0x0, 0x6, 0x30314247, 0x5, 0x8, [{0xff, 0x9}, {0x3, 0x7}, {0x7ff, 0x2}, {0x0, 0xfffff649}, {0x1}, {0x10001, 0x7f}, {0x0, 0x1}, {0x9, 0xfffffffd}], 0x6, 0xff, 0x13, 0x2, 0x2}}) 08:49:10 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f, 0x48, 0x2, 0x584d, 0x3ff, 0x483, 0x100, 0x7ff, 0x200, 0x8fe6, 0x100, 0xffff, 0x80, 0x3ff], 0x10004}}, 0xffffffe1}) 08:49:10 executing program 2: write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x79, 0x1}, 0x7) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) (rerun: 64) [ 652.132029] RAX: ffffffffffffffda RBX: 00007fdbb6773f80 RCX: 00007fdbb66540a9 [ 652.139276] RDX: 0000000020000300 RSI: 00000000c100565c RDI: 0000000000000003 [ 652.146805] RBP: 00007fdbb4bc61d0 R08: 0000000000000000 R09: 0000000000000000 [ 652.154051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.161303] R13: 00007ffc2c45f6bf R14: 00007fdbb4bc6300 R15: 0000000000022000 08:49:10 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x0, @pix_mp={0x0, 0x6, 0x30314247, 0x5, 0x8, [{0xff, 0x9}, {0x3, 0x7}, {0x7ff, 0x2}, {0x0, 0xfffff649}, {0x1}, {0x10001, 0x7f}, {0x0, 0x1}, {0x9, 0xfffffffd}], 0x6, 0xff, 0x13, 0x2, 0x2}}) 08:49:10 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f, 0x48, 0x2, 0x584d, 0x3ff, 0x483, 0x100, 0x7ff, 0x200, 0x8fe6, 0x100, 0xffff, 0x80], 0x10004}}, 0xffffffe1}) 08:49:10 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), r1) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x95c7090aed899a00}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x2c, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c084}, 0x30) write$UHID_INPUT2(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x6) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@multiplanar_mmap={0xff, 0x2, 0x4, 0x10, 0xffffffff, {}, {0x2, 0x2, 0x1f, 0x7, 0x4, 0x5, "61fc7895"}, 0xff, 0x1, {&(0x7f0000000180)=[{0x1fb8, 0x1, {0x40000}, 0x7}, {0x6, 0x7f, {}, 0xfffffe01}]}, 0x2, 0x0, r1}) 08:49:10 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000240)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0xd2, 0x80, 0x5, 0x8000, 0x6df5, 0x9, "aef99f9dd7db5bfbebf7ca39cec9a64287d2e87784395719ca296b92616fbf5acd813434e213a73109be4d8cf17ab5764e380285de9e8b2854f42fc0b7f7d46b960adb1160942e229b6713d216f289bc8556187b600227833d712ca9ba212a3642450f16de57e9656e8791ea01f3267e6f80dc2a49a50ebf3c1d973eeb643cb85f925c0e3f603c29e7e4ac1a28a7f43ae6c6c376de06bc0951df644d35c2e72c3870e5f595f55ce52347281fd08a5c84286869af2156ea49dd349e484b07b7000c595b222bbef7629da4efe3942208baec6f"}}, 0x1ea) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000040)) (async, rerun: 32) syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffff9, 0x2) (rerun: 32) 08:49:10 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x0, @pix_mp={0x0, 0x6, 0x30314247, 0x5, 0x8, [{0xff, 0x9}, {0x3, 0x7}, {0x7ff, 0x2}, {0x0, 0xfffff649}, {0x1}, {0x10001, 0x7f}, {0x0, 0x1}, {0x9, 0xfffffffd}], 0x6, 0xff, 0x13, 0x2, 0x2}}) [ 652.308637] FAULT_INJECTION: forcing a failure. [ 652.308637] name failslab, interval 1, probability 0, space 0, times 0 [ 652.342058] CPU: 1 PID: 27622 Comm: syz-executor.5 Not tainted 4.14.302-syzkaller #0 [ 652.349968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 652.359323] Call Trace: [ 652.361907] dump_stack+0x1b2/0x281 [ 652.365534] should_fail.cold+0x10a/0x149 [ 652.369684] should_failslab+0xd6/0x130 [ 652.373678] __kmalloc+0x2c1/0x400 [ 652.377212] ? __vb2_queue_alloc+0xf4/0xd90 [ 652.381544] __vb2_queue_alloc+0xf4/0xd90 [ 652.385694] ? unwind_get_return_address+0x51/0x90 [ 652.390618] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 652.395979] ? __save_stack_trace+0xa0/0x160 [ 652.400388] ? vim2m_queue_setup+0x221/0x330 [ 652.404796] vb2_core_create_bufs+0x279/0x5a0 [ 652.409302] ? __vb2_queue_free+0x7a0/0x7a0 [ 652.413628] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 652.418642] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 652.424002] ? trace_hardirqs_on+0x10/0x10 [ 652.428238] vb2_create_bufs+0x2e1/0x5b0 [ 652.432302] ? vb2_thread_start+0x310/0x310 [ 652.436615] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 652.441613] v4l_create_bufs+0xa4/0x150 [ 652.445562] __video_do_ioctl+0x65b/0x6a0 [ 652.449688] ? video_ioctl2+0x30/0x30 [ 652.453508] ? __might_fault+0x177/0x1b0 [ 652.457545] ? video_ioctl2+0x30/0x30 [ 652.461321] video_usercopy+0xfd/0xe70 [ 652.465184] ? v4l_g_ctrl+0x390/0x390 [ 652.468961] ? proc_fail_nth_write+0x7b/0x180 [ 652.473432] ? trace_hardirqs_on+0x10/0x10 [ 652.477648] ? fsnotify+0x974/0x11b0 [ 652.481336] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 652.486240] ? __handle_mm_fault+0x80f/0x4620 [ 652.490715] v4l2_ioctl+0x1bb/0x2f0 [ 652.494318] ? v4l2_open+0x2f0/0x2f0 [ 652.498008] do_vfs_ioctl+0x75a/0xff0 [ 652.501783] ? lock_acquire+0x170/0x3f0 [ 652.505731] ? ioctl_preallocate+0x1a0/0x1a0 [ 652.510121] ? __fget+0x265/0x3e0 [ 652.513551] ? do_vfs_ioctl+0xff0/0xff0 [ 652.517501] ? security_file_ioctl+0x83/0xb0 [ 652.521883] SyS_ioctl+0x7f/0xb0 [ 652.525231] ? do_vfs_ioctl+0xff0/0xff0 [ 652.529180] do_syscall_64+0x1d5/0x640 [ 652.533056] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 652.538226] RIP: 0033:0x7fdbb66540a9 [ 652.541911] RSP: 002b:00007fdbb4bc6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 652.549605] RAX: ffffffffffffffda RBX: 00007fdbb6773f80 RCX: 00007fdbb66540a9 08:49:11 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x5, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:11 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (fail_nth: 10) 08:49:11 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x30314247, 0x5, 0x8, [{0xff, 0x9}, {0x3, 0x7}, {0x7ff, 0x2}, {0x0, 0xfffff649}, {0x1}, {0x10001, 0x7f}, {0x0, 0x1}, {0x9, 0xfffffffd}], 0x6, 0xff, 0x13, 0x2, 0x2}}) 08:49:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f, 0x48, 0x2, 0x584d, 0x3ff, 0x483, 0x100, 0x7ff, 0x200, 0x8fe6, 0x100, 0xffff, 0x80], 0x10004}}, 0xffffffe1}) 08:49:11 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), r1) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x95c7090aed899a00}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x2c, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c084}, 0x30) write$UHID_INPUT2(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x6) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@multiplanar_mmap={0xff, 0x2, 0x4, 0x10, 0xffffffff, {}, {0x2, 0x2, 0x1f, 0x7, 0x4, 0x5, "61fc7895"}, 0xff, 0x1, {&(0x7f0000000180)=[{0x1fb8, 0x1, {0x40000}, 0x7}, {0x6, 0x7f, {}, 0xfffffe01}]}, 0x2, 0x0, r1}) [ 652.556850] RDX: 0000000020000300 RSI: 00000000c100565c RDI: 0000000000000003 [ 652.564092] RBP: 00007fdbb4bc61d0 R08: 0000000000000000 R09: 0000000000000000 [ 652.571337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.578579] R13: 00007ffc2c45f6bf R14: 00007fdbb4bc6300 R15: 0000000000022000 08:49:11 executing program 2: ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:11 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x5, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x5, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) 08:49:11 executing program 5: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x5e, 0x27f5bff5, 0x4]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000854) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)=@multiplanar_mmap={0x1, 0x0, 0x4, 0x10, 0xfff, {0x0, 0xea60}, {0x4, 0x0, 0x4, 0x7, 0x7, 0x2, "8b8717db"}, 0x1f, 0x1, {&(0x7f0000000000)=[{0x7, 0xfffffc01, {0x80}}, {0x2, 0x10a2, {0xc48}, 0x8001}]}, 0x2, 0x0, r1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:11 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x5, 0x8, [{0xff, 0x9}, {0x3, 0x7}, {0x7ff, 0x2}, {0x0, 0xfffff649}, {0x1}, {0x10001, 0x7f}, {0x0, 0x1}, {0x9, 0xfffffffd}], 0x6, 0xff, 0x13, 0x2, 0x2}}) 08:49:11 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), r1) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x95c7090aed899a00}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x2c, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c084}, 0x30) (async) write$UHID_INPUT2(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x6) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@multiplanar_mmap={0xff, 0x2, 0x4, 0x10, 0xffffffff, {}, {0x2, 0x2, 0x1f, 0x7, 0x4, 0x5, "61fc7895"}, 0xff, 0x1, {&(0x7f0000000180)=[{0x1fb8, 0x1, {0x40000}, 0x7}, {0x6, 0x7f, {}, 0xfffffe01}]}, 0x2, 0x0, r1}) 08:49:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f, 0x48, 0x2, 0x584d, 0x3ff, 0x483, 0x100, 0x7ff, 0x200, 0x8fe6, 0x100, 0xffff], 0x10004}}, 0xffffffe1}) 08:49:11 executing program 2: ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:11 executing program 5: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x5e, 0x27f5bff5, 0x4]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000854) (async, rerun: 64) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async, rerun: 64) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)=@multiplanar_mmap={0x1, 0x0, 0x4, 0x10, 0xfff, {0x0, 0xea60}, {0x4, 0x0, 0x4, 0x7, 0x7, 0x2, "8b8717db"}, 0x1f, 0x1, {&(0x7f0000000000)=[{0x7, 0xfffffc01, {0x80}}, {0x2, 0x10a2, {0xc48}, 0x8001}]}, 0x2, 0x0, r1}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:11 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x8, [{0xff, 0x9}, {0x3, 0x7}, {0x7ff, 0x2}, {0x0, 0xfffff649}, {0x1}, {0x10001, 0x7f}, {0x0, 0x1}, {0x9, 0xfffffffd}], 0x6, 0xff, 0x13, 0x2, 0x2}}) 08:49:11 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x5, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:11 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x35, 0x1, 0x3}, 0x8) 08:49:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f, 0x48, 0x2, 0x584d, 0x3ff, 0x483, 0x100, 0x7ff, 0x200, 0x8fe6, 0x100], 0x10004}}, 0xffffffe1}) 08:49:11 executing program 2: ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:11 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) accept4$x25(r0, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0x800) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:11 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xff, 0x9}, {0x3, 0x7}, {0x7ff, 0x2}, {0x0, 0xfffff649}, {0x1}, {0x10001, 0x7f}, {0x0, 0x1}, {0x9, 0xfffffffd}], 0x6, 0xff, 0x13, 0x2, 0x2}}) 08:49:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f, 0x48, 0x2, 0x584d, 0x3ff, 0x483, 0x100, 0x7ff, 0x200, 0x8fe6], 0x10004}}, 0xffffffe1}) 08:49:11 executing program 2: syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x188, r0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x88}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffeffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4622, 0x5, @mcast2, 0x4}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfc}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x4}, 0x1) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:11 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x35, 0x1, 0x3}, 0x8) 08:49:11 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) (async) accept4$x25(r0, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0x800) (async) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:11 executing program 5: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x5e, 0x27f5bff5, 0x4]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000854) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)=@multiplanar_mmap={0x1, 0x0, 0x4, 0x10, 0xfff, {0x0, 0xea60}, {0x4, 0x0, 0x4, 0x7, 0x7, 0x2, "8b8717db"}, 0x1f, 0x1, {&(0x7f0000000000)=[{0x7, 0xfffffc01, {0x80}}, {0x2, 0x10a2, {0xc48}, 0x8001}]}, 0x2, 0x0, r1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x5e, 0x27f5bff5, 0x4]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000854) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)=@multiplanar_mmap={0x1, 0x0, 0x4, 0x10, 0xfff, {0x0, 0xea60}, {0x4, 0x0, 0x4, 0x7, 0x7, 0x2, "8b8717db"}, 0x1f, 0x1, {&(0x7f0000000000)=[{0x7, 0xfffffc01, {0x80}}, {0x2, 0x10a2, {0xc48}, 0x8001}]}, 0x2, 0x0, r1}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (async) 08:49:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f, 0x48, 0x2, 0x584d, 0x3ff, 0x483, 0x100, 0x7ff, 0x200], 0x10004}}, 0xffffffe1}) 08:49:11 executing program 2: syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x188, r0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x88}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffeffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4622, 0x5, @mcast2, 0x4}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfc}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x4}, 0x1) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:11 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) accept4$x25(r0, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0x800) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:11 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xff, 0x9}, {0x3, 0x7}, {0x7ff, 0x2}, {0x0, 0xfffff649}, {0x1}, {0x10001, 0x7f}, {0x0, 0x1}, {0x0, 0xfffffffd}], 0x6, 0xff, 0x13, 0x2, 0x2}}) 08:49:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f, 0x48, 0x2, 0x584d, 0x3ff, 0x483, 0x100, 0x7ff], 0x10004}}, 0xffffffe1}) 08:49:11 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x35, 0x1, 0x3}, 0x8) 08:49:11 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xff, 0x9}, {0x3, 0x7}, {0x7ff, 0x2}, {0x0, 0xfffff649}, {0x1}, {0x10001, 0x7f}, {0x0, 0x1}], 0x6, 0xff, 0x13, 0x2, 0x2}}) 08:49:11 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000080)=@usbdevfs_disconnect={0x3}) write$UHID_INPUT2(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="73f87a60146d0bf004e0ae493aaa531fde864584c39bb7120e91f9f6a53be775e03759f491443f430b585879254092713e56c27fd120bbcbb7dabd44cbc17a1684fa05cd1b08c99f63881e9486a3ca73866d2d077377146553de74a95f21bd43a7c481c2ea60ed09eb05f6268381dd9e23b74242147c3efeecddae31babfb0a54ad9b9e4078c9b2647b4fa8128673b7473daf9ced8b1cdbe0dbb386b42bb43b4519f023f319ffbe1ee8ab328a75f793559b25beccf52fb9394734d6f67c940"], 0x6) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f, 0x48, 0x2, 0x584d, 0x3ff, 0x483, 0x100], 0x10004}}, 0xffffffe1}) 08:49:11 executing program 2: syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x188, r0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x88}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffeffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4622, 0x5, @mcast2, 0x4}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfc}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x4}, 0x1) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:11 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@multiplanar_mmap={0x7, 0x0, 0x4, 0x100000, 0xfffffffa, {0x0, 0xea60}, {0x4, 0x8, 0x6, 0x6, 0x2, 0x57, "a92d9b36"}, 0x3, 0x1, {&(0x7f0000000100)=[{0xc6d, 0x1000, {0x8}, 0x3f}, {0x5, 0x5e9, {0x3}, 0x3ff}]}, 0x6}) 08:49:11 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000080)=@usbdevfs_disconnect={0x3}) (async, rerun: 64) write$UHID_INPUT2(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="73f87a60146d0bf004e0ae493aaa531fde864584c39bb7120e91f9f6a53be775e03759f491443f430b585879254092713e56c27fd120bbcbb7dabd44cbc17a1684fa05cd1b08c99f63881e9486a3ca73866d2d077377146553de74a95f21bd43a7c481c2ea60ed09eb05f6268381dd9e23b74242147c3efeecddae31babfb0a54ad9b9e4078c9b2647b4fa8128673b7473daf9ced8b1cdbe0dbb386b42bb43b4519f023f319ffbe1ee8ab328a75f793559b25beccf52fb9394734d6f67c940"], 0x6) (async, rerun: 64) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:11 executing program 5: getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x4c, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x7}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x401}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x1}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0xfffffffe}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x1e}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x101}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x4) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000840)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x228, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x40040}, 0x1) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r10 = syz_open_dev$mouse(&(0x7f00000009c0), 0x4, 0x400) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000a80)={r1}, 0x8) r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r12, &(0x7f0000000cc0), 0x6) r13 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r13, &(0x7f0000000cc0), 0x6) r14 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r14, &(0x7f0000000cc0), 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x6, &(0x7f0000000a00)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_val={0x18, 0xa, 0x2, 0x0, r10}, @jmp={0x5, 0x1, 0xb, 0xa, 0x3, 0xffffffffffffffc0, 0xfffffffffffffff0}], &(0x7f0000000a40)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, 0x25, r11, 0x8, &(0x7f0000000ac0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000b00)={0x4, 0xf, 0x200, 0x7fff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[r12, r13, r1, r14, 0xffffffffffffffff, r1]}, 0x80) ioctl$vim2m_VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:11 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xff, 0x9}, {0x3, 0x7}, {0x7ff, 0x2}, {0x0, 0xfffff649}, {0x1}, {0x10001, 0x7f}], 0x6, 0xff, 0x13, 0x2, 0x2}}) 08:49:11 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000040)={0x0, &(0x7f0000000100)=""/200}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:11 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000080)=@usbdevfs_disconnect={0x3}) write$UHID_INPUT2(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="73f87a60146d0bf004e0ae493aaa531fde864584c39bb7120e91f9f6a53be775e03759f491443f430b585879254092713e56c27fd120bbcbb7dabd44cbc17a1684fa05cd1b08c99f63881e9486a3ca73866d2d077377146553de74a95f21bd43a7c481c2ea60ed09eb05f6268381dd9e23b74242147c3efeecddae31babfb0a54ad9b9e4078c9b2647b4fa8128673b7473daf9ced8b1cdbe0dbb386b42bb43b4519f023f319ffbe1ee8ab328a75f793559b25beccf52fb9394734d6f67c940"], 0x6) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000080)=@usbdevfs_disconnect={0x3}) (async) write$UHID_INPUT2(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="73f87a60146d0bf004e0ae493aaa531fde864584c39bb7120e91f9f6a53be775e03759f491443f430b585879254092713e56c27fd120bbcbb7dabd44cbc17a1684fa05cd1b08c99f63881e9486a3ca73866d2d077377146553de74a95f21bd43a7c481c2ea60ed09eb05f6268381dd9e23b74242147c3efeecddae31babfb0a54ad9b9e4078c9b2647b4fa8128673b7473daf9ced8b1cdbe0dbb386b42bb43b4519f023f319ffbe1ee8ab328a75f793559b25beccf52fb9394734d6f67c940"], 0x6) (async) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) 08:49:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f, 0x48, 0x2, 0x584d, 0x3ff, 0x483], 0x10004}}, 0xffffffe1}) 08:49:11 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xff, 0x9}, {0x3, 0x7}, {0x7ff, 0x2}, {0x0, 0xfffff649}, {0x1}, {0x0, 0x7f}], 0x6, 0xff, 0x13, 0x2, 0x2}}) 08:49:11 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000040)={0x0, &(0x7f0000000100)=""/200}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:11 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@multiplanar_mmap={0x7, 0x0, 0x4, 0x100000, 0xfffffffa, {0x0, 0xea60}, {0x4, 0x8, 0x6, 0x6, 0x2, 0x57, "a92d9b36"}, 0x3, 0x1, {&(0x7f0000000100)=[{0xc6d, 0x1000, {0x8}, 0x3f}, {0x5, 0x5e9, {0x3}, 0x3ff}]}, 0x6}) 08:49:11 executing program 5: getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x4c, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x7}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x401}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x1}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0xfffffffe}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x1e}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x101}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x4) (async) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000840)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x228, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x40040}, 0x1) (async) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r10 = syz_open_dev$mouse(&(0x7f00000009c0), 0x4, 0x400) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000a80)={r1}, 0x8) (async) r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r12, &(0x7f0000000cc0), 0x6) (async) r13 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r13, &(0x7f0000000cc0), 0x6) (async) r14 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r14, &(0x7f0000000cc0), 0x6) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x6, &(0x7f0000000a00)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_val={0x18, 0xa, 0x2, 0x0, r10}, @jmp={0x5, 0x1, 0xb, 0xa, 0x3, 0xffffffffffffffc0, 0xfffffffffffffff0}], &(0x7f0000000a40)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, 0x25, r11, 0x8, &(0x7f0000000ac0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000b00)={0x4, 0xf, 0x200, 0x7fff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[r12, r13, r1, r14, 0xffffffffffffffff, r1]}, 0x80) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f, 0x48, 0x2, 0x584d, 0x3ff], 0x10004}}, 0xffffffe1}) 08:49:11 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@multiplanar_mmap={0x7, 0x0, 0x4, 0x100000, 0xfffffffa, {0x0, 0xea60}, {0x4, 0x8, 0x6, 0x6, 0x2, 0x57, "a92d9b36"}, 0x3, 0x1, {&(0x7f0000000100)=[{0xc6d, 0x1000, {0x8}, 0x3f}, {0x5, 0x5e9, {0x3}, 0x3ff}]}, 0x6}) 08:49:11 executing program 3: ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f00000002c0)=@usbdevfs_connect={0x6}) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:11 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000040)={0x0, &(0x7f0000000100)=""/200}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:11 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xff, 0x9}, {0x3, 0x7}, {0x7ff, 0x2}, {0x0, 0xfffff649}, {0x1}], 0x6, 0xff, 0x13, 0x2, 0x2}}) 08:49:11 executing program 5: getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14) (async, rerun: 64) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) (async, rerun: 64) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x4c, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x7}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x401}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x1}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0xfffffffe}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x1e}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x101}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x4) (async, rerun: 64) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000840)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x228, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x40040}, 0x1) (async, rerun: 64) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r10 = syz_open_dev$mouse(&(0x7f00000009c0), 0x4, 0x400) (async) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000a80)={r1}, 0x8) (async) r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r12, &(0x7f0000000cc0), 0x6) (async) r13 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r13, &(0x7f0000000cc0), 0x6) (async) r14 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r14, &(0x7f0000000cc0), 0x6) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x6, &(0x7f0000000a00)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_val={0x18, 0xa, 0x2, 0x0, r10}, @jmp={0x5, 0x1, 0xb, 0xa, 0x3, 0xffffffffffffffc0, 0xfffffffffffffff0}], &(0x7f0000000a40)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, 0x25, r11, 0x8, &(0x7f0000000ac0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000b00)={0x4, 0xf, 0x200, 0x7fff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[r12, r13, r1, r14, 0xffffffffffffffff, r1]}, 0x80) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f, 0x48, 0x2, 0x584d], 0x10004}}, 0xffffffe1}) 08:49:12 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xff, 0x9}, {0x3, 0x7}, {0x7ff, 0x2}, {0x0, 0xfffff649}], 0x6, 0xff, 0x13, 0x2, 0x2}}) 08:49:12 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x1ff, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="4c884abc12621de6efb05581858c62b0cef8b04f194165dab56defa2691bd918a7333c88405ce45bf77290b5f6cf67801a1004ff3601e9843520fa2f053db1fa99dc037e2f2a1af7d28cf89f65742cbf8a39ad1f73a2554c3e650d200a174d07084b768f4e5792863ba0d4f3ffc77a73a381f89053c75ec053b2ee93a6e5e7271627faa34f06656976153a106c6333d38135953c78c9a6d297469cb4ce9370"], 0x6) write$P9_RREADDIR(r2, &(0x7f0000000100)={0x87, 0x29, 0x2, {0x2, [{{0x2, 0x4, 0x4}, 0x6, 0xb5, 0x7, './file0'}, {{0x10, 0x2, 0x1}, 0x8, 0x1, 0x7, './file0'}, {{0x4, 0x2, 0x8}, 0xc68, 0xc8, 0x7, './file0'}, {{0x0, 0x0, 0x6}, 0x3, 0xa8, 0x7, './file0'}]}}, 0x87) 08:49:12 executing program 3: ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f00000002c0)=@usbdevfs_connect={0x6}) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) (async) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x180, r1, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x16c, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x571f7e79}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x204ef11f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x711ae84c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14483461}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9b6ea31}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x749a7655}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x628b8f2c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e8d496f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406edc18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c71f3ff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x464b6e70}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3052643e}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74b3c806}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed51c59}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38cf77a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3565e2a2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e4f262f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e61b84d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3dca2c4d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd6}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x125984ff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7dd42cda}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x549e7169}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e9fd280}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34c34dec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b95dafc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77b5d429}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x716bb37}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79ab9107}]}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0x1201) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) 08:49:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f, 0x48, 0x2], 0x10004}}, 0xffffffe1}) 08:49:12 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xff, 0x9}, {0x3, 0x7}, {0x7ff, 0x2}], 0x6, 0xff, 0x13, 0x2, 0x2}}) 08:49:12 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}}) 08:49:12 executing program 3: ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f00000002c0)=@usbdevfs_connect={0x6}) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f00000002c0)=@usbdevfs_connect={0x6}) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) (async) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) 08:49:12 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x1ff, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="4c884abc12621de6efb05581858c62b0cef8b04f194165dab56defa2691bd918a7333c88405ce45bf77290b5f6cf67801a1004ff3601e9843520fa2f053db1fa99dc037e2f2a1af7d28cf89f65742cbf8a39ad1f73a2554c3e650d200a174d07084b768f4e5792863ba0d4f3ffc77a73a381f89053c75ec053b2ee93a6e5e7271627faa34f06656976153a106c6333d38135953c78c9a6d297469cb4ce9370"], 0x6) write$P9_RREADDIR(r2, &(0x7f0000000100)={0x87, 0x29, 0x2, {0x2, [{{0x2, 0x4, 0x4}, 0x6, 0xb5, 0x7, './file0'}, {{0x10, 0x2, 0x1}, 0x8, 0x1, 0x7, './file0'}, {{0x4, 0x2, 0x8}, 0xc68, 0xc8, 0x7, './file0'}, {{0x0, 0x0, 0x6}, 0x3, 0xa8, 0x7, './file0'}]}}, 0x87) syz_open_dev$vim2m(&(0x7f00000000c0), 0x1ff, 0x2) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000040)) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="4c884abc12621de6efb05581858c62b0cef8b04f194165dab56defa2691bd918a7333c88405ce45bf77290b5f6cf67801a1004ff3601e9843520fa2f053db1fa99dc037e2f2a1af7d28cf89f65742cbf8a39ad1f73a2554c3e650d200a174d07084b768f4e5792863ba0d4f3ffc77a73a381f89053c75ec053b2ee93a6e5e7271627faa34f06656976153a106c6333d38135953c78c9a6d297469cb4ce9370"], 0x6) (async) write$P9_RREADDIR(r2, &(0x7f0000000100)={0x87, 0x29, 0x2, {0x2, [{{0x2, 0x4, 0x4}, 0x6, 0xb5, 0x7, './file0'}, {{0x10, 0x2, 0x1}, 0x8, 0x1, 0x7, './file0'}, {{0x4, 0x2, 0x8}, 0xc68, 0xc8, 0x7, './file0'}, {{0x0, 0x0, 0x6}, 0x3, 0xa8, 0x7, './file0'}]}}, 0x87) (async) 08:49:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x180, r1, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x16c, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x571f7e79}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x204ef11f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x711ae84c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14483461}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9b6ea31}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x749a7655}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x628b8f2c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e8d496f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406edc18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c71f3ff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x464b6e70}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3052643e}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74b3c806}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed51c59}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38cf77a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3565e2a2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e4f262f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e61b84d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3dca2c4d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd6}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x125984ff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7dd42cda}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x549e7169}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e9fd280}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34c34dec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b95dafc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77b5d429}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x716bb37}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79ab9107}]}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) (async, rerun: 64) syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0x1201) (rerun: 64) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) 08:49:12 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xff, 0x9}, {0x3, 0x7}, {0x0, 0x2}], 0x6, 0xff, 0x13, 0x2, 0x2}}) 08:49:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f, 0x48], 0x10004}}, 0xffffffe1}) 08:49:12 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}}) (async) 08:49:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x180, r1, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x16c, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x571f7e79}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x204ef11f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x711ae84c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14483461}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9b6ea31}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x749a7655}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x628b8f2c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e8d496f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x406edc18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c71f3ff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x464b6e70}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3052643e}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74b3c806}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed51c59}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38cf77a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3565e2a2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e4f262f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e61b84d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3dca2c4d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd6}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x125984ff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7dd42cda}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x549e7169}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e9fd280}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34c34dec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b95dafc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77b5d429}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x716bb37}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79ab9107}]}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0x1201) (async) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) 08:49:12 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xff, 0x9}, {0x3, 0x7}], 0x6, 0xff, 0x13, 0x2, 0x2}}) 08:49:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f], 0x10004}}, 0xffffffe1}) 08:49:12 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x1ff, 0x2) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000040)) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="4c884abc12621de6efb05581858c62b0cef8b04f194165dab56defa2691bd918a7333c88405ce45bf77290b5f6cf67801a1004ff3601e9843520fa2f053db1fa99dc037e2f2a1af7d28cf89f65742cbf8a39ad1f73a2554c3e650d200a174d07084b768f4e5792863ba0d4f3ffc77a73a381f89053c75ec053b2ee93a6e5e7271627faa34f06656976153a106c6333d38135953c78c9a6d297469cb4ce9370"], 0x6) (async) write$P9_RREADDIR(r2, &(0x7f0000000100)={0x87, 0x29, 0x2, {0x2, [{{0x2, 0x4, 0x4}, 0x6, 0xb5, 0x7, './file0'}, {{0x10, 0x2, 0x1}, 0x8, 0x1, 0x7, './file0'}, {{0x4, 0x2, 0x8}, 0xc68, 0xc8, 0x7, './file0'}, {{0x0, 0x0, 0x6}, 0x3, 0xa8, 0x7, './file0'}]}}, 0x87) 08:49:12 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}}) (async) 08:49:12 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x40, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1000}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40014) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000000)=@overlay={0x0, 0x1, 0x4, 0x70000, 0x7, {0x0, 0x2710}, {0x4, 0x2, 0x8, 0x3f, 0x2, 0xff, "46984db0"}, 0x8, 0x3, {}, 0x2, 0x0, r1}) 08:49:12 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xff, 0x9}, {0x0, 0x7}], 0x6, 0xff, 0x13, 0x2, 0x2}}) 08:49:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978], 0x10004}}, 0xffffffe1}) 08:49:12 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 08:49:12 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000200)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000280)=ANY=[@ANYBLOB="010900000000000000000000000000000100006e1e00000d0000800001000000"]) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000100)={0xe5, 0x40003, 0x3, {0x1, @sliced={0xfff, [0x4400, 0x0, 0x6c1, 0x40, 0xf257, 0x800, 0xb8, 0x20, 0x5, 0x201, 0x3, 0x1, 0x3, 0x4, 0x40, 0x0, 0x5, 0x1, 0xffff, 0x3f, 0x595, 0x800, 0xfff8, 0x7fff, 0x0, 0x2, 0x4e4b, 0x5, 0x107, 0x0, 0x2b, 0x0, 0xe50, 0xfff8, 0x8003, 0xffff, 0x0, 0x1, 0x40, 0x1, 0x743f, 0x5, 0x0, 0x100, 0x0, 0x1, 0xc81d, 0xccb], 0x3}}, 0x7fffffff}) 08:49:12 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xff, 0x9}], 0x6, 0xff, 0x13, 0x2, 0x2}}) 08:49:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5], 0x10004}}, 0xffffffe1}) 08:49:12 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 08:49:12 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}], 0x6, 0xff, 0x13, 0x2, 0x2}}) 08:49:12 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x40, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1000}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40014) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000000)=@overlay={0x0, 0x1, 0x4, 0x70000, 0x7, {0x0, 0x2710}, {0x4, 0x2, 0x8, 0x3f, 0x2, 0xff, "46984db0"}, 0x8, 0x3, {}, 0x2, 0x0, r1}) 08:49:12 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000040)=0xffffffff) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff], 0x10004}}, 0xffffffe1}) 08:49:12 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000200)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000280)=ANY=[@ANYBLOB="010900000000000000000000000000000100006e1e00000d0000800001000000"]) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000100)={0xe5, 0x40003, 0x3, {0x1, @sliced={0xfff, [0x4400, 0x0, 0x6c1, 0x40, 0xf257, 0x800, 0xb8, 0x20, 0x5, 0x201, 0x3, 0x1, 0x3, 0x4, 0x40, 0x0, 0x5, 0x1, 0xffff, 0x3f, 0x595, 0x800, 0xfff8, 0x7fff, 0x0, 0x2, 0x4e4b, 0x5, 0x107, 0x0, 0x2b, 0x0, 0xe50, 0xfff8, 0x8003, 0xffff, 0x0, 0x1, 0x40, 0x1, 0x743f, 0x5, 0x0, 0x100, 0x0, 0x1, 0xc81d, 0xccb], 0x3}}, 0x7fffffff}) 08:49:12 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 08:49:12 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x6, 0xff, 0x13, 0x2, 0x2}}) 08:49:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1], 0x10004}}, 0xffffffe1}) 08:49:12 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) (async) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000040)=0xffffffff) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:12 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x40, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1000}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40014) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000000)=@overlay={0x0, 0x1, 0x4, 0x70000, 0x7, {0x0, 0x2710}, {0x4, 0x2, 0x8, 0x3f, 0x2, 0xff, "46984db0"}, 0x8, 0x3, {}, 0x2, 0x0, r1}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x40, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1000}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40014) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000000)=@overlay={0x0, 0x1, 0x4, 0x70000, 0x7, {0x0, 0x2710}, {0x4, 0x2, 0x8, 0x3f, 0x2, 0xff, "46984db0"}, 0x8, 0x3, {}, 0x2, 0x0, r1}) (async) 08:49:12 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async, rerun: 64) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) (rerun: 64) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000200)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000280)=ANY=[@ANYBLOB="010900000000000000000000000000000100006e1e00000d0000800001000000"]) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000100)={0xe5, 0x40003, 0x3, {0x1, @sliced={0xfff, [0x4400, 0x0, 0x6c1, 0x40, 0xf257, 0x800, 0xb8, 0x20, 0x5, 0x201, 0x3, 0x1, 0x3, 0x4, 0x40, 0x0, 0x5, 0x1, 0xffff, 0x3f, 0x595, 0x800, 0xfff8, 0x7fff, 0x0, 0x2, 0x4e4b, 0x5, 0x107, 0x0, 0x2b, 0x0, 0xe50, 0xfff8, 0x8003, 0xffff, 0x0, 0x1, 0x40, 0x1, 0x743f, 0x5, 0x0, 0x100, 0x0, 0x1, 0xc81d, 0xccb], 0x3}}, 0x7fffffff}) 08:49:12 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x6, 0xff, 0x13, 0x2, 0x2}}) 08:49:12 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000140)={r1, 0x1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x7, 0xff, 0x1, {0x1, @vbi={0x0, 0x5, 0x7fffffff, 0x4f565559, [0x6, 0x9], [0xd31, 0x40], 0xcb7e9e27697e26c4}}, 0x4}) 08:49:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5], 0x10004}}, 0xffffffe1}) 08:49:12 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x800, 0x0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x80, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x1cc, 0x6, 0x4, 0xfff, 0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfa}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffffb}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xfe}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0xc001}, 0x40004) write$UHID_INPUT2(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000d00b740cb5256529b8d9c356a5772b6ad4900000000000000000069b013a237431e8f0c589aaddb40844ecc1ace53ab527929e7eb53552e1db7394f2943c0b000f6671ff7fb573f883b9cf8cc6209eb4b0f9ff1169c380147ce4ca23e7f05f1e5438aa974d0d118046297631fde8e1d240b867124ed6f5bd6658294fc1f5270616ee938eedae3b222ca4fa795f503eae05da29fbf997e875d00000261dd480541952fe5252e337b8e063ee35ab4298a1e290015206b365fb541d6"], 0x6) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x770, 0x0, 0x4, 0x0, 0x2}) 08:49:12 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) (async) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000040)=0xffffffff) (async) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:12 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x6, 0xff, 0x13, 0x2, 0x2}}) 08:49:12 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f00000001c0)=ANY=[@ANYBLOB="63350000050000ee848f0b02386618c8e053a291e380e88cd3dab4a44149e5af9ce077e24bf6cacc51fb066283ea2243446757b4450896cb8c"]) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)=@overlay={0x9, 0x2, 0x4, 0x70402, 0xbca6, {}, {0x3, 0x1, 0x5, 0x7f, 0x5, 0x9, "226ad093"}, 0xa28, 0x3, {}, 0xe00}) 08:49:12 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async, rerun: 32) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (rerun: 32) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x800, 0x0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x80, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x1cc, 0x6, 0x4, 0xfff, 0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfa}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffffb}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xfe}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0xc001}, 0x40004) write$UHID_INPUT2(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000d00b740cb5256529b8d9c356a5772b6ad4900000000000000000069b013a237431e8f0c589aaddb40844ecc1ace53ab527929e7eb53552e1db7394f2943c0b000f6671ff7fb573f883b9cf8cc6209eb4b0f9ff1169c380147ce4ca23e7f05f1e5438aa974d0d118046297631fde8e1d240b867124ed6f5bd6658294fc1f5270616ee938eedae3b222ca4fa795f503eae05da29fbf997e875d00000261dd480541952fe5252e337b8e063ee35ab4298a1e290015206b365fb541d6"], 0x6) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x770, 0x0, 0x4, 0x0, 0x2}) 08:49:12 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}) (async) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000140)={r1, 0x1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x7, 0xff, 0x1, {0x1, @vbi={0x0, 0x5, 0x7fffffff, 0x4f565559, [0x6, 0x9], [0xd31, 0x40], 0xcb7e9e27697e26c4}}, 0x4}) 08:49:12 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x10000}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0x401, 0x50565559, 0x2, @stepwise={0x6, 0x2, 0x972, 0x57, 0x3ff, 0x1}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000100)={0x2, 0x8b91, 0x4, {0x3, @pix_mp={0x132a, 0x6, 0x6e1a0e23, 0x9, 0xa, [{0x0, 0x4}, {0x77, 0x7f}, {0x2, 0x2}, {0x100, 0xfffff59f}, {0x0, 0x401}, {0x571, 0x8}, {0xffff9f0b, 0xd3}, {0x40, 0xa6}], 0x3, 0x1a, 0x0, 0x2, 0x4}}, 0x1}) r2 = syz_open_dev$mouse(&(0x7f0000000200), 0xfffffffffffffffa, 0x24000) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000240)={0x0, 0x0, "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"}) r3 = syz_open_dev$vim2m(&(0x7f0000000380), 0x1, 0x2) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="8747a2cbe390b87de9a9ed95f2e7253e5bda9067e0fdd7143168f979368173046302000000000000005caf98b10963074bf945200ad126b933aa82e7c23c4ea8ddb3d828a7f498a3516021c9f88e52304ed09e67ca236332a3c9cb6ccbea02d08b51e00807883c76a882d580f69ce24a8cedaaed99957bda6117e72c65508bd4fadd8a51deb28205a822022b772b7edeb3bedec47666d105aef4501de74aa9f9ff3d456227708c1d84ef7410b2711db1bc96b7ed720408d459123d8d46d0ed3d0fd0a68da9b3d5e3564a3c2079df919ef2df75b3e7b400f457a25f8b406ce7ea323756849708c156b83315a1735424ab94f7"], 0x6) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000400)=@userptr={0x2, 0x6, 0x4, 0x70000, 0x4, {}, {0x5, 0x0, 0x80, 0x1, 0x0, 0x37, "ec304493"}, 0x4, 0x2, {&(0x7f00000003c0)}, 0x401, 0x0, r4}) 08:49:12 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}], 0x0, 0xff, 0x13, 0x2, 0x2}}) 08:49:12 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f00000001c0)=ANY=[@ANYBLOB="63350000050000ee848f0b02386618c8e053a291e380e88cd3dab4a44149e5af9ce077e24bf6cacc51fb066283ea2243446757b4450896cb8c"]) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)=@overlay={0x9, 0x2, 0x4, 0x70402, 0xbca6, {}, {0x3, 0x1, 0x5, 0x7f, 0x5, 0x9, "226ad093"}, 0xa28, 0x3, {}, 0xe00}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f00000001c0)=ANY=[@ANYBLOB="63350000050000ee848f0b02386618c8e053a291e380e88cd3dab4a44149e5af9ce077e24bf6cacc51fb066283ea2243446757b4450896cb8c"]) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)=@overlay={0x9, 0x2, 0x4, 0x70402, 0xbca6, {}, {0x3, 0x1, 0x5, 0x7f, 0x5, 0x9, "226ad093"}, 0xa28, 0x3, {}, 0xe00}) (async) 08:49:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4], 0x10004}}, 0xffffffe1}) 08:49:12 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x800, 0x0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x80, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x1cc, 0x6, 0x4, 0xfff, 0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfa}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffffb}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xfe}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0xc001}, 0x40004) write$UHID_INPUT2(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000d00b740cb5256529b8d9c356a5772b6ad4900000000000000000069b013a237431e8f0c589aaddb40844ecc1ace53ab527929e7eb53552e1db7394f2943c0b000f6671ff7fb573f883b9cf8cc6209eb4b0f9ff1169c380147ce4ca23e7f05f1e5438aa974d0d118046297631fde8e1d240b867124ed6f5bd6658294fc1f5270616ee938eedae3b222ca4fa795f503eae05da29fbf997e875d00000261dd480541952fe5252e337b8e063ee35ab4298a1e290015206b365fb541d6"], 0x6) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x770, 0x0, 0x4, 0x0, 0x2}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x800, 0x0) (async) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x80, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x1cc, 0x6, 0x4, 0xfff, 0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfa}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffffb}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xfe}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0xc001}, 0x40004) (async) write$UHID_INPUT2(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000d00b740cb5256529b8d9c356a5772b6ad4900000000000000000069b013a237431e8f0c589aaddb40844ecc1ace53ab527929e7eb53552e1db7394f2943c0b000f6671ff7fb573f883b9cf8cc6209eb4b0f9ff1169c380147ce4ca23e7f05f1e5438aa974d0d118046297631fde8e1d240b867124ed6f5bd6658294fc1f5270616ee938eedae3b222ca4fa795f503eae05da29fbf997e875d00000261dd480541952fe5252e337b8e063ee35ab4298a1e290015206b365fb541d6"], 0x6) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x770, 0x0, 0x4, 0x0, 0x2}) (async) 08:49:12 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x10000}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0x401, 0x50565559, 0x2, @stepwise={0x6, 0x2, 0x972, 0x57, 0x3ff, 0x1}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000100)={0x2, 0x8b91, 0x4, {0x3, @pix_mp={0x132a, 0x6, 0x6e1a0e23, 0x9, 0xa, [{0x0, 0x4}, {0x77, 0x7f}, {0x2, 0x2}, {0x100, 0xfffff59f}, {0x0, 0x401}, {0x571, 0x8}, {0xffff9f0b, 0xd3}, {0x40, 0xa6}], 0x3, 0x1a, 0x0, 0x2, 0x4}}, 0x1}) (async) r2 = syz_open_dev$mouse(&(0x7f0000000200), 0xfffffffffffffffa, 0x24000) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000240)={0x0, 0x0, "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"}) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000380), 0x1, 0x2) (async) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="8747a2cbe390b87de9a9ed95f2e7253e5bda9067e0fdd7143168f979368173046302000000000000005caf98b10963074bf945200ad126b933aa82e7c23c4ea8ddb3d828a7f498a3516021c9f88e52304ed09e67ca236332a3c9cb6ccbea02d08b51e00807883c76a882d580f69ce24a8cedaaed99957bda6117e72c65508bd4fadd8a51deb28205a822022b772b7edeb3bedec47666d105aef4501de74aa9f9ff3d456227708c1d84ef7410b2711db1bc96b7ed720408d459123d8d46d0ed3d0fd0a68da9b3d5e3564a3c2079df919ef2df75b3e7b400f457a25f8b406ce7ea323756849708c156b83315a1735424ab94f7"], 0x6) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000400)=@userptr={0x2, 0x6, 0x4, 0x70000, 0x4, {}, {0x5, 0x0, 0x80, 0x1, 0x0, 0x37, "ec304493"}, 0x4, 0x2, {&(0x7f00000003c0)}, 0x401, 0x0, r4}) 08:49:12 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}], 0x0, 0x0, 0x13, 0x2, 0x2}}) 08:49:12 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f00000001c0)=ANY=[@ANYBLOB="63350000050000ee848f0b02386618c8e053a291e380e88cd3dab4a44149e5af9ce077e24bf6cacc51fb066283ea2243446757b4450896cb8c"]) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)=@overlay={0x9, 0x2, 0x4, 0x70402, 0xbca6, {}, {0x3, 0x1, 0x5, 0x7f, 0x5, 0x9, "226ad093"}, 0xa28, 0x3, {}, 0xe00}) 08:49:12 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}], 0x0, 0x0, 0x0, 0x2, 0x2}}) 08:49:12 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}) (async, rerun: 64) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)={0x0}) (rerun: 64) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000140)={r1, 0x1}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x7, 0xff, 0x1, {0x1, @vbi={0x0, 0x5, 0x7fffffff, 0x4f565559, [0x6, 0x9], [0xd31, 0x40], 0xcb7e9e27697e26c4}}, 0x4}) 08:49:12 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000140)=@overlay={0x5, 0x3, 0x4, 0xb366141206464e68, 0x1, {}, {0x3, 0x2, 0xff, 0x80, 0x80, 0x6, "791f0f0c"}, 0x0, 0x3, {}, 0x9, 0x0, r1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x2, 0xffff, 0xfff}) syz_open_dev$vim2m(&(0x7f0000000100), 0xf245, 0x2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f00000001c0)) 08:49:12 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x10000}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0x401, 0x50565559, 0x2, @stepwise={0x6, 0x2, 0x972, 0x57, 0x3ff, 0x1}}) (async, rerun: 32) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000100)={0x2, 0x8b91, 0x4, {0x3, @pix_mp={0x132a, 0x6, 0x6e1a0e23, 0x9, 0xa, [{0x0, 0x4}, {0x77, 0x7f}, {0x2, 0x2}, {0x100, 0xfffff59f}, {0x0, 0x401}, {0x571, 0x8}, {0xffff9f0b, 0xd3}, {0x40, 0xa6}], 0x3, 0x1a, 0x0, 0x2, 0x4}}, 0x1}) (async, rerun: 32) r2 = syz_open_dev$mouse(&(0x7f0000000200), 0xfffffffffffffffa, 0x24000) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000240)={0x0, 0x0, "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"}) r3 = syz_open_dev$vim2m(&(0x7f0000000380), 0x1, 0x2) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="8747a2cbe390b87de9a9ed95f2e7253e5bda9067e0fdd7143168f979368173046302000000000000005caf98b10963074bf945200ad126b933aa82e7c23c4ea8ddb3d828a7f498a3516021c9f88e52304ed09e67ca236332a3c9cb6ccbea02d08b51e00807883c76a882d580f69ce24a8cedaaed99957bda6117e72c65508bd4fadd8a51deb28205a822022b772b7edeb3bedec47666d105aef4501de74aa9f9ff3d456227708c1d84ef7410b2711db1bc96b7ed720408d459123d8d46d0ed3d0fd0a68da9b3d5e3564a3c2079df919ef2df75b3e7b400f457a25f8b406ce7ea323756849708c156b83315a1735424ab94f7"], 0x6) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000400)=@userptr={0x2, 0x6, 0x4, 0x70000, 0x4, {}, {0x5, 0x0, 0x80, 0x1, 0x0, 0x37, "ec304493"}, 0x4, 0x2, {&(0x7f00000003c0)}, 0x401, 0x0, r4}) 08:49:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4], 0x10004}}, 0xffffffe1}) 08:49:12 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x111040) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000100)={0x0, 0x5dff64d547d670bd}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000040)={0x0, 0x3}) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x6, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}, 0x1}) 08:49:12 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}], 0x0, 0x0, 0x0, 0x0, 0x2}}) 08:49:12 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x3, @raw_data="a10d3256be0abc8982a8b94af428a6c414b11ad94dfcd54af43b5efcf862965052ba250832cb973df01797abb58a76dc784d19a750c27196f340068313ab753e5e9618029bdb27da26f51a62722d52314ec9fd1bd9c9055ecb0f46487607dda149c1e425c84dcfe78f423a1821b13ea6d40ced8318c2d5551b1663b53f924fac19e9b476d5cf825b47e79c018b8e2114347588690882e82d0aa1b93c1d1cfcd97595560cc5077eff9992b0063ec413b56110c71ddb5c34188de6bfc3b9f6eb4b57920bddd10959b7"}}) 08:49:12 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000140)=@overlay={0x5, 0x3, 0x4, 0xb366141206464e68, 0x1, {}, {0x3, 0x2, 0xff, 0x80, 0x80, 0x6, "791f0f0c"}, 0x0, 0x3, {}, 0x9, 0x0, r1}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x2, 0xffff, 0xfff}) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0xf245, 0x2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f00000001c0)) 08:49:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800], 0x10004}}, 0xffffffe1}) 08:49:12 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x0, 0xdc9, 0x2, 0x4000}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:13 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3], 0x10004}}, 0xffffffe1}) 08:49:13 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x3, @raw_data="a10d3256be0abc8982a8b94af428a6c414b11ad94dfcd54af43b5efcf862965052ba250832cb973df01797abb58a76dc784d19a750c27196f340068313ab753e5e9618029bdb27da26f51a62722d52314ec9fd1bd9c9055ecb0f46487607dda149c1e425c84dcfe78f423a1821b13ea6d40ced8318c2d5551b1663b53f924fac19e9b476d5cf825b47e79c018b8e2114347588690882e82d0aa1b93c1d1cfcd97595560cc5077eff9992b0063ec413b56110c71ddb5c34188de6bfc3b9f6eb4b57920bddd10959b7"}}) 08:49:13 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) 08:49:13 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x0, 0xdc9, 0x2, 0x4000}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x0, 0xdc9, 0x2, 0x4000}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async) 08:49:13 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x111040) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000100)={0x0, 0x5dff64d547d670bd}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000040)={0x0, 0x3}) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x6, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}, 0x1}) syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x111040) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) (async) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000100)={0x0, 0x5dff64d547d670bd}) (async) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000040)={0x0, 0x3}) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x6, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}, 0x1}) (async) 08:49:13 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000140)=@overlay={0x5, 0x3, 0x4, 0xb366141206464e68, 0x1, {}, {0x3, 0x2, 0xff, 0x80, 0x80, 0x6, "791f0f0c"}, 0x0, 0x3, {}, 0x9, 0x0, r1}) (async, rerun: 64) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x2, 0xffff, 0xfff}) (rerun: 64) syz_open_dev$vim2m(&(0x7f0000000100), 0xf245, 0x2) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f00000001c0)) 08:49:13 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x3, @raw_data="a10d3256be0abc8982a8b94af428a6c414b11ad94dfcd54af43b5efcf862965052ba250832cb973df01797abb58a76dc784d19a750c27196f340068313ab753e5e9618029bdb27da26f51a62722d52314ec9fd1bd9c9055ecb0f46487607dda149c1e425c84dcfe78f423a1821b13ea6d40ced8318c2d5551b1663b53f924fac19e9b476d5cf825b47e79c018b8e2114347588690882e82d0aa1b93c1d1cfcd97595560cc5077eff9992b0063ec413b56110c71ddb5c34188de6bfc3b9f6eb4b57920bddd10959b7"}}) 08:49:13 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff], 0x10004}}, 0xffffffe1}) 08:49:13 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5], 0x10004}}, 0xffffffe1}) 08:49:13 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x0, 0xdc9, 0x2, 0x4000}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:13 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x111040) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000100)={0x0, 0x5dff64d547d670bd}) (async) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000040)={0x0, 0x3}) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x6, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}, 0x1}) 08:49:13 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x1, 0x2, 0x0, 0xcd}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)=@userptr={0xbb, 0x8e9c8350811b3054, 0x4, 0xe000, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}, 0xffffffff}) 08:49:13 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x1, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xb5, 0xefb, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffd]}}}) 08:49:13 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8], 0x10004}}, 0xffffffe1}) 08:49:13 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000200)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000280)=ANY=[@ANYBLOB="010900000000000000000000000000000100006e1e00000d0000800001000000"]) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000100)={0xe5, 0x40003, 0x3, {0x1, @sliced={0xfff, [0x4400, 0x0, 0x6c1, 0x40, 0xf257, 0x800, 0xb8, 0x20, 0x5, 0x201, 0x3, 0x1, 0x3, 0x4, 0x40, 0x0, 0x5, 0x1, 0xffff, 0x3f, 0x595, 0x800, 0xfff8, 0x7fff, 0x0, 0x2, 0x4e4b, 0x5, 0x107, 0x0, 0x2b, 0x0, 0xe50, 0xfff8, 0x8003, 0xffff, 0x0, 0x1, 0x40, 0x1, 0x743f, 0x5, 0x0, 0x100, 0x0, 0x1, 0xc81d, 0xccb], 0x3}}, 0x7fffffff}) 08:49:13 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000080)={0xa, {0x8, 0x1f, 0x7}}, 0xa) 08:49:13 executing program 2: syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xfffffff8}) 08:49:13 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x1, 0x2, 0x0, 0xcd}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)=@userptr={0xbb, 0x8e9c8350811b3054, 0x4, 0xe000, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}, 0xffffffff}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x1, 0x2, 0x0, 0xcd}) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)=@userptr={0xbb, 0x8e9c8350811b3054, 0x4, 0xe000, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}, 0xffffffff}) (async) 08:49:13 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x1, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xb5, 0xefb, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffd]}}}) 08:49:13 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40], 0x10004}}, 0xffffffe1}) 08:49:13 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5], 0x10004}}, 0xffffffe1}) 08:49:13 executing program 2: syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xfffffff8}) 08:49:13 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000080)={0xa, {0x8, 0x1f, 0x7}}, 0xa) 08:49:13 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x1, 0x2, 0x0, 0xcd}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)=@userptr={0xbb, 0x8e9c8350811b3054, 0x4, 0xe000, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}, 0xffffffff}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x1, 0x2, 0x0, 0xcd}) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) (async) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)=@userptr={0xbb, 0x8e9c8350811b3054, 0x4, 0xe000, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}, 0xffffffff}) (async) 08:49:13 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x1, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xb5, 0xefb, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffd]}}}) 08:49:13 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81], 0x10004}}, 0xffffffe1}) 08:49:13 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f, 0x48, 0x2, 0x584d, 0x3ff], 0x10004}}, 0xffffffe1}) 08:49:13 executing program 2: syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xfffffff8}) 08:49:13 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000080)={0xa, {0x8, 0x1f, 0x7}}, 0xa) 08:49:13 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1], 0x10004}}, 0xffffffe1}) 08:49:13 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x8, 0x1, 0x2, "5e1c5a1d6898aea5509346433e2959df06ae0e56b9ed4d387c9dab0cfcce5fb6", 0x3447504d}) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000000)) 08:49:13 executing program 1: getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x4c, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x7}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x401}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x1}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0xfffffffe}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x1e}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x101}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x4) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000840)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x228, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x40040}, 0x1) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r10 = syz_open_dev$mouse(&(0x7f00000009c0), 0x4, 0x400) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000a80)={r1}, 0x8) r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r12, &(0x7f0000000cc0), 0x6) r13 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r13, &(0x7f0000000cc0), 0x6) r14 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r14, &(0x7f0000000cc0), 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x6, &(0x7f0000000a00)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_val={0x18, 0xa, 0x2, 0x0, r10}, @jmp={0x5, 0x1, 0xb, 0xa, 0x3, 0xffffffffffffffc0, 0xfffffffffffffff0}], &(0x7f0000000a40)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, 0x25, r11, 0x8, &(0x7f0000000ac0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000b00)={0x4, 0xf, 0x200, 0x7fff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[r12, r13, r1, r14, 0xffffffffffffffff, r1]}, 0x80) ioctl$vim2m_VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:13 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, "823b2dd2"}, 0x0, 0x2, {0x0}}) getpid() 08:49:13 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5], 0x10004}}, 0xffffffe1}) 08:49:13 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) r2 = syz_open_dev$mouse(&(0x7f0000000200), 0x7fffffff, 0x24c842) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x13, 0x5688, 0x1, 0x8, 0x8, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x48) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xb, &(0x7f0000000040)=@raw=[@alu={0x7, 0x1, 0x2, 0x4, 0x7, 0x2, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x4a}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x5}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @map_idx, @map_idx={0x18, 0x8, 0x5, 0x0, 0x9}, @generic={0x97, 0x8, 0x0, 0xffff, 0x1f}], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x1c, &(0x7f0000000140)=""/28, 0x41000, 0x10, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x1, 0x1f, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r3, 0xffffffffffffffff, r4]}, 0x80) 08:49:13 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x8, 0x1, 0x2, "5e1c5a1d6898aea5509346433e2959df06ae0e56b9ed4d387c9dab0cfcce5fb6", 0x3447504d}) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000000)) 08:49:13 executing program 3: ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000000000)={0xf, 0x1}) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @sliced={0x9, [0xdde, 0x4, 0x6, 0x0, 0x2, 0x7ff, 0x0, 0x7, 0x8, 0x3f, 0x7, 0x5, 0xf4, 0xe38, 0x9ef, 0x3, 0xffff, 0x9, 0x7, 0x1, 0x4, 0x5, 0x2, 0x80, 0x1, 0x8, 0x40, 0xfff, 0x0, 0x3, 0xffff, 0x3, 0x3, 0x2, 0x0, 0x1, 0x2, 0x9, 0x80, 0x100, 0x9, 0x40, 0x7, 0xd75, 0x3, 0x8, 0x1, 0x1], 0x3}}}) 08:49:13 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, "823b2dd2"}, 0x0, 0x2, {0x0}}) getpid() syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, "823b2dd2"}, 0x0, 0x2, {0x0}}) (async) getpid() (async) 08:49:13 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xff, 0x9}, {0x3, 0x7}, {0x7ff, 0x2}, {0x0, 0xfffff649}, {0x1}, {0x10001, 0x7f}, {0x0, 0x1}, {0x0, 0xfffffffd}], 0x6, 0xff, 0x13, 0x2, 0x2}}) 08:49:13 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac], 0x10004}}, 0xffffffe1}) 08:49:13 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x8, 0x1, 0x2, "5e1c5a1d6898aea5509346433e2959df06ae0e56b9ed4d387c9dab0cfcce5fb6", 0x3447504d}) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000000)) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x8, 0x1, 0x2, "5e1c5a1d6898aea5509346433e2959df06ae0e56b9ed4d387c9dab0cfcce5fb6", 0x3447504d}) (async) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000000)) (async) 08:49:13 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) (async) r2 = syz_open_dev$mouse(&(0x7f0000000200), 0x7fffffff, 0x24c842) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x13, 0x5688, 0x1, 0x8, 0x8, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x48) (async) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xb, &(0x7f0000000040)=@raw=[@alu={0x7, 0x1, 0x2, 0x4, 0x7, 0x2, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x4a}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x5}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @map_idx, @map_idx={0x18, 0x8, 0x5, 0x0, 0x9}, @generic={0x97, 0x8, 0x0, 0xffff, 0x1f}], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x1c, &(0x7f0000000140)=""/28, 0x41000, 0x10, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x1, 0x1f, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r3, 0xffffffffffffffff, r4]}, 0x80) 08:49:13 executing program 3: ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000000000)={0xf, 0x1}) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @sliced={0x9, [0xdde, 0x4, 0x6, 0x0, 0x2, 0x7ff, 0x0, 0x7, 0x8, 0x3f, 0x7, 0x5, 0xf4, 0xe38, 0x9ef, 0x3, 0xffff, 0x9, 0x7, 0x1, 0x4, 0x5, 0x2, 0x80, 0x1, 0x8, 0x40, 0xfff, 0x0, 0x3, 0xffff, 0x3, 0x3, 0x2, 0x0, 0x1, 0x2, 0x9, 0x80, 0x100, 0x9, 0x40, 0x7, 0xd75, 0x3, 0x8, 0x1, 0x1], 0x3}}}) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000000000)={0xf, 0x1}) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @sliced={0x9, [0xdde, 0x4, 0x6, 0x0, 0x2, 0x7ff, 0x0, 0x7, 0x8, 0x3f, 0x7, 0x5, 0xf4, 0xe38, 0x9ef, 0x3, 0xffff, 0x9, 0x7, 0x1, 0x4, 0x5, 0x2, 0x80, 0x1, 0x8, 0x40, 0xfff, 0x0, 0x3, 0xffff, 0x3, 0x3, 0x2, 0x0, 0x1, 0x2, 0x9, 0x80, 0x100, 0x9, 0x40, 0x7, 0xd75, 0x3, 0x8, 0x1, 0x1], 0x3}}}) (async) 08:49:13 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac, 0xb5, 0x1, 0x81, 0x40, 0x8, 0x7ff, 0x3, 0x3800, 0x4, 0x4, 0x5, 0x1, 0x1ff, 0x5, 0x978, 0x5f, 0x48, 0x2, 0x584d, 0x3ff, 0x483, 0x100, 0x7ff, 0x200, 0x8fe6, 0x100, 0xffff, 0x80, 0x3ff], 0x10004}}, 0xffffffe1}) 08:49:13 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, "823b2dd2"}, 0x0, 0x2, {0x0}}) getpid() 08:49:13 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac], 0x10004}}, 0xffffffe1}) 08:49:13 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000240)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0xd2, 0x80, 0x5, 0x8000, 0x6df5, 0x9, "aef99f9dd7db5bfbebf7ca39cec9a64287d2e87784395719ca296b92616fbf5acd813434e213a73109be4d8cf17ab5764e380285de9e8b2854f42fc0b7f7d46b960adb1160942e229b6713d216f289bc8556187b600227833d712ca9ba212a3642450f16de57e9656e8791ea01f3267e6f80dc2a49a50ebf3c1d973eeb643cb85f925c0e3f603c29e7e4ac1a28a7f43ae6c6c376de06bc0951df644d35c2e72c3870e5f595f55ce52347281fd08a5c84286869af2156ea49dd349e484b07b7000c595b222bbef7629da4efe3942208baec6f"}}, 0x1ea) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000040)) syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffff9, 0x2) 08:49:13 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000200)={0x0, 0xdac6}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0)=ANY=[@ANYBLOB='\f\x00\x00'], 0x6) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000180)=@multiplanar_overlay={0x20, 0x3, 0x4, 0x20, 0x6, {0x0, 0xea60}, {0x1, 0x8, 0x8, 0xfd, 0x55, 0x0, "ed96c635"}, 0xffff8001, 0x3, {&(0x7f0000000100)=[{0x0, 0x8, {0x8001}, 0x6b97}, {0x1, 0x0, {0x2}, 0x8}]}, 0x5, 0x0, r2}) 08:49:13 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 08:49:13 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0xcfac], 0x10004}}, 0xffffffe1}) 08:49:13 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) (async) r2 = syz_open_dev$mouse(&(0x7f0000000200), 0x7fffffff, 0x24c842) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x13, 0x5688, 0x1, 0x8, 0x8, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x48) (async) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xb, &(0x7f0000000040)=@raw=[@alu={0x7, 0x1, 0x2, 0x4, 0x7, 0x2, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x4a}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x5}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @map_idx, @map_idx={0x18, 0x8, 0x5, 0x0, 0x9}, @generic={0x97, 0x8, 0x0, 0xffff, 0x1f}], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x1c, &(0x7f0000000140)=""/28, 0x41000, 0x10, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x1, 0x1f, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r3, 0xffffffffffffffff, r4]}, 0x80) 08:49:13 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r1, 0x4) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000000)) 08:49:13 executing program 3: ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000000000)={0xf, 0x1}) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @sliced={0x9, [0xdde, 0x4, 0x6, 0x0, 0x2, 0x7ff, 0x0, 0x7, 0x8, 0x3f, 0x7, 0x5, 0xf4, 0xe38, 0x9ef, 0x3, 0xffff, 0x9, 0x7, 0x1, 0x4, 0x5, 0x2, 0x80, 0x1, 0x8, 0x40, 0xfff, 0x0, 0x3, 0xffff, 0x3, 0x3, 0x2, 0x0, 0x1, 0x2, 0x9, 0x80, 0x100, 0x9, 0x40, 0x7, 0xd75, 0x3, 0x8, 0x1, 0x1], 0x3}}}) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000000000)={0xf, 0x1}) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @sliced={0x9, [0xdde, 0x4, 0x6, 0x0, 0x2, 0x7ff, 0x0, 0x7, 0x8, 0x3f, 0x7, 0x5, 0xf4, 0xe38, 0x9ef, 0x3, 0xffff, 0x9, 0x7, 0x1, 0x4, 0x5, 0x2, 0x80, 0x1, 0x8, 0x40, 0xfff, 0x0, 0x3, 0xffff, 0x3, 0x3, 0x2, 0x0, 0x1, 0x2, 0x9, 0x80, 0x100, 0x9, 0x40, 0x7, 0xd75, 0x3, 0x8, 0x1, 0x1], 0x3}}}) (async) 08:49:13 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000200)={0x0, 0xdac6}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0)=ANY=[@ANYBLOB='\f\x00\x00'], 0x6) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000180)=@multiplanar_overlay={0x20, 0x3, 0x4, 0x20, 0x6, {0x0, 0xea60}, {0x1, 0x8, 0x8, 0xfd, 0x55, 0x0, "ed96c635"}, 0xffff8001, 0x3, {&(0x7f0000000100)=[{0x0, 0x8, {0x8001}, 0x6b97}, {0x1, 0x0, {0x2}, 0x8}]}, 0x5, 0x0, r2}) 08:49:13 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x4, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000240)=0x1) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000100)={0x5, 0x6, 0x3, {0x1, @vbi={0x10001, 0x1, 0x3800000, 0x34325842, [0x5, 0x40], [0x4, 0x6], 0x1}}, 0x5d66}) syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) 08:49:13 executing program 3: syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x401, 0x7, 0x2, {0x2, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e871d72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc88834661300"}}) 08:49:13 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r1, 0x4) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000000)) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r1, 0x4) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000000)) (async) 08:49:13 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x264, 0x0, 0xb5], 0x10004}}, 0xffffffe1}) 08:49:13 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000200)={0x0, 0xdac6}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0)=ANY=[@ANYBLOB='\f\x00\x00'], 0x6) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000180)=@multiplanar_overlay={0x20, 0x3, 0x4, 0x20, 0x6, {0x0, 0xea60}, {0x1, 0x8, 0x8, 0xfd, 0x55, 0x0, "ed96c635"}, 0xffff8001, 0x3, {&(0x7f0000000100)=[{0x0, 0x8, {0x8001}, 0x6b97}, {0x1, 0x0, {0x2}, 0x8}]}, 0x5, 0x0, r2}) 08:49:13 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x8003, 0x0) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:13 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) (fail_nth: 1) 08:49:13 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0xde, 0x0, 0x0, 0xb5], 0x10004}}, 0xffffffe1}) 08:49:13 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r1, 0x4) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000000)) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r1, 0x4) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000000)) (async) 08:49:13 executing program 3: syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async, rerun: 32) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (rerun: 32) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x401, 0x7, 0x2, {0x2, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e871d72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc88834661300"}}) 08:49:13 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x8003, 0x0) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) (async) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:13 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)=@multiplanar_fd={0x1, 0x2, 0xfffffffffffffe6c, 0x4, 0x2, {}, {0x2, 0x1, 0x0, 0x8b, 0xd7, 0xa9, "1dac0e8e"}, 0x6, 0x4, {&(0x7f0000000100)=[{0xfffffff7, 0x7ffffffe, {}, 0x1}, {0x0, 0x800, {}, 0x8001}]}, 0x3}) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000200)=""/173, 0xad, 0x7f, 0x0, 0x0, 0x1, 0x7fffffff}}, 0x120) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}, 0xffffffff}) socket$packet(0x11, 0x2, 0x300) 08:49:14 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0xfffb, 0x0, 0x0, 0x0, 0xb5], 0x10004}}, 0xffffffe1}) [ 655.402183] FAULT_INJECTION: forcing a failure. [ 655.402183] name failslab, interval 1, probability 0, space 0, times 0 08:49:14 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x8003, 0x0) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:14 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0xb5], 0x10004}}, 0xffffffe1}) 08:49:14 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0xffff9c9e, 0x20, 0x4, {0x3, @pix={0x7, 0xffffff80, 0x31324d59, 0x6, 0x4, 0x6, 0xb, 0x85, 0x0, 0x0, 0x1, 0x1}}, 0xfffffff7}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) [ 655.449008] CPU: 0 PID: 28210 Comm: syz-executor.1 Not tainted 4.14.302-syzkaller #0 [ 655.456993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 655.466346] Call Trace: [ 655.468935] dump_stack+0x1b2/0x281 [ 655.472563] should_fail.cold+0x10a/0x149 [ 655.476711] should_failslab+0xd6/0x130 [ 655.480687] kmem_cache_alloc_node_trace+0x25a/0x400 [ 655.485793] __kmalloc_node+0x38/0x70 [ 655.489590] kvmalloc_node+0x46/0xd0 [ 655.493298] ? video_ioctl2+0x30/0x30 08:49:14 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5], 0x10004}}, 0xffffffe1}) 08:49:14 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0xffff9c9e, 0x20, 0x4, {0x3, @pix={0x7, 0xffffff80, 0x31324d59, 0x6, 0x4, 0x6, 0xb, 0x85, 0x0, 0x0, 0x1, 0x1}}, 0xfffffff7}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) [ 655.497095] video_usercopy+0x330/0xe70 [ 655.501072] ? v4l_g_ctrl+0x390/0x390 [ 655.504871] ? proc_fail_nth_write+0x7b/0x180 [ 655.509362] ? trace_hardirqs_on+0x10/0x10 [ 655.513612] ? fsnotify+0x974/0x11b0 [ 655.517316] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 655.522236] ? debug_check_no_obj_freed+0x2c0/0x680 [ 655.527251] v4l2_ioctl+0x1bb/0x2f0 [ 655.530871] ? v4l2_open+0x2f0/0x2f0 [ 655.534584] do_vfs_ioctl+0x75a/0xff0 [ 655.538383] ? lock_acquire+0x170/0x3f0 [ 655.542352] ? ioctl_preallocate+0x1a0/0x1a0 [ 655.546759] ? __fget+0x265/0x3e0 [ 655.550207] ? do_vfs_ioctl+0xff0/0xff0 [ 655.554181] ? security_file_ioctl+0x83/0xb0 [ 655.558599] SyS_ioctl+0x7f/0xb0 [ 655.561957] ? do_vfs_ioctl+0xff0/0xff0 [ 655.565929] do_syscall_64+0x1d5/0x640 [ 655.569914] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 655.575099] RIP: 0033:0x7fb0926330a9 [ 655.578801] RSP: 002b:00007fb090ba5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 655.586502] RAX: ffffffffffffffda RBX: 00007fb092752f80 RCX: 00007fb0926330a9 [ 655.593763] RDX: 0000000020000240 RSI: 00000000c0d05640 RDI: 0000000000000003 [ 655.601027] RBP: 00007fb090ba51d0 R08: 0000000000000000 R09: 0000000000000000 [ 655.608288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 655.615550] R13: 00007ffca4819fdf R14: 00007fb090ba5300 R15: 0000000000022000 08:49:14 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) (fail_nth: 2) 08:49:14 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5], 0x10004}}, 0xffffffe1}) 08:49:14 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0xffff9c9e, 0x20, 0x4, {0x3, @pix={0x7, 0xffffff80, 0x31324d59, 0x6, 0x4, 0x6, 0xb, 0x85, 0x0, 0x0, 0x1, 0x1}}, 0xfffffff7}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:14 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x6, 0x8, 0x4, {0x2, @sliced={0x0, [0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3ff, 0x4, 0x0, 0x7ff, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6]}}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)=@multiplanar_overlay={0x3, 0x0, 0x4, 0x4, 0x1f, {0x77359400}, {0x3, 0x2, 0x1f, 0x2, 0x1f, 0x40, "0b37e272"}, 0x7ded, 0x3, {&(0x7f0000000000)=[{0x5, 0x6, {0xec5}, 0xbc}, {0x66a9, 0x10000, {0xffff}, 0x9}]}, 0x2, 0x0, r1}) 08:49:14 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)=@multiplanar_fd={0x1, 0x2, 0xfffffffffffffe6c, 0x4, 0x2, {}, {0x2, 0x1, 0x0, 0x8b, 0xd7, 0xa9, "1dac0e8e"}, 0x6, 0x4, {&(0x7f0000000100)=[{0xfffffff7, 0x7ffffffe, {}, 0x1}, {0x0, 0x800, {}, 0x8001}]}, 0x3}) (async) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000200)=""/173, 0xad, 0x7f, 0x0, 0x0, 0x1, 0x7fffffff}}, 0x120) (async) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}, 0xffffffff}) socket$packet(0x11, 0x2, 0x300) 08:49:14 executing program 3: syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x401, 0x7, 0x2, {0x2, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e871d72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc88834661300"}}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x401, 0x7, 0x2, {0x2, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e871d72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc88834661300"}}) (async) 08:49:14 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5], 0x10004}}, 0xffffffe1}) 08:49:14 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x6, 0x8, 0x4, {0x2, @sliced={0x0, [0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3ff, 0x4, 0x0, 0x7ff, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6]}}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)=@multiplanar_overlay={0x3, 0x0, 0x4, 0x4, 0x1f, {0x77359400}, {0x3, 0x2, 0x1f, 0x2, 0x1f, 0x40, "0b37e272"}, 0x7ded, 0x3, {&(0x7f0000000000)=[{0x5, 0x6, {0xec5}, 0xbc}, {0x66a9, 0x10000, {0xffff}, 0x9}]}, 0x2, 0x0, r1}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x6, 0x8, 0x4, {0x2, @sliced={0x0, [0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3ff, 0x4, 0x0, 0x7ff, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6]}}}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)=@multiplanar_overlay={0x3, 0x0, 0x4, 0x4, 0x1f, {0x77359400}, {0x3, 0x2, 0x1f, 0x2, 0x1f, 0x40, "0b37e272"}, 0x7ded, 0x3, {&(0x7f0000000000)=[{0x5, 0x6, {0xec5}, 0xbc}, {0x66a9, 0x10000, {0xffff}, 0x9}]}, 0x2, 0x0, r1}) (async) 08:49:14 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x18ae99a5, 0x2) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000000)={'\x00', 0x80000000, 0x2, 0xfffffffe}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:14 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x1, 0x9, 0x2}}, 0xa) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000040)={0x0, 0x6}) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:14 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)=@multiplanar_fd={0x1, 0x2, 0xfffffffffffffe6c, 0x4, 0x2, {}, {0x2, 0x1, 0x0, 0x8b, 0xd7, 0xa9, "1dac0e8e"}, 0x6, 0x4, {&(0x7f0000000100)=[{0xfffffff7, 0x7ffffffe, {}, 0x1}, {0x0, 0x800, {}, 0x8001}]}, 0x3}) (async) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000200)=""/173, 0xad, 0x7f, 0x0, 0x0, 0x1, 0x7fffffff}}, 0x120) (async) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}, 0xffffffff}) socket$packet(0x11, 0x2, 0x300) 08:49:14 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x20000000, 0x9}]}}) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0x1, @sliced={0x4000, [0xfffc, 0x4, 0x4, 0x2, 0x40, 0x2, 0x1, 0xacd9, 0x7f, 0x895, 0x8, 0x7, 0x771, 0xc000, 0x1, 0x80, 0x7f, 0x5, 0x4, 0x5961, 0x7fff, 0xfff6, 0x8001, 0x5, 0x7fff, 0x2, 0x6, 0xffc0, 0x9, 0x4, 0x518, 0x7fff, 0xbc, 0x1000, 0x4, 0x1, 0xa74e, 0x6, 0x100, 0x5, 0x5728, 0x6, 0x8000, 0x7fff, 0x7, 0x70a, 0x6, 0x5c], 0x8}}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x840, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) r3 = getpid() write$P9_RGETLOCK(r2, &(0x7f0000000200)={0x1f, 0x37, 0x1, {0x1, 0x8, 0x4, r3, 0x1, '\x00'}}, 0x1f) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f00000001c0)={0x283}) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000140)={r4, 0x1}) 08:49:14 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0xedd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5], 0x10004}}, 0xffffffe1}) 08:49:14 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0xfffffffe, {}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) 08:49:14 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x18ae99a5, 0x2) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000000)={'\x00', 0x80000000, 0x2, 0xfffffffe}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:14 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x1, 0x9, 0x2}}, 0xa) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000040)={0x0, 0x6}) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) (async) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x1, 0x9, 0x2}}, 0xa) (async) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000040)={0x0, 0x6}) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async) 08:49:14 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x20000000, 0x9}]}}) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0x1, @sliced={0x4000, [0xfffc, 0x4, 0x4, 0x2, 0x40, 0x2, 0x1, 0xacd9, 0x7f, 0x895, 0x8, 0x7, 0x771, 0xc000, 0x1, 0x80, 0x7f, 0x5, 0x4, 0x5961, 0x7fff, 0xfff6, 0x8001, 0x5, 0x7fff, 0x2, 0x6, 0xffc0, 0x9, 0x4, 0x518, 0x7fff, 0xbc, 0x1000, 0x4, 0x1, 0xa74e, 0x6, 0x100, 0x5, 0x5728, 0x6, 0x8000, 0x7fff, 0x7, 0x70a, 0x6, 0x5c], 0x8}}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x840, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) r3 = getpid() write$P9_RGETLOCK(r2, &(0x7f0000000200)={0x1f, 0x37, 0x1, {0x1, 0x8, 0x4, r3, 0x1, '\x00'}}, 0x1f) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f00000001c0)={0x283}) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000140)={r4, 0x1}) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x20000000, 0x9}]}}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0x1, @sliced={0x4000, [0xfffc, 0x4, 0x4, 0x2, 0x40, 0x2, 0x1, 0xacd9, 0x7f, 0x895, 0x8, 0x7, 0x771, 0xc000, 0x1, 0x80, 0x7f, 0x5, 0x4, 0x5961, 0x7fff, 0xfff6, 0x8001, 0x5, 0x7fff, 0x2, 0x6, 0xffc0, 0x9, 0x4, 0x518, 0x7fff, 0xbc, 0x1000, 0x4, 0x1, 0xa74e, 0x6, 0x100, 0x5, 0x5728, 0x6, 0x8000, 0x7fff, 0x7, 0x70a, 0x6, 0x5c], 0x8}}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x840, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async) getpid() (async) write$P9_RGETLOCK(r2, &(0x7f0000000200)={0x1f, 0x37, 0x1, {0x1, 0x8, 0x4, r3, 0x1, '\x00'}}, 0x1f) (async) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f00000001c0)={0x283}) (async) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) (async) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000140)={r4, 0x1}) (async) 08:49:14 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x6, 0x8, 0x4, {0x2, @sliced={0x0, [0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3ff, 0x4, 0x0, 0x7ff, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6]}}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)=@multiplanar_overlay={0x3, 0x0, 0x4, 0x4, 0x1f, {0x77359400}, {0x3, 0x2, 0x1f, 0x2, 0x1f, 0x40, "0b37e272"}, 0x7ded, 0x3, {&(0x7f0000000000)=[{0x5, 0x6, {0xec5}, 0xbc}, {0x66a9, 0x10000, {0xffff}, 0x9}]}, 0x2, 0x0, r1}) 08:49:14 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5], 0x10004}}, 0xffffffe1}) 08:49:14 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0xfffffffe, {}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) 08:49:14 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x18ae99a5, 0x2) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000000)={'\x00', 0x80000000, 0x2, 0xfffffffe}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:14 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x1, 0x9, 0x2}}, 0xa) (async) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000040)={0x0, 0x6}) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:14 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xd4}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0xa}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9657, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x80]}}}) 08:49:14 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5], 0x10004}}, 0xffffffe1}) 08:49:14 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x20000000, 0x9}]}}) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0x1, @sliced={0x4000, [0xfffc, 0x4, 0x4, 0x2, 0x40, 0x2, 0x1, 0xacd9, 0x7f, 0x895, 0x8, 0x7, 0x771, 0xc000, 0x1, 0x80, 0x7f, 0x5, 0x4, 0x5961, 0x7fff, 0xfff6, 0x8001, 0x5, 0x7fff, 0x2, 0x6, 0xffc0, 0x9, 0x4, 0x518, 0x7fff, 0xbc, 0x1000, 0x4, 0x1, 0xa74e, 0x6, 0x100, 0x5, 0x5728, 0x6, 0x8000, 0x7fff, 0x7, 0x70a, 0x6, 0x5c], 0x8}}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x840, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async) r3 = getpid() write$P9_RGETLOCK(r2, &(0x7f0000000200)={0x1f, 0x37, 0x1, {0x1, 0x8, 0x4, r3, 0x1, '\x00'}}, 0x1f) (async) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f00000001c0)={0x283}) (async) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000140)={r4, 0x1}) 08:49:14 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0xfffffffe, {}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) 08:49:14 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x842, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000002c0)=@multiplanar_mmap={0x5, 0x1, 0x4, 0x70000, 0xa4, {r2, r3/1000+10000}, {0x3, 0x2, 0xaf, 0x0, 0x4, 0x62, "7c9cf049"}, 0x6, 0x1, {&(0x7f0000000240)=[{0x9, 0x210373da, {0x8000000000000000}, 0x6}, {0xf49, 0x1, {0x8}, 0x4}]}, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:14 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xd4}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0xa}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9657, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x80]}}}) 08:49:14 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}, 0xffffffe1}) 08:49:14 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000080000000"], 0x6) clock_gettime(0x0, &(0x7f0000000040)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)=@userptr={0x5, 0x3, 0x4, 0xe000, 0x5, {r3, r4/1000+60000}, {0x4, 0x0, 0x20, 0x7, 0x3, 0x2, "fbd6fde2"}, 0x2, 0x2, {&(0x7f00000001c0)}, 0x5a1}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:14 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x6) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x101, 0x7}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) 08:49:14 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @sliced={0x6, [0x0, 0x89a3, 0x0, 0x3, 0x5, 0x2, 0x6dc, 0x3d, 0xc9d6, 0x4, 0x8000, 0xfffc, 0x8, 0x5, 0x1, 0x6, 0x1, 0xe3, 0x3ff, 0x200, 0x200, 0xbf, 0x81, 0xfff7, 0x6, 0x3f, 0x1, 0x0, 0x3, 0x5, 0x1ff, 0x34, 0x7fff, 0x2, 0x5, 0x70, 0x1, 0x4, 0x6979, 0x4, 0x1, 0xffc0, 0xc27, 0x81, 0x6, 0x1, 0x2, 0x4], 0x9}}) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000340)={0x1}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x4e0940, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000040)) 08:49:14 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x842, 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000002c0)=@multiplanar_mmap={0x5, 0x1, 0x4, 0x70000, 0xa4, {r2, r3/1000+10000}, {0x3, 0x2, 0xaf, 0x0, 0x4, 0x62, "7c9cf049"}, 0x6, 0x1, {&(0x7f0000000240)=[{0x9, 0x210373da, {0x8000000000000000}, 0x6}, {0xf49, 0x1, {0x8}, 0x4}]}, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:14 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000080000000"], 0x6) clock_gettime(0x0, &(0x7f0000000040)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)=@userptr={0x5, 0x3, 0x4, 0xe000, 0x5, {r3, r4/1000+60000}, {0x4, 0x0, 0x20, 0x7, 0x3, 0x2, "fbd6fde2"}, 0x2, 0x2, {&(0x7f00000001c0)}, 0x5a1}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000080000000"], 0x6) (async) clock_gettime(0x0, &(0x7f0000000040)) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async) clock_gettime(0x0, &(0x7f0000000180)) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)=@userptr={0x5, 0x3, 0x4, 0xe000, 0x5, {r3, r4/1000+60000}, {0x4, 0x0, 0x20, 0x7, 0x3, 0x2, "fbd6fde2"}, 0x2, 0x2, {&(0x7f00000001c0)}, 0x5a1}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async) 08:49:14 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async, rerun: 64) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (rerun: 64) write$UHID_INPUT2(r1, &(0x7f0000000cc0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x6) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x101, 0x7}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) 08:49:14 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:14 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xd4}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0xa}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9657, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x80]}}}) 08:49:14 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @sliced={0x6, [0x0, 0x89a3, 0x0, 0x3, 0x5, 0x2, 0x6dc, 0x3d, 0xc9d6, 0x4, 0x8000, 0xfffc, 0x8, 0x5, 0x1, 0x6, 0x1, 0xe3, 0x3ff, 0x200, 0x200, 0xbf, 0x81, 0xfff7, 0x6, 0x3f, 0x1, 0x0, 0x3, 0x5, 0x1ff, 0x34, 0x7fff, 0x2, 0x5, 0x70, 0x1, 0x4, 0x6979, 0x4, 0x1, 0xffc0, 0xc27, 0x81, 0x6, 0x1, 0x2, 0x4], 0x9}}) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000340)={0x1}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x4e0940, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000040)) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @sliced={0x6, [0x0, 0x89a3, 0x0, 0x3, 0x5, 0x2, 0x6dc, 0x3d, 0xc9d6, 0x4, 0x8000, 0xfffc, 0x8, 0x5, 0x1, 0x6, 0x1, 0xe3, 0x3ff, 0x200, 0x200, 0xbf, 0x81, 0xfff7, 0x6, 0x3f, 0x1, 0x0, 0x3, 0x5, 0x1ff, 0x34, 0x7fff, 0x2, 0x5, 0x70, 0x1, 0x4, 0x6979, 0x4, 0x1, 0xffc0, 0xc27, 0x81, 0x6, 0x1, 0x2, 0x4], 0x9}}) (async) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000340)={0x1}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x4e0940, 0x0) (async) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000040)) (async) 08:49:14 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x842, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000002c0)=@multiplanar_mmap={0x5, 0x1, 0x4, 0x70000, 0xa4, {r2, r3/1000+10000}, {0x3, 0x2, 0xaf, 0x0, 0x4, 0x62, "7c9cf049"}, 0x6, 0x1, {&(0x7f0000000240)=[{0x9, 0x210373da, {0x8000000000000000}, 0x6}, {0xf49, 0x1, {0x8}, 0x4}]}, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x842, 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000002c0)=@multiplanar_mmap={0x5, 0x1, 0x4, 0x70000, 0xa4, {r2, r3/1000+10000}, {0x3, 0x2, 0xaf, 0x0, 0x4, 0x62, "7c9cf049"}, 0x6, 0x1, {&(0x7f0000000240)=[{0x9, 0x210373da, {0x8000000000000000}, 0x6}, {0xf49, 0x1, {0x8}, 0x4}]}, 0x4}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) 08:49:14 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000080000000"], 0x6) clock_gettime(0x0, &(0x7f0000000040)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)=@userptr={0x5, 0x3, 0x4, 0xe000, 0x5, {r3, r4/1000+60000}, {0x4, 0x0, 0x20, 0x7, 0x3, 0x2, "fbd6fde2"}, 0x2, 0x2, {&(0x7f00000001c0)}, 0x5a1}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000080000000"], 0x6) (async) clock_gettime(0x0, &(0x7f0000000040)) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async) clock_gettime(0x0, &(0x7f0000000180)) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)=@userptr={0x5, 0x3, 0x4, 0xe000, 0x5, {r3, r4/1000+60000}, {0x4, 0x0, 0x20, 0x7, 0x3, 0x2, "fbd6fde2"}, 0x2, 0x2, {&(0x7f00000001c0)}, 0x5a1}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async) 08:49:14 executing program 0: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x20000000, 0x9}]}}) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0x1, @sliced={0x4000, [0xfffc, 0x4, 0x4, 0x2, 0x40, 0x2, 0x1, 0xacd9, 0x7f, 0x895, 0x8, 0x7, 0x771, 0xc000, 0x1, 0x80, 0x7f, 0x5, 0x4, 0x5961, 0x7fff, 0xfff6, 0x8001, 0x5, 0x7fff, 0x2, 0x6, 0xffc0, 0x9, 0x4, 0x518, 0x7fff, 0xbc, 0x1000, 0x4, 0x1, 0xa74e, 0x6, 0x100, 0x5, 0x5728, 0x6, 0x8000, 0x7fff, 0x7, 0x70a, 0x6, 0x5c], 0x8}}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x840, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) r3 = getpid() write$P9_RGETLOCK(r2, &(0x7f0000000200)={0x1f, 0x37, 0x1, {0x1, 0x8, 0x4, r3, 0x1, '\x00'}}, 0x1f) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f00000001c0)={0x283}) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000140)={r4, 0x1}) 08:49:14 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000000)) 08:49:14 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x6) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x101, 0x7}) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) 08:49:14 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0x0, @sdr={0x31324d4e, 0x1}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="af46b59f1253aaf0b37214f3693bd3a316cbcf183de5a2dfa995f6ceb42de261539d7e750996f2546713391addaf8cc8000000000000"], 0x6) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0)=ANY=[@ANYBLOB="060000007200"], 0x6) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000340)=@userptr={0x0, 0x1, 0x4, 0xe000, 0x6e, {}, {0x1, 0x1, 0x48, 0x8, 0x81, 0x1, "6799c9bf"}, 0x1000, 0x2, {&(0x7f0000000080)}, 0x8, 0x0, r2}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x5880) openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$P9_RRENAME(r3, &(0x7f0000000040)={0x7, 0x15, 0x2}, 0x7) 08:49:14 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000100)=0x3) 08:49:14 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @sliced={0x6, [0x0, 0x89a3, 0x0, 0x3, 0x5, 0x2, 0x6dc, 0x3d, 0xc9d6, 0x4, 0x8000, 0xfffc, 0x8, 0x5, 0x1, 0x6, 0x1, 0xe3, 0x3ff, 0x200, 0x200, 0xbf, 0x81, 0xfff7, 0x6, 0x3f, 0x1, 0x0, 0x3, 0x5, 0x1ff, 0x34, 0x7fff, 0x2, 0x5, 0x70, 0x1, 0x4, 0x6979, 0x4, 0x1, 0xffc0, 0xc27, 0x81, 0x6, 0x1, 0x2, 0x4], 0x9}}) (async, rerun: 32) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000340)={0x1}) (async, rerun: 32) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x4e0940, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000040)) 08:49:14 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000000)) 08:49:14 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (fail_nth: 1) 08:49:14 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0x0, @sdr={0x31324d4e, 0x1}}) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="af46b59f1253aaf0b37214f3693bd3a316cbcf183de5a2dfa995f6ceb42de261539d7e750996f2546713391addaf8cc8000000000000"], 0x6) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0)=ANY=[@ANYBLOB="060000007200"], 0x6) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000340)=@userptr={0x0, 0x1, 0x4, 0xe000, 0x6e, {}, {0x1, 0x1, 0x48, 0x8, 0x81, 0x1, "6799c9bf"}, 0x1000, 0x2, {&(0x7f0000000080)}, 0x8, 0x0, r2}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x5880) openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) (async) write$P9_RRENAME(r3, &(0x7f0000000040)={0x7, 0x15, 0x2}, 0x7) 08:49:14 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)=@overlay={0x8001, 0x2, 0x4, 0x40, 0x7, {0x0, 0x2710}, {0x2, 0x0, 0x1f, 0x1, 0x20, 0x80, "3781ce10"}, 0x81, 0x3, {}, 0xffffffff}) 08:49:14 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000100)=0x3) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000100)=0x3) (async) 08:49:14 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}], 0x0, 0x0, 0x0, 0x3}}) 08:49:15 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}], 0x0, 0x0, 0x0, 0x3}}) [ 656.420432] FAULT_INJECTION: forcing a failure. [ 656.420432] name failslab, interval 1, probability 0, space 0, times 0 08:49:15 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0x0, @sdr={0x31324d4e, 0x1}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="af46b59f1253aaf0b37214f3693bd3a316cbcf183de5a2dfa995f6ceb42de261539d7e750996f2546713391addaf8cc8000000000000"], 0x6) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0)=ANY=[@ANYBLOB="060000007200"], 0x6) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000340)=@userptr={0x0, 0x1, 0x4, 0xe000, 0x6e, {}, {0x1, 0x1, 0x48, 0x8, 0x81, 0x1, "6799c9bf"}, 0x1000, 0x2, {&(0x7f0000000080)}, 0x8, 0x0, r2}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x5880) openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$P9_RRENAME(r3, &(0x7f0000000040)={0x7, 0x15, 0x2}, 0x7) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0x0, @sdr={0x31324d4e, 0x1}}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="af46b59f1253aaf0b37214f3693bd3a316cbcf183de5a2dfa995f6ceb42de261539d7e750996f2546713391addaf8cc8000000000000"], 0x6) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r2, &(0x7f0000000cc0)=ANY=[@ANYBLOB="060000007200"], 0x6) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000340)=@userptr={0x0, 0x1, 0x4, 0xe000, 0x6e, {}, {0x1, 0x1, 0x48, 0x8, 0x81, 0x1, "6799c9bf"}, 0x1000, 0x2, {&(0x7f0000000080)}, 0x8, 0x0, r2}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) pipe2$9p(&(0x7f0000000000), 0x5880) (async) openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) (async) write$P9_RRENAME(r3, &(0x7f0000000040)={0x7, 0x15, 0x2}, 0x7) (async) 08:49:15 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}], 0x0, 0x0, 0x0, 0x3}}) [ 656.461732] CPU: 1 PID: 28410 Comm: syz-executor.0 Not tainted 4.14.302-syzkaller #0 [ 656.469627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 656.478971] Call Trace: [ 656.481558] dump_stack+0x1b2/0x281 [ 656.485191] should_fail.cold+0x10a/0x149 [ 656.489341] should_failslab+0xd6/0x130 [ 656.493316] kmem_cache_alloc_node_trace+0x25a/0x400 [ 656.498421] __kmalloc_node+0x38/0x70 [ 656.502221] kvmalloc_node+0x46/0xd0 [ 656.505938] ? video_ioctl2+0x30/0x30 08:49:15 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x8000000000000000, 0x10042) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000040)=0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x1, 0x3, 0x1, "4204d7ede8aa716459846c7999ed637b6d4c79290b47d35461c350a683436ede", 0x44495658}) 08:49:15 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x188, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffa}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffa2eb}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xac}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffe01}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffff2ea}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x846}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x35cf1ec4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x20044000}, 0x20000800) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0xfffffffe, 0x3, 0x4, {0x1, @sliced={0x0, [0xd7eb, 0x5, 0x8, 0x7ff, 0x9, 0x2, 0x9, 0x9, 0x6, 0x200, 0x4, 0x2000, 0x1000, 0x4, 0x5, 0x7, 0x0, 0x3, 0x0, 0x8, 0x3ff, 0x200, 0x248, 0x80, 0x64, 0x2, 0x4, 0x5, 0x5, 0x2, 0x1, 0xc547, 0x8, 0x1000, 0x6, 0x1000, 0x4, 0x7, 0x80, 0xfff, 0x4, 0xe2, 0x3, 0x0, 0x6, 0x9, 0xec6, 0x4], 0x5}}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x1, 0x3, 0x2, 0x0, 0x2}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x8}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x5}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8880}, 0x11) [ 656.509734] video_usercopy+0x330/0xe70 [ 656.513715] ? v4l_g_ctrl+0x390/0x390 [ 656.517518] ? proc_fail_nth_write+0x7b/0x180 [ 656.522011] ? trace_hardirqs_on+0x10/0x10 [ 656.526242] ? fsnotify+0x974/0x11b0 [ 656.529950] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 656.534873] ? __handle_mm_fault+0x80f/0x4620 [ 656.539368] v4l2_ioctl+0x1bb/0x2f0 [ 656.542990] ? v4l2_open+0x2f0/0x2f0 [ 656.546700] do_vfs_ioctl+0x75a/0xff0 [ 656.550497] ? lock_acquire+0x170/0x3f0 [ 656.554465] ? ioctl_preallocate+0x1a0/0x1a0 [ 656.558871] ? __fget+0x265/0x3e0 [ 656.562322] ? do_vfs_ioctl+0xff0/0xff0 [ 656.566288] ? security_file_ioctl+0x83/0xb0 [ 656.570693] SyS_ioctl+0x7f/0xb0 [ 656.574053] ? do_vfs_ioctl+0xff0/0xff0 [ 656.578021] do_syscall_64+0x1d5/0x640 [ 656.581912] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 656.587089] RIP: 0033:0x7fee631b80a9 [ 656.590795] RSP: 002b:00007fee6172a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 656.598496] RAX: ffffffffffffffda RBX: 00007fee632d7f80 RCX: 00007fee631b80a9 08:49:15 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x8000000000000000, 0x10042) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000040)=0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x1, 0x3, 0x1, "4204d7ede8aa716459846c7999ed637b6d4c79290b47d35461c350a683436ede", 0x44495658}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) (async) syz_open_dev$mouse(&(0x7f0000000000), 0x8000000000000000, 0x10042) (async) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000040)=0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x1, 0x3, 0x1, "4204d7ede8aa716459846c7999ed637b6d4c79290b47d35461c350a683436ede", 0x44495658}) (async) 08:49:15 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000000)) [ 656.605759] RDX: 0000000020000300 RSI: 00000000c100565c RDI: 0000000000000003 [ 656.613019] RBP: 00007fee6172a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 656.620279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.627544] R13: 00007ffcc2b6f91f R14: 00007fee6172a300 R15: 0000000000022000 08:49:15 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (fail_nth: 2) 08:49:15 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x188, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffa}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffa2eb}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xac}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffe01}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffff2ea}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x846}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x35cf1ec4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x20044000}, 0x20000800) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0xfffffffe, 0x3, 0x4, {0x1, @sliced={0x0, [0xd7eb, 0x5, 0x8, 0x7ff, 0x9, 0x2, 0x9, 0x9, 0x6, 0x200, 0x4, 0x2000, 0x1000, 0x4, 0x5, 0x7, 0x0, 0x3, 0x0, 0x8, 0x3ff, 0x200, 0x248, 0x80, 0x64, 0x2, 0x4, 0x5, 0x5, 0x2, 0x1, 0xc547, 0x8, 0x1000, 0x6, 0x1000, 0x4, 0x7, 0x80, 0xfff, 0x4, 0xe2, 0x3, 0x0, 0x6, 0x9, 0xec6, 0x4], 0x5}}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x1, 0x3, 0x2, 0x0, 0x2}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x8}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x5}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8880}, 0x11) 08:49:15 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) (async) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x8000000000000000, 0x10042) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000040)=0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x1, 0x3, 0x1, "4204d7ede8aa716459846c7999ed637b6d4c79290b47d35461c350a683436ede", 0x44495658}) 08:49:15 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async, rerun: 32) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000100)=0x3) (rerun: 32) 08:49:15 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)=@overlay={0x8001, 0x2, 0x4, 0x40, 0x7, {0x0, 0x2710}, {0x2, 0x0, 0x1f, 0x1, 0x20, 0x80, "3781ce10"}, 0x81, 0x3, {}, 0xffffffff}) 08:49:15 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async, rerun: 64) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (rerun: 64) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x188, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffa}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffa2eb}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xac}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffe01}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffff2ea}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x846}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x35cf1ec4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x20044000}, 0x20000800) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0xfffffffe, 0x3, 0x4, {0x1, @sliced={0x0, [0xd7eb, 0x5, 0x8, 0x7ff, 0x9, 0x2, 0x9, 0x9, 0x6, 0x200, 0x4, 0x2000, 0x1000, 0x4, 0x5, 0x7, 0x0, 0x3, 0x0, 0x8, 0x3ff, 0x200, 0x248, 0x80, 0x64, 0x2, 0x4, 0x5, 0x5, 0x2, 0x1, 0xc547, 0x8, 0x1000, 0x6, 0x1000, 0x4, 0x7, 0x80, 0xfff, 0x4, 0xe2, 0x3, 0x0, 0x6, 0x9, 0xec6, 0x4], 0x5}}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x1, 0x3, 0x2, 0x0, 0x2}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x8}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x5}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8880}, 0x11) [ 656.743688] FAULT_INJECTION: forcing a failure. [ 656.743688] name failslab, interval 1, probability 0, space 0, times 0 [ 656.781284] CPU: 0 PID: 28471 Comm: syz-executor.0 Not tainted 4.14.302-syzkaller #0 [ 656.789179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 656.798528] Call Trace: [ 656.801114] dump_stack+0x1b2/0x281 [ 656.804747] should_fail.cold+0x10a/0x149 [ 656.808891] should_failslab+0xd6/0x130 [ 656.812866] __kmalloc+0x2c1/0x400 [ 656.816406] ? __vb2_queue_alloc+0xf4/0xd90 [ 656.820728] __vb2_queue_alloc+0xf4/0xd90 [ 656.824869] ? __kernel_text_address+0x9/0x30 [ 656.829361] ? unwind_get_return_address+0x51/0x90 [ 656.834290] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 656.839649] ? __save_stack_trace+0xa0/0x160 08:49:15 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}, {}, {}, {0x94}]}}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000100)=0x3) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000040)) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000080)) [ 656.844055] ? vim2m_queue_setup+0x221/0x330 [ 656.848466] vb2_core_create_bufs+0x279/0x5a0 [ 656.852953] ? __vb2_queue_free+0x7a0/0x7a0 [ 656.857272] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 656.862627] ? trace_hardirqs_on+0x10/0x10 [ 656.866843] vb2_create_bufs+0x2e1/0x5b0 [ 656.870882] ? vb2_thread_start+0x310/0x310 [ 656.875180] v4l_create_bufs+0xa4/0x150 [ 656.879133] __video_do_ioctl+0x65b/0x6a0 [ 656.883257] ? video_ioctl2+0x30/0x30 [ 656.887032] ? __might_fault+0x177/0x1b0 [ 656.891071] ? video_ioctl2+0x30/0x30 [ 656.894845] video_usercopy+0xfd/0xe70 [ 656.898709] ? v4l_g_ctrl+0x390/0x390 [ 656.902486] ? proc_fail_nth_write+0x7b/0x180 [ 656.906966] ? trace_hardirqs_on+0x10/0x10 [ 656.911199] ? fsnotify+0x974/0x11b0 [ 656.915068] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 656.919971] ? __handle_mm_fault+0x80f/0x4620 [ 656.924444] v4l2_ioctl+0x1bb/0x2f0 [ 656.928045] ? v4l2_open+0x2f0/0x2f0 [ 656.931734] do_vfs_ioctl+0x75a/0xff0 [ 656.935511] ? lock_acquire+0x170/0x3f0 [ 656.939459] ? ioctl_preallocate+0x1a0/0x1a0 [ 656.943854] ? __fget+0x265/0x3e0 [ 656.947297] ? do_vfs_ioctl+0xff0/0xff0 [ 656.951257] ? security_file_ioctl+0x83/0xb0 [ 656.955822] SyS_ioctl+0x7f/0xb0 [ 656.959163] ? do_vfs_ioctl+0xff0/0xff0 [ 656.963124] do_syscall_64+0x1d5/0x640 [ 656.966998] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 656.972174] RIP: 0033:0x7fee631b80a9 [ 656.975860] RSP: 002b:00007fee6172a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 656.983539] RAX: ffffffffffffffda RBX: 00007fee632d7f80 RCX: 00007fee631b80a9 08:49:15 executing program 3: syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80, 0x2) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) write$P9_RSYMLINK(r1, &(0x7f0000000080)={0x14, 0x11, 0x1, {0x2, 0x1, 0x8}}, 0x14) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000005c0)={0x2, @pix={0x4, 0xffffffc7, 0x41415270, 0x9, 0xb9, 0x9, 0xc, 0x101, 0x1, 0x2, 0x0, 0x5}}) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000100)={0x16}) 08:49:15 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x10004, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0xffff, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcad]}}}) 08:49:15 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:15 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (fail_nth: 3) [ 656.990781] RDX: 0000000020000300 RSI: 00000000c100565c RDI: 0000000000000003 [ 656.998024] RBP: 00007fee6172a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 657.005268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.012512] R13: 00007ffcc2b6f91f R14: 00007fee6172a300 R15: 0000000000022000 08:49:15 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}, {}, {}, {0x94}]}}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000100)=0x3) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000040)) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000080)) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}, {}, {}, {0x94}]}}) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000100)=0x3) (async) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000040)) (async) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000080)) (async) 08:49:15 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)=@overlay={0x8001, 0x2, 0x4, 0x40, 0x7, {0x0, 0x2710}, {0x2, 0x0, 0x1f, 0x1, 0x20, 0x80, "3781ce10"}, 0x81, 0x3, {}, 0xffffffff}) 08:49:15 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x10004, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0xffff, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcad]}}}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x10004, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0xffff, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcad]}}}) (async) 08:49:15 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:15 executing program 3: syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80, 0x2) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) write$P9_RSYMLINK(r1, &(0x7f0000000080)={0x14, 0x11, 0x1, {0x2, 0x1, 0x8}}, 0x14) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000005c0)={0x2, @pix={0x4, 0xffffffc7, 0x41415270, 0x9, 0xb9, 0x9, 0xc, 0x101, 0x1, 0x2, 0x0, 0x5}}) (async) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000100)={0x16}) [ 657.120879] FAULT_INJECTION: forcing a failure. [ 657.120879] name failslab, interval 1, probability 0, space 0, times 0 [ 657.165651] CPU: 0 PID: 28502 Comm: syz-executor.0 Not tainted 4.14.302-syzkaller #0 [ 657.173551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 657.182987] Call Trace: [ 657.185575] dump_stack+0x1b2/0x281 [ 657.189205] should_fail.cold+0x10a/0x149 [ 657.193371] should_failslab+0xd6/0x130 [ 657.197342] __kmalloc+0x2c1/0x400 [ 657.200883] ? __vb2_queue_alloc+0xf4/0xd90 [ 657.205221] __vb2_queue_alloc+0xf4/0xd90 [ 657.209377] ? unwind_get_return_address+0x51/0x90 08:49:15 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}, {}, {}, {0x94}]}}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000100)=0x3) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000040)) (async) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000080)) [ 657.214302] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 657.219662] ? __save_stack_trace+0xa0/0x160 [ 657.224072] ? vim2m_queue_setup+0x221/0x330 [ 657.228481] vb2_core_create_bufs+0x279/0x5a0 [ 657.232977] ? __vb2_queue_free+0x7a0/0x7a0 [ 657.238308] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 657.243672] ? trace_hardirqs_on+0x10/0x10 [ 657.247910] vb2_create_bufs+0x2e1/0x5b0 [ 657.251970] ? vb2_thread_start+0x310/0x310 [ 657.256299] v4l_create_bufs+0xa4/0x150 [ 657.260273] __video_do_ioctl+0x65b/0x6a0 [ 657.264423] ? video_ioctl2+0x30/0x30 [ 657.268215] ? __might_fault+0x177/0x1b0 [ 657.272272] ? video_ioctl2+0x30/0x30 [ 657.276065] video_usercopy+0xfd/0xe70 [ 657.279950] ? v4l_g_ctrl+0x390/0x390 [ 657.283748] ? proc_fail_nth_write+0x7b/0x180 [ 657.288238] ? trace_hardirqs_on+0x10/0x10 [ 657.292472] ? fsnotify+0x974/0x11b0 [ 657.296182] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 657.301103] ? __handle_mm_fault+0x80f/0x4620 [ 657.305597] v4l2_ioctl+0x1bb/0x2f0 [ 657.309237] ? v4l2_open+0x2f0/0x2f0 08:49:15 executing program 3: syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80, 0x2) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) write$P9_RSYMLINK(r1, &(0x7f0000000080)={0x14, 0x11, 0x1, {0x2, 0x1, 0x8}}, 0x14) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000005c0)={0x2, @pix={0x4, 0xffffffc7, 0x41415270, 0x9, 0xb9, 0x9, 0xc, 0x101, 0x1, 0x2, 0x0, 0x5}}) (async) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000100)={0x16}) [ 657.312946] do_vfs_ioctl+0x75a/0xff0 [ 657.316746] ? lock_acquire+0x170/0x3f0 [ 657.320713] ? ioctl_preallocate+0x1a0/0x1a0 [ 657.325117] ? __fget+0x265/0x3e0 [ 657.328563] ? do_vfs_ioctl+0xff0/0xff0 [ 657.332533] ? security_file_ioctl+0x83/0xb0 [ 657.336933] SyS_ioctl+0x7f/0xb0 [ 657.340302] ? do_vfs_ioctl+0xff0/0xff0 [ 657.344275] do_syscall_64+0x1d5/0x640 [ 657.348159] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 657.353337] RIP: 0033:0x7fee631b80a9 [ 657.357036] RSP: 002b:00007fee6172a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 08:49:15 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0x0, @raw_data="8b5340f93d519649c4d7481aba5319f9c088be878e664dbe39976aef9d8f28468a727fb7296e274e5f28c09bb292dc92bc4a556f0f5da3c80339df21fefd4e343fcab73e50a0c3ba88b20c0fb4b66fa479d01538d3cd195e6575639382b48cf24382c99c8512adf31e9d5aa80ef7278e9103c0dd7f33e6287db5940ef5ae2828ed7ac268b3e5828a695de7c36d613da9c2c39d1bcfc00826ec83b02fcbcc8eee979b327fc315eb442e92870685f8f93bfb4e649f5fc39190c90d67a7faa4186abcbb0d50f51d3916"}) 08:49:15 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) [ 657.364736] RAX: ffffffffffffffda RBX: 00007fee632d7f80 RCX: 00007fee631b80a9 [ 657.372001] RDX: 0000000020000300 RSI: 00000000c100565c RDI: 0000000000000003 [ 657.379263] RBP: 00007fee6172a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 657.386524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.393785] R13: 00007ffcc2b6f91f R14: 00007fee6172a300 R15: 0000000000022000 08:49:16 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0x0, @raw_data="8b5340f93d519649c4d7481aba5319f9c088be878e664dbe39976aef9d8f28468a727fb7296e274e5f28c09bb292dc92bc4a556f0f5da3c80339df21fefd4e343fcab73e50a0c3ba88b20c0fb4b66fa479d01538d3cd195e6575639382b48cf24382c99c8512adf31e9d5aa80ef7278e9103c0dd7f33e6287db5940ef5ae2828ed7ac268b3e5828a695de7c36d613da9c2c39d1bcfc00826ec83b02fcbcc8eee979b327fc315eb442e92870685f8f93bfb4e649f5fc39190c90d67a7faa4186abcbb0d50f51d3916"}) 08:49:16 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000380), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) write$UHID_CREATE2(r4, &(0x7f00000003c0)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x67, 0x0, 0x8, 0x6, 0x80006, 0x6, "cf526dfae715c5d28ef7a935d139d77a1e59ee8ceaeac1924bea8b0decf490cad292203528a6e0304d83a176a5239aafba1f6023df4a48a0b4d8f85776c681a4bda2b847de00df84cb5334a9f9be412035130474891ad25ee97703d49ad7e3566442a9c55f2188"}}, 0x17f) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000300)=@userptr={0x1e, 0x2, 0x4, 0x400, 0x1, {r2, r3/1000+60000}, {0x5, 0x2, 0x7f, 0x80, 0x80, 0x7f, "8b959829"}, 0x6, 0x2, {&(0x7f00000002c0)}, 0x3, 0x0, r4}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x3, @win={{0x7, 0x8c, 0x7, 0x9}, 0x6, 0xfffffffc, &(0x7f0000000100)={{0x7, 0x9b04, 0x80, 0x3f}, &(0x7f0000000080)={{0x8001, 0x5, 0x1, 0x81}, &(0x7f0000000040)={{0x5, 0x785, 0x4, 0x7}}}}, 0x1, &(0x7f0000000140)="b00ffff07d1c3a8c5b03103faf9b518dd6623c1cf856d2d943c83dfc9f9fb608ca9419b7ed3eb47a9060afb25e0b90fe33ef", 0x1}}) 08:49:16 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (fail_nth: 4) 08:49:16 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @vbi={0x401, 0x6, 0x4, 0x20385655, [0x3, 0x5], [0xfffffff9, 0x2], 0x108}}) 08:49:16 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x4, r0}, 0x10) write$UHID_CREATE2(r0, &(0x7f0000000280)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x41, 0x4, 0x675, 0x94bacaa, 0xdb13, 0xfff, "c3e7e531cfc030f0c873a96af93ab0a3da71e229153c3c5d00d1bb5c9dfd9f6624ef8d3825b20aba50d9679126bfcc046b0048d257fdd522aa37e1e2872d884b5c"}}, 0x159) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000100)) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x0, 0x4, 0x0, 0x0, {r3, r4/1000+10000}, {0x5, 0x0, 0xfd, 0x4, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000140)={0xd5, 0x0, 0x2, {0x1, @sliced={0x101, [0x8, 0x0, 0x3, 0x401, 0x1, 0x3, 0x8, 0xdf, 0x0, 0x5, 0x6, 0x0, 0x1000, 0x9, 0x8, 0x7, 0x98, 0xf, 0x9, 0x9, 0x0, 0x800, 0x7f, 0x6, 0x1, 0x1, 0x9, 0x0, 0x2, 0x800, 0x0, 0x9, 0x101, 0x7, 0x4, 0x8001, 0x3, 0x4, 0x64e, 0x1, 0x4, 0x2400, 0xffff, 0x6, 0x4, 0xff, 0x9, 0x2], 0x24}}, 0x1000}) 08:49:16 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x10004, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0xffff, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcad]}}}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x10004, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0xffff, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcad]}}}) (async) 08:49:16 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000380), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) (async) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) write$UHID_CREATE2(r4, &(0x7f00000003c0)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x67, 0x0, 0x8, 0x6, 0x80006, 0x6, "cf526dfae715c5d28ef7a935d139d77a1e59ee8ceaeac1924bea8b0decf490cad292203528a6e0304d83a176a5239aafba1f6023df4a48a0b4d8f85776c681a4bda2b847de00df84cb5334a9f9be412035130474891ad25ee97703d49ad7e3566442a9c55f2188"}}, 0x17f) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000300)=@userptr={0x1e, 0x2, 0x4, 0x400, 0x1, {r2, r3/1000+60000}, {0x5, 0x2, 0x7f, 0x80, 0x80, 0x7f, "8b959829"}, 0x6, 0x2, {&(0x7f00000002c0)}, 0x3, 0x0, r4}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x3, @win={{0x7, 0x8c, 0x7, 0x9}, 0x6, 0xfffffffc, &(0x7f0000000100)={{0x7, 0x9b04, 0x80, 0x3f}, &(0x7f0000000080)={{0x8001, 0x5, 0x1, 0x81}, &(0x7f0000000040)={{0x5, 0x785, 0x4, 0x7}}}}, 0x1, &(0x7f0000000140)="b00ffff07d1c3a8c5b03103faf9b518dd6623c1cf856d2d943c83dfc9f9fb608ca9419b7ed3eb47a9060afb25e0b90fe33ef", 0x1}}) 08:49:16 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0x0, @raw_data="8b5340f93d519649c4d7481aba5319f9c088be878e664dbe39976aef9d8f28468a727fb7296e274e5f28c09bb292dc92bc4a556f0f5da3c80339df21fefd4e343fcab73e50a0c3ba88b20c0fb4b66fa479d01538d3cd195e6575639382b48cf24382c99c8512adf31e9d5aa80ef7278e9103c0dd7f33e6287db5940ef5ae2828ed7ac268b3e5828a695de7c36d613da9c2c39d1bcfc00826ec83b02fcbcc8eee979b327fc315eb442e92870685f8f93bfb4e649f5fc39190c90d67a7faa4186abcbb0d50f51d3916"}) [ 657.521504] FAULT_INJECTION: forcing a failure. [ 657.521504] name failslab, interval 1, probability 0, space 0, times 0 [ 657.553849] CPU: 0 PID: 28568 Comm: syz-executor.0 Not tainted 4.14.302-syzkaller #0 [ 657.561748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 657.571097] Call Trace: [ 657.573679] dump_stack+0x1b2/0x281 [ 657.577306] should_fail.cold+0x10a/0x149 [ 657.581456] should_failslab+0xd6/0x130 [ 657.585430] __kmalloc+0x2c1/0x400 [ 657.588963] ? __vb2_queue_alloc+0xf4/0xd90 [ 657.593285] __vb2_queue_alloc+0xf4/0xd90 [ 657.597441] ? unwind_get_return_address+0x51/0x90 [ 657.602369] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 657.607724] ? __save_stack_trace+0xa0/0x160 [ 657.612131] ? vim2m_queue_setup+0x221/0x330 [ 657.616538] vb2_core_create_bufs+0x279/0x5a0 [ 657.621050] ? __vb2_queue_free+0x7a0/0x7a0 [ 657.625372] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 657.630818] ? trace_hardirqs_on+0x10/0x10 [ 657.635074] vb2_create_bufs+0x2e1/0x5b0 [ 657.639135] ? vb2_thread_start+0x310/0x310 [ 657.643464] v4l_create_bufs+0xa4/0x150 [ 657.647434] __video_do_ioctl+0x65b/0x6a0 [ 657.651579] ? video_ioctl2+0x30/0x30 [ 657.655379] ? __might_fault+0x177/0x1b0 [ 657.659436] ? video_ioctl2+0x30/0x30 [ 657.663239] video_usercopy+0xfd/0xe70 [ 657.667121] ? v4l_g_ctrl+0x390/0x390 08:49:16 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @vbi={0x401, 0x6, 0x4, 0x20385655, [0x3, 0x5], [0xfffffff9, 0x2], 0x108}}) [ 657.670914] ? proc_fail_nth_write+0x7b/0x180 [ 657.675402] ? trace_hardirqs_on+0x10/0x10 [ 657.679639] ? fsnotify+0x974/0x11b0 [ 657.683346] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 657.688267] ? __handle_mm_fault+0x80f/0x4620 [ 657.692757] v4l2_ioctl+0x1bb/0x2f0 [ 657.696376] ? v4l2_open+0x2f0/0x2f0 [ 657.700082] do_vfs_ioctl+0x75a/0xff0 [ 657.703878] ? lock_acquire+0x170/0x3f0 [ 657.707855] ? ioctl_preallocate+0x1a0/0x1a0 [ 657.712262] ? __fget+0x265/0x3e0 [ 657.715768] ? do_vfs_ioctl+0xff0/0xff0 08:49:16 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @vbi={0x401, 0x6, 0x4, 0x20385655, [0x3, 0x5], [0xfffffff9, 0x2], 0x108}}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @vbi={0x401, 0x6, 0x4, 0x20385655, [0x3, 0x5], [0xfffffff9, 0x2], 0x108}}) (async) [ 657.719738] ? security_file_ioctl+0x83/0xb0 [ 657.724136] SyS_ioctl+0x7f/0xb0 [ 657.727492] ? do_vfs_ioctl+0xff0/0xff0 [ 657.731465] do_syscall_64+0x1d5/0x640 [ 657.735350] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 657.740528] RIP: 0033:0x7fee631b80a9 [ 657.744228] RSP: 002b:00007fee6172a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 657.751935] RAX: ffffffffffffffda RBX: 00007fee632d7f80 RCX: 00007fee631b80a9 [ 657.759206] RDX: 0000000020000300 RSI: 00000000c100565c RDI: 0000000000000003 08:49:16 executing program 3: syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @sliced={0x4, [0x7fff, 0x111a, 0x4, 0x9, 0x8aea, 0x2, 0x0, 0x3, 0x2, 0x81, 0x1, 0x1, 0x40, 0x8000, 0x1000, 0x2, 0x1, 0x1, 0x1000, 0x40, 0x4, 0x7, 0x401, 0x8001, 0xfff, 0x0, 0x6, 0xffe0, 0x1, 0x6, 0x0, 0x9, 0x1, 0x0, 0x3, 0x4, 0x0, 0x5, 0x0, 0x3, 0x3, 0x1ff, 0xfff8, 0x5, 0x6, 0x400, 0x3f, 0x7], 0x1}}}) 08:49:16 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x241, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000100)={0x1, @pix={0xffff, 0x80000000, 0x7178173d, 0x1, 0x9, 0x401, 0x0, 0x42, 0x1, 0x6, 0x0, 0x6}}) 08:49:16 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000380), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) (async) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) (async) write$UHID_CREATE2(r4, &(0x7f00000003c0)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x67, 0x0, 0x8, 0x6, 0x80006, 0x6, "cf526dfae715c5d28ef7a935d139d77a1e59ee8ceaeac1924bea8b0decf490cad292203528a6e0304d83a176a5239aafba1f6023df4a48a0b4d8f85776c681a4bda2b847de00df84cb5334a9f9be412035130474891ad25ee97703d49ad7e3566442a9c55f2188"}}, 0x17f) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000300)=@userptr={0x1e, 0x2, 0x4, 0x400, 0x1, {r2, r3/1000+60000}, {0x5, 0x2, 0x7f, 0x80, 0x80, 0x7f, "8b959829"}, 0x6, 0x2, {&(0x7f00000002c0)}, 0x3, 0x0, r4}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x3, @win={{0x7, 0x8c, 0x7, 0x9}, 0x6, 0xfffffffc, &(0x7f0000000100)={{0x7, 0x9b04, 0x80, 0x3f}, &(0x7f0000000080)={{0x8001, 0x5, 0x1, 0x81}, &(0x7f0000000040)={{0x5, 0x785, 0x4, 0x7}}}}, 0x1, &(0x7f0000000140)="b00ffff07d1c3a8c5b03103faf9b518dd6623c1cf856d2d943c83dfc9f9fb608ca9419b7ed3eb47a9060afb25e0b90fe33ef", 0x1}}) 08:49:16 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (fail_nth: 5) 08:49:16 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x10000, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x3, @sdr={0x494e4f4b, 0x6}}) [ 657.766464] RBP: 00007fee6172a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 657.773726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.780991] R13: 00007ffcc2b6f91f R14: 00007fee6172a300 R15: 0000000000022000 08:49:16 executing program 3: syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @sliced={0x4, [0x7fff, 0x111a, 0x4, 0x9, 0x8aea, 0x2, 0x0, 0x3, 0x2, 0x81, 0x1, 0x1, 0x40, 0x8000, 0x1000, 0x2, 0x1, 0x1, 0x1000, 0x40, 0x4, 0x7, 0x401, 0x8001, 0xfff, 0x0, 0x6, 0xffe0, 0x1, 0x6, 0x0, 0x9, 0x1, 0x0, 0x3, 0x4, 0x0, 0x5, 0x0, 0x3, 0x3, 0x1ff, 0xfff8, 0x5, 0x6, 0x400, 0x3f, 0x7], 0x1}}}) [ 657.868194] FAULT_INJECTION: forcing a failure. [ 657.868194] name failslab, interval 1, probability 0, space 0, times 0 [ 657.896152] CPU: 0 PID: 28607 Comm: syz-executor.0 Not tainted 4.14.302-syzkaller #0 [ 657.904049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 657.913391] Call Trace: [ 657.915975] dump_stack+0x1b2/0x281 [ 657.919601] should_fail.cold+0x10a/0x149 [ 657.923748] should_failslab+0xd6/0x130 [ 657.927722] __kmalloc+0x2c1/0x400 [ 657.931256] ? __vb2_queue_alloc+0xf4/0xd90 [ 657.935573] __vb2_queue_alloc+0xf4/0xd90 [ 657.939718] ? unwind_get_return_address+0x51/0x90 [ 657.944644] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 657.950001] ? __save_stack_trace+0xa0/0x160 [ 657.954405] ? vim2m_queue_setup+0x221/0x330 [ 657.958819] vb2_core_create_bufs+0x279/0x5a0 [ 657.963312] ? __vb2_queue_free+0x7a0/0x7a0 [ 657.967634] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 657.972994] ? trace_hardirqs_on+0x10/0x10 [ 657.977233] vb2_create_bufs+0x2e1/0x5b0 [ 657.981287] ? vb2_thread_start+0x310/0x310 [ 657.985610] v4l_create_bufs+0xa4/0x150 [ 657.989579] __video_do_ioctl+0x65b/0x6a0 [ 657.993721] ? video_ioctl2+0x30/0x30 [ 657.997505] ? __might_fault+0x177/0x1b0 [ 658.001545] ? video_ioctl2+0x30/0x30 [ 658.005319] video_usercopy+0xfd/0xe70 [ 658.009184] ? v4l_g_ctrl+0x390/0x390 [ 658.012960] ? proc_fail_nth_write+0x7b/0x180 [ 658.017445] ? trace_hardirqs_on+0x10/0x10 [ 658.021657] ? fsnotify+0x974/0x11b0 [ 658.025349] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 658.030260] ? __handle_mm_fault+0x80f/0x4620 [ 658.034737] v4l2_ioctl+0x1bb/0x2f0 [ 658.038344] ? v4l2_open+0x2f0/0x2f0 [ 658.042032] do_vfs_ioctl+0x75a/0xff0 [ 658.045913] ? lock_acquire+0x170/0x3f0 [ 658.049864] ? ioctl_preallocate+0x1a0/0x1a0 [ 658.054259] ? __fget+0x265/0x3e0 [ 658.057697] ? do_vfs_ioctl+0xff0/0xff0 [ 658.061648] ? security_file_ioctl+0x83/0xb0 [ 658.066120] SyS_ioctl+0x7f/0xb0 [ 658.069464] ? do_vfs_ioctl+0xff0/0xff0 [ 658.073424] do_syscall_64+0x1d5/0x640 [ 658.077298] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 658.082469] RIP: 0033:0x7fee631b80a9 [ 658.086158] RSP: 002b:00007fee6172a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 658.093849] RAX: ffffffffffffffda RBX: 00007fee632d7f80 RCX: 00007fee631b80a9 [ 658.101099] RDX: 0000000020000300 RSI: 00000000c100565c RDI: 0000000000000003 [ 658.108370] RBP: 00007fee6172a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 658.115624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.122873] R13: 00007ffcc2b6f91f R14: 00007fee6172a300 R15: 0000000000022000 08:49:16 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x4, r0}, 0x10) write$UHID_CREATE2(r0, &(0x7f0000000280)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x41, 0x4, 0x675, 0x94bacaa, 0xdb13, 0xfff, "c3e7e531cfc030f0c873a96af93ab0a3da71e229153c3c5d00d1bb5c9dfd9f6624ef8d3825b20aba50d9679126bfcc046b0048d257fdd522aa37e1e2872d884b5c"}}, 0x159) (async) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000100)) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x0, 0x4, 0x0, 0x0, {r3, r4/1000+10000}, {0x5, 0x0, 0xfd, 0x4, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000140)={0xd5, 0x0, 0x2, {0x1, @sliced={0x101, [0x8, 0x0, 0x3, 0x401, 0x1, 0x3, 0x8, 0xdf, 0x0, 0x5, 0x6, 0x0, 0x1000, 0x9, 0x8, 0x7, 0x98, 0xf, 0x9, 0x9, 0x0, 0x800, 0x7f, 0x6, 0x1, 0x1, 0x9, 0x0, 0x2, 0x800, 0x0, 0x9, 0x101, 0x7, 0x4, 0x8001, 0x3, 0x4, 0x64e, 0x1, 0x4, 0x2400, 0xffff, 0x6, 0x4, 0xff, 0x9, 0x2], 0x24}}, 0x1000}) 08:49:16 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x241, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000100)={0x1, @pix={0xffff, 0x80000000, 0x7178173d, 0x1, 0x9, 0x401, 0x0, 0x42, 0x1, 0x6, 0x0, 0x6}}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x241, 0x0) (async) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000100)={0x1, @pix={0xffff, 0x80000000, 0x7178173d, 0x1, 0x9, 0x401, 0x0, 0x42, 0x1, 0x6, 0x0, 0x6}}) (async) 08:49:16 executing program 3: syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @sliced={0x4, [0x7fff, 0x111a, 0x4, 0x9, 0x8aea, 0x2, 0x0, 0x3, 0x2, 0x81, 0x1, 0x1, 0x40, 0x8000, 0x1000, 0x2, 0x1, 0x1, 0x1000, 0x40, 0x4, 0x7, 0x401, 0x8001, 0xfff, 0x0, 0x6, 0xffe0, 0x1, 0x6, 0x0, 0x9, 0x1, 0x0, 0x3, 0x4, 0x0, 0x5, 0x0, 0x3, 0x3, 0x1ff, 0xfff8, 0x5, 0x6, 0x400, 0x3f, 0x7], 0x1}}}) 08:49:16 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x4400, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240)) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)=@multiplanar_userptr={0x2, 0x2, 0x4, 0x0, 0x80, {}, {0x2, 0x0, 0x81, 0x6, 0x40, 0x20, "fc1fb2b8"}, 0x0, 0x2, {&(0x7f0000000140)=[{0x8001, 0xcf, {&(0x7f0000000080)}, 0x80000001}, {0x40, 0x5, {&(0x7f0000000100)}, 0x3}]}, 0xc40e}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f00000002c0)={0x2, @sliced={0xffff, [0x3, 0x2, 0x3, 0xf800, 0x9, 0x8, 0x1f, 0x7ff, 0x3, 0x400, 0x3, 0x400, 0x5, 0x7, 0x101, 0x2, 0x5, 0xd824, 0x4, 0x1, 0x8, 0xf800, 0x3, 0x0, 0x1000, 0x1, 0x9, 0x7, 0x5, 0x0, 0x81, 0x3, 0x401, 0xfe4, 0x80, 0xff, 0x6, 0x81, 0xa, 0x679, 0xef9b, 0xffff, 0x6, 0x8, 0x8, 0x68, 0x807c, 0x5], 0x41}}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x3137babc957cbf57, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0ca600000000"], 0x6) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r4) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff6}) 08:49:16 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x10000, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x3, @sdr={0x494e4f4b, 0x6}}) 08:49:16 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (fail_nth: 6) 08:49:17 executing program 3: syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) r0 = syz_open_dev$mouse(&(0x7f0000000080), 0x8, 0x400000) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000340)) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000100)={0x9, 0x4}) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x400, 0x1f, 0x9, 0x35315241, [0x4, 0x3], [0x10d1, 0x1], 0x108}}) 08:49:17 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x10000, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x3, @sdr={0x494e4f4b, 0x6}}) 08:49:17 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x4400, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240)) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)=@multiplanar_userptr={0x2, 0x2, 0x4, 0x0, 0x80, {}, {0x2, 0x0, 0x81, 0x6, 0x40, 0x20, "fc1fb2b8"}, 0x0, 0x2, {&(0x7f0000000140)=[{0x8001, 0xcf, {&(0x7f0000000080)}, 0x80000001}, {0x40, 0x5, {&(0x7f0000000100)}, 0x3}]}, 0xc40e}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f00000002c0)={0x2, @sliced={0xffff, [0x3, 0x2, 0x3, 0xf800, 0x9, 0x8, 0x1f, 0x7ff, 0x3, 0x400, 0x3, 0x400, 0x5, 0x7, 0x101, 0x2, 0x5, 0xd824, 0x4, 0x1, 0x8, 0xf800, 0x3, 0x0, 0x1000, 0x1, 0x9, 0x7, 0x5, 0x0, 0x81, 0x3, 0x401, 0xfe4, 0x80, 0xff, 0x6, 0x81, 0xa, 0x679, 0xef9b, 0xffff, 0x6, 0x8, 0x8, 0x68, 0x807c, 0x5], 0x41}}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x3137babc957cbf57, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0ca600000000"], 0x6) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r4) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff6}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x4400, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240)) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)=@multiplanar_userptr={0x2, 0x2, 0x4, 0x0, 0x80, {}, {0x2, 0x0, 0x81, 0x6, 0x40, 0x20, "fc1fb2b8"}, 0x0, 0x2, {&(0x7f0000000140)=[{0x8001, 0xcf, {&(0x7f0000000080)}, 0x80000001}, {0x40, 0x5, {&(0x7f0000000100)}, 0x3}]}, 0xc40e}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f00000002c0)={0x2, @sliced={0xffff, [0x3, 0x2, 0x3, 0xf800, 0x9, 0x8, 0x1f, 0x7ff, 0x3, 0x400, 0x3, 0x400, 0x5, 0x7, 0x101, 0x2, 0x5, 0xd824, 0x4, 0x1, 0x8, 0xf800, 0x3, 0x0, 0x1000, 0x1, 0x9, 0x7, 0x5, 0x0, 0x81, 0x3, 0x401, 0xfe4, 0x80, 0xff, 0x6, 0x81, 0xa, 0x679, 0xef9b, 0xffff, 0x6, 0x8, 0x8, 0x68, 0x807c, 0x5], 0x41}}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x3137babc957cbf57, 0x0) (async) write$UHID_INPUT2(r4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0ca600000000"], 0x6) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r4) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff6}) (async) 08:49:17 executing program 3: syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) (async) r0 = syz_open_dev$mouse(&(0x7f0000000080), 0x8, 0x400000) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000340)) (async, rerun: 32) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) (rerun: 32) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000100)={0x9, 0x4}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x400, 0x1f, 0x9, 0x35315241, [0x4, 0x3], [0x10d1, 0x1], 0x108}}) [ 658.478647] FAULT_INJECTION: forcing a failure. [ 658.478647] name failslab, interval 1, probability 0, space 0, times 0 [ 658.508014] CPU: 1 PID: 28648 Comm: syz-executor.0 Not tainted 4.14.302-syzkaller #0 [ 658.515911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 658.525257] Call Trace: [ 658.527839] dump_stack+0x1b2/0x281 [ 658.531467] should_fail.cold+0x10a/0x149 [ 658.535616] should_failslab+0xd6/0x130 [ 658.539586] __kmalloc+0x2c1/0x400 [ 658.543118] ? __vb2_queue_alloc+0xf4/0xd90 [ 658.547442] __vb2_queue_alloc+0xf4/0xd90 [ 658.551585] ? unwind_get_return_address+0x51/0x90 [ 658.556509] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 658.561867] ? __save_stack_trace+0xa0/0x160 [ 658.566276] ? vim2m_queue_setup+0x221/0x330 [ 658.570688] vb2_core_create_bufs+0x279/0x5a0 08:49:17 executing program 3: syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) r0 = syz_open_dev$mouse(&(0x7f0000000080), 0x8, 0x400000) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000340)) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000100)={0x9, 0x4}) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x400, 0x1f, 0x9, 0x35315241, [0x4, 0x3], [0x10d1, 0x1], 0x108}}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) (async) syz_open_dev$mouse(&(0x7f0000000080), 0x8, 0x400000) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000340)) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) (async) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000100)={0x9, 0x4}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x400, 0x1f, 0x9, 0x35315241, [0x4, 0x3], [0x10d1, 0x1], 0x108}}) (async) 08:49:17 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x10000, 0x202000) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0xfff, 0x8, 0x5, 0x36314d59, [0x6, 0xe44b], [0xe72, 0x4], 0x108}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000340)={0x0, @sliced={0xecd1, [0xb79, 0x6, 0x3ff, 0x8, 0x0, 0x66, 0x4, 0x1, 0x200, 0x5, 0x3, 0x1, 0x58c, 0x200, 0x100, 0x3ff, 0x6, 0x4, 0x1000, 0x5, 0x2, 0x8, 0x4, 0xad, 0x7a4, 0x9, 0x7f, 0x3, 0x5, 0x7, 0xc71, 0xe5d7, 0x200, 0xfb0e, 0x9, 0x6, 0x8000, 0x81, 0x8, 0x1, 0x4, 0x3, 0xffff, 0x36, 0x6871, 0x0, 0x1000, 0x4], 0x3}}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000440)={0x3, @pix_mp={0x80000000, 0x8, 0xf3035741e8533b7a, 0x1, 0x8, [{0x8, 0x7}, {0x9, 0xbd}, {0x1000, 0x2}, {0x2, 0x7ff}, {0x1, 0x7}, {0x8, 0x20}, {0x1, 0x585}, {0x1, 0xbd}], 0x6, 0x6, 0x4}}) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) [ 658.575182] ? __vb2_queue_free+0x7a0/0x7a0 [ 658.579507] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 658.584865] ? trace_hardirqs_on+0x10/0x10 [ 658.589196] vb2_create_bufs+0x2e1/0x5b0 [ 658.593264] ? vb2_thread_start+0x310/0x310 [ 658.597588] v4l_create_bufs+0xa4/0x150 [ 658.601558] __video_do_ioctl+0x65b/0x6a0 [ 658.605700] ? video_ioctl2+0x30/0x30 [ 658.609496] ? __might_fault+0x177/0x1b0 [ 658.613552] ? video_ioctl2+0x30/0x30 [ 658.617346] video_usercopy+0xfd/0xe70 [ 658.621232] ? v4l_g_ctrl+0x390/0x390 [ 658.625025] ? proc_fail_nth_write+0x7b/0x180 [ 658.629513] ? trace_hardirqs_on+0x10/0x10 [ 658.633749] ? fsnotify+0x974/0x11b0 [ 658.637456] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 658.642378] ? __handle_mm_fault+0x80f/0x4620 [ 658.646867] v4l2_ioctl+0x1bb/0x2f0 [ 658.650480] ? v4l2_open+0x2f0/0x2f0 [ 658.654194] do_vfs_ioctl+0x75a/0xff0 [ 658.657989] ? lock_acquire+0x170/0x3f0 [ 658.661957] ? ioctl_preallocate+0x1a0/0x1a0 [ 658.666365] ? __fget+0x265/0x3e0 [ 658.669802] ? do_vfs_ioctl+0xff0/0xff0 [ 658.673753] ? security_file_ioctl+0x83/0xb0 [ 658.678134] SyS_ioctl+0x7f/0xb0 [ 658.681472] ? do_vfs_ioctl+0xff0/0xff0 [ 658.685419] do_syscall_64+0x1d5/0x640 [ 658.689286] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 658.694450] RIP: 0033:0x7fee631b80a9 [ 658.698135] RSP: 002b:00007fee6172a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 658.705815] RAX: ffffffffffffffda RBX: 00007fee632d7f80 RCX: 00007fee631b80a9 [ 658.713061] RDX: 0000000020000300 RSI: 00000000c100565c RDI: 0000000000000003 [ 658.720304] RBP: 00007fee6172a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 658.727554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.734797] R13: 00007ffcc2b6f91f R14: 00007fee6172a300 R15: 0000000000022000 08:49:17 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x241, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000100)={0x1, @pix={0xffff, 0x80000000, 0x7178173d, 0x1, 0x9, 0x401, 0x0, 0x42, 0x1, 0x6, 0x0, 0x6}}) 08:49:17 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000440)={0xffffffffffffffff, r1, 0x4, r0}, 0x10) write$UHID_CREATE2(r0, &(0x7f0000000280)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x41, 0x4, 0x675, 0x94bacaa, 0xdb13, 0xfff, "c3e7e531cfc030f0c873a96af93ab0a3da71e229153c3c5d00d1bb5c9dfd9f6624ef8d3825b20aba50d9679126bfcc046b0048d257fdd522aa37e1e2872d884b5c"}}, 0x159) (async) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000100)) (async) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x0, 0x4, 0x0, 0x0, {r3, r4/1000+10000}, {0x5, 0x0, 0xfd, 0x4, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000140)={0xd5, 0x0, 0x2, {0x1, @sliced={0x101, [0x8, 0x0, 0x3, 0x401, 0x1, 0x3, 0x8, 0xdf, 0x0, 0x5, 0x6, 0x0, 0x1000, 0x9, 0x8, 0x7, 0x98, 0xf, 0x9, 0x9, 0x0, 0x800, 0x7f, 0x6, 0x1, 0x1, 0x9, 0x0, 0x2, 0x800, 0x0, 0x9, 0x101, 0x7, 0x4, 0x8001, 0x3, 0x4, 0x64e, 0x1, 0x4, 0x2400, 0xffff, 0x6, 0x4, 0xff, 0x9, 0x2], 0x24}}, 0x1000}) 08:49:17 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (fail_nth: 7) 08:49:17 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x10000, 0x202000) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0xfff, 0x8, 0x5, 0x36314d59, [0x6, 0xe44b], [0xe72, 0x4], 0x108}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000340)={0x0, @sliced={0xecd1, [0xb79, 0x6, 0x3ff, 0x8, 0x0, 0x66, 0x4, 0x1, 0x200, 0x5, 0x3, 0x1, 0x58c, 0x200, 0x100, 0x3ff, 0x6, 0x4, 0x1000, 0x5, 0x2, 0x8, 0x4, 0xad, 0x7a4, 0x9, 0x7f, 0x3, 0x5, 0x7, 0xc71, 0xe5d7, 0x200, 0xfb0e, 0x9, 0x6, 0x8000, 0x81, 0x8, 0x1, 0x4, 0x3, 0xffff, 0x36, 0x6871, 0x0, 0x1000, 0x4], 0x3}}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000440)={0x3, @pix_mp={0x80000000, 0x8, 0xf3035741e8533b7a, 0x1, 0x8, [{0x8, 0x7}, {0x9, 0xbd}, {0x1000, 0x2}, {0x2, 0x7ff}, {0x1, 0x7}, {0x8, 0x20}, {0x1, 0x585}, {0x1, 0xbd}], 0x6, 0x6, 0x4}}) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) syz_open_dev$mouse(&(0x7f0000000000), 0x10000, 0x202000) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0xfff, 0x8, 0x5, 0x36314d59, [0x6, 0xe44b], [0xe72, 0x4], 0x108}}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000340)={0x0, @sliced={0xecd1, [0xb79, 0x6, 0x3ff, 0x8, 0x0, 0x66, 0x4, 0x1, 0x200, 0x5, 0x3, 0x1, 0x58c, 0x200, 0x100, 0x3ff, 0x6, 0x4, 0x1000, 0x5, 0x2, 0x8, 0x4, 0xad, 0x7a4, 0x9, 0x7f, 0x3, 0x5, 0x7, 0xc71, 0xe5d7, 0x200, 0xfb0e, 0x9, 0x6, 0x8000, 0x81, 0x8, 0x1, 0x4, 0x3, 0xffff, 0x36, 0x6871, 0x0, 0x1000, 0x4], 0x3}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000440)={0x3, @pix_mp={0x80000000, 0x8, 0xf3035741e8533b7a, 0x1, 0x8, [{0x8, 0x7}, {0x9, 0xbd}, {0x1000, 0x2}, {0x2, 0x7ff}, {0x1, 0x7}, {0x8, 0x20}, {0x1, 0x585}, {0x1, 0xbd}], 0x6, 0x6, 0x4}}) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) 08:49:17 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x4400, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000240)) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)=@multiplanar_userptr={0x2, 0x2, 0x4, 0x0, 0x80, {}, {0x2, 0x0, 0x81, 0x6, 0x40, 0x20, "fc1fb2b8"}, 0x0, 0x2, {&(0x7f0000000140)=[{0x8001, 0xcf, {&(0x7f0000000080)}, 0x80000001}, {0x40, 0x5, {&(0x7f0000000100)}, 0x3}]}, 0xc40e}) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f00000002c0)={0x2, @sliced={0xffff, [0x3, 0x2, 0x3, 0xf800, 0x9, 0x8, 0x1f, 0x7ff, 0x3, 0x400, 0x3, 0x400, 0x5, 0x7, 0x101, 0x2, 0x5, 0xd824, 0x4, 0x1, 0x8, 0xf800, 0x3, 0x0, 0x1000, 0x1, 0x9, 0x7, 0x5, 0x0, 0x81, 0x3, 0x401, 0xfe4, 0x80, 0xff, 0x6, 0x81, 0xa, 0x679, 0xef9b, 0xffff, 0x6, 0x8, 0x8, 0x68, 0x807c, 0x5], 0x41}}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x3137babc957cbf57, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0ca600000000"], 0x6) (async, rerun: 64) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r4) (rerun: 64) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff6}) 08:49:17 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x2]}}}) 08:49:17 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x979, 0x6, 0x3, 0x0, 0x7}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) [ 659.326203] FAULT_INJECTION: forcing a failure. [ 659.326203] name failslab, interval 1, probability 0, space 0, times 0 [ 659.351278] CPU: 1 PID: 28704 Comm: syz-executor.0 Not tainted 4.14.302-syzkaller #0 [ 659.359175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 659.368522] Call Trace: [ 659.371108] dump_stack+0x1b2/0x281 [ 659.374737] should_fail.cold+0x10a/0x149 [ 659.378882] should_failslab+0xd6/0x130 [ 659.382857] __kmalloc+0x2c1/0x400 [ 659.386393] ? __vb2_queue_alloc+0xf4/0xd90 [ 659.390716] __vb2_queue_alloc+0xf4/0xd90 [ 659.394861] ? unwind_get_return_address+0x51/0x90 [ 659.399783] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 659.405138] ? __save_stack_trace+0xa0/0x160 [ 659.409543] ? vim2m_queue_setup+0x221/0x330 [ 659.413957] vb2_core_create_bufs+0x279/0x5a0 [ 659.418452] ? __vb2_queue_free+0x7a0/0x7a0 08:49:18 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x10000, 0x202000) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0xfff, 0x8, 0x5, 0x36314d59, [0x6, 0xe44b], [0xe72, 0x4], 0x108}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000340)={0x0, @sliced={0xecd1, [0xb79, 0x6, 0x3ff, 0x8, 0x0, 0x66, 0x4, 0x1, 0x200, 0x5, 0x3, 0x1, 0x58c, 0x200, 0x100, 0x3ff, 0x6, 0x4, 0x1000, 0x5, 0x2, 0x8, 0x4, 0xad, 0x7a4, 0x9, 0x7f, 0x3, 0x5, 0x7, 0xc71, 0xe5d7, 0x200, 0xfb0e, 0x9, 0x6, 0x8000, 0x81, 0x8, 0x1, 0x4, 0x3, 0xffff, 0x36, 0x6871, 0x0, 0x1000, 0x4], 0x3}}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000440)={0x3, @pix_mp={0x80000000, 0x8, 0xf3035741e8533b7a, 0x1, 0x8, [{0x8, 0x7}, {0x9, 0xbd}, {0x1000, 0x2}, {0x2, 0x7ff}, {0x1, 0x7}, {0x8, 0x20}, {0x1, 0x585}, {0x1, 0xbd}], 0x6, 0x6, 0x4}}) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) syz_open_dev$mouse(&(0x7f0000000000), 0x10000, 0x202000) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0xfff, 0x8, 0x5, 0x36314d59, [0x6, 0xe44b], [0xe72, 0x4], 0x108}}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000340)={0x0, @sliced={0xecd1, [0xb79, 0x6, 0x3ff, 0x8, 0x0, 0x66, 0x4, 0x1, 0x200, 0x5, 0x3, 0x1, 0x58c, 0x200, 0x100, 0x3ff, 0x6, 0x4, 0x1000, 0x5, 0x2, 0x8, 0x4, 0xad, 0x7a4, 0x9, 0x7f, 0x3, 0x5, 0x7, 0xc71, 0xe5d7, 0x200, 0xfb0e, 0x9, 0x6, 0x8000, 0x81, 0x8, 0x1, 0x4, 0x3, 0xffff, 0x36, 0x6871, 0x0, 0x1000, 0x4], 0x3}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000440)={0x3, @pix_mp={0x80000000, 0x8, 0xf3035741e8533b7a, 0x1, 0x8, [{0x8, 0x7}, {0x9, 0xbd}, {0x1000, 0x2}, {0x2, 0x7ff}, {0x1, 0x7}, {0x8, 0x20}, {0x1, 0x585}, {0x1, 0xbd}], 0x6, 0x6, 0x4}}) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) [ 659.422774] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 659.428130] ? trace_hardirqs_on+0x10/0x10 [ 659.432364] vb2_create_bufs+0x2e1/0x5b0 [ 659.436424] ? vb2_thread_start+0x310/0x310 [ 659.440746] v4l_create_bufs+0xa4/0x150 [ 659.444718] __video_do_ioctl+0x65b/0x6a0 [ 659.448866] ? video_ioctl2+0x30/0x30 [ 659.452663] ? __might_fault+0x177/0x1b0 [ 659.456722] ? video_ioctl2+0x30/0x30 [ 659.460517] video_usercopy+0xfd/0xe70 [ 659.464405] ? v4l_g_ctrl+0x390/0x390 [ 659.468206] ? proc_fail_nth_write+0x7b/0x180 [ 659.472703] ? trace_hardirqs_on+0x10/0x10 08:49:18 executing program 3: syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000040)) [ 659.476936] ? fsnotify+0x974/0x11b0 [ 659.480645] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 659.485564] ? __handle_mm_fault+0x80f/0x4620 [ 659.490055] v4l2_ioctl+0x1bb/0x2f0 [ 659.493674] ? v4l2_open+0x2f0/0x2f0 [ 659.497380] do_vfs_ioctl+0x75a/0xff0 [ 659.501177] ? lock_acquire+0x170/0x3f0 [ 659.505147] ? ioctl_preallocate+0x1a0/0x1a0 [ 659.509549] ? __fget+0x265/0x3e0 [ 659.512996] ? do_vfs_ioctl+0xff0/0xff0 [ 659.516972] ? security_file_ioctl+0x83/0xb0 [ 659.521373] SyS_ioctl+0x7f/0xb0 08:49:18 executing program 3: syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000040)) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000040)) (async) [ 659.524729] ? do_vfs_ioctl+0xff0/0xff0 [ 659.528697] do_syscall_64+0x1d5/0x640 [ 659.532582] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 659.537763] RIP: 0033:0x7fee631b80a9 [ 659.541466] RSP: 002b:00007fee6172a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 659.549164] RAX: ffffffffffffffda RBX: 00007fee632d7f80 RCX: 00007fee631b80a9 [ 659.556425] RDX: 0000000020000300 RSI: 00000000c100565c RDI: 0000000000000003 [ 659.563686] RBP: 00007fee6172a1d0 R08: 0000000000000000 R09: 0000000000000000 08:49:18 executing program 3: syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000040)) 08:49:18 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x979, 0x6, 0x3, 0x0, 0x7}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x979, 0x6, 0x3, 0x0, 0x7}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) (async) 08:49:18 executing program 2: ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000080)=0xfffffffa) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x0, 0x4}) [ 659.570946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 659.578208] R13: 00007ffcc2b6f91f R14: 00007fee6172a300 R15: 0000000000022000 08:49:18 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000180)=@multiplanar_mmap={0x4, 0x1, 0x4, 0x0, 0x6, {}, {0x1, 0x0, 0xf9, 0x2, 0x0, 0x80, "178886c8"}, 0x664, 0x1, {&(0x7f0000000100)=[{0x7, 0x0, {0x4}, 0x3121}, {0x1, 0x9, {0x7fff}, 0xfffffffc}]}, 0x10000}) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x104, r3, 0x8, 0x401, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x400}, 0x20) 08:49:18 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (fail_nth: 8) 08:49:18 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x2]}}}) 08:49:18 executing program 2: ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000080)=0xfffffffa) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x0, 0x4}) 08:49:18 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x979, 0x6, 0x3, 0x0, 0x7}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) 08:49:18 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x9, 0x1, 0x75, 0x3}, {0x100, 0xe1, 0x49, 0x8}, {0x2, 0x80, 0x9, 0x3}, {0x7ff, 0x3f, 0x7, 0x67}, {0x4, 0x96, 0x1, 0xfffffc01}, {0xd, 0x0, 0xd1, 0x4}, {0xff, 0x9, 0x6, 0x6}, {0x3, 0x7, 0x0, 0x8}]}, 0x10) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) read$ptp(r2, &(0x7f0000000240)=""/242, 0xf2) 08:49:18 executing program 2: ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000080)=0xfffffffa) (async) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x0, 0x4}) 08:49:18 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000180)=@multiplanar_mmap={0x4, 0x1, 0x4, 0x0, 0x6, {}, {0x1, 0x0, 0xf9, 0x2, 0x0, 0x80, "178886c8"}, 0x664, 0x1, {&(0x7f0000000100)=[{0x7, 0x0, {0x4}, 0x3121}, {0x1, 0x9, {0x7fff}, 0xfffffffc}]}, 0x10000}) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x104, r3, 0x8, 0x401, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x400}, 0x20) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fffffffffffffff, 0x2) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000180)=@multiplanar_mmap={0x4, 0x1, 0x4, 0x0, 0x6, {}, {0x1, 0x0, 0xf9, 0x2, 0x0, 0x80, "178886c8"}, 0x664, 0x1, {&(0x7f0000000100)=[{0x7, 0x0, {0x4}, 0x3121}, {0x1, 0x9, {0x7fff}, 0xfffffffc}]}, 0x10000}) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x104, r3, 0x8, 0x401, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x400}, 0x20) (async) [ 660.219746] FAULT_INJECTION: forcing a failure. [ 660.219746] name failslab, interval 1, probability 0, space 0, times 0 08:49:18 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@mmap={0xee, 0x2, 0x4, 0x100, 0x3, {0x77359400}, {0x2, 0x0, 0x4, 0xfc, 0x6, 0xff, "ca4fa84a"}, 0x7, 0x1, {}, 0x7, 0x0, r1}) [ 660.268464] CPU: 1 PID: 28774 Comm: syz-executor.0 Not tainted 4.14.302-syzkaller #0 [ 660.276363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 660.285713] Call Trace: [ 660.288297] dump_stack+0x1b2/0x281 [ 660.291922] should_fail.cold+0x10a/0x149 [ 660.296070] should_failslab+0xd6/0x130 [ 660.300040] __kmalloc+0x2c1/0x400 [ 660.303577] ? __vb2_queue_alloc+0xf4/0xd90 [ 660.307894] __vb2_queue_alloc+0xf4/0xd90 [ 660.312046] ? unwind_get_return_address+0x51/0x90 08:49:18 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3ff, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) [ 660.316967] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 660.322326] ? __save_stack_trace+0xa0/0x160 [ 660.326730] ? vim2m_queue_setup+0x221/0x330 [ 660.331136] vb2_core_create_bufs+0x279/0x5a0 [ 660.335623] ? __vb2_queue_free+0x7a0/0x7a0 [ 660.339944] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 660.345301] ? trace_hardirqs_on+0x10/0x10 [ 660.349531] vb2_create_bufs+0x2e1/0x5b0 [ 660.353585] ? vb2_thread_start+0x310/0x310 [ 660.357903] v4l_create_bufs+0xa4/0x150 [ 660.361874] __video_do_ioctl+0x65b/0x6a0 08:49:18 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@mmap={0xee, 0x2, 0x4, 0x100, 0x3, {0x77359400}, {0x2, 0x0, 0x4, 0xfc, 0x6, 0xff, "ca4fa84a"}, 0x7, 0x1, {}, 0x7, 0x0, r1}) 08:49:18 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3ff, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) [ 660.366021] ? video_ioctl2+0x30/0x30 [ 660.369813] ? __might_fault+0x177/0x1b0 [ 660.373870] ? video_ioctl2+0x30/0x30 [ 660.377664] video_usercopy+0xfd/0xe70 [ 660.381546] ? v4l_g_ctrl+0x390/0x390 [ 660.385341] ? proc_fail_nth_write+0x7b/0x180 [ 660.389827] ? trace_hardirqs_on+0x10/0x10 [ 660.394061] ? fsnotify+0x974/0x11b0 [ 660.397771] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 660.402693] v4l2_ioctl+0x1bb/0x2f0 [ 660.406311] ? v4l2_open+0x2f0/0x2f0 [ 660.410018] do_vfs_ioctl+0x75a/0xff0 [ 660.413812] ? lock_acquire+0x170/0x3f0 08:49:19 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3ff, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) [ 660.417781] ? ioctl_preallocate+0x1a0/0x1a0 [ 660.422183] ? __fget+0x265/0x3e0 [ 660.425628] ? do_vfs_ioctl+0xff0/0xff0 [ 660.429595] ? security_file_ioctl+0x83/0xb0 [ 660.434003] SyS_ioctl+0x7f/0xb0 [ 660.437359] ? do_vfs_ioctl+0xff0/0xff0 [ 660.441327] do_syscall_64+0x1d5/0x640 [ 660.445210] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 660.450386] RIP: 0033:0x7fee631b80a9 [ 660.454081] RSP: 002b:00007fee6172a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 660.461780] RAX: ffffffffffffffda RBX: 00007fee632d7f80 RCX: 00007fee631b80a9 08:49:19 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (fail_nth: 9) 08:49:19 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r4 = syz_open_dev$mouse(&(0x7f0000000180), 0x7, 0x410040) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000001c0)={0x0, r4}, 0x10) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)=@fd={0x2, 0x3, 0x4, 0x11c21, 0x6, {r2, r3/1000+60000}, {0x5, 0x0, 0xe1, 0x3, 0xff, 0x1f, 'sF +'}, 0x5}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x9, 0x4004}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x1005, 0x3, 0x2, "a4725b3b45454cec45f000000000000046c2f74030e53f487f2b70a314e66eb5", 0x59555956}) 08:49:19 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) (async, rerun: 64) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (rerun: 64) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@mmap={0xee, 0x2, 0x4, 0x100, 0x3, {0x77359400}, {0x2, 0x0, 0x4, 0xfc, 0x6, 0xff, "ca4fa84a"}, 0x7, 0x1, {}, 0x7, 0x0, r1}) 08:49:19 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x9, 0x1, 0x75, 0x3}, {0x100, 0xe1, 0x49, 0x8}, {0x2, 0x80, 0x9, 0x3}, {0x7ff, 0x3f, 0x7, 0x67}, {0x4, 0x96, 0x1, 0xfffffc01}, {0xd, 0x0, 0xd1, 0x4}, {0xff, 0x9, 0x6, 0x6}, {0x3, 0x7, 0x0, 0x8}]}, 0x10) (async, rerun: 32) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (rerun: 32) read$ptp(r2, &(0x7f0000000240)=""/242, 0xf2) 08:49:19 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000180)=@multiplanar_mmap={0x4, 0x1, 0x4, 0x0, 0x6, {}, {0x1, 0x0, 0xf9, 0x2, 0x0, 0x80, "178886c8"}, 0x664, 0x1, {&(0x7f0000000100)=[{0x7, 0x0, {0x4}, 0x3121}, {0x1, 0x9, {0x7fff}, 0xfffffffc}]}, 0x10000}) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x104, r3, 0x8, 0x401, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x400}, 0x20) 08:49:19 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x2]}}}) [ 660.469040] RDX: 0000000020000300 RSI: 00000000c100565c RDI: 0000000000000003 [ 660.476299] RBP: 00007fee6172a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 660.483560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.490821] R13: 00007ffcc2b6f91f R14: 00007fee6172a300 R15: 0000000000022000 08:49:19 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f00000000c0)={0x4f, 0x0, 0x6, 0x7, 0x1}) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000400)={0xb}) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x4, 0x0) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000040)={'\x00', 0x4, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x2000000004b5, 0x480040) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000140)={0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, 0x0, 0x25, 0x11}, 0x10) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000180)={r3, 0x1}) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}, 0x100}) 08:49:19 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r4 = syz_open_dev$mouse(&(0x7f0000000180), 0x7, 0x410040) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000001c0)={0x0, r4}, 0x10) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)=@fd={0x2, 0x3, 0x4, 0x11c21, 0x6, {r2, r3/1000+60000}, {0x5, 0x0, 0xe1, 0x3, 0xff, 0x1f, 'sF +'}, 0x5}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x9, 0x4004}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x1005, 0x3, 0x2, "a4725b3b45454cec45f000000000000046c2f74030e53f487f2b70a314e66eb5", 0x59555956}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) clock_gettime(0x0, &(0x7f0000000080)) (async) syz_open_dev$mouse(&(0x7f0000000180), 0x7, 0x410040) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000001c0)={0x0, r4}, 0x10) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)=@fd={0x2, 0x3, 0x4, 0x11c21, 0x6, {r2, r3/1000+60000}, {0x5, 0x0, 0xe1, 0x3, 0xff, 0x1f, 'sF +'}, 0x5}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x9, 0x4004}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x1005, 0x3, 0x2, "a4725b3b45454cec45f000000000000046c2f74030e53f487f2b70a314e66eb5", 0x59555956}) (async) [ 660.612576] FAULT_INJECTION: forcing a failure. [ 660.612576] name failslab, interval 1, probability 0, space 0, times 0 [ 660.637089] CPU: 1 PID: 28826 Comm: syz-executor.0 Not tainted 4.14.302-syzkaller #0 [ 660.644984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 660.654329] Call Trace: [ 660.656913] dump_stack+0x1b2/0x281 [ 660.660548] should_fail.cold+0x10a/0x149 [ 660.664696] should_failslab+0xd6/0x130 [ 660.668667] __kmalloc+0x2c1/0x400 [ 660.672197] ? __vb2_queue_alloc+0xf4/0xd90 [ 660.676512] __vb2_queue_alloc+0xf4/0xd90 [ 660.680654] ? unwind_get_return_address+0x51/0x90 [ 660.685577] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 660.690932] ? __save_stack_trace+0xa0/0x160 [ 660.695342] ? vim2m_queue_setup+0x221/0x330 [ 660.699745] vb2_core_create_bufs+0x279/0x5a0 [ 660.704235] ? __vb2_queue_free+0x7a0/0x7a0 08:49:19 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x5, 0xd, 0x0, 0x32, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0x8}, 0x48) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb02, 0x0, 0x0, 0x0, 0xfbd}, [@map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6c8886e6}, @jmp={0x5, 0x1, 0x2, 0x6, 0x8, 0x9a, 0x1}, @map_fd={0x18, 0xf62fe67041ca5a18, 0x1, 0x0, r2}]}, &(0x7f0000000100)='syzkaller\x00', 0xfffffffa, 0x4a, &(0x7f0000000140)=""/74, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x8, 0x400, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r3, 0xffffffffffffffff, r4]}, 0x80) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x20, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}) 08:49:19 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) (async) r4 = syz_open_dev$mouse(&(0x7f0000000180), 0x7, 0x410040) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000001c0)={0x0, r4}, 0x10) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)=@fd={0x2, 0x3, 0x4, 0x11c21, 0x6, {r2, r3/1000+60000}, {0x5, 0x0, 0xe1, 0x3, 0xff, 0x1f, 'sF +'}, 0x5}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x9, 0x4004}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x1005, 0x3, 0x2, "a4725b3b45454cec45f000000000000046c2f74030e53f487f2b70a314e66eb5", 0x59555956}) [ 660.708552] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 660.713906] ? trace_hardirqs_on+0x10/0x10 [ 660.718132] vb2_create_bufs+0x2e1/0x5b0 [ 660.722194] ? vb2_thread_start+0x310/0x310 [ 660.726514] v4l_create_bufs+0xa4/0x150 [ 660.730481] __video_do_ioctl+0x65b/0x6a0 [ 660.734626] ? video_ioctl2+0x30/0x30 [ 660.738419] ? __might_fault+0x177/0x1b0 [ 660.742474] ? video_ioctl2+0x30/0x30 [ 660.746270] video_usercopy+0xfd/0xe70 [ 660.750152] ? v4l_g_ctrl+0x390/0x390 [ 660.753950] ? proc_fail_nth_write+0x7b/0x180 [ 660.758438] ? trace_hardirqs_on+0x10/0x10 08:49:19 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)=0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000100)={0x0, 0x60cf257a0255c1cb}) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000180)) [ 660.762670] ? fsnotify+0x974/0x11b0 [ 660.766375] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 660.771292] ? __handle_mm_fault+0x80f/0x4620 [ 660.775782] v4l2_ioctl+0x1bb/0x2f0 [ 660.779408] ? v4l2_open+0x2f0/0x2f0 [ 660.783115] do_vfs_ioctl+0x75a/0xff0 [ 660.786911] ? lock_acquire+0x170/0x3f0 [ 660.790885] ? ioctl_preallocate+0x1a0/0x1a0 [ 660.795288] ? __fget+0x265/0x3e0 [ 660.798737] ? do_vfs_ioctl+0xff0/0xff0 [ 660.802703] ? security_file_ioctl+0x83/0xb0 [ 660.807108] SyS_ioctl+0x7f/0xb0 08:49:19 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)=0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000100)={0x0, 0x60cf257a0255c1cb}) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000180)) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)=0x2) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000100)={0x0, 0x60cf257a0255c1cb}) (async) syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000180)) (async) [ 660.810465] ? do_vfs_ioctl+0xff0/0xff0 [ 660.814434] do_syscall_64+0x1d5/0x640 [ 660.818325] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 660.823508] RIP: 0033:0x7fee631b80a9 [ 660.827205] RSP: 002b:00007fee6172a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 660.834906] RAX: ffffffffffffffda RBX: 00007fee632d7f80 RCX: 00007fee631b80a9 [ 660.842167] RDX: 0000000020000300 RSI: 00000000c100565c RDI: 0000000000000003 [ 660.849424] RBP: 00007fee6172a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 660.856682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.863947] R13: 00007ffcc2b6f91f R14: 00007fee6172a300 R15: 0000000000022000 08:49:19 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (fail_nth: 10) 08:49:19 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0x1f9000) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000180)=@multiplanar_fd={0x8, 0x1, 0x4, 0x40, 0x6857, {0x77359400}, {0x3, 0xc, 0x6, 0x3, 0xca, 0x9, "e5c0fc81"}, 0x9, 0x4, {&(0x7f0000000040)=[{0x8, 0xffffffff, {r1}, 0x7fffffff}, {0x2, 0x80, {}, 0x1}]}}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@userptr={0x0, 0x1, 0x4, 0x100, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000300)=@multiplanar_userptr={0x1, 0x0, 0x4, 0x400, 0x2, {0x77359400}, {0x1, 0x1, 0x4, 0x7f, 0x1, 0x20, "128d0832"}, 0x3, 0x2, {&(0x7f0000000280)=[{0x7ff, 0x400, {&(0x7f0000000200)}, 0x1}, {0x401, 0xfe93, {&(0x7f0000000240)}}]}, 0x9, 0x0, r2}) 08:49:19 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x9, 0x1, 0x75, 0x3}, {0x100, 0xe1, 0x49, 0x8}, {0x2, 0x80, 0x9, 0x3}, {0x7ff, 0x3f, 0x7, 0x67}, {0x4, 0x96, 0x1, 0xfffffc01}, {0xd, 0x0, 0xd1, 0x4}, {0xff, 0x9, 0x6, 0x6}, {0x3, 0x7, 0x0, 0x8}]}, 0x10) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) read$ptp(r2, &(0x7f0000000240)=""/242, 0xf2) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x9, 0x1, 0x75, 0x3}, {0x100, 0xe1, 0x49, 0x8}, {0x2, 0x80, 0x9, 0x3}, {0x7ff, 0x3f, 0x7, 0x67}, {0x4, 0x96, 0x1, 0xfffffc01}, {0xd, 0x0, 0xd1, 0x4}, {0xff, 0x9, 0x6, 0x6}, {0x3, 0x7, 0x0, 0x8}]}, 0x10) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) read$ptp(r2, &(0x7f0000000240)=""/242, 0xf2) (async) 08:49:19 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x5, 0xd, 0x0, 0x32, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0x8}, 0x48) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb02, 0x0, 0x0, 0x0, 0xfbd}, [@map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6c8886e6}, @jmp={0x5, 0x1, 0x2, 0x6, 0x8, 0x9a, 0x1}, @map_fd={0x18, 0xf62fe67041ca5a18, 0x1, 0x0, r2}]}, &(0x7f0000000100)='syzkaller\x00', 0xfffffffa, 0x4a, &(0x7f0000000140)=""/74, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x8, 0x400, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r3, 0xffffffffffffffff, r4]}, 0x80) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x20, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}) 08:49:19 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f00000000c0)={0x4f, 0x0, 0x6, 0x7, 0x1}) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000400)={0xb}) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x4, 0x0) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000040)={'\x00', 0x4, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x2000000004b5, 0x480040) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000140)={0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, 0x0, 0x25, 0x11}, 0x10) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000180)={r3, 0x1}) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}, 0x100}) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f00000000c0)={0x4f, 0x0, 0x6, 0x7, 0x1}) (async) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000400)={0xb}) (async) syz_open_dev$mouse(&(0x7f0000000000), 0x4, 0x0) (async) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000040)={'\x00', 0x4, 0x1}) (async) syz_open_dev$dri(&(0x7f0000000100), 0x2000000004b5, 0x480040) (async) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000140)) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, 0x0, 0x25, 0x11}, 0x10) (async) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000180)={r3, 0x1}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}, 0x100}) (async) 08:49:19 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)=0x2) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000100)={0x0, 0x60cf257a0255c1cb}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000180)) 08:49:19 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:19 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0x1f9000) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000180)=@multiplanar_fd={0x8, 0x1, 0x4, 0x40, 0x6857, {0x77359400}, {0x3, 0xc, 0x6, 0x3, 0xca, 0x9, "e5c0fc81"}, 0x9, 0x4, {&(0x7f0000000040)=[{0x8, 0xffffffff, {r1}, 0x7fffffff}, {0x2, 0x80, {}, 0x1}]}}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@userptr={0x0, 0x1, 0x4, 0x100, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000300)=@multiplanar_userptr={0x1, 0x0, 0x4, 0x400, 0x2, {0x77359400}, {0x1, 0x1, 0x4, 0x7f, 0x1, 0x20, "128d0832"}, 0x3, 0x2, {&(0x7f0000000280)=[{0x7ff, 0x400, {&(0x7f0000000200)}, 0x1}, {0x401, 0xfe93, {&(0x7f0000000240)}}]}, 0x9, 0x0, r2}) 08:49:19 executing program 2: write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x79, 0x2}, 0x7) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x891e26dc5d7c2247, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) write$P9_RGETLOCK(r0, &(0x7f00000000c0)={0x1e, 0x37, 0x1, {0x2, 0x32c, 0x3a}}, 0x1e) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x799, 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) ioctl$PTP_PIN_SETFUNC2(r2, 0x40603d10, &(0x7f0000000140)={'\x00', 0x6, 0x3}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xfffffff8, 0x6}) 08:49:19 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f00000000c0)={0x4f, 0x0, 0x6, 0x7, 0x1}) (async) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000400)={0xb}) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x4, 0x0) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000040)={'\x00', 0x4, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x2000000004b5, 0x480040) (async) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000140)={0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, 0x0, 0x25, 0x11}, 0x10) (async) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000180)={r3, 0x1}) (async) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}, 0x100}) 08:49:19 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @win={{0x7, 0x9, 0x9, 0x6}, 0x4, 0x3, &(0x7f0000000080)={{0x40, 0x3ff, 0x1df9, 0xb4}, &(0x7f0000000040)={{0x2, 0x6, 0x4, 0x4}, &(0x7f0000000000)={{0x7ca, 0x100992c, 0x5, 0x100}}}}, 0x0, &(0x7f0000000240)="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", 0x1f}}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000100)={0x3, 0x30313953, 0x1, @discrete={0x200, 0x5}}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000001240)=0x3) 08:49:19 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x5, 0xd, 0x0, 0x32, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0x8}, 0x48) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb02, 0x0, 0x0, 0x0, 0xfbd}, [@map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6c8886e6}, @jmp={0x5, 0x1, 0x2, 0x6, 0x8, 0x9a, 0x1}, @map_fd={0x18, 0xf62fe67041ca5a18, 0x1, 0x0, r2}]}, &(0x7f0000000100)='syzkaller\x00', 0xfffffffa, 0x4a, &(0x7f0000000140)=""/74, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x8, 0x400, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r3, 0xffffffffffffffff, r4]}, 0x80) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x20, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x5, 0xd, 0x0, 0x32, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0x8}, 0x48) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb02, 0x0, 0x0, 0x0, 0xfbd}, [@map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6c8886e6}, @jmp={0x5, 0x1, 0x2, 0x6, 0x8, 0x9a, 0x1}, @map_fd={0x18, 0xf62fe67041ca5a18, 0x1, 0x0, r2}]}, &(0x7f0000000100)='syzkaller\x00', 0xfffffffa, 0x4a, &(0x7f0000000140)=""/74, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x8, 0x400, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r3, 0xffffffffffffffff, r4]}, 0x80) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x20, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}) (async) 08:49:19 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:19 executing program 2: write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x79, 0x2}, 0x7) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x891e26dc5d7c2247, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) (async) write$P9_RGETLOCK(r0, &(0x7f00000000c0)={0x1e, 0x37, 0x1, {0x2, 0x32c, 0x3a}}, 0x1e) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x799, 0x2) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async) ioctl$PTP_PIN_SETFUNC2(r2, 0x40603d10, &(0x7f0000000140)={'\x00', 0x6, 0x3}) (async, rerun: 64) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xfffffff8, 0x6}) (rerun: 64) 08:49:19 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0x1f9000) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000180)=@multiplanar_fd={0x8, 0x1, 0x4, 0x40, 0x6857, {0x77359400}, {0x3, 0xc, 0x6, 0x3, 0xca, 0x9, "e5c0fc81"}, 0x9, 0x4, {&(0x7f0000000040)=[{0x8, 0xffffffff, {r1}, 0x7fffffff}, {0x2, 0x80, {}, 0x1}]}}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@userptr={0x0, 0x1, 0x4, 0x100, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000300)=@multiplanar_userptr={0x1, 0x0, 0x4, 0x400, 0x2, {0x77359400}, {0x1, 0x1, 0x4, 0x7f, 0x1, 0x20, "128d0832"}, 0x3, 0x2, {&(0x7f0000000280)=[{0x7ff, 0x400, {&(0x7f0000000200)}, 0x1}, {0x401, 0xfe93, {&(0x7f0000000240)}}]}, 0x9, 0x0, r2}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0x1f9000) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000180)=@multiplanar_fd={0x8, 0x1, 0x4, 0x40, 0x6857, {0x77359400}, {0x3, 0xc, 0x6, 0x3, 0xca, 0x9, "e5c0fc81"}, 0x9, 0x4, {&(0x7f0000000040)=[{0x8, 0xffffffff, {r1}, 0x7fffffff}, {0x2, 0x80, {}, 0x1}]}}) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@userptr={0x0, 0x1, 0x4, 0x100, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000300)=@multiplanar_userptr={0x1, 0x0, 0x4, 0x400, 0x2, {0x77359400}, {0x1, 0x1, 0x4, 0x7f, 0x1, 0x20, "128d0832"}, 0x3, 0x2, {&(0x7f0000000280)=[{0x7ff, 0x400, {&(0x7f0000000200)}, 0x1}, {0x401, 0xfe93, {&(0x7f0000000240)}}]}, 0x9, 0x0, r2}) (async) 08:49:19 executing program 5: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x88, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip_vti0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x810}, 0x800) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x108, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x6c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "416c85b28d17b98113c44e2f036005bd70cd678026af6f0a641f66e7a93ecfa8"}}, @TIPC_NLA_NODE_ID={0x1d, 0x3, "cfcaa892c8f7ab3a59cf1e82e9d9d6eaf1de66011414abbc22"}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40008d0}, 0x1) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xcc, r0, 0x14, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x7fffffff}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x888}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x25e7}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x81}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x9}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x71a}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0xffffff00}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20004000}, 0x8040) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xb8, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xa4, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf45f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae67}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e425ad6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe551}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x87f1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b35b4b8}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37f1f6a9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x156f}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc047}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdb43}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc878}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x791c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72334c97}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x42b6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd755}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x221de951}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x125f02f5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x330714fc}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4004090}, 0x4000000) 08:49:19 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:19 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @win={{0x7, 0x9, 0x9, 0x6}, 0x4, 0x3, &(0x7f0000000080)={{0x40, 0x3ff, 0x1df9, 0xb4}, &(0x7f0000000040)={{0x2, 0x6, 0x4, 0x4}, &(0x7f0000000000)={{0x7ca, 0x100992c, 0x5, 0x100}}}}, 0x0, &(0x7f0000000240)="96bf3f4f34031501a581c2ba778f2ad7d50af4c819d5b01f062a0d09b4185b21234f3e631f38a9b88f32fe029d0006a3f99894c085f394180289c3cf5869bc62a6ab32f4b14a7d8ec2d987450fd420ead648539a7ad52f1e443f7c90f169e5d9f2a371451c4e382d8d3c1c56e4b2a4adb2df66a1defc73e14e0e3d211ebf8d183556b39142ab9c8e709479773bd92d2b0c173020490a72163de2ff1dab9b2b9e5443d8dc116616dcc520efc3b1764b868da3949c66f001a05e5812b14faa034eb9344baf996c9511decdc2ab36db46df7630b4b6642809d260ea8d306fa97b94af4552b0f0410e821dc410fa7b1425a4c1b31b454a352b90575efa45d9b53d12f012dd5d4f1066809103f00d254941eff4d1a8afb459c13cf29cf1e57105b13cbe28f8202132b8344705adac8725ed635010e6af852935e42199fc0af6323fac2ae37f0943d7859408bb607642fc70d505604d8142031293dd3be6e77427f06fce60bfca985f35e4de4447da5edeef09483b1e44ea9fecc9275697928ca81b9e7aeeda68784243ad4bdd88d21163bfc845cf7a16a0d9ef1b7c380d98ed3bcddd20401de796b67f378ff8777eac4edb466c5adfb7278f44dcc9e3f7ed0551014113f20267cd53cc48bcbb73340cd5ce953c1a50f547457cdcf26d9f7c1c1085f1685562d2eaa388c5d4b9c7fe51df70c362898f175341f89fb52d4b2927d5e567c978c4d7f6cac895fee12a3555e6f24a9558bebdc492f0ce0e102ec5905665c08474473d0e8b0ef53e84f9012b8cc92dea2108ce6783a3934a0051d833493f8b568c23cf987a91dd2720c71e4dda642403fc9d7f919dfc3f4776675a39a965069544af81845804b714a0f55d779efec57ac329d99f497e3c0eeb4efbf2b9001259879f3d7d94577cfc26583492924c15360eae605c0d5b46370fade13bcdc5657478c42b611d68b2f5047d1c6d0d26a32573db98bcc5d4c4760c8869e89128cee9de9ffb0560bcd219e63adba0aaffb3207a93e16440341b57fadd91f499ee04ecf0ac92a0e4d3ed716be4db564a3c91099975abdc5cbac6a8d4d6739a7c7ec5063a65a07e691dbdbfa5f0fc9f735b730a5d142ac8f86a27ee10927adf5835ab7fe00757295aa4ce9bd0bc64a1d735dcf1382bac66185d6ee0ccb568aba62179733dd2f80f7605c1575bfacdec59ee003e72d26d04c30be93b2165a0d38bec5536e159ec8ff71d8d4238838da37b9959d83df364db4694f7530686666328dbbdee72e34b0b587dc642bc98d520e01d51233f362567b3787915f8304f67d23e76f8b617f238e2a163019785efdeaca3cac6c2f9062f73b045eddbecf1435d7df404e53d73f8f2a9b308bee6e648d79b710a07238a9bf12ae428b078c684bc4879a1fbe30b23a8ee80f8e0cceff5b36234d467064c6c900050257e04d21623275cd127810c625c934abe205382c275c2eb1fe6f18d2fc246e7a1b793f64ea0b46f650dc5e27d954126e361459f50aeee72c6cfd64f9da637963c3b4dd87426c89e31530a1550eede3227a8ca07481b6a83020254263a0815baeea28422a2d2c1b779034ac938cd5909ca6657bb87c6d582adf59f1e7f7fc62c9d71fe13e3093c1ece207b02efe93cd37b4c08b1f32c56c6dff7404bceafebc7c79395cb1f606b73de460fcf9ff8909f99dc177e29ccf642729635a8903421e8da69f1bf9943b3380f76447e5e342ac5e6e23963904123f7b82ebeddbc772eb89f57b9d9a048eaf4f8a945a01ef26d260a81e50b58d0d17f87505c3f187eee2590a6c208bcba19d7ac98936769d442f655a39a71df3cc74dd0acbf3ed137200a5647893b14ea43acc9bfe2f6eeec945fcddb9234a04e54d5eaf8ef2a22b2b09820c0f339393eb3da62726276337093a8012016a323b1b8d238a6ffe7710ab48606fd1b6484c7e071be68a3d29057c6d460df9f2496fe46cc158d2d12c1a2f4471a5de03713bc725563b54dc978234e61fd59d59fea19e52d57f9cde11a4d571c9f31b5b35814a5c903b1f050c1d3704222c16182250d61aae6b0b41493abe2ccc1ff7dea0915212d24cc82c5a0aec164215ef7953a339d8b7603db1fc5f32b7dcb6c499c8c6bff12699c79ca36393d7174372cdababd9a0e342fcfac53976b831e3bd04cdd9747ca359e429421b9e2f0bd1696a0b56085e09aa69ec2db1a1a30d24195ddcf5c31cb330e1fb8307bea29c93d2ed113af5c4db4ec497de818d1bd1046a217f0e9c7f5d0cd0413d21033a979edb0e8ed9c73874269bece0734c0b92605f32dc64b0d89fab9b26144055572a65980ddda47b20057b0f6d295d63e678cf4d5eec44b6eabd9db6faaa802c9d7a960fd30e6012e38243904ea6fb0b98a9d4a324ac6b3b71781610e1dcff97f7fc56a38fdcfc298a7cc58d72a58d68e5ee5a7e40354e6c5daad307aece1edb5ad3218ba04b1df98cf22c3eb014466da5fd52072db9f77516babf105ca0801c6a7cad31d3cc9e231de09aae747792101050509034c3b2631785543ff6fa5e436055f35b9f918d3d9b9606b47d3c943a2bc5aafd52fe368999456de25fdf605df00120ba5251ff354e9f9f2ecdc2f5f338a808217ce1afda454f7fa8d6870563edc3ff651fbe8c1694e462d0c1c92c136c34f3bf66da30774201fd5d127a34a2a165dc077d2698d99de36baf784986510abba309595c81df37bbf39a7e4bf2a360c431e28763c192058a4c905925c589bea989c9a376f99dc91aa87b0385a0258bbabb4ed56fb7e86efbd81497f28847f867de1cebcc4b03356106f2b67821eabee3d84cb7a019ab2db68da433c8fd635cf0b1350cec02335fb84708c642593c8d8b9abbf5df485a4a86478d22018601e66d87f8775516eab358ffafaa81aea6424c7668b28599cd117290958921a87b0f804dc20c30f3a00fd86e230e7818ba7c41a5245106281f30f9832feeaf12183ab6c5ca831911f05bd8573bc22166dd0a8c1ad5dd28bb40cd883c6a6e0ffdcd95c170f422e922f8b9eed89c22ed674b1f3d9e5dbabcd28e70ec6be97ac42be7afc57f29e462f9a59ccec56722800838fd9e9e801a844246ba86809b78ffc90e84652e5361860030ff125a8dcd7a38f0115d8488487d3e3201efb6956b76c1bbc7ec19ee1b4a1090881a970e28d847df726dffdbea90377b08a060642c03ec18637e3137390c570468cb6d885eb3f58aede2f084436d0ef5b5a34895afc14de1e6523ebf68611ab9c260a7396a21997dfe3d0107d5737e916788d6724537fa84949ccab69e00e1f777f47a3f63980cf35e311bfe0d1a3a70923c171e4754d5bea7de48d2de487b4ed9f009dfc07ebb8c94d7f8a997113c3fd0f686dba36431772d5b2c5f998f8bc2c611c82354bc436e13992d0095b026be9eb0a345c8b7179310ca3af15bf1466bd3eedecbc8eb221bf8d08fc18be3a838453bed932a187340d105b01b61ca6e87962a2f57127e63a6d273da3e01edac952551e32c56e98d9535150ceb6288f480340f3cd91f9019731193f38714b413ae83e3ba0f57bf39429b156749387c7f7f370c4adea01eb75cdc9560b89afa9e6c8ea55bc6ae144db43477bc940b4cfad8105e1e4c1b5ff6c9ac9191141f205979a5aa754f2be26991d5cc49fcc42076a4026e7b9cfa6712a9787ce97266b7bc0fadf5a8be08510b59f40f7618da1f4d8a28e934ed509081534a328a4ea216a2c5c5218d3be1468091ea1cd06ffeadfbff88d096215d521a83c393c3eed5335cad3566a74154fd3752fe616b394199502696fce3a1cdd16183d4c5ee8bf784107755570ecd6adb035cd2ce9b02eaadd3f410ac67bfb480f58dccfbdb9d342d0b2c1fd2949d67103bf9784367fd2724d666840dee1609be34acd2c372c7a83507757cafe8b79d3b87c94890bdd7fa1e69b07d594aec8f5ff826d1399581dd8ac329f5b797c3de792d3bb1fae8c24e9b3b9d8ee9231930e7146f01b9000511497f0cb7c6e379c2ed1bbeb5b68fac5e3fb0d1943cb8ae2773b1dbffd5a8348cfb9b8f5462c29790e68f7627a9a4128ecdbc14db1b8df761fddbe94cf483b985d915032d717ed4aeae8277b578f1e2afbcd075367c5ae76d8ac48edefb14a5d36d4f53786f52eb5957e6af108e5a51ffc73ad491bfa60ae951f085840a5f78537c19f262be1b3af6939019522d98bcd472c2ea776f36df3c16579834cb68321426dda4fa97781b23f60812e8f95b752ccfffd13de805e949ba7e5f92a5540dbd4de365272753b6cd115145770db4ceb8ee90eb644b6bb192bf577099c86249bb9256aeec6aec65050290d92c9145074c3c126954251eaa42321fffaf9c38eabffb3060ef62058a02ce7c49740ea4628e15c9a30bf4aff309ec503d42a93da45071ee44b54e4c006d50c64cf1672ee0b0fc6ac28baf4172a658335c0b98624f1d2d2a3aca26d23c1bafa20060f9888f0670a125513bbd9a34a5783f19468d11030936761fbbbb86c9d71caa5b18e7e8c65a1141c1f40c4d527c015f1c0a00b119abd6e8da3a7dae6bf4bbe484fa232987a10632eb979b6bdb87f6da5bec6c3ad37748980bf4ab1825ccb841a5052b56d01016668590c8d56d3e79dbb6acd820b8896d2547e5395ae6810d7cb0fdeea5971d748a621ac911883ea5261b5599bc42c965f6327318c68c961c2a3f24cb4ce79f96774b441a90f5fa905dd5083e89345758223be8b275ca8e2b98431789601f8651b47edd880f38377b5f1cf6c64c97958b3652f4ac3d3e91a598ce008127b2ca225b9df02adb506577a78696f8fc6b7426607a23631febd383f556f45aa0da58baa913ed401313301ea3b960fea9c8758d68fc44b5807740542de598f2eb40c3dacab2c869d30a8bb31c70034d74e461d965a4948b9d33d1f22908c02c8f7ec5c0a2045831df9c37edf8d918b3a902aca433b45a7c4a1a6dffac534ddf1bf7a3fc8f0456ec1892fa4b873cc9bb0eb42f739ed5d87c222d43ed8a5a110ec7e7e35e0ee4edf012bce706917710663211a10fe7387d45cfb518480753a4126e3f05a3dd65794254ece43e40e59766ef63c544810ec35f4e970e0d7957207d5b592438960a31d20c3048ddbe3d971546be02fb78ebc2844520998cf26cd1b58f3b3870ef81bea64efc86023f61304a4cca09690eb68a652fede13e9448cb9e35287ded7a9598cda5420bc323819fef0aac1ac99a1b297752e18f8982b26dd38cbf9228896d9c47cf6cd78da6d7233d535d2f1880090ed8c733c0d8a4739ee40e715f246514f61731f5673e0db16b0f39aca9008ac8d6844d8f4e484ee26197ba29b3d2057f61f4a0ef829d08f2e05ee2152e2a0c3acfdda5efbf9496a024a28158d5614582d225ce9e2e92f9946ac21873cedc2839528c5c1768cb9b9baa49fde327e3fb7ed3e92157bbf293f3bfeef5e587adbfd210917811a525d35610ee370f8a3bca21d798cc7d00d9c4262f5135d4c659707b439cc88d4db59eac2c3cbc54328d5d93b4e41c73d5cf9857f69e0858913eb3529a8532e508a041643c8d31dc5080b452d12b6b2a7e4f139c7754c29c80a01963481e98236d94164b1af00e90fddf38779328af8a6cee967988aa6b124ac87b8e19d9765112705ba7684af01d7f7aa68033ea293cab785f3b6c9b4f7297bfae888805f305795c84f21c1be9925742247818f9978dadf201bfe11b603fa72cce5a24f27bf143a072a1e5cbafb5efe8ecd494a2d83192cc1499fd9986e3324b15da0e7f69a08047abb9b0fa40ee3460d0707", 0x1f}}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000100)={0x3, 0x30313953, 0x1, @discrete={0x200, 0x5}}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000001240)=0x3) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @win={{0x7, 0x9, 0x9, 0x6}, 0x4, 0x3, &(0x7f0000000080)={{0x40, 0x3ff, 0x1df9, 0xb4}, &(0x7f0000000040)={{0x2, 0x6, 0x4, 0x4}, &(0x7f0000000000)={{0x7ca, 0x100992c, 0x5, 0x100}}}}, 0x0, &(0x7f0000000240)="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", 0x1f}}}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000100)={0x3, 0x30313953, 0x1, @discrete={0x200, 0x5}}) (async) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000001240)=0x3) (async) 08:49:19 executing program 2: write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x79, 0x2}, 0x7) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x891e26dc5d7c2247, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) write$P9_RGETLOCK(r0, &(0x7f00000000c0)={0x1e, 0x37, 0x1, {0x2, 0x32c, 0x3a}}, 0x1e) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x799, 0x2) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async) ioctl$PTP_PIN_SETFUNC2(r2, 0x40603d10, &(0x7f0000000140)={'\x00', 0x6, 0x3}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xfffffff8, 0x6}) 08:49:19 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) r2 = syz_open_dev$mouse(&(0x7f0000000040), 0x9, 0x20000) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)=@multiplanar_overlay={0x3ff, 0x1, 0x4, 0x0, 0x7, {r3, r4/1000+10000}, {0x1, 0x2, 0x8, 0x8, 0x24, 0x0, "124d5c1b"}, 0x5, 0x3, {&(0x7f0000000100)=[{0x3, 0x7, {0x4}, 0x4}, {0x5, 0x7fff, {0x101}, 0xffffffdb}]}, 0x9, 0x0, r1}) write$P9_RFSYNC(r1, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7) 08:49:19 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) 08:49:19 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0x101, 0x7600000, 0x1, {0x3, @sliced={0x80, [0xffe3, 0x3, 0x81, 0x4, 0x100, 0x2, 0x5, 0x1ff, 0x6, 0x6, 0x5, 0xfff, 0x1000, 0x1f, 0x7ca4, 0x8, 0x0, 0x5, 0x792, 0x7, 0x5, 0x7f, 0x4, 0x0, 0x3ff, 0x4, 0x7ee, 0x400, 0xced, 0x8000, 0x401, 0xa23c, 0x0, 0x480, 0x84, 0x5, 0x2, 0x3, 0x8000, 0x5, 0x0, 0x1, 0xc8, 0x200, 0x20, 0x7, 0x6, 0x1], 0xffffffff}}, 0x94b1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0xfffffffc}}}) 08:49:19 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) r2 = syz_open_dev$mouse(&(0x7f0000000040), 0x9, 0x20000) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) (rerun: 64) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)=@multiplanar_overlay={0x3ff, 0x1, 0x4, 0x0, 0x7, {r3, r4/1000+10000}, {0x1, 0x2, 0x8, 0x8, 0x24, 0x0, "124d5c1b"}, 0x5, 0x3, {&(0x7f0000000100)=[{0x3, 0x7, {0x4}, 0x4}, {0x5, 0x7fff, {0x101}, 0xffffffdb}]}, 0x9, 0x0, r1}) write$P9_RFSYNC(r1, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7) 08:49:19 executing program 5: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x88, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip_vti0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x810}, 0x800) (async, rerun: 64) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x108, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x6c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "416c85b28d17b98113c44e2f036005bd70cd678026af6f0a641f66e7a93ecfa8"}}, @TIPC_NLA_NODE_ID={0x1d, 0x3, "cfcaa892c8f7ab3a59cf1e82e9d9d6eaf1de66011414abbc22"}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40008d0}, 0x1) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xcc, r0, 0x14, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x7fffffff}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x888}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x25e7}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x81}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x9}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x71a}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0xffffff00}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20004000}, 0x8040) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xb8, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xa4, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf45f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae67}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e425ad6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe551}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x87f1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b35b4b8}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37f1f6a9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x156f}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc047}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdb43}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc878}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x791c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72334c97}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x42b6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd755}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x221de951}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x125f02f5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x330714fc}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4004090}, 0x4000000) 08:49:19 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @win={{0x7, 0x9, 0x9, 0x6}, 0x4, 0x3, &(0x7f0000000080)={{0x40, 0x3ff, 0x1df9, 0xb4}, &(0x7f0000000040)={{0x2, 0x6, 0x4, 0x4}, &(0x7f0000000000)={{0x7ca, 0x100992c, 0x5, 0x100}}}}, 0x0, &(0x7f0000000240)="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", 0x1f}}}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000100)={0x3, 0x30313953, 0x1, @discrete={0x200, 0x5}}) (async) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000001240)=0x3) 08:49:19 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x480000, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)=@mmap={0x200, 0x1, 0x4, 0x800, 0x180, {}, {0x5, 0xc, 0x81, 0x6, 0x1f, 0xf9, "f2eff57b"}, 0x2, 0x1, {}, 0x536c}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000004c0)={0x0, 0x1, 0x2, "a191c0c756b8bb9bee4d541e6b776ac0998101fa2cd9840778ee48989acf1085", 0x32314742}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000140)={0x2b4, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x56c4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe049}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_NODE={0xa8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x92, 0x3, "a2b8de463a12eb47085bcfe4ace8b3a6cf4463057b8565251ec3a5a21dd4518e3f1f9ad8ee246d684062ebd8d94f9daf587348f24e26134697efe1f73031e5ad79888280775551452ad369789cdbc5c8bfd9bb405d52b70f2679c400623eb4c32c3db8165a569c95f270fa6f71a10ca8d2f7aa8b5213a54759e8fe849398bee4cf8264c02b128073c6cd0fe61c3d"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x4}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x641}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7e5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x59}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcdbc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x10040000}, 0x0) 08:49:19 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async, rerun: 64) r2 = syz_open_dev$mouse(&(0x7f0000000040), 0x9, 0x20000) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)=@multiplanar_overlay={0x3ff, 0x1, 0x4, 0x0, 0x7, {r3, r4/1000+10000}, {0x1, 0x2, 0x8, 0x8, 0x24, 0x0, "124d5c1b"}, 0x5, 0x3, {&(0x7f0000000100)=[{0x3, 0x7, {0x4}, 0x4}, {0x5, 0x7fff, {0x101}, 0xffffffdb}]}, 0x9, 0x0, r1}) (async) write$P9_RFSYNC(r1, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7) 08:49:19 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x79d, 0x2) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async) 08:49:19 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0x101, 0x7600000, 0x1, {0x3, @sliced={0x80, [0xffe3, 0x3, 0x81, 0x4, 0x100, 0x2, 0x5, 0x1ff, 0x6, 0x6, 0x5, 0xfff, 0x1000, 0x1f, 0x7ca4, 0x8, 0x0, 0x5, 0x792, 0x7, 0x5, 0x7f, 0x4, 0x0, 0x3ff, 0x4, 0x7ee, 0x400, 0xced, 0x8000, 0x401, 0xa23c, 0x0, 0x480, 0x84, 0x5, 0x2, 0x3, 0x8000, 0x5, 0x0, 0x1, 0xc8, 0x200, 0x20, 0x7, 0x6, 0x1], 0xffffffff}}, 0x94b1}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0xfffffffc}}}) 08:49:19 executing program 3: syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x9, 0x4, {0x0, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb1958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b17f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41ea5dadba2ca2a144f209ea6af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613000000000000000000000000000000000a00"}}) 08:49:19 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x480000, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)=@mmap={0x200, 0x1, 0x4, 0x800, 0x180, {}, {0x5, 0xc, 0x81, 0x6, 0x1f, 0xf9, "f2eff57b"}, 0x2, 0x1, {}, 0x536c}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000004c0)={0x0, 0x1, 0x2, "a191c0c756b8bb9bee4d541e6b776ac0998101fa2cd9840778ee48989acf1085", 0x32314742}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000140)={0x2b4, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x56c4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe049}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_NODE={0xa8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x92, 0x3, "a2b8de463a12eb47085bcfe4ace8b3a6cf4463057b8565251ec3a5a21dd4518e3f1f9ad8ee246d684062ebd8d94f9daf587348f24e26134697efe1f73031e5ad79888280775551452ad369789cdbc5c8bfd9bb405d52b70f2679c400623eb4c32c3db8165a569c95f270fa6f71a10ca8d2f7aa8b5213a54759e8fe849398bee4cf8264c02b128073c6cd0fe61c3d"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x4}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x641}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7e5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x59}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcdbc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x10040000}, 0x0) 08:49:20 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0x101, 0x7600000, 0x1, {0x3, @sliced={0x80, [0xffe3, 0x3, 0x81, 0x4, 0x100, 0x2, 0x5, 0x1ff, 0x6, 0x6, 0x5, 0xfff, 0x1000, 0x1f, 0x7ca4, 0x8, 0x0, 0x5, 0x792, 0x7, 0x5, 0x7f, 0x4, 0x0, 0x3ff, 0x4, 0x7ee, 0x400, 0xced, 0x8000, 0x401, 0xa23c, 0x0, 0x480, 0x84, 0x5, 0x2, 0x3, 0x8000, 0x5, 0x0, 0x1, 0xc8, 0x200, 0x20, 0x7, 0x6, 0x1], 0xffffffff}}, 0x94b1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0xfffffffc}}}) 08:49:20 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) 08:49:20 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="36300ba4ec8efdc1ed9f6db4724935a284fecc90668a9655d67c4f1f842f4bbbad7d110e67f4cc6ba3529dca9f9fcf922cc1bd45a9689aaf20217a26ad049f6cb9265e89ef0d4df350cd81f9030cb4419fec0e843a825ffb4a2000000000000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x8800}, 0x20000005) syz_open_dev$mouse(&(0x7f0000000500), 0xee, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x0, 0x400) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000140)={0xffffffff, 0x59}) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="a0000000", @ANYRES16=0x0, @ANYBLOB="0037c45157b90c547f25010000001400020064766d727030000000000000000000000900010073797a32000000000900030073797a32000000000900010073797a3200000000daeda2502c6d3f14000200766574683100000000000000000000000900030073797a32000000000900010073797a31000000000900010073797a310000000014000200626f6e643000000000000000000000000500040001000000"], 0xa0}, 0x1, 0x0, 0x0, 0x4000084}, 0x40004) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000004c0)={0x4, 0x4, 0x2}) 08:49:20 executing program 3: syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) (async) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x9, 0x4, {0x0, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb1958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b17f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41ea5dadba2ca2a144f209ea6af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613000000000000000000000000000000000a00"}}) 08:49:20 executing program 5: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x88, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip_vti0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x810}, 0x800) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x108, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x6c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "416c85b28d17b98113c44e2f036005bd70cd678026af6f0a641f66e7a93ecfa8"}}, @TIPC_NLA_NODE_ID={0x1d, 0x3, "cfcaa892c8f7ab3a59cf1e82e9d9d6eaf1de66011414abbc22"}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40008d0}, 0x1) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xcc, r0, 0x14, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x7fffffff}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x888}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x25e7}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x81}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x9}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x71a}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0xffffff00}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20004000}, 0x8040) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xb8, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xa4, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf45f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae67}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e425ad6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe551}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x87f1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b35b4b8}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37f1f6a9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x156f}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc047}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdb43}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc878}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x791c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72334c97}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x42b6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd755}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x221de951}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x125f02f5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x330714fc}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4004090}, 0x4000000) 08:49:20 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x480000, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)=@mmap={0x200, 0x1, 0x4, 0x800, 0x180, {}, {0x5, 0xc, 0x81, 0x6, 0x1f, 0xf9, "f2eff57b"}, 0x2, 0x1, {}, 0x536c}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000004c0)={0x0, 0x1, 0x2, "a191c0c756b8bb9bee4d541e6b776ac0998101fa2cd9840778ee48989acf1085", 0x32314742}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000140)={0x2b4, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x56c4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe049}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_NODE={0xa8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x92, 0x3, "a2b8de463a12eb47085bcfe4ace8b3a6cf4463057b8565251ec3a5a21dd4518e3f1f9ad8ee246d684062ebd8d94f9daf587348f24e26134697efe1f73031e5ad79888280775551452ad369789cdbc5c8bfd9bb405d52b70f2679c400623eb4c32c3db8165a569c95f270fa6f71a10ca8d2f7aa8b5213a54759e8fe849398bee4cf8264c02b128073c6cd0fe61c3d"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x4}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x641}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7e5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x59}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcdbc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x10040000}, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x480000, 0x0) (async) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)=@mmap={0x200, 0x1, 0x4, 0x800, 0x180, {}, {0x5, 0xc, 0x81, 0x6, 0x1f, 0xf9, "f2eff57b"}, 0x2, 0x1, {}, 0x536c}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000004c0)={0x0, 0x1, 0x2, "a191c0c756b8bb9bee4d541e6b776ac0998101fa2cd9840778ee48989acf1085", 0x32314742}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000140)={0x2b4, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x56c4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe049}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_NODE={0xa8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x92, 0x3, "a2b8de463a12eb47085bcfe4ace8b3a6cf4463057b8565251ec3a5a21dd4518e3f1f9ad8ee246d684062ebd8d94f9daf587348f24e26134697efe1f73031e5ad79888280775551452ad369789cdbc5c8bfd9bb405d52b70f2679c400623eb4c32c3db8165a569c95f270fa6f71a10ca8d2f7aa8b5213a54759e8fe849398bee4cf8264c02b128073c6cd0fe61c3d"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x4}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x641}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7e5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x59}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcdbc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x10040000}, 0x0) (async) 08:49:20 executing program 0: sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd7000ffdbdf250100000005001e47435b76db943a020006000080"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x4000, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe], 0x1}}}) 08:49:20 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x1a8, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ee4c85e8"}, 0x0, 0x2, {0x0}, 0x101}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x8, 0x1}) 08:49:20 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) (async) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="36300ba4ec8efdc1ed9f6db4724935a284fecc90668a9655d67c4f1f842f4bbbad7d110e67f4cc6ba3529dca9f9fcf922cc1bd45a9689aaf20217a26ad049f6cb9265e89ef0d4df350cd81f9030cb4419fec0e843a825ffb4a2000000000000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fedbdf2517000000100004800900010073797a31000000001c00018008000300060000000d0001007564703a73797a30000000000c00038008000300080000002c0001800c00028008000300ff0100001c00028008000300080000000800020000100000080001000b0000001400098008000100000000000800010001000080100002800800010000fcff0104000400300004800c00078008000300090000001300010062726f6164636173742d6c696e6b00000900010073797a30000000002c00098008000100ffffff7f08000200fffeffff080002003f00000008000200a200000008000200080000001400038008000200000000000800010080000000"], 0x10c}, 0x1, 0x0, 0x0, 0x8800}, 0x20000005) (async) syz_open_dev$mouse(&(0x7f0000000500), 0xee, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x0, 0x400) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000140)={0xffffffff, 0x59}) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="a0000000", @ANYRES16=0x0, @ANYBLOB="0037c45157b90c547f25010000001400020064766d727030000000000000000000000900010073797a32000000000900030073797a32000000000900010073797a3200000000daeda2502c6d3f14000200766574683100000000000000000000000900030073797a32000000000900010073797a31000000000900010073797a310000000014000200626f6e643000000000000000000000000500040001000000"], 0xa0}, 0x1, 0x0, 0x0, 0x4000084}, 0x40004) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000004c0)={0x4, 0x4, 0x2}) 08:49:20 executing program 3: syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x9, 0x4, {0x0, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb1958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b17f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41ea5dadba2ca2a144f209ea6af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613000000000000000000000000000000000a00"}}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) (async) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x9, 0x4, {0x0, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb1958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b17f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41ea5dadba2ca2a144f209ea6af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613000000000000000000000000000000000a00"}}) (async) 08:49:20 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x1a8, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ee4c85e8"}, 0x0, 0x2, {0x0}, 0x101}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x8, 0x1}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x1a8, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ee4c85e8"}, 0x0, 0x2, {0x0}, 0x101}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x8, 0x1}) (async) 08:49:20 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x164, r2, 0x0, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x76e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xde8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffeffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x95}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x63c}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x73}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x24044809}, 0x8000) 08:49:20 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x3, 0xfffffffa}) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000000)=0x3) 08:49:20 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="36300ba4ec8efdc1ed9f6db4724935a284fecc90668a9655d67c4f1f842f4bbbad7d110e67f4cc6ba3529dca9f9fcf922cc1bd45a9689aaf20217a26ad049f6cb9265e89ef0d4df350cd81f9030cb4419fec0e843a825ffb4a2000000000000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x8800}, 0x20000005) syz_open_dev$mouse(&(0x7f0000000500), 0xee, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x0, 0x400) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000140)={0xffffffff, 0x59}) (async) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="a0000000", @ANYRES16=0x0, @ANYBLOB="0037c45157b90c547f25010000001400020064766d727030000000000000000000000900010073797a32000000000900030073797a32000000000900010073797a3200000000daeda2502c6d3f14000200766574683100000000000000000000000900030073797a32000000000900010073797a31000000000900010073797a310000000014000200626f6e643000000000000000000000000500040001000000"], 0xa0}, 0x1, 0x0, 0x0, 0x4000084}, 0x40004) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000004c0)={0x4, 0x4, 0x2}) 08:49:20 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x164, r2, 0x0, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x76e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xde8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffeffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x95}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x63c}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x73}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x24044809}, 0x8000) 08:49:20 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x1a8, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ee4c85e8"}, 0x0, 0x2, {0x0}, 0x101}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x8, 0x1}) 08:49:20 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @pix={0x7, 0x1, 0x20323159, 0x6, 0x65, 0x967a, 0x0, 0x3f, 0x1, 0x2, 0x1, 0x2}}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x2, @pix_mp={0x6adc2487, 0x3, 0x38414262, 0x5, 0xa, [{0x9, 0x1}, {0xffffffa7, 0x2}, {0x1, 0x2}, {0xfffffffd, 0x8}, {0xffffffff, 0x7fffffff}, {0x7fff, 0xff}, {0xa61, 0x1}, {0x3ff, 0x3509}], 0x2, 0xfc, 0x8, 0x2, 0x1}}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000140)={0x4, 0x0, 0x9, 0x80080}) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000180)) 08:49:20 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x3, 0xfffffffa}) (async) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000000)=0x3) 08:49:20 executing program 0: sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd7000ffdbdf250100000005001e47435b76db943a020006000080"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x4000, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe], 0x1}}}) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd7000ffdbdf250100000005001e47435b76db943a020006000080"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x4000, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe], 0x1}}}) (async) 08:49:20 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000140)={0xa, {0x7, 0x81, 0x5}}, 0xa) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x125800, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@multiplanar_mmap={0x2, 0x1, 0x4, 0x40, 0x2, {}, {0x3, 0x4, 0x4, 0x81, 0x9, 0x2, "999db77a"}, 0x1, 0x1, {&(0x7f0000000240)=[{0xcc, 0x89b, {0xf958}, 0xe9ed}, {0x5, 0x81, {0x7}, 0x3}]}, 0x79d65c7b, 0x0, r2}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000100)={0x8001, 0x30385056, 0x1, @stepwise={0x200000, 0x10001, 0x3f, 0xdb70, 0x100, 0x7}}) 08:49:20 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x164, r2, 0x0, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x76e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xde8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffeffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x95}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x63c}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x73}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x24044809}, 0x8000) 08:49:20 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @sdr={0x6720c64, 0x40}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x7f, 0x3, 0x1, "ee1ab5884d4fc2b6b3d7c9d9d4f28cf5fa1478057f2f1c6b98b984d522cb88c7", 0x32314247}) 08:49:20 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x3, 0xfffffffa}) (async) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000000)=0x3) 08:49:20 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @pix={0x7, 0x1, 0x20323159, 0x6, 0x65, 0x967a, 0x0, 0x3f, 0x1, 0x2, 0x1, 0x2}}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x2, @pix_mp={0x6adc2487, 0x3, 0x38414262, 0x5, 0xa, [{0x9, 0x1}, {0xffffffa7, 0x2}, {0x1, 0x2}, {0xfffffffd, 0x8}, {0xffffffff, 0x7fffffff}, {0x7fff, 0xff}, {0xa61, 0x1}, {0x3ff, 0x3509}], 0x2, 0xfc, 0x8, 0x2, 0x1}}) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000140)={0x4, 0x0, 0x9, 0x80080}) (async) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000180)) 08:49:20 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000140)={0xa, {0x7, 0x81, 0x5}}, 0xa) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x125800, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@multiplanar_mmap={0x2, 0x1, 0x4, 0x40, 0x2, {}, {0x3, 0x4, 0x4, 0x81, 0x9, 0x2, "999db77a"}, 0x1, 0x1, {&(0x7f0000000240)=[{0xcc, 0x89b, {0xf958}, 0xe9ed}, {0x5, 0x81, {0x7}, 0x3}]}, 0x79d65c7b, 0x0, r2}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000100)={0x8001, 0x30385056, 0x1, @stepwise={0x200000, 0x10001, 0x3f, 0xdb70, 0x100, 0x7}}) 08:49:20 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @sdr={0x6720c64, 0x40}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x7f, 0x3, 0x1, "ee1ab5884d4fc2b6b3d7c9d9d4f28cf5fa1478057f2f1c6b98b984d522cb88c7", 0x32314247}) 08:49:20 executing program 3: ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x3) syz_open_dev$mouse(&(0x7f0000000000), 0xb, 0x62000) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}, 0x1}) 08:49:20 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x80000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000001c0)={0x2, @win={{0xffff0000, 0x6, 0x7ff, 0x633}, 0x2, 0x8, &(0x7f0000000040)={{0x2, 0x0, 0x7fffffff, 0x100}}, 0x1000, &(0x7f0000000100)="de1ca02b0b55610e76b4a2f45704de9de29be64fc9d79f27ab33f08e88df5063374e93844632dbd9b9434ec10a6300d197d0726bda71497a475d81cde059cf5106586248783d0cc97e4db0c066fb27d4aebb6cc0db34bfa3c174c1fe8fffa442f67cc37127fcd935587a8759bbc6a48c76ebbe5ff139948296ca2e93654f8651441c14c8b66108d3719ab3b5d7a93ed5aa91752c38f6cdcdd781", 0xfa}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000340)={0x8, 0x1, 0x1, 0x0, 0x7}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f00000002c0)={r2, 0x3}) 08:49:20 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000140)={0xa, {0x7, 0x81, 0x5}}, 0xa) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x125800, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@multiplanar_mmap={0x2, 0x1, 0x4, 0x40, 0x2, {}, {0x3, 0x4, 0x4, 0x81, 0x9, 0x2, "999db77a"}, 0x1, 0x1, {&(0x7f0000000240)=[{0xcc, 0x89b, {0xf958}, 0xe9ed}, {0x5, 0x81, {0x7}, 0x3}]}, 0x79d65c7b, 0x0, r2}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000100)={0x8001, 0x30385056, 0x1, @stepwise={0x200000, 0x10001, 0x3f, 0xdb70, 0x100, 0x7}}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000140)={0xa, {0x7, 0x81, 0x5}}, 0xa) (async) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x125800, 0x0) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@multiplanar_mmap={0x2, 0x1, 0x4, 0x40, 0x2, {}, {0x3, 0x4, 0x4, 0x81, 0x9, 0x2, "999db77a"}, 0x1, 0x1, {&(0x7f0000000240)=[{0xcc, 0x89b, {0xf958}, 0xe9ed}, {0x5, 0x81, {0x7}, 0x3}]}, 0x79d65c7b, 0x0, r2}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000100)={0x8001, 0x30385056, 0x1, @stepwise={0x200000, 0x10001, 0x3f, 0xdb70, 0x100, 0x7}}) (async) 08:49:20 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @sdr={0x6720c64, 0x40}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x7f, 0x3, 0x1, "ee1ab5884d4fc2b6b3d7c9d9d4f28cf5fa1478057f2f1c6b98b984d522cb88c7", 0x32314247}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @sdr={0x6720c64, 0x40}}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x7f, 0x3, 0x1, "ee1ab5884d4fc2b6b3d7c9d9d4f28cf5fa1478057f2f1c6b98b984d522cb88c7", 0x32314247}) (async) 08:49:21 executing program 0: sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd7000ffdbdf250100000005001e47435b76db943a020006000080"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x4000, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe], 0x1}}}) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd7000ffdbdf250100000005001e47435b76db943a020006000080"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x4000, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe], 0x1}}}) (async) 08:49:21 executing program 3: ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x3) syz_open_dev$mouse(&(0x7f0000000000), 0xb, 0x62000) (async) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}, 0x1}) 08:49:21 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) 08:49:21 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xf4331070c495ecb8, 0x10, 0xa12c, 0x0, 0xd3, 0x5, &(0x7f0000000340)="c9f80e2bad3d87f30eb12cea20efae6a1d642395f777368978d23de001ba4474f105f000b3d970c1b37ec81f3d6612ff386364bb9c8d204d4331aca6b25c84b442990773f2d25618cb478e9e6e2b8e25edf4c77f6c755cf8b3cf339edc6b9dfc117235354ea3042ac1ff7a09f466c9d2ad069706df3d5c90772abe8e8ad938e69d519f23c536295a87352d34f04ce92ce663549cfef58d4d694e137083d4f386c73b27dcf9f9eb00297fa80de4d8696e5ae9c8f8bb97132796795efc791d9edeadffdd14317046fd64240d50b1b28e01b4a0cb"}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000100)={0x1, 0x1, 0x3, {0x2, @raw_data="22c1576163178705fcd661ac3d20172505c9f0a95bd7b0d2ca651f92b5633e62943142db875d809e3623638ce5a7b3cbef26e7c063e66fed7c9db7438a9459f537174f15e258c800435934a0e46f94184263dfba8dd1f62762f0af9e5d07ec2aed15e6122aa28a96df2b1d86fe9d08a8ee0ba81f6c4d80339d480642a23f1efc186c30d7696dbbe68901492a2e9f2c2b702d609fe0a4d816228cf5ac5627354149065d1939b918f54fd129785b196197fc05b365de14dea467df1a3726ba3aa60821a76fb8212861"}, 0x4}) 08:49:21 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @pix={0x7, 0x1, 0x20323159, 0x6, 0x65, 0x967a, 0x0, 0x3f, 0x1, 0x2, 0x1, 0x2}}}) (async, rerun: 64) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 64) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x2, @pix_mp={0x6adc2487, 0x3, 0x38414262, 0x5, 0xa, [{0x9, 0x1}, {0xffffffa7, 0x2}, {0x1, 0x2}, {0xfffffffd, 0x8}, {0xffffffff, 0x7fffffff}, {0x7fff, 0xff}, {0xa61, 0x1}, {0x3ff, 0x3509}], 0x2, 0xfc, 0x8, 0x2, 0x1}}) (async, rerun: 64) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (rerun: 64) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000140)={0x4, 0x0, 0x9, 0x80080}) (async, rerun: 64) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000180)) (rerun: 64) 08:49:21 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x80000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000001c0)={0x2, @win={{0xffff0000, 0x6, 0x7ff, 0x633}, 0x2, 0x8, &(0x7f0000000040)={{0x2, 0x0, 0x7fffffff, 0x100}}, 0x1000, &(0x7f0000000100)="de1ca02b0b55610e76b4a2f45704de9de29be64fc9d79f27ab33f08e88df5063374e93844632dbd9b9434ec10a6300d197d0726bda71497a475d81cde059cf5106586248783d0cc97e4db0c066fb27d4aebb6cc0db34bfa3c174c1fe8fffa442f67cc37127fcd935587a8759bbc6a48c76ebbe5ff139948296ca2e93654f8651441c14c8b66108d3719ab3b5d7a93ed5aa91752c38f6cdcdd781", 0xfa}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000340)={0x8, 0x1, 0x1, 0x0, 0x7}) (async) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f00000002c0)={r2, 0x3}) 08:49:21 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xf4331070c495ecb8, 0x10, 0xa12c, 0x0, 0xd3, 0x5, &(0x7f0000000340)="c9f80e2bad3d87f30eb12cea20efae6a1d642395f777368978d23de001ba4474f105f000b3d970c1b37ec81f3d6612ff386364bb9c8d204d4331aca6b25c84b442990773f2d25618cb478e9e6e2b8e25edf4c77f6c755cf8b3cf339edc6b9dfc117235354ea3042ac1ff7a09f466c9d2ad069706df3d5c90772abe8e8ad938e69d519f23c536295a87352d34f04ce92ce663549cfef58d4d694e137083d4f386c73b27dcf9f9eb00297fa80de4d8696e5ae9c8f8bb97132796795efc791d9edeadffdd14317046fd64240d50b1b28e01b4a0cb"}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000100)={0x1, 0x1, 0x3, {0x2, @raw_data="22c1576163178705fcd661ac3d20172505c9f0a95bd7b0d2ca651f92b5633e62943142db875d809e3623638ce5a7b3cbef26e7c063e66fed7c9db7438a9459f537174f15e258c800435934a0e46f94184263dfba8dd1f62762f0af9e5d07ec2aed15e6122aa28a96df2b1d86fe9d08a8ee0ba81f6c4d80339d480642a23f1efc186c30d7696dbbe68901492a2e9f2c2b702d609fe0a4d816228cf5ac5627354149065d1939b918f54fd129785b196197fc05b365de14dea467df1a3726ba3aa60821a76fb8212861"}, 0x4}) 08:49:21 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x80000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000001c0)={0x2, @win={{0xffff0000, 0x6, 0x7ff, 0x633}, 0x2, 0x8, &(0x7f0000000040)={{0x2, 0x0, 0x7fffffff, 0x100}}, 0x1000, &(0x7f0000000100)="de1ca02b0b55610e76b4a2f45704de9de29be64fc9d79f27ab33f08e88df5063374e93844632dbd9b9434ec10a6300d197d0726bda71497a475d81cde059cf5106586248783d0cc97e4db0c066fb27d4aebb6cc0db34bfa3c174c1fe8fffa442f67cc37127fcd935587a8759bbc6a48c76ebbe5ff139948296ca2e93654f8651441c14c8b66108d3719ab3b5d7a93ed5aa91752c38f6cdcdd781", 0xfa}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000340)={0x8, 0x1, 0x1, 0x0, 0x7}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f00000002c0)={r2, 0x3}) syz_open_dev$vim2m(&(0x7f0000000300), 0x80000001, 0x2) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000001c0)={0x2, @win={{0xffff0000, 0x6, 0x7ff, 0x633}, 0x2, 0x8, &(0x7f0000000040)={{0x2, 0x0, 0x7fffffff, 0x100}}, 0x1000, &(0x7f0000000100)="de1ca02b0b55610e76b4a2f45704de9de29be64fc9d79f27ab33f08e88df5063374e93844632dbd9b9434ec10a6300d197d0726bda71497a475d81cde059cf5106586248783d0cc97e4db0c066fb27d4aebb6cc0db34bfa3c174c1fe8fffa442f67cc37127fcd935587a8759bbc6a48c76ebbe5ff139948296ca2e93654f8651441c14c8b66108d3719ab3b5d7a93ed5aa91752c38f6cdcdd781", 0xfa}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000340)={0x8, 0x1, 0x1, 0x0, 0x7}) (async) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f00000002c0)={r2, 0x3}) (async) 08:49:21 executing program 3: ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x3) (async) syz_open_dev$mouse(&(0x7f0000000000), 0xb, 0x62000) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}, 0x1}) 08:49:21 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) 08:49:21 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) (async) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xf4331070c495ecb8, 0x10, 0xa12c, 0x0, 0xd3, 0x5, &(0x7f0000000340)="c9f80e2bad3d87f30eb12cea20efae6a1d642395f777368978d23de001ba4474f105f000b3d970c1b37ec81f3d6612ff386364bb9c8d204d4331aca6b25c84b442990773f2d25618cb478e9e6e2b8e25edf4c77f6c755cf8b3cf339edc6b9dfc117235354ea3042ac1ff7a09f466c9d2ad069706df3d5c90772abe8e8ad938e69d519f23c536295a87352d34f04ce92ce663549cfef58d4d694e137083d4f386c73b27dcf9f9eb00297fa80de4d8696e5ae9c8f8bb97132796795efc791d9edeadffdd14317046fd64240d50b1b28e01b4a0cb"}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000100)={0x1, 0x1, 0x3, {0x2, @raw_data="22c1576163178705fcd661ac3d20172505c9f0a95bd7b0d2ca651f92b5633e62943142db875d809e3623638ce5a7b3cbef26e7c063e66fed7c9db7438a9459f537174f15e258c800435934a0e46f94184263dfba8dd1f62762f0af9e5d07ec2aed15e6122aa28a96df2b1d86fe9d08a8ee0ba81f6c4d80339d480642a23f1efc186c30d7696dbbe68901492a2e9f2c2b702d609fe0a4d816228cf5ac5627354149065d1939b918f54fd129785b196197fc05b365de14dea467df1a3726ba3aa60821a76fb8212861"}, 0x4}) 08:49:21 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000240)={0x2, @sliced={0x2, [0x5, 0x1, 0x72, 0x8, 0x7ff, 0xb9d2, 0x31, 0x1, 0x0, 0xffff, 0x7, 0xff00, 0x0, 0x8, 0xaa8c, 0x2, 0x3, 0x2, 0xff, 0x2, 0x81, 0x1, 0x1f, 0xb86, 0xc5, 0x8000, 0x7, 0xa7a, 0x3ff, 0x0, 0x8001, 0xff01, 0x8, 0xf4ed, 0x5, 0x4, 0x38c1, 0x3, 0x82c, 0x7, 0x100, 0x7ff, 0x8, 0x400, 0x6, 0xfffb, 0x5, 0x5], 0xa5b}}) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x1) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x20, 0x2, 0x3, 0x0, 0x1}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000340)={0xa2, 0x38414262, 0x2, @discrete={0xffff, 0x6}}) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) ioctl$USBDEVFS_RESETEP(r4, 0x80045503, &(0x7f0000000080)={0xb}) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x7, 0x1, {0x3, '@-:'}}, 0xc) 08:49:21 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x3, 0x65, 0x3, {0x1, @pix={0xffff, 0x9000, 0x31384142, 0x7, 0x8, 0x7cc, 0xa, 0x3, 0x0, 0x4, 0x0, 0x2}}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r1}, 0x8) ioctl$PTP_PIN_SETFUNC(r2, 0x40603d07, &(0x7f0000000240)={'\x00', 0x6, 0x0, 0x9}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000cc0), 0x6) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f00000003c0)=@multiplanar_overlay={0x8, 0x2, 0x4, 0xcb920d3bde3e8b4, 0x1, {r4, r5/1000+10000}, {0x1, 0x8, 0x0, 0x0, 0x40, 0xfd, "52c25d1e"}, 0x89c, 0x3, {&(0x7f0000000340)=[{0x3, 0xfffffffb, {0x40}, 0x8001}, {0x2, 0x1, {0x4}, 0x8}]}, 0x10000}) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000000)={0x3, @sliced={0x3f, [0x200, 0x7, 0x200, 0x3, 0x2, 0x7, 0x3, 0xf9, 0x63, 0x7, 0x888, 0x5, 0x81, 0x0, 0x40, 0x3, 0x9, 0x9, 0x5, 0x6f, 0x1, 0x3, 0x2, 0x1, 0x5, 0xffff, 0x44, 0x4, 0x101, 0x3, 0x0, 0x2095, 0x8, 0x882e, 0x0, 0x0, 0x3, 0x5, 0x7, 0x6, 0x20, 0x0, 0x4, 0x5, 0xfff, 0xf783, 0x8, 0xa52], 0x2}}) 08:49:21 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async) 08:49:21 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x22c, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x26a}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, 0x5}}}}]}, @TIPC_NLA_NODE={0x98, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3e, 0x3, "934ef3d62aa9da310764b9a36ec06e9b8fe9c4b741d834914b283532ce70d9cb69a37567813e32f46489245e6201407c1af08103ce0b45bd86ba"}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "d31d97c671d380cb1ffbc7284243501f4614b372db60084818701912e96198"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2fb}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x33bba957}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20008000) 08:49:21 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) write$P9_RVERSION(r1, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x3, 0x8, '9P2000.L'}, 0x15) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) accept$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) 08:49:21 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:21 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) write$P9_RVERSION(r1, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x3, 0x8, '9P2000.L'}, 0x15) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) accept$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) 08:49:21 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x8, 0x6, 0x71, 0x80, 0x1, 0x777, '\x00', 0x0, r0, 0x1, 0x4, 0x4, 0xe}, 0x48) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) 08:49:21 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000240)={0x2, @sliced={0x2, [0x5, 0x1, 0x72, 0x8, 0x7ff, 0xb9d2, 0x31, 0x1, 0x0, 0xffff, 0x7, 0xff00, 0x0, 0x8, 0xaa8c, 0x2, 0x3, 0x2, 0xff, 0x2, 0x81, 0x1, 0x1f, 0xb86, 0xc5, 0x8000, 0x7, 0xa7a, 0x3ff, 0x0, 0x8001, 0xff01, 0x8, 0xf4ed, 0x5, 0x4, 0x38c1, 0x3, 0x82c, 0x7, 0x100, 0x7ff, 0x8, 0x400, 0x6, 0xfffb, 0x5, 0x5], 0xa5b}}) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x1) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x20, 0x2, 0x3, 0x0, 0x1}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000340)={0xa2, 0x38414262, 0x2, @discrete={0xffff, 0x6}}) (async) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) (async) ioctl$USBDEVFS_RESETEP(r4, 0x80045503, &(0x7f0000000080)={0xb}) (async) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x7, 0x1, {0x3, '@-:'}}, 0xc) 08:49:21 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x3, 0x65, 0x3, {0x1, @pix={0xffff, 0x9000, 0x31384142, 0x7, 0x8, 0x7cc, 0xa, 0x3, 0x0, 0x4, 0x0, 0x2}}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r1}, 0x8) ioctl$PTP_PIN_SETFUNC(r2, 0x40603d07, &(0x7f0000000240)={'\x00', 0x6, 0x0, 0x9}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000cc0), 0x6) (async) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f00000003c0)=@multiplanar_overlay={0x8, 0x2, 0x4, 0xcb920d3bde3e8b4, 0x1, {r4, r5/1000+10000}, {0x1, 0x8, 0x0, 0x0, 0x40, 0xfd, "52c25d1e"}, 0x89c, 0x3, {&(0x7f0000000340)=[{0x3, 0xfffffffb, {0x40}, 0x8001}, {0x2, 0x1, {0x4}, 0x8}]}, 0x10000}) (async) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000000)={0x3, @sliced={0x3f, [0x200, 0x7, 0x200, 0x3, 0x2, 0x7, 0x3, 0xf9, 0x63, 0x7, 0x888, 0x5, 0x81, 0x0, 0x40, 0x3, 0x9, 0x9, 0x5, 0x6f, 0x1, 0x3, 0x2, 0x1, 0x5, 0xffff, 0x44, 0x4, 0x101, 0x3, 0x0, 0x2095, 0x8, 0x882e, 0x0, 0x0, 0x3, 0x5, 0x7, 0x6, 0x20, 0x0, 0x4, 0x5, 0xfff, 0xf783, 0x8, 0xa52], 0x2}}) 08:49:21 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x22c, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x26a}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, 0x5}}}}]}, @TIPC_NLA_NODE={0x98, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3e, 0x3, "934ef3d62aa9da310764b9a36ec06e9b8fe9c4b741d834914b283532ce70d9cb69a37567813e32f46489245e6201407c1af08103ce0b45bd86ba"}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "d31d97c671d380cb1ffbc7284243501f4614b372db60084818701912e96198"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2fb}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x33bba957}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20008000) 08:49:21 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x8, 0x6, 0x71, 0x80, 0x1, 0x777, '\x00', 0x0, r0, 0x1, 0x4, 0x4, 0xe}, 0x48) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) 08:49:21 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) (async, rerun: 32) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r0) (async, rerun: 32) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:21 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) write$P9_RVERSION(r1, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x3, 0x8, '9P2000.L'}, 0x15) (async, rerun: 32) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (rerun: 32) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) accept$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) 08:49:21 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000240)={0x2, @sliced={0x2, [0x5, 0x1, 0x72, 0x8, 0x7ff, 0xb9d2, 0x31, 0x1, 0x0, 0xffff, 0x7, 0xff00, 0x0, 0x8, 0xaa8c, 0x2, 0x3, 0x2, 0xff, 0x2, 0x81, 0x1, 0x1f, 0xb86, 0xc5, 0x8000, 0x7, 0xa7a, 0x3ff, 0x0, 0x8001, 0xff01, 0x8, 0xf4ed, 0x5, 0x4, 0x38c1, 0x3, 0x82c, 0x7, 0x100, 0x7ff, 0x8, 0x400, 0x6, 0xfffb, 0x5, 0x5], 0xa5b}}) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x1) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x20, 0x2, 0x3, 0x0, 0x1}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000340)={0xa2, 0x38414262, 0x2, @discrete={0xffff, 0x6}}) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) ioctl$USBDEVFS_RESETEP(r4, 0x80045503, &(0x7f0000000080)={0xb}) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x7, 0x1, {0x3, '@-:'}}, 0xc) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000240)={0x2, @sliced={0x2, [0x5, 0x1, 0x72, 0x8, 0x7ff, 0xb9d2, 0x31, 0x1, 0x0, 0xffff, 0x7, 0xff00, 0x0, 0x8, 0xaa8c, 0x2, 0x3, 0x2, 0xff, 0x2, 0x81, 0x1, 0x1f, 0xb86, 0xc5, 0x8000, 0x7, 0xa7a, 0x3ff, 0x0, 0x8001, 0xff01, 0x8, 0xf4ed, 0x5, 0x4, 0x38c1, 0x3, 0x82c, 0x7, 0x100, 0x7ff, 0x8, 0x400, 0x6, 0xfffb, 0x5, 0x5], 0xa5b}}) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) (async) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x1) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x20, 0x2, 0x3, 0x0, 0x1}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000340)={0xa2, 0x38414262, 0x2, @discrete={0xffff, 0x6}}) (async) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) (async) ioctl$USBDEVFS_RESETEP(r4, 0x80045503, &(0x7f0000000080)={0xb}) (async) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x7, 0x1, {0x3, '@-:'}}, 0xc) (async) 08:49:21 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x3, 0x65, 0x3, {0x1, @pix={0xffff, 0x9000, 0x31384142, 0x7, 0x8, 0x7cc, 0xa, 0x3, 0x0, 0x4, 0x0, 0x2}}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r1}, 0x8) ioctl$PTP_PIN_SETFUNC(r2, 0x40603d07, &(0x7f0000000240)={'\x00', 0x6, 0x0, 0x9}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000cc0), 0x6) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f00000003c0)=@multiplanar_overlay={0x8, 0x2, 0x4, 0xcb920d3bde3e8b4, 0x1, {r4, r5/1000+10000}, {0x1, 0x8, 0x0, 0x0, 0x40, 0xfd, "52c25d1e"}, 0x89c, 0x3, {&(0x7f0000000340)=[{0x3, 0xfffffffb, {0x40}, 0x8001}, {0x2, 0x1, {0x4}, 0x8}]}, 0x10000}) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000000)={0x3, @sliced={0x3f, [0x200, 0x7, 0x200, 0x3, 0x2, 0x7, 0x3, 0xf9, 0x63, 0x7, 0x888, 0x5, 0x81, 0x0, 0x40, 0x3, 0x9, 0x9, 0x5, 0x6f, 0x1, 0x3, 0x2, 0x1, 0x5, 0xffff, 0x44, 0x4, 0x101, 0x3, 0x0, 0x2095, 0x8, 0x882e, 0x0, 0x0, 0x3, 0x5, 0x7, 0x6, 0x20, 0x0, 0x4, 0x5, 0xfff, 0xf783, 0x8, 0xa52], 0x2}}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x3, 0x65, 0x3, {0x1, @pix={0xffff, 0x9000, 0x31384142, 0x7, 0x8, 0x7cc, 0xa, 0x3, 0x0, 0x4, 0x0, 0x2}}}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r1}, 0x8) (async) ioctl$PTP_PIN_SETFUNC(r2, 0x40603d07, &(0x7f0000000240)={'\x00', 0x6, 0x0, 0x9}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r3, &(0x7f0000000cc0), 0x6) (async) clock_gettime(0x0, &(0x7f0000000300)) (async) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f00000003c0)=@multiplanar_overlay={0x8, 0x2, 0x4, 0xcb920d3bde3e8b4, 0x1, {r4, r5/1000+10000}, {0x1, 0x8, 0x0, 0x0, 0x40, 0xfd, "52c25d1e"}, 0x89c, 0x3, {&(0x7f0000000340)=[{0x3, 0xfffffffb, {0x40}, 0x8001}, {0x2, 0x1, {0x4}, 0x8}]}, 0x10000}) (async) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000000)={0x3, @sliced={0x3f, [0x200, 0x7, 0x200, 0x3, 0x2, 0x7, 0x3, 0xf9, 0x63, 0x7, 0x888, 0x5, 0x81, 0x0, 0x40, 0x3, 0x9, 0x9, 0x5, 0x6f, 0x1, 0x3, 0x2, 0x1, 0x5, 0xffff, 0x44, 0x4, 0x101, 0x3, 0x0, 0x2095, 0x8, 0x882e, 0x0, 0x0, 0x3, 0x5, 0x7, 0x6, 0x20, 0x0, 0x4, 0x5, 0xfff, 0xf783, 0x8, 0xa52], 0x2}}) (async) 08:49:21 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x22c, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x26a}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, 0x5}}}}]}, @TIPC_NLA_NODE={0x98, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3e, 0x3, "934ef3d62aa9da310764b9a36ec06e9b8fe9c4b741d834914b283532ce70d9cb69a37567813e32f46489245e6201407c1af08103ce0b45bd86ba"}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "d31d97c671d380cb1ffbc7284243501f4614b372db60084818701912e96198"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2fb}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x33bba957}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20008000) 08:49:21 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x8, 0x6, 0x71, 0x80, 0x1, 0x777, '\x00', 0x0, r0, 0x1, 0x4, 0x4, 0xe}, 0x48) (async, rerun: 64) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (rerun: 64) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) 08:49:21 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7bdb, 0x2) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r0}, 0x8) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000240)) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff7}) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x1, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x6, 0x2, 0x1, {0x2, @pix_mp={0x5, 0x7, 0x30314742, 0x2, 0xb, [{0x7, 0xd1}, {0xc9, 0xffffffff}, {0x0, 0x5}, {0x101, 0xffff}, {0x6, 0xfffffffe}, {0x6, 0x800008}, {0x2, 0x6}, {0x6}], 0x4, 0x1, 0x1, 0x1, 0x2}}, 0xee}) 08:49:21 executing program 3: ioctl$PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:21 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) (async, rerun: 64) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r0) (async, rerun: 64) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:22 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xc}, {}, {0x2}, {0x0, 0xffffffff}, {0x0, 0x2}, {}, {}, {0x6, 0x10000}], 0xfd, 0x1, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000100)=@multiplanar_overlay={0x7, 0x3, 0x4, 0x2, 0xfff, {0x77359400}, {0x0, 0x2, 0xa2, 0x2, 0x0, 0x3f, "d473e46a"}, 0x1, 0x3, {&(0x7f0000000000)=[{0x1, 0x1000, {0x335}, 0xbe0}, {0x7, 0x6a3a, {0x8}, 0x81}]}, 0x10001, 0x0, r0}) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x4b90ef9d, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000001c0)) ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000080)) 08:49:22 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r2 = syz_open_dev$mouse(&(0x7f0000000480), 0x170, 0x20b00) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x12, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x33}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x95, 0x0, 0x0, 0x0, 0x7}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}]}, &(0x7f0000000600)='GPL\x00', 0x7fffffff, 0xf2, &(0x7f0000000640)=""/242, 0x0, 0x1, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0xd, 0xff, 0x1}, 0x10, 0x1bd86, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)=[0x1, 0xffffffffffffffff]}, 0x80) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000280)='GPL\x00', 0x200, 0x0, 0x0, 0x41000, 0x8, '\x00', r1, 0x1c, r2, 0x8, &(0x7f00000004c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x10, 0x5, 0x1}, 0x10, 0x4fad, r3, 0x0, &(0x7f0000000a80)=[r4]}, 0x80) write$UHID_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/168, 0xa8, 0x4, 0x9, 0x5b, 0x80, 0x3}}, 0x120) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r5, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000940)={0xa1, 0x45, 0x2, {0x0, @pix_mp={0x7, 0xfffffff7, 0x32315258, 0x7, 0x1, [{0xe0, 0x7}, {0x8, 0x9}, {0x7fff, 0x80}, {0x5, 0x4}, {0x4, 0x1}, {0x1, 0x4}, {0x1ff, 0x2}, {0x682f, 0x3}], 0x7, 0xdf, 0x8, 0xa9b4ae408aa44803, 0x6}}, 0x8001}) 08:49:22 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x0, 0x3f, 0x3ff, 0x800}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) 08:49:22 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xc}, {}, {0x2}, {0x0, 0xffffffff}, {0x0, 0x2}, {}, {}, {0x6, 0x10000}], 0xfd, 0x1, 0x0, 0x2}}) (async, rerun: 64) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000100)=@multiplanar_overlay={0x7, 0x3, 0x4, 0x2, 0xfff, {0x77359400}, {0x0, 0x2, 0xa2, 0x2, 0x0, 0x3f, "d473e46a"}, 0x1, 0x3, {&(0x7f0000000000)=[{0x1, 0x1000, {0x335}, 0xbe0}, {0x7, 0x6a3a, {0x8}, 0x81}]}, 0x10001, 0x0, r0}) (rerun: 64) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x4b90ef9d, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000001c0)) (async) ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000080)) 08:49:22 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7bdb, 0x2) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r0}, 0x8) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000240)) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff7}) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x1, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x6, 0x2, 0x1, {0x2, @pix_mp={0x5, 0x7, 0x30314742, 0x2, 0xb, [{0x7, 0xd1}, {0xc9, 0xffffffff}, {0x0, 0x5}, {0x101, 0xffff}, {0x6, 0xfffffffe}, {0x6, 0x800008}, {0x2, 0x6}, {0x6}], 0x4, 0x1, 0x1, 0x1, 0x2}}, 0xee}) syz_open_dev$vim2m(&(0x7f0000000040), 0x7bdb, 0x2) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r0}, 0x8) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000240)) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff7}) (async) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) (async) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000180), 0x1, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x6, 0x2, 0x1, {0x2, @pix_mp={0x5, 0x7, 0x30314742, 0x2, 0xb, [{0x7, 0xd1}, {0xc9, 0xffffffff}, {0x0, 0x5}, {0x101, 0xffff}, {0x6, 0xfffffffe}, {0x6, 0x800008}, {0x2, 0x6}, {0x6}], 0x4, 0x1, 0x1, 0x1, 0x2}}, 0xee}) (async) 08:49:22 executing program 3: ioctl$PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) ioctl$PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) 08:49:22 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x0, 0x3f, 0x3ff, 0x800}) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) 08:49:22 executing program 5: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8c39efea20bbb716}, 0xc, &(0x7f0000000400)={&(0x7f0000000040)={0x244, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x4c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x48bd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb281}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfc2e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ecba1b0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2fc7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9134}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x263f}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xd4, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43b9d338}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9ae3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d31d122}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63e9ebdd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2132}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbfdb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61de0391}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d35f77a}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57b3a429}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf6db}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56a83a1d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7d1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1eb3a91d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3055}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa7e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9bfc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x305e2665}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32b58532}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x444f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x233f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe67f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e98}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb24f}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xbc, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9c79}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6044007e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a493160}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xac9d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b75a633}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1852677c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c04eb60}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4886434a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x38b4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d7748bd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e87d61a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc00c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1280}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5366c408}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x467f9a41}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7016caeb}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd690}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b1ad47d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5814ea1a}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x15d6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf14e}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x400c847}, 0x4004000) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:22 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r2 = syz_open_dev$mouse(&(0x7f0000000480), 0x170, 0x20b00) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x12, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x33}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x95, 0x0, 0x0, 0x0, 0x7}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}]}, &(0x7f0000000600)='GPL\x00', 0x7fffffff, 0xf2, &(0x7f0000000640)=""/242, 0x0, 0x1, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0xd, 0xff, 0x1}, 0x10, 0x1bd86, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)=[0x1, 0xffffffffffffffff]}, 0x80) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000280)='GPL\x00', 0x200, 0x0, 0x0, 0x41000, 0x8, '\x00', r1, 0x1c, r2, 0x8, &(0x7f00000004c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x10, 0x5, 0x1}, 0x10, 0x4fad, r3, 0x0, &(0x7f0000000a80)=[r4]}, 0x80) write$UHID_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/168, 0xa8, 0x4, 0x9, 0x5b, 0x80, 0x3}}, 0x120) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r5, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000940)={0xa1, 0x45, 0x2, {0x0, @pix_mp={0x7, 0xfffffff7, 0x32315258, 0x7, 0x1, [{0xe0, 0x7}, {0x8, 0x9}, {0x7fff, 0x80}, {0x5, 0x4}, {0x4, 0x1}, {0x1, 0x4}, {0x1ff, 0x2}, {0x682f, 0x3}], 0x7, 0xdf, 0x8, 0xa9b4ae408aa44803, 0x6}}, 0x8001}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) (async) syz_open_dev$mouse(&(0x7f0000000480), 0x170, 0x20b00) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x12, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x33}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x95, 0x0, 0x0, 0x0, 0x7}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}]}, &(0x7f0000000600)='GPL\x00', 0x7fffffff, 0xf2, &(0x7f0000000640)=""/242, 0x0, 0x1, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0xd, 0xff, 0x1}, 0x10, 0x1bd86, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)=[0x1, 0xffffffffffffffff]}, 0x80) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000280)='GPL\x00', 0x200, 0x0, 0x0, 0x41000, 0x8, '\x00', r1, 0x1c, r2, 0x8, &(0x7f00000004c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x10, 0x5, 0x1}, 0x10, 0x4fad, r3, 0x0, &(0x7f0000000a80)=[r4]}, 0x80) (async) write$UHID_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/168, 0xa8, 0x4, 0x9, 0x5b, 0x80, 0x3}}, 0x120) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r5, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000940)={0xa1, 0x45, 0x2, {0x0, @pix_mp={0x7, 0xfffffff7, 0x32315258, 0x7, 0x1, [{0xe0, 0x7}, {0x8, 0x9}, {0x7fff, 0x80}, {0x5, 0x4}, {0x4, 0x1}, {0x1, 0x4}, {0x1ff, 0x2}, {0x682f, 0x3}], 0x7, 0xdf, 0x8, 0xa9b4ae408aa44803, 0x6}}, 0x8001}) (async) 08:49:22 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xc}, {}, {0x2}, {0x0, 0xffffffff}, {0x0, 0x2}, {}, {}, {0x6, 0x10000}], 0xfd, 0x1, 0x0, 0x2}}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000100)=@multiplanar_overlay={0x7, 0x3, 0x4, 0x2, 0xfff, {0x77359400}, {0x0, 0x2, 0xa2, 0x2, 0x0, 0x3f, "d473e46a"}, 0x1, 0x3, {&(0x7f0000000000)=[{0x1, 0x1000, {0x335}, 0xbe0}, {0x7, 0x6a3a, {0x8}, 0x81}]}, 0x10001, 0x0, r0}) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x4b90ef9d, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000001c0)) (async) ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000080)) 08:49:22 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7bdb, 0x2) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r0}, 0x8) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000240)) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff7}) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x1, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x6, 0x2, 0x1, {0x2, @pix_mp={0x5, 0x7, 0x30314742, 0x2, 0xb, [{0x7, 0xd1}, {0xc9, 0xffffffff}, {0x0, 0x5}, {0x101, 0xffff}, {0x6, 0xfffffffe}, {0x6, 0x800008}, {0x2, 0x6}, {0x6}], 0x4, 0x1, 0x1, 0x1, 0x2}}, 0xee}) syz_open_dev$vim2m(&(0x7f0000000040), 0x7bdb, 0x2) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r0}, 0x8) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000240)) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff7}) (async) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) (async) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000180), 0x1, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x6, 0x2, 0x1, {0x2, @pix_mp={0x5, 0x7, 0x30314742, 0x2, 0xb, [{0x7, 0xd1}, {0xc9, 0xffffffff}, {0x0, 0x5}, {0x101, 0xffff}, {0x6, 0xfffffffe}, {0x6, 0x800008}, {0x2, 0x6}, {0x6}], 0x4, 0x1, 0x1, 0x1, 0x2}}, 0xee}) (async) 08:49:22 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x0, 0x3f, 0x3ff, 0x800}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x0, 0x3f, 0x3ff, 0x800}) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async) 08:49:22 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r2 = syz_open_dev$mouse(&(0x7f0000000480), 0x170, 0x20b00) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x12, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x33}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x95, 0x0, 0x0, 0x0, 0x7}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}]}, &(0x7f0000000600)='GPL\x00', 0x7fffffff, 0xf2, &(0x7f0000000640)=""/242, 0x0, 0x1, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0xd, 0xff, 0x1}, 0x10, 0x1bd86, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)=[0x1, 0xffffffffffffffff]}, 0x80) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000280)='GPL\x00', 0x200, 0x0, 0x0, 0x41000, 0x8, '\x00', r1, 0x1c, r2, 0x8, &(0x7f00000004c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x10, 0x5, 0x1}, 0x10, 0x4fad, r3, 0x0, &(0x7f0000000a80)=[r4]}, 0x80) write$UHID_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/168, 0xa8, 0x4, 0x9, 0x5b, 0x80, 0x3}}, 0x120) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r5, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000940)={0xa1, 0x45, 0x2, {0x0, @pix_mp={0x7, 0xfffffff7, 0x32315258, 0x7, 0x1, [{0xe0, 0x7}, {0x8, 0x9}, {0x7fff, 0x80}, {0x5, 0x4}, {0x4, 0x1}, {0x1, 0x4}, {0x1ff, 0x2}, {0x682f, 0x3}], 0x7, 0xdf, 0x8, 0xa9b4ae408aa44803, 0x6}}, 0x8001}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) (async) syz_open_dev$mouse(&(0x7f0000000480), 0x170, 0x20b00) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x12, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x33}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x95, 0x0, 0x0, 0x0, 0x7}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}]}, &(0x7f0000000600)='GPL\x00', 0x7fffffff, 0xf2, &(0x7f0000000640)=""/242, 0x0, 0x1, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0xd, 0xff, 0x1}, 0x10, 0x1bd86, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)=[0x1, 0xffffffffffffffff]}, 0x80) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000280)='GPL\x00', 0x200, 0x0, 0x0, 0x41000, 0x8, '\x00', r1, 0x1c, r2, 0x8, &(0x7f00000004c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x10, 0x5, 0x1}, 0x10, 0x4fad, r3, 0x0, &(0x7f0000000a80)=[r4]}, 0x80) (async) write$UHID_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/168, 0xa8, 0x4, 0x9, 0x5b, 0x80, 0x3}}, 0x120) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r5, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000940)={0xa1, 0x45, 0x2, {0x0, @pix_mp={0x7, 0xfffffff7, 0x32315258, 0x7, 0x1, [{0xe0, 0x7}, {0x8, 0x9}, {0x7fff, 0x80}, {0x5, 0x4}, {0x4, 0x1}, {0x1, 0x4}, {0x1ff, 0x2}, {0x682f, 0x3}], 0x7, 0xdf, 0x8, 0xa9b4ae408aa44803, 0x6}}, 0x8001}) (async) 08:49:22 executing program 3: ioctl$PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434) (async) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:22 executing program 5: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8c39efea20bbb716}, 0xc, &(0x7f0000000400)={&(0x7f0000000040)={0x244, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x4c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x48bd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb281}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfc2e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ecba1b0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2fc7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9134}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x263f}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xd4, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43b9d338}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9ae3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d31d122}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63e9ebdd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2132}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbfdb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61de0391}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d35f77a}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57b3a429}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf6db}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56a83a1d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7d1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1eb3a91d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3055}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa7e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9bfc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x305e2665}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32b58532}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x444f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x233f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe67f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e98}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb24f}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xbc, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9c79}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6044007e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a493160}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xac9d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b75a633}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1852677c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c04eb60}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4886434a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x38b4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d7748bd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e87d61a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc00c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1280}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5366c408}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x467f9a41}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7016caeb}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd690}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b1ad47d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5814ea1a}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x15d6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf14e}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x400c847}, 0x4004000) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:22 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0xfff, 0x0, 0x35303553, 0x2, 0x3, [{0x3, 0x6}, {0x7, 0x9}, {0x800, 0x6}, {0x8, 0x8}, {0x1, 0xfff}, {0xff, 0x2}, {0x80, 0x6}, {0x800, 0x1}], 0xff, 0x81, 0x4, 0x1, 0x6}}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000040)=@mmap={0x7, 0x2, 0x4, 0x0, 0x7, {r1, r2/1000+60000}, {0xc0db0738850d45a5, 0xc, 0xf9, 0x1f, 0x20, 0x6, "2ae11e76"}, 0x80, 0x1, {}, 0x3f}) 08:49:22 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xbc, r0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3c0b}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000080}, 0x40448c1) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:22 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x3) 08:49:22 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1000, 0x1, 0x3, "3333adfb4778753a6e5829a6ac70750dee16eb226fba287433f1b72d27958201", 0x3136564e}) 08:49:22 executing program 5: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8c39efea20bbb716}, 0xc, &(0x7f0000000400)={&(0x7f0000000040)={0x244, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x4c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x48bd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb281}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfc2e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ecba1b0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2fc7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9134}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x263f}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xd4, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43b9d338}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9ae3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d31d122}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63e9ebdd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2132}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbfdb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61de0391}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d35f77a}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57b3a429}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf6db}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56a83a1d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7d1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1eb3a91d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3055}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa7e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9bfc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x305e2665}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32b58532}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x444f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x233f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe67f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e98}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb24f}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xbc, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9c79}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6044007e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a493160}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xac9d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b75a633}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1852677c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c04eb60}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4886434a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x38b4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d7748bd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e87d61a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc00c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1280}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5366c408}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x467f9a41}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7016caeb}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd690}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b1ad47d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5814ea1a}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x15d6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf14e}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x400c847}, 0x4004000) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:22 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000cc0)=ANY=[@ANYBLOB='\f\x00\x00\x00\x00\x00'], 0x6) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)=@fd={0x0, 0x3, 0x4, 0x10000, 0x3, {r2, r3/1000+60000}, {0x1, 0xc, 0x97, 0x8, 0x9, 0x6, "b721ac11"}, 0x81e, 0x4, {}, 0x10000, 0x0, r4}) 08:49:22 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0xfff, 0x0, 0x35303553, 0x2, 0x3, [{0x3, 0x6}, {0x7, 0x9}, {0x800, 0x6}, {0x8, 0x8}, {0x1, 0xfff}, {0xff, 0x2}, {0x80, 0x6}, {0x800, 0x1}], 0xff, 0x81, 0x4, 0x1, 0x6}}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000040)=@mmap={0x7, 0x2, 0x4, 0x0, 0x7, {r1, r2/1000+60000}, {0xc0db0738850d45a5, 0xc, 0xf9, 0x1f, 0x20, 0x6, "2ae11e76"}, 0x80, 0x1, {}, 0x3f}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0xfff, 0x0, 0x35303553, 0x2, 0x3, [{0x3, 0x6}, {0x7, 0x9}, {0x800, 0x6}, {0x8, 0x8}, {0x1, 0xfff}, {0xff, 0x2}, {0x80, 0x6}, {0x800, 0x1}], 0xff, 0x81, 0x4, 0x1, 0x6}}) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000040)=@mmap={0x7, 0x2, 0x4, 0x0, 0x7, {r1, r2/1000+60000}, {0xc0db0738850d45a5, 0xc, 0xf9, 0x1f, 0x20, 0x6, "2ae11e76"}, 0x80, 0x1, {}, 0x3f}) (async) 08:49:22 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x3) 08:49:22 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xbc, r0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3c0b}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000080}, 0x40448c1) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xbc, r0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3c0b}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000080}, 0x40448c1) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async) 08:49:22 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) (async) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000cc0)=ANY=[@ANYBLOB='\f\x00\x00\x00\x00\x00'], 0x6) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)=@fd={0x0, 0x3, 0x4, 0x10000, 0x3, {r2, r3/1000+60000}, {0x1, 0xc, 0x97, 0x8, 0x9, 0x6, "b721ac11"}, 0x81e, 0x4, {}, 0x10000, 0x0, r4}) 08:49:22 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x158, r1, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x40004000}, 0x80) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000000)={0xd0d1, 0x7fff, 0x4, {0x2, @raw_data="8429d017942393a29ef955f1969688c56811627db218297d5f2d59fdb3ed518ab04b9f00285d28ff6dd00db287e1234cfd86c52153c6ce08b9532b6c5ee23155170c170284ac45c2f6e2d5fd5b77510965b84bd9efad810002dd1fbaef254f5e7973a531ed6109a3fbe3358d1d007a6dee5fea76d0440707f29de3eae1c6dc423e671231629f8a60b42da31e94ae536adf80aeb4dd40abf896d286adb7208f11b5a041de7ebf13762f978c87ccab8478441b45c31f9478df532d9edd2b3677a2eab4112fd4fcde06"}, 0x80000000}) 08:49:22 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1000, 0x1, 0x3, "3333adfb4778753a6e5829a6ac70750dee16eb226fba287433f1b72d27958201", 0x3136564e}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1000, 0x1, 0x3, "3333adfb4778753a6e5829a6ac70750dee16eb226fba287433f1b72d27958201", 0x3136564e}) (async) 08:49:22 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0xfff, 0x0, 0x35303553, 0x2, 0x3, [{0x3, 0x6}, {0x7, 0x9}, {0x800, 0x6}, {0x8, 0x8}, {0x1, 0xfff}, {0xff, 0x2}, {0x80, 0x6}, {0x800, 0x1}], 0xff, 0x81, 0x4, 0x1, 0x6}}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000040)=@mmap={0x7, 0x2, 0x4, 0x0, 0x7, {r1, r2/1000+60000}, {0xc0db0738850d45a5, 0xc, 0xf9, 0x1f, 0x20, 0x6, "2ae11e76"}, 0x80, 0x1, {}, 0x3f}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0xfff, 0x0, 0x35303553, 0x2, 0x3, [{0x3, 0x6}, {0x7, 0x9}, {0x800, 0x6}, {0x8, 0x8}, {0x1, 0xfff}, {0xff, 0x2}, {0x80, 0x6}, {0x800, 0x1}], 0xff, 0x81, 0x4, 0x1, 0x6}}) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000040)=@mmap={0x7, 0x2, 0x4, 0x0, 0x7, {r1, r2/1000+60000}, {0xc0db0738850d45a5, 0xc, 0xf9, 0x1f, 0x20, 0x6, "2ae11e76"}, 0x80, 0x1, {}, 0x3f}) (async) 08:49:22 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x3) 08:49:22 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xbc, r0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3c0b}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000080}, 0x40448c1) (async) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:22 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x17}, 0x10) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000cc0), 0x6) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r1, r2, 0x0, r3}, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf0b}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}]}]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x48090) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x200, 0x9}, {}, {0x0, 0x1}], 0xff}}) 08:49:22 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000cc0)=ANY=[@ANYBLOB='\f\x00\x00\x00\x00\x00'], 0x6) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)=@fd={0x0, 0x3, 0x4, 0x10000, 0x3, {r2, r3/1000+60000}, {0x1, 0xc, 0x97, 0x8, 0x9, 0x6, "b721ac11"}, 0x81e, 0x4, {}, 0x10000, 0x0, r4}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r4, &(0x7f0000000cc0)=ANY=[@ANYBLOB='\f\x00\x00\x00\x00\x00'], 0x6) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)=@fd={0x0, 0x3, 0x4, 0x10000, 0x3, {r2, r3/1000+60000}, {0x1, 0xc, 0x97, 0x8, 0x9, 0x6, "b721ac11"}, 0x81e, 0x4, {}, 0x10000, 0x0, r4}) (async) 08:49:22 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1000, 0x1, 0x3, "3333adfb4778753a6e5829a6ac70750dee16eb226fba287433f1b72d27958201", 0x3136564e}) 08:49:22 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x158, r1, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x40004000}, 0x80) (async) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000000)={0xd0d1, 0x7fff, 0x4, {0x2, @raw_data="8429d017942393a29ef955f1969688c56811627db218297d5f2d59fdb3ed518ab04b9f00285d28ff6dd00db287e1234cfd86c52153c6ce08b9532b6c5ee23155170c170284ac45c2f6e2d5fd5b77510965b84bd9efad810002dd1fbaef254f5e7973a531ed6109a3fbe3358d1d007a6dee5fea76d0440707f29de3eae1c6dc423e671231629f8a60b42da31e94ae536adf80aeb4dd40abf896d286adb7208f11b5a041de7ebf13762f978c87ccab8478441b45c31f9478df532d9edd2b3677a2eab4112fd4fcde06"}, 0x80000000}) 08:49:22 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)=@multiplanar_overlay={0x7, 0x2, 0x4, 0x20, 0x8, {0x0, 0xea60}, {0x5, 0x0, 0x3, 0x8, 0x7, 0x7, "317fe8d4"}, 0x4, 0x3, {&(0x7f0000000000)=[{0xffff, 0xfda, {}, 0x9}, {0x9, 0x6, {0x9}, 0x1000}]}, 0x83}) 08:49:22 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x17}, 0x10) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000cc0), 0x6) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r1, r2, 0x0, r3}, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf0b}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}]}]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x48090) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x200, 0x9}, {}, {0x0, 0x1}], 0xff}}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x17}, 0x10) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r3, &(0x7f0000000cc0), 0x6) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r1, r2, 0x0, r3}, 0x10) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf0b}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}]}]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x48090) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x200, 0x9}, {}, {0x0, 0x1}], 0xff}}) (async) 08:49:22 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) syz_open_dev$mouse(&(0x7f0000000040), 0x1, 0x400000) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x20000005, 0x800}) 08:49:22 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x8000, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:22 executing program 4: getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, r0, 0x25, 0x2}, 0x10) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x9, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) 08:49:22 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x158, r1, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x40004000}, 0x80) (async) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000000)={0xd0d1, 0x7fff, 0x4, {0x2, @raw_data="8429d017942393a29ef955f1969688c56811627db218297d5f2d59fdb3ed518ab04b9f00285d28ff6dd00db287e1234cfd86c52153c6ce08b9532b6c5ee23155170c170284ac45c2f6e2d5fd5b77510965b84bd9efad810002dd1fbaef254f5e7973a531ed6109a3fbe3358d1d007a6dee5fea76d0440707f29de3eae1c6dc423e671231629f8a60b42da31e94ae536adf80aeb4dd40abf896d286adb7208f11b5a041de7ebf13762f978c87ccab8478441b45c31f9478df532d9edd2b3677a2eab4112fd4fcde06"}, 0x80000000}) 08:49:22 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)=@multiplanar_overlay={0x7, 0x2, 0x4, 0x20, 0x8, {0x0, 0xea60}, {0x5, 0x0, 0x3, 0x8, 0x7, 0x7, "317fe8d4"}, 0x4, 0x3, {&(0x7f0000000000)=[{0xffff, 0xfda, {}, 0x9}, {0x9, 0x6, {0x9}, 0x1000}]}, 0x83}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)=@multiplanar_overlay={0x7, 0x2, 0x4, 0x20, 0x8, {0x0, 0xea60}, {0x5, 0x0, 0x3, 0x8, 0x7, 0x7, "317fe8d4"}, 0x4, 0x3, {&(0x7f0000000000)=[{0xffff, 0xfda, {}, 0x9}, {0x9, 0x6, {0x9}, 0x1000}]}, 0x83}) (async) 08:49:22 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x8000, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x8000, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) 08:49:22 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) syz_open_dev$mouse(&(0x7f0000000040), 0x1, 0x400000) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x20000005, 0x800}) 08:49:22 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x17}, 0x10) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000cc0), 0x6) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r1, r2, 0x0, r3}, 0x10) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf0b}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}]}]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x48090) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x200, 0x9}, {}, {0x0, 0x1}], 0xff}}) 08:49:22 executing program 4: getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, r0, 0x25, 0x2}, 0x10) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x9, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) 08:49:22 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) syz_open_dev$mouse(&(0x7f0000000040), 0x1, 0x400000) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x20000005, 0x800}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) syz_open_dev$mouse(&(0x7f0000000040), 0x1, 0x400000) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x20000005, 0x800}) (async) 08:49:22 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0x60, 0x3, 0x2, {0x2, @vbi={0x0, 0x7f, 0x1ff, 0x32525942, [0x264d, 0x159], [0xff, 0x4], 0x108}}, 0x80a1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:22 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x8000, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:22 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)=@multiplanar_overlay={0x7, 0x2, 0x4, 0x20, 0x8, {0x0, 0xea60}, {0x5, 0x0, 0x3, 0x8, 0x7, 0x7, "317fe8d4"}, 0x4, 0x3, {&(0x7f0000000000)=[{0xffff, 0xfda, {}, 0x9}, {0x9, 0x6, {0x9}, 0x1000}]}, 0x83}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)=@multiplanar_overlay={0x7, 0x2, 0x4, 0x20, 0x8, {0x0, 0xea60}, {0x5, 0x0, 0x3, 0x8, 0x7, 0x7, "317fe8d4"}, 0x4, 0x3, {&(0x7f0000000000)=[{0xffff, 0xfda, {}, 0x9}, {0x9, 0x6, {0x9}, 0x1000}]}, 0x83}) (async) 08:49:22 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x9}], 0x7}}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x1}) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000000000)={0xb, 0x1}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000040)=""/11) 08:49:22 executing program 4: getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, r0, 0x25, 0x2}, 0x10) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x9, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, r0, 0x25, 0x2}, 0x10) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x9, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async) 08:49:22 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x8000000000000000, 0xc41) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x1, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:22 executing program 0: syz_open_dev$radio(&(0x7f00000000c0), 0x1, 0x2) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000040)={{0xfffffffffffffffd, 0x64}, {0x6, 0xff}, 0x1ff, 0x1}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x3, 0x31324d4e, 0x2, @discrete={0x7, 0x6}}) 08:49:22 executing program 2: clock_gettime(0x2, &(0x7f0000000040)) nanosleep(&(0x7f0000000080)={0x77359400}, &(0x7f0000000100)) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:23 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0x60, 0x3, 0x2, {0x2, @vbi={0x0, 0x7f, 0x1ff, 0x32525942, [0x264d, 0x159], [0xff, 0x4], 0x108}}, 0x80a1}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:23 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x9}], 0x7}}) (async) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x1}) (async) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000000000)={0xb, 0x1}) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000040)=""/11) 08:49:23 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c000009000000e6e8d7bced8fede6e0f381a7e500"], 0x6) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)=@overlay={0x7, 0x2, 0x4, 0x4000, 0xfbc7, {r3, r4/1000+60000}, {0x4, 0x2, 0x2, 0x8, 0x4, 0x5, '\rm=5'}, 0xffff, 0x3, {}, 0x3, 0x0, r2}) 08:49:23 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x8000000000000000, 0xc41) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x1, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) syz_open_dev$dri(&(0x7f0000000000), 0x8000000000000000, 0xc41) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x1, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) 08:49:23 executing program 0: syz_open_dev$radio(&(0x7f00000000c0), 0x1, 0x2) (async) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000040)={{0xfffffffffffffffd, 0x64}, {0x6, 0xff}, 0x1ff, 0x1}) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x3, 0x31324d4e, 0x2, @discrete={0x7, 0x6}}) 08:49:23 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x9}], 0x7}}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x1}) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000000000)={0xb, 0x1}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000040)=""/11) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x9}], 0x7}}) (async) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x1}) (async) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000000000)={0xb, 0x1}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000040)=""/11) (async) 08:49:23 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0x60, 0x3, 0x2, {0x2, @vbi={0x0, 0x7f, 0x1ff, 0x32525942, [0x264d, 0x159], [0xff, 0x4], 0x108}}, 0x80a1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0x60, 0x3, 0x2, {0x2, @vbi={0x0, 0x7f, 0x1ff, 0x32525942, [0x264d, 0x159], [0xff, 0x4], 0x108}}, 0x80a1}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (async) 08:49:23 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async, rerun: 32) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) (async, rerun: 32) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c000009000000e6e8d7bced8fede6e0f381a7e500"], 0x6) (async) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)=@overlay={0x7, 0x2, 0x4, 0x4000, 0xfbc7, {r3, r4/1000+60000}, {0x4, 0x2, 0x2, 0x8, 0x4, 0x5, '\rm=5'}, 0xffff, 0x3, {}, 0x3, 0x0, r2}) 08:49:23 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x8000000000000000, 0xc41) (async) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x1, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:23 executing program 0: syz_open_dev$radio(&(0x7f00000000c0), 0x1, 0x2) (async, rerun: 64) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000040)={{0xfffffffffffffffd, 0x64}, {0x6, 0xff}, 0x1ff, 0x1}) (async, rerun: 64) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x3, 0x31324d4e, 0x2, @discrete={0x7, 0x6}}) 08:49:23 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0c0000100094323a1b5536b762ef54837a7549b802c1e4a14967fc35080025d50bac000000b50ead6a8ce1d200bc992894ca9cd4c12241e886160304beb5baa25dfbc1e0358a52e58c831f35db676e9a75e938e3131c97f2df39e79d9ec743b8ce05737ce6db8e48e61d98"], 0x6) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="0000000006e203c81497cf2053a30df90d96c7109c8f781fe83d9b104cde43981a7ed80e84d8f1a4fb5c56cf8d90179c300b377fbf518b2b17afb9cc9d", @ANYRES16=0x0, @ANYBLOB="040028bd7000fcdbdf250f0000009400028008e38342d76131becc8fc653000200003c00003400038008000200050000000800020081000000080002007c000000080002000300000008000200060000080800010080000000540003800800020000000000080002000001000008000200008000000800010000800000080002000500000008000200060000000800020005000000080002008100000008000200008018000800010000000000640004801300010062726f6164636173742d6c696e6b00000900010073797a30000000001c0007800800010000000000080001001e000000080001001f00000024000780080001000900000008000300050000000800040009000000080001000300000081b6e2516ea44fd80861e3dd5478e423cd5c436108f0c22766caf4c02bf0af22fc059a6845a0ea3fcc"], 0x10c}, 0x1, 0x0, 0x0, 0x14}, 0x8804) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}, {}, {}, {}, {}, {0x3}]}}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000000)={0x0, &(0x7f0000000100)=""/209}) 08:49:23 executing program 2: clock_gettime(0x2, &(0x7f0000000040)) (async) nanosleep(&(0x7f0000000080)={0x77359400}, &(0x7f0000000100)) (async) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:23 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c000009000000e6e8d7bced8fede6e0f381a7e500"], 0x6) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)=@overlay={0x7, 0x2, 0x4, 0x4000, 0xfbc7, {r3, r4/1000+60000}, {0x4, 0x2, 0x2, 0x8, 0x4, 0x5, '\rm=5'}, 0xffff, 0x3, {}, 0x3, 0x0, r2}) 08:49:23 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) 08:49:23 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x8000, 0x40082) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x1f, 0x11, 0x70, 0xd1, 0x1000, 0x80, &(0x7f0000000240)="ec4e48cc2615f868454e12f3982c287f0b6a424dbe3499f19c42be91a0c72d505c86db387243420f9409ba4b59c4930d7d70cccb14ec398286593a33554f5cc160d76efbdd5d60b3a79f6c9c15e2f9552932e54987785b3b81e1ece4b416308e5647172109e8e9d8ccbcc029c21e0e808b7e40991cbcd5c830afd7f687d8a0f40e7cdca1a8c80ef46514e761ad598ec75d75495dd582488676ce15f005e1e81f9ccdadca68bfccbfddf4afb8e47f9883e7f0ad81204ddc19961e15c607cce6d2c00d62ac56c72c78267c40834898536a0e1e88bea7c02b478016955aa96b1526090ebdb31c0f40565b0531d6d07a80f33f000ca845e9af7a47aeda67b7602e10d4d311283615f1483279e2c39ec4393c9c971aefdcd7501aa92599e78460b4522eac1be067d31efa11207370b16c60192ab6dd64b59db493842ba81ae487610e77719b32f68c872a4a7b679a4c17229f94b8ed54d48a2f89771fc4dbfff653bf7a4154249cc077e286f0d0ff9148a2f54c36c9f61a1b5a79e3f5246e7d6d975bb487ed784387c7929dc51ab6bb03c9410f436f1a73bf96bd084bcbc1dd5c89b4b90d6fb1a57ac2fd4428e85b1610d9eaeaa99e17dac75b8224fa1a3c0cc8288e21133ab50a610047cf2642c999069bccc6804b0e574179f61e4b88cf856b0f3a1c22b452ace1f7ec758353761196ccdd81ff0fa75df362df5de84c9a380df0bfe1287aa03896404d9d672d0a6219466c4e63d1931ad86544765a8dc8c0ebaa10c3e0b653bc789bb3b053316fb0f8b254ce606289fdfa6f85b8cd0c477763d45ae4381991460a45dd06a6d30b68ac0f157c99c0295c8a4be89703899d9752930feedd851369cdf274d889135c0728755e2abd8f125935b11425458170c6bf98ff7b286f3b3a5c2bef829e417e32107a15cb815201657d094eecd8f8700517c529197e3f4c78d3733d5d74e7e1a3d7b1b2e69e56f62a00b643de310c9d71469f303102cba800c4a0273ee423dc5b1a48b30c61ad5772df2930f6a61cc9a13afbaa48a322f3d66535de0a05ad362914326caf658089d4f5676ebb8a735958f9b569aa2fc978672ab23fd40da03019d091d8b08eaa9bed15b0d66bb22e35d648ec067ab110285a47508cc0b6ded6601456b82e4c9f5e13e7c01cca46addadbc61ebc628b137f983e51cb8beaa4dcc2f857145bf1e15e7bf5848c8be00e8b6c97bde4e98dc1f63f4dd37d6279c72862d18e30a708cc61ebbae79b99717198bdbb7aa40b459df6e57730c23498b533dd27d8c3b6598c24d8eff0af1a2bb82506931ff28667b4488eeca854c95372458728b75ae207d214d6a75ceb5d2250e7d8f6962cf43ac3f3b6a1e33c33ae309ee6143ceb66faf8e5c45b3e831d6353a149f375fd3bf9daf1de3972c7f6115dd8cd6b7c0bedb7bd95b36c223e29d6c78a92b2c9ec7a1e17250396f2ab96a3e5896a31e39f124947a43fc2add739ee4aacf8425fb3ebeb44b4fcee5d80fcad7bc83c7215b387c6bf6769d43d6fd8498664416f4e72dbe39e4b3f0bd3359f1ebdbf71a7a3a0bc71337172fb1daeb3d884dceab2b8383dd6911af5bb4221f4b9eb70a5b3040b47bb21dccfa4914ad8f04187130ce152115e5b88da876d98efcae12290700f48056ece9bf155fde89040e02d97b282bdfccfead32f1eccf656ee3720d216a99b8b469110d3d9d53f5753f10a981b37a537671a3ce1c91b3574707e570f4e55c0e9834c1c2868b60882b51ff75d7f13b814d5363341ef4ac1215ee286b1c408407e8dfb3f6ee8875ea0ee8163ef929595892d04356927aa80b311b86a614365af8bd1154125b9d9d1dda34157d0096114a1def14769e0eaecbb5dcaa5c641f66b159943b694261e532619771c02371c5d56aaba95cc9fb34874857fb07874dcfed85b6c7341a6798ec0137815b826114ecf86e99a9b253af1bb54089eac7b8a69c6e7717f2fa691aed422eec1b991b97fbc57e37c231f305200b6c6a29c69c4109eb0bc6f709ba338de9da5bce8af2d72d419ed67d9422189d3341ca226eec6deaedd2e65c8b4ab58d66479a3b88ffa93294d3cd05da65737b81e7b53db274cdfad04c906f6c964b5a7e6093c1389f3600686793294592beaa138e9fc1f3642c911a1fa0f22319f65ecd984e819d1b78ea832d68a2c163d51b21334098ba7ec779c5c42dbddc61207a203f89061f87059ea4ec4cce308f60d800e41276b0cf5c80e9ac3b5a2a763084f0efe14983b3e3165ef8a22f006ed156484f144887e420a1513406d02efdedc1e3b1011634160561def80700933521032a69de2469bc62497172a295d49fc73e0050001e00b2e76550b9b6d6d8c268e5c4fea2a33ce4441457cbe4d50618e099c871a0811eadc9ff43dfcfc7b43d143569b5c16648c4fe9e3078a6062f7f1d56157110754de2603b440f724210bd69f11c1d51e56bc9b424e4b2a0b74eff02f27faa68e5fbd795d3d098ca38d64615480880899ac23d2f8cfd5226b879242bb2b816580afa2f43e99fc74292def28f55424fa56ffc36c43d53942a963015595a4a31dcc25c34c24deb79823a4f9fb8778215b07deb7b95add376aed35991178c39f059fa67fc5099e45cd05a5ed6985663194b0d9a17cbdbf612ff80b78648e03e6e7e1d61d14cc371949a994ac6f91eed6a67255c9f1eb283231a62ae3052fb373fe6deba8b06802895e94094835b7d1aaabc642d777431098c12f938ce04da8d36ced62502c9becff128bed03a9038e1b37927cede8b5fa61b03da3f5d29256ceb0143d75db1f6fcda226859de9ad296af5bd82df48edeb26bf27cab2baaac200838eb0103b579932c84e2ba542f1e5ee9c42f824ce180df979fd3f319c40f12544f148d995a611bc3dfcaea91c15f048248b6e7580a21cc8623dded847fe59cdc8b2e6f95796901109a050bb380eb31ff6f9f371a2fa28a7be8fed09aea26d815d6e91d117bfe15769ff476084b2b0ac9c25d5e948d6aa9954ef374453555feb1aae81902f24f095eb5b0f48c916a138ef7288c394b02879f4276fa7b41294e666086ac522db39edff15af21f0853df49a6a7ae070bf03c53e013c6d5084c6cfbf44028109dd339abbb13681a145d19a18f46ca55a41ae2c6d147acbe0c83f9f2c9bd4dd4406a47bd2b971f6050438f3b1f7b0049972369af6ff6f8111c9b3296cd6c9b1569df887932cb4f04117f9ad2bb75df55281d3588019afbaaede79fff6ae2dd5c3c35609f6f5401074f2db4d3ca87e98c379ae9c1da0f39f7e7e6d014f796a947935e214ec8349b47759c02eec1e6f813ba5e1ba1d7e8f41ea60085aae56b76dcedf03b54b4bf34f5d2f2a761b0a9263c9e79403c2f191891caf34162c4bc7c928e2d31ec381df5f39a7795a421972eed3045d323f4f5c64dd6eb9bf041436d5e77368c19d98206a2e2c34efee45bf2320ff13a4db34aec09ab325439341e93fea0f04d0cbe4efa5f3b7b65b8099e57e3ec83e6293c62a9a10a52bb87bee118071925bf8d502c1ea5dcf9ee6118264c5c86d38d621fd9d7626b87736609da0606d9bfc952f0047a439e2745ef0aeae41f56636b9b627b9943de9ea659b8d078a903e80e5e36d1c59be3df9b192739c168abe2406479aea12a2cac18c62791e59b7334750c2a23ddd4da7e863bfd258b282645ba23bb636035e3a5a43bd9d2fabd9d5d7a9084924d233d04ea59da67a8685dcd97db28a7d8f8f4e546f6764e4280adba4d1ff709aae9f0cf758a29bc1486c44aa365ca159265e9275410d2813c984641667d38f0a9572918db0b8f785d8cf101a26508ba1ce0d9cae925e7f16d7e301577da4229533724b60c168692a321694a858c0022842fb52a2d109012915a22e5d29bda20ef3b0b1dd1a2b04b2a6319a0b4f1f45a975fcf1b505ee7b4886a1025a38ebd01e8dfb63ad12a1db7e101f70613b966b6d9829ffb234a3f230b71e2801f16beda95ada0f830259073261cc3f6aedfa5d39fd21fddc264c6650e11c2e39f6c0b890f017dbbd7284127eb7cceecd3d5032244ea700d1553a8983ae507aebefcff0a7771a57e885fb1b93812cad2e57c2b804d2b0acd04553cb7b3e49dbe6d072f39bf1826b9c9117e5fca7a2b977c171f310192c0c0e46d10c303a7d4f5896baa555d1801ec162607ca94f6f661f34e663d1f5f57bec3b06706554b8d3c5657244dafefd3712c99cf1e3e0be7704196e35acb1e2a6628c0d30335214eab36bd9a06161ea74ade4eb7cf0fd1a00619c781906ec616a70e12f61d999199a5ba9e83fb0d8a231e1a44aad9f6886b5a7366d9a90b94120a740538a1b681f23412c1f8510614fe05a32cd89706e7f5c8a94b79587b9ff05c7fff16b88a4f3273840efbb4797ccc0e4eda8b02c194e55055bf35d2eb6a88e121e102473eb53c883fc3e98d75d311c5fc103e8cb78158634a2168884e46005bd831202a524c0ad9211c5df11c20faa5d62b9f0e105fc6de22d6a5c053ebc44f7ff0b363fb4dbe9093a64afd15dc01570ce1829bfb29fd8f1944df0a8b30bda627eff902782244610277e0a3504c5442089e281f6ea30915078f0efd3694d52a6792e8119eebb6249048a09e34bbed9ff0428ce789f96be200f0c33c6bff45fb6ba0dfe4575613168342c82ae797def1b29d9b53aa8a934c0ac34890ebd7450c3402461858269de324b5802cd0304a1e210aa7dbd31fdc77c022e47c80cb3f2b26434f79e139ddc864736c689386add20f303a312b93eff7757869931448982c6d269f137ce1ba98df12b12eb2a1a56a0b3fa8e35925bb5031a68ac30015de35002b4339fe9a116789f8fc0e25ff4e408178a456472632a9b8d6fffdd33c0ecd0a9c90ad1fe343664a2e5fb4c1c197ab77c1189ee0ca2a8275a6d88fe785d926aaa589cd8102c8ac7c184f468c30bf45f5d9a9312542f539ed3e082dce6b1958a74545dbf40c61762c36b8be156d5eae4be5f2a29bba73323baf79b231058cd20d0115809f5efef55dab4610447deb6c11737b64db4dc80664e97fe78a4f4692b21993e09f37c6f9933f00f880cf5861a6031084143fa6ef7a18005b3b0aa662ef040ddcfd11cb13256a290a9b28161d79de025f4b914fe79fe613db2eba3dbbf4f55dc3d2c539aa95f973671d3766a2711800959be83c2dffa8cbccb2c4ac297f33d15f655b69ce223a0790d80e2b8161e8c24a21e462baa3035177ae264bbe3f98312e958999b6b8b49b797aaf4a4d9795af6231f533a91570014b2f5ab2b98c7a0857441d526a565f245e62f95bd536e922314ee96602dde4909d9c8c8c877726040b7d201c26464b3f245ec900ff843643663bcada844cd1f71c99e9acce9eff59fdf04a4b06e876ac8f8e425c99b39fad10aa8cee084a2cb5d1510224135c1a85f3972fbeda8e459cd033de915f30da290293a84cce78923c478d65e9c0049e14bf6fda6437282ab64507289a96b56beb97c66903cc03f8969509e12371be49b269a56ea7d33a68110b730dbbe0598048f85e7601446dee9a5f4e62439ab4b72058bc39cb50d38fd5abfcfce2dd24170fb47f31d329f116b6885c072941d4b152b383ffbcd72e1f6bf4fe4bf84afe69d95cc285810f3f1247afc202dba77436a91c43fc9e12bbd69eb3ecd4c4cdf9355d518d0f7d9400e1123464313e5c007a2320db5040f00bd9f2c68cdacd0df02b8c5b21bfd9c50d464912505d961b8c14e353497f3124b2ac86c8ee3185248fb78e3ab82adcb0bdb10684156768f73f3d5d3e1373396"}) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000001240)={0xc, {0x89, "6735b3b4d3738a486b62d1f051e78f5315051a4ec0425b60730a069d30cafe6a1dce75a93faa797cafc8ae6b55e61775a08eb02e54d34f539be9db76d750cbcba4fab4ac9906df9ed70e820157fa4737ed71b1ea6c3f99dc53b449853194568e3db00a6936fd1d131e40cc63a4508941a1141b06224a31fd700ae44d3e75ccd41fa9abf2c07ed404c3"}}, 0x8f) 08:49:23 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0c0000100094323a1b5536b762ef54837a7549b802c1e4a14967fc35080025d50bac000000b50ead6a8ce1d200bc992894ca9cd4c12241e886160304beb5baa25dfbc1e0358a52e58c831f35db676e9a75e938e3131c97f2df39e79d9ec743b8ce05737ce6db8e48e61d98"], 0x6) (async) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="0000000006e203c81497cf2053a30df90d96c7109c8f781fe83d9b104cde43981a7ed80e84d8f1a4fb5c56cf8d90179c300b377fbf518b2b17afb9cc9d", @ANYRES16=0x0, @ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x14}, 0x8804) (async) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}, {}, {}, {}, {}, {0x3}]}}) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000000)={0x0, &(0x7f0000000100)=""/209}) 08:49:23 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x3, 0x15, 0x5, 0xfff, 0x62, 0x0, &(0x7f0000000040)="287b2afe4bd0c06d9743d50630968fc14e020ff6780496fa359026cc27554de3a182b73bb829291640b54e4506c7a20f275abcab9c6665a9f295dea7de4924e73b6e6983afd229bc80048d3b047c438fd2026612a04894193d85d785bfbcf62d0df9"}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0xfffffeff, 0x35315241, 0x2, @stepwise={0x0, 0x1, 0x95, 0xfff, 0x2, 0x3}}) 08:49:23 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) 08:49:23 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x8000, 0x40082) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x1f, 0x11, 0x70, 0xd1, 0x1000, 0x80, &(0x7f0000000240)="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"}) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000001240)={0xc, {0x89, "6735b3b4d3738a486b62d1f051e78f5315051a4ec0425b60730a069d30cafe6a1dce75a93faa797cafc8ae6b55e61775a08eb02e54d34f539be9db76d750cbcba4fab4ac9906df9ed70e820157fa4737ed71b1ea6c3f99dc53b449853194568e3db00a6936fd1d131e40cc63a4508941a1141b06224a31fd700ae44d3e75ccd41fa9abf2c07ed404c3"}}, 0x8f) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0x8000, 0x40082) (async) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x1f, 0x11, 0x70, 0xd1, 0x1000, 0x80, &(0x7f0000000240)="ec4e48cc2615f868454e12f3982c287f0b6a424dbe3499f19c42be91a0c72d505c86db387243420f9409ba4b59c4930d7d70cccb14ec398286593a33554f5cc160d76efbdd5d60b3a79f6c9c15e2f9552932e54987785b3b81e1ece4b416308e5647172109e8e9d8ccbcc029c21e0e808b7e40991cbcd5c830afd7f687d8a0f40e7cdca1a8c80ef46514e761ad598ec75d75495dd582488676ce15f005e1e81f9ccdadca68bfccbfddf4afb8e47f9883e7f0ad81204ddc19961e15c607cce6d2c00d62ac56c72c78267c40834898536a0e1e88bea7c02b478016955aa96b1526090ebdb31c0f40565b0531d6d07a80f33f000ca845e9af7a47aeda67b7602e10d4d311283615f1483279e2c39ec4393c9c971aefdcd7501aa92599e78460b4522eac1be067d31efa11207370b16c60192ab6dd64b59db493842ba81ae487610e77719b32f68c872a4a7b679a4c17229f94b8ed54d48a2f89771fc4dbfff653bf7a4154249cc077e286f0d0ff9148a2f54c36c9f61a1b5a79e3f5246e7d6d975bb487ed784387c7929dc51ab6bb03c9410f436f1a73bf96bd084bcbc1dd5c89b4b90d6fb1a57ac2fd4428e85b1610d9eaeaa99e17dac75b8224fa1a3c0cc8288e21133ab50a610047cf2642c999069bccc6804b0e574179f61e4b88cf856b0f3a1c22b452ace1f7ec758353761196ccdd81ff0fa75df362df5de84c9a380df0bfe1287aa03896404d9d672d0a6219466c4e63d1931ad86544765a8dc8c0ebaa10c3e0b653bc789bb3b053316fb0f8b254ce606289fdfa6f85b8cd0c477763d45ae4381991460a45dd06a6d30b68ac0f157c99c0295c8a4be89703899d9752930feedd851369cdf274d889135c0728755e2abd8f125935b11425458170c6bf98ff7b286f3b3a5c2bef829e417e32107a15cb815201657d094eecd8f8700517c529197e3f4c78d3733d5d74e7e1a3d7b1b2e69e56f62a00b643de310c9d71469f303102cba800c4a0273ee423dc5b1a48b30c61ad5772df2930f6a61cc9a13afbaa48a322f3d66535de0a05ad362914326caf658089d4f5676ebb8a735958f9b569aa2fc978672ab23fd40da03019d091d8b08eaa9bed15b0d66bb22e35d648ec067ab110285a47508cc0b6ded6601456b82e4c9f5e13e7c01cca46addadbc61ebc628b137f983e51cb8beaa4dcc2f857145bf1e15e7bf5848c8be00e8b6c97bde4e98dc1f63f4dd37d6279c72862d18e30a708cc61ebbae79b99717198bdbb7aa40b459df6e57730c23498b533dd27d8c3b6598c24d8eff0af1a2bb82506931ff28667b4488eeca854c95372458728b75ae207d214d6a75ceb5d2250e7d8f6962cf43ac3f3b6a1e33c33ae309ee6143ceb66faf8e5c45b3e831d6353a149f375fd3bf9daf1de3972c7f6115dd8cd6b7c0bedb7bd95b36c223e29d6c78a92b2c9ec7a1e17250396f2ab96a3e5896a31e39f124947a43fc2add739ee4aacf8425fb3ebeb44b4fcee5d80fcad7bc83c7215b387c6bf6769d43d6fd8498664416f4e72dbe39e4b3f0bd3359f1ebdbf71a7a3a0bc71337172fb1daeb3d884dceab2b8383dd6911af5bb4221f4b9eb70a5b3040b47bb21dccfa4914ad8f04187130ce152115e5b88da876d98efcae12290700f48056ece9bf155fde89040e02d97b282bdfccfead32f1eccf656ee3720d216a99b8b469110d3d9d53f5753f10a981b37a537671a3ce1c91b3574707e570f4e55c0e9834c1c2868b60882b51ff75d7f13b814d5363341ef4ac1215ee286b1c408407e8dfb3f6ee8875ea0ee8163ef929595892d04356927aa80b311b86a614365af8bd1154125b9d9d1dda34157d0096114a1def14769e0eaecbb5dcaa5c641f66b159943b694261e532619771c02371c5d56aaba95cc9fb34874857fb07874dcfed85b6c7341a6798ec0137815b826114ecf86e99a9b253af1bb54089eac7b8a69c6e7717f2fa691aed422eec1b991b97fbc57e37c231f305200b6c6a29c69c4109eb0bc6f709ba338de9da5bce8af2d72d419ed67d9422189d3341ca226eec6deaedd2e65c8b4ab58d66479a3b88ffa93294d3cd05da65737b81e7b53db274cdfad04c906f6c964b5a7e6093c1389f3600686793294592beaa138e9fc1f3642c911a1fa0f22319f65ecd984e819d1b78ea832d68a2c163d51b21334098ba7ec779c5c42dbddc61207a203f89061f87059ea4ec4cce308f60d800e41276b0cf5c80e9ac3b5a2a763084f0efe14983b3e3165ef8a22f006ed156484f144887e420a1513406d02efdedc1e3b1011634160561def80700933521032a69de2469bc62497172a295d49fc73e0050001e00b2e76550b9b6d6d8c268e5c4fea2a33ce4441457cbe4d50618e099c871a0811eadc9ff43dfcfc7b43d143569b5c16648c4fe9e3078a6062f7f1d56157110754de2603b440f724210bd69f11c1d51e56bc9b424e4b2a0b74eff02f27faa68e5fbd795d3d098ca38d64615480880899ac23d2f8cfd5226b879242bb2b816580afa2f43e99fc74292def28f55424fa56ffc36c43d53942a963015595a4a31dcc25c34c24deb79823a4f9fb8778215b07deb7b95add376aed35991178c39f059fa67fc5099e45cd05a5ed6985663194b0d9a17cbdbf612ff80b78648e03e6e7e1d61d14cc371949a994ac6f91eed6a67255c9f1eb283231a62ae3052fb373fe6deba8b06802895e94094835b7d1aaabc642d777431098c12f938ce04da8d36ced62502c9becff128bed03a9038e1b37927cede8b5fa61b03da3f5d29256ceb0143d75db1f6fcda226859de9ad296af5bd82df48edeb26bf27cab2baaac200838eb0103b579932c84e2ba542f1e5ee9c42f824ce180df979fd3f319c40f12544f148d995a611bc3dfcaea91c15f048248b6e7580a21cc8623dded847fe59cdc8b2e6f95796901109a050bb380eb31ff6f9f371a2fa28a7be8fed09aea26d815d6e91d117bfe15769ff476084b2b0ac9c25d5e948d6aa9954ef374453555feb1aae81902f24f095eb5b0f48c916a138ef7288c394b02879f4276fa7b41294e666086ac522db39edff15af21f0853df49a6a7ae070bf03c53e013c6d5084c6cfbf44028109dd339abbb13681a145d19a18f46ca55a41ae2c6d147acbe0c83f9f2c9bd4dd4406a47bd2b971f6050438f3b1f7b0049972369af6ff6f8111c9b3296cd6c9b1569df887932cb4f04117f9ad2bb75df55281d3588019afbaaede79fff6ae2dd5c3c35609f6f5401074f2db4d3ca87e98c379ae9c1da0f39f7e7e6d014f796a947935e214ec8349b47759c02eec1e6f813ba5e1ba1d7e8f41ea60085aae56b76dcedf03b54b4bf34f5d2f2a761b0a9263c9e79403c2f191891caf34162c4bc7c928e2d31ec381df5f39a7795a421972eed3045d323f4f5c64dd6eb9bf041436d5e77368c19d98206a2e2c34efee45bf2320ff13a4db34aec09ab325439341e93fea0f04d0cbe4efa5f3b7b65b8099e57e3ec83e6293c62a9a10a52bb87bee118071925bf8d502c1ea5dcf9ee6118264c5c86d38d621fd9d7626b87736609da0606d9bfc952f0047a439e2745ef0aeae41f56636b9b627b9943de9ea659b8d078a903e80e5e36d1c59be3df9b192739c168abe2406479aea12a2cac18c62791e59b7334750c2a23ddd4da7e863bfd258b282645ba23bb636035e3a5a43bd9d2fabd9d5d7a9084924d233d04ea59da67a8685dcd97db28a7d8f8f4e546f6764e4280adba4d1ff709aae9f0cf758a29bc1486c44aa365ca159265e9275410d2813c984641667d38f0a9572918db0b8f785d8cf101a26508ba1ce0d9cae925e7f16d7e301577da4229533724b60c168692a321694a858c0022842fb52a2d109012915a22e5d29bda20ef3b0b1dd1a2b04b2a6319a0b4f1f45a975fcf1b505ee7b4886a1025a38ebd01e8dfb63ad12a1db7e101f70613b966b6d9829ffb234a3f230b71e2801f16beda95ada0f830259073261cc3f6aedfa5d39fd21fddc264c6650e11c2e39f6c0b890f017dbbd7284127eb7cceecd3d5032244ea700d1553a8983ae507aebefcff0a7771a57e885fb1b93812cad2e57c2b804d2b0acd04553cb7b3e49dbe6d072f39bf1826b9c9117e5fca7a2b977c171f310192c0c0e46d10c303a7d4f5896baa555d1801ec162607ca94f6f661f34e663d1f5f57bec3b06706554b8d3c5657244dafefd3712c99cf1e3e0be7704196e35acb1e2a6628c0d30335214eab36bd9a06161ea74ade4eb7cf0fd1a00619c781906ec616a70e12f61d999199a5ba9e83fb0d8a231e1a44aad9f6886b5a7366d9a90b94120a740538a1b681f23412c1f8510614fe05a32cd89706e7f5c8a94b79587b9ff05c7fff16b88a4f3273840efbb4797ccc0e4eda8b02c194e55055bf35d2eb6a88e121e102473eb53c883fc3e98d75d311c5fc103e8cb78158634a2168884e46005bd831202a524c0ad9211c5df11c20faa5d62b9f0e105fc6de22d6a5c053ebc44f7ff0b363fb4dbe9093a64afd15dc01570ce1829bfb29fd8f1944df0a8b30bda627eff902782244610277e0a3504c5442089e281f6ea30915078f0efd3694d52a6792e8119eebb6249048a09e34bbed9ff0428ce789f96be200f0c33c6bff45fb6ba0dfe4575613168342c82ae797def1b29d9b53aa8a934c0ac34890ebd7450c3402461858269de324b5802cd0304a1e210aa7dbd31fdc77c022e47c80cb3f2b26434f79e139ddc864736c689386add20f303a312b93eff7757869931448982c6d269f137ce1ba98df12b12eb2a1a56a0b3fa8e35925bb5031a68ac30015de35002b4339fe9a116789f8fc0e25ff4e408178a456472632a9b8d6fffdd33c0ecd0a9c90ad1fe343664a2e5fb4c1c197ab77c1189ee0ca2a8275a6d88fe785d926aaa589cd8102c8ac7c184f468c30bf45f5d9a9312542f539ed3e082dce6b1958a74545dbf40c61762c36b8be156d5eae4be5f2a29bba73323baf79b231058cd20d0115809f5efef55dab4610447deb6c11737b64db4dc80664e97fe78a4f4692b21993e09f37c6f9933f00f880cf5861a6031084143fa6ef7a18005b3b0aa662ef040ddcfd11cb13256a290a9b28161d79de025f4b914fe79fe613db2eba3dbbf4f55dc3d2c539aa95f973671d3766a2711800959be83c2dffa8cbccb2c4ac297f33d15f655b69ce223a0790d80e2b8161e8c24a21e462baa3035177ae264bbe3f98312e958999b6b8b49b797aaf4a4d9795af6231f533a91570014b2f5ab2b98c7a0857441d526a565f245e62f95bd536e922314ee96602dde4909d9c8c8c877726040b7d201c26464b3f245ec900ff843643663bcada844cd1f71c99e9acce9eff59fdf04a4b06e876ac8f8e425c99b39fad10aa8cee084a2cb5d1510224135c1a85f3972fbeda8e459cd033de915f30da290293a84cce78923c478d65e9c0049e14bf6fda6437282ab64507289a96b56beb97c66903cc03f8969509e12371be49b269a56ea7d33a68110b730dbbe0598048f85e7601446dee9a5f4e62439ab4b72058bc39cb50d38fd5abfcfce2dd24170fb47f31d329f116b6885c072941d4b152b383ffbcd72e1f6bf4fe4bf84afe69d95cc285810f3f1247afc202dba77436a91c43fc9e12bbd69eb3ecd4c4cdf9355d518d0f7d9400e1123464313e5c007a2320db5040f00bd9f2c68cdacd0df02b8c5b21bfd9c50d464912505d961b8c14e353497f3124b2ac86c8ee3185248fb78e3ab82adcb0bdb10684156768f73f3d5d3e1373396"}) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) (async) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000001240)={0xc, {0x89, "6735b3b4d3738a486b62d1f051e78f5315051a4ec0425b60730a069d30cafe6a1dce75a93faa797cafc8ae6b55e61775a08eb02e54d34f539be9db76d750cbcba4fab4ac9906df9ed70e820157fa4737ed71b1ea6c3f99dc53b449853194568e3db00a6936fd1d131e40cc63a4508941a1141b06224a31fd700ae44d3e75ccd41fa9abf2c07ed404c3"}}, 0x8f) (async) 08:49:24 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x3, 0x15, 0x5, 0xfff, 0x62, 0x0, &(0x7f0000000040)="287b2afe4bd0c06d9743d50630968fc14e020ff6780496fa359026cc27554de3a182b73bb829291640b54e4506c7a20f275abcab9c6665a9f295dea7de4924e73b6e6983afd229bc80048d3b047c438fd2026612a04894193d85d785bfbcf62d0df9"}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0xfffffeff, 0x35315241, 0x2, @stepwise={0x0, 0x1, 0x95, 0xfff, 0x2, 0x3}}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (async) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x3, 0x15, 0x5, 0xfff, 0x62, 0x0, &(0x7f0000000040)="287b2afe4bd0c06d9743d50630968fc14e020ff6780496fa359026cc27554de3a182b73bb829291640b54e4506c7a20f275abcab9c6665a9f295dea7de4924e73b6e6983afd229bc80048d3b047c438fd2026612a04894193d85d785bfbcf62d0df9"}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0xfffffeff, 0x35315241, 0x2, @stepwise={0x0, 0x1, 0x95, 0xfff, 0x2, 0x3}}) (async) 08:49:24 executing program 4: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004010}, 0x1) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) 08:49:24 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0c0000100094323a1b5536b762ef54837a7549b802c1e4a14967fc35080025d50bac000000b50ead6a8ce1d200bc992894ca9cd4c12241e886160304beb5baa25dfbc1e0358a52e58c831f35db676e9a75e938e3131c97f2df39e79d9ec743b8ce05737ce6db8e48e61d98"], 0x6) (async) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="0000000006e203c81497cf2053a30df90d96c7109c8f781fe83d9b104cde43981a7ed80e84d8f1a4fb5c56cf8d90179c300b377fbf518b2b17afb9cc9d", @ANYRES16=0x0, @ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x14}, 0x8804) (async) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}, {}, {}, {}, {}, {0x3}]}}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000000)={0x0, &(0x7f0000000100)=""/209}) 08:49:24 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) 08:49:24 executing program 2: clock_gettime(0x2, &(0x7f0000000040)) nanosleep(&(0x7f0000000080)={0x77359400}, &(0x7f0000000100)) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:24 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x8000, 0x40082) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x1f, 0x11, 0x70, 0xd1, 0x1000, 0x80, &(0x7f0000000240)="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"}) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000001240)={0xc, {0x89, "6735b3b4d3738a486b62d1f051e78f5315051a4ec0425b60730a069d30cafe6a1dce75a93faa797cafc8ae6b55e61775a08eb02e54d34f539be9db76d750cbcba4fab4ac9906df9ed70e820157fa4737ed71b1ea6c3f99dc53b449853194568e3db00a6936fd1d131e40cc63a4508941a1141b06224a31fd700ae44d3e75ccd41fa9abf2c07ed404c3"}}, 0x8f) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0x8000, 0x40082) (async) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x1f, 0x11, 0x70, 0xd1, 0x1000, 0x80, &(0x7f0000000240)="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"}) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) (async) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000001240)={0xc, {0x89, "6735b3b4d3738a486b62d1f051e78f5315051a4ec0425b60730a069d30cafe6a1dce75a93faa797cafc8ae6b55e61775a08eb02e54d34f539be9db76d750cbcba4fab4ac9906df9ed70e820157fa4737ed71b1ea6c3f99dc53b449853194568e3db00a6936fd1d131e40cc63a4508941a1141b06224a31fd700ae44d3e75ccd41fa9abf2c07ed404c3"}}, 0x8f) (async) 08:49:24 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x3, 0x15, 0x5, 0xfff, 0x62, 0x0, &(0x7f0000000040)="287b2afe4bd0c06d9743d50630968fc14e020ff6780496fa359026cc27554de3a182b73bb829291640b54e4506c7a20f275abcab9c6665a9f295dea7de4924e73b6e6983afd229bc80048d3b047c438fd2026612a04894193d85d785bfbcf62d0df9"}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0xfffffeff, 0x35315241, 0x2, @stepwise={0x0, 0x1, 0x95, 0xfff, 0x2, 0x3}}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (async) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x3, 0x15, 0x5, 0xfff, 0x62, 0x0, &(0x7f0000000040)="287b2afe4bd0c06d9743d50630968fc14e020ff6780496fa359026cc27554de3a182b73bb829291640b54e4506c7a20f275abcab9c6665a9f295dea7de4924e73b6e6983afd229bc80048d3b047c438fd2026612a04894193d85d785bfbcf62d0df9"}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0xfffffeff, 0x35315241, 0x2, @stepwise={0x0, 0x1, 0x95, 0xfff, 0x2, 0x3}}) (async) 08:49:24 executing program 4: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004010}, 0x1) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) 08:49:24 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xc, 0xffffffff, 0x8, 0xffffffc0, 0x34, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000cc0), 0x6) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f0000000080)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r3}, @map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4}, @alu={0x7, 0x0, 0x7, 0x8, 0x4, 0x1, 0xffffffffffffffff}, @map_val={0x18, 0x2, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x7, 0x0, 0x0, 0x20, 0xfffffffffffffff0}, @alu={0x7, 0x1, 0x8, 0x9, 0x0, 0x4, 0x10}], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x3, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x2, 0x7, 0x1}, 0x10}, 0x80) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:24 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}, {}, {}, {0x0, 0x200000}, {0x0, 0x7f}, {0x0, 0x9}, {}, {0x0, 0xfffffffd}]}}) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0xe85, 0x5c282) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, r2, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000000) 08:49:24 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xc, 0xffffffff, 0x8, 0xffffffc0, 0x34, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) (async, rerun: 32) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (rerun: 32) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000cc0), 0x6) (async) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f0000000080)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r3}, @map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4}, @alu={0x7, 0x0, 0x7, 0x8, 0x4, 0x1, 0xffffffffffffffff}, @map_val={0x18, 0x2, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x7, 0x0, 0x0, 0x20, 0xfffffffffffffff0}, @alu={0x7, 0x1, 0x8, 0x9, 0x0, 0x4, 0x10}], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x3, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x2, 0x7, 0x1}, 0x10}, 0x80) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:24 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0x1, 0x3f, 0x1, {0x1, @sdr={0x38414261, 0xffffe0e7}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x89, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) 08:49:24 executing program 4: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004010}, 0x1) (async, rerun: 32) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (rerun: 32) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) 08:49:24 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xc, 0xffffffff, 0x8, 0xffffffc0, 0x34, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000cc0), 0x6) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f0000000080)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r3}, @map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4}, @alu={0x7, 0x0, 0x7, 0x8, 0x4, 0x1, 0xffffffffffffffff}, @map_val={0x18, 0x2, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x7, 0x0, 0x0, 0x20, 0xfffffffffffffff0}, @alu={0x7, 0x1, 0x8, 0x9, 0x0, 0x4, 0x10}], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x3, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x2, 0x7, 0x1}, 0x10}, 0x80) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xc, 0xffffffff, 0x8, 0xffffffc0, 0x34, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r3, &(0x7f0000000cc0), 0x6) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f0000000080)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r3}, @map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4}, @alu={0x7, 0x0, 0x7, 0x8, 0x4, 0x1, 0xffffffffffffffff}, @map_val={0x18, 0x2, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x7, 0x0, 0x0, 0x20, 0xfffffffffffffff0}, @alu={0x7, 0x1, 0x8, 0x9, 0x0, 0x4, 0x10}], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x3, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x2, 0x7, 0x1}, 0x10}, 0x80) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (async) 08:49:24 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x1, 0x9, 0x20, 0x8c000}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:24 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}, {}, {}, {0x0, 0x200000}, {0x0, 0x7f}, {0x0, 0x9}, {}, {0x0, 0xfffffffd}]}}) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0xe85, 0x5c282) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, r2, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000000) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}, {}, {}, {0x0, 0x200000}, {0x0, 0x7f}, {0x0, 0x9}, {}, {0x0, 0xfffffffd}]}}) (async) syz_open_dev$mouse(&(0x7f0000000000), 0xe85, 0x5c282) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, r2, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000000) (async) 08:49:25 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000100)={0x2, @sliced={0x8, [0x3, 0x0, 0xa4, 0x4, 0x8, 0x7, 0x6, 0x9, 0x3, 0x9, 0x2, 0xff5e, 0x5, 0xf87, 0x7fff, 0x200, 0x3, 0x1, 0x7, 0x401, 0x8001, 0x7, 0xf001, 0xffff, 0xc1, 0x7, 0x4, 0x7, 0x400, 0x8, 0x9, 0x9, 0x5, 0x3232, 0xffc0, 0x7, 0x0, 0x18, 0x3, 0x800, 0x401, 0xff, 0x1, 0x210, 0x9, 0x687, 0x2, 0x8], 0x1}}) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8, 0x2}) 08:49:25 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0x1, 0x3f, 0x1, {0x1, @sdr={0x38414261, 0xffffe0e7}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x89, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0x1, 0x3f, 0x1, {0x1, @sdr={0x38414261, 0xffffe0e7}}}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x89, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) (async) 08:49:25 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x1, 0x9, 0x20, 0x8c000}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x1, 0x9, 0x20, 0x8c000}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) 08:49:25 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000400)={0x2}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f0000000740)={0x12}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:25 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000cc0), 0x6) write$UHID_INPUT(r3, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)=@overlay={0x81, 0x6, 0x4, 0x0, 0xd238, {0x0, 0xea60}, {0x1, 0x1, 0x3f, 0x3, 0x7f, 0x9, "2292886d"}, 0x3, 0x3, {}, 0x3, 0x0, r2}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0x3f, 0x3ff}) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000100)={0xc, {0xe0, "1ef3469890c568d1aced40577492f5d335ec386d4ad952edc3bfdae7fa15e4f9753ec40a27b6a54cf1274c9715995e955e8463ccd4399a012dd563fb1ee7ce89b05e05fc13145046eef49204bbbdd02153c3f6f13dd6b536a5c3df6512c418fbed303ea8385c916132cebb829698179642fbb84bf145e9575804a97ebfee7dda61b7c40c118bdc1a7424fcd894e8270e1622ff68ee8d3fbf4772c6a90e74b16540ec620f0dd95d3e548678f4ab2b9efc615fdffca18991201d59d0faf21f5951c233e73e053f7eeecaa956f2748ec223e16207dc5675ab463d75ac33228ebefd"}}, 0xe6) 08:49:25 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}, {}, {}, {0x0, 0x200000}, {0x0, 0x7f}, {0x0, 0x9}, {}, {0x0, 0xfffffffd}]}}) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0xe85, 0x5c282) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, r2, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000000) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}, {}, {}, {0x0, 0x200000}, {0x0, 0x7f}, {0x0, 0x9}, {}, {0x0, 0xfffffffd}]}}) (async) syz_open_dev$mouse(&(0x7f0000000000), 0xe85, 0x5c282) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, r2, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000000) (async) 08:49:25 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000cc0), 0x6) write$UHID_INPUT(r3, &(0x7f0000000d00)={0x8, {"792c700d1dd61f8ec712fd4d05c8775e99c511d51033a863494fb6dd37c0510cf31238373d10dc9b50211663bfb99d160e64a00c8abb81466dd5f5dea25246351210775269a52fcf8b19c0561ab6172337bde101af890d12b65a7a8e95877cf728c5c783260a05f87b2b2fee19c2a4cd3f17b82110eff0413e4fd9ac0f2f2edc863cf6164bdb1a8e48a543e0049d3a7301fa2deb120115f7e5b96a764e8de7f73dcdf0ef3381571a739e368938f45b2c6a04f62107b1c65a41c254feb7dad4cae9f4551f71b23544e1ff79acdf5c7d16100c78e59c873c4835e8bb8580992b17122e23386c6bc26cc342ced3977e0a2e881da4350502e9f7856b98d1356a94233e2b1ccae858c9e09ab57f5109bbc2acffcb5f6a3f636ded27338601ea268decb931362017662e4c422ea334b153b3edc0dfedce26c4a8bdad5a6c11d8a3417dee243267ca39567585b4e5b41fa3ff34f2027b27ecb70af05cc46c3e94954c15b907a8713b010ee3c0bdfeb849a626a78042444a6065f6073e96eab6174c9115dc4d26fd46c773db63b1a3281681ecdf87603dbe6997ebc7f6251265e43cd752b25fe33102ce8c59e0ee066498ea6a5a69ac764f7bc9615b87e47afa45c887a3c42486261595c945c176345784fd41ea719073116254274f5b1d6cc3d87be8a092d9b20d9a0704d9582842b39fd0091061ccfc4421adb6f7fed834f9765f532f2d56ab74e70d0a247003ca2d283355533493feee94e74ba30be2aa3fe40367936584a40e50451ed693efd374e4379c79ec26fb0655f5ccacc6fbde5c9cd0af831958ff8e9f58c31b6bbfbe95648f7a6cd071a190407c05735aa54e6ad63ffc7861621098fe0c45d2035a1172060bf3e5dacaddb9a4e4645732779b36789ab319b9b879815b3d00472955f9aa70b4629f797d59b1b8c70de0b1598f457b5db6fef0feb3a664986777e0b67c2c1cfc600f0f946192bb0fe042b45a7c9bec15e1921f312f9d5981c1dc86b6d293bce996c6bb7c46971606d608959a234487b3d9c82667a7bfec7ce370f59ffe706113eee99bc0c5c40eb0fee993c39f904186c746dd51bb2fc679c82a9634626dedd28bbe332477b326ad684ce7c4018207fdfe3e4789b270a1ca2c2ca2848e899c611a77a0dd6a41968d8d53bf4e75530e104faea70f5e687117628fef94ce76daa6fe38a0be8e0590885048860390f400f8b2b897ec3b89e9095d9f29d9f7582599ecfb44c0cc4ffb6cfa6d058a5cfc9894f8ad1610ebf41fd331a685d6ac4c892c8773f9a7879f4603faada29566d24eb13251c4abe423ea0f3d9295960eafe87a92a8006b269f5e6e89c33b4df410c168111916b7059d94c9f2a1ffb312c54212bc61d4637b900350880072706de9df4dff7214e2798c5e89e13ab938c339c57393602864261057d844da950805e3ac3966a1487ef2c7939a09ded89927387babe131f354a137f927d4500e102ea73674754fe2ba4b8d49f0f22ac31b1c868049e770cfbb9b14c4c81a884a0e4867058401ad5152ea05489a66e67b020214231720b07ba4548015280f6068238d45d52ed62c8e4c3275139badc14c5131b927554ce74b96dbd07134ac6882d319db5b8c2d5180e8cf1c9519428e5dd9fe4134350ee4d3121640e9eb80f8a16432481d39b0a1cbf93526f80a1f666d602bcb62c81d02c2653c24a0f0839738e301e5eee4f3f30a100325aca4408d1e4dbffb1cb54eebe4f370aa82f82025189be98b60f52c751a4de5d7cd0398b1566c1bdd9e42ed78ef6d9332536c699394497e3e977c72835fdb0a8ba9be4f2490113421df0c487535aa11add674ddbe395435144d5c3e016223f1fbb9ba045a07e1a3ea91cc3b31cc2851619320f988c5e65fa3395a110ed8767b8891a8380f28497faa7bf36d9c6d1617f9b54784f9a91a92439beb5dfe0236d41bf9de52a594ca917a1761ed0a50060059227ce894854dd438b626949370fe067c9a9d614fed105db53c7603cd2fea2a65aa226c02ddd22d0d5183e4b6f4327a88574b7b6f8c70da0def1b71515f5afec6af4952a66afd552bc41581b5effeee252efd8fac712f3c267edbe037b4d760ff91a71146177a49588f146365fccfe8907eb39ea6fbc4e773b7e868261da2ed2cdac8b13b47bd3e698ed093b124d4917e4290ffff29a2f967b9292472ee867b68f933818a728522f68af1265f2d3b47a577c915dd714b1a77260abe1365deb3f44c41bb76cb74cb8338903e4f1346b5b0ea755ab2c188202517cdba3972ff87d260d582cd182d2c2ce3e194b61b60ddaa94bf265c93d1520def7c1c5052a36ecd43cd2e60b5c372c7ef8db0cfc49b93494915a6abb0a1d455819e96634f0c12cb44b425ac5e3578623a3e24552019ef73001008e704dfe7502472345f5a48b290b167abe3931ab6b03cc547009d92d012615c0a9ff79bb67c8110fccc4bcace5f59db6511808a0b98b3ab2c602083f4f519d4356f2016bc7e8d9ef93778130fd17cfeab400a2e0c04ac6789341f52c8e636fa2e1e9c7288a131acd2561760f9326ec52837e32a87e74cac1c2f83f2ab280c3ac1a0d832803eacd9dc0a539ee6c99d98ee2d785bd67b6c5380d9604ab580f8e4f311e2e65169c525092ebda778091c5308effc3fc7b7a189501a157d8a3190aff913df4d4f0b392b57ca612c0db41f717d5fb0c8e5a06a2d7d7f73439e27884728354259ae03932abe7df816fc2769429d6b9210450eaf93ac6fd9cb94a3737cc44df5dddff455a8db926b3713a5ba840ab2029723823c827036962e64ac6e030c40ae2495cd112acf98069eecf28e49f190edccd36da315a46dca514668fdbb2b5222dd40470eb7795b4a4be89e1885d612414d230e027254ed69f39c671cf76d38b0e53cfc201db9e98f1e18783089a0991cf19e4db6b262c1540685272ffe7199671f5106c22ce4d107e4f23dcf1e81d81b228a10530f3fd9d93b2f657d3c3eeaf260ce8e63d5799d7b4e779049aa1f3bce2150e03958d72e024f25ba9a1b523291f5a780e1c6fc3fa090e68364123a6c980143d9fc5f8b8506a8d1847d344feeabcb3f0caa2840e25d2737ea6944bdf4a90ddce794d27ad1c3aec6e69cc4f55ef4b3355cdb69cc1f6e609df478f64adc7b220ac2d5ea5ff6f249e2a764e1e09e8354a512fe59d3c2da04fca77a9d64c20320eb845bc2f994339ae7350835f5a132c121550b3a78f479dd1c8b1c226889889b3f7a86330c99753abee9af216ddbf1289e488036d1ae361c834dcec8db0052669579c1681e567c5f307ad43a289734d36d205db27fad8b2266df039510f12472b705b2ef8c0554fbd90b11048da1efd7a018ae4d46b7ede90cab63287c4818ff647bf6ed0998ef4434ae8a78c8bbad57c2818d0bafee8efc819480c253355d19ddf32dfdf67f324cb8f3be26b2139e1940f0b3d96ade23ed726f1c6c62c84a8246ac5f2a01a12d13a730cf5d55a0dbfb76a10d9e0038793cb7e23aa5b3f29ebb6bd7e52c84e19cf8922ea472092a29ca2e43ee2db4c023fffd0119e140916669f40f407cd94706782c85eea2d2a61cb2247faf193ff2aa2fc25178a6a188b177d0d0e9b7a952bf0d819008e1705e67678f952261c578d188e0786dbad36f7315abdacaf16d67dd9ac8f251db088924e834a7a3910024f46852bfc3c6ca156408401135021f4affd28b639b2ee733cf64bac6bc2b4bd7503d99f291e816cfee12e5a28a033ab0aa895029a2d0612d2d55fb8498afd698b608bc65372a11e5ad4ca47834efcd03f51423b193f15bba55af1fa01f12cffd63258987113fffcd35292a94fff2b343195252efab5b5654281810a981d9c77cf0a4a3f1daef9824c22bdcb0fae4cc03889ef751fe8dd845e8463b4c9de16b2572827cf740dfdea22c6da42ba379b2bb68f4847b3668d0eb5da6759e38815e376e3e6396c9ac977cb3f899b9512aeb03a071165e156e05953be7d4ab3ab5d617b35c02f98653bdeb80712a657f8158b7c1b33044594d5857c41827aa349db4476cda41428fb59e0ca9106d90699d2633bfdc9e5af4b967fcd7855e4b4baef699271c5ea88603b76fce0edf40f9c9c5c0120e264813fec408f88c5b66d95cb171cc2ed71ff17ed1b494c3cebcecb60653f8e782919f60c245b81b6c022bb39c59255bf42746a3e37f2d0cb4d290ac1723f83d309b8c9fe0eea5d542d9e246aaa02c26feb61828a36f548c9307978b71b6c125522d69a2ab467c84ad69bca9d35b000a33771451c2355fc639694a93619e722b763a1df3f27dbc6d5d57050d58d6a8db64a1e798311a6ea352d5c939238b4a166e33f31f4d72782a9aa6575262643f58545004c960a451a6beb9d7be97730f458aa76c907de7b6afb5199234427bb7bfb549259adfbec0b92868260de5bac0995f30e5625cbabfcd8f1caaa990d063812d170195411974a7564703f400b5a7a9ac6789f6621fd75da402a2be419649f2879302e76e371da467255846c48f0b942028fbfa07f69cc96a724eeddbfbbc4aa646576a75264df82ca2044bfe9c2cb1be8f552ed6b2e4e7d370fddb846860912fc184a36fce018a78ccdc1cf7552a7d50a1877955d1c44f112cb66e2328be7d8a8a587a88589220fde15889adc87024bbc668700b18e47e66597b1990c4c3fcb287791cc028a6e7015d4ab8507228fbca10fc3ded59337e4dd3ae90b61330ed0748228b430f9d55da958b2456eb0336a952dddc0e49ea8cf25c9b43e40af68b3ccb864b33a9555ada589345f0aa703b3aebb2f6863c65355761e9844453f8232f29dd7cdf10b35887e14795ac304279e04386062b7c01485290fdda0cb411a9a233ba47e2e39102c22484fa7502497936e1e15a3e3250454e9bc30c8e306a4cd7b0dd9906b1060959d30f74219ad75ba49bffbf674dacab447750fae526b88b5944930d9da4c1c328cc39c29c967787da42c048ab685b5cf151298e8dc383019d411f582ee995930cfee3bcc11b0f410e2aea1abf4073ff232995f5e3d323644b016a4cf039249851f606933c8902f3973f275a0a65fde8c0e3a4f5597d9826b1e338a0ac41e6c785e45e20477738831b70ebced1bf944abe963f5e8056f536adbea3a0126d0f24f63df0fde156356cc659be79c8ef16b2b2df65eb1b9885d4dd2284e310f4e0b70b219b0c108e69665722482aee583a4effde33aafaeb8996cae40de6aa7c23c0022a4f954d1cf99c510fc4372f9892471b5558c6762dc1ffc35c7cc019feeb79ad74a9a8c74ecac97dbc133953c57f9626037d9f45841c0573a53141d8dcf402f3476c51af8ccf65f2e23bf52d750265c5ca8b7a59e689ff1bdd2a2e80c80cc2824998ed1e9958a429983c264ecab200055aebbfb77e66b687669460410d399fa1277493910f84e2f3a02f41fed421f7094ed28afb9d1a31b51be297290cf076b59d009b4a83fbe9c8385d8d727191f8f43c52824806f5c20e73eb732664e0912c1720ec27f07ab0fd162eafb8f6ec757d715680c2a452e8f440767fa16fd61810fc98b65d449450e4d960723d44732d8bb9b15220417c71af79ad8b398cad15e38a038a95fe2233e8a7c11b2f9509161c9e6e339f43a83667d75af7e084f26c9fae9a4870e668fcea765202fd7f3443da97f8eefbc072f9f25a39f34a071e06776d9929d087fefc48f9ac5cbdda244792f0217905c1367298ac291ed8be77c48949c5017da360bfe0fc386861d00e5a5d4555261e88e62f55073142d855d40cd414cf0d5a8f", 0x1000}}, 0x1006) (async) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)=@overlay={0x81, 0x6, 0x4, 0x0, 0xd238, {0x0, 0xea60}, {0x1, 0x1, 0x3f, 0x3, 0x7f, 0x9, "2292886d"}, 0x3, 0x3, {}, 0x3, 0x0, r2}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0x3f, 0x3ff}) (async) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000100)={0xc, {0xe0, "1ef3469890c568d1aced40577492f5d335ec386d4ad952edc3bfdae7fa15e4f9753ec40a27b6a54cf1274c9715995e955e8463ccd4399a012dd563fb1ee7ce89b05e05fc13145046eef49204bbbdd02153c3f6f13dd6b536a5c3df6512c418fbed303ea8385c916132cebb829698179642fbb84bf145e9575804a97ebfee7dda61b7c40c118bdc1a7424fcd894e8270e1622ff68ee8d3fbf4772c6a90e74b16540ec620f0dd95d3e548678f4ab2b9efc615fdffca18991201d59d0faf21f5951c233e73e053f7eeecaa956f2748ec223e16207dc5675ab463d75ac33228ebefd"}}, 0xe6) 08:49:25 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000400)={0x2}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f0000000740)={0x12}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000400)={0x2}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f0000000740)={0x12}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (async) 08:49:25 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000100)={0x2, @sliced={0x8, [0x3, 0x0, 0xa4, 0x4, 0x8, 0x7, 0x6, 0x9, 0x3, 0x9, 0x2, 0xff5e, 0x5, 0xf87, 0x7fff, 0x200, 0x3, 0x1, 0x7, 0x401, 0x8001, 0x7, 0xf001, 0xffff, 0xc1, 0x7, 0x4, 0x7, 0x400, 0x8, 0x9, 0x9, 0x5, 0x3232, 0xffc0, 0x7, 0x0, 0x18, 0x3, 0x800, 0x401, 0xff, 0x1, 0x210, 0x9, 0x687, 0x2, 0x8], 0x1}}) (async) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8, 0x2}) 08:49:25 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x1, 0x9, 0x20, 0x8c000}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x1, 0x9, 0x20, 0x8c000}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) 08:49:25 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0x1, 0x3f, 0x1, {0x1, @sdr={0x38414261, 0xffffe0e7}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x89, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) 08:49:25 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000000)={0x9}) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) 08:49:25 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async, rerun: 64) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (rerun: 64) write$UHID_INPUT2(r3, &(0x7f0000000cc0), 0x6) (async) write$UHID_INPUT(r3, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)=@overlay={0x81, 0x6, 0x4, 0x0, 0xd238, {0x0, 0xea60}, {0x1, 0x1, 0x3f, 0x3, 0x7f, 0x9, "2292886d"}, 0x3, 0x3, {}, 0x3, 0x0, r2}) (async, rerun: 64) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (rerun: 64) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0x3f, 0x3ff}) (async) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000100)={0xc, {0xe0, "1ef3469890c568d1aced40577492f5d335ec386d4ad952edc3bfdae7fa15e4f9753ec40a27b6a54cf1274c9715995e955e8463ccd4399a012dd563fb1ee7ce89b05e05fc13145046eef49204bbbdd02153c3f6f13dd6b536a5c3df6512c418fbed303ea8385c916132cebb829698179642fbb84bf145e9575804a97ebfee7dda61b7c40c118bdc1a7424fcd894e8270e1622ff68ee8d3fbf4772c6a90e74b16540ec620f0dd95d3e548678f4ab2b9efc615fdffca18991201d59d0faf21f5951c233e73e053f7eeecaa956f2748ec223e16207dc5675ab463d75ac33228ebefd"}}, 0xe6) 08:49:25 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000400)={0x2}) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f0000000740)={0x12}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:25 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000100)={0x2, @sliced={0x8, [0x3, 0x0, 0xa4, 0x4, 0x8, 0x7, 0x6, 0x9, 0x3, 0x9, 0x2, 0xff5e, 0x5, 0xf87, 0x7fff, 0x200, 0x3, 0x1, 0x7, 0x401, 0x8001, 0x7, 0xf001, 0xffff, 0xc1, 0x7, 0x4, 0x7, 0x400, 0x8, 0x9, 0x9, 0x5, 0x3232, 0xffc0, 0x7, 0x0, 0x18, 0x3, 0x800, 0x401, 0xff, 0x1, 0x210, 0x9, 0x687, 0x2, 0x8], 0x1}}) (async, rerun: 64) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (rerun: 64) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8, 0x2}) 08:49:25 executing program 3: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}, 0x1000}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0xc000, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1d, 0x1, 0xffffff01, 0x6, 0x18a2, r0, 0x9, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000cc0), 0x6) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x9, &(0x7f0000000480)=ANY=[@ANYBLOB="3f3d030009000000cd3a1000fcffffff183b00000400000000000000000000008500000089000000000005000000000000000000000085100000000000003547060008000000000052387668f8e1ca765daa5a4b14871b68d421f646a47cb11f69fd42d3377d49af85ee446ebf98bd1c59e8614221683aaabcd3d1a03823a0c587981e14177b3da9b9c97eacc5c2278a517cfe6305a1b1fca57c8d0524b3661191e4c07d1c53c1bb0763a5aa33acd5bcd0746c282ae6cfb8472ff0a514eee21f16f3d6a4540e58eab2653e217124099c5a4c5c0b114bd580e400f19bee5e92997016b40953e2cefc852ee7e2bac70e33cf6837623e"], &(0x7f0000000580)='GPL\x00', 0x5, 0xcc, &(0x7f0000000240)=""/204, 0x41000, 0x7, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x3, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r1, r3, r2]}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x4, r4}, 0x10) 08:49:25 executing program 0: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x100, 0x8, 0x8]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x4000040) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:25 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000000)={0x9}) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) (async) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000000)={0x9}) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) (async) 08:49:26 executing program 4: ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, &(0x7f0000000000)={0xfe5b, 0xc, [{0x1, 0x1}, {0x8}, {0x0, 0x1}, {0xe}, {0xb, 0x1}, {0x9, 0x1}, {0xe, 0x1}, {0xc, 0x1}, {0xc}, {0xe}, {0xe}, {0xb}]}) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x3, 0x4, 0x0, 0x0, {}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) 08:49:26 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x1}, 0x4) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0xde38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x7f]}}}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) write$P9_RLERROR(r2, &(0x7f0000000040)={0x14, 0x7, 0x1, {0xb, '/dev/vim2m\x00'}}, 0x14) 08:49:26 executing program 3: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}, 0x1000}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0xc000, 0x0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1d, 0x1, 0xffffff01, 0x6, 0x18a2, r0, 0x9, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000cc0), 0x6) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x9, &(0x7f0000000480)=ANY=[@ANYBLOB="3f3d030009000000cd3a1000fcffffff183b00000400000000000000000000008500000089000000000005000000000000000000000085100000000000003547060008000000000052387668f8e1ca765daa5a4b14871b68d421f646a47cb11f69fd42d3377d49af85ee446ebf98bd1c59e8614221683aaabcd3d1a03823a0c587981e14177b3da9b9c97eacc5c2278a517cfe6305a1b1fca57c8d0524b3661191e4c07d1c53c1bb0763a5aa33acd5bcd0746c282ae6cfb8472ff0a514eee21f16f3d6a4540e58eab2653e217124099c5a4c5c0b114bd580e400f19bee5e92997016b40953e2cefc852ee7e2bac70e33cf6837623e"], &(0x7f0000000580)='GPL\x00', 0x5, 0xcc, &(0x7f0000000240)=""/204, 0x41000, 0x7, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x3, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r1, r3, r2]}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x4, r4}, 0x10) 08:49:26 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000040)={0xa, {0x6, 0x20, 0x7}}, 0xa) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x2, 0x2, 0x4, 0x102, 0xb1, {0x0, 0x2710}, {0x2, 0x1, 0x4, 0x1, 0x3, 0xbd, "e2656c51"}, 0x3, 0x2, {&(0x7f0000000140)=[{0x1, 0xffffffff, {&(0x7f0000000080)}, 0x1ff}, {0x10000, 0x0, {&(0x7f0000000100)}, 0xae}]}, 0x101, 0x0, r1}) 08:49:26 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000000)={0x9}) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) 08:49:26 executing program 0: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x100, 0x8, 0x8]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x4000040) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x100, 0x8, 0x8]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x4000040) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (async) 08:49:26 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x1}, 0x4) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0xde38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x7f]}}}) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async) write$P9_RLERROR(r2, &(0x7f0000000040)={0x14, 0x7, 0x1, {0xb, '/dev/vim2m\x00'}}, 0x14) 08:49:26 executing program 4: ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, &(0x7f0000000000)={0xfe5b, 0xc, [{0x1, 0x1}, {0x8}, {0x0, 0x1}, {0xe}, {0xb, 0x1}, {0x9, 0x1}, {0xe, 0x1}, {0xc, 0x1}, {0xc}, {0xe}, {0xe}, {0xb}]}) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x3, 0x4, 0x0, 0x0, {}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, &(0x7f0000000000)={0xfe5b, 0xc, [{0x1, 0x1}, {0x8}, {0x0, 0x1}, {0xe}, {0xb, 0x1}, {0x9, 0x1}, {0xe, 0x1}, {0xc, 0x1}, {0xc}, {0xe}, {0xe}, {0xb}]}) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x3, 0x4, 0x0, 0x0, {}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async) 08:49:26 executing program 3: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}, 0x1000}) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0xc000, 0x0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1d, 0x1, 0xffffff01, 0x6, 0x18a2, r0, 0x9, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) (async, rerun: 32) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000cc0), 0x6) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x9, &(0x7f0000000480)=ANY=[@ANYBLOB="3f3d030009000000cd3a1000fcffffff183b00000400000000000000000000008500000089000000000005000000000000000000000085100000000000003547060008000000000052387668f8e1ca765daa5a4b14871b68d421f646a47cb11f69fd42d3377d49af85ee446ebf98bd1c59e8614221683aaabcd3d1a03823a0c587981e14177b3da9b9c97eacc5c2278a517cfe6305a1b1fca57c8d0524b3661191e4c07d1c53c1bb0763a5aa33acd5bcd0746c282ae6cfb8472ff0a514eee21f16f3d6a4540e58eab2653e217124099c5a4c5c0b114bd580e400f19bee5e92997016b40953e2cefc852ee7e2bac70e33cf6837623e"], &(0x7f0000000580)='GPL\x00', 0x5, 0xcc, &(0x7f0000000240)=""/204, 0x41000, 0x7, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x3, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r1, r3, r2]}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x4, r4}, 0x10) 08:49:26 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000040)={0xa, {0x6, 0x20, 0x7}}, 0xa) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x2, 0x2, 0x4, 0x102, 0xb1, {0x0, 0x2710}, {0x2, 0x1, 0x4, 0x1, 0x3, 0xbd, "e2656c51"}, 0x3, 0x2, {&(0x7f0000000140)=[{0x1, 0xffffffff, {&(0x7f0000000080)}, 0x1ff}, {0x10000, 0x0, {&(0x7f0000000100)}, 0xae}]}, 0x101, 0x0, r1}) 08:49:26 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0xfff, 0x1, 0x1, 0x0, 0x20}) 08:49:26 executing program 0: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x100, 0x8, 0x8]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x4000040) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:26 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x1}, 0x4) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0xde38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x7f]}}}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) write$P9_RLERROR(r2, &(0x7f0000000040)={0x14, 0x7, 0x1, {0xb, '/dev/vim2m\x00'}}, 0x14) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x1}, 0x4) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0xde38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x7f]}}}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async) write$P9_RLERROR(r2, &(0x7f0000000040)={0x14, 0x7, 0x1, {0xb, '/dev/vim2m\x00'}}, 0x14) (async) 08:49:26 executing program 4: ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, &(0x7f0000000000)={0xfe5b, 0xc, [{0x1, 0x1}, {0x8}, {0x0, 0x1}, {0xe}, {0xb, 0x1}, {0x9, 0x1}, {0xe, 0x1}, {0xc, 0x1}, {0xc}, {0xe}, {0xe}, {0xb}]}) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x3, 0x4, 0x0, 0x0, {}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, &(0x7f0000000000)={0xfe5b, 0xc, [{0x1, 0x1}, {0x8}, {0x0, 0x1}, {0xe}, {0xb, 0x1}, {0x9, 0x1}, {0xe, 0x1}, {0xc, 0x1}, {0xc}, {0xe}, {0xe}, {0xb}]}) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x3, 0x4, 0x0, 0x0, {}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async) 08:49:26 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)={0x3d, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:26 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x3, 0x4, {0x2, @sliced={0x0, [0xffff, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}}}) 08:49:26 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000040)={0xa, {0x6, 0x20, 0x7}}, 0xa) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x2, 0x2, 0x4, 0x102, 0xb1, {0x0, 0x2710}, {0x2, 0x1, 0x4, 0x1, 0x3, 0xbd, "e2656c51"}, 0x3, 0x2, {&(0x7f0000000140)=[{0x1, 0xffffffff, {&(0x7f0000000080)}, 0x1ff}, {0x10000, 0x0, {&(0x7f0000000100)}, 0xae}]}, 0x101, 0x0, r1}) 08:49:26 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0xfff, 0x1, 0x1, 0x0, 0x20}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0xfff, 0x1, 0x1, 0x0, 0x20}) (async) 08:49:26 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="801e5b03db188a7b00000000000000"], 0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000400)={{0x8, 0x7, 0x100, 0x400, 'syz0\x00', 0x5}, 0x1, [0x0, 0x3, 0xffffffff, 0x9, 0x4, 0x3f, 0x5, 0x9, 0x1, 0x3, 0xb6c, 0x4e, 0x2, 0x4, 0x2, 0x0, 0x5, 0x7c2, 0x4, 0x3, 0x8000, 0x8, 0x1, 0x2a, 0x1f, 0x8e, 0x700000000000000, 0x401, 0x0, 0xc0, 0x6, 0x9, 0x101, 0x328, 0x8000000000000000, 0x80000000, 0x200, 0x7, 0x38, 0x6, 0x10001, 0x9, 0x2, 0x8, 0x1ff, 0x4, 0x2, 0x8001, 0x5, 0x9, 0x8bb, 0xde, 0xa7d, 0x101, 0x3, 0x20, 0x0, 0xffffffffffffffff, 0x9, 0x8000000000000000, 0x80000001, 0x1, 0x4, 0xeeb, 0x7, 0x4, 0x3, 0x8, 0xfffffffffffffff9, 0x100000000, 0x0, 0x100000001, 0x3, 0x80000000, 0x4b, 0x8, 0xffffffff, 0x8, 0x1, 0x2, 0x0, 0x8, 0x8, 0x2, 0x80000000, 0x5, 0x1, 0x2, 0x5, 0x7, 0x3, 0x6, 0x9, 0x100000000, 0x7, 0x2, 0x400, 0x100000001, 0x0, 0x7, 0xe5, 0x20, 0x1ff, 0x6, 0x100000000, 0x20, 0xa2, 0x8, 0x0, 0x86, 0x4cee314, 0x3a, 0x8, 0x6, 0x7, 0x2, 0x3, 0x1, 0x400, 0x80, 0x18b, 0xffcc, 0x81, 0x200000000000000, 0xcb1, 0x2, 0xff, 0xdef9]}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x0, 0x3, 0x1, 0x0, 0x9}) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x0, 0x1, 0x0, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:26 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@userptr={0x6, 0x2, 0x4, 0x10, 0x1, {}, {0x5, 0x1, 0x2, 0x3f, 0x6, 0x3, "2a61cc4a"}, 0x5, 0x2, {}, 0x7}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) 08:49:26 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)={0x3d, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) (async) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)={0x3d, 0x1}) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) 08:49:26 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x3, 0x4, {0x2, @sliced={0x0, [0xffff, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}}}) 08:49:26 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x14881, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="68000000290100347c0000000402000400030000000000000002000000000000000307002e2f66696c65300100000000050000000000009fffffffffffff14723f07002e2f66696c6530000100000006000000000000000600f3ffffffffff1c07002e2f8f1402a966696c6530562b7c636c25be0e1281539940828244f4"], 0x68) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000140)={0x0}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000240)) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000200)={r3, 0x27}) 08:49:26 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="801e5b03db188a7b00000000000000"], 0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000400)={{0x8, 0x7, 0x100, 0x400, 'syz0\x00', 0x5}, 0x1, [0x0, 0x3, 0xffffffff, 0x9, 0x4, 0x3f, 0x5, 0x9, 0x1, 0x3, 0xb6c, 0x4e, 0x2, 0x4, 0x2, 0x0, 0x5, 0x7c2, 0x4, 0x3, 0x8000, 0x8, 0x1, 0x2a, 0x1f, 0x8e, 0x700000000000000, 0x401, 0x0, 0xc0, 0x6, 0x9, 0x101, 0x328, 0x8000000000000000, 0x80000000, 0x200, 0x7, 0x38, 0x6, 0x10001, 0x9, 0x2, 0x8, 0x1ff, 0x4, 0x2, 0x8001, 0x5, 0x9, 0x8bb, 0xde, 0xa7d, 0x101, 0x3, 0x20, 0x0, 0xffffffffffffffff, 0x9, 0x8000000000000000, 0x80000001, 0x1, 0x4, 0xeeb, 0x7, 0x4, 0x3, 0x8, 0xfffffffffffffff9, 0x100000000, 0x0, 0x100000001, 0x3, 0x80000000, 0x4b, 0x8, 0xffffffff, 0x8, 0x1, 0x2, 0x0, 0x8, 0x8, 0x2, 0x80000000, 0x5, 0x1, 0x2, 0x5, 0x7, 0x3, 0x6, 0x9, 0x100000000, 0x7, 0x2, 0x400, 0x100000001, 0x0, 0x7, 0xe5, 0x20, 0x1ff, 0x6, 0x100000000, 0x20, 0xa2, 0x8, 0x0, 0x86, 0x4cee314, 0x3a, 0x8, 0x6, 0x7, 0x2, 0x3, 0x1, 0x400, 0x80, 0x18b, 0xffcc, 0x81, 0x200000000000000, 0xcb1, 0x2, 0xff, 0xdef9]}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x0, 0x3, 0x1, 0x0, 0x9}) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x0, 0x1, 0x0, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="801e5b03db188a7b00000000000000"], 0x6) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000400)={{0x8, 0x7, 0x100, 0x400, 'syz0\x00', 0x5}, 0x1, [0x0, 0x3, 0xffffffff, 0x9, 0x4, 0x3f, 0x5, 0x9, 0x1, 0x3, 0xb6c, 0x4e, 0x2, 0x4, 0x2, 0x0, 0x5, 0x7c2, 0x4, 0x3, 0x8000, 0x8, 0x1, 0x2a, 0x1f, 0x8e, 0x700000000000000, 0x401, 0x0, 0xc0, 0x6, 0x9, 0x101, 0x328, 0x8000000000000000, 0x80000000, 0x200, 0x7, 0x38, 0x6, 0x10001, 0x9, 0x2, 0x8, 0x1ff, 0x4, 0x2, 0x8001, 0x5, 0x9, 0x8bb, 0xde, 0xa7d, 0x101, 0x3, 0x20, 0x0, 0xffffffffffffffff, 0x9, 0x8000000000000000, 0x80000001, 0x1, 0x4, 0xeeb, 0x7, 0x4, 0x3, 0x8, 0xfffffffffffffff9, 0x100000000, 0x0, 0x100000001, 0x3, 0x80000000, 0x4b, 0x8, 0xffffffff, 0x8, 0x1, 0x2, 0x0, 0x8, 0x8, 0x2, 0x80000000, 0x5, 0x1, 0x2, 0x5, 0x7, 0x3, 0x6, 0x9, 0x100000000, 0x7, 0x2, 0x400, 0x100000001, 0x0, 0x7, 0xe5, 0x20, 0x1ff, 0x6, 0x100000000, 0x20, 0xa2, 0x8, 0x0, 0x86, 0x4cee314, 0x3a, 0x8, 0x6, 0x7, 0x2, 0x3, 0x1, 0x400, 0x80, 0x18b, 0xffcc, 0x81, 0x200000000000000, 0xcb1, 0x2, 0xff, 0xdef9]}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r3, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x0, 0x3, 0x1, 0x0, 0x9}) (async) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x0, 0x1, 0x0, 0x4}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (async) 08:49:26 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0xfff, 0x1, 0x1, 0x0, 0x20}) 08:49:26 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@userptr={0x6, 0x2, 0x4, 0x10, 0x1, {}, {0x5, 0x1, 0x2, 0x3f, 0x6, 0x3, "2a61cc4a"}, 0x5, 0x2, {}, 0x7}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@userptr={0x6, 0x2, 0x4, 0x10, 0x1, {}, {0x5, 0x1, 0x2, 0x3f, 0x6, 0x3, "2a61cc4a"}, 0x5, 0x2, {}, 0x7}) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async) 08:49:26 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x3, 0x4, {0x2, @sliced={0x0, [0xffff, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}}}) 08:49:26 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)={0x3d, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) (async) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)={0x3d, 0x1}) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) 08:49:26 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x14881, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="68000000290100347c0000000402000400030000000000000002000000000000000307002e2f66696c65300100000000050000000000009fffffffffffff14723f07002e2f66696c6530000100000006000000000000000600f3ffffffffff1c07002e2f8f1402a966696c6530562b7c636c25be0e1281539940828244f4"], 0x68) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async, rerun: 32) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) (async, rerun: 32) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000140)={0x0}) (async, rerun: 32) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (rerun: 32) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000240)) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000200)={r3, 0x27}) 08:49:26 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) r2 = syz_open_dev$usbfs(&(0x7f0000000ac0), 0xd7544f0, 0x4002) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f0000000b00)) write$P9_RSTATFS(r1, &(0x7f0000000a40)={0x43, 0x9, 0x2, {0x7, 0x200000, 0x20000000, 0x0, 0x1, 0xfffffffffffffffc, 0x1571, 0x3be, 0x7}}, 0x43) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix_mp={0xfffffffc, 0x0, 0x0, 0x2, 0x0, [{0x0, 0x5}, {0xa31f, 0xfffffffe}, {}, {0x110}, {}, {0x7ec5}, {0x4}], 0x0, 0x0, 0x0, 0x1}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000100)={0x1, @sliced={0xfff7, [0x1000, 0x401, 0x2f12, 0x7fc0, 0x7f, 0x1c, 0x4, 0x0, 0x4, 0xc3e9, 0x7, 0x2, 0x0, 0xfff, 0xfff, 0x5, 0x7, 0x3d3, 0xd29, 0x7, 0xc000, 0x1000, 0x5, 0x3, 0x445, 0xfffc, 0xcb9, 0x9, 0x99e, 0x2, 0x2, 0x30e, 0x20, 0x3f, 0x4, 0x3, 0x2, 0x5, 0x3, 0x9, 0x61d8, 0x4, 0x9, 0x0, 0x4, 0x7, 0xec, 0x7ffb], 0x80000001}}) syz_open_dev$dri(&(0x7f0000000040), 0x7fff, 0x20000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$mouse(&(0x7f0000000500), 0x3, 0x511100) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x6, 0x1, 0x80, 'syz0\x00', 0xb1}, 0x0, [0x9, 0x10000, 0x7ff, 0x5, 0x7c, 0xff, 0x80000001, 0x3, 0x9, 0x7, 0xf04, 0x7ff, 0x3ff, 0x703, 0xffffffff, 0x6, 0x8, 0x100000001, 0x3, 0x0, 0xff, 0xd8bf, 0x8, 0x2, 0x10001, 0x40, 0x7, 0x0, 0x7, 0x6, 0x1, 0x540, 0x9, 0x20, 0x20, 0x1, 0x3, 0x0, 0x7, 0xffff, 0x401, 0x3, 0xffffffffffff0000, 0x5, 0x63, 0x6, 0x80, 0xc3, 0x5, 0x10000, 0x1, 0x516, 0x3, 0x3fe00000000, 0x5, 0x0, 0xfde, 0x5, 0x5, 0x12, 0x5, 0x100, 0x3, 0x7daf, 0x7, 0x4, 0x1, 0x2e, 0x6, 0x8001, 0xd555, 0xffffffffffff290b, 0x8, 0x40, 0x81, 0x3, 0x9, 0x8, 0x4, 0x8000000000000000, 0x101, 0x3, 0x3, 0xffffffffffffffd7, 0xffff, 0xe240, 0x10000, 0x86, 0x7ff, 0x6, 0x4, 0x0, 0x0, 0x9, 0x5, 0xffffffffffffff50, 0x8000, 0x0, 0x3, 0xa5, 0x800, 0x4, 0x5332, 0x8, 0x10000, 0x5, 0x8, 0xfffffffffffffeff, 0xfa, 0x9, 0x100000000, 0x4000000000, 0x9, 0x6, 0xfd, 0x2, 0x73cf, 0x7fff, 0x65, 0x1, 0xff, 0x9, 0x5, 0x10000, 0x1, 0x8000000000000001, 0x70, 0x100000000]}) sendmsg$NFC_CMD_GET_SE(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14}, 0x14}}, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000400)={0x1, @sliced={0x3, [0x200, 0x4, 0x6, 0x7f, 0x8, 0x7, 0x8910, 0x400, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x3, 0x20, 0x9, 0x7, 0x8001, 0xfff8, 0x4, 0xd4f, 0x7, 0x0, 0x0, 0x9, 0x101, 0x4, 0x7, 0x3, 0x7, 0x3, 0x4, 0x7, 0x2, 0x6, 0x6, 0x401, 0x7c52, 0x5, 0x7, 0x3, 0x9, 0x1, 0x73, 0x2, 0xff, 0x7], 0x4800000}}) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r3, 0x5521) 08:49:26 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="801e5b03db188a7b00000000000000"], 0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000400)={{0x8, 0x7, 0x100, 0x400, 'syz0\x00', 0x5}, 0x1, [0x0, 0x3, 0xffffffff, 0x9, 0x4, 0x3f, 0x5, 0x9, 0x1, 0x3, 0xb6c, 0x4e, 0x2, 0x4, 0x2, 0x0, 0x5, 0x7c2, 0x4, 0x3, 0x8000, 0x8, 0x1, 0x2a, 0x1f, 0x8e, 0x700000000000000, 0x401, 0x0, 0xc0, 0x6, 0x9, 0x101, 0x328, 0x8000000000000000, 0x80000000, 0x200, 0x7, 0x38, 0x6, 0x10001, 0x9, 0x2, 0x8, 0x1ff, 0x4, 0x2, 0x8001, 0x5, 0x9, 0x8bb, 0xde, 0xa7d, 0x101, 0x3, 0x20, 0x0, 0xffffffffffffffff, 0x9, 0x8000000000000000, 0x80000001, 0x1, 0x4, 0xeeb, 0x7, 0x4, 0x3, 0x8, 0xfffffffffffffff9, 0x100000000, 0x0, 0x100000001, 0x3, 0x80000000, 0x4b, 0x8, 0xffffffff, 0x8, 0x1, 0x2, 0x0, 0x8, 0x8, 0x2, 0x80000000, 0x5, 0x1, 0x2, 0x5, 0x7, 0x3, 0x6, 0x9, 0x100000000, 0x7, 0x2, 0x400, 0x100000001, 0x0, 0x7, 0xe5, 0x20, 0x1ff, 0x6, 0x100000000, 0x20, 0xa2, 0x8, 0x0, 0x86, 0x4cee314, 0x3a, 0x8, 0x6, 0x7, 0x2, 0x3, 0x1, 0x400, 0x80, 0x18b, 0xffcc, 0x81, 0x200000000000000, 0xcb1, 0x2, 0xff, 0xdef9]}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x0, 0x3, 0x1, 0x0, 0x9}) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x0, 0x1, 0x0, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="801e5b03db188a7b00000000000000"], 0x6) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000400)={{0x8, 0x7, 0x100, 0x400, 'syz0\x00', 0x5}, 0x1, [0x0, 0x3, 0xffffffff, 0x9, 0x4, 0x3f, 0x5, 0x9, 0x1, 0x3, 0xb6c, 0x4e, 0x2, 0x4, 0x2, 0x0, 0x5, 0x7c2, 0x4, 0x3, 0x8000, 0x8, 0x1, 0x2a, 0x1f, 0x8e, 0x700000000000000, 0x401, 0x0, 0xc0, 0x6, 0x9, 0x101, 0x328, 0x8000000000000000, 0x80000000, 0x200, 0x7, 0x38, 0x6, 0x10001, 0x9, 0x2, 0x8, 0x1ff, 0x4, 0x2, 0x8001, 0x5, 0x9, 0x8bb, 0xde, 0xa7d, 0x101, 0x3, 0x20, 0x0, 0xffffffffffffffff, 0x9, 0x8000000000000000, 0x80000001, 0x1, 0x4, 0xeeb, 0x7, 0x4, 0x3, 0x8, 0xfffffffffffffff9, 0x100000000, 0x0, 0x100000001, 0x3, 0x80000000, 0x4b, 0x8, 0xffffffff, 0x8, 0x1, 0x2, 0x0, 0x8, 0x8, 0x2, 0x80000000, 0x5, 0x1, 0x2, 0x5, 0x7, 0x3, 0x6, 0x9, 0x100000000, 0x7, 0x2, 0x400, 0x100000001, 0x0, 0x7, 0xe5, 0x20, 0x1ff, 0x6, 0x100000000, 0x20, 0xa2, 0x8, 0x0, 0x86, 0x4cee314, 0x3a, 0x8, 0x6, 0x7, 0x2, 0x3, 0x1, 0x400, 0x80, 0x18b, 0xffcc, 0x81, 0x200000000000000, 0xcb1, 0x2, 0xff, 0xdef9]}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r3, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x0, 0x3, 0x1, 0x0, 0x9}) (async) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x0, 0x1, 0x0, 0x4}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (async) 08:49:26 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@userptr={0x6, 0x2, 0x4, 0x10, 0x1, {}, {0x5, 0x1, 0x2, 0x3f, 0x6, 0x3, "2a61cc4a"}, 0x5, 0x2, {}, 0x7}) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) 08:49:26 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:26 executing program 3: ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000000)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000240)={{0x8000000000000001, 0x800}, {0x1ff}, 0xffffffff, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) pipe2$9p(&(0x7f0000000080), 0x80000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) write$P9_RVERSION(r2, &(0x7f0000000100)={0x15, 0x65, 0xffff, 0x2, 0x8, '9P2000.L'}, 0x15) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x480000, 0x0) write$P9_RVERSION(r3, &(0x7f00000002c0)={0x15, 0x65, 0xffff, 0xe6c, 0x8, '9P2000.u'}, 0x15) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:26 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async, rerun: 32) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (rerun: 32) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000ac0), 0xd7544f0, 0x4002) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f0000000b00)) (async) write$P9_RSTATFS(r1, &(0x7f0000000a40)={0x43, 0x9, 0x2, {0x7, 0x200000, 0x20000000, 0x0, 0x1, 0xfffffffffffffffc, 0x1571, 0x3be, 0x7}}, 0x43) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix_mp={0xfffffffc, 0x0, 0x0, 0x2, 0x0, [{0x0, 0x5}, {0xa31f, 0xfffffffe}, {}, {0x110}, {}, {0x7ec5}, {0x4}], 0x0, 0x0, 0x0, 0x1}}) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000100)={0x1, @sliced={0xfff7, [0x1000, 0x401, 0x2f12, 0x7fc0, 0x7f, 0x1c, 0x4, 0x0, 0x4, 0xc3e9, 0x7, 0x2, 0x0, 0xfff, 0xfff, 0x5, 0x7, 0x3d3, 0xd29, 0x7, 0xc000, 0x1000, 0x5, 0x3, 0x445, 0xfffc, 0xcb9, 0x9, 0x99e, 0x2, 0x2, 0x30e, 0x20, 0x3f, 0x4, 0x3, 0x2, 0x5, 0x3, 0x9, 0x61d8, 0x4, 0x9, 0x0, 0x4, 0x7, 0xec, 0x7ffb], 0x80000001}}) syz_open_dev$dri(&(0x7f0000000040), 0x7fff, 0x20000) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_open_dev$mouse(&(0x7f0000000500), 0x3, 0x511100) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x6, 0x1, 0x80, 'syz0\x00', 0xb1}, 0x0, [0x9, 0x10000, 0x7ff, 0x5, 0x7c, 0xff, 0x80000001, 0x3, 0x9, 0x7, 0xf04, 0x7ff, 0x3ff, 0x703, 0xffffffff, 0x6, 0x8, 0x100000001, 0x3, 0x0, 0xff, 0xd8bf, 0x8, 0x2, 0x10001, 0x40, 0x7, 0x0, 0x7, 0x6, 0x1, 0x540, 0x9, 0x20, 0x20, 0x1, 0x3, 0x0, 0x7, 0xffff, 0x401, 0x3, 0xffffffffffff0000, 0x5, 0x63, 0x6, 0x80, 0xc3, 0x5, 0x10000, 0x1, 0x516, 0x3, 0x3fe00000000, 0x5, 0x0, 0xfde, 0x5, 0x5, 0x12, 0x5, 0x100, 0x3, 0x7daf, 0x7, 0x4, 0x1, 0x2e, 0x6, 0x8001, 0xd555, 0xffffffffffff290b, 0x8, 0x40, 0x81, 0x3, 0x9, 0x8, 0x4, 0x8000000000000000, 0x101, 0x3, 0x3, 0xffffffffffffffd7, 0xffff, 0xe240, 0x10000, 0x86, 0x7ff, 0x6, 0x4, 0x0, 0x0, 0x9, 0x5, 0xffffffffffffff50, 0x8000, 0x0, 0x3, 0xa5, 0x800, 0x4, 0x5332, 0x8, 0x10000, 0x5, 0x8, 0xfffffffffffffeff, 0xfa, 0x9, 0x100000000, 0x4000000000, 0x9, 0x6, 0xfd, 0x2, 0x73cf, 0x7fff, 0x65, 0x1, 0xff, 0x9, 0x5, 0x10000, 0x1, 0x8000000000000001, 0x70, 0x100000000]}) sendmsg$NFC_CMD_GET_SE(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14}, 0x14}}, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000400)={0x1, @sliced={0x3, [0x200, 0x4, 0x6, 0x7f, 0x8, 0x7, 0x8910, 0x400, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x3, 0x20, 0x9, 0x7, 0x8001, 0xfff8, 0x4, 0xd4f, 0x7, 0x0, 0x0, 0x9, 0x101, 0x4, 0x7, 0x3, 0x7, 0x3, 0x4, 0x7, 0x2, 0x6, 0x6, 0x401, 0x7c52, 0x5, 0x7, 0x3, 0x9, 0x1, 0x73, 0x2, 0xff, 0x7], 0x4800000}}) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) ioctl$USBDEVFS_FORBID_SUSPEND(r3, 0x5521) 08:49:26 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x14881, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="68000000290100347c0000000402000400030000000000000002000000000000000307002e2f66696c65300100000000050000000000009fffffffffffff14723f07002e2f66696c6530000100000006000000000000000600f3ffffffffff1c07002e2f8f1402a966696c6530562b7c636c25be0e1281539940828244f4"], 0x68) (async, rerun: 32) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 32) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000140)={0x0}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) (async, rerun: 64) ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000240)) (async, rerun: 64) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000200)={r3, 0x27}) 08:49:26 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000002c0)={0x7, 0x2}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x5, 0x7fffffff, 0x1, {0x2, @win={{0x2ef11c46, 0x6b, 0x4, 0x144}, 0x5, 0x1000, &(0x7f0000000000)={{0x3d32, 0x5, 0x759, 0x3f}, 0xfffffffffffffffc}, 0x5, &(0x7f0000000100)="1f7ee197a66a0bc1f916c8c44bf9d7d643cac6beb4f99939a8e835ad91368c0671a2710febe2f8b7c5df1524b23d34c55fdc54c4dda9d7a541b42b8022963b8c996e5fbad09c902453c8f5eadde7e244bd255d8b8c275d6368a87a849c9072dd455cde85d8fde8839ce5fd48931cfa4838e9815499b9adafa7da503b0db569523c0a0705b46467a5308088ebd20de7c8b663aae6352a36db1fc7eff13f6c0f5f", 0xc0}}, 0x6538}) 08:49:26 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:26 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000000)=@mmap={0x973, 0x1, 0x4, 0x2, 0x9, {0x77359400}, {0x5, 0x0, 0xc0, 0xfb, 0x2, 0x4, "1c492650"}, 0x4, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:26 executing program 3: ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000000)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) (async, rerun: 32) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000240)={{0x8000000000000001, 0x800}, {0x1ff}, 0xffffffff, 0x1}) (async, rerun: 32) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async, rerun: 32) pipe2$9p(&(0x7f0000000080), 0x80000) (async, rerun: 32) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async, rerun: 32) write$P9_RVERSION(r2, &(0x7f0000000100)={0x15, 0x65, 0xffff, 0x2, 0x8, '9P2000.L'}, 0x15) (async, rerun: 32) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x480000, 0x0) write$P9_RVERSION(r3, &(0x7f00000002c0)={0x15, 0x65, 0xffff, 0xe6c, 0x8, '9P2000.u'}, 0x15) (async, rerun: 64) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (rerun: 64) 08:49:26 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) r2 = syz_open_dev$usbfs(&(0x7f0000000ac0), 0xd7544f0, 0x4002) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f0000000b00)) write$P9_RSTATFS(r1, &(0x7f0000000a40)={0x43, 0x9, 0x2, {0x7, 0x200000, 0x20000000, 0x0, 0x1, 0xfffffffffffffffc, 0x1571, 0x3be, 0x7}}, 0x43) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix_mp={0xfffffffc, 0x0, 0x0, 0x2, 0x0, [{0x0, 0x5}, {0xa31f, 0xfffffffe}, {}, {0x110}, {}, {0x7ec5}, {0x4}], 0x0, 0x0, 0x0, 0x1}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000100)={0x1, @sliced={0xfff7, [0x1000, 0x401, 0x2f12, 0x7fc0, 0x7f, 0x1c, 0x4, 0x0, 0x4, 0xc3e9, 0x7, 0x2, 0x0, 0xfff, 0xfff, 0x5, 0x7, 0x3d3, 0xd29, 0x7, 0xc000, 0x1000, 0x5, 0x3, 0x445, 0xfffc, 0xcb9, 0x9, 0x99e, 0x2, 0x2, 0x30e, 0x20, 0x3f, 0x4, 0x3, 0x2, 0x5, 0x3, 0x9, 0x61d8, 0x4, 0x9, 0x0, 0x4, 0x7, 0xec, 0x7ffb], 0x80000001}}) syz_open_dev$dri(&(0x7f0000000040), 0x7fff, 0x20000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$mouse(&(0x7f0000000500), 0x3, 0x511100) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x6, 0x1, 0x80, 'syz0\x00', 0xb1}, 0x0, [0x9, 0x10000, 0x7ff, 0x5, 0x7c, 0xff, 0x80000001, 0x3, 0x9, 0x7, 0xf04, 0x7ff, 0x3ff, 0x703, 0xffffffff, 0x6, 0x8, 0x100000001, 0x3, 0x0, 0xff, 0xd8bf, 0x8, 0x2, 0x10001, 0x40, 0x7, 0x0, 0x7, 0x6, 0x1, 0x540, 0x9, 0x20, 0x20, 0x1, 0x3, 0x0, 0x7, 0xffff, 0x401, 0x3, 0xffffffffffff0000, 0x5, 0x63, 0x6, 0x80, 0xc3, 0x5, 0x10000, 0x1, 0x516, 0x3, 0x3fe00000000, 0x5, 0x0, 0xfde, 0x5, 0x5, 0x12, 0x5, 0x100, 0x3, 0x7daf, 0x7, 0x4, 0x1, 0x2e, 0x6, 0x8001, 0xd555, 0xffffffffffff290b, 0x8, 0x40, 0x81, 0x3, 0x9, 0x8, 0x4, 0x8000000000000000, 0x101, 0x3, 0x3, 0xffffffffffffffd7, 0xffff, 0xe240, 0x10000, 0x86, 0x7ff, 0x6, 0x4, 0x0, 0x0, 0x9, 0x5, 0xffffffffffffff50, 0x8000, 0x0, 0x3, 0xa5, 0x800, 0x4, 0x5332, 0x8, 0x10000, 0x5, 0x8, 0xfffffffffffffeff, 0xfa, 0x9, 0x100000000, 0x4000000000, 0x9, 0x6, 0xfd, 0x2, 0x73cf, 0x7fff, 0x65, 0x1, 0xff, 0x9, 0x5, 0x10000, 0x1, 0x8000000000000001, 0x70, 0x100000000]}) sendmsg$NFC_CMD_GET_SE(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14}, 0x14}}, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000400)={0x1, @sliced={0x3, [0x200, 0x4, 0x6, 0x7f, 0x8, 0x7, 0x8910, 0x400, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x3, 0x20, 0x9, 0x7, 0x8001, 0xfff8, 0x4, 0xd4f, 0x7, 0x0, 0x0, 0x9, 0x101, 0x4, 0x7, 0x3, 0x7, 0x3, 0x4, 0x7, 0x2, 0x6, 0x6, 0x401, 0x7c52, 0x5, 0x7, 0x3, 0x9, 0x1, 0x73, 0x2, 0xff, 0x7], 0x4800000}}) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r3, 0x5521) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) syz_open_dev$usbfs(&(0x7f0000000ac0), 0xd7544f0, 0x4002) (async) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f0000000b00)) (async) write$P9_RSTATFS(r1, &(0x7f0000000a40)={0x43, 0x9, 0x2, {0x7, 0x200000, 0x20000000, 0x0, 0x1, 0xfffffffffffffffc, 0x1571, 0x3be, 0x7}}, 0x43) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix_mp={0xfffffffc, 0x0, 0x0, 0x2, 0x0, [{0x0, 0x5}, {0xa31f, 0xfffffffe}, {}, {0x110}, {}, {0x7ec5}, {0x4}], 0x0, 0x0, 0x0, 0x1}}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000100)={0x1, @sliced={0xfff7, [0x1000, 0x401, 0x2f12, 0x7fc0, 0x7f, 0x1c, 0x4, 0x0, 0x4, 0xc3e9, 0x7, 0x2, 0x0, 0xfff, 0xfff, 0x5, 0x7, 0x3d3, 0xd29, 0x7, 0xc000, 0x1000, 0x5, 0x3, 0x445, 0xfffc, 0xcb9, 0x9, 0x99e, 0x2, 0x2, 0x30e, 0x20, 0x3f, 0x4, 0x3, 0x2, 0x5, 0x3, 0x9, 0x61d8, 0x4, 0x9, 0x0, 0x4, 0x7, 0xec, 0x7ffb], 0x80000001}}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x7fff, 0x20000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_dev$mouse(&(0x7f0000000500), 0x3, 0x511100) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x6, 0x1, 0x80, 'syz0\x00', 0xb1}, 0x0, [0x9, 0x10000, 0x7ff, 0x5, 0x7c, 0xff, 0x80000001, 0x3, 0x9, 0x7, 0xf04, 0x7ff, 0x3ff, 0x703, 0xffffffff, 0x6, 0x8, 0x100000001, 0x3, 0x0, 0xff, 0xd8bf, 0x8, 0x2, 0x10001, 0x40, 0x7, 0x0, 0x7, 0x6, 0x1, 0x540, 0x9, 0x20, 0x20, 0x1, 0x3, 0x0, 0x7, 0xffff, 0x401, 0x3, 0xffffffffffff0000, 0x5, 0x63, 0x6, 0x80, 0xc3, 0x5, 0x10000, 0x1, 0x516, 0x3, 0x3fe00000000, 0x5, 0x0, 0xfde, 0x5, 0x5, 0x12, 0x5, 0x100, 0x3, 0x7daf, 0x7, 0x4, 0x1, 0x2e, 0x6, 0x8001, 0xd555, 0xffffffffffff290b, 0x8, 0x40, 0x81, 0x3, 0x9, 0x8, 0x4, 0x8000000000000000, 0x101, 0x3, 0x3, 0xffffffffffffffd7, 0xffff, 0xe240, 0x10000, 0x86, 0x7ff, 0x6, 0x4, 0x0, 0x0, 0x9, 0x5, 0xffffffffffffff50, 0x8000, 0x0, 0x3, 0xa5, 0x800, 0x4, 0x5332, 0x8, 0x10000, 0x5, 0x8, 0xfffffffffffffeff, 0xfa, 0x9, 0x100000000, 0x4000000000, 0x9, 0x6, 0xfd, 0x2, 0x73cf, 0x7fff, 0x65, 0x1, 0xff, 0x9, 0x5, 0x10000, 0x1, 0x8000000000000001, 0x70, 0x100000000]}) (async) sendmsg$NFC_CMD_GET_SE(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14}, 0x14}}, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000400)={0x1, @sliced={0x3, [0x200, 0x4, 0x6, 0x7f, 0x8, 0x7, 0x8910, 0x400, 0x40, 0x3, 0x3, 0x4, 0x9, 0x9, 0x3, 0x20, 0x9, 0x7, 0x8001, 0xfff8, 0x4, 0xd4f, 0x7, 0x0, 0x0, 0x9, 0x101, 0x4, 0x7, 0x3, 0x7, 0x3, 0x4, 0x7, 0x2, 0x6, 0x6, 0x401, 0x7c52, 0x5, 0x7, 0x3, 0x9, 0x1, 0x73, 0x2, 0xff, 0x7], 0x4800000}}) (async) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) ioctl$USBDEVFS_FORBID_SUSPEND(r3, 0x5521) (async) 08:49:26 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000002c0)={0x7, 0x2}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x5, 0x7fffffff, 0x1, {0x2, @win={{0x2ef11c46, 0x6b, 0x4, 0x144}, 0x5, 0x1000, &(0x7f0000000000)={{0x3d32, 0x5, 0x759, 0x3f}, 0xfffffffffffffffc}, 0x5, &(0x7f0000000100)="1f7ee197a66a0bc1f916c8c44bf9d7d643cac6beb4f99939a8e835ad91368c0671a2710febe2f8b7c5df1524b23d34c55fdc54c4dda9d7a541b42b8022963b8c996e5fbad09c902453c8f5eadde7e244bd255d8b8c275d6368a87a849c9072dd455cde85d8fde8839ce5fd48931cfa4838e9815499b9adafa7da503b0db569523c0a0705b46467a5308088ebd20de7c8b663aae6352a36db1fc7eff13f6c0f5f", 0xc0}}, 0x6538}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000002c0)={0x7, 0x2}) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x5, 0x7fffffff, 0x1, {0x2, @win={{0x2ef11c46, 0x6b, 0x4, 0x144}, 0x5, 0x1000, &(0x7f0000000000)={{0x3d32, 0x5, 0x759, 0x3f}, 0xfffffffffffffffc}, 0x5, &(0x7f0000000100)="1f7ee197a66a0bc1f916c8c44bf9d7d643cac6beb4f99939a8e835ad91368c0671a2710febe2f8b7c5df1524b23d34c55fdc54c4dda9d7a541b42b8022963b8c996e5fbad09c902453c8f5eadde7e244bd255d8b8c275d6368a87a849c9072dd455cde85d8fde8839ce5fd48931cfa4838e9815499b9adafa7da503b0db569523c0a0705b46467a5308088ebd20de7c8b663aae6352a36db1fc7eff13f6c0f5f", 0xc0}}, 0x6538}) (async) 08:49:26 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:26 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000000)=@mmap={0x973, 0x1, 0x4, 0x2, 0x9, {0x77359400}, {0x5, 0x0, 0xc0, 0xfb, 0x2, 0x4, "1c492650"}, 0x4, 0x1, {}, 0x1}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:26 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x799, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:26 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x9751, 0x400) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xffffffff, 0x9}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:26 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x4, 0x0, [{0x4000000, 0x9}], 0x0, 0x0, 0x6, 0x0, 0x7}}) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x1, 0x400400) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r1) 08:49:26 executing program 3: ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000000)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000240)={{0x8000000000000001, 0x800}, {0x1ff}, 0xffffffff, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) pipe2$9p(&(0x7f0000000080), 0x80000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) write$P9_RVERSION(r2, &(0x7f0000000100)={0x15, 0x65, 0xffff, 0x2, 0x8, '9P2000.L'}, 0x15) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x480000, 0x0) write$P9_RVERSION(r3, &(0x7f00000002c0)={0x15, 0x65, 0xffff, 0xe6c, 0x8, '9P2000.u'}, 0x15) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000000)) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) (async) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000240)={{0x8000000000000001, 0x800}, {0x1ff}, 0xffffffff, 0x1}) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) pipe2$9p(&(0x7f0000000080), 0x80000) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async) write$P9_RVERSION(r2, &(0x7f0000000100)={0x15, 0x65, 0xffff, 0x2, 0x8, '9P2000.L'}, 0x15) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x480000, 0x0) (async) write$P9_RVERSION(r3, &(0x7f00000002c0)={0x15, 0x65, 0xffff, 0xe6c, 0x8, '9P2000.u'}, 0x15) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) 08:49:26 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x799, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:26 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000002c0)={0x7, 0x2}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x5, 0x7fffffff, 0x1, {0x2, @win={{0x2ef11c46, 0x6b, 0x4, 0x144}, 0x5, 0x1000, &(0x7f0000000000)={{0x3d32, 0x5, 0x759, 0x3f}, 0xfffffffffffffffc}, 0x5, &(0x7f0000000100)="1f7ee197a66a0bc1f916c8c44bf9d7d643cac6beb4f99939a8e835ad91368c0671a2710febe2f8b7c5df1524b23d34c55fdc54c4dda9d7a541b42b8022963b8c996e5fbad09c902453c8f5eadde7e244bd255d8b8c275d6368a87a849c9072dd455cde85d8fde8839ce5fd48931cfa4838e9815499b9adafa7da503b0db569523c0a0705b46467a5308088ebd20de7c8b663aae6352a36db1fc7eff13f6c0f5f", 0xc0}}, 0x6538}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000002c0)={0x7, 0x2}) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x5, 0x7fffffff, 0x1, {0x2, @win={{0x2ef11c46, 0x6b, 0x4, 0x144}, 0x5, 0x1000, &(0x7f0000000000)={{0x3d32, 0x5, 0x759, 0x3f}, 0xfffffffffffffffc}, 0x5, &(0x7f0000000100)="1f7ee197a66a0bc1f916c8c44bf9d7d643cac6beb4f99939a8e835ad91368c0671a2710febe2f8b7c5df1524b23d34c55fdc54c4dda9d7a541b42b8022963b8c996e5fbad09c902453c8f5eadde7e244bd255d8b8c275d6368a87a849c9072dd455cde85d8fde8839ce5fd48931cfa4838e9815499b9adafa7da503b0db569523c0a0705b46467a5308088ebd20de7c8b663aae6352a36db1fc7eff13f6c0f5f", 0xc0}}, 0x6538}) (async) 08:49:26 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x9751, 0x400) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xffffffff, 0x9}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) syz_open_dev$mouse(&(0x7f0000000000), 0x9751, 0x400) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xffffffff, 0x9}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (async) 08:49:26 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x4, 0x0, [{0x4000000, 0x9}], 0x0, 0x0, 0x6, 0x0, 0x7}}) (async) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x1, 0x400400) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r1) 08:49:26 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x799, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x799, 0x2) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async) 08:49:26 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000000)=@mmap={0x973, 0x1, 0x4, 0x2, 0x9, {0x77359400}, {0x5, 0x0, 0xc0, 0xfb, 0x2, 0x4, "1c492650"}, 0x4, 0x1, {}, 0x1}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:27 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x3ff, 0x0, 0x2}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000040), &(0x7f0000000380)=0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00', 0x0, 0x10}, 0x10) write$UHID_INPUT2(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x6) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000002c0)=@multiplanar_overlay={0x5, 0x2, 0x4, 0x70000, 0x1, {0x77359400}, {0x2, 0x8, 0x7f, 0x5, 0x0, 0x7f, "1b339d24"}, 0xfffffffd, 0x3, {&(0x7f0000000240)=[{0x1, 0x0, {0x7}, 0xad}, {0x7fffffff, 0xfffffff7, {0x6}, 0x8}]}, 0x3}) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x11a2, 0x87, 0x2, {0x1, @win={{0x7ffffffe, 0x10001, 0x4, 0x5}, 0x7, 0x7fffffff, &(0x7f0000000080)={{0x8a7, 0x4, 0xfffffff5, 0x93cd}, &(0x7f0000000340)={{0x7, 0x478, 0x6, 0x3}, &(0x7f0000000100)={{0x6, 0x6, 0x1f, 0xffffffff}}}}, 0x7fffffff, &(0x7f0000001240)="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", 0xa2}}}) 08:49:27 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000000)=0x5) 08:49:27 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x4, 0x0, [{0x4000000, 0x9}], 0x0, 0x0, 0x6, 0x0, 0x7}}) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x1, 0x400400) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r1) 08:49:27 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x9751, 0x400) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xffffffff, 0x9}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) syz_open_dev$mouse(&(0x7f0000000000), 0x9751, 0x400) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xffffffff, 0x9}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (async) 08:49:27 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x800000000000079c, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) 08:49:27 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x2, 0x80000001}) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x1, 0x20323159, 0x3, @discrete={0xfc70, 0x80}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:27 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x3ff, 0x0, 0x2}) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000040), &(0x7f0000000380)=0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00', 0x0, 0x10}, 0x10) (async) write$UHID_INPUT2(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x6) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000002c0)=@multiplanar_overlay={0x5, 0x2, 0x4, 0x70000, 0x1, {0x77359400}, {0x2, 0x8, 0x7f, 0x5, 0x0, 0x7f, "1b339d24"}, 0xfffffffd, 0x3, {&(0x7f0000000240)=[{0x1, 0x0, {0x7}, 0xad}, {0x7fffffff, 0xfffffff7, {0x6}, 0x8}]}, 0x3}) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x11a2, 0x87, 0x2, {0x1, @win={{0x7ffffffe, 0x10001, 0x4, 0x5}, 0x7, 0x7fffffff, &(0x7f0000000080)={{0x8a7, 0x4, 0xfffffff5, 0x93cd}, &(0x7f0000000340)={{0x7, 0x478, 0x6, 0x3}, &(0x7f0000000100)={{0x6, 0x6, 0x1f, 0xffffffff}}}}, 0x7fffffff, &(0x7f0000001240)="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", 0xa2}}}) 08:49:27 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000000)=0x5) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000000)=0x5) (async) 08:49:27 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x2, 0x80000001}) (async) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x1, 0x20323159, 0x3, @discrete={0xfc70, 0x80}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:27 executing program 0: ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000000)=0x3) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:27 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x71, 0x1, {{0x8, 0x2}, 0x81}}, 0x18) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000040)) 08:49:27 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x800000000000079c, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) 08:49:27 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000000)=0x5) 08:49:27 executing program 0: ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000000)=0x3) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:27 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x800000000000079c, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) 08:49:27 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x3ff, 0x0, 0x2}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000040), &(0x7f0000000380)=0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00', 0x0, 0x10}, 0x10) write$UHID_INPUT2(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x6) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000002c0)=@multiplanar_overlay={0x5, 0x2, 0x4, 0x70000, 0x1, {0x77359400}, {0x2, 0x8, 0x7f, 0x5, 0x0, 0x7f, "1b339d24"}, 0xfffffffd, 0x3, {&(0x7f0000000240)=[{0x1, 0x0, {0x7}, 0xad}, {0x7fffffff, 0xfffffff7, {0x6}, 0x8}]}, 0x3}) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x11a2, 0x87, 0x2, {0x1, @win={{0x7ffffffe, 0x10001, 0x4, 0x5}, 0x7, 0x7fffffff, &(0x7f0000000080)={{0x8a7, 0x4, 0xfffffff5, 0x93cd}, &(0x7f0000000340)={{0x7, 0x478, 0x6, 0x3}, &(0x7f0000000100)={{0x6, 0x6, 0x1f, 0xffffffff}}}}, 0x7fffffff, &(0x7f0000001240)="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", 0xa2}}}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x3ff, 0x0, 0x2}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000040), &(0x7f0000000380)=0x4) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00', 0x0, 0x10}, 0x10) (async) write$UHID_INPUT2(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x6) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000002c0)=@multiplanar_overlay={0x5, 0x2, 0x4, 0x70000, 0x1, {0x77359400}, {0x2, 0x8, 0x7f, 0x5, 0x0, 0x7f, "1b339d24"}, 0xfffffffd, 0x3, {&(0x7f0000000240)=[{0x1, 0x0, {0x7}, 0xad}, {0x7fffffff, 0xfffffff7, {0x6}, 0x8}]}, 0x3}) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x11a2, 0x87, 0x2, {0x1, @win={{0x7ffffffe, 0x10001, 0x4, 0x5}, 0x7, 0x7fffffff, &(0x7f0000000080)={{0x8a7, 0x4, 0xfffffff5, 0x93cd}, &(0x7f0000000340)={{0x7, 0x478, 0x6, 0x3}, &(0x7f0000000100)={{0x6, 0x6, 0x1f, 0xffffffff}}}}, 0x7fffffff, &(0x7f0000001240)="85fd5ba0df60c76fd1b88692cf14c5c1574660dc37454fca80639a4bd956a7e248e8f4f2d689b72435c22395876f94187d5b28c458e669ad9bbc5224ace8d805abad0623a0af8057c81ab0f74eb33de551fdccf648dc626c1ce57ec8e6494fd04e32bac7f3fbeac16124f7b859bb18db7ef93ed244c313b048f5166d39300190c6ccbbe1ca0ccb102a0766fce9a96bfbbe251dccf189f33780bad34e9c04493c44052777bc7bd3b0bb15c47fa9d121cfded659b007dad280edc5bce8334ddce048c136c29111defc82a5b672e637c766af2148cf9e0e6fbca45eaa21341b8eb28cad1f3ddb521212b35cebb964d47764135ce48e7e436b28748e34cf0ce16e63e1a90023bbc8fba5633b3efc3d20021d217cb2e4af7b0caf0245738b305c772af2a6ebe2a3f0a37d3cba349ee79fff8f9fea1c6456730c77bec84f881ab70b0edc934c7e7c27a9ba42785f73d912955a3b2e84a6bd066b4094726b38df0a3392f809f440bc1c51c696e036e77c1dfb8378d5a5786ea3b8aa5df3bd0d7e126d1912bdc0c1d66c90a726549f15827aeba7ce9b3500f99d68ddf8052deed1f8bbbdd48eec174fe4aff700f7a5f5d92f61d3e6c769e076711b207961e60577de4a87d205bcc6d4ab815f250263166cbe171a833c34d2323b4a7944b1ea9951184b63127c227363346acc0ade05003daf23082f1d3511aee73add9153e94a88b8e1145e8a256e4bc7ee2b2c9d24de984bb3c9febc633a411b57805e686cb18b320ba6a2b332bd2909709ca127415f9ce10faa6404b114e1f53440f264df8f88c0c382ea91b59f9946a9e92bdf20b81c15ffc52e70689a7b79763b4a398020a6dd8c1a5897cf630685753cf91a053b4ca5cc8ad859e52c850be6d229302c103d2400446b6dc77b0225c7ee6d8188457c132aea753a8118a83f1a2c6479794cfd5b7f9754d4bfd55caea2aa537e0fafa20fdd0cbba18535f3b150ccdd7fbf8c3e28ffb005a18e5cdb61337c44711a3fc18fbac98010d70189e85cca553c709d476e4edde73f1effdefe4b7580abadd443bd140988304814fd566ceb87dd2ca20586ec680d5695f18d8198f5f355d3921ba987bfebb83a2c481e48dcf0e986572b752bfb8a357ff44b2017d92615da53e85398bbc7eb82d0cc98c615fb4c48767b2a949b5783428d67f407e89cdd1d4463ff25d7dfcf2033e3056f1e775faf2c9a8a79e06f2f942463761fda778936be41a9fbae970a7c7fde133578816da63697c3cfbe31c33c891c2989238d5ece13b03db39f2f88d11def0e9d86b7bd09a2fc8721077ec2b9fe4051fa5ca4c3ec535e93b6bbc5d87a7cdb1bba88a463e1dc86d6a1d615afe141514578e7ad14663ba93aac7885ab1afcff940b906f027e98522fa9cc8641d2ae6d1a8f831ef552f21833151d791c3f189c47db447bae9a7eccfe7be898754798f8ad4e6de22dd305d26659d32f77360b63a9a21157d95b4a71663159c4a77f0ed8ca7e6ddf5400f3164390ae38be07b13096995c8b10ae2c6c34b6ab37ea5ee6053665d0f3014d86259e32c3b98c95f174a1d1993c8628a6fc44138361043d6bfbd2309cbc9c3e48784d53779dd269d53fbaf67e42e43ac1f04c4f9d61c9c7a6884fb0d69fc3cc4217a66e33c3e3d81d7e51697b886ced56d374bf9d31e4276a6498f8c865d77525b8fc4d5078e65c3478b78d459624e49330ebae0e53943c81025157b3a3a99e2e8253607930fbdc674d3817a117d924a460a97f17e54d271c22c7827912f847faac7d191e0708597aed8747f3fc9841504e98ca6af138f2ef929179d2ee782a3c8daa0a368a1eaa3a4a49792ceca2b9112ed1175f74bdd4126d9626e78371191cda2c2fb26a9ca909f73594d3aa4ff14761652177ee56bee6b07b0b190738e4f2e9803d3edb80fe5b3d7222edad20a4520c120740194e7e22720d96c4ee0f19434f8404ff3c9c31868943ae218542f469bda349deac1cc7b5f657941d931d37231489071788e499933f4e64ab22e839486cab42c6b605703f11853a0659a6b15056f84b9f6c51180b70d3b7702815040fb031dcbc7f0c0abfaa979105cecce2253c2b994518cf131a9437c9d92049df35f15111923d6c84f891d65ba400e6edd4e11349aea0b76b162ac04e3a361b9a4482cd8497e0c0069acce8e4ecb7e9eba0e3045390436bb5ce0a4c1a1d35d055b1122e8020e66c60fc7fc230274052de634cda499c0a8ebad3a7792796e9010a6b4c83f8b5f33c4a162486b8b3c8fc42097b76829a942d6f5a2d8bc086c7a1b6b0f06468d6b42219f6088cdf041a802676b965e536b7505ae2cc151eee9e4a5a8aaa81dec9a7bbaa0a5107b18e7585350aad4e52819db4cef74b8fb31f2d4249a357ca343f01e6cb9fcaa41e57ad6f6e5fe79f6efb534bf6e5e0e31e768c824cad956a7caca3aabd13dda06f730c665d7c5d03a97a8ee8e24979a116d4e9098dd3728cc9fb0ee0769c6a440e699ced8cf7dc5f85d575168a024afb52e411ed3dc048a1b17b92c822cfaf2288b411ab415240cf1dfc7e3cf57f51592d7a109b7c1c8b9212a7247fedb71f6200bdc7d4fed70473a8b11bc2d4ad359764470164f73e0dcbf22fea31aadc9b2af2398e31fcb6e865a100bd4db7389e6b7ab54c0a4c90a145e173d2861c01eca65eaefff2de445afb9af3f45f5d634082b8cca7d4925447d0c459f38b63c778f2fca25fb76734b7d933486550c5a13fe5db5bde66cd966fcec640d85b9a7e7357a9bb571134322395090fc000420811ed91cc7851c17a71eedf874ad16e69f277a80d86a5c69c329969b948d53046578bc1f5b600d01b20a7e25696569dd8a00ebea9f1212ca25c7aa351e0a874b5eacef03152d635f8a21e263cdae6559c888401ac8ac23e93b993401eccabd392a26692b1c916bbf1841d8b9c0988fca017e35ffc46f3c1b94825d72b76389a81efe93b2107a709ef281605e61e9fbb6584913b642eee39d851577a92e65548d59dea64285528757e836dfd82c1c4e783208257319e38aa3094f5d524df8755274d06c4937e54a3f073db1b805f555bdc2570aaf81f8538df2f916dcfe8ae5f0a40a088e6a36923b3b8b08f2684b067e928f799a4582070480df2695a6d47b6c80933de705c0ec225978c6bbe32d9f74b94f1f1ac4d9ec77be0572497d8a4b43a7f11654657e130701d10621175f3df814e091a367beb0a7d6972297f0b654de967542decec3bc5836d91baa538ab473f5909269da1c0351c9810197988d1cb3680a6fb8d2ed670d3fd3640e4c889beb03312da9f18269219f52d971a85ecd275412db74905d4c734451121e60becd404c6fe52d80e939ee54faeeb7bfda8a10660d7754d526baf817902d20c5b0825f7f8269e75d4967bb64da16a7cbfb64339dd4efd68cd1b5536c3a79cfaa3cc3f748a4dc48b687c2ca8641c8d3643340290738ab8ab5d16c346ab22c15701938bfb3433d916179f1f0b195ab04d733ce90654a2ace6aea5b1128eef663be18a48a26f67e2de633a531d203180601d8f3c37ce4cbd9980dff30f4ba5b018223b6c2c2d7bb3c5febf16e74a5058c8613a951f672a65f89d48827a4c2fb201daa5e3c041110f85fe206ee91877a17aa67ab4592cebd69eee633ba70b7798634bf73bbdae28b48133f472a26d66ef89b9f9d0163cf407909fe941b2c0d7842e7022c4738400d6a96a317724aee962028f7fa2bfd3b72fa4ae448c400376eac5615244298a6183ff1091fe6915b9209fb82e9ac85d8bd7678c9088ffd3d83d7304bb565a1d3c4a435c8fd49d5c9bd213323e4e2f5dc56ecb32716c54be6a03abd6ff998722afefe69996ee149d25b4a7ad496828e5985b2f3f8d1da37817dc71125bbf0a88acd44b1e58d64607641345c336b296a833fb6032072bc6f93cb2e0b5796c62a87845dc1eb9bf22a1b87599c68245adccb562562e2172ce97d976dd78c923be1601cebd190e91906db5892049906eedf420816c94c04505768435d3539dc6494a1d98233db6de1cfe2f0e7008ff31bacf146f0c6364658fb3cf78647d997a1f1f562b827baa67aa25e9568f94be0c2cc7b1edc2e530b5e5b5698f9aaed7befbc9fa55d065e46124511def73972d89c5d086efb2d58165fb9f569ee82876decdda372af08e1fa97d2d6bf3c35fd7319887d485501823c31aaf7d81de000742152eb09e7d5fd057bc03a9e500537805fa5e97fd4151491768176f320fb0d240604e830e30c6ba436b44e2939b2755949c588614a267738f99eea45eb71203ab3ce46cbe63dd5eaf8fe38673f514b80ae0ed6023a2f2e2ff6a456210762c517d7ae0a6cc7af64e2c8c284827ea1961cf7861c3e77c63cb201f7fd3f16bab9232dd55d6fee5a6e7de6537f7e4536390d5949607b7190330c529c1af4731ab752b5e3682d96dcb794cafdf0b98d99f13b8e249844fc9cafe25b3dad8eb3035777e4e3dd737ebe3531ace5c56e335156230eae79f994433a18c6c9ce9813a6ad2eb37ed850823a74824d2628fdf58e1f98d1ac2e1c7c9d9d0d26a54b19a63e5244ab5995e7ef0828f4872041280115ea2c716cd5d554cc2ec115b32ee6f475398a1905ce2960dd24fb22d22370fea3e4a9b9eeb25eb9ac04eba1744815698577eb0b1d9a3ca70313c11eb34c1b891f5613309025338f1d54ab36df9e63149f5ae3f2c90dc47bd38e1f69c8ff90abec0957962133cd50b0714f1a5a305b93945d96b5824350f06d5391128849219b4a25d28db10503731ecd2aed8a2e9d79acccff37d0ddbe4d5d2c25366e236490eb3f123f81499d9088f3e47e48956e910a2c2d1cfe4184268d75c8e926863f84ec1a365736ebf43cbac28599052922a37d3dcac7b0880c3d6fa11be8b9cab5a8a3a9b8dba4c5d916b880cd7d7a2daf35df15c18ad71ee634374407bf754ab412e22f2501266862163213774fddc93ad2ee81c9e9110222ebb312311637821610674dc5d72164c946c8f374b5183c02037611d1875d516167aba69cbe7823744b66f881738865ff3e294f556c169b69fb899387761b9a0d097c22c06b717dfe685c1faa89dc38d1e980650490e0cc109ba9000f6c8e6226c9bc64b7f358836a1e18fd975c4de39d8767a64d200cde2492bb84d9a0d47cfb414909c61915e15dfec52d6b0e0de307ed7b7d12c98c9f2ad755f316b039fe013cf57bcca702db1400372713b3293cb94a534f87c0d6559cfa3c7f481ba496ca4eab28a8e908736e58dc7a8704283c099c607bf3b803ae3dd05ff66fac43c25cb5de4d5bcb7e33ab49270aa3f6232c0b72e4199f455cf40db76a6a1408eea9d7104b73b05d153bfc9c29119078630aa66625dbd90ad4cfa5ccbd95f144bf71e703cb4b30aade063180231ee37db569de0ef4a8cd320991d9b2adaba3db096044f7672dc685ad3e9c8fd5a604e44bf0fed9383d38739a58626391e638a057f5a9bf0e8b97d6b461bab48042c9fe2edd1bd2cea8062c3b7dfcff85f3f8b4f67a8aa09b28b4f07c185743f8deb569c607fc0895e44095b77905ed49a910240bc25eeb6b8ae6ebb92d3b16d0bd9947f4074eb1ae448616d76e6ea85dcdec96068a2d26ade452100a07e0e7101f0cf910a809e91bc6163307a5fd0b15dba257d1e67956c895a261db784f291f7225e0f5d162e5a9b2cba460dcc4b5755417a237a74298f8bd02b5cb9c8759d1a0b14ae4d2e681d2d10cc58637ef69c9e3d941006f48060741b482c59a6849667671a60a98989f8498c8aac88d4c00aa175d7044b7796b567e5fafc953f81767811ae5b8b3fff094cb8be603d0d77054c103d311783b665fb213a5e161fcf432fc6cddabdf50602bc7b7d9c8d426e01a17aa1ad10b165637eeaa418c8795f52a3a89941194cceb146eee3eaaac6bf9bfd1661bf952e2d1ef2c2455a4b2303ae9c3f4d3eb6f3ef1064fa51c26326fdef70e68516669de7f74ed0bec891740def0e195d8807de91b6886c3d919bc55d1bf2181ba8bca1548e490cbd440f8017d0a0bb8820af9b831036ac84fc622b568675e66ecd05436ee73c6730b49eabcd6a80e922ee241a5368a751f25e5db9b841a8bd1facb3b82e03b743a9ca227f2209cd5028db474284fab8d267fb2ac8", 0xa2}}}) (async) 08:49:27 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x2, 0x80000001}) (async) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x1, 0x20323159, 0x3, @discrete={0xfc70, 0x80}}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:27 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x71, 0x1, {{0x8, 0x2}, 0x81}}, 0x18) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000040)) 08:49:27 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x100000000, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b26f9bf097b1"], 0x6) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000100)={0x2, @pix={0x2, 0x3, 0x4f424752, 0x1, 0x5f, 0xfffffff9, 0x6, 0x8, 0x1, 0x6, 0x2, 0x6}}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}, 0x0, 0x0, r2}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r5, &(0x7f0000000cc0), 0x6) ioctl$PTP_ENABLE_PPS(r5, 0x40043d04, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000200)={0xf33, 0x9, 0x1}) write$UHID_INPUT2(r3, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x3, 0x1, 0x1, "f7106e035328361162c8a47ec14e455f5c1b0f249e84beaca1e75f1e781ee86c", 0x32314d54}) 08:49:27 executing program 0: ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000000)=0x3) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:27 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0xffffffffffffff0f, 0x6400) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000240)={{0x0, 0x4, 0x7, 0x4, 'syz1\x00', 0x401}, 0x1, [0x9, 0x6, 0x3ff, 0xfff, 0x81, 0x62d, 0x80, 0x1000, 0xffffffffffffffff, 0x0, 0x9, 0xffffffffffffffff, 0x3, 0x8000000000000000, 0x9, 0x7fffffffffffffff, 0xef2, 0x0, 0x1f, 0x101, 0x1, 0x0, 0x7, 0x20, 0xa30, 0x100000001, 0x9, 0x6819, 0x6, 0x3, 0xa75, 0x6, 0x665, 0x3, 0x9a, 0x1000, 0x100000000, 0xa8b7, 0x3, 0x77af, 0x4, 0x11c, 0x0, 0x1, 0xfff, 0x7fffffff, 0x1, 0x3, 0x9, 0x31, 0x7, 0x42315cc9, 0xeb, 0x8, 0x9, 0xfffffffffffffffb, 0x4, 0x4, 0xfffffffffffffff8, 0x5e, 0x137e, 0x8000000000000001, 0xfff, 0xbf50, 0x32f, 0x0, 0xb3f5, 0x64d7, 0xcc4b, 0x3, 0x8, 0x0, 0x400, 0xfffffffffffffff8, 0x81, 0x3, 0x69, 0x9, 0x80, 0x200, 0x9, 0x21e0, 0x400, 0x5f, 0x8, 0x1, 0xe45, 0x7fff, 0x6, 0xfffffffffffffff9, 0x9, 0x7, 0x0, 0x100000000, 0x20, 0x91, 0x2, 0x0, 0xfffffffffffffffd, 0x2, 0x38d, 0x80, 0x3, 0x7ff, 0x5, 0x5d7, 0x100000001, 0x9, 0x20000000000, 0x3, 0x8d1, 0x4, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x6, 0x100, 0x803, 0x400, 0x4, 0x8, 0x2, 0x663, 0x1, 0x7, 0xeda7, 0x4, 0x1000000008, 0x8]}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) write$UHID_INPUT2(r2, &(0x7f0000000800), 0x6) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f00000007c0)=0x1) r3 = syz_open_dev$mouse(&(0x7f0000000740), 0x80000000, 0x84840) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000780)=0x2) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}]}, 0x58}}, 0x40804) r6 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x760, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:27 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0c00b7410d00"], 0x6) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)=@multiplanar_mmap={0x7, 0x2, 0x4, 0x2000, 0x6, {}, {0x4, 0x2, 0x2, 0x5, 0x7, 0x3f, "08b5effd"}, 0x6, 0x1, {&(0x7f0000000240)=[{0x26, 0x2, {0x9}, 0x5}, {0x7fff, 0x67f15781, {0x4}, 0xeac}]}, 0x9}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000100)=0x1) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) write$UHID_INPUT2(r5, &(0x7f0000000d00)={0xc, {0x1000, "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"}}, 0x1006) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000002c0)={0x3, 0x6}, 0x4) 08:49:27 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x100000000, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b26f9bf097b1"], 0x6) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000100)={0x2, @pix={0x2, 0x3, 0x4f424752, 0x1, 0x5f, 0xfffffff9, 0x6, 0x8, 0x1, 0x6, 0x2, 0x6}}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}, 0x0, 0x0, r2}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r5, &(0x7f0000000cc0), 0x6) ioctl$PTP_ENABLE_PPS(r5, 0x40043d04, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000200)={0xf33, 0x9, 0x1}) write$UHID_INPUT2(r3, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x3, 0x1, 0x1, "f7106e035328361162c8a47ec14e455f5c1b0f249e84beaca1e75f1e781ee86c", 0x32314d54}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x100000000, 0x2) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r1, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b26f9bf097b1"], 0x6) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000100)={0x2, @pix={0x2, 0x3, 0x4f424752, 0x1, 0x5f, 0xfffffff9, 0x6, 0x8, 0x1, 0x6, 0x2, 0x6}}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}, 0x0, 0x0, r2}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r5, &(0x7f0000000cc0), 0x6) (async) ioctl$PTP_ENABLE_PPS(r5, 0x40043d04, 0x1) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000200)={0xf33, 0x9, 0x1}) (async) write$UHID_INPUT2(r3, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x3, 0x1, 0x1, "f7106e035328361162c8a47ec14e455f5c1b0f249e84beaca1e75f1e781ee86c", 0x32314d54}) (async) 08:49:27 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x4, r1}, 0x10) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:27 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x71, 0x1, {{0x8, 0x2}, 0x81}}, 0x18) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000040)) 08:49:27 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c000000000000a2428037d36be2e048dd9aa3d9c30cd4b61754e24cc4a454486f830005bb7b399727983baf2e6f5196244042b91cf833a614d7c80580fcffa43cb7c9f7f3cb99781feb0cbfb314daca01a4737162185e3e"], 0x6) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c000006005a11687fe325"], 0x6) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000000)={0x0}) syz_open_dev$dri(&(0x7f0000000080), 0x3, 0x20080) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000040)={r2, 0x7}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000100)={0x2, 0x9, 0x80000000, 0x80000}) 08:49:27 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0xffffffffffffff0f, 0x6400) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000240)={{0x0, 0x4, 0x7, 0x4, 'syz1\x00', 0x401}, 0x1, [0x9, 0x6, 0x3ff, 0xfff, 0x81, 0x62d, 0x80, 0x1000, 0xffffffffffffffff, 0x0, 0x9, 0xffffffffffffffff, 0x3, 0x8000000000000000, 0x9, 0x7fffffffffffffff, 0xef2, 0x0, 0x1f, 0x101, 0x1, 0x0, 0x7, 0x20, 0xa30, 0x100000001, 0x9, 0x6819, 0x6, 0x3, 0xa75, 0x6, 0x665, 0x3, 0x9a, 0x1000, 0x100000000, 0xa8b7, 0x3, 0x77af, 0x4, 0x11c, 0x0, 0x1, 0xfff, 0x7fffffff, 0x1, 0x3, 0x9, 0x31, 0x7, 0x42315cc9, 0xeb, 0x8, 0x9, 0xfffffffffffffffb, 0x4, 0x4, 0xfffffffffffffff8, 0x5e, 0x137e, 0x8000000000000001, 0xfff, 0xbf50, 0x32f, 0x0, 0xb3f5, 0x64d7, 0xcc4b, 0x3, 0x8, 0x0, 0x400, 0xfffffffffffffff8, 0x81, 0x3, 0x69, 0x9, 0x80, 0x200, 0x9, 0x21e0, 0x400, 0x5f, 0x8, 0x1, 0xe45, 0x7fff, 0x6, 0xfffffffffffffff9, 0x9, 0x7, 0x0, 0x100000000, 0x20, 0x91, 0x2, 0x0, 0xfffffffffffffffd, 0x2, 0x38d, 0x80, 0x3, 0x7ff, 0x5, 0x5d7, 0x100000001, 0x9, 0x20000000000, 0x3, 0x8d1, 0x4, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x6, 0x100, 0x803, 0x400, 0x4, 0x8, 0x2, 0x663, 0x1, 0x7, 0xeda7, 0x4, 0x1000000008, 0x8]}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) write$UHID_INPUT2(r2, &(0x7f0000000800), 0x6) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f00000007c0)=0x1) r3 = syz_open_dev$mouse(&(0x7f0000000740), 0x80000000, 0x84840) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000780)=0x2) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}]}, 0x58}}, 0x40804) r6 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x760, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) syz_open_dev$sndctrl(&(0x7f0000000200), 0xffffffffffffff0f, 0x6400) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000240)={{0x0, 0x4, 0x7, 0x4, 'syz1\x00', 0x401}, 0x1, [0x9, 0x6, 0x3ff, 0xfff, 0x81, 0x62d, 0x80, 0x1000, 0xffffffffffffffff, 0x0, 0x9, 0xffffffffffffffff, 0x3, 0x8000000000000000, 0x9, 0x7fffffffffffffff, 0xef2, 0x0, 0x1f, 0x101, 0x1, 0x0, 0x7, 0x20, 0xa30, 0x100000001, 0x9, 0x6819, 0x6, 0x3, 0xa75, 0x6, 0x665, 0x3, 0x9a, 0x1000, 0x100000000, 0xa8b7, 0x3, 0x77af, 0x4, 0x11c, 0x0, 0x1, 0xfff, 0x7fffffff, 0x1, 0x3, 0x9, 0x31, 0x7, 0x42315cc9, 0xeb, 0x8, 0x9, 0xfffffffffffffffb, 0x4, 0x4, 0xfffffffffffffff8, 0x5e, 0x137e, 0x8000000000000001, 0xfff, 0xbf50, 0x32f, 0x0, 0xb3f5, 0x64d7, 0xcc4b, 0x3, 0x8, 0x0, 0x400, 0xfffffffffffffff8, 0x81, 0x3, 0x69, 0x9, 0x80, 0x200, 0x9, 0x21e0, 0x400, 0x5f, 0x8, 0x1, 0xe45, 0x7fff, 0x6, 0xfffffffffffffff9, 0x9, 0x7, 0x0, 0x100000000, 0x20, 0x91, 0x2, 0x0, 0xfffffffffffffffd, 0x2, 0x38d, 0x80, 0x3, 0x7ff, 0x5, 0x5d7, 0x100000001, 0x9, 0x20000000000, 0x3, 0x8d1, 0x4, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x6, 0x100, 0x803, 0x400, 0x4, 0x8, 0x2, 0x663, 0x1, 0x7, 0xeda7, 0x4, 0x1000000008, 0x8]}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async) write$UHID_INPUT2(r2, &(0x7f0000000800), 0x6) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f00000007c0)=0x1) (async) syz_open_dev$mouse(&(0x7f0000000740), 0x80000000, 0x84840) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000780)=0x2) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$SMC_PNETID_GET(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}]}, 0x58}}, 0x40804) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x760, 0x2) (async) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async) 08:49:27 executing program 1: ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000080)=""/21) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x8, 0x3631564e, 0x1, @stepwise={0x0, 0x5, 0x6, 0x5, 0x81, 0x4}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) 08:49:27 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x4, r1}, 0x10) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x4, r1}, 0x10) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) (async) 08:49:27 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0c00b7410d00"], 0x6) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async, rerun: 32) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)=@multiplanar_mmap={0x7, 0x2, 0x4, 0x2000, 0x6, {}, {0x4, 0x2, 0x2, 0x5, 0x7, 0x3f, "08b5effd"}, 0x6, 0x1, {&(0x7f0000000240)=[{0x26, 0x2, {0x9}, 0x5}, {0x7fff, 0x67f15781, {0x4}, 0xeac}]}, 0x9}) (rerun: 32) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000100)=0x1) (async, rerun: 64) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (rerun: 64) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) (async) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) write$UHID_INPUT2(r5, &(0x7f0000000d00)={0xc, {0x1000, "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"}}, 0x1006) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000002c0)={0x3, 0x6}, 0x4) 08:49:27 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x100000000, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b26f9bf097b1"], 0x6) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000100)={0x2, @pix={0x2, 0x3, 0x4f424752, 0x1, 0x5f, 0xfffffff9, 0x6, 0x8, 0x1, 0x6, 0x2, 0x6}}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}, 0x0, 0x0, r2}) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r5, &(0x7f0000000cc0), 0x6) (async) ioctl$PTP_ENABLE_PPS(r5, 0x40043d04, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000200)={0xf33, 0x9, 0x1}) (async) write$UHID_INPUT2(r3, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x3, 0x1, 0x1, "f7106e035328361162c8a47ec14e455f5c1b0f249e84beaca1e75f1e781ee86c", 0x32314d54}) 08:49:27 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c000000000000a2428037d36be2e048dd9aa3d9c30cd4b61754e24cc4a454486f830005bb7b399727983baf2e6f5196244042b91cf833a614d7c80580fcffa43cb7c9f7f3cb99781feb0cbfb314daca01a4737162185e3e"], 0x6) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c000006005a11687fe325"], 0x6) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000000)={0x0}) syz_open_dev$dri(&(0x7f0000000080), 0x3, 0x20080) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000040)={r2, 0x7}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000100)={0x2, 0x9, 0x80000000, 0x80000}) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c000000000000a2428037d36be2e048dd9aa3d9c30cd4b61754e24cc4a454486f830005bb7b399727983baf2e6f5196244042b91cf833a614d7c80580fcffa43cb7c9f7f3cb99781feb0cbfb314daca01a4737162185e3e"], 0x6) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c000006005a11687fe325"], 0x6) (async) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000000)) (async) syz_open_dev$dri(&(0x7f0000000080), 0x3, 0x20080) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) (async) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000040)={r2, 0x7}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000100)={0x2, 0x9, 0x80000000, 0x80000}) (async) 08:49:27 executing program 1: ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000080)=""/21) (async, rerun: 32) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async, rerun: 32) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x8, 0x3631564e, 0x1, @stepwise={0x0, 0x5, 0x6, 0x5, 0x81, 0x4}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) 08:49:27 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x4, r1}, 0x10) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5]}}}) 08:49:27 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0xffffffffffffff0f, 0x6400) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000240)={{0x0, 0x4, 0x7, 0x4, 'syz1\x00', 0x401}, 0x1, [0x9, 0x6, 0x3ff, 0xfff, 0x81, 0x62d, 0x80, 0x1000, 0xffffffffffffffff, 0x0, 0x9, 0xffffffffffffffff, 0x3, 0x8000000000000000, 0x9, 0x7fffffffffffffff, 0xef2, 0x0, 0x1f, 0x101, 0x1, 0x0, 0x7, 0x20, 0xa30, 0x100000001, 0x9, 0x6819, 0x6, 0x3, 0xa75, 0x6, 0x665, 0x3, 0x9a, 0x1000, 0x100000000, 0xa8b7, 0x3, 0x77af, 0x4, 0x11c, 0x0, 0x1, 0xfff, 0x7fffffff, 0x1, 0x3, 0x9, 0x31, 0x7, 0x42315cc9, 0xeb, 0x8, 0x9, 0xfffffffffffffffb, 0x4, 0x4, 0xfffffffffffffff8, 0x5e, 0x137e, 0x8000000000000001, 0xfff, 0xbf50, 0x32f, 0x0, 0xb3f5, 0x64d7, 0xcc4b, 0x3, 0x8, 0x0, 0x400, 0xfffffffffffffff8, 0x81, 0x3, 0x69, 0x9, 0x80, 0x200, 0x9, 0x21e0, 0x400, 0x5f, 0x8, 0x1, 0xe45, 0x7fff, 0x6, 0xfffffffffffffff9, 0x9, 0x7, 0x0, 0x100000000, 0x20, 0x91, 0x2, 0x0, 0xfffffffffffffffd, 0x2, 0x38d, 0x80, 0x3, 0x7ff, 0x5, 0x5d7, 0x100000001, 0x9, 0x20000000000, 0x3, 0x8d1, 0x4, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x6, 0x100, 0x803, 0x400, 0x4, 0x8, 0x2, 0x663, 0x1, 0x7, 0xeda7, 0x4, 0x1000000008, 0x8]}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) write$UHID_INPUT2(r2, &(0x7f0000000800), 0x6) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f00000007c0)=0x1) r3 = syz_open_dev$mouse(&(0x7f0000000740), 0x80000000, 0x84840) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000780)=0x2) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}]}, 0x58}}, 0x40804) r6 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x760, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) syz_open_dev$sndctrl(&(0x7f0000000200), 0xffffffffffffff0f, 0x6400) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000240)={{0x0, 0x4, 0x7, 0x4, 'syz1\x00', 0x401}, 0x1, [0x9, 0x6, 0x3ff, 0xfff, 0x81, 0x62d, 0x80, 0x1000, 0xffffffffffffffff, 0x0, 0x9, 0xffffffffffffffff, 0x3, 0x8000000000000000, 0x9, 0x7fffffffffffffff, 0xef2, 0x0, 0x1f, 0x101, 0x1, 0x0, 0x7, 0x20, 0xa30, 0x100000001, 0x9, 0x6819, 0x6, 0x3, 0xa75, 0x6, 0x665, 0x3, 0x9a, 0x1000, 0x100000000, 0xa8b7, 0x3, 0x77af, 0x4, 0x11c, 0x0, 0x1, 0xfff, 0x7fffffff, 0x1, 0x3, 0x9, 0x31, 0x7, 0x42315cc9, 0xeb, 0x8, 0x9, 0xfffffffffffffffb, 0x4, 0x4, 0xfffffffffffffff8, 0x5e, 0x137e, 0x8000000000000001, 0xfff, 0xbf50, 0x32f, 0x0, 0xb3f5, 0x64d7, 0xcc4b, 0x3, 0x8, 0x0, 0x400, 0xfffffffffffffff8, 0x81, 0x3, 0x69, 0x9, 0x80, 0x200, 0x9, 0x21e0, 0x400, 0x5f, 0x8, 0x1, 0xe45, 0x7fff, 0x6, 0xfffffffffffffff9, 0x9, 0x7, 0x0, 0x100000000, 0x20, 0x91, 0x2, 0x0, 0xfffffffffffffffd, 0x2, 0x38d, 0x80, 0x3, 0x7ff, 0x5, 0x5d7, 0x100000001, 0x9, 0x20000000000, 0x3, 0x8d1, 0x4, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x6, 0x100, 0x803, 0x400, 0x4, 0x8, 0x2, 0x663, 0x1, 0x7, 0xeda7, 0x4, 0x1000000008, 0x8]}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async) write$UHID_INPUT2(r2, &(0x7f0000000800), 0x6) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f00000007c0)=0x1) (async) syz_open_dev$mouse(&(0x7f0000000740), 0x80000000, 0x84840) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000780)=0x2) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$SMC_PNETID_GET(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}]}, 0x58}}, 0x40804) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x760, 0x2) (async) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async) 08:49:27 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) 08:49:27 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async, rerun: 32) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (rerun: 32) write$UHID_INPUT2(r1, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0c00b7410d00"], 0x6) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000cc0), 0x6) (async, rerun: 32) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)=@multiplanar_mmap={0x7, 0x2, 0x4, 0x2000, 0x6, {}, {0x4, 0x2, 0x2, 0x5, 0x7, 0x3f, "08b5effd"}, 0x6, 0x1, {&(0x7f0000000240)=[{0x26, 0x2, {0x9}, 0x5}, {0x7fff, 0x67f15781, {0x4}, 0xeac}]}, 0x9}) (rerun: 32) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000100)=0x1) (async, rerun: 32) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (rerun: 32) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) (async) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) write$UHID_INPUT2(r5, &(0x7f0000000d00)={0xc, {0x1000, "f42f8c83b22681a7188b074dd36fefb6e74536a8af6c2fefc33e4e5cb79a1a33c724776eab66af4159a57ad0922782e7f39928c855e44b3e1ff1d85072b67f809a30b2535c7d0e426eb569f1c0096bbae1dce9f091bcfb05732c5110d8923fa69cb0faeac2fb87ef9e00fa7e39f90b3f63eb24a165b4badc50d624073f7fa8a2daade6463d89da30eec9513ff94879b6e8d57ff460bc6f32807738c6433ca51dde4454cd18db061280da64e29b08f65cfcc7d6a0cc43f0874430f9285715ea6bed5c89258ab90fe3314d5e225a779e8d3df1464ae0c8c8fc435811696242899dc528011035a96441f3410e3004a06bcc52fca02ade7ca852f5403660d8bbe804dd7d91cb14e1edfc875f1091d102897d034c4dcc85c697a6b6365d34efccb5156c7bbb6acf62f1d8163dd069e9d7d967f16d8e5e8e32e4e2f325138d917dbd08b16b501843a77c30c30cef311801a2f81d200bf187b3d8166a66686b9f5c6c0e297ac60b34cbd436fad62785b6a76e473fdc218502acdf71585331f7c04b0354ef3a07dad002388166b4b07e7ec2f543a6319097c2e743a4108187c7809b823ff7f1898de2fdc6dc732a12723b8d326e1a781065e25a1cede70296f49dac1616f2e3985a476fd6e367d0ef0c776d83c1d27cd6357324d64745b7b0b0daf48642cbeac1a2bbca1f35824663b01530507fae09a332ab0770e361c206dfafb38b62a5da2aaf9a768a5934d052f8c631a1a6c59bd1ce86c5435196915aee5b8436e19307cf2d44819aa4627963af10b91fade92ce1c04024a17d45e59c113754ea5b044b8e84ac79d55035d5365d952c995295f473349faef590cf40e57dd255969627aaa4be17085af1a272b33cdb8e1254546022767864bb97744832df1fd1db356bb74bccebb2ee3817d324c31e4332f6ed18035dbe1c4157723f052334fe428f745984ec14d029b15a7a7347d0ec55631be0e21b4add023909c43beb047a33ce1f1463d260694abaeee280cfeea8ec7a021684fe0f014b27ba8bd72e8c20105e6eb9c213bf4d54c51096f7a9f954aa6e174ade215e2afca0adbb0da7edba4e2fc302d7bb0eb119f0bec5a4a2e7a610882a7c7bf7f28afdce8a2ef8aa0db19c8f034fc05b8896a8749ff5b3b465f91273d3d951aff60d7edefd73e2c6f19956e4d5ea3c1669a56695be5315a0b1a3213d57a5756d0055ccca906b360e187d3177d026c087158daa7defe0d2b77f5bd29ae375762a85aeaf1127ffa6a30891a47fcf0fcaf2d8693cd1d545b21bb6f838cca3fa15d9ffd095e15d2a60b541dc4ce3613e3046053b4d046462701d24d6f760b0804a0b9fede79417c2e612a43dfa7fdee2ec16e71f14fc0f304af29372c273ab4099657f3fdba20e1fd9411af1fddbb409f055004783b2db6b0a56f08163b68ffe5185fb02f16547985d77457b93a25fa1d8c01e250770cbc02d48341f2968a8d367b9162a9f01f354ba424ffebc026bc2d7c266c96e659e793a701891726f0bd98534805eddee2b4fa58ea8ec3cdd5d947b0c7a164301246024f7f7421905ee781de71eda89c858c532c5543c05c717825410e48aae009ae364fc40ba24f712a2f5464d59df400e49ce2d3cb53d65a1b3a3bbac1f53118b8baeb65d273e8dabb1d00b177ae781b77157e970a0543d18327ec253d420cab69488f5e2da2ee1d8d573d0f5fbcc1c4549df4272bb6d1e0a553e6214fade8906cbfec2a1b7924fdf0058647ba2b68944421069c36ea82e2af60c84186d77f27632e3f8844de7eaf3b866af71429ef5f1e08e3e543310d81014ea655524b44bdfbae02e639bdfaf8342bc239e205f113507ab31c368ee487d0ba6c82360e58de37424a9eb3b79be18efc1e6c4b1f028f176a7c69028efe129ceed4482d523ee8422f99fe3535a54283cb6da3777b6f0bc310711b24572dc07c5342b9937ca478dfd671a6b64c42f43927a469ae159382f938d72aedd4a2846d3fd7ddcf6cd7e36c2fd34274e29103ff26399c82afe50856d51a050b40c1478e7c83ab07e10a6d5cd12088d92ddace28e9f7f17209fb136eda3a1731352ff08985d885e9f78bbfc17005e9e44555194817fc310c40c0588ac6f07534536615eaaf331ceb7748ccff75ec662fb3b4b2840d00b55ad4fd51dd6e824d4d031492924ff6cebbe47025762fdb2144b93c0585b208a523db8cc0ec6cd846c5e1abd916f59a342b21d6f427ff93fa486db998816712607fe03f3adbdb53f9be8162ec80944c12d4764cb93fbcd9847f4df7edf7b53e947733a6a86e2993e1a76f5baf501fdd4ff3fe882b1ea7a3c30dcad1ab06f7f4b563838be9c483fb619286730f21a54e00f0947f8b26a03a503214c5502cb077ddbbae4f9cedc50a620632c87a5bbffddaf0b2c23b1a96548e369b9fa8d95cee6143946686c079267459259f52e369e830ac62039949beae35c980a64a1fedfaae23de08605cb443d14dcaaf604373c2be363d597903763cc2e91d3e1132fb50babb5392cfd26e0ce66b639537da60223e075780669a5cccaff03b20a1f9cf5f467b7db8c4c36a46f6d816a9e1697bd358431c6bf980d886e3bfeadf9bee9d3d446f93c62b152e8bcad4cb4068f959b89947ff17a2690b63a8d83d309e62fb9b603cc3c55ac223922cc58ccef92cae0a90dfbbf1a256610fddaf92678fdb1249bf55e501d895d1c3ea41e242a255737a2ac3cc61c32c0f12af192e67f1fb30119920032386f5a3094cdf2027624f0108953ffa8681bc77b33fa7bb754c35b96365566fce854b9bb178d5546c1bfc1c1681edf80d465d322fecb0ac29c87a97d396563ff50cd210d98c0a6c051379f7bbca0afbb164802ff6b8b3eeceae867d00456e2b45b04e2d7b3813aa64cc8db696589bb5c0ef9102f6d6044631be11d2619447f26aff30c463fde5103bba37c255394df73d8a44d9543b4c2d2ff1f955acef991364e6c0714dbb472600ca3b11aa28bba850b590f184bb8e898dc465fa1f037e3550e500eb58b0bbeccfc2de59ba5754bcf94b7a9d44e6e6019254bb35433e6c6c8cee0f3eb7d5bf4b7b7e85655664e13cd929c829cc0c480b8ad41977d3fa1b02f74dae8ff8c1208c0af8964752e60f6cbc6333cf27888ac71e2f177d957fd8d6a2f4bb50695aaf036ac55c13096763de9aed3cff5ebf33b70f6303f0d18a1579d1d1da48a3c26323ab5b7dc8a8c42ac5cb1bad0c710ba0dfbc31c3f1d577684a989f299a920cfb7c592a5e8458010820565046a2abb1c3a3433e297c17d9ed024c8168b777500ba3992527fa130e064b9bb4addf0a2d7e8b6a5b982270790746578a3e98aaa1f5fb9d7365bc13e32cf28c786cfd3436d8853733b59bdc658c5e683313ade7f02f13b168349838166afe9beb31cd8b58ebdc8ec9822da025c50d71bcb5c1942cfd8fe2fbc08e8d964ac8660dc6961277b08ee75a0bb2a9b5f8a757fe5853f490d79864743dd2012be922a560490228c0fe611a7de421b79fb9c4c78e86d5ebfd1559c04add221e753bda88f955cb3e08fd068335e7a5d26f4c75a720bef0e990a1866954e68e1b9546773d0dd0ece7cce0db25a69b8f51c8d75e4cb0beb659403bc841fb32dc870561eedc4516dcda39b860c89ed3b1f9be60d6b5a1ebf81b81062fbf4f5a4ffdf5c1fa5899c398a437fc356c13bd0b80694dfb586dc5875b148983aee45353ec8b74b8bae7ba35515e80c49a23e07601720e62a2daa5e82557e13d41c4fa4be4681b4d4df9360a83fc3650d1d33a963c7008d5fdccbf95cb60792796b68bd766ee1d0297c6860a0ce05a2d81dc517d6e16a9bfbf267f0441699dc149227bb5eb656e596cf8ffdd0f732a556cda6e4ce58f513a07a64ba1b2d4bdce23f8d79e790c4ca310422bdbbcc1fea7be7b7020607ad1c8b888281d90ed547885189b3e0ab39c25af7f5a7b0d219c3c6a72dcca7836984db4db8dd9be1848fbc3bbfdfe75513583c1807fe63ee41749f76978c84c6fec04d387a58037793d233624a1ed195d8cfbb3e2913ab75f380592c3402bca036fa3cc22d2675b076ba790d9dc55dfbb2f0906f57a3692fbe445b572d638cb44c60d57d4724c324cdae9eef8a8387709a264b2e97d4199f8fb346b7b310215d17a67deb6b0bd5a8f9fdf7609dd5da432cb948aababc9c339fbd3833ee90c406e34748cd65f20bbf2ebe790e79865609b1936382c23b34b29eed504febe481b67b3d68c7096d7cd3e86ebbda162a653407dfd254973d6faaeb14c87a62677b44e19ce6fc613cff8ba51d1a37f09fdc6ab4347c67f1e4a95517c4bc280db34f4036af423f7c34f1be4ca00a09854dde661594dae0deda6aabc896369a7eda58e2f260d1248666bd3544de794d48b873d883a650e3942e399348fc0591dca744c65d3342c62e37adb68d5916a79416bb1108aaca1ad1fca244be2815e2c593e2ea7097bc9c5abc386cec43640e84f6d4e3d33a2527eb14c85faad9378b2ba91f6e7e05806aee198c2a028ba73b5bb3f07e7dbc2f1924f54e556c50be323055db6e22e13f25022f6de4ccdaab7d682d587b526ef5c470ba08f3cb7761b816da9d76efdbc00de04590b2c673099ff3aa2b036a4f1cfc28b1ad4038f58bef8479f166c167bc9e4df3f3763d657f3138d8d65d140a184e5d010a052e7d3bdf4fc7814606b026e45836fb43312b56e4e46b6aa525cc7ed13c4d2b2363a26db1ee53a5d37ab60f3f9bfa08b588aad6c414666a1dad2465f3e24232dc1fbfc630504ec021f40f2fd3656e3c0edad04d8f45bc537e89b72b386edf0ac779540143733c992595e3f882f76cde27d37a64d4c2ace9f643acb0c49abeaa7ae18cb9fc9a09bcd2a42172a07fef8c5c31dd3b81aafd3ff73e3944a97d998e80ab5bb8dc3e18542778b97f5c4099a6c410e55e5cf88d518e5fb35196c86c5f2c292831d8e0f5e2a5dc28ec3de934ded5a26967eb3c9d4a389d3a0a58e2fae420650c2bbdb0150743a9e83a8807fe5aa63d305528c45ebd1e200912765be927933475986ec2fddfb9a45dd77d4168c139c4a88cb565a5d032da6a32e91f8ce99a30817b42c86521e5e28d94873eb92014911f7c83db5487adb24c0aa67c0aa4f4ca5025392b90aa4cb99320c62fe2ced8fa39f7b6d02cb97455717621b80ec354d296f95a4394fc8a2dcbf6a86d5f9d5767845d869151a2afba6fc4d65d6218a6be0a15e3af1b8fdc5614d1372a58f3ee585bda01b40ee24079f50407ceb882d559376f1729eec49c2b81ff73e12b501cd9c1034df2fa295cd242d45059e3de64ed26c823efda77c1261b4fab5201d94c6f8d36b5cfb5d8b5df014fd852b19389afd9f593955b0cc93d1da5f8716f24e7ac0d488670a19384ffd8015f7e5654c7f7fb63867ea0ccdfff5f2f15a6c8cef36ddff2019b1a7931289a2147384a5c8cb12560a28f031cc00d9a78132eb03faf0d3a216fecf4688c35ff8abc39ecf9590a1d0f01fdcdba49156eeb589a7081e15949825d1102edbf56d2e27dc83ae7fc553619467e5173c0257c55cf58b351f57f297adec5ad3a2157ab9c33f5998301f9d5354bd937251c65c9af5fd16518a05194ce29491a383c00bb07b4795d3513ad1e8b2a50752fd64fa8c96a760bc75ca6a6c7b4d47d6c4d5457ba6e52ecf3c970da0577898b20be40cac5ccbc380ab2df52fa8ad0d8d0ba6ed6dfe96afd7bbad92989d1bf8c877cd652a1cec7de0ec567eb5ba090d5534a0281c6229200efcf4264e9869ec5c80b3e7e3542f9241b64ac55575b"}}, 0x1006) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000002c0)={0x3, 0x6}, 0x4) 08:49:27 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c000000000000a2428037d36be2e048dd9aa3d9c30cd4b61754e24cc4a454486f830005bb7b399727983baf2e6f5196244042b91cf833a614d7c80580fcffa43cb7c9f7f3cb99781feb0cbfb314daca01a4737162185e3e"], 0x6) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c000006005a11687fe325"], 0x6) (async) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000000)={0x0}) (async, rerun: 32) syz_open_dev$dri(&(0x7f0000000080), 0x3, 0x20080) (async, rerun: 32) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000040)={r2, 0x7}) (async, rerun: 64) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000100)={0x2, 0x9, 0x80000000, 0x80000}) 08:49:27 executing program 1: ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000080)=""/21) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x8, 0x3631564e, 0x1, @stepwise={0x0, 0x5, 0x6, 0x5, 0x81, 0x4}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000080)=""/21) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x8, 0x3631564e, 0x1, @stepwise={0x0, 0x5, 0x6, 0x5, 0x81, 0x4}}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) (async) 08:49:27 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async) 08:49:27 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2, 0x208002) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000100)) ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000040)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000000240)) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000140)=ANY=[@ANYBLOB="8a5319febd4c8cf2db000004464aa5f3c546c9e82f1db15ecf6f0800000000000000cbb54c6036ba61ce5fb7b0ec64830f2b7fd8172add9896abb2fa678d98daf29a81f0ec84b72a4ea04587c1bdc3da8bb499a2a36acf9b7e8c6c659760bfc278c742455e1b66333f52f5effd6c16cfe6a16af2ee4db1271ef44a5f229416795802c7e189b2bff04e68f64933e854f2599da3781f4fe97bc4ce4beadd88e305457ad1452421d620cbb880"]) 08:49:27 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @win={{0x8000, 0x20, 0x4, 0x6}, 0x0, 0x4, &(0x7f0000000040)={{0x3ff, 0x5, 0x3f, 0x8}, &(0x7f0000000000)={{0x2, 0x6, 0x5, 0x7}}}, 0x7949, &(0x7f0000000080), 0x49}}}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000080)={0x0, 0x2}) 08:49:27 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x8, 0x5, 0x8, 0x80}) syz_open_dev$video(&(0x7f0000000040), 0xe4, 0x100) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:27 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) 08:49:27 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x0, @sliced={0x1, [0x4, 0x200, 0x0, 0x80, 0x8000, 0x6, 0x1e3f, 0x8, 0x81, 0x3f, 0x8, 0x7, 0x8, 0x4cf8, 0x0, 0x7ff, 0x5, 0x3, 0xfb2e, 0xd3ee, 0x0, 0xf200, 0x96, 0x853, 0x5b, 0xfffc, 0xfff, 0xdbcb, 0x513, 0x1, 0xff4a, 0x4003, 0x6, 0x101, 0x9, 0x0, 0x3, 0x5, 0x6, 0x2, 0x2, 0x9, 0x3, 0x8, 0x4, 0x2, 0x101, 0x9], 0x41}}) 08:49:27 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2, 0x208002) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000100)) ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000040)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000000240)) (async) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000140)=ANY=[@ANYBLOB="8a5319febd4c8cf2db000004464aa5f3c546c9e82f1db15ecf6f0800000000000000cbb54c6036ba61ce5fb7b0ec64830f2b7fd8172add9896abb2fa678d98daf29a81f0ec84b72a4ea04587c1bdc3da8bb499a2a36acf9b7e8c6c659760bfc278c742455e1b66333f52f5effd6c16cfe6a16af2ee4db1271ef44a5f229416795802c7e189b2bff04e68f64933e854f2599da3781f4fe97bc4ce4beadd88e305457ad1452421d620cbb880"]) 08:49:27 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @win={{0x8000, 0x20, 0x4, 0x6}, 0x0, 0x4, &(0x7f0000000040)={{0x3ff, 0x5, 0x3f, 0x8}, &(0x7f0000000000)={{0x2, 0x6, 0x5, 0x7}}}, 0x7949, &(0x7f0000000080), 0x49}}}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000080)={0x0, 0x2}) 08:49:27 executing program 0: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}}) 08:49:27 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x8, 0x5, 0x8, 0x80}) (async, rerun: 32) syz_open_dev$video(&(0x7f0000000040), 0xe4, 0x100) (async, rerun: 32) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:27 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0xf, 0x6, 0x8697, 0x400, 0x3, 0x65b, "80aab16d0a264eb902b5b57793172d"}}, 0x127) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000280)={0x42c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0xa}, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3d6d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffff828}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xbacc}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb9df}]}, @TIPC_NLA_NODE={0xf8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ID={0x8f, 0x3, "51b1f28a0b57e5e9a2de71b22876d15cf46a98b4fd1fbda915d8e2ef3f6a49014472bbaddfa8f43ba86e2ebdde1c8be46397f4de25d2ba32dbee374ad2e4c377eb1b4b914e894fbcb99354b35c044dcafd4ceb140bb16380ef34112c6dec6d0a08ea5eeea3a5b95ec0c508d590779812bf9310cf86928c687afcf6f1c0ad54ca524d552b15eeeef2a7ded8"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1fa4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x30b}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "c8b1aaea77b74e2ff5215daf365cfd3e488256a7b527"}}]}, @TIPC_NLA_NODE={0x1d4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "f9b9ce7ab650c9752e3841a9a61a287a330ca016f17c332cec4c8a"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "0cc76b6c1ac1f063831b81cab2d58cb3b2a62b2940"}}, @TIPC_NLA_NODE_ID={0xda, 0x3, "564347d1625089f25c409934bf74b39096b5271c912582579765378d3edff9a913557e2788d2b7843284354a70b16e7010a4d8b74bcf3fc3bfb8b08d770cfc8f271603c0ea5d06a6c9fff9f38c5bc4ebda903cbc7ed4b1462779c06bbb6bbdb07e67169f683b2373483a47a6cfcfcb4a12a84df356a6378996e5288b4d5dfc55971f8e4f18101e5617fac35c86d6b5d96c61ea927302584c7c86f940c4460e59686673dba14268ee7217a62d55bf5d95ddfb8d3c8f52ff150d79f4b19f11747b48c673fdda9fa475b09489b2b3682d5e1780ff27ba5e"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ID={0x47, 0x3, "27d53174559be54434d9b767a34b60898f925fce20b0588c3f2651ca5addce08e8778b5f778034a63873bdef16ad516dc8b8e9fff732fa5288198f91ec341fad63112b"}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd8c7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6c2c1714}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x55c0}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x42c}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000) 08:49:27 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x0, @sliced={0x1, [0x4, 0x200, 0x0, 0x80, 0x8000, 0x6, 0x1e3f, 0x8, 0x81, 0x3f, 0x8, 0x7, 0x8, 0x4cf8, 0x0, 0x7ff, 0x5, 0x3, 0xfb2e, 0xd3ee, 0x0, 0xf200, 0x96, 0x853, 0x5b, 0xfffc, 0xfff, 0xdbcb, 0x513, 0x1, 0xff4a, 0x4003, 0x6, 0x101, 0x9, 0x0, 0x3, 0x5, 0x6, 0x2, 0x2, 0x9, 0x3, 0x8, 0x4, 0x2, 0x101, 0x9], 0x41}}) 08:49:27 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @win={{0x8000, 0x20, 0x4, 0x6}, 0x0, 0x4, &(0x7f0000000040)={{0x3ff, 0x5, 0x3f, 0x8}, &(0x7f0000000000)={{0x2, 0x6, 0x5, 0x7}}}, 0x7949, &(0x7f0000000080), 0x49}}}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000080)={0x0, 0x2}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @win={{0x8000, 0x20, 0x4, 0x6}, 0x0, 0x4, &(0x7f0000000040)={{0x3ff, 0x5, 0x3f, 0x8}, &(0x7f0000000000)={{0x2, 0x6, 0x5, 0x7}}}, 0x7949, &(0x7f0000000080), 0x49}}}) (async) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000080)={0x0, 0x2}) (async) 08:49:27 executing program 0: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}}) 08:49:27 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2, 0x208002) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000100)) ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000040)) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000000240)) (async) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000140)=ANY=[@ANYBLOB="8a5319febd4c8cf2db000004464aa5f3c546c9e82f1db15ecf6f0800000000000000cbb54c6036ba61ce5fb7b0ec64830f2b7fd8172add9896abb2fa678d98daf29a81f0ec84b72a4ea04587c1bdc3da8bb499a2a36acf9b7e8c6c659760bfc278c742455e1b66333f52f5effd6c16cfe6a16af2ee4db1271ef44a5f229416795802c7e189b2bff04e68f64933e854f2599da3781f4fe97bc4ce4beadd88e305457ad1452421d620cbb880"]) 08:49:27 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x8, 0x5, 0x8, 0x80}) (async) syz_open_dev$video(&(0x7f0000000040), 0xe4, 0x100) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) 08:49:28 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x0, @sliced={0x1, [0x4, 0x200, 0x0, 0x80, 0x8000, 0x6, 0x1e3f, 0x8, 0x81, 0x3f, 0x8, 0x7, 0x8, 0x4cf8, 0x0, 0x7ff, 0x5, 0x3, 0xfb2e, 0xd3ee, 0x0, 0xf200, 0x96, 0x853, 0x5b, 0xfffc, 0xfff, 0xdbcb, 0x513, 0x1, 0xff4a, 0x4003, 0x6, 0x101, 0x9, 0x0, 0x3, 0x5, 0x6, 0x2, 0x2, 0x9, 0x3, 0x8, 0x4, 0x2, 0x101, 0x9], 0x41}}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x0, @sliced={0x1, [0x4, 0x200, 0x0, 0x80, 0x8000, 0x6, 0x1e3f, 0x8, 0x81, 0x3f, 0x8, 0x7, 0x8, 0x4cf8, 0x0, 0x7ff, 0x5, 0x3, 0xfb2e, 0xd3ee, 0x0, 0xf200, 0x96, 0x853, 0x5b, 0xfffc, 0xfff, 0xdbcb, 0x513, 0x1, 0xff4a, 0x4003, 0x6, 0x101, 0x9, 0x0, 0x3, 0x5, 0x6, 0x2, 0x2, 0x9, 0x3, 0x8, 0x4, 0x2, 0x101, 0x9], 0x41}}) (async) 08:49:28 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0xf, 0x6, 0x8697, 0x400, 0x3, 0x65b, "80aab16d0a264eb902b5b57793172d"}}, 0x127) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000280)={0x42c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0xa}, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3d6d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffff828}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xbacc}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb9df}]}, @TIPC_NLA_NODE={0xf8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ID={0x8f, 0x3, "51b1f28a0b57e5e9a2de71b22876d15cf46a98b4fd1fbda915d8e2ef3f6a49014472bbaddfa8f43ba86e2ebdde1c8be46397f4de25d2ba32dbee374ad2e4c377eb1b4b914e894fbcb99354b35c044dcafd4ceb140bb16380ef34112c6dec6d0a08ea5eeea3a5b95ec0c508d590779812bf9310cf86928c687afcf6f1c0ad54ca524d552b15eeeef2a7ded8"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1fa4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x30b}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "c8b1aaea77b74e2ff5215daf365cfd3e488256a7b527"}}]}, @TIPC_NLA_NODE={0x1d4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "f9b9ce7ab650c9752e3841a9a61a287a330ca016f17c332cec4c8a"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "0cc76b6c1ac1f063831b81cab2d58cb3b2a62b2940"}}, @TIPC_NLA_NODE_ID={0xda, 0x3, "564347d1625089f25c409934bf74b39096b5271c912582579765378d3edff9a913557e2788d2b7843284354a70b16e7010a4d8b74bcf3fc3bfb8b08d770cfc8f271603c0ea5d06a6c9fff9f38c5bc4ebda903cbc7ed4b1462779c06bbb6bbdb07e67169f683b2373483a47a6cfcfcb4a12a84df356a6378996e5288b4d5dfc55971f8e4f18101e5617fac35c86d6b5d96c61ea927302584c7c86f940c4460e59686673dba14268ee7217a62d55bf5d95ddfb8d3c8f52ff150d79f4b19f11747b48c673fdda9fa475b09489b2b3682d5e1780ff27ba5e"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ID={0x47, 0x3, "27d53174559be54434d9b767a34b60898f925fce20b0588c3f2651ca5addce08e8778b5f778034a63873bdef16ad516dc8b8e9fff732fa5288198f91ec341fad63112b"}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd8c7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6c2c1714}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x55c0}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x42c}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0xf, 0x6, 0x8697, 0x400, 0x3, 0x65b, "80aab16d0a264eb902b5b57793172d"}}, 0x127) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000280)={0x42c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0xa}, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3d6d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffff828}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xbacc}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb9df}]}, @TIPC_NLA_NODE={0xf8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ID={0x8f, 0x3, "51b1f28a0b57e5e9a2de71b22876d15cf46a98b4fd1fbda915d8e2ef3f6a49014472bbaddfa8f43ba86e2ebdde1c8be46397f4de25d2ba32dbee374ad2e4c377eb1b4b914e894fbcb99354b35c044dcafd4ceb140bb16380ef34112c6dec6d0a08ea5eeea3a5b95ec0c508d590779812bf9310cf86928c687afcf6f1c0ad54ca524d552b15eeeef2a7ded8"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1fa4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x30b}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "c8b1aaea77b74e2ff5215daf365cfd3e488256a7b527"}}]}, @TIPC_NLA_NODE={0x1d4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "f9b9ce7ab650c9752e3841a9a61a287a330ca016f17c332cec4c8a"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "0cc76b6c1ac1f063831b81cab2d58cb3b2a62b2940"}}, @TIPC_NLA_NODE_ID={0xda, 0x3, "564347d1625089f25c409934bf74b39096b5271c912582579765378d3edff9a913557e2788d2b7843284354a70b16e7010a4d8b74bcf3fc3bfb8b08d770cfc8f271603c0ea5d06a6c9fff9f38c5bc4ebda903cbc7ed4b1462779c06bbb6bbdb07e67169f683b2373483a47a6cfcfcb4a12a84df356a6378996e5288b4d5dfc55971f8e4f18101e5617fac35c86d6b5d96c61ea927302584c7c86f940c4460e59686673dba14268ee7217a62d55bf5d95ddfb8d3c8f52ff150d79f4b19f11747b48c673fdda9fa475b09489b2b3682d5e1780ff27ba5e"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ID={0x47, 0x3, "27d53174559be54434d9b767a34b60898f925fce20b0588c3f2651ca5addce08e8778b5f778034a63873bdef16ad516dc8b8e9fff732fa5288198f91ec341fad63112b"}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd8c7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6c2c1714}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x55c0}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x42c}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000) (async) 08:49:28 executing program 0: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}}) 08:49:28 executing program 5: ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x2) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x2, 0x2, 0x1, 0x0, 0xfa}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f00000001c0)={0xa, {0xa}}, 0xa) write$UHID_INPUT2(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x6) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000240)={0xe, {0x7, 0x2, 0x61, 0x69, "ec04329455eb6338acb4802775d61219b52abcd473676724635848cbb9515ff7350485834bd39573fa96a94dfa78158b57e826b3f775e07811df581285ef9ce02bc6aae44485f26f00fc95052cf090d4f7762727b9663589f7ddd6f9e2d878a40f00d116e6ed019228"}}, 0x75) write$P9_RWALK(r1, &(0x7f0000000000)={0x23, 0x6f, 0x1, {0x2, [{0x1, 0x0, 0x6}, {0x40, 0x0, 0x5}]}}, 0x23) 08:49:28 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$USBDEVFS_GET_SPEED(r1, 0x551f) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000240)) 08:49:28 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000100)={0x2, @sdr={0x38414262, 0x200}}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffffa}) 08:49:28 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000100)={0x3, 0x31, 0x8000, 0x7, 0xda, 0xffffffff, &(0x7f0000000000)="26ad7962d5e9179a7694f0ddcc7ed871017ce16126129e617a496f03ba9e8457d117f5f9190752c8d84f5865dc83edf2a0db5f9635af09545a53b11a6c421a7437a5db68b57525a4331b97f21978c943b2c04d17d59fca6605eb4b04a970ed966dda851634151d5189a812e3be27e9ab061805c90d18c2688ed61c6328b7635f6e02dd7b341df70edd7a8ee70d439fa3f05e31d910cebeaecce585537a9f47fd926a1698bb03cd058ef8e61debb3974181f9a6b2c68d9a6733e39740a4dac7795d53245331aa6c8470cce16e182e9c441ced6da8493e54d085df"}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}) 08:49:28 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0xf, 0x6, 0x8697, 0x400, 0x3, 0x65b, "80aab16d0a264eb902b5b57793172d"}}, 0x127) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000280)={0x42c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0xa}, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3d6d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffff828}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xbacc}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb9df}]}, @TIPC_NLA_NODE={0xf8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ID={0x8f, 0x3, "51b1f28a0b57e5e9a2de71b22876d15cf46a98b4fd1fbda915d8e2ef3f6a49014472bbaddfa8f43ba86e2ebdde1c8be46397f4de25d2ba32dbee374ad2e4c377eb1b4b914e894fbcb99354b35c044dcafd4ceb140bb16380ef34112c6dec6d0a08ea5eeea3a5b95ec0c508d590779812bf9310cf86928c687afcf6f1c0ad54ca524d552b15eeeef2a7ded8"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1fa4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x30b}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "c8b1aaea77b74e2ff5215daf365cfd3e488256a7b527"}}]}, @TIPC_NLA_NODE={0x1d4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "f9b9ce7ab650c9752e3841a9a61a287a330ca016f17c332cec4c8a"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "0cc76b6c1ac1f063831b81cab2d58cb3b2a62b2940"}}, @TIPC_NLA_NODE_ID={0xda, 0x3, "564347d1625089f25c409934bf74b39096b5271c912582579765378d3edff9a913557e2788d2b7843284354a70b16e7010a4d8b74bcf3fc3bfb8b08d770cfc8f271603c0ea5d06a6c9fff9f38c5bc4ebda903cbc7ed4b1462779c06bbb6bbdb07e67169f683b2373483a47a6cfcfcb4a12a84df356a6378996e5288b4d5dfc55971f8e4f18101e5617fac35c86d6b5d96c61ea927302584c7c86f940c4460e59686673dba14268ee7217a62d55bf5d95ddfb8d3c8f52ff150d79f4b19f11747b48c673fdda9fa475b09489b2b3682d5e1780ff27ba5e"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ID={0x47, 0x3, "27d53174559be54434d9b767a34b60898f925fce20b0588c3f2651ca5addce08e8778b5f778034a63873bdef16ad516dc8b8e9fff732fa5288198f91ec341fad63112b"}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd8c7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6c2c1714}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x55c0}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x42c}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000) 08:49:28 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) write$P9_RGETLOCK(r0, &(0x7f0000000000)={0x1f, 0x37, 0x2, {0x2, 0x8, 0x2, 0xffffffffffffffff, 0x1, '\x00'}}, 0x1f) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) 08:49:28 executing program 5: ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x2) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x2, 0x2, 0x1, 0x0, 0xfa}) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f00000001c0)={0xa, {0xa}}, 0xa) write$UHID_INPUT2(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x6) (async) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000240)={0xe, {0x7, 0x2, 0x61, 0x69, "ec04329455eb6338acb4802775d61219b52abcd473676724635848cbb9515ff7350485834bd39573fa96a94dfa78158b57e826b3f775e07811df581285ef9ce02bc6aae44485f26f00fc95052cf090d4f7762727b9663589f7ddd6f9e2d878a40f00d116e6ed019228"}}, 0x75) (async, rerun: 64) write$P9_RWALK(r1, &(0x7f0000000000)={0x23, 0x6f, 0x1, {0x2, [{0x1, 0x0, 0x6}, {0x40, 0x0, 0x5}]}}, 0x23) (rerun: 64) 08:49:28 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000100)={0x2, @sdr={0x38414262, 0x200}}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffffa}) 08:49:28 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$USBDEVFS_GET_SPEED(r1, 0x551f) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000240)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) ioctl$USBDEVFS_GET_SPEED(r1, 0x551f) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000240)) (async) 08:49:28 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) write$P9_RGETLOCK(r0, &(0x7f0000000000)={0x1f, 0x37, 0x2, {0x2, 0x8, 0x2, 0xffffffffffffffff, 0x1, '\x00'}}, 0x1f) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) (async) write$P9_RGETLOCK(r0, &(0x7f0000000000)={0x1f, 0x37, 0x2, {0x2, 0x8, 0x2, 0xffffffffffffffff, 0x1, '\x00'}}, 0x1f) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) (async) 08:49:28 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000100)={0x3, 0x31, 0x8000, 0x7, 0xda, 0xffffffff, &(0x7f0000000000)="26ad7962d5e9179a7694f0ddcc7ed871017ce16126129e617a496f03ba9e8457d117f5f9190752c8d84f5865dc83edf2a0db5f9635af09545a53b11a6c421a7437a5db68b57525a4331b97f21978c943b2c04d17d59fca6605eb4b04a970ed966dda851634151d5189a812e3be27e9ab061805c90d18c2688ed61c6328b7635f6e02dd7b341df70edd7a8ee70d439fa3f05e31d910cebeaecce585537a9f47fd926a1698bb03cd058ef8e61debb3974181f9a6b2c68d9a6733e39740a4dac7795d53245331aa6c8470cce16e182e9c441ced6da8493e54d085df"}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}) 08:49:28 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x80000001, 0x2) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000280)=@multiplanar_userptr={0x3, 0x3, 0x4, 0x1, 0x2, {r2, r3/1000+60000}, {0x5, 0xc, 0x2, 0x3f, 0x4, 0x5, "1bf41d70"}, 0x2, 0x2, {&(0x7f0000000200)=[{0x1, 0x7, {&(0x7f0000000180)}, 0xfffffffb}, {0xff5, 0x2, {&(0x7f00000001c0)}, 0x9}]}, 0x3, 0x0, r4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x1) 08:49:28 executing program 5: ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x2) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x2, 0x2, 0x1, 0x0, 0xfa}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f00000001c0)={0xa, {0xa}}, 0xa) write$UHID_INPUT2(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="03000000966c613bb4d707486ed65bc17b0979b5fb40485d66ac46d4ef18323b3a6e72f4aff536fdfc95516200f0d906bfac53fa7a0fc397fba653b942cf27b4a892b466d86fbcead78617a8431f0d370b5e863bc8f478b6ce4567782e08cc25ab5d80e0a8dee8032e0919ae6a45c33d193498f54df1158426e93d5ff23ae8a7e4f9ed1b13ce5b1dd766756d74b83f802088e60840148c53a0403681b8bda4cef1ae26f6840f2b2e8edd9626d0f606e5f055b4cbef03b517255bb2d371d5fc8b6052ba341934f660036eb5a2b34961b7a9b856ba31bea8f6553c0a4ee5ea3e4b5258276c34433d2ee783b9f413b39aaba377081e57090d9d6ef9b9c049623eb5dca21f9bc34e589a43778b17226854da7433dd04370306b15b140fa167d2b1eb444bd54a45392fa86004fffd22"], 0x6) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000240)={0xe, {0x7, 0x2, 0x61, 0x69, "ec04329455eb6338acb4802775d61219b52abcd473676724635848cbb9515ff7350485834bd39573fa96a94dfa78158b57e826b3f775e07811df581285ef9ce02bc6aae44485f26f00fc95052cf090d4f7762727b9663589f7ddd6f9e2d878a40f00d116e6ed019228"}}, 0x75) write$P9_RWALK(r1, &(0x7f0000000000)={0x23, 0x6f, 0x1, {0x2, [{0x1, 0x0, 0x6}, {0x40, 0x0, 0x5}]}}, 0x23) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x2, 0x2, 0x1, 0x0, 0xfa}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_GET_REPORT_REPLY(r1, &(0x7f00000001c0)={0xa, {0xa}}, 0xa) (async) write$UHID_INPUT2(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x6) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000240)={0xe, {0x7, 0x2, 0x61, 0x69, "ec04329455eb6338acb4802775d61219b52abcd473676724635848cbb9515ff7350485834bd39573fa96a94dfa78158b57e826b3f775e07811df581285ef9ce02bc6aae44485f26f00fc95052cf090d4f7762727b9663589f7ddd6f9e2d878a40f00d116e6ed019228"}}, 0x75) (async) write$P9_RWALK(r1, &(0x7f0000000000)={0x23, 0x6f, 0x1, {0x2, [{0x1, 0x0, 0x6}, {0x40, 0x0, 0x5}]}}, 0x23) (async) 08:49:28 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000100)={0x2, @sdr={0x38414262, 0x200}}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffffa}) 08:49:28 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$USBDEVFS_GET_SPEED(r1, 0x551f) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000240)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) (async) ioctl$USBDEVFS_GET_SPEED(r1, 0x551f) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x7, 0x4, {0x1, @raw_data="3eb2881fa39a0bbe9e9517a028b8fe427fbbb4ba7d8358fa37976fc727038bd3a0eb2e6a8e56e4f95212b2dab598d81a9619ec798178d3ffa14efdb0958e244106ff792ce342dc8a22485759b717ac57fbe7bfc1d2e052a1676e80959ddac7e6b1f34e13c48f37496582a5b935e8717f369a3719398e4293441684be1ab49cd72f66df152a650b082fe7a8ede08b41eaddd4ba2ca2a144f209ea3a3444b669e93c1d50cd26d86af4981fd44f442446aa917b8a22dd139703ba2c38eb31dca192bb92cfc888346613"}}) (async) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000240)) (async) 08:49:28 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) write$P9_RGETLOCK(r0, &(0x7f0000000000)={0x1f, 0x37, 0x2, {0x2, 0x8, 0x2, 0xffffffffffffffff, 0x1, '\x00'}}, 0x1f) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r0, &(0x7f0000000cc0), 0x6) (async) write$P9_RGETLOCK(r0, &(0x7f0000000000)={0x1f, 0x37, 0x2, {0x2, 0x8, 0x2, 0xffffffffffffffff, 0x1, '\x00'}}, 0x1f) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9}]}}) (async) 08:49:28 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000100)={0x3, 0x31, 0x8000, 0x7, 0xda, 0xffffffff, &(0x7f0000000000)="26ad7962d5e9179a7694f0ddcc7ed871017ce16126129e617a496f03ba9e8457d117f5f9190752c8d84f5865dc83edf2a0db5f9635af09545a53b11a6c421a7437a5db68b57525a4331b97f21978c943b2c04d17d59fca6605eb4b04a970ed966dda851634151d5189a812e3be27e9ab061805c90d18c2688ed61c6328b7635f6e02dd7b341df70edd7a8ee70d439fa3f05e31d910cebeaecce585537a9f47fd926a1698bb03cd058ef8e61debb3974181f9a6b2c68d9a6733e39740a4dac7795d53245331aa6c8470cce16e182e9c441ced6da8493e54d085df"}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000100)={0x3, 0x31, 0x8000, 0x7, 0xda, 0xffffffff, &(0x7f0000000000)="26ad7962d5e9179a7694f0ddcc7ed871017ce16126129e617a496f03ba9e8457d117f5f9190752c8d84f5865dc83edf2a0db5f9635af09545a53b11a6c421a7437a5db68b57525a4331b97f21978c943b2c04d17d59fca6605eb4b04a970ed966dda851634151d5189a812e3be27e9ab061805c90d18c2688ed61c6328b7635f6e02dd7b341df70edd7a8ee70d439fa3f05e31d910cebeaecce585537a9f47fd926a1698bb03cd058ef8e61debb3974181f9a6b2c68d9a6733e39740a4dac7795d53245331aa6c8470cce16e182e9c441ced6da8493e54d085df"}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x8, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}) (async) 08:49:28 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x80000001, 0x2) (async) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) (async) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000280)=@multiplanar_userptr={0x3, 0x3, 0x4, 0x1, 0x2, {r2, r3/1000+60000}, {0x5, 0xc, 0x2, 0x3f, 0x4, 0x5, "1bf41d70"}, 0x2, 0x2, {&(0x7f0000000200)=[{0x1, 0x7, {&(0x7f0000000180)}, 0xfffffffb}, {0xff5, 0x2, {&(0x7f00000001c0)}, 0x9}]}, 0x3, 0x0, r4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async, rerun: 64) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x1) (rerun: 64) 08:49:28 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffff8}) 08:49:28 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0x1, @pix_mp={0x4, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x430d}, {0x3}, {}, {0x7fff}]}}) 08:49:28 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x80000001, 0x2) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000280)=@multiplanar_userptr={0x3, 0x3, 0x4, 0x1, 0x2, {r2, r3/1000+60000}, {0x5, 0xc, 0x2, 0x3f, 0x4, 0x5, "1bf41d70"}, 0x2, 0x2, {&(0x7f0000000200)=[{0x1, 0x7, {&(0x7f0000000180)}, 0xfffffffb}, {0xff5, 0x2, {&(0x7f00000001c0)}, 0x9}]}, 0x3, 0x0, r4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x1) syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x80000001, 0x2) (async) clock_gettime(0x0, &(0x7f0000000140)) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) write$UHID_INPUT2(r4, &(0x7f0000000cc0), 0x6) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000280)=@multiplanar_userptr={0x3, 0x3, 0x4, 0x1, 0x2, {r2, r3/1000+60000}, {0x5, 0xc, 0x2, 0x3f, 0x4, 0x5, "1bf41d70"}, 0x2, 0x2, {&(0x7f0000000200)=[{0x1, 0x7, {&(0x7f0000000180)}, 0xfffffffb}, {0xff5, 0x2, {&(0x7f00000001c0)}, 0x9}]}, 0x3, 0x0, r4}) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) (async) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x1) (async) 08:49:28 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0x1, @pix_mp={0x4, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x430d}, {0x3}, {}, {0x7fff}]}}) [ 669.823673] BUG: unable to handle kernel NULL pointer dereference at 0000000000000020 [ 669.831671] IP: vb2_vmalloc_put+0x9/0x60 [ 669.835714] PGD 917a2067 P4D 917a2067 PUD 0 [ 669.840118] Oops: 0002 [#1] PREEMPT SMP KASAN [ 669.844602] Modules linked in: [ 669.847784] CPU: 0 PID: 30381 Comm: syz-executor.5 Not tainted 4.14.302-syzkaller #0 [ 669.855649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 669.865000] task: ffff8880b5168300 task.stack: ffff888092c20000 08:49:28 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x79d, 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "572ceae3"}, 0x0, 0x2, {0x0}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000cc0), 0x6) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000140)=0x3) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000100)={0x0, 0x3}) 08:49:28 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0x1, @pix_mp={0x4, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x430d}, {0x3}, {}, {0x7fff}]}}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0x1, @pix_mp={0x4, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x430d}, {0x3}, {}, {0x7fff}]}}) (async) [ 669.871049] RIP: 0010:vb2_vmalloc_put+0x9/0x60 [ 669.875615] RSP: 0018:ffff888092c27b98 EFLAGS: 00010297 [ 669.880970] RAX: ffff8880b5168300 RBX: ffff88809d3d8340 RCX: 1ffff11016a2d17a [ 669.888226] RDX: 0000000000000000 RSI: ffff8880b5168bb0 RDI: 0000000000000000 [ 669.895481] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 669.902736] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 669.909994] R13: ffff88809d3d8354 R14: 0000000000000000 R15: ffffffff84c281a0 [ 669.917249] FS: 00007fdbb4b00700(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000 [ 669.925463] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 669.931322] CR2: 0000000000000020 CR3: 000000007ff0f000 CR4: 00000000003406f0 [ 669.938564] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 669.945808] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 669.953048] Call Trace: [ 669.955612] __vb2_buf_mem_free+0xfa/0x1d0 [ 669.959825] __vb2_queue_free+0x60d/0x7a0 [ 669.963958] ? vidioc_querycap+0xd0/0xd0 [ 669.967989] ? dev_debug_store+0xe0/0xe0 [ 669.972022] vb2_core_queue_release+0x5b/0x70 [ 669.976490] v4l2_m2m_ctx_release+0x26/0x30 [ 669.980781] vim2m_release+0xd4/0x120 [ 669.984551] v4l2_release+0xf4/0x190 [ 669.988245] __fput+0x25f/0x7a0 [ 669.991495] task_work_run+0x11f/0x190 [ 669.995354] do_exit+0xa44/0x2850 [ 669.998784] ? io_schedule_timeout+0x140/0x140 [ 670.003340] ? mm_update_next_owner+0x5b0/0x5b0 [ 670.007988] ? preempt_schedule_common+0x45/0xc0 [ 670.012714] ? ___preempt_schedule+0x16/0x18 [ 670.017103] do_group_exit+0x100/0x2e0 [ 670.020965] SyS_exit_group+0x19/0x20 [ 670.024738] ? do_group_exit+0x2e0/0x2e0 [ 670.028769] do_syscall_64+0x1d5/0x640 [ 670.032629] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 670.037788] RIP: 0033:0x7fdbb66540a9 [ 670.041474] RSP: 002b:00007fdbb4affbb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 670.049150] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fdbb66540a9 [ 670.056391] RDX: 00007fdbb66ba105 RSI: 0000000000000000 RDI: 000000000000000b [ 670.063630] RBP: 000000000000000b R08: 000000ace2902a41 R09: 0000000000000004 [ 670.070869] R10: 00007ffc2c5f2000 R11: 0000000000000246 R12: 0000000000000000 [ 670.078112] R13: 00007ffc2c45f6bf R14: 00007fdbb4b00300 R15: 0000000000022000 [ 670.085355] Code: e9 ca fc ff ff e8 b8 99 bc fc e9 96 fc ff ff e8 de 9b bc fc e9 fd fe ff ff 66 0f 1f 84 00 00 00 00 00 55 48 89 fd e8 97 d8 92 fc ff 4d 20 0f 88 f0 d9 5f 02 74 06 5d e9 85 d8 92 fc e8 80 d8 [ 670.104415] RIP: vb2_vmalloc_put+0x9/0x60 RSP: ffff888092c27b98 [ 670.110442] CR2: 0000000000000020 [ 670.113871] ---[ end trace c53833b75cd177b0 ]--- [ 670.118595] Kernel panic - not syncing: Fatal exception [ 670.124089] Kernel Offset: disabled [ 670.127693] Rebooting in 86400 seconds..