0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:17 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x0, @pix={0x36, 0x80000001, 0x50323234, 0x0, 0x4, 0x6, 0x4, 0x200, 0x0, 0x2, 0x2}}) 13:08:17 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x3432564e, 0x0, 0x0, [{0xdba, 0x5}, {0x0, 0x4}, {0x0, 0x2}, {}, {}, {0x1000, 0xffffff7f}, {0x0, 0x6}, {0x0, 0x40000}]}}) 13:08:17 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) 13:08:17 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x60000, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:17 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000180)={{0x3, 0x3, 0x7, 0x6d1, '\x00', 0x2}, 0x1, [0x7, 0x800, 0x3, 0xef7, 0x5, 0x1ff, 0x401, 0x9, 0x1c0000000000, 0xfffffffffffffffb, 0x7fffffff, 0xff, 0xad, 0x3f, 0x0, 0x80000000, 0x0, 0x2, 0x4, 0x4, 0x3, 0xe207, 0x5, 0x7, 0x3, 0x6, 0x80, 0x3, 0x24ab3f0c, 0x7f, 0x4, 0x3, 0xffffffff, 0xff, 0x8, 0xa3, 0x1, 0x100000001, 0x92, 0x101, 0x30000000000, 0x7f, 0x0, 0x4, 0xce, 0x5, 0xdeb, 0x5, 0xb8d0, 0x6, 0x7f, 0x10001, 0x1, 0xa, 0x7, 0x5, 0x2, 0x6, 0xaa, 0x0, 0x5e, 0x7fffffff, 0x3ff, 0x9, 0x2be, 0x0, 0x7, 0x2, 0x1, 0x8, 0x100000001, 0x4, 0xfffffffffffffffd, 0x6, 0x7ff, 0x1, 0x7ff, 0x8, 0x100000000, 0x2, 0x1000, 0x3, 0x5c0, 0xff, 0x2, 0xffffffffffff8001, 0x1, 0x0, 0x3, 0x7, 0x5, 0x7, 0x6, 0x3, 0x7ffffffd, 0xc95, 0x8, 0x1, 0x9, 0x0, 0xd961, 0x1, 0x1, 0x2, 0x81, 0x6, 0x1000, 0x3, 0x1, 0x80000001, 0x2246, 0x9, 0x1, 0x7, 0x7, 0x10000, 0x8, 0x2, 0x0, 0xfffffffffffff801, 0x100000000, 0xd7, 0x8, 0x7, 0x8, 0x272, 0xab, 0x7]}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0)='devlink\x00', 0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r3) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xa8, r2, 0x4, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0xa8}}, 0x4004110) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x4}, {0x0, 0xfffffffc}]}}) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) pipe(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000b80)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00)='nl80211\x00', r1) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f0000000bc0)=0xffff) sendmsg$NL80211_CMD_START_NAN(r5, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000c00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000225bd7000fcdbdf2515d652b61b1fa572659a7300000008000300", @ANYRES32=0x0, @ANYBLOB="0500ee00000000000500ee00040000000500ee00090000000800ef00080000000500ee007b0000000500ee0009000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000680)={0x1, @raw_data="aeba6269766f86ad0834cbb0ca2d68963947850b846ef29b9796d1dcec2dc5a60c7c38534d8c0b9e18bdbe95a7f64c351818a592947feb7bbfe9350d68d771f91d0c75eb54dea6f9a67afe65205761ee6984bd1fa6a7022d84b089a0bacf285669d57689666ae43158a44ef8708be8aa049ec99d6ee25f21279611fa142c5e9cb7c9226aa4af4fe2c419ff4b5f2ec6e219f909d65187502c8410442caff3893e82e92faaf5a3bf29601f518c123c5ff302a4f5520e080a1517ddb81895dd230471e5610c04468964"}) ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_START_NAN(r5, &(0x7f0000000d00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000c80)={0x5c, r8, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xf9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7f}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4b}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x40}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008080}, 0x800) 13:08:17 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xdba, 0x5}, {0x0, 0x4}, {0x0, 0x2}, {}, {}, {0x1000, 0xffffff7f}, {0x0, 0x6}, {0x0, 0x40000}]}}) 13:08:17 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x80000001, 0x50323234, 0x0, 0x4, 0x6, 0x4, 0x200, 0x0, 0x2, 0x2}}) 13:08:17 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:17 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) 13:08:17 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xdba, 0x5}, {0x0, 0x4}, {0x0, 0x2}, {}, {}, {0x1000, 0xffffff7f}, {0x0, 0x6}, {0x0, 0x40000}]}}) 13:08:17 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234, 0x0, 0x4, 0x6, 0x4, 0x200, 0x0, 0x2, 0x2}}) 13:08:17 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:17 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x1, @vbi={0x5, 0x1ff, 0x8, 0x30313953, [0xfc6d, 0x1], [0x9, 0x7], 0x13a}}) 13:08:17 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:17 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xdba, 0x5}, {0x0, 0x4}, {0x0, 0x2}, {}, {}, {0x1000, 0xffffff7f}, {0x0, 0x6}, {0x0, 0x40000}]}}) 13:08:17 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) 13:08:17 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:17 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234, 0x0, 0x4, 0x6, 0x4, 0x200, 0x0, 0x2, 0x2}}) 13:08:17 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x3432564e, 0x0, 0x0, [{0xdba, 0x5}, {0x0, 0x4}, {0x0, 0x2}, {}, {}, {0x1000, 0xffffff7f}, {0x0, 0x6}]}}) 13:08:17 executing program 4: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:17 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000002c0)={0x2, @win={{0x9, 0x7fffffff, 0x8, 0x3}, 0x5, 0x90, &(0x7f00000001c0)={{0x259, 0xd7, 0x7fff, 0x9}, &(0x7f0000000180)={{0x5, 0xdd32, 0x3ff, 0xff}, &(0x7f0000000000)={{0x6, 0x6, 0x0, 0x3}}}}, 0x5, &(0x7f0000000200)="549f88be2f6a8ae9bd0b6609ef3a8e1439b0472e3de0db36a79a4a4842241d42cdcc738788107209e46e3fefa9b39be6ff3aed54a47689d1805c89eb3638c199dba15e37816f2fc35cae2fe1650fbd83e093c76fa09e09c8583e1a558283290d8eb53825857dbe392d4abd603943befd062ec9e23f1330a29d1458dea1d35499af5320c6f46a94319c334985488ed406704aabee002df955d34f90e8e3562062295b935a6e5315ffbfd8ad4ef81d7c2ce0cda43217ec07a43acd54", 0x2}}) 13:08:17 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r3) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000300)={0x0, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x11, 0x0, 0x2}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r4) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000280)={0x1, 0x1, 0x4, 0x100000, 0x0, {0x77359400}, {0x4, 0x8, 0x1, 0x9, 0x48, 0x0, "469640f5"}, 0x4, 0x1, @userptr=0x9, 0x5ce, 0x0, r4}) 13:08:17 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x4, 0x6, 0x4, 0x200, 0x0, 0x2, 0x2}}) 13:08:17 executing program 4: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:17 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x3432564e, 0x0, 0x0, [{0xdba, 0x5}, {0x0, 0x4}, {0x0, 0x2}, {}, {}, {0x1000, 0xffffff7f}]}}) 13:08:17 executing program 2: sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000080)="df9af4f049d3acc3f607e206d24a376b33075f094fdaa8bc748e73ad4124c9012ca326de3766680dcbe55b61af6dfce7bcbfebf9d3c703d14c1efd6bf2acea40a3f6336a6297f3f3188a06202ce319372626d7d6d973dd8a1f5b58fff0a8d2aa9bb7f4b94eba4c519846b7beb10bd2baa46db214d9447457a8cdd359b0eb8067bafc8eeed8827257b7df3158f0da7d736044821e254264d3b01090706d2724d0b639588ca8b2fa19895ef2cfdfc8e5968c4eb89d09540a69b1dc28e2815036", 0xbf, 0x8084, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x8000, @dev={0xfe, 0x80, [], 0x7}, 0xff}}, 0x24) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0)='wireguard\x00', 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xcd92553d46345aba}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x800}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x2003ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x77, 0x3, 0x2}) 13:08:17 executing program 4: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:17 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x401, 0x0, 0x5}) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) r2 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x89e, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000180)={0x0, 0x575}) 13:08:17 executing program 3: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:17 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x4, 0x6, 0x4, 0x200, 0x0, 0x2, 0x2}}) 13:08:17 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x3432564e, 0x0, 0x0, [{0xdba, 0x5}, {0x0, 0x4}, {0x0, 0x2}, {}, {}, {0x0, 0xffffff7f}]}}) 13:08:17 executing program 4: r0 = syz_open_dev$vim2m(0x0, 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:17 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) recvmmsg(0xffffffffffffffff, &(0x7f0000006440)=[{{&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000100)=""/119, 0x77}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/183, 0xb7}, {&(0x7f0000001340)=""/137, 0x89}, {&(0x7f0000001400)=""/44, 0x2c}, {&(0x7f0000001440)=""/91, 0x5b}, {&(0x7f00000014c0)=""/124, 0x7c}], 0x7, &(0x7f00000015c0)=""/171, 0xab}, 0xbe7}, {{&(0x7f0000001680)=@hci, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001700)=""/161, 0xa1}, {&(0x7f00000017c0)=""/137, 0x89}, {&(0x7f0000001880)=""/245, 0xf5}, {&(0x7f0000001980)=""/181, 0xb5}, {&(0x7f0000001a40)=""/75, 0x4b}], 0x5, &(0x7f0000001b40)=""/43, 0x2b}, 0x101}, {{&(0x7f0000001b80)=@hci, 0x80, &(0x7f0000002d40)=[{&(0x7f0000001c00)=""/73, 0x49}, {&(0x7f0000001c80)=""/28, 0x1c}, {&(0x7f0000001cc0)=""/2, 0x2}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/38, 0x26}], 0x5, &(0x7f0000002dc0)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000003dc0)=@x25, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000003e40)=""/27, 0x1b}, {&(0x7f0000003e80)=""/116, 0x74}, {&(0x7f0000003f00)=""/87, 0x57}, {&(0x7f0000003f80)}], 0x4}, 0x5}, {{&(0x7f0000004000)=@rc, 0x80, &(0x7f0000004540)=[{&(0x7f0000004080)=""/34, 0x22}, {&(0x7f00000040c0)=""/48, 0x30}, {&(0x7f0000004100)=""/35, 0x23}, {&(0x7f0000004140)=""/170, 0xaa}, {&(0x7f0000004200)=""/223, 0xdf}, {&(0x7f0000004300)=""/152, 0x98}, {&(0x7f00000043c0)=""/137, 0x89}, {&(0x7f0000004480)=""/141, 0x8d}], 0x8, &(0x7f00000045c0)=""/3, 0x3}}, {{&(0x7f0000004600)=@ieee802154, 0x80, &(0x7f0000004840)=[{&(0x7f0000004680)=""/132, 0x84}, {&(0x7f0000004740)=""/241, 0xf1}], 0x2}, 0x2ab1}, {{&(0x7f0000004880)=@sco={0x1f, @none}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000004900)=""/147, 0x93}, {&(0x7f00000049c0)=""/74, 0x4a}, {&(0x7f0000004a40)=""/94, 0x5e}, {&(0x7f0000004ac0)=""/209, 0xd1}, {&(0x7f0000004bc0)=""/103, 0x67}, {&(0x7f0000004c40)=""/43, 0x2b}], 0x6, &(0x7f0000004d00)=""/49, 0x31}, 0xd8d5}, {{&(0x7f0000004d40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000006000)=[{&(0x7f0000004dc0)=""/145, 0x91}, {&(0x7f0000004e80)=""/63, 0x3f}, {&(0x7f0000004ec0)=""/40, 0x28}, {&(0x7f0000004f00)=""/69, 0x45}, {&(0x7f0000004f80)=""/4096, 0x1000}, {&(0x7f0000005f80)=""/68, 0x44}], 0x6, &(0x7f0000006080)=""/145, 0x91}, 0x1}, {{&(0x7f0000006140)=@ipx, 0x80, &(0x7f0000006240)=[{&(0x7f00000061c0)=""/92, 0x5c}], 0x1, &(0x7f0000006280)=""/100, 0x64}, 0x8}, {{&(0x7f0000006300)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000006400)=[{&(0x7f0000006380)=""/115, 0x73}], 0x1}, 0x1f}], 0xa, 0x10100, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f00000066c0)='/proc/self/attr/current\x00', 0x18) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x204}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}, {0x6}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) socket$inet6_udp(0xa, 0x2, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) 13:08:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000858c9ec0ed14491e117000008000300b805040018b9", @ANYRES32=0x0, @ANYBLOB="0a00060008021100000000000a001a000802110000000000"], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000003340)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="00022bbd7000fddbe62572000000080003005839da084df8a809cdfc6b9dbcff2e54e41b91b7c208bd87a0609703f9d0e71df49e39f95f2263236edd4882ead1281a4f0191f817de24f936d5e733ecf83c0333c385317a282ea7a09e75c8a65cf2edf7e534c6139ba3b66b9cc65e", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040001) r4 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x20, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) 13:08:17 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x4, 0x6, 0x4, 0x200, 0x0, 0x2, 0x2}}) 13:08:17 executing program 3: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:17 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x3432564e, 0x0, 0x0, [{0xdba, 0x5}, {0x0, 0x4}, {0x0, 0x2}]}}) 13:08:17 executing program 4: r0 = syz_open_dev$vim2m(0x0, 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:17 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00', 0xffffffffffffffff) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) syz_open_dev$tty20(0xc, 0x4, 0x1) 13:08:17 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x108, 0x0, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x64, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x60}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xf7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6a3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x72}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_RULES={0x60, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x40}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xc7c5}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x101}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x40}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}]}, @NL80211_ATTR_DFS_REGION={0x5}]}, 0x108}, 0x1, 0x0, 0x0, 0x60000000}, 0x10) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @sdr={0x56544943, 0x4}}) 13:08:17 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234, 0x0, 0x0, 0x6, 0x4, 0x200, 0x0, 0x2, 0x2}}) 13:08:17 executing program 3: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:17 executing program 4: r0 = syz_open_dev$vim2m(0x0, 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:17 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x3432564e, 0x0, 0x0, [{0xdba, 0x5}, {0x0, 0x4}]}}) 13:08:17 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x0, [{0x81}, {0x0, 0x101}]}}) 13:08:17 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234, 0x0, 0x0, 0x0, 0x4, 0x200, 0x0, 0x2, 0x2}}) 13:08:17 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x1f, 0x6, 0x34324d59, 0x1, 0xb, [{0x9, 0x6}, {0x31, 0x8}, {0x9, 0xfffffffc}, {0x2, 0xffffff02}, {0x0, 0x800}, {0x40, 0x1}, {0xa242, 0x3f}, {0x7f, 0x2}], 0x7, 0x3f, 0x3, 0x2}}) 13:08:17 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 13:08:17 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x254001, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @vbi={0x1, 0xff, 0x7, 0x35323645, [0x8c, 0x1f4], [0x6, 0x14d6], 0x1}}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x4041, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000440)={0x4, @private=0xa010101, 0x4e21, 0x2, 'sh\x00', 0x9, 0x8, 0x3e}, 0x2c) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000300)={0x1, @pix={0x0, 0x2, 0x34363248, 0x8, 0x8, 0x6, 0x4, 0x9, 0x1, 0x3, 0x2, 0x4}}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r4) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x3ff, 0x3032344d, 0x0, 0x0, [{0x80000000}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {0x0, 0xfffffffe}]}}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="08002dbd7000fbdbdf250300000008000c0000000000080009000100000005000400ff00000006001b004e2100000800180064010100"], 0x3c}}, 0x4000000) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000280)) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vsock\x00', 0x400000, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000600)={0x81, 0x2, 0x4, 0x4, 0xff, {r6, r7/1000+10000}, {0x1, 0x0, 0x0, 0x2, 0xf0, 0x20, "d51781fe"}, 0x0, 0x3, @offset=0x1000, 0x5, 0x0, r8}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00', r5) 13:08:17 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x2, 0x2}}) 13:08:18 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:18 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x3432564e, 0x0, 0x0, [{0xdba, 0x5}]}}) 13:08:18 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 13:08:18 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}}) 13:08:18 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x3432564e, 0x0, 0x0, [{0x0, 0x5}]}}) 13:08:18 executing program 2: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix={0x7fe000, 0x9, 0x56544943, 0x3, 0x7, 0x7, 0x2, 0x7fff, 0x0, 0x8, 0x2, 0x1}}, 0x3}) 13:08:18 executing program 1: syz_open_dev$sndpcmp(&(0x7f0000000380)='/dev/snd/pcmC#D#p\x00', 0x100000001, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, &(0x7f0000000340)) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xac, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2a}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x29}}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2fb}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x40c0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0x810, 0xffffffffffffffff, 0x83000000) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x4800) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r1, 0x40044103, &(0x7f0000000300)=0x10000) 13:08:18 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 13:08:18 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) 13:08:18 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x3432564e}}) 13:08:18 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x4161, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r3) ioctl$SNDRV_PCM_IOCTL_START(r3, 0x4142, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00', r2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x8}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) 13:08:18 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @sliced={0x0, [0x3, 0x20, 0x3, 0x7, 0x1, 0x23, 0x3, 0x5, 0x9, 0x7, 0x926, 0x1ff, 0x800, 0x8, 0x99bc, 0x2, 0x100, 0x2, 0x3f, 0xffff, 0x1, 0x1, 0x95f, 0x8, 0x8, 0x4, 0x7f, 0x16, 0x59f, 0x7, 0x2, 0x6, 0x8, 0xffff, 0x3ff, 0x2, 0xe8, 0x3, 0x401, 0x8, 0x1000, 0x2, 0xffff, 0x401, 0xffc1, 0xc1e, 0x9, 0x77d], 0x3}}) 13:08:18 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:18 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) 13:08:18 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3195, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) 13:08:18 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:18 executing program 0: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix={0x7fe000, 0x9, 0x56544943, 0x3, 0x7, 0x7, 0x2, 0x7fff, 0x0, 0x8, 0x2, 0x1}}, 0x3}) 13:08:18 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000180)={0x9, 0x74760a1c, 0x1, @discrete={0x80, 0x5}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x2, 0x31435750, 0x3, @stepwise={0x10001, 0x3, 0x5, 0x0, 0x4, 0x4}}) 13:08:18 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x3432564e, 0x0, 0x0, [{0x0, 0x5}]}}) 13:08:18 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:18 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0xc1004111, &(0x7f0000000180)={0x6, [0x2, 0x6, 0xd09], [{0x97, 0x7, 0x1, 0x0, 0x0, 0x1}, {0xfffffff9, 0x6, 0x0, 0x1, 0x1}, {0x400, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x7, 0x95, 0x1, 0x1, 0x1, 0x1}, {0x7, 0x7fff, 0x0, 0x0, 0x1, 0x1}, {0x1, 0x1f, 0x0, 0x0, 0x1, 0x1}, {0x5, 0x5f9, 0x1, 0x1, 0x1}, {0x1, 0x2, 0x1, 0x1, 0x1, 0x1}, {0x9, 0x117a, 0x0, 0x0, 0x0, 0x1}, {0x7f6, 0x8, 0x0, 0x1, 0x1}, {0x0, 0x6, 0x1, 0x0, 0x1}, {0x20, 0x0, 0x1, 0x1, 0x0, 0x1}], 0xc9500000}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x9, 0x1d, 0x38415261, 0x8, 0xffffffff, 0x3, 0x5, 0x20, 0x1, 0x0, 0x2, 0x6}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000280)={0x9, 0x2, 0x4, 0x0, 0x4, {0x0, 0xea60}, {0x3, 0xc, 0x4, 0x2, 0x3f, 0x1f, "e407d984"}, 0x81, 0x4, @userptr=0x5, 0x6f15}) 13:08:18 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:18 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) recvmmsg(0xffffffffffffffff, &(0x7f00000063c0)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000018c0)=""/237, 0xed}, {&(0x7f00000019c0)=""/19, 0x13}, {&(0x7f0000001a00)=""/10, 0xa}, {&(0x7f0000001a40)=""/224, 0xe0}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/45, 0x2d}], 0x6}, 0x4}, {{&(0x7f0000002c00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000004240)=[{&(0x7f0000002c80)=""/134, 0x86}, {&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000003d40)=""/235, 0xeb}, {&(0x7f0000003e40)=""/156, 0x9c}, {&(0x7f0000003f00)=""/15, 0xf}, {&(0x7f0000003f40)=""/52, 0x34}, {&(0x7f0000003f80)=""/131, 0x83}, {&(0x7f0000004040)=""/198, 0xc6}, {&(0x7f0000004140)=""/164, 0xa4}, {&(0x7f0000004200)=""/29, 0x1d}], 0xa, &(0x7f0000004300)=""/186, 0xba}}, {{&(0x7f00000043c0)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004640)=[{&(0x7f0000004440)=""/5, 0x5}, {&(0x7f0000004480)=""/8, 0x8}, {&(0x7f00000044c0)=""/51, 0x33}, {&(0x7f0000004500)=""/175, 0xaf}, {&(0x7f00000045c0)=""/110, 0x6e}], 0x5}, 0xff}, {{&(0x7f00000046c0)=@sco, 0x80, &(0x7f0000004780)=[{&(0x7f0000004740)=""/38, 0x26}], 0x1, &(0x7f00000047c0)=""/188, 0xbc}, 0x1}, {{&(0x7f0000004880)=@generic, 0x80, &(0x7f0000005a00)=[{&(0x7f0000004900)=""/212, 0xd4}, {&(0x7f0000004a00)=""/4096, 0x1000}], 0x2, &(0x7f0000005a40)=""/73, 0x49}, 0x1000}, {{&(0x7f0000005ac0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000005cc0)=[{&(0x7f0000005b40)=""/183, 0xb7}, {&(0x7f0000005c00)=""/148, 0x94}], 0x2}, 0x7d89}, {{&(0x7f0000005d00)=@nfc_llcp, 0x80, &(0x7f0000006300)=[{&(0x7f0000005d80)=""/132, 0x84}, {&(0x7f0000005e40)=""/18, 0x12}, {&(0x7f0000005e80)=""/238, 0xee}, {&(0x7f0000005f80)=""/17, 0x11}, {&(0x7f0000005fc0)=""/22, 0x16}, {&(0x7f0000006000)=""/6, 0x6}, {&(0x7f0000006040)=""/129, 0x81}, {&(0x7f0000006100)=""/224, 0xe0}, {&(0x7f0000006200)=""/248, 0xf8}], 0x9}, 0xc7}], 0x7, 0x20, &(0x7f0000006580)) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000006600)='gtp\x00', 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f00000066c0)={&(0x7f00000065c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006680)={&(0x7f0000006640)={0x24, r2, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x24}}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008011}, 0x2004c050) 13:08:18 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010003, 0x2) r1 = getpid() syz_open_procfs$namespace(r1, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/user\x00') ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x0, [{}, {0x5}, {}, {0x0, 0xfffffffc}, {}, {}, {0x0, 0xfffffffd}, {0x0, 0x7}]}}) 13:08:18 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:18 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0) 13:08:18 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x0, [{}, {}, {0x0, 0x9}]}}) 13:08:18 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:18 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:18 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x8, 0x1, 0x4}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000001500)={0x4, 0x1, 0x2}) 13:08:18 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x8000, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x20}, {0x3ff, 0x9}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) 13:08:18 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r3) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x20, 0x1, 0x4, 0x0, 0x0, {r1, r2/1000+60000}, {0x1, 0x2, 0x1, 0x5, 0x1, 0x0, "ee651cc4"}, 0x0, 0x4, @planes=&(0x7f0000000180)={0x75d, 0x9, @fd, 0x2}, 0x4, 0x0, r3}) 13:08:18 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x0, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:18 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x4080, 0x0) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @empty}}, 0x24) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) 13:08:18 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x5, 0x2, 0x2, "b235e31a4fb70d436e0276f318d106e0025822301f25cff0d4475557ffa4568d", 0x64737664}) 13:08:18 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x0, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:18 executing program 4: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:18 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x3, @pix_mp={0x312, 0x0, 0x32525942, 0x3, 0x2, [{}, {}, {}, {0x0, 0x2}, {}, {}, {0x3, 0xfffffffa}], 0xfb}}) 13:08:18 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000100)={0x8000, 0x2, 0x6, 0xd5f, &(0x7f0000000080)=[{}, {}]}) 13:08:18 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x0, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:18 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:18 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000180)={{0x6, 0x0, 0x3, 0x75, 'syz0\x00', 0x4}, 0x0, [0x6f, 0x5, 0xffffffff7fffffff, 0x8, 0xfffffffffffffffa, 0x80, 0x10001, 0x5c7, 0x9, 0xbc, 0x6, 0x6, 0xfffffffffffffffb, 0x6, 0x99, 0x7, 0x6, 0xffffffffffff7fff, 0x1, 0xc94, 0x5, 0x3, 0x0, 0x5a00, 0x7fff, 0x1, 0x80000001, 0x62d6, 0x2a53, 0xb, 0x8000, 0x3, 0x9, 0x0, 0x6, 0x7, 0x400, 0x4d51, 0x1, 0xef5c, 0x6, 0x2, 0x7, 0x3ff, 0x20, 0xff, 0x7, 0x0, 0x100000000, 0x0, 0x40, 0xed, 0x401, 0x4, 0x0, 0x4a3, 0x0, 0xc0000000000000, 0x0, 0x1, 0x1000, 0x0, 0x0, 0x6, 0x8, 0x0, 0x3, 0x0, 0xe90, 0x7, 0x100000000, 0x80000000, 0x38, 0xf000000000000000, 0x3, 0x6, 0x2, 0x41e, 0x200000001f, 0x5f46, 0xffffffffffffffe0, 0x1, 0x2, 0x9, 0x9, 0x0, 0x800, 0x7f, 0x5, 0x5031, 0x28000, 0xffffffffffffff00, 0x9d, 0xb7, 0xff, 0x0, 0x9, 0x400, 0x800, 0x57a, 0x4, 0x4, 0x401, 0x80000001, 0x10001, 0x0, 0x0, 0x1ff, 0x5, 0x935c, 0xffff, 0xe945, 0x80000001, 0xf8d9, 0x2, 0x40, 0x1b, 0x0, 0x0, 0x1, 0x6, 0x7fff, 0x0, 0x40, 0x7, 0x100000001, 0x3, 0x3f]}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) 13:08:18 executing program 4: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:18 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0xf25, 0x7ff, 0x3, {0x4, @win={{0xfffff367, 0x800, 0x0, 0xfffffff7}, 0x3, 0x20, &(0x7f0000000080)={{0x8af7, 0xffff, 0x1, 0x7fffffff}, &(0x7f0000000000)={{0xe41b, 0x800, 0x4, 0x5}}}, 0x2, &(0x7f0000000280)="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", 0x40}}, 0x400}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) 13:08:18 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) 13:08:18 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x0, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:18 executing program 4: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:18 executing program 2: ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80984120, &(0x7f0000000080)) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) 13:08:18 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x32, 0x0, 0x3}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x100, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r2, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x101, 0x10}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) [ 2068.877124] FAULT_INJECTION: forcing a failure. [ 2068.877124] name failslab, interval 1, probability 0, space 0, times 0 [ 2068.912074] CPU: 0 PID: 31792 Comm: syz-executor.0 Not tainted 4.14.222-syzkaller #0 [ 2068.919993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2068.929353] Call Trace: [ 2068.931952] dump_stack+0x1b2/0x281 [ 2068.935589] should_fail.cold+0x10a/0x149 [ 2068.939767] should_failslab+0xd6/0x130 [ 2068.943746] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2068.948851] __kmalloc_node+0x38/0x70 [ 2068.952664] kvmalloc_node+0x46/0xd0 [ 2068.956404] video_usercopy+0x31b/0xe90 [ 2068.960376] ? video_ioctl2+0x30/0x30 [ 2068.964173] ? v4l2_ioctl+0x127/0x2f0 [ 2068.967976] ? v4l_g_ctrl+0x390/0x390 [ 2068.971782] ? proc_fail_nth_write+0x7b/0x180 [ 2068.976277] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2068.981205] ? trace_hardirqs_on+0x10/0x10 [ 2068.985463] ? fsnotify+0x974/0x11b0 [ 2068.989178] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2068.994111] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2068.999216] v4l2_ioctl+0x1bb/0x2f0 [ 2069.002843] ? v4l2_open+0x2f0/0x2f0 [ 2069.006554] do_vfs_ioctl+0x75a/0xff0 [ 2069.010612] ? ioctl_preallocate+0x1a0/0x1a0 [ 2069.015015] ? lock_downgrade+0x740/0x740 [ 2069.019172] ? __fget+0x225/0x360 [ 2069.022621] ? do_vfs_ioctl+0xff0/0xff0 [ 2069.026587] ? security_file_ioctl+0x83/0xb0 [ 2069.030997] SyS_ioctl+0x7f/0xb0 [ 2069.034353] ? do_vfs_ioctl+0xff0/0xff0 [ 2069.038319] do_syscall_64+0x1d5/0x640 [ 2069.042205] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2069.047407] RIP: 0033:0x465ef9 [ 2069.050585] RSP: 002b:00007f43ac7c6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2069.058297] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 2069.065556] RDX: 0000000020000080 RSI: 00000000c0d05605 RDI: 0000000000000003 13:08:19 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) [ 2069.072820] RBP: 00007f43ac7c61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2069.080082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2069.087344] R13: 00007ffd1d3a541f R14: 00007f43ac7c6300 R15: 0000000000022000 13:08:19 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) r1 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x52, 0x2) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x40000, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x8001, 0x2, 0x4, 0x0, 0xffff0000, {0x77359400}, {0x4, 0x4, 0x1, 0x28, 0x0, 0x20, "8f1c230a"}, 0x0, 0x4, @fd, 0x61, 0x0, r2}) 13:08:19 executing program 5: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:19 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x0, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:19 executing program 0 (fault-call:1 fault-nth:1): r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) 13:08:19 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 13:08:19 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x0, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:19 executing program 2: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x80, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x80}}, 0x10000) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000340)='wireguard\x00', 0xffffffffffffffff) 13:08:19 executing program 5: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:19 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0)='ethtool\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x58, r4, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40000) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa0, r0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xa337}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x1}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3}, @ETHTOOL_A_RINGS_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x8a55}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x3}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x80) r5 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x33}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) 13:08:19 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000)='mptcp_pm\x00', r1) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) 13:08:19 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:19 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000000)=0x80000000) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}, {0x16}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1aa98f250ef656822aba198b2afb83941976b1f5ea0accbc058577c687cdf2f2e4f4cf87770c159cc1fd9443b899a5472827f2524c068a634e6bf7cd6cab977f009b0092e799bde24ea97a3fcd2fc0c81d848ab9a23856677521c4f01ec02eb543267de145cc8495cc291f1adeabbd8630396dc291942e8ee79a8282fa43f2bb1a22d2953c825088f2472e26bd235db9a30d4f015a93f5172e7fe2eaf3cefc777c85bfd942600421901e0ebf1044537120c4f5e60122949468b59bb50ef8bb6fa685e2df22485136a8", @ANYRES16=0x0, @ANYBLOB="02002dbd7000fddbdf250e00000034000780080002000400000008000200010001000c00030004000000000000000c000300f00000000000000008000100000000801400078008000100014300000800020004000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x40080) 13:08:19 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 13:08:19 executing program 5: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:19 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x2, @pix_mp={0x1, 0x90, 0x20323159, 0x9, 0x0, [{0x10001, 0x10000}, {0x7ff, 0x7fffffff}, {0xffffffff, 0xb}, {0x6, 0x80}, {0x8100, 0x8000}, {0x1, 0x7}, {0x8cc4, 0x7ff}, {0xffff, 0x200}], 0x1f, 0xff, 0x3, 0x2, 0x5}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) 13:08:19 executing program 5: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:19 executing program 5: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:19 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:19 executing program 5: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:19 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5], 0x4}}}) 13:08:19 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)={0x3, 0x0, 0x4, 0x20, 0x0, {r2, r3/1000+10000}, {0x3, 0x8, 0x1f, 0x9, 0x6, 0x1, "aa0256e5"}, 0x7, 0x1, @userptr=0x1625, 0x7}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) 13:08:19 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x3ff}, {0x3095, 0x5}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0xfffffff9, 0x3136564e, 0x1, @stepwise={0xfffffffe, 0x7, 0x9, 0x10001, 0x2, 0x2}}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000080)={0x4, 0x6, 0x3, {0x0, @vbi={0x4, 0xae, 0x10, 0x47425247, [0x14e2, 0x3], [0x3, 0x5], 0x1}}, 0xfffffffd}) 13:08:19 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:19 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @sliced={0x4, [0x0, 0x90, 0xfff, 0x7, 0x9a, 0x2, 0x8, 0x6, 0x2, 0x7, 0x3, 0x2, 0x7, 0x6c5d, 0x6, 0xff, 0xfffa, 0x1, 0xffff, 0x800, 0x8, 0xfbff, 0x5, 0x7, 0x7ff, 0xec66, 0xca, 0x7ff, 0x5, 0x400, 0x6b0, 0x251, 0x7, 0x6, 0x9, 0x8, 0x401, 0x8, 0x8001, 0x1400, 0x4, 0x4, 0xfff9, 0xffff, 0x9, 0x1, 0x9, 0x8000], 0x4}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) pipe2(&(0x7f0000000000), 0x800) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r3) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f00000001c0)='\x00', 0x1) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r4) setns(r1, 0x8000000) 13:08:19 executing program 5: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:19 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2c00c0c0}, 0x40004) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) 13:08:19 executing program 5: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:19 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x200000, 0x0) socketpair(0x29, 0x5, 0x3ff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', r0) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="000126bd7000ffdbdf250800000006000e000900000014001f000000000000379a6055e4ae83e3000000000000000000000106001a004e2100000900090001000000150007000300000006001a004e20000006000300ff070000055ee34052ba451d91d3000400640000fe140008007767310000000000"], 0x74}, 0x1, 0x0, 0x0, 0x81}, 0x8801) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x1, {0x1, @pix={0x6d, 0x9, 0x32315241, 0x2, 0xffffffff, 0x4, 0xa, 0x8000, 0x0, 0x4, 0x2, 0x2}}, 0x6a}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000480)={0x0, @raw_data="86fd545548b1542eea92daceec1e82bbbb52ee8307a77da43d6b44da81b941d86eaa5cd155cf90714229665c2b8080d38d2c6a509b45f79e4df324caf22b2f036eaa9c0b95c0c27b64addd507f0bd94e51ea3b63d22b105d3d85f8cef89421e2908c4819fa46dabe6cfaf858cdbec0a2cc68cb846d3a785ecc3a2afaa976b14823c9b90cc8e38edbe9e9b5e22b900925318ea562703b9fcc791b8fc3f1c04745dfc87418e1753caddcf031b19da07e2e0b8149c958ca6e08c519e7291779f24cec51d81e82685ded"}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000280)={0x1, @sliced={0x1000, [0x7781, 0x80, 0x36e, 0x2, 0x85, 0xc5f, 0x400, 0x2000, 0x5, 0x9, 0x5, 0x2, 0x7, 0xbc, 0x8004, 0x8000, 0x8, 0x5, 0x6, 0x1ff, 0x1f, 0x3f, 0x1, 0x0, 0x101, 0x7, 0x9fb, 0x6, 0x35d9, 0x824, 0xfffd, 0x1, 0x2, 0x3, 0x401, 0x7, 0x7f, 0x7, 0xcfd2, 0xd2d3, 0x1ff, 0x400, 0x9, 0x5653, 0x4, 0x0, 0x690, 0x6], 0x3}}) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x2, @pix_mp={0x0, 0x5, 0x0, 0x0, 0x3, [{0x7}, {0x3095, 0x2}, {0x4, 0x3}, {0x8, 0xffffffff}, {0x2, 0x4d3}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x3, 0x0, 0x0, 0x2}}}) 13:08:19 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:19 executing program 5: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:19 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa], 0x4}}}) 13:08:19 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x0, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:19 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 13:08:19 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x3f, 0xc000) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0)='l2tp\x00', r0) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) 13:08:19 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0xd9e696d6ebec46da, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg1\x00'}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x0, [{}, {}, {}, {0x3}, {}, {0x800000d0}, {0x2}], 0x1, 0x0, 0x0, 0x2}}) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000200)=0x1) 13:08:19 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xf, 0x2, 0x5, "c15412b6d31ac421d02965c20db0dbe968c6df01589dde293664fed25f71535e", 0x35323645}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x100, 0x4}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0x2, @sdr={0x38303553}}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f00000000c0)=0x1) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000100)=0x79) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) 13:08:19 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x0, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:19 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) 13:08:19 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 13:08:19 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 13:08:19 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x0, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:19 executing program 1: ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/45) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x4, 0x3136564e}}) 13:08:19 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5], 0x4}}}) 13:08:19 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:19 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioprio_set$uid(0x0, 0xee01, 0x59f1bc412a05f234) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0xffffffa3}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) 13:08:19 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x0, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:19 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x2, 0x35315241, 0x1, @stepwise={0x0, 0x3, 0xfffffff8, 0x9, 0x80000000, 0x10001}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) 13:08:19 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0xfffffffffffffff7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) 13:08:19 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:19 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000003680)='/dev/nvram\x00', 0x80001, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000003780)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003740)={&(0x7f0000003700)={0x2c, 0x1402, 0x400, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) 13:08:19 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x0, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:19 executing program 2: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000280)={0x0, 0x5, 0x3, {0x3, @pix_mp={0xbfbd, 0x7, 0x38414261, 0x9, 0x2, [{0x40, 0x408d}, {0x6, 0xe0d1}, {0x5, 0x4d71f2c}, {0x1, 0x400}, {0xffffc56d, 0x4}, {0x4, 0x5}, {0x8001, 0x3}, {0x5}], 0x2, 0x8, 0x3, 0x1}}, 0x9}) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0xfffffffb, 0x1, 0x1}) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) 13:08:19 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x1, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:20 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x0, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:20 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2], 0x4}}}) 13:08:20 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x0, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:20 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x800000, 0x31303453, 0x8, 0x5, [{}, {}, {0xfffffffd, 0xfffffffc}, {}, {0x0, 0x40000}, {0x2}, {0x0, 0xfffffffc}, {0xfffffffc, 0xfffffffd}], 0x0, 0x6f, 0x0, 0x0, 0x4}}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000300)={0x2, 0x6, 0x3, 0x9, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}]}) 13:08:20 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r1, 0x40184152, &(0x7f0000001540)={0x0, &(0x7f0000001500)=[&(0x7f0000000180)="37b397b39275fd6ba81fe126558b09eb4b957bcc17f43876837539d153a7042300c6c0012bf7b0847d8917c4c6d78b0bc8ee97020e723d6e56fe2f66ea671ace5fe72c43e4e816296640c2c109e62e7795e7ba937a2bd497b04a699623e985c9797765cf5c26e14f19ad3f7689e4455618e07f20b5f90bef79d700eb78eaccf435659d823cc2e9b61f907930999a661a9760f33e7a0bcc25a05e38dc276152551d695b7b8dc514843f34e7a667058710c4c00ca133d8aea19e892aad2deb3ebc18012d74cf192e85fa6c", &(0x7f0000000280)="85be3aa34d3f81992711e58aee7dc4cbb897b95de1", &(0x7f00000002c0)="3aa80e14da719a2b4d1d386235007cd609bd6c27b507d3bf32ea993eef426c605e289edada05b4", &(0x7f0000000300)="4e67fac65cacc4cb28be27e221977d7d34a972532ee8b195cf92630204f07c89681bdc047147474c2fcf2e3dffaad2d197778b972987b2df7e5db030ae2b03aeafe6502276b027f0262360d13e80fc08ebf5", &(0x7f0000000380)="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", &(0x7f0000001380)="35ea455eab3de8a30f98e479095772ada8debde2e49fb8fe89fc0ca7534ddb5c7febe684fb6a433aae226b7a3f814778f6018cb88f17ab3c0374142bb5b0514cb1ddb5947d2dec", &(0x7f0000001400)="243f439b970ec4dad70ef6bd9310f21c19de29a1ede1ec605bc1eb48acfc3b8c09def596f6c92db0571b5457fd868ce6513cb4951fc430a684251ba175c297a2e30fbba2b44fdf7c00d8881c02fcde016033311186fa779833f6db62bbebbe1ca78d8f7beae34bf8d3a54ea6aff399d50166c5923bbcd06b93708871a2329781d9a4abb068dd939f9ff2b090065d38cec69da4946ca6132bd7ac6142ab05bb93b04aedc49d4871173c87d59c938119499a694c161143dcc73adaf5e31ff2732b0bb21bb35ce4ce70550745c91a2c82c8f2683fba378c791734"]}) 13:08:20 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:20 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x49ebe809, 0x7, 0x3, {0x1, @pix_mp={0x0, 0x80000001, 0x43353039, 0x6, 0x2, [{0x4c, 0x3}, {0x400, 0x4}, {0xffffff6e, 0x6}, {0x30000000, 0x10001}, {0x7, 0x81}, {0x4, 0x188}, {0x10000, 0x7}, {0x7ff, 0xef57}], 0x9, 0x80, 0x7, 0x3, 0x7}}, 0x80000000}) 13:08:20 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x0, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:20 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x0, {0x1, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:20 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:20 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x0, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:20 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4], 0x4}}}) 13:08:20 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x0, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:20 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000180)=0x3) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000001c0)={0x9, 0x3, 0x4, 0xe000, 0x9, {0x77359400}, {0x4, 0x2, 0x9, 0x7, 0x80, 0x7, "ae7774dd"}, 0x8001, 0x3, @offset=0x7, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) 13:08:20 executing program 2: ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000000)=""/52) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000280)={{0x0, 0x0, 0x8, 0xffffffc0, 'syz0\x00', 0x6}, 0x0, [0x0, 0x8e9, 0x9, 0x5, 0x3f, 0x40, 0x9, 0x7, 0x8, 0x7fff, 0x1, 0xfff, 0x5, 0x8001, 0x558, 0x0, 0x1000, 0x2, 0x13a, 0x7, 0x7, 0x9, 0x7, 0xfff, 0x3, 0xba, 0x1000, 0xeb82, 0x9, 0x5, 0x78, 0x8d, 0x80, 0x10, 0x6, 0x5, 0x1, 0x1, 0x2, 0xc70, 0x7, 0x100, 0x3, 0x7fffffff, 0x9, 0x6, 0x8, 0x1, 0x5, 0x4, 0x602c251a, 0x4, 0x20, 0x80000000, 0x0, 0x1ff, 0x6, 0x7, 0xc2, 0x8, 0xf4b6, 0x8000, 0x80000000, 0x6, 0x2, 0x81, 0xf2d8, 0x1, 0x8, 0xfffffffffffffffe, 0x7, 0x7, 0x2489, 0x12f1, 0x10000, 0x75, 0xfffffffffffffff9, 0x2d, 0x62e9, 0x7bd, 0x5, 0x1ff, 0x0, 0xfffffffffffffffe, 0x4, 0x1, 0x2, 0xf4, 0xfffffffffffffff7, 0x3, 0x1f, 0x81, 0x3537, 0x2, 0x200, 0x82, 0xfff, 0xfffffffffffffff7, 0x400000000, 0x8252, 0x2, 0x7, 0x6, 0xbc9, 0xfffffffffffffffd, 0x0, 0x7, 0x3bf3, 0x4b6, 0x401, 0x4, 0x5, 0x9, 0x4, 0xfffffffffffffff9, 0x1, 0x9, 0x4, 0x8001, 0x4f, 0x10000, 0x5, 0x7, 0x3, 0x6, 0x1, 0xffff, 0xffff]}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) 13:08:20 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x2) 13:08:20 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x0, @sliced={0x6, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:20 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4], 0x4}}}) 13:08:20 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5], 0x4}}}) 13:08:20 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)={0xffffffff, 0x0, 0x4, 0x40, 0x0, {0x0, 0xea60}, {0x5, 0xc, 0x7, 0xea, 0x81, 0x8b, "30ddae45"}, 0xa0, 0x3, @fd, 0x4}) 13:08:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000ffdbdf250900000005003500f70000000500380001000000080003f5", @ANYRES32=r1, @ANYBLOB="441fd9c5e92ac58210b7d7393ca4c8083141bd0fb2c03f51fa6b79cc4c184f52638dcc8747cbc6479a441839cc197ce04347df9a8fce8c3ba236da4c2dab9d34c9cceb29e6b10ed93b443abdbdcac30dd0b86f1543da20a7ec8e431c6df9a3b8c4"], 0x2c}, 0x1, 0x0, 0x0, 0x20048800}, 0x4010) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x0, 0x0, 0x2, 0x7, 0x40, @private0, @ipv4={[], [], @remote}, 0x7800, 0x0, 0x5, 0x42ef15db}}) r2 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) 13:08:20 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5, 0x401], 0x4}}}) 13:08:20 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4], 0x4}}}) 13:08:20 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) 13:08:20 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) getuid() 13:08:20 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa], 0x4}}}) 13:08:20 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5], 0x4}}}) 13:08:20 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r0) ioctl$SNDRV_PCM_IOCTL_LINK(r0, 0x40044160, &(0x7f0000000180)=0x3f) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x4, 0x2, 0x3, "9745c908e9191083fb402e31f8dd3c1f30321a03bcdc01a513145ac3bb188496", 0x41414770}) 13:08:20 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa], 0x4}}}) 13:08:20 executing program 0: ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000180)={0x5, [0x6, 0x8000, 0xe7ce], [{0x6, 0x5, 0x0, 0x0, 0x1}, {0x4, 0x6, 0x1, 0x0, 0x1, 0x1}, {0x1000, 0x400, 0x1}, {0xa9b5, 0x3ff, 0x0, 0x0, 0x1}, {0x8, 0x81, 0x0, 0x0, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x0, 0x1}, {0x100, 0x4fee, 0x0, 0x0, 0x1, 0x1}, {0xffff, 0x3f, 0x0, 0x0, 0x1, 0x1}, {0x200, 0xca, 0x0, 0x1, 0x1, 0x1}, {0x3, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x8, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x89f, 0x3a, 0x1, 0x1, 0x0, 0x1}], 0x4}) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) 13:08:20 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4], 0x4}}}) 13:08:20 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa], 0x4}}}) 13:08:20 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) 13:08:20 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5], 0x4}}}) 13:08:20 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x9, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000180)) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000300)={0xdb, 0x0, 0x5, 0x9, "9eb39991b6ae49bb46ea383bc13bb6feeab55e8a26da1f6b022b5db243e0247dc3232a8a54cec41f9b80a1fff22d63656a71aac5335f901900599f2dbd5ae714043f04117800c5fce2b2ad1097209b01b2878621c9594c78399a7d85f84ad6d9c625b67c59372078841bcabb50bd7a79a12941fceb3407498bc29e65317efc4aa79765be2872486823a15a62e05d9e1de3a846f1e2b318e26be477e4da436e0d87c9f88fab2b70fc2cbf2fca339b643e98e1a8d4886b5f7fcd6dc24bd043d542ca9f74"}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000400)='l2tp\x00', r2) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r4) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r3, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x41}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x45) 13:08:20 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @win={{0xc719, 0x2, 0x4, 0xffffffff}, 0x7, 0x800, &(0x7f00000001c0)={{0x1, 0x8, 0x2, 0xfffffe00}, &(0x7f0000000180)={{0x2, 0x3, 0x7dbb, 0x1e89}, &(0x7f0000000000)={{0x7fffffff, 0x4, 0xd817, 0x8}}}}, 0x7, &(0x7f0000000200)="b191e841b01d0504af08a1ca4f55157eed812eb9a97d3e5ab7876c99c5d0faa596e1e1725eeb0029a36fbbdeb0e9233f3fdfbf85eed94b52e311e90c0a911e49dad26063f2eb7e34c4931762f1a0d193b10ce8dd37c18b879f1570b1c9048199f80e00c3bb1e89b91af6772bfa19938e0d516f72fce8eef031e31cb2ebfa6bc1740ae37e781b345cf21b137028e8bce2108f185cf43550714689e1fe5fc83bd1670b8744c4849749cc998915366205c4573f3a3dc5b8e49d1a35d803c6f3c952f967a565867cc3cbc3a7426c6396de35a0da8e4287e911a5c0887eae26605112dc", 0xff}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000340)={0x1, 0x34325241, 0x2, @stepwise={0x8000, 0x4, 0x1, 0x3, 0x1, 0x7}}) r1 = syz_open_dev$vim2m(&(0x7f0000000300)='/dev/video#\x00', 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x1, @sdr={0x41495043, 0x80000001}}) 13:08:20 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5], 0x4}}}) 13:08:20 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0xfffffffe, 0x3, 0x1, {0x1, @pix_mp={0x80000001, 0x9, 0x34363248, 0x6, 0x0, [{0x4, 0x757}, {0x5, 0x29}, {0x1ff, 0x2}, {0xda0e, 0x7}, {0x101}, {0x6, 0x9c}, {0xf2, 0x7}, {0x2fcc}], 0x0, 0x8, 0x1, 0x2, 0x1}}}) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80984120, &(0x7f0000000080)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) read$snddsp(r1, &(0x7f0000000280)=""/4096, 0x1000) 13:08:20 executing program 0: ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000240)={0x20, 0x3, 0xb81, 0x9, 0x56}) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000180)="c2a8bc36bfa476180ee824947cecc16705507f5d32b316fd6d85e8fd7234ba422a6ce2457411fa4a2d3311396fc0088b0f0641d411465effb5a72169d56d32031a21cef2379afbbe2e015193f08cbf215d37572e2e6bdc234193e85cfadb039422e7e98af51eb3bf47ce28b7b3baff8a0dbf1900eae133df416f982fdf54b9eda854dfc01902758b4de48854ea1aa15144106e5e6ef1580858cfedc034f82688", 0xa0, 0x8000, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x24) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x3, @pix={0x0, 0x0, 0x50323234}}) 13:08:20 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800], 0x4}}}) 13:08:21 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5], 0x4}}}) 13:08:21 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800], 0x4}}}) 13:08:21 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x4, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x6, 0x0, [{0x7}, {0x3095, 0x1}, {0x4}, {0x8, 0xc000}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x21}], 0x0, 0x0, 0x3, 0x0, 0x2}}}) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f0000000100)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x18, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000080}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x208, r2, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4359c080}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x43b3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7cc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}]}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "f1d88669b0ce733e75d3419b4859eb78a2f8c24ffecd93"}}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xbe}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf2fa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbf34}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2fab}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x804}, 0x20000) 13:08:21 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2], 0x4}}}) 13:08:21 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x80000000, 0x101400) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000200)={{0x9, 0x1, 0xb26da67, 0x7, 'syz0\x00', 0xfffffff8}, 0x3, 0x10, 0x9, 0xffffffffffffffff, 0x3, 0x4, 'syz0\x00', &(0x7f00000001c0)=['\x00', '/dev/vim2m\x00', '/dev/video#\x00'], 0x18, [], [0x1, 0x0, 0x1000, 0xff80]}) r1 = syz_open_dev$vim2m(&(0x7f0000000180)='/dev/video#\x00', 0x8000000000007, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000340)={{0x7, 0x5, 0x401, 0x1, 'syz0\x00', 0x8a1}, 0x0, [0x0, 0x3, 0x101, 0x100000001, 0x4, 0x80, 0x2, 0xff, 0xfffffffffffffff8, 0x8, 0x7, 0x100000000, 0x7, 0x101, 0x6, 0x73, 0x40, 0x2, 0x40, 0x6, 0xffffffffffffffc0, 0xffff, 0x7fffffff, 0x1, 0x2, 0x8000, 0x9, 0x6, 0x5, 0x1, 0x1ff, 0x0, 0x3ff, 0x348, 0x2, 0x0, 0x8, 0x6, 0x0, 0x4, 0x8000, 0xffffffffffffffee, 0x80000001, 0x4, 0x6, 0x3, 0xe3ee, 0x8, 0x6, 0x800, 0x9, 0x0, 0x4, 0x8, 0x9, 0xbc1, 0x401, 0x6, 0x4, 0x6, 0xfffffffffffffffb, 0x2040000000000, 0x902, 0x0, 0x8001, 0x5, 0x4, 0x3, 0x2b0, 0x0, 0x68af224e, 0xffffffff, 0x7, 0x8, 0x4, 0x2, 0x3, 0x0, 0xcc, 0x7, 0xffff, 0x7ff, 0x1, 0x5, 0xffffffffffffff81, 0x7fffffff, 0x5, 0x81, 0x283cb490, 0x4, 0x7, 0x3800000000000000, 0x69d, 0xfffffffffffeffff, 0x0, 0x8, 0x5, 0x5, 0x8, 0xf620, 0x101, 0x10001, 0x3ff, 0xfffffffffffeffff, 0x2, 0x7f, 0x0, 0x0, 0xffffffff, 0x81, 0x80000000, 0x5599, 0x774, 0x3acb, 0x101, 0x3, 0x9, 0x81, 0x1, 0x71c, 0x400, 0xfffffffffffffffe, 0x80000001, 0x4, 0x5, 0x8, 0x25a35c4, 0x100000000]}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000a40)=""/89) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @raw_data="6f670f3a3486433359848fd443eebb209def47bf51b5f03f9957f8068fd5a5eefaff41b0c71c9a4e6a41c8de14ae8ed413ee2a3a0d7301db3cc3bc77aa50bb3dfd279e77f69451ca1ab45cd3e0ef54d685175d2da7652099c74bb9fe5c7168e17f70d0453e80ca91f1c6c2c923fc8babe9392327f7e3037e7d820d2588fcf5f8eec31423b354975b3c9dab769c9f4ab1b65cd5e41bbf9f79730174e2a94c25d39d801233ff3ec17c05a9a33ebb783103941b6f4f4e16dc50678d5c2ff66f18bb540e0d03bcb7ae77"}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r4, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000880)={0x1, @pix_mp={0x5, 0x0, 0x55595659, 0x3, 0x8, [{0x8, 0x29}, {0xd1c0, 0x100}, {0xbe75, 0x7fff}, {0x5, 0x2}, {0x0, 0xf11a}, {0x5, 0x7}, {0x4, 0x4}, {0x397da8d3, 0x7}], 0x1, 0x0, 0x1, 0x1, 0x7}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) 13:08:21 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0xfe9, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$SNDCTL_DSP_RESET(r1, 0x5000, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @win={{0x4, 0x772, 0x7ff, 0x7}, 0x5, 0x80000000, &(0x7f00000001c0)={{0x9, 0x8, 0x6, 0x5907}, &(0x7f0000000180)={{0x3ff, 0x100, 0x1008001, 0x4}, &(0x7f0000000000)={{0x401, 0x6, 0x3, 0x3}}}}, 0x100, &(0x7f0000000280)="8e03004bdfb32280cae8558313f4923148abe4e5e66ac86dbf0d1025ac8d1e6eab51d7cdf0f29c102603166c770e5d4c602984b99b5a1b5f243b6589442522d40d7a85ad81a56f27ee67e4cc2bdc17dcfdd130d36f", 0xec}}) 13:08:21 executing program 0: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6b3ebdf7", @ANYRES16=0x0, @ANYBLOB="000427bd7000ffdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0xffffffff, 0x10003, 0x64737664, 0x2, 0x0, [{0xffffff8b, 0xffffff7f}, {0x69, 0x101}, {0x5, 0x9}, {0x800, 0x72f}, {0xe4a}, {0x2, 0x5}, {0xa05a, 0x8}, {0x0, 0x4}], 0x40, 0x1, 0x8, 0x1}}) 13:08:21 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2], 0x4}}}) 13:08:21 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9], 0x4}}}) 13:08:21 executing program 1: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000200)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4080) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x0, [{}, {}, {0x1}]}}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x210081, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000001c0)={0x8, 0x8000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x18, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001700)={'batadv_slave_0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000001880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001840)={&(0x7f0000001740)={0x100, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x31}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={[], [], @rand_addr=0x64010100}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x24040040}, 0x400c4) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, r7, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x625}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000100) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000280)={0x9, 0x7ff, 0x2, {0x1, @sliced={0x2, [0x0, 0x1, 0x8ef0, 0x7a81, 0xf800, 0xfff, 0x481d, 0xb9d9, 0x1, 0x40, 0x3f, 0x2, 0x1ff, 0xff, 0x3, 0x0, 0x1000, 0xf800, 0x4, 0x2, 0x7fff, 0xf1fe, 0x1, 0x7, 0x8001, 0x7ff, 0xffff, 0x132, 0x4, 0x6, 0x3, 0x2, 0xfff, 0x3, 0x1, 0x3d72, 0x9, 0x0, 0x81, 0xe3, 0x4, 0x9, 0x1, 0x3, 0x1f, 0x8, 0x8, 0x5], 0x2}}, 0x1ff}) 13:08:21 executing program 0: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0)='ethtool\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4148000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, r0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x801}, 0x40) r2 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000180)={0x2, @pix_mp={0x4, 0x8, 0x20323159, 0x3, 0x1, [{0xffff, 0x4}, {0x7, 0x4417}, {0x1, 0x2}, {0x0, 0x800}, {0x1000, 0x3}, {0x5, 0x101}, {0xffffffff, 0x8}, {0x1, 0xffffffe0}], 0x0, 0x0, 0x2, 0x1, 0x5}}) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0)='gtp\x00', r4) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r5, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40850}, 0x40) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000440)=0x5) 13:08:21 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4], 0x4}}}) 13:08:21 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4], 0x4}}}) 13:08:21 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', r1) 13:08:21 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x1, @vbi={0x6, 0xfffffffe, 0x6, 0x38414262, [0x5, 0x1f], [0x10000, 0x7ff], 0xf913723760073a8c}}) 13:08:21 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4], 0x4}}}) 13:08:21 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792], 0x4}}}) 13:08:21 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) socketpair(0x4, 0xa, 0x76e8, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x800) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000002c0)={0x5, 0x0, 0x4, 0x40, 0x0, {}, {0x0, 0x1, 0x40, 0x3, 0x4, 0x54, "e87f3e11"}, 0x800, 0x1, @planes=&(0x7f0000000280)={0x800, 0x31d, @userptr=0x1a71f03e, 0xf541}}) 13:08:21 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792], 0x4}}}) 13:08:21 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000180)=0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$SNDRV_PCM_IOCTL_RESUME(r1, 0x4147, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000000)=0x1) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00', r1) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="200980000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000300)) 13:08:21 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000080)={0x1, @pix_mp={0x3, 0x1ff, 0x41414270, 0x4, 0x6, [{0xe, 0x3f}, {0x9, 0x5}, {0x3, 0x1}, {0xc51b, 0x7}, {0xfff, 0x2}, {0xf0e, 0x40c8}, {0x3, 0x10001}, {0xff, 0x8}], 0xc0, 0x5, 0x3, 0x2}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x8, 0x3, 0x1, {0x1, @pix_mp={0xfffffffa, 0x0, 0x47524247, 0x0, 0x7, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0xfd, 0x0, 0x0, 0x2}}}) 13:08:21 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4], 0x4}}}) 13:08:21 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4], 0x4}}}) 13:08:21 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x3) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000280)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000002c0)={0x2, 0x2, 0x4, 0x0, 0x6, {}, {0x4, 0x1, 0x59, 0xff, 0x5, 0x1, "56f71533"}, 0x7fffffff, 0x3, @fd, 0x1234, 0x0, r2}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r3) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000180)=""/177) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x0, [{}, {}, {}, {0x10002000}, {0x0, 0x200}]}}) 13:08:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r1, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x67}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x42004}, 0xc0045) r2 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x5, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000180)={0x2f8b, 0x1, 0x4, 0x0, 0x1, {0x0, 0xea60}, {0x1, 0x8, 0x3, 0x5, 0x2, 0x33, "c08bd04a"}, 0x7ff, 0x3, @offset=0xe58, 0x3}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000240)={0x0, @vbi={0x8, 0x1, 0x3, 0x34565559, [0x3, 0x3], [0x2, 0x101], 0x1}}) 13:08:21 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000080)={0x1, @raw_data="2a340039f85145453bd30df572c70d259b1e3c856213953397010151def488aceb38b7ad9144d7de12b45c923d1c4edc104fd419945a783c70d53a799b371b2c02f4d6516ee1a38b76b4af2e6e87e011b00a1658951c6f788b53b99d268fa9dcfef295deceac7f7529d6c6bb233c592541ac7b74c94fb6a05000b723c1bfcd73e85f8e3900fcf42c6527ccb2dfda0b5ae60013c1f3ae2b4120c57d75af68794623d5bb3150107f932275cfaa182ca942987c4d58811e6042ec8e35873be83b7b62f8c00dcecba977"}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) 13:08:21 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5], 0x4}}}) 13:08:21 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4], 0x4}}}) 13:08:21 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(0xffffffffffffffff, 0x80184153, &(0x7f0000000240)={0x0, &(0x7f0000000000)=[&(0x7f0000000180)="444b88a28e884217da5f6f9b39b1bfcdec74bd77f09adb87ad405dcfa3f801ba2c482a5196c145ab689b2980be82ae5f5ddac2f39e43e8840886e08993d88bdaaf17c0b4419a36f7f835abf4db940692d24f952b4eb762df6f49cc71223c2addc6484e0e77a0b22f91c68b0f1503067e6445c7eee25ae9bb427e3fd11c865f79810717712c8077127e44955fc00d55c93f7e1081d7284e26c218d4546dab972d8cde0a87eabf8114de6a5147de136a4f5dd5dea7083124ac0b"]}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) 13:08:21 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800], 0x4}}}) 13:08:22 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000180)={0x80, 0x39565559, 0x2, @stepwise={0x9, 0x80000001, 0x8, 0x3, 0x30da, 0x8001}}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @win={{0x4, 0x3, 0x8, 0x6}, 0x3, 0x5, &(0x7f00000001c0)={{0x6, 0x1, 0x8, 0xfe}}, 0xde5, &(0x7f0000000200)="ec02f5d3fe4d0c24e7ee29e61e16413b66b8bf7ce1296f8e1b3597152d8146bd44f3ff11d6b7819d91095411aaeadac74791b9d63038d3fd6a358639a1a4911a7043f2e75f598994d707a082e08aaf1699abf8ebce28bd1f238b3383794baf6fb19328b914888a39fedc09d9e8f4d9ed0a8d9ca4e91f56225ac86c8a96cf49e308e92f8ebe0ba99f9cbba86d703b1c9270e23249c1d8d1880676f5ca74cafb9c835ec7bee1efe87e09ab8782bb9e6e1c48c4f51196fa51f1d389b4db61df3def64f0f1c2eed6999725d52310a4768c6c2d0fb0d1891d4c3c77e3bb76c5916fcc9a7eb6f1b17327d53dc6c56b80bb", 0x9}}) 13:08:22 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5], 0x4}}}) 13:08:22 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84800) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)={0x1000, 0x0, 0x4, 0x70000, 0xb92, {0x0, 0x2710}, {0x25244f0229d84d6d, 0x0, 0x7, 0x9, 0x7f, 0xa7, "e5715d5a"}, 0x80000000, 0x1, @offset=0x101, 0x6, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000200)={0x533, 0x0, 0x4, 0x0, 0x1000, {}, {0x3, 0x0, 0x0, 0x0, 0x40, 0xf7, "c697be9f"}, 0x0, 0x0, @userptr=0x9, 0x8, 0x0, r2}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) 13:08:22 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xa401, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7, 0x2}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xe1d}) 13:08:22 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800], 0x4}}}) 13:08:22 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x8, [{}, {}, {}, {0x10}, {}, {0x5}, {0x10000}], 0x1, 0x0, 0x0, 0x1}}) 13:08:22 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800], 0x4}}}) 13:08:22 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x3, 0x6c5, 0x2, {0x3, @raw_data="2e870dd2e702b1835825a823b5869e4cd4f41f7074d5bab07531fc0c59d3ae923bbb47ffa3427918272dff63a3e55b3315d9f3015e93da629c0fcaadaca1f89df3d934d9af8689dbc8140077f9c827b43ebc90a7f9c74cff37a4fbc8daf7568f2de5ba96d07571a922c5fee80fb3fb2b93ee6f0c68fe61e734b9e169e52e769e6322dd6e404b9d45a4fad78ad27fa92d0d0cc8a53a4eacbf033a71ceca2ecaaffe2e235820fa57eddaa2e7442045398530b9c05d51ce90b37c6aac64d090bb3b30558a681fe637cd"}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000180)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0xb3, 0x2, 0x2}) 13:08:22 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9], 0x4}}}) 13:08:22 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5], 0x4}}}) 13:08:22 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80800) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000180)={0x1, @sdr={0x32314d56, 0x1}}) 13:08:22 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0xfffffffd, 0x0, 0x7, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x4}, {0xff, 0x7}, {0xb5, 0x1f}, {0x0, 0x7f}], 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xfffffffc}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f00000000c0)={0x9, 0x1c, [0x4, 0xd6a0b19, 0x6, 0xffffffff, 0xffff243b, 0x5, 0x8e]}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x7, 0x2, 0x2, "c2667f5021f361a47f67699185185c5b6a0131127d063b0d434e476d0fc0f659", 0x751a9685}) 13:08:22 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9], 0x4}}}) 13:08:22 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792], 0x4}}}) 13:08:22 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9], 0x4}}}) 13:08:22 executing program 1: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}]}}) 13:08:22 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)) 13:08:22 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff], 0x4}}}) 13:08:22 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5], 0x4}}}) 13:08:22 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234, 0x6}}) 13:08:22 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff], 0x4}}}) 13:08:22 executing program 1: pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, r2, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r5) ioctl$VFIO_GET_API_VERSION(r5, 0x3b64) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f00000003c0)={0x3, @win={{0x0, 0x800, 0xcc3, 0x7}, 0x3, 0x4, &(0x7f00000002c0)={{0x0, 0xd6c1}, &(0x7f0000000280)={{0xfffffffe, 0x10001, 0x81, 0xff}, &(0x7f0000000240)={{0x2, 0x1, 0x4}}}}, 0x965f, &(0x7f0000000300)="8a915439e1305bbd02b1cebc5d4a50a72954e0ec09fedacb1b5b2fb0824cde5d3c778df71f99fd1f6ee59040ee2b293267a67686f3d121cb09f976831d373a032fe917705e3bd4c53bdedb40815bb6b00c89f07658a576ac8a95edac389848f106a195cba0a00fa9dcaced7168a6cd9abf9c4a55939be7a3db4a974f57ff07c1026f29b6625b8c3cc56f34561517a0643bd67af18e04a30d5b4a29921cec8edac734f962c42632e288adaebf122673f91723", 0x2a}}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000001c0)={0x10000, 0x2, 0x4, 0x8, 0x6, {r6, r7/1000+10000}, {0x4, 0x0, 0xd, 0x7, 0x20, 0x20, "42ac1123"}, 0x7fff, 0x0, @userptr=0x5, 0x4}) 13:08:22 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x3) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) 13:08:22 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792], 0x4}}}) 13:08:22 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5], 0x4}}}) 13:08:22 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x180, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x81204101, &(0x7f0000000100)) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x1, 0x3, 0x4, 0x0, 0x100, {0x0, 0xea60}, {0x3, 0x8, 0x80, 0x2, 0x6, 0x1, "d774362d"}, 0xda, 0x4, @offset=0x401, 0xfffffe00}) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fff, 0x37}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x21) 13:08:22 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0xea4b, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x32435750, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x6}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) 13:08:22 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b], 0x4}}}) 13:08:22 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792], 0x4}}}) 13:08:22 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)={0x2, 0x2, 0x4, 0x100000, 0x5, {0x77359400}, {0x1, 0xc, 0x1, 0x1f, 0x2, 0x80, "b9b6cb5d"}, 0x1ed, 0x3, @userptr, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="040026bd7000fddbdf251a00170005020000000000f5ff8f0b96ae9e2b6f0a2f17c65e893b6fe8900e92b368482561e9446128d7fce6ed8921bafcae7b86c381108dc504d8c5eaa32145383e0007e849d4a55957379b6e432fcd7903889e7db3f081b1442db8d72970b0ee7080239393f9243a9a9e2508bd40e969050b2b395a8b118839a06633a90ac2c944f3"], 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4091) [ 2072.915608] Unknown ioctl -2128592639 [ 2072.920776] Unknown ioctl -1067952631 [ 2072.938797] Unknown ioctl -2128592639 [ 2072.954563] Unknown ioctl -1067952631 13:08:22 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x2, 0x7, 0x34424752, 0x1, 0x3, [{0x8, 0x80000000}, {0xfff, 0x9}, {0x2, 0x2}, {0x1}, {0x6, 0x3}, {0x1, 0x3}, {0x7fffffff, 0x1000}, {0x7}], 0x0, 0x3f, 0x0, 0x0, 0x5}}) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x4000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2d4, r2, 0x10, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xbf48}]}, @TIPC_NLA_BEARER={0x1e8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xd769, @loopback, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2b}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @private1={0xfc, 0x1, [], 0x1}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xff, @mcast2, 0x9}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x15460000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth1_to_batadv\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xa56, @mcast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @ipv4={[], [], @remote}, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x27}}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3, @empty, 0x8001}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @private1, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x80, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7aa}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x91c4}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x20048045}, 0x880) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x82}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x9c, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}]}, 0x9c}}, 0x18000) 13:08:23 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff], 0x4}}}) 13:08:23 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792], 0x4}}}) 13:08:23 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7, 0x10000000}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x0, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) 13:08:23 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4], 0x4}}}) 13:08:23 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b], 0x4}}}) 13:08:23 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0xe1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) 13:08:23 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5], 0x4}}}) 13:08:23 executing program 0: ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f0000000040)={0x8, 0x3, 0xfffff1cb, 0xf91, 'syz0\x00', 0x800}) r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x9, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000001c0)={0x2, 0x4, 0x4, 0xfa3bdd27f46502a4, 0x7e09, {0x77359400}, {0x4, 0x1, 0x9, 0x2, 0x2, 0x4, "220367f1"}, 0x6, 0x0, @offset=0xffff, 0x8, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000340)={0x20, 0x8e2, 0x1}) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000fddbdf2506000000080001007063690011000000000030303a30303a313000000000080003000300000006b14798ca143dc0"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)={0x200, 0x0, 0x4, 0x8, 0x0, {0x0, 0xea60}, {0x4, 0x8, 0x5, 0x7f, 0x8, 0x9, "a5358d65"}, 0x0, 0x1, @planes=&(0x7f0000000180)={0x5, 0x80, @userptr=0x800, 0x101}, 0x1, 0x0, r1}) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000600)=""/232) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000700)={0x401, 0x1, 0x4, 0x800, 0xf5e, {0x77359400}, {0x3, 0xc, 0x7f, 0x3, 0x88, 0xa, "bdf7f92c"}, 0x9c, 0x3, @offset=0x1, 0x2, 0x0, r2}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r4) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000005c0)={0xd78, 0x5}) ioctl$SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000000300)) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000002c0)={0x0, 0x20363059, 0x3, @stepwise={0x8000, 0x1000, 0x5, 0x8000, 0x2, 0x20}}) 13:08:23 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4], 0x4}}}) 13:08:23 executing program 2: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) 13:08:23 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) 13:08:23 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4], 0x4}}}) 13:08:23 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4], 0x4}}}) 13:08:23 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}, {0x0, 0x800000}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080)) 13:08:23 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4], 0x4}}}) 13:08:23 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5], 0x4}}}) 13:08:23 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x26e0c0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000280)={0x1537, 0x1, 0x4, 0x70000, 0x7, {r2, r3/1000+10000}, {0x4, 0x1, 0x6, 0x8f, 0xfb, 0x6, "819b2e63"}, 0x338, 0x2, @userptr=0x2, 0xd4, 0x0, r4}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000180)) sendmsg$nl_route(r4, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipv6_getmulticast={0x14, 0x3a, 0x800, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x814) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) 13:08:23 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @raw_data="ba37f4dc6c9776f16ed66b5ed417ada2b09cb428285f37b87246bbeebabbe5a3dd467df1ef915b4debe3dcdac81312e4d4e82fc48e82706737a7094599d9794fa3b1077707a4472ed22afc1ea5c243bad3d23765f49c1c9639c010f8f5f36a7b85eea02f8d01aa9e739632f4ab4b04a7b1c1b33b56c8c791331cfdc6b5abd71dcde1cb8502fd1e8942e7883f6ecb9d51ffee095e6b694a20b6802e356c5bba71d138553e658b650813442ae551f54496576d8e8bf557a7936370839c347dd656a0587d670d08deb9"}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) 13:08:23 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5], 0x4}}}) 13:08:23 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000080)={0x2, @raw_data="86ee6eec2358e92d41d8137fed431922e9d7f86249712d2bf51fd4aa80b3cb5bcddeffb64626f17e34776fc7f6808423dc03dba40aa9cf4e607dc08d6b40ef0bc94cc582457730fc9643e7bad6a394bbe13384848ae2b9855080b82cde8d64427983f75bfd2f013517fce6e4495db2e7406cc4e94f50af6ff73ceaec4eeb5a76e04d64868a68cbad8af60a8f24a6f4b0cdaff8b9cad6a0a60a042cb2c07a794203f552ef9f6b677cd16e19664374d2f7f993a8c80d4c52ad55f5e1a6aa5ca0b6ea14039d4d8645e2"}) 13:08:23 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5], 0x4}}}) 13:08:23 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5], 0x4}}}) 13:08:23 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x40000, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) 13:08:23 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff], 0x4}}}) 13:08:23 executing program 0: sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000080)="00545b37d58ae038e45416160851280d802863d03d5d7b4edacd77aa8a7916565156d782dd465c057df7d406f74f3b49328b019f86e955592fb027b64fb84bcdf69a55105be9dd1b9bbe98d00033ea0e00176ef1308c19ede1646862da2cfa179fcf8bba9257f764682d74a9ef75d57cf5b2cdfba6ac62c015c93725367ef3cbeeae63740cb4a45d90866e1bfd6e5822192a327c47290c5d6e4332c6098a8fc42e5d40476a8a33e8b90f3901b7057ae6e905c5dfdbdc79d2dea5cc742a2bb8586d69def9e0e003b14dba77324cab5c33c7d8f0d325905b10e1dc067577d7a8f882e80c434728dfcaacd3522f7973263f86ea35160193308314", 0xf9, 0x400c800, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, [], 0xe}, 0x4}}, 0x24) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0x2, @pix_mp={0x80000001, 0x1, 0x30364d54, 0x2, 0x7, [{0x8, 0x1}, {0x2, 0x20}, {0xacb, 0x7}, {0x9, 0x36c}, {0x401, 0x4}, {0x9}, {0x10000000, 0x7}, {0x9, 0x7fffffff}], 0x1, 0xff, 0x7, 0x1, 0x2}}) 13:08:23 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff], 0x4}}}) 13:08:23 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7], 0x4}}}) 13:08:23 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x3) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) 13:08:23 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000000)=0x3) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) bind$rxrpc(r1, &(0x7f0000000180)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) 13:08:24 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7], 0x4}}}) 13:08:24 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2], 0x4}}}) 13:08:24 executing program 0: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x5, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000001c0)={0x1000, 0x1, 0x4, 0x800, 0x0, {0x0, 0xea60}, {0x1, 0x0, 0x1, 0x4, 0x3, 0x80, "27321d0a"}, 0x0, 0x1, @planes=&(0x7f0000000180)={0x80, 0x1, @mem_offset=0x1bd83364}, 0x8001}) 13:08:24 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x3, @sliced={0x3, [0x3, 0x0, 0x7, 0x3ff, 0x4, 0x1f, 0x2, 0x6, 0x1, 0x6, 0x0, 0x8000, 0xfffb, 0x5, 0x3ff, 0x6, 0x0, 0x9, 0x4, 0x7f, 0x100, 0x1ff, 0x200, 0x9, 0x1f, 0x3, 0x4, 0x4, 0x3ff, 0x7f, 0xd0a, 0x0, 0xfff, 0x8, 0x0, 0xc5, 0xf800, 0x5, 0x5, 0x1f, 0x87, 0x0, 0x4, 0x6, 0xca7b, 0xff, 0x4, 0x1], 0x3}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x0, [], 0x0, 0x0, 0x0, 0x0, 0x5}}) 13:08:24 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x4, 0x2, 0x4, 0x1000, 0xc8, {0x0, 0x2710}, {0x1, 0xc, 0x1, 0x7f, 0x7e, 0x66, "0062b84a"}, 0xdfc0, 0x4, @fd, 0x1}) 13:08:24 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x4, 0x5e7820c9, 0x31363553, 0x5, 0x1, 0x1, 0x6, 0xffffffff, 0x1, 0x0, 0x2, 0x6}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) 13:08:24 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7], 0x4}}}) 13:08:24 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b], 0x4}}}) 13:08:24 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) mq_getsetattr(r1, &(0x7f0000000000)={0xffffffff, 0x1, 0x6, 0x800}, &(0x7f0000000180)) 13:08:24 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7], 0x4}}}) 13:08:24 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400], 0x4}}}) 13:08:24 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x509000, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x800, 0x4, 0x0, {0x1, @sliced={0xfff, [0x6, 0xff, 0x8001, 0x8, 0x401, 0x9, 0xff, 0x2, 0x0, 0x7, 0x0, 0x6, 0x3, 0x8, 0x1, 0xfffa, 0x1f, 0x0, 0xfff9, 0x1, 0x1, 0x9, 0x0, 0x40, 0x401, 0x7, 0x4, 0x7, 0x520f, 0x0, 0x2, 0x1, 0x46fc, 0x2, 0x9605, 0x7, 0x800, 0x5, 0x8, 0x3, 0x4, 0x16f, 0xa58, 0x4, 0x1, 0x5135, 0xffff, 0xa73f], 0x800}}, 0x68}) 13:08:24 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4], 0x4}}}) 13:08:24 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x7, 0x1ff, 0xb5315258, 0x3, 0x3, 0x94, 0x6, 0x1, 0x1, 0x1, 0x0, 0x2}}) 13:08:24 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20000, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r5) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000300)={0x0, 0x2, 0x4, 0xe000, 0xa26, {0x77359400}, {0x5, 0x2, 0x0, 0xae, 0x4, 0x7, "5da6fab8"}, 0x5, 0x0, @offset=0x4, 0xffff, 0x0, r1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000400)={0x81, 0x3, 0x4, 0x1000, 0x4, {r3, r4/1000+60000}, {0x2, 0xd, 0x7, 0x1, 0x5, 0xf3, "df5a0b27"}, 0x7fffffff, 0x2, @offset=0x5, 0x7f, 0x0, r6}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x3, 0x3, 0x2, {0x1, @raw_data="42270f853889ca2d234026369c2f076c351927cf1a6a4c66d30ae593fa6c9138d323123165ba3edbe3000a3615650486a86dc26b5326d736443b196e0747381d0a40082ef7cf5ef5f83bde119a7e4ac11ba75685e4e65ffec4976ebd78144a76b2d2ae2a99923be8d59fb1134453a2107f80de1b04867bcf02cc68f541a60f780299c7d48a41defbc2dc48ddfe2fdd2e4f21e171d52ad4bc575d1c826b57a642ae18cfa40e6a4f99d28d5d5ad6d0aab6290bbe2b7a7258627f4f19750a6a745d4dfb87bd139bd4ee"}, 0x9}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) 13:08:24 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4], 0x4}}}) 13:08:24 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @sdr={0x41416770, 0x5}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x5, 0x5, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c00b911", @ANYRES16=0x0, @ANYBLOB="020025bd7000ffdbdf250900000005003500f7000000050038000100000008000300", @ANYRES32=r5, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20048800}, 0x4010) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000002dc0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$nl_route(r2, &(0x7f0000002ec0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e00)=ANY=[@ANYBLOB="500000001800020029bd7000fddbdf251c10007ffef6ff01000400000c00090040000806", @ANYRES32=r5, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="1400120009006a528688dc24b6323bdd55f254f10c00090000000103", @ANYRES32=r6, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x44810}, 0x4c011) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) r7 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x9, 0x400) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r7, 0xc008551b, &(0x7f0000000280)={0x80000000, 0x10, [0x9, 0x0, 0x80, 0x8001]}) 13:08:24 executing program 1: ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) 13:08:24 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75], 0x4}}}) 13:08:24 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000180)={0x1, 0x9ab86e0, 0x8, 0x100000001, 0x3, 0x9, 0x5, 0x4, 0x1833, 0x80001, 0x10001, 0x5}) ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0) [ 2074.562528] Unknown ioctl -1067952547 13:08:24 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2], 0x4}}}) 13:08:24 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2], 0x4}}}) 13:08:24 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6], 0x4}}}) [ 2074.688808] Unknown ioctl -1067952547 13:08:24 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4], 0x4}}}) 13:08:24 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x6, 0x1, 0x7, "b08ca7ac63a0b893a24fd20a8e9e2ffe78aab20f42514d50dd6da2572477a3fd", 0x3136564e}) 13:08:24 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1, 0x1, 0x2, "322ea8d58e6472ac5b9520cf66ac69a393b13d2c86fe64c32c76142c9433d5d9", 0x32314247}) r1 = syz_open_dev$vim2m(&(0x7f0000000180)='/dev/video#\x00', 0x1000000000048, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x4c47504a, 0x80000000}}) 13:08:24 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4], 0x4}}}) 13:08:24 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x20000, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000002c0)={0xffff, 0x3, 0x4, 0x4, 0x400, {}, {0x3, 0x0, 0x1f, 0x1, 0x40, 0x9, "1aa1e9d9"}, 0x2, 0x3, @fd=r2}) 13:08:24 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x4, 0x2, 0x1, "6c5ef9691a468dee71f5b56ad6a490b3ff33174ac72f5a4d36d066e20cd9febe", 0x4f565559}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000280)={0x0, @pix={0x7, 0x1, 0x34424752, 0x1, 0x9, 0x0, 0xc, 0x7, 0x1, 0x3, 0x0, 0x2}}) 13:08:24 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5], 0x4}}}) 13:08:24 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400], 0x4}}}) 13:08:24 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234, 0x0, 0x0, 0x2000}}) 13:08:24 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x3, @pix_mp={0x7f, 0x4, 0x47524247, 0x7, 0x4, [{0x3ff, 0x995}, {0x4, 0x1}, {0x93, 0x7}, {0x4}, {0x80000000, 0x1}, {0x5f1, 0x8000}, {0xffffffff, 0x80000000}, {0x6faa, 0x8000}], 0x40, 0x58, 0x3, 0x2}}) 13:08:24 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5], 0x4}}}) 13:08:25 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5], 0x4}}}) 13:08:25 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x4) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @sliced={0x8, [0x401, 0x605c, 0xdcd, 0x8, 0x4, 0x2, 0xfff, 0x855e, 0x3ff, 0x1000, 0x1, 0x9, 0x3f, 0x7, 0x7ff, 0x0, 0xf3, 0x3, 0xe7, 0x1, 0x2, 0x40, 0x9, 0x3ff, 0x7, 0x5, 0x80, 0x4, 0x7, 0x4a, 0x20, 0x7, 0x800, 0x45, 0x3, 0x1, 0xa, 0x4, 0x1, 0x3f, 0x7, 0x10, 0x7fff, 0xe03d, 0x81, 0x64ac, 0x6], 0x79}}) 13:08:25 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3], 0x4}}}) 13:08:25 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8, 0x8000) 13:08:25 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75], 0x4}}}) 13:08:25 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75], 0x4}}}) 13:08:25 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x100}, {0x4}, {0x7, 0x4}, {0x4c, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x4, 0x0, 0x1, @discrete={0x9, 0x9}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000002c0)=0x3) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x400, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x813}, 0x4040004) 13:08:25 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7], 0x4}}}) 13:08:25 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000000)=0x1) 13:08:25 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x5, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000180)=0x1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vsock\x00', 0x40001, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000380)={0x101, 0x2, 0x4, 0x0, 0x3, {0x0, 0x2710}, {0x4, 0x0, 0x7, 0x0, 0x5, 0x3b, "0e949c97"}, 0x7, 0x2, @planes=&(0x7f0000000300)={0x85, 0x3, @fd=r2, 0x3}, 0xb6f8, 0x0, r3}) syz_genetlink_get_family_id$gtp(&(0x7f00000002c0)='gtp\x00', r2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440)='nl80211\x00', r3) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r6) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x4, 0x31}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5234d418}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4f}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f00000001c0)={0x2, @sdr={0x52424752, 0x5}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x3, 0x50323234}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048800}, 0x4010) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)={0x6, 0xc7, 0x1, 0x200, 0x1800, r5, 0xffffffab, [], r8, r5, 0xff, 0x2, 0x4}, 0x40) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) 13:08:25 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2], 0x4}}}) 13:08:25 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000300)={0x3, 0x1, 0x4, 0x10000, 0x8, {}, {0x5, 0xc, 0x9, 0x4, 0x5, 0x1, "2250ee6e"}, 0x20080000, 0x1, @offset, 0x6}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000002c0)={0x3, 0x62760a0b, 0x2, @stepwise={0x1, 0x8b4, 0x4, 0xa630, 0x980, 0x3f}}) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xff, 0x1, 0x1, "b6329b4672414289019d22b8db1f030e60c2d3a59cc07a5993000db4306ccb6b", 0x30314442}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vim2m\x00', 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000580)='/dev/video#\x00', 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000540)={0x2, 0x3, 0x0, "22842b1e4c3e74b8c14932f1bca02456a6cf72df18da8f17e2613556d40f8f2c", 0x36314d4e}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000500)=0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000400)='/dev/video#\x00', 0xffffffff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000440)={0x4, 0x3, 0x61afdc6562dc7ad2, "c91d3794d99542a16cdbfeddf737d06d0cd5369814cbc98066dfc5e7b79e82c0", 0x50313134}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) pipe2(&(0x7f0000000380)={0xffffffffffffffff}, 0x80800) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f00000003c0)={0x1, 0x30314247, 0x2, @discrete={0x4}}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r5) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f00000005c0)={0x0, @sliced={0x8, [0x1ff, 0x9, 0xfff, 0x6, 0x9, 0x9, 0x200, 0xc000, 0x200, 0x9, 0x5, 0x400, 0x6, 0x9, 0x7, 0x7, 0xc4eb, 0x8858, 0x3ff, 0x1, 0x2, 0x3, 0x8, 0xadfc, 0x7fff, 0x93, 0x9, 0x0, 0x1, 0x5eb6, 0x6, 0x7f, 0x800, 0x3, 0x6, 0x40, 0xfff7, 0x3, 0x5, 0x4, 0x1, 0x2, 0x9, 0xfff9, 0xffff, 0x7, 0xf8d, 0x40], 0x7}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x2, @sdr={0x41414270, 0x1}}) 13:08:25 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6], 0x4}}}) 13:08:25 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7], 0x4}}}) 13:08:25 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2], 0x4}}}) 13:08:25 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x88c1}, 0x5) r2 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x21, 0x50323234, 0x0, 0x0, 0x0, 0x10}}) 13:08:25 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2], 0x4}}}) 13:08:25 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, &(0x7f0000000680)={0x0, &(0x7f0000000640)=[&(0x7f0000000000)="3e472ef1d57481be6b70d3212cf5065193eddb1c676bcfc63b3a81c6787d4e", &(0x7f0000000180)="21ac326e5b38eb7857618a2ecf78a5b7bd5bb3dd5fe7742ce5eb4f9c5a7986e31a5900f07d94587030ecf931a0ef50e370b55be09e898e6721c871845b183528a60fd4b5383f8826b6e78bac3b50acc3d828f9790fa0e15e2324fbe540d291ed851d52262742fd0a27a57608844ea07362c3b85fe448d7643b4bfda66d671a2285c1e5b6353f1f26a0e5dff58463197708ead6064d867ca0", &(0x7f0000000240)="71bbe1d6723657fd36d9f522", &(0x7f0000000280)="8691affcb35299a36c07feb5f835df347a179c0a0d4b211a7f7ccb641d688b481b0256ca2bf82df653df5bba0eb7f6bb76bb00a69b34c3920ce8ffaab9a5bc99a7efc311d6816780b34f3f0cfcf308b8afd2d55fd472ec3a36e0201cd4219340c52da1352cc611f2163b98ef3395b86f139e33511912d930946c3720d8fed4ae2b0c7d4bceac6867ccb00ec0b6e5fb9675543657a4f673d63ee555f3f3bb83ed1a14e1b9f25387e9c479ec9ea7469e269f6425596aefe822d312890a6573966ee54e9b2d04cf031eb9c5", &(0x7f0000000380)="a287dff18f091606b98662ebc3e6d2fa79bd4af21f3579", &(0x7f00000003c0)="7b57d5cbe093291ca0c500639ac201d9e615e3d4356e39d84039c09f9662d55107185ef8dd363222b2386d3e2a0c9a09a06c794a42e727295c8382c93a5439fe15420bd5c19c7eb280dd87a9a5725ff168f43988883faa7df6001b4396bac52a5909bcb4a2641584cf67b13c925be7cd0589eb142d6a3c00c7bb03432cccb28c89a548a3972966d91ac22aae30b22c51ca67118ce996b42b43d90959c1d949e94624fe94efd0727b6165eb2cbb92fd9d3ddc4e6f7a308907288c7ba6ca447f13db410dac912e7481fc6a69d92a5213ffba5820b2d816fea829556eddcb11284b9bff33fafd374a5fe60b3fc822111f28030e3759", &(0x7f00000004c0)="8e8110917e5af9766fe142894d74391c422fce4d376ba12febc8308f1553064a11a84c0151105d9b29d2602483b693915dd32679933084e8f2a32d3fa0f6e85dd899bbbdbcde9e6e", &(0x7f0000000540)="50c121a623732703f1e9e35dd9fae4cb774af4e73d64927561ebc21c7b4ac76e42bf0429455f8a67bcfc1909f01c278fe3b1d7f2a2e00b6016aef0e5f58a390d88a10c634a717bde580d5178edcc0c0571acc000b4aff51d19f4d928df23a4a9c2cc9aa08c70a1ffd9aff5f69cdcf52e23a84e948d0c235129fd033dfa7d518d1c5a6c6d3941b7fa61db7a3c31b949bb612a80b3c2b547290c9f05f1630515f6f00fe56dcf6ebbc889bff6ddea58e0073753d3fb0bf98af2888a96ce7986f4b31df8108b61df03d547e822506d4dadc7987d4030bd0a5c43b0072abf2919b0421c2dbc9aa570b00c715bbc0045bdfde5e92ee82a2aff4321c1a798008707ac"], 0x8001}) 13:08:25 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x3) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xfff, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x6, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0xc0000000}, {0x2, 0x5}, {0x3ff, 0x10007}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000100)=0x3) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x3, 0x1}) 13:08:25 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4], 0x4}}}) 13:08:25 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5], 0x4}}}) 13:08:25 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) 13:08:25 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400], 0x4}}}) 13:08:25 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', 0xffffffffffffffff) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xf4, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40081004}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x1) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) 13:08:25 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9], 0x4}}}) 13:08:25 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3], 0x4}}}) 13:08:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00032dbd7400fddbdf251a00000008009a00010000cc000600210061007ef6dffacfc400000800010043"], 0x30}, 0x1, 0x0, 0x0, 0x440d4}, 0x635109cea0f30844) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x280400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048800}, 0x4010) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c120000", @ANYRES16=0x0, @ANYBLOB="020025bd7000ffdbdf250900000005003500f7000000050038000100000008000300", @ANYRES32=r6, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20048800}, 0x4010) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400)='/dev/nvram\x00', 0x210080, 0x0) ioctl$VFIO_SET_IOMMU(r7, 0x3b66, 0x8) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@mpls_getnetconf={0x5c, 0x52, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x3}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x6}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x10000}, @NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x3}, @NETCONFA_IFINDEX={0x8, 0x1, r4}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20000001) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0xffffffff, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}, {0xfffffffc}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) 13:08:26 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="281700008be3b93d4994e5e89fe847bad569bcc0326f59cf52169099b0207a4b3ff8fe1d5352c6d2b5687d85a8319f5f382f6164b0fc33616a7d917204aca8c08e40ffe63276ea7fcfda829f7126eb825d2101780b50ebb246e21de176e894fd5d08a0c8046c818f42af39bb0cb1c9608424219d5eae1bdbcdc8e111401818aabd1b705c5169d11743bbde857700ba6d150964fe6e6856faa3b556f40a0a77510472737275900989b04861b7133beef95116ab2ccc24239babacc09265919094857464c4f9ef", @ANYRES16=r1, @ANYBLOB="00022dbd7000fddbdf251500000008000300", @ANYRES32=0x0, @ANYBLOB="0a1d19b6dce90f2d7428a48df1"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40044) 13:08:26 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3], 0x4}}}) 13:08:26 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040844}, 0x4011) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c='\xa0\xcb\x87\x9aG\xf5\xbcdL\x0ei?\xa6\xd01\xc7J\x15S\xb6\xe9\x01\xb9\xff/Q\x8cx\x04/\xb5B'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c='\xa0\xcb\x87\x9aG\xf5\xbcdL\x0ei?\xa6\xd01\xc7J\x15S\xb6\xe9\x01\xb9\xff/Q\x8cx\x04/\xb5B'}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x24000800) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0xfffffffe, 0x3, 0x1, {0x1, @sliced={0x7, [0x200, 0x6, 0xf4ed, 0x2, 0x1000, 0x4, 0x8, 0xc608, 0x8, 0xfb4d, 0x9, 0x5, 0x1f, 0x1, 0x4, 0xfff, 0x8, 0xd16, 0xbf6e, 0xffc0, 0x3f, 0x6, 0x4, 0x3, 0x7, 0xdc3b, 0x7fff, 0x0, 0xff92, 0x9, 0x8, 0x7fff, 0x40, 0x30, 0x2, 0x100, 0x6, 0x7, 0x6, 0x5, 0x6cb, 0x4, 0xff, 0xe0b, 0x8, 0x3b, 0x2, 0x7fff]}}}) 13:08:26 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x8}}) 13:08:26 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75], 0x4}}}) 13:08:26 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75], 0x4}}}) 13:08:26 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1], 0x4}}}) 13:08:26 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00', r0) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xfffffffffffffc00, 0x240180) 13:08:26 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) pipe(&(0x7f0000000580)={0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000005c0)={0xff, 0x2, 0x4, 0x10, 0x4, {0x77359400}, {0x3, 0xc, 0x7, 0x2, 0x2, 0x6, "0a924c40"}, 0xa4, 0x4, @fd, 0x0, 0x0, r1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x6, 0x0, 0x2}}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000480)={0x0, @raw_data="f819fd2808543d2325b077b5356d9acb3395cbcd7fe83063ee678b73ce065d8cf336b1d19112b285f3c585822d4fc4ae879dc9751d541f25823a89ca7cd2767e7f3b3ccf9bcaedb3dbc447f742b03f58a452f527515f50a1cfe53c60cda2e629583ba75f828567530e4d83dbf8d0b4cb84aa7eb0af0600f72f20fe2c15e3dd6ef968cc3542d30d573f35c9c1f3f3d3869ba6440532a48e779e2ed201162e816981a0c8d309992d673abd05b7f6b157d6943f22cbb9c4eb0b9a3ce6167e521048652002a58c5660f2"}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xa96, 0x5}) r2 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000640)={0x0, @sliced={0x8, [0x424, 0x1ff, 0x1, 0x9, 0x3ff, 0x401, 0x0, 0xfff, 0xffff, 0x1, 0x4, 0x20, 0x9, 0x480, 0x7fff, 0x4, 0x6e, 0x9, 0x85b8, 0x1, 0x400, 0x4, 0x3, 0x8ec, 0x200, 0x74, 0x7, 0xd5da, 0x8, 0x1, 0x400, 0x7, 0x6, 0xff, 0x6, 0x2, 0x6, 0x2196, 0x1, 0x7, 0x24, 0x8, 0x9, 0x4, 0x6, 0xfff, 0x5, 0x43], 0x2}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0x5, 0x6, 0x3, {0x2, @win={{0x1a1, 0x0, 0x800, 0x4}, 0x0, 0x7, &(0x7f0000000140)={{0x3, 0x5, 0x8c8b, 0x6}, &(0x7f0000000100)={{0x3, 0x3f, 0xfffffffd, 0xd3}, &(0x7f00000000c0)={{0x4, 0x1, 0x200, 0x4}}}}, 0x3, &(0x7f0000000280)="72fd4c89b0d066acffd0253019b7c074e23f8406643e8216e0f783b64526668b3fc176047a044c9315e8b9997c821a9451398846e05effeb12d65d39c6d3a1c301a55ed8f745deb04ee66055fa45fa058f363eeb632d7bf179c352276759a0072ec66716c9c250732c8aa7289b9fa3e85092b68094615748574dc0e7f62143fa7f8d2cd51f00f208bb2d18cd2648d503ea278f9f2ecdab86cdb1d984d6976d4e1d89aa1531d7cbb8acf45b5be4978f23d7200d5b4da123cb4b9cd45ddc32aa4e202a384c566fbf9ff4728b6a811826e9b02245ef62ea0e13b65211813b034c7337d39c8b37a330d34cbdbf2c78ef", 0x6}}, 0x15e7}) 13:08:26 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x18}}}}, [@NL80211_ATTR_IE={0xd, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x7f, 0x20}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20048001}, 0x80) 13:08:26 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2], 0x4}}}) 13:08:26 executing program 0: syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00', 0xffffffffffffffff) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f00000001c0)=0x3) 13:08:26 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2], 0x4}}}) 13:08:26 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x8}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x9}, 0x0) 13:08:26 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100], 0x4}}}) 13:08:26 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, [], 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x20040090) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) 13:08:26 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6], 0x4}}}) 13:08:26 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66], 0x4}}}) 13:08:26 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6], 0x4}}}) 13:08:26 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x90}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x9c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc000}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x101}, 0x8c004) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) 13:08:26 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x4, 0x1, 0x2, {0x2, @sdr={0x39555659, 0x8000}}, 0x7}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x3, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x5}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0xf}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x1, 0x2}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000280)={0x6, 0x0, 0x1, {0x2, @sdr={0x34324d59, 0xed2}}, 0x5}) 13:08:26 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7], 0x4}}}) 13:08:26 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00', r1) 13:08:26 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0x5, 0x401, 0x11, @rand_addr=' \x01\x00', @mcast2, 0x700, 0x8, 0xfffffe00, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'syztnl0\x00', r1, 0x2f, 0x2, 0x1f, 0x80000001, 0x49, @empty, @private0={0xfc, 0x0, [], 0x1}, 0x700, 0x7800, 0x8, 0x9}}) 13:08:26 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7], 0x4}}}) 13:08:26 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x9, 0x584e4f53, 0x2, @stepwise={0x5, 0x1ff, 0x5, 0x5, 0x3, 0x101}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x32314742, 0x0, 0x0, 0x0, 0x1, 0x7f}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000180)) 13:08:26 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101], 0x4}}}) 13:08:26 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x4000, 0x3136564e, 0x0, 0x0, [{}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x200}]}}) 13:08:26 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5], 0x4}}}) 13:08:26 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x3, 0x3, 0x1, {0x1, @pix_mp={0x3, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x1e45, 0x2}, {0x4, 0xfffffffc}, {0x8, 0x4}, {0x2, 0x5}, {0x3fd, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0xfe, 0x20, 0xfffffffc, 0x3e, @private2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x40, 0xd0fa80891f30b8a0, 0x1, 0x9}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001400000229bd7000fbdbdf25020804c8", @ANYRES32=r1, @ANYBLOB="14000600020000004b0000002c03000008000200e05e9e24"], 0x34}, 0x1, 0x0, 0x0, 0x4041}, 0x801) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r2, 0xc1004110, &(0x7f0000000300)={0xc0df, [0x8001, 0x7, 0xb772], [{0x5, 0xea, 0x1, 0x1, 0x1, 0x1}, {0xffffffff, 0x9, 0x0, 0x0, 0x1}, {0x1c5, 0x8, 0x0, 0x0, 0x1, 0x1}, {0xafcd, 0x48d0, 0x1, 0x0, 0x1}, {0x7bba22a4, 0x5, 0x1, 0x0, 0x0, 0x1}, {0x7, 0x3, 0x1, 0x1}, {0x2, 0x50e, 0x1, 0x0, 0x1, 0x1}, {0x6db, 0xffff, 0x1, 0x1, 0x1}, {0x12, 0x1, 0x1, 0x1}, {0xfffff800, 0x6, 0x1}, {0xffff, 0x651, 0x1, 0x1, 0x1, 0x1}, {0x8b98, 0x5, 0x1, 0x1, 0x1}], 0x9}) 13:08:26 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8], 0x4}}}) 13:08:26 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4], 0x4}}}) 13:08:27 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000440)={0x4, @win={{0x8f, 0xa10c, 0x3ff, 0x172ee8fd}, 0x4, 0x2, &(0x7f00000003c0)={{0x5, 0x0, 0x1, 0x7}}, 0x5, &(0x7f0000000400)="81b52d1128f8f706a8163555aa45413a0cd11993c5f362d9866f3fe2267d6da47affcf89fbb48a66a350a7d0d7915898234d83183ee9b400ce", 0x1}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0xfff, 0xffffffff, 0x1, {0x2, @pix={0x3c728466, 0x8001, 0x3031334d, 0x4, 0xffffffff, 0xcb6c, 0x8, 0x4, 0x0, 0x7, 0x1, 0x7}}, 0x8}) r1 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000380)={0x1f, 0x2, 0x3}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000540)={0xfffffffb, 0x10000, 0x3, {0x3, @pix_mp={0x5, 0x80, 0x3432564e, 0x5, 0xb, [{0x5, 0x7fffffff}, {0x4, 0x100}, {0x8}, {0x0, 0x3000}, {0x8, 0xffff}, {0x4, 0x7ff}, {0xde62, 0x3}, {0x1, 0x6}], 0x1f, 0x7, 0x0, 0x0, 0x6}}, 0x9}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x3, @sdr={0x3247504d, 0x24}}) syz_open_dev$vim2m(&(0x7f0000000640)='/dev/video#\x00', 0x1, 0x2) 13:08:27 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00', r1) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x4, 0x7, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x8, 0x0, 0x2}}}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x80000001, 0x0, 0x4, 0x0, 0x7fff, {0x0, 0x2710}, {0x5, 0x2, 0x0, 0x80, 0x20, 0x5, "ebd0d38e"}, 0x9, 0x1, @userptr=0x3, 0x101}) 13:08:27 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3], 0x4}}}) 13:08:27 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4], 0x4}}}) 13:08:27 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0xb, [{}, {0x10001}, {}, {}, {}, {}, {0x0, 0x7f}, {0x0, 0x4000}], 0x0, 0x0, 0x4}}) 13:08:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="f1ffffffb6c4a37a4fc6fdc10000"], 0x14}}, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r7, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r7, 0x10a, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x400889a) sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ef44b275e4287a522e4b9cd61f66b9b8fe87ea44d1df9c043ca8eeb73e667e3816986170a6517510ee6367264fcc1816821295e8e7781a144c154d53e27edc", @ANYRES16=r5, @ANYBLOB="00012abd7000fbdbdf253d00000008000300", @ANYRES32=0x0, @ANYBLOB="08005d000000000008005d000100000008005d0001000000"], 0x34}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4000) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x800, 0x70bd2c, 0x9be8, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x1) r8 = syz_open_dev$vim2m(&(0x7f0000000240)='/dev/video#\x00', 0xb2, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000280)={0x2, 0x400}) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000080)={0x1, @raw_data="52086d36392345a5b99f01a16c1c26ae4aa509e35a96681aa57a593728dea5a42afd3585b02224babce84205998ad17305c783d524d7aeca9ccbcc47b325ce90988700c12606ecfa147d6bc7504bc32c104bb61e8649e4ae760123cd5703207df7ddc8b6e54b6b3f1e8d939e16965397d013a19b102a33418ef7ee191ec74977e4d0acb03329635476000e58de66f3ff579b502e4318767b07ca1de10d97b7e555660dc7f3f07672fcf1330b161c610dba7b955d83d8ebb831bc4884e63fab28c713b1f344a97094"}) 13:08:27 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0xfffffffc, 0x3, 0x3, {0x1, @win={{0x7fff, 0x8000, 0x0, 0xfffffffc}, 0x0, 0x800, &(0x7f00000000c0)={{0x7, 0x4, 0x2, 0xffffffff}, &(0x7f0000000080)={{0x9, 0x0, 0x7, 0x9}, &(0x7f0000000000)={{0x1, 0x3, 0xd0, 0x4}}}}, 0x1, &(0x7f0000000280)="4d667965399417e543fe7879956222c5cf18eba68d3491dcc2dfa54af2819b28a366a2a2e5fa8537c2756ada32c05371f9268dc34c4d80767f456e9d69e00893b834a11b4fb51ebd1c788f9911584695ec7daf8e3d2e5ffed542b40c774fe8bf8370d361c1ff4d2453e9900bf4c239ae782f859ba232e377c33cf86c943733277030c298b592dcc59dbb82e2a4a581", 0x4}}}) 13:08:27 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7], 0x4}}}) 13:08:27 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0xc0480, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000180)=0x1) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) r2 = syz_open_dev$vim2m(&(0x7f00000001c0)='/dev/video#\x00', 0xfffffffffffffffd, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000200)={0x1, @raw_data="e7746ce41a2fa361d375f0ffef66e6ef79ffc12e1ad2a0cab4d30093f3357e86bce2aba0aae719af545edd8e481846b7ebcdccc5b05d3f18ec7d7f0f4bff7970d9d186874960fdaaaf63313b4078be13a0797d37542e4d9dd68bb71351a74e7f1a84dd107f3ee8293c95766495b76927767b0131d2b3a3c4c29e64966c07ea178a23e65188b8dbff403c72bef98b1ac967cc615d686db4baeede0c74b5bf1e24be4e47deb92506a5b051320d18e5c5c8bd546fcb211bb43c7ea6257c5a3c6bb5d407d87444bd9137"}) 13:08:27 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000480)=0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0xb, 0x6, 0x4, {0x2, @raw_data="04136d87b7f7c35d337f5b9d059827e55e75408c05823e67ddb0ff70c516d50931c3927b5135da922b3c3fdaaec6c12b0bc0da160a57b09ad612eaf229e7c1d207aaeefe1b185508260f92f23855ccfb12167181c0ed6b94df60416870fce9f60bab8e25072cf5fbff7d893f7d9047c0a164ce1ec2a9f98712ac0df87c7421d7be9ac159e9223dc5a22b169c0cca615ac80b82b524d8391b30991fff11eaab116c3e8de62acf1b14be09e8b52c417c51abbd0e5775469f2fd9982724c34a444b1d771cca0478cfea"}, 0x465}) r2 = getpid() syz_open_procfs$namespace(r2, 0x0) wait4(r2, &(0x7f0000000000), 0x1, &(0x7f0000000380)) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000000440)=""/2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r3) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000280)={0x5a997d68, 0x1, 0x4, {0x1, @sliced={0x7f, [0xdf6, 0x3, 0x8001, 0x7ff, 0x7f, 0x6, 0x5, 0x8, 0xae7, 0xfffd, 0x1, 0x8001, 0xfffa, 0x8, 0x1, 0x61, 0x6, 0x1, 0x7eee, 0x855f, 0xffff, 0xc1, 0x1000, 0x6, 0x8, 0xff, 0xb2, 0x4, 0x2, 0x8, 0x400, 0x4, 0x1, 0x100, 0x1, 0x2, 0x9, 0x3, 0x7, 0xfffc, 0x1, 0xd0f5, 0xd57b, 0x1, 0x8, 0x20, 0x6], 0x9}}, 0x6}) 13:08:27 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4], 0x4}}}) 13:08:27 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2], 0x4}}}) 13:08:27 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000000)) r2 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x4}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) 13:08:27 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x8}}) 13:08:27 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0xffff, 0x2d1, 0x3, {0x2, @raw_data="7959b82fb8e1a90815f5e966bfec3ddc4e709b28c15c8db64486be730da9644383053be70840d43cc2d89539b147f29910e5f3aa966bce4ba9d43ed48c0683cc067aa7772997c50862c2067413c70328214c67d0eee71f585fe8e67b896caaf1d8d391d096cbb87192765a4d2ede09696a22058eb8f2c61534b4fae4892ba07a67678d15deb01d102741531aac94cc0f0b68f18dfaac68238dbde95533674390e85418d990ad568fef025f2f935d1545288fa9947fb95840bc1d1d58c4b12ce4d6ff5f65a42d2515"}, 0x7}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x4112, 0x0) 13:08:27 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2], 0x4}}}) 13:08:27 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff], 0x4}}}) 13:08:27 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x210001, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r1, 0x8004500f, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) 13:08:27 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff], 0x4}}}) 13:08:27 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9], 0x4}}}) 13:08:27 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff], 0x4}}}) 13:08:27 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x8, 0x3, 0x3, "35ebd2224f8988edc255bf4c09c8c69dd56ef85bc96ec74fb02e8e8f9759eebd", 0x4f424752}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r3) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000002c0)={0x9, 0x2, 0x4, 0x1000, 0x7fffffff, {r1, r2/1000+10000}, {0x5, 0xc, 0x5, 0x9, 0x7, 0x9, "3bf5c3bd"}, 0x7, 0x0, @offset=0x40, 0x101, 0x0, r3}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000100)={0xc9, 0x2, 0x4, 0xe000, 0x200, {}, {0x5, 0xc, 0xfc, 0x1f, 0x0, 0x0, "cd90599f"}, 0x9, 0x3, @fd, 0x3f, 0x0, r4}) ioctl$KDGKBLED(r4, 0x4b64, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) 13:08:27 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9], 0x4}}}) 13:08:27 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0x0, 0xe7], 0x4}}}) 13:08:27 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r2, 0x0, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x30}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7f}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x8010) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe}]}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000180)={0x4658, 0xfffe, 0x3, {0x1, @raw_data="96edeb2f13b9cc3e64d1c59c753bb44c4a0095446459000362cd1894fedb9c8b0a0627818f95f59bb8fe5ca429aff92ee759dbd05fc9beb4a82d037d10d1de2623cd3b799b85218a8742ec3572cd5aa259be523f6ccf8ae24725b6de854f7ab691dbe7e28691cc3ab5973cb8286cf8bcb574cf907286423b2778a05962c07b40dcadbee7aa80d1209b6e4249e3e2e509bb37625c79536260d63c156769e24b2f6374041c1f09df294d9ee86bda0739718293ea8d259c9fe0ce21f3a35a7735c9ead86a5f38e8b87f"}, 0x4}) r4 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0xfffffffffffffc01, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000280)={0x1004000, 0x43353039, 0x2, @discrete={0x6, 0xf7ab}}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r5) r6 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00', r1) r8 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xc8, r7, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff0c6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x85}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe134}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20004804}, 0x4) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x2000, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd7000fedbdf250200000008000700", @ANYRES32, @ANYBLOB="18bd3601598a43e17d6c26ffff4500afd862", @ANYRES32=r5, @ANYBLOB="0c000300030000000000000008000400e000000108000700", @ANYRES32=r6, @ANYBLOB="0800080000000000060006000200000008000400e0000001080008000200000008000700", @ANYRES32=r9, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x75a4fbbeb4341675}, 0x4008000) 13:08:27 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7], 0x4}}}) 13:08:27 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000000)=0x5) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) 13:08:27 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x0, 0x0, 0xe7], 0x4}}}) 13:08:27 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1], 0x4}}}) 13:08:27 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1], 0x4}}}) 13:08:27 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4], 0x4}}}) 13:08:27 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0x0, 0x0, 0x0, 0xe7], 0x4}}}) 13:08:27 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @vbi={0x12000, 0x45, 0x55aad306, 0x47425247, [0x7], [0x0, 0x1], 0x33}}}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x1) 13:08:27 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4], 0x4}}}) 13:08:28 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000180)={0x0, @sdr={0x31364d4e, 0x100}}) 13:08:28 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2], 0x4}}}) 13:08:28 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100], 0x4}}}) 13:08:28 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe7], 0x4}}}) 13:08:28 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x3, @pix={0x0, 0x0, 0x50323234}}) 13:08:28 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9], 0x4}}}) 13:08:28 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2], 0x4}}}) 13:08:28 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0xb0, 0x9, 0x35315258, 0x0, 0x2, [{0x1, 0x6}, {0x4, 0x1}, {0x81, 0x4}, {0x9, 0x7}, {0x8, 0x1ff}, {0x2, 0x2}, {0x9b, 0x196}, {0x3f, 0x7fffffff}], 0x5, 0x3, 0x8, 0x1, 0x4}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x2, 0x1, 0x0, "b7aae8714c91138d7c2b3ed94c771babd5a0fbea643602294cba09abafa21b61", 0x20363159}) 13:08:28 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9], 0x4}}}) 13:08:28 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7], 0x4}}}) 13:08:28 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66], 0x4}}}) 13:08:28 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000080)={0x0, @pix_mp={0x1ff, 0x3, 0x38416761, 0x2, 0x3, [{0x401, 0xfffffff7}, {0x8001, 0x81}, {0x8, 0xff}, {0x7ff, 0x80000001}, {0xbf8c, 0x1000}, {0x8, 0x8}, {0x2, 0x6}, {0x7, 0x3f}], 0x6, 0xff, 0x4, 0x2, 0x6}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) 13:08:28 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9], 0x4}}}) 13:08:28 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000280)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7, 0x3, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="14740000", @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000"], 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000002", @ANYRES16=r2, @ANYRES64=r2], 0x54}, 0x1, 0x0, 0x0, 0x20004004}, 0x4040050) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) 13:08:28 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66], 0x4}}}) 13:08:28 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7], 0x4}}}) 13:08:28 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2], 0x4}}}) 13:08:28 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x3) 13:08:28 executing program 1: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2], 0x4}}}) 13:08:28 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7], 0x4}}}) 13:08:28 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00', 0xffffffffffffffff) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0xfffff8d6, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0xa, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x0, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}]}}}) 13:08:28 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x8000, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000440)=0x5) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000000010000fddbdf257f00000008000300", @ANYRES32=0x0, @ANYBLOB="0a00f5005050505050500000140055002124f7bb4ab61c6d8f79cd10a6c8633114005500acf14311c4467d90607965a8196091fc0a00f500f02629497e810000140055006a0aad01fae87954a813b24d99bcdce50a0034000202020202020000"], 0x7c}, 0x1, 0x0, 0x0, 0x40000d0}, 0x84) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000400)='gtp\x00', 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, 0x1402, 0x800, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) 13:08:28 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66], 0x4}}}) 13:08:28 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1], 0x4}}}) 13:08:28 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x3}) 13:08:28 executing program 1: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2], 0x4}}}) 13:08:28 executing program 1: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2], 0x4}}}) 13:08:28 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1], 0x4}}}) 13:08:28 executing program 0: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x4, 0x76, 0x47314356, 0x7, 0x2, [{0x0, 0x800}, {0x8, 0x5cb0}, {0x17e, 0x1}, {0x30000, 0xc0}, {0xdf, 0x1}, {0x8, 0x4}, {0xab, 0x4af000}, {0x5bd, 0x9}], 0x9, 0x60, 0x2, 0x0, 0x5}}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00', r2) 13:08:28 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2], 0x4}}}) 13:08:28 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2], 0x4}}}) 13:08:28 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7], 0x4}}}) 13:08:28 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101], 0x4}}}) 13:08:28 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2], 0x4}}}) 13:08:28 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2], 0x4}}}) 13:08:28 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x1ff, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x6}, {0x8, 0x4}, {0x9, 0x6}, {0x3ff, 0x8}, {0xb4, 0x21}], 0x0, 0x0, 0x4, 0x0, 0x2}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x1, 0x6, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xacd, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x80) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=""/182, 0xb6, 0x42, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x800, @dev={0xfe, 0x80, [], 0x41}, 0x20}}, 0x24) 13:08:29 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100], 0x4}}}) 13:08:29 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000180)={0x1, 0x2, 0x1, "84e4a27712a957bd7aef885c77a6caa714b13621615cef8baa1ef65ed84a1123", 0x494e4f4b}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0xbd, 0x7fff, 0x41414270, 0x3, 0x4, [{0x8db, 0x5}, {0x3ff, 0x3}, {0xffffffff, 0x800}, {0x5, 0xfffffffd}, {0x7b5, 0x3}, {0x3d3e, 0x9}, {0xfffff800}, {0xa7, 0x80000000}], 0x0, 0x4c, 0x1, 0x2}}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x8000, 0x2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000240)=0x2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f00000001c0)={0x4, 0x8, [0xf829, 0x8]}) 13:08:29 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100], 0x4}}}) 13:08:29 executing program 2: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x1, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x3, 0x0, 0x5, 0x2}}}) 13:08:29 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7], 0x4}}}) 13:08:29 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8], 0x4}}}) 13:08:29 executing program 0: r0 = socket$inet(0x2, 0x6, 0x3) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000300)={{0x3b, @private=0xa010101, 0x4e23, 0x1, 'sed\x00', 0x1, 0x7, 0x14}, {@private=0xa010100, 0x4e21, 0x3, 0x1, 0x6422, 0x40}}, 0x44) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0x3) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$snddsp_control(&(0x7f0000ffa000/0x4000)=nil, 0x1000, 0x2, 0x1010, r3, 0x83000000) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f00000002c0)='{\\\x00', 0x3) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000380)={0x6de1, [0x7, 0x7, 0x80], [{0x3, 0x5, 0x1}, {0x9, 0x5e557e43, 0x1}, {0xf2e, 0x3f, 0x1, 0x1, 0x0, 0x1}, {0x8, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x2, 0x6, 0x0, 0x1, 0x1, 0x1}, {0x7fff, 0x9, 0x0, 0x1, 0x1, 0x1}, {0xfffffffc, 0x81, 0x1, 0x1, 0x0, 0x1}, {0x9, 0x693}, {0x6ed, 0x10000, 0x0, 0x1, 0x1}, {0x400, 0x9}, {0x97, 0x8, 0x1, 0x1, 0x1, 0x1}], 0x151}) 13:08:29 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9], 0x4}}}) 13:08:29 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8], 0x4}}}) 13:08:29 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7], 0x4}}}) 13:08:29 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2], 0x4}}}) 13:08:29 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66], 0x4}}}) 13:08:29 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2], 0x4}}}) 13:08:29 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66], 0x4}}}) 13:08:29 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8], 0x4}}}) 13:08:29 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7]}}}) 13:08:29 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9], 0x4}}}) 13:08:29 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x0, 0x101], 0x4}}}) 13:08:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r2, 0x9f6f37c8753f0475}, 0x14}}, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x4161, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r2, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x840) r4 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000080)={0x3, @pix={0x0, 0x0, 0x50323234}}) 13:08:29 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9], 0x4}}}) 13:08:29 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7]}}}) 13:08:29 executing program 1: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2], 0x4}}}) 13:08:29 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101], 0x4}}}) 13:08:29 executing program 2: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9], 0x4}}}) 13:08:29 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101], 0x4}}}) 13:08:29 executing program 1: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2], 0x4}}}) 13:08:29 executing program 2: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9], 0x4}}}) 13:08:29 executing program 0: ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(0xffffffffffffffff, 0x80184153, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000001bc0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000001c00)={0x0, @empty, 0x0, 0x3, 'dh\x00', 0x0, 0x0, 0x47}, 0x2c) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x601, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x6e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000180)={0x0, 0x0, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) 13:08:29 executing program 2: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9], 0x4}}}) 13:08:29 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0x0, 0x0, 0x101], 0x4}}}) [ 2079.820473] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 13:08:29 executing program 2: r0 = syz_open_dev$vim2m(0x0, 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9], 0x4}}}) 13:08:29 executing program 2: r0 = syz_open_dev$vim2m(0x0, 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9], 0x4}}}) 13:08:29 executing program 2: r0 = syz_open_dev$vim2m(0x0, 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9], 0x4}}}) 13:08:29 executing program 1: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2], 0x4}}}) 13:08:29 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9], 0x4}}}) 13:08:29 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0x0, 0x0, 0x101], 0x4}}}) [ 2079.948732] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 13:08:29 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8], 0x4}}}) 13:08:29 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 13:08:29 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x1000000, 0x50323234, 0x0, 0x0, 0xbf}}) 13:08:29 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0x0, 0x0, 0x101], 0x4}}}) 13:08:30 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9], 0x4}}}) 13:08:30 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 13:08:30 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0x0, 0xe7, 0x0, 0x101], 0x4}}}) 13:08:30 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000)='mptcp_pm\x00', 0xffffffffffffffff) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) 13:08:30 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 13:08:30 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7], 0x4}}}) 13:08:30 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9], 0x4}}}) 13:08:30 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7], 0x4}}}) 13:08:30 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2], 0x4}}}) 13:08:30 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7], 0x4}}}) 13:08:30 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x0, 0x0, 0xe7, 0x0, 0x101], 0x4}}}) 13:08:30 executing program 2: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9], 0x4}}}) 13:08:30 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x0, 0x0, 0xe7, 0x0, 0x101], 0x4}}}) 13:08:30 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2], 0x4}}}) 13:08:30 executing program 0: ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000440)={0xfffffffd, [0x101, 0x2, 0x1f], [{0x4, 0x8, 0x1, 0x0, 0x0, 0x1}, {0x101, 0xd3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xcd87, 0x0, 0x0, 0x0, 0x1}, {0x8001, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x9, 0x80, 0x0, 0x1, 0x1, 0x1}, {0xffffffc1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x7f, 0x2, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}, {0x5, 0xdd9, 0x0, 0x1, 0x1}, {0xfffffe01, 0xf5, 0x1, 0x1, 0x1}, {0x0, 0x6, 0x1, 0x1, 0x1}, {0x8001, 0x7ff, 0x1, 0x0, 0x0, 0x1}], 0x2}) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000001c0)={0x6, 0x1, 0x4, 0x1000, 0x0, {r2, r3/1000+60000}, {0x5, 0x2, 0x2, 0x2, 0x7f, 0x1, "b3ab19bc"}, 0xf21, 0x0, @fd=0xffffffffffffffff, 0x7}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)={0x6, 0x0, 0x4, 0x4, 0x7, {}, {0x3, 0x0, 0x7, 0x7f, 0x5c, 0x40, "99e3ca91"}, 0x4d3, 0x1, @fd=r4, 0x100}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) r5 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x30}, @void, @val={0xc, 0x99, {0x6cff, 0x66}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xa5, 0x49}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x28}, @NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x62}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88c5) openat$vfio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vfio/vfio\x00', 0x2040, 0x0) 13:08:30 executing program 2: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9], 0x4}}}) 13:08:30 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff], 0x4}}}) 13:08:30 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2], 0x4}}}) 13:08:30 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000240)={0x4, 0x3, 0x2, 0x0, &(0x7f0000000180)=[{}, {}, {}]}) 13:08:30 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x0, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2], 0x4}}}) 13:08:30 executing program 2: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9], 0x4}}}) 13:08:30 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x0, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2], 0x4}}}) 13:08:30 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101], 0x4}}}) 13:08:30 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff], 0x4}}}) 13:08:30 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 13:08:30 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x0, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2], 0x4}}}) 13:08:30 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234, 0x0, 0x1}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0xd575, 0x41416770, 0x0, @discrete={0x20, 0x3ff}}) 13:08:30 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff], 0x4}}}) 13:08:30 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101], 0x4}}}) 13:08:30 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 13:08:30 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x0, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2], 0x4}}}) 13:08:30 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0x0, 0xe7], 0x4}}}) 13:08:30 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x0, @pix={0x7, 0x0, 0x47425247}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0xfffffff9, 0x2, 0x2, "bbd56ce700da7ea24b28c1607e684b2cd71fc349eea8d67908774103e4e1feca", 0x31364d4e}) 13:08:30 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x0, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2], 0x4}}}) 13:08:30 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101], 0x4}}}) 13:08:30 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r3) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)={0x5, 0x3, 0x4, 0x100, 0x9ba, {r1, r2/1000+60000}, {0x4, 0x2, 0x3, 0x7, 0xff, 0x3, "4bcc4ee0"}, 0x6, 0x4, @offset=0x3, 0x9, 0x0, r3}) 13:08:30 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101], 0x4}}}) 13:08:30 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x0, 0x0, 0xe7], 0x4}}}) 13:08:30 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x0, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2], 0x4}}}) 13:08:30 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 13:08:30 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) socket$l2tp6(0xa, 0x2, 0x73) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234, 0x0, 0x0, 0x10}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000000)={0x2, 0x2, 0x0, 0x2, 'syz0\x00', 0x4}) 13:08:31 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7], 0x4}}}) 13:08:31 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x0, 0x0, 0xe7], 0x4}}}) 13:08:31 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101], 0x4}}}) 13:08:31 executing program 0: ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80984120, &(0x7f0000000180)) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) 13:08:31 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9], 0x4}}}) 13:08:31 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9], 0x4}}}) 13:08:31 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x0, 0x0, 0xe7], 0x4}}}) 13:08:31 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101], 0x4}}}) 13:08:31 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7], 0x4}}}) 13:08:31 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9], 0x4}}}) 13:08:31 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x70, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x32}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x61}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x800) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r4, 0x10, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4010) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x84800) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000400)={0x1, @pix_mp={0x7, 0x8db0, 0x47504a4d, 0x5, 0x7, [{0x1, 0x3}, {0x800, 0x1}, {0x200, 0x8}, {0x1000, 0x400}, {0x7, 0x7}, {0x0, 0xffff}, {0x6, 0x20}, {0x9, 0x414f}], 0x9, 0xa8, 0x6, 0x0, 0x1}}) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000002c0)={0x2, @sdr={0x30314752, 0x541}}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) 13:08:31 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7], 0x4}}}) 13:08:31 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101], 0x4}}}) 13:08:31 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x0, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9], 0x4}}}) 13:08:31 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0x0, 0x0, 0x0, 0xe7], 0x4}}}) 13:08:31 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x0, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9], 0x4}}}) 13:08:31 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x0, 0x2], 0x4}}}) 13:08:31 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101], 0x4}}}) 13:08:31 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1}) 13:08:31 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe7], 0x4}}}) 13:08:31 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000280)={0x3e, 0x4, 0x4, {0x1, @win={{0x9, 0x200, 0xff, 0xd0bb}, 0x4, 0x4ed, &(0x7f00000001c0)={{0x2, 0x1f, 0x1, 0x9}, &(0x7f0000000180)={{0xfffff6f3, 0x6, 0x9, 0x8}, &(0x7f0000000000)={{0x6876, 0x5, 0x3, 0x40}}}}, 0x2, &(0x7f0000000200)="9cbb9f51000ad340a1fd754fef269f64da92c23fe7e199324b19efceede331ea7cff258e8714df8351c4288f9392fcdecc1d4eb38cdb2c63d5ec1f06f9d7b5bcbe8463480417a934ba29c1c9e10ef456dd724a799590fd8c1520a98b3daeb158c9a99a18d97d31", 0x28}}, 0x4}) 13:08:31 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x0, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9], 0x4}}}) 13:08:31 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x0, 0x2], 0x4}}}) 13:08:31 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101], 0x4}}}) 13:08:31 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x0, 0x2], 0x4}}}) 13:08:31 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101], 0x4}}}) 13:08:31 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x0, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9], 0x4}}}) 13:08:31 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7], 0x4}}}) 13:08:31 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0xfffffffffffff876, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) 13:08:31 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x7, 0x9, 0x2, {0x2, @vbi={0xffff, 0xfffffffb, 0x4, 0x35315258, [0x8, 0x4], [0x6, 0x7], 0x1}}, 0x20}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e29cd3a4f60a2a43af8a8eb3714df5fc8c620b0c02d85ed18a174ec4a68c06cfd5b69126856e674846e72b485e657adf42403ba676ebbb970e079acee8178f93c79771024a1d7b93ca41e3cbeae0a3cba61668b17c3b2d4767149bece13a73e1b5425029de056f312632afec1acfa2cb9c511a05544284220ccf4e4cdb7311c5245083f4bd68aa42975262afc181180534985082379f0e333d7827c5bb2acc8b9d3cecf1feebb0fc6475189730a31c8a6348a1ee71ee00"/196, @ANYRES16=0x0, @ANYBLOB="00082bbd7000fbdbdf25080000000800180064010102"], 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x814) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x25}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008010}, 0x0) 13:08:31 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7], 0x4}}}) 13:08:31 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101], 0x4}}}) 13:08:31 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x0, 0x0, 0x2], 0x4}}}) 13:08:31 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)={0x1, 0x2, 0x4, 0x0, 0x40, {}, {0x4, 0x0, 0x1a, 0xfe, 0x40, 0x81, "428f0898"}, 0x6, 0x2, @fd, 0x401}) 13:08:31 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x0, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9], 0x4}}}) 13:08:31 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7], 0x4}}}) 13:08:31 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x0, 0x0, 0x2], 0x4}}}) 13:08:31 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x0, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9], 0x4}}}) 13:08:31 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe7], 0x4}}}) 13:08:32 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) 13:08:32 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)={0x1, 0x14, [0x800, 0x81, 0xfff, 0x1f, 0x2]}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x400, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f00000001c0)={0x5, 0x18, [0x97f, 0x8, 0x200, 0x9, 0x6e9e0b9, 0x4]}) 13:08:32 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1], 0x4}}}) 13:08:32 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x6) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) 13:08:32 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe7], 0x4}}}) 13:08:32 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:32 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) 13:08:32 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe7], 0x4}}}) 13:08:32 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1], 0x4}}}) 13:08:32 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe7], 0x4}}}) 13:08:32 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:32 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0xeaba, 0x3, 0x4, 0x2, 0x5, {0x77359400}, {0x1, 0xc, 0x7, 0x1f, 0xff, 0x1, "2f3fe808"}, 0x10001, 0x4, @offset=0x80, 0x7, 0x0, r1}) 13:08:32 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) 13:08:32 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100], 0x4}}}) 13:08:32 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe7], 0x4}}}) 13:08:32 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100], 0x4}}}) 13:08:32 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6}, @GTPA_NET_NS_FD={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x40) 13:08:32 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:32 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100], 0x4}}}) 13:08:32 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:32 executing program 0: socketpair(0x15, 0x0, 0x80000001, &(0x7f00000074c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000009040)={&(0x7f0000008f80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000009000)={&(0x7f0000008fc0)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048090}, 0x20084800) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) pipe2(&(0x7f0000007280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r5, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000007380)={&(0x7f00000072c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000007340)={&(0x7f0000007300)={0x1c, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x8008004) recvmmsg(r2, &(0x7f0000008b40)=[{{&(0x7f0000000200)=@alg, 0x80, &(0x7f0000000280)=[{&(0x7f0000000000)=""/56, 0x38}], 0x1, &(0x7f00000002c0)=""/4096, 0x1000}, 0x6}, {{&(0x7f00000012c0)=@nfc, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/178, 0xb2}], 0x1, &(0x7f0000001440)=""/78, 0x4e}, 0x7}, {{&(0x7f00000014c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001800)=[{&(0x7f0000001540)=""/182, 0xb6}, {&(0x7f0000001600)=""/38, 0x26}, {&(0x7f0000001640)=""/138, 0x8a}, {&(0x7f0000001700)=""/237, 0xed}], 0x4, &(0x7f0000001840)=""/55, 0x37}}, {{&(0x7f0000001880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000001900)=""/164, 0xa4}, {&(0x7f00000019c0)=""/54, 0x36}, {&(0x7f0000001a00)=""/130, 0x82}, {&(0x7f0000001ac0)=""/37, 0x25}, {&(0x7f0000001b00)=""/15, 0xf}, {&(0x7f0000001b40)=""/232, 0xe8}, {&(0x7f0000001c40)=""/76, 0x4c}, {&(0x7f0000001cc0)=""/129, 0x81}, {&(0x7f0000001d80)=""/192, 0xc0}, {&(0x7f0000001e40)=""/4096, 0x1000}], 0xa, &(0x7f0000002f00)=""/74, 0x4a}, 0x3f}, {{&(0x7f0000002f80)=@tipc=@name, 0x80, &(0x7f0000003580)=[{&(0x7f0000003000)=""/224, 0xe0}, {&(0x7f0000003100)=""/13, 0xd}, {&(0x7f0000003140)=""/27, 0x1b}, {&(0x7f0000003180)=""/140, 0x8c}, {&(0x7f0000003240)=""/10, 0xa}, {&(0x7f0000003280)=""/184, 0xb8}, {&(0x7f0000003340)=""/95, 0x5f}, {&(0x7f00000033c0)=""/173, 0xad}, {&(0x7f0000003480)=""/53, 0x35}, {&(0x7f00000034c0)=""/171, 0xab}], 0xa, &(0x7f0000003640)=""/196, 0xc4}, 0xdb}, {{&(0x7f0000003740)=@isdn, 0x80, &(0x7f0000004bc0)=[{&(0x7f00000037c0)=""/33, 0x21}, {&(0x7f0000003800)=""/209, 0xd1}, {&(0x7f0000003900)=""/213, 0xd5}, {&(0x7f0000003a00)=""/4096, 0x1000}, {&(0x7f0000004a00)=""/161, 0xa1}, {&(0x7f0000004ac0)=""/148, 0x94}, {&(0x7f0000004b80)=""/56, 0x38}], 0x7, &(0x7f0000004c40)=""/8, 0x8}, 0x22}, {{&(0x7f0000004c80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000006fc0)=[{&(0x7f0000004d00)=""/248, 0xf8}, {&(0x7f0000004e00)=""/162, 0xa2}, {&(0x7f0000004ec0)=""/255, 0xff}, {&(0x7f0000004fc0)=""/4096, 0x1000}, {&(0x7f0000005fc0)=""/4096, 0x1000}], 0x5, &(0x7f0000007040)=""/20, 0x14}, 0x4}, {{&(0x7f0000007080)=@qipcrtr, 0x80, &(0x7f00000071c0)=[{&(0x7f0000007100)=""/162, 0xa2}], 0x1, &(0x7f0000007200)=""/111, 0x6f}, 0x6}, {{&(0x7f00000073c0)=@qipcrtr, 0x80, &(0x7f0000008f40)=[{&(0x7f0000007440)=""/124, 0x7c}], 0x1, &(0x7f0000007500)=""/240, 0xf0}, 0x3f}, {{&(0x7f0000007600)=@xdp, 0x80, &(0x7f0000008ac0)=[{&(0x7f0000007680)=""/85, 0x55}, {&(0x7f0000007700)=""/199, 0xc7}, {&(0x7f0000007800)=""/212, 0xd4}, {&(0x7f0000007900)=""/4096, 0x1000}, {&(0x7f0000008900)=""/137, 0x89}, {&(0x7f00000089c0)=""/48, 0x30}, {&(0x7f0000008a00)=""/129, 0x81}], 0x7}, 0x9}], 0xa, 0xc0002160, &(0x7f0000008dc0)) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000008e40)='fou\x00', r2) sendmsg$FOU_CMD_GET(r6, &(0x7f0000008f00)={&(0x7f0000008e00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000008ec0)={&(0x7f0000008e80)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00002dbd7000fedbdf250300000014000700fe80000000000000000000000000000e"], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x200040c0) 13:08:32 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0x0, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe7], 0x4}}}) 13:08:32 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:32 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66], 0x4}}}) 13:08:32 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x65, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x1}}) 13:08:32 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:32 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x3}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x3}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x401}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x2e8fb573}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x1}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x80000001}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x8}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3f}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x75466467}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4044004}, 0x4001) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) 13:08:32 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe7], 0x4}}}) 13:08:32 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:32 executing program 0: syz_open_pts(0xffffffffffffffff, 0x80000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)={0x10c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xe763}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010100}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000000}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1c}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x49}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40408c1}, 0x11) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000050}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf25010000000800070000b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e08000100376592aa783c333f1c8299692ad906faff30e285666904f929c15d18a185766c11ab8484301aafba7747582fd9f39a2db36b4b61285652093af95b1a09be9f6832970563b2d8ebe63505d0df197cf3834d69dab070716fc008d38b7c10c919eae0a768421c087953b135df132e2e755a6050bdb66e8bbf195b4b8f00"/194, @ANYRES32=0x0, @ANYBLOB="24000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784324000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542"], 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) syz_open_dev$vim2m(&(0x7f0000000180)='/dev/video#\x00', 0x4, 0x2) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, &(0x7f0000000000)=0x7) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234, 0x0, 0x100, 0x0, 0x0, 0x1000000}}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00', r3) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) 13:08:32 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101], 0x4}}}) 13:08:32 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:32 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101], 0x4}}}) 13:08:32 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe7]}}}) 13:08:32 executing program 0: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x402, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x0, @pix={0x7ffffffc, 0x0, 0x50323234, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x8}}) 13:08:32 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:33 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe7]}}}) 13:08:33 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8], 0x4}}}) 13:08:33 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe7]}}}) 13:08:33 executing program 0: setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000280)='/dev/video#\x00', 0xc) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0xfffffffffffffff9, 0x2) connect$rxrpc(0xffffffffffffffff, &(0x7f00000002c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x0, @sdr={0x4f424752, 0x81}}) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000300)="5af4d5bfc8a4d93e508d44993354290b101662215b07eb125d7216ab55d5abcf94097bdaedc0dac00b48ce1a8bf12958339af3e6a2dab92f79332558641c4c042133243e4cb0a0", 0x47, 0x40008c4, &(0x7f0000000380)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @broadcast}}, 0x24) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234, 0x9, 0x0, 0x0, 0x1, 0x7fffffff}}) socket$rxrpc(0x21, 0x2, 0xce69b5150c767262) 13:08:33 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8], 0x4}}}) 13:08:33 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x0, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:33 executing program 0: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x88000) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x2, @sdr={0x3131354f, 0x4747}}) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000300)={0x2, 0x5, 0x2, 0x5, &(0x7f00000001c0)=[{}, {}, {}, {}, {}]}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000900)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x80000000, 0x49433553, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedreceive(r3, &(0x7f0000000840)=""/175, 0xaf, 0x3, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000640)={0x3, @pix_mp={0x344, 0xfffff438, 0xb5315241, 0x6, 0x5, [{0x300000}, {0x1, 0x7}, {0x4, 0x5}, {0x1d6a, 0x80000000}, {0x5, 0x6}, {0x9, 0x7}, {0x13f7, 0x2}, {0x9, 0x10000}], 0x12, 0x6, 0x3, 0x2, 0x6}}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x1, 0x3, 0x1}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r4) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000480)={0x1, @pix_mp={0xb33, 0x7, 0x47524247, 0x7, 0x6, [{0x7, 0x1}, {0x7ff, 0x64a9}, {0x21c, 0x26eb}, {0x8, 0x7}, {0x3, 0x1}, {0x1, 0x4}, {0xfffffffe, 0x9}, {0x8000, 0x732}], 0x1, 0x7, 0x4, 0x1, 0x2}}) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1000) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r5, 0x40405514, &(0x7f00000005c0)={0x3, 0x3, 0x1ff, 0x80000001, '\x00', 0x2}) pipe2(&(0x7f00000007c0)={0xffffffffffffffff}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000800)={0x1, 0x7, 0xb250343fba4b5f63}) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r7) ioctl$vim2m_VIDIOC_QUERYCAP(r7, 0x80685600, &(0x7f0000000740)) 13:08:33 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x0, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:33 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8], 0x4}}}) 13:08:33 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x4, 0x1, 0x2, "386bc8573ae0302079bdd89bf807031d640252ae76acff76aaa6ebb81cac160f", 0x4f565559}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x3, @pix={0x8, 0x0, 0x31324d59, 0x2, 0x4, 0x1, 0x1, 0xfffffffb, 0x0, 0x2, 0x1, 0x1}}) 13:08:33 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x0, 0x101], 0x4}}}) 13:08:33 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x0, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:33 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000180)={0x9, 0x1ff}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)=0x81) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400080, 0x0) 13:08:33 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0x0, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:33 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0x0, 0x0, 0x101], 0x4}}}) 13:08:33 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0x0, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:33 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0x0, 0x0, 0x101], 0x4}}}) 13:08:33 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001640)={&(0x7f00000001c0)={0x1450, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x100c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xbc1}]}, @TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @private0}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x6, @remote}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x10000, @local, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xfda, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x40}}}}]}, @TIPC_NLA_NODE={0x264, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1f, 0x3, "201091bba1f4b56ff7acc3fbd470037fcbf1a245ec9b8402ed2f51"}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "dee16f8848a9637347e1a93acc69d7a2c5cc9b53129f3ecf4894e89b133ddc5a"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "3a1b79a6e3c618afeff20245c7f64630d2a1d8e815162e32572279bf6553af6beb"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffe000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xda, 0x3, "f28d78942bbf0e0de5c1ace27c051cc6e12c057cb38fe8ad4b7b38ca18139100220c4b51722a0c5144b425e671d8c0d94485da15f435f8b7e15d282ae3919435887c174d66f9158567abbda8cc110b879b4574c2135a2f459372dfebab6700b2e5d0ca6099d9971b60219d4019c2aa9980fb4a7d42ee13ddb33d49d19e64eda755803dec38d9cb9faee1cdbebff1f880c025b2df77511b95b585f1ab752ea97ac013d3b9762b49eef8c505147e1b0e078ff7fdebd828bd7f7e94bd626e86d367f605723534196fcc5f9bf2d43d43d12f764240ed0eb6"}, @TIPC_NLA_NODE_ID={0xbd, 0x3, "4f082d817c2c3540a74ef0f247a875c5250bd157ab7dedc6b96c268aee424d22ed784d19fbb6e301f7a7522213f36f8a3a3d3432e5fce8eff5f128137b6c08971e228d17b218c0cfdfd9a7aa4c3ceea23075754d3a683f923af23a4fcceb930bfce34624b4bc2b0aee0f81630d1d5f111607ee6084129b5c237717a348c8405f23f9d6d108e26873b52fcbbcfd70f318b52585cc5ac66372db45b8926deab91ba177a565e6b12c36310f821f187ef93c6df24e17dd00cf8aeb"}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x1450}, 0x1, 0x0, 0x0, 0x40000001}, 0x8010) 13:08:33 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0x0, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:33 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0x0, 0x0, 0x101], 0x4}}}) 13:08:33 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x484000, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x200, 0x7, 0x4, {0x1, @sliced={0x7, [0xfff8, 0x800, 0x9, 0x40, 0xff7f, 0x8000, 0xfff9, 0xfffc, 0x2, 0x40, 0x5, 0x0, 0x101, 0x9, 0x7, 0x1, 0x3f, 0x0, 0x1, 0x6, 0x6, 0x2, 0x200, 0x88b5, 0x1, 0x0, 0x4, 0x5, 0xff, 0x127, 0xfffa, 0x3f, 0x5, 0x8d31, 0x9, 0x8, 0xffff, 0x101, 0x44e7, 0x51, 0x7000, 0x43c, 0xbe06, 0xb4aa, 0x4, 0x0, 0x1ff], 0x1}}, 0x4}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) 13:08:33 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:33 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0x0, 0xe7, 0x0, 0x101], 0x4}}}) 13:08:33 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0x0, 0xe7, 0x0, 0x101], 0x4}}}) 13:08:33 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:33 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:33 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x4, 0x4f424752, 0x0, 0x0, 0xffff301e, 0xb, 0x0, 0x0, 0x4, 0x0, 0x7}}) r1 = syz_open_dev$vim2m(&(0x7f00000002c0)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000300)) r2 = syz_open_dev$vim2m(&(0x7f0000000500)='/dev/video#\x00', 0x4, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000540)=0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r4) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000003c0)={0x81, 0x1, 0x4, 0x10, 0x7, {r5, r6/1000+10000}, {0x4, 0x0, 0x86, 0xcb, 0xf8, 0x3f, "a9403606"}, 0xcf7, 0x2, @fd, 0x7ff, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000440)={0x2000, 0x2, 0x4, 0x1, 0x0, {}, {0x5, 0x0, 0xb9, 0xe8, 0x81, 0x1, "588b0511"}, 0x5, 0x3, @fd=r4, 0x400, 0x0, r7}) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r8) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f00000004c0)={0x132, 0x3}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x3, 0x1ff, 0x36314d4e, 0x0, 0xffffffff, 0x20000, 0x8, 0x0, 0x0, 0x4, 0x1, 0x6}}) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000280)=0x3) 13:08:33 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x0, 0x0, 0xe7, 0x0, 0x101], 0x4}}}) 13:08:33 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @pix={0x1, 0x9, 0x34325258, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x6}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x4d, 0x8c, 0x2, {0x2, @raw_data="ab7f96da44f8d65086942f20cb686eb691b4aeafd99ef868c52e8837d7bbe04668bb76250f0783082a9397fa56c4dc1004c9af9baa1ce23abb3b5e435a3bdf4712b9a5667780e4256065b0ce155e12bff8fc57b026e4f435611424f70338ffccf91efbed9848c282614bed049f9885075eb9fae85cbd472cbbd1c86a19b546cfdf5d44e42369b3764e0c791fd206dae335fbb67f776557d02a7be2c6d7b7c16a72d8907b31c330b8f5e02a26c7f2cc0966d4dedc9400710b2929710c433ca9ec6950b6eba18ee71a"}, 0xfffffffd}) 13:08:33 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x0, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:33 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x0, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:33 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101], 0x4}}}) 13:08:33 executing program 0: sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x31c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) r1 = syz_open_dev$vim2m(&(0x7f0000000180)='/dev/video#\x00', 0x10001, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000001c0)={0x1, @sdr={0x35315241, 0x5}}) syz_genetlink_get_family_id$l2tp(&(0x7f00000006c0)='l2tp\x00', 0xffffffffffffffff) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000700)={0x5, 0x2, 0x4, {0x3, @sdr={0x3247504d, 0x2007303}}, 0x8}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x1f, 0x2, 0x1}) 13:08:33 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101], 0x4}}}) 13:08:33 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) clock_gettime(0x2, &(0x7f0000000000)) 13:08:33 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x0, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:33 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:33 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) pipe2(&(0x7f0000000000), 0x4800) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) 13:08:33 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101], 0x4}}}) 13:08:34 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101], 0x4}}}) 13:08:34 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:34 executing program 0: ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) 13:08:34 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) socket$inet(0x2, 0x6, 0xa3) 13:08:34 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101], 0x4}}}) 13:08:34 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101], 0x4}}}) 13:08:34 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:34 executing program 0: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f00000001c0)={0x1, 0x38414762, 0x1, @stepwise={0x9e, 0x0, 0x0, 0x2, 0xc3, 0x9}}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r3) ioctl$KIOCSOUND(r3, 0x4b2f, 0x3) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}}) ioctl$SNDRV_PCM_IOCTL_RESUME(r1, 0x4147, 0x0) 13:08:34 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101], 0x4}}}) 13:08:34 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101], 0x4}}}) 13:08:34 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:34 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x8, 0x4}) 13:08:34 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:34 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101], 0x4}}}) 13:08:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KIOCSOUND(r0, 0x4b2f, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) 13:08:34 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:34 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:34 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101], 0x4}}}) 13:08:34 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delvlan={0x78, 0x71, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x5e}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x8}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xf}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x46, 0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x10}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x8, 0x1}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040004}, 0x4) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x1407, 0x500, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000280)) 13:08:34 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101], 0x4}}}) 13:08:34 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0xeaba, 0x3, 0x4, 0x2, 0x5, {0x77359400}, {0x1, 0xc, 0x7, 0x1f, 0xff, 0x1, "2f3fe808"}, 0x10001, 0x4, @offset=0x80, 0x7, 0x0, r1}) 13:08:34 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:34 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:34 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0xeaba, 0x3, 0x4, 0x2, 0x5, {0x77359400}, {0x1, 0xc, 0x7, 0x1f, 0xff, 0x1, "2f3fe808"}, 0x10001, 0x4, @offset=0x80, 0x7, 0x0, r1}) 13:08:34 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101], 0x4}}}) 13:08:34 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0xeaba, 0x3, 0x4, 0x2, 0x5, {0x77359400}, {0x1, 0xc, 0x7, 0x1f, 0xff, 0x1, "2f3fe808"}, 0x10001, 0x4, @offset=0x80, 0x7, 0x0, r1}) 13:08:34 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101], 0x4}}}) 13:08:34 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0xeaba, 0x3, 0x4, 0x2, 0x5, {0x77359400}, {0x1, 0xc, 0x7, 0x1f, 0xff, 0x1, "2f3fe808"}, 0x10001, 0x4, @offset=0x80, 0x7, 0x0, r1}) 13:08:34 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:34 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:34 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0xeaba, 0x3, 0x4, 0x2, 0x5, {0x77359400}, {0x1, 0xc, 0x7, 0x1f, 0xff, 0x1, "2f3fe808"}, 0x10001, 0x4, @offset=0x80, 0x7}) 13:08:34 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) 13:08:35 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 13:08:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0xeaba, 0x3, 0x4, 0x2, 0x5, {0x77359400}, {0x1, 0xc, 0x7, 0x1f, 0xff, 0x1, "2f3fe808"}, 0x10001, 0x4, @offset=0x80, 0x7}) 13:08:35 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 13:08:35 executing program 0: ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0xeaba, 0x3, 0x4, 0x2, 0x5, {0x77359400}, {0x1, 0xc, 0x7, 0x1f, 0xff, 0x1, "2f3fe808"}, 0x10001, 0x4, @offset=0x80, 0x7}) 13:08:35 executing program 0: ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0xeaba, 0x3, 0x4, 0x2, 0x5, {0x77359400}, {0x1, 0xc, 0x7, 0x1f, 0xff, 0x1, "2f3fe808"}, 0x10001, 0x4, @offset=0x80, 0x7}) 13:08:35 executing program 0: ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0xeaba, 0x3, 0x4, 0x2, 0x5, {0x77359400}, {0x1, 0xc, 0x7, 0x1f, 0xff, 0x1, "2f3fe808"}, 0x10001, 0x4, @offset=0x80, 0x7}) 13:08:35 executing program 0: r0 = syz_open_dev$vim2m(0x0, 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0xeaba, 0x3, 0x4, 0x2, 0x5, {0x77359400}, {0x1, 0xc, 0x7, 0x1f, 0xff, 0x1, "2f3fe808"}, 0x10001, 0x4, @offset=0x80, 0x7}) 13:08:35 executing program 0: r0 = syz_open_dev$vim2m(0x0, 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0xeaba, 0x3, 0x4, 0x2, 0x5, {0x77359400}, {0x1, 0xc, 0x7, 0x1f, 0xff, 0x1, "2f3fe808"}, 0x10001, 0x4, @offset=0x80, 0x7}) 13:08:35 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 13:08:35 executing program 0: r0 = syz_open_dev$vim2m(0x0, 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0xeaba, 0x3, 0x4, 0x2, 0x5, {0x77359400}, {0x1, 0xc, 0x7, 0x1f, 0xff, 0x1, "2f3fe808"}, 0x10001, 0x4, @offset=0x80, 0x7}) 13:08:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0xeaba, 0x3, 0x4, 0x2, 0x5, {0x77359400}, {0x1, 0xc, 0x7, 0x1f, 0xff, 0x1, "2f3fe808"}, 0x10001, 0x4, @offset=0x80, 0x7}) 13:08:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0xeaba, 0x3, 0x4, 0x2, 0x5, {0x77359400}, {0x1, 0xc, 0x7, 0x1f, 0xff, 0x1, "2f3fe808"}, 0x10001, 0x4, @offset=0x80, 0x7}) 13:08:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0xeaba, 0x3, 0x4, 0x2, 0x5, {0x77359400}, {0x1, 0xc, 0x7, 0x1f, 0xff, 0x1, "2f3fe808"}, 0x10001, 0x4, @offset=0x80, 0x7}) 13:08:35 executing program 0: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0xeaba, 0x3, 0x4, 0x2, 0x5, {0x77359400}, {0x1, 0xc, 0x7, 0x1f, 0xff, 0x1, "2f3fe808"}, 0x10001, 0x4, @offset=0x80, 0x7}) 13:08:35 executing program 0: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0xeaba, 0x3, 0x4, 0x2, 0x5, {0x77359400}, {0x1, 0xc, 0x7, 0x1f, 0xff, 0x1, "2f3fe808"}, 0x10001, 0x4, @offset=0x80, 0x7}) 13:08:35 executing program 0: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0xeaba, 0x3, 0x4, 0x2, 0x5, {0x77359400}, {0x1, 0xc, 0x7, 0x1f, 0xff, 0x1, "2f3fe808"}, 0x10001, 0x4, @offset=0x80, 0x7}) 13:08:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, 0x0) 13:08:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, 0x0) 13:08:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, 0x0) 13:08:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x2, 0x5, {0x77359400}, {0x1, 0xc, 0x7, 0x1f, 0xff, 0x1, "2f3fe808"}, 0x10001, 0x4, @offset=0x80, 0x7}) 13:08:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x2, 0x5, {0x77359400}, {0x1, 0xc, 0x7, 0x1f, 0xff, 0x1, "2f3fe808"}, 0x10001, 0x4, @offset=0x80, 0x7}) 13:08:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x2, 0x5, {0x77359400}, {0x1, 0xc, 0x7, 0x1f, 0xff, 0x1, "2f3fe808"}, 0x10001, 0x4, @offset=0x80, 0x7}) 13:08:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x2, 0x5, {0x77359400}, {0x1, 0xc, 0x7, 0x1f, 0xff, 0x1, "2f3fe808"}, 0x10001, 0x4, @offset=0x80, 0x7}) 13:08:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x5, {0x77359400}, {0x1, 0xc, 0x7, 0x1f, 0xff, 0x1, "2f3fe808"}, 0x10001, 0x4, @offset=0x80, 0x7}) 13:08:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x1, 0xc, 0x7, 0x1f, 0xff, 0x1, "2f3fe808"}, 0x10001, 0x4, @offset=0x80, 0x7}) 13:08:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0xc, 0x7, 0x1f, 0xff, 0x1, "2f3fe808"}, 0x10001, 0x4, @offset=0x80, 0x7}) 13:08:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x7, 0x1f, 0xff, 0x1, "2f3fe808"}, 0x10001, 0x4, @offset=0x80, 0x7}) 13:08:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x1f, 0xff, 0x1, "2f3fe808"}, 0x10001, 0x4, @offset=0x80, 0x7}) 13:08:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0xff, 0x1, "2f3fe808"}, 0x10001, 0x4, @offset=0x80, 0x7}) 13:08:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "2f3fe808"}, 0x10001, 0x4, @offset=0x80, 0x7}) 13:08:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x10001, 0x4, @offset=0x80, 0x7}) 13:08:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x4, @offset=0x80, 0x7}) 13:08:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x0, @offset=0x80, 0x7}) 13:08:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x0, @offset, 0x7}) 13:08:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:08:57 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:57 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x0, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9], 0x4}}}) 13:08:57 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8], 0x4}}}) 13:08:57 executing program 0: ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(0xffffffffffffffff, 0x80184153, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000001bc0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000001c00)={0x0, @empty, 0x0, 0x3, 'dh\x00', 0x0, 0x0, 0x47}, 0x2c) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x601, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x6e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000180)={0x0, 0x0, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) 13:08:57 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8], 0x4}}}) 13:08:57 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000440)={0x4, @win={{0x8f, 0xa10c, 0x3ff, 0x172ee8fd}, 0x4, 0x2, &(0x7f00000003c0)={{0x5, 0x0, 0x1, 0x7}}, 0x5, &(0x7f0000000400)="81b52d1128f8f706a8163555aa45413a0cd11993c5f362d9866f3fe2267d6da47affcf89fbb48a66a350a7d0d7915898234d83183ee9b400ce", 0x1}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0xfff, 0xffffffff, 0x1, {0x2, @pix={0x3c728466, 0x8001, 0x3031334d, 0x4, 0xffffffff, 0xcb6c, 0x8, 0x4, 0x0, 0x7, 0x1, 0x7}}, 0x8}) r1 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000380)={0x1f, 0x2, 0x3}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000540)={0xfffffffb, 0x10000, 0x3, {0x3, @pix_mp={0x5, 0x80, 0x3432564e, 0x5, 0xb, [{0x5, 0x7fffffff}, {0x4, 0x100}, {0x8}, {0x0, 0x3000}, {0x8, 0xffff}, {0x4, 0x7ff}, {0xde62, 0x3}, {0x1, 0x6}], 0x1f, 0x7, 0x0, 0x0, 0x6}}, 0x9}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x3, @sdr={0x3247504d, 0x24}}) syz_open_dev$vim2m(&(0x7f0000000640)='/dev/video#\x00', 0x1, 0x2) [ 2107.652931] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 13:08:57 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00', r1) 13:08:57 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:57 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000440)={0x4, @win={{0x8f, 0xa10c, 0x3ff, 0x172ee8fd}, 0x4, 0x2, &(0x7f00000003c0)={{0x5, 0x0, 0x1, 0x7}}, 0x5, &(0x7f0000000400)="81b52d1128f8f706a8163555aa45413a0cd11993c5f362d9866f3fe2267d6da47affcf89fbb48a66a350a7d0d7915898234d83183ee9b400ce", 0x1}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0xfff, 0xffffffff, 0x1, {0x2, @pix={0x3c728466, 0x8001, 0x3031334d, 0x4, 0xffffffff, 0xcb6c, 0x8, 0x4, 0x0, 0x7, 0x1, 0x7}}, 0x8}) r1 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000380)={0x1f, 0x2, 0x3}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000540)={0xfffffffb, 0x10000, 0x3, {0x3, @pix_mp={0x5, 0x80, 0x3432564e, 0x5, 0xb, [{0x5, 0x7fffffff}, {0x4, 0x100}, {0x8}, {0x0, 0x3000}, {0x8, 0xffff}, {0x4, 0x7ff}, {0xde62, 0x3}, {0x1, 0x6}], 0x1f, 0x7, 0x0, 0x0, 0x6}}, 0x9}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x3, @sdr={0x3247504d, 0x24}}) syz_open_dev$vim2m(&(0x7f0000000640)='/dev/video#\x00', 0x1, 0x2) 13:08:57 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', 0xffffffffffffffff) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xf4, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40081004}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x1) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) 13:08:57 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2], 0x4}}}) 13:08:57 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7], 0x4}}}) 13:08:57 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75], 0x4}}}) 13:08:57 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000440)={0x4, @win={{0x8f, 0xa10c, 0x3ff, 0x172ee8fd}, 0x4, 0x2, &(0x7f00000003c0)={{0x5, 0x0, 0x1, 0x7}}, 0x5, &(0x7f0000000400)="81b52d1128f8f706a8163555aa45413a0cd11993c5f362d9866f3fe2267d6da47affcf89fbb48a66a350a7d0d7915898234d83183ee9b400ce", 0x1}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0xfff, 0xffffffff, 0x1, {0x2, @pix={0x3c728466, 0x8001, 0x3031334d, 0x4, 0xffffffff, 0xcb6c, 0x8, 0x4, 0x0, 0x7, 0x1, 0x7}}, 0x8}) r1 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000380)={0x1f, 0x2, 0x3}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000540)={0xfffffffb, 0x10000, 0x3, {0x3, @pix_mp={0x5, 0x80, 0x3432564e, 0x5, 0xb, [{0x5, 0x7fffffff}, {0x4, 0x100}, {0x8}, {0x0, 0x3000}, {0x8, 0xffff}, {0x4, 0x7ff}, {0xde62, 0x3}, {0x1, 0x6}], 0x1f, 0x7, 0x0, 0x0, 0x6}}, 0x9}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x3, @sdr={0x3247504d, 0x24}}) syz_open_dev$vim2m(&(0x7f0000000640)='/dev/video#\x00', 0x1, 0x2) 13:08:57 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400], 0x4}}}) 13:08:57 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2], 0x4}}}) 13:08:57 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400], 0x4}}}) 13:08:57 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:58 executing program 4: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:58 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7], 0x4}}}) 13:08:58 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2], 0x4}}}) 13:08:58 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4], 0x4}}}) 13:08:58 executing program 4: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:58 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7], 0x4}}}) 13:08:58 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5], 0x4}}}) 13:08:58 executing program 4: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:58 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x3, 0x6c5, 0x2, {0x3, @raw_data="2e870dd2e702b1835825a823b5869e4cd4f41f7074d5bab07531fc0c59d3ae923bbb47ffa3427918272dff63a3e55b3315d9f3015e93da629c0fcaadaca1f89df3d934d9af8689dbc8140077f9c827b43ebc90a7f9c74cff37a4fbc8daf7568f2de5ba96d07571a922c5fee80fb3fb2b93ee6f0c68fe61e734b9e169e52e769e6322dd6e404b9d45a4fad78ad27fa92d0d0cc8a53a4eacbf033a71ceca2ecaaffe2e235820fa57eddaa2e7442045398530b9c05d51ce90b37c6aac64d090bb3b30558a681fe637cd"}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000180)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0xb3, 0x2, 0x2}) 13:08:58 executing program 4: r0 = syz_open_dev$vim2m(0x0, 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:58 executing program 4: r0 = syz_open_dev$vim2m(0x0, 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:58 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4], 0x4}}}) 13:08:58 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x3, 0x6c5, 0x2, {0x3, @raw_data="2e870dd2e702b1835825a823b5869e4cd4f41f7074d5bab07531fc0c59d3ae923bbb47ffa3427918272dff63a3e55b3315d9f3015e93da629c0fcaadaca1f89df3d934d9af8689dbc8140077f9c827b43ebc90a7f9c74cff37a4fbc8daf7568f2de5ba96d07571a922c5fee80fb3fb2b93ee6f0c68fe61e734b9e169e52e769e6322dd6e404b9d45a4fad78ad27fa92d0d0cc8a53a4eacbf033a71ceca2ecaaffe2e235820fa57eddaa2e7442045398530b9c05d51ce90b37c6aac64d090bb3b30558a681fe637cd"}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000180)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0xb3, 0x2, 0x2}) 13:08:58 executing program 4: r0 = syz_open_dev$vim2m(0x0, 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r1, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x67}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x42004}, 0xc0045) r2 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x5, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000180)={0x2f8b, 0x1, 0x4, 0x0, 0x1, {0x0, 0xea60}, {0x1, 0x8, 0x3, 0x5, 0x2, 0x33, "c08bd04a"}, 0x7ff, 0x3, @offset=0xe58, 0x3}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000240)={0x0, @vbi={0x8, 0x1, 0x3, 0x34565559, [0x3, 0x3], [0x2, 0x101], 0x1}}) 13:08:58 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800], 0x4}}}) 13:08:58 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:58 executing program 2: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000200)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4080) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x0, [{}, {}, {0x1}]}}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x210081, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000001c0)={0x8, 0x8000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x18, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001700)={'batadv_slave_0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000001880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001840)={&(0x7f0000001740)={0x100, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x31}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={[], [], @rand_addr=0x64010100}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x24040040}, 0x400c4) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, r7, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x625}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000100) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000280)={0x9, 0x7ff, 0x2, {0x1, @sliced={0x2, [0x0, 0x1, 0x8ef0, 0x7a81, 0xf800, 0xfff, 0x481d, 0xb9d9, 0x1, 0x40, 0x3f, 0x2, 0x1ff, 0xff, 0x3, 0x0, 0x1000, 0xf800, 0x4, 0x2, 0x7fff, 0xf1fe, 0x1, 0x7, 0x8001, 0x7ff, 0xffff, 0x132, 0x4, 0x6, 0x3, 0x2, 0xfff, 0x3, 0x1, 0x3d72, 0x9, 0x0, 0x81, 0xe3, 0x4, 0x9, 0x1, 0x3, 0x1f, 0x8, 0x8, 0x5], 0x2}}, 0x1ff}) 13:08:58 executing program 5: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000200)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4080) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x0, [{}, {}, {0x1}]}}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x210081, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000001c0)={0x8, 0x8000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x18, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001700)={'batadv_slave_0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000001880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001840)={&(0x7f0000001740)={0x100, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x31}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={[], [], @rand_addr=0x64010100}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x24040040}, 0x400c4) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, r7, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x625}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000100) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000280)={0x9, 0x7ff, 0x2, {0x1, @sliced={0x2, [0x0, 0x1, 0x8ef0, 0x7a81, 0xf800, 0xfff, 0x481d, 0xb9d9, 0x1, 0x40, 0x3f, 0x2, 0x1ff, 0xff, 0x3, 0x0, 0x1000, 0xf800, 0x4, 0x2, 0x7fff, 0xf1fe, 0x1, 0x7, 0x8001, 0x7ff, 0xffff, 0x132, 0x4, 0x6, 0x3, 0x2, 0xfff, 0x3, 0x1, 0x3d72, 0x9, 0x0, 0x81, 0xe3, 0x4, 0x9, 0x1, 0x3, 0x1f, 0x8, 0x8, 0x5], 0x2}}, 0x1ff}) 13:08:58 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5], 0x4}}}) 13:08:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r1, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x67}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x42004}, 0xc0045) r2 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x5, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000180)={0x2f8b, 0x1, 0x4, 0x0, 0x1, {0x0, 0xea60}, {0x1, 0x8, 0x3, 0x5, 0x2, 0x33, "c08bd04a"}, 0x7ff, 0x3, @offset=0xe58, 0x3}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x50323234}}) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000240)={0x0, @vbi={0x8, 0x1, 0x3, 0x34565559, [0x3, 0x3], [0x2, 0x101], 0x1}}) 13:08:58 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800], 0x4}}}) 13:08:58 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5], 0x4}}}) 13:08:58 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2], 0x4}}}) 13:08:58 executing program 5: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000200)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4080) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x0, [{}, {}, {0x1}]}}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x210081, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000001c0)={0x8, 0x8000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x18, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001700)={'batadv_slave_0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000001880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001840)={&(0x7f0000001740)={0x100, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x31}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={[], [], @rand_addr=0x64010100}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x24040040}, 0x400c4) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, r7, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x625}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000100) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000280)={0x9, 0x7ff, 0x2, {0x1, @sliced={0x2, [0x0, 0x1, 0x8ef0, 0x7a81, 0xf800, 0xfff, 0x481d, 0xb9d9, 0x1, 0x40, 0x3f, 0x2, 0x1ff, 0xff, 0x3, 0x0, 0x1000, 0xf800, 0x4, 0x2, 0x7fff, 0xf1fe, 0x1, 0x7, 0x8001, 0x7ff, 0xffff, 0x132, 0x4, 0x6, 0x3, 0x2, 0xfff, 0x3, 0x1, 0x3d72, 0x9, 0x0, 0x81, 0xe3, 0x4, 0x9, 0x1, 0x3, 0x1f, 0x8, 0x8, 0x5], 0x2}}, 0x1ff}) 13:08:58 executing program 5: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000200)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4080) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x0, [{}, {}, {0x1}]}}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x210081, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000001c0)={0x8, 0x8000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x18, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001700)={'batadv_slave_0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000001880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001840)={&(0x7f0000001740)={0x100, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x31}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={[], [], @rand_addr=0x64010100}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x24040040}, 0x400c4) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, r7, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x625}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000100) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000280)={0x9, 0x7ff, 0x2, {0x1, @sliced={0x2, [0x0, 0x1, 0x8ef0, 0x7a81, 0xf800, 0xfff, 0x481d, 0xb9d9, 0x1, 0x40, 0x3f, 0x2, 0x1ff, 0xff, 0x3, 0x0, 0x1000, 0xf800, 0x4, 0x2, 0x7fff, 0xf1fe, 0x1, 0x7, 0x8001, 0x7ff, 0xffff, 0x132, 0x4, 0x6, 0x3, 0x2, 0xfff, 0x3, 0x1, 0x3d72, 0x9, 0x0, 0x81, 0xe3, 0x4, 0x9, 0x1, 0x3, 0x1f, 0x8, 0x8, 0x5], 0x2}}, 0x1ff}) 13:08:58 executing program 4: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:58 executing program 4: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:58 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800], 0x4}}}) 13:08:58 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2], 0x4}}}) 13:08:58 executing program 5: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000200)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4080) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x0, [{}, {}, {0x1}]}}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x210081, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000001c0)={0x8, 0x8000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x18, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001700)={'batadv_slave_0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000001880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001840)={&(0x7f0000001740)={0x100, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x31}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={[], [], @rand_addr=0x64010100}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x24040040}, 0x400c4) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, r7, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x625}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000100) 13:08:58 executing program 2: ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80984120, &(0x7f0000000080)) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) 13:08:58 executing program 4: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:58 executing program 0: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x80, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x80}}, 0x10000) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x3095, 0x2}, {0x4}, {0x8, 0x4}, {0x2, 0x5}, {0x3ff, 0x7}, {0xb5, 0x1f}], 0x0, 0x0, 0x0, 0x0, 0x2}}}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000340)='wireguard\x00', 0xffffffffffffffff) 13:08:58 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5], 0x4}}}) 13:08:58 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 13:08:58 executing program 2 (fault-call:1 fault-nth:0): r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:58 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x9, 0x4, 0x7, 0x2, 0x3, 0x0, 0x5, 0x6, 0x75, 0x400, 0x2, 0x0, 0x7, 0x5, 0x4, 0x4, 0x599b, 0xffff, 0x5, 0x5, 0x792, 0x9, 0x0, 0x800, 0x4, 0x4, 0x2, 0x5, 0xfffa, 0x5], 0x4}}}) 13:08:58 executing program 5: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000200)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4080) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x0, [{}, {}, {0x1}]}}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x210081, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000001c0)={0x8, 0x8000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x18, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001700)={'batadv_slave_0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000001880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001840)={&(0x7f0000001740)={0x100, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x31}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={[], [], @rand_addr=0x64010100}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x24040040}, 0x400c4) 13:08:58 executing program 0: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000200)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4080) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x0, [{}, {}, {0x1}]}}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x210081, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000001c0)={0x8, 0x8000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x18, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001700)={'batadv_slave_0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000001880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001840)={&(0x7f0000001740)={0x100, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x31}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={[], [], @rand_addr=0x64010100}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x24040040}, 0x400c4) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, r7, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x625}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000100) 13:08:58 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 13:08:58 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 13:08:58 executing program 1 (fault-call:1 fault-nth:0): r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) 13:08:58 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:59 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:59 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) [ 2109.070380] FAULT_INJECTION: forcing a failure. [ 2109.070380] name failslab, interval 1, probability 0, space 0, times 0 [ 2109.083424] CPU: 1 PID: 906 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 2109.091155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2109.100523] Call Trace: [ 2109.103108] dump_stack+0x1b2/0x281 [ 2109.106744] should_fail.cold+0x10a/0x149 [ 2109.110899] should_failslab+0xd6/0x130 [ 2109.114879] kmem_cache_alloc_node_trace+0x25a/0x400 13:08:59 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x0, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:59 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x0, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) [ 2109.119989] __kmalloc_node+0x38/0x70 [ 2109.123802] kvmalloc_node+0x46/0xd0 [ 2109.127530] video_usercopy+0x31b/0xe90 [ 2109.131518] ? video_ioctl2+0x30/0x30 [ 2109.135411] ? v4l2_ioctl+0x127/0x2f0 [ 2109.139220] ? v4l_g_ctrl+0x390/0x390 [ 2109.143021] ? proc_fail_nth_write+0x7b/0x180 [ 2109.147526] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2109.152464] ? trace_hardirqs_on+0x10/0x10 [ 2109.156705] ? fsnotify+0x974/0x11b0 [ 2109.160419] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2109.165352] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2109.170477] v4l2_ioctl+0x1bb/0x2f0 [ 2109.174217] ? v4l2_open+0x2f0/0x2f0 [ 2109.177933] do_vfs_ioctl+0x75a/0xff0 [ 2109.181728] ? ioctl_preallocate+0x1a0/0x1a0 [ 2109.186130] ? lock_downgrade+0x740/0x740 [ 2109.190290] ? __fget+0x225/0x360 [ 2109.193727] ? do_vfs_ioctl+0xff0/0xff0 [ 2109.197684] ? security_file_ioctl+0x83/0xb0 [ 2109.202076] SyS_ioctl+0x7f/0xb0 [ 2109.205431] ? do_vfs_ioctl+0xff0/0xff0 [ 2109.209396] do_syscall_64+0x1d5/0x640 [ 2109.213317] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2109.218493] RIP: 0033:0x465ef9 [ 2109.221659] RSP: 002b:00007f33827f5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2109.229489] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 2109.236754] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 2109.244017] RBP: 00007f33827f51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2109.251359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2109.258615] R13: 00007ffc63a66d7f R14: 00007f33827f5300 R15: 0000000000022000 [ 2109.279196] FAULT_INJECTION: forcing a failure. [ 2109.279196] name failslab, interval 1, probability 0, space 0, times 0 [ 2109.294503] CPU: 1 PID: 920 Comm: syz-executor.1 Not tainted 4.14.222-syzkaller #0 [ 2109.302224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2109.311576] Call Trace: [ 2109.314175] dump_stack+0x1b2/0x281 [ 2109.317811] should_fail.cold+0x10a/0x149 [ 2109.321964] should_failslab+0xd6/0x130 [ 2109.325934] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2109.331037] __kmalloc_node+0x38/0x70 [ 2109.334829] kvmalloc_node+0x46/0xd0 [ 2109.338538] video_usercopy+0x31b/0xe90 [ 2109.342493] ? video_ioctl2+0x30/0x30 [ 2109.346270] ? v4l2_ioctl+0x127/0x2f0 [ 2109.350084] ? v4l_g_ctrl+0x390/0x390 [ 2109.353954] ? proc_fail_nth_write+0x7b/0x180 [ 2109.358442] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2109.363363] ? trace_hardirqs_on+0x10/0x10 [ 2109.367588] ? fsnotify+0x974/0x11b0 [ 2109.371298] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2109.376215] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2109.381236] v4l2_ioctl+0x1bb/0x2f0 [ 2109.384874] ? v4l2_open+0x2f0/0x2f0 [ 2109.388569] do_vfs_ioctl+0x75a/0xff0 [ 2109.392350] ? ioctl_preallocate+0x1a0/0x1a0 [ 2109.396739] ? lock_downgrade+0x740/0x740 [ 2109.400884] ? __fget+0x225/0x360 [ 2109.404319] ? do_vfs_ioctl+0xff0/0xff0 [ 2109.408287] ? security_file_ioctl+0x83/0xb0 [ 2109.412676] SyS_ioctl+0x7f/0xb0 [ 2109.416023] ? do_vfs_ioctl+0xff0/0xff0 [ 2109.419979] do_syscall_64+0x1d5/0x640 [ 2109.423852] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2109.429045] RIP: 0033:0x465ef9 [ 2109.432235] RSP: 002b:00007feb7458f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2109.439926] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 2109.447179] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 2109.454439] RBP: 00007feb7458f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2109.461719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2109.468997] R13: 00007ffeaa518faf R14: 00007feb7458f300 R15: 0000000000022000 13:08:59 executing program 2 (fault-call:1 fault-nth:1): r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) [ 2109.540604] FAULT_INJECTION: forcing a failure. [ 2109.540604] name failslab, interval 1, probability 0, space 0, times 0 [ 2109.552264] CPU: 0 PID: 932 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 2109.559984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2109.569340] Call Trace: [ 2109.571933] dump_stack+0x1b2/0x281 [ 2109.575552] should_fail.cold+0x10a/0x149 [ 2109.579690] should_failslab+0xd6/0x130 [ 2109.583644] __kmalloc+0x2c1/0x400 [ 2109.587185] ? __vb2_queue_alloc+0xf4/0xd90 [ 2109.591494] __vb2_queue_alloc+0xf4/0xd90 [ 2109.595632] ? vid_cap_queue_setup+0x376/0x960 [ 2109.600202] ? kernel_text_address+0xbd/0xf0 [ 2109.604594] vb2_core_create_bufs+0x279/0x5a0 [ 2109.609101] ? __vb2_queue_free+0x7a0/0x7a0 [ 2109.613434] ? trace_hardirqs_on+0x10/0x10 [ 2109.617670] ? __lock_acquire+0x5fc/0x3f20 [ 2109.621887] vb2_create_bufs+0x2e1/0x5b0 [ 2109.625944] ? __free_pages_ok+0x539/0xeb0 [ 2109.630185] ? vb2_thread_start+0x310/0x310 [ 2109.634490] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2109.639490] ? trace_hardirqs_on+0x10/0x10 [ 2109.643723] ? trace_hardirqs_on+0x10/0x10 [ 2109.647964] vb2_ioctl_create_bufs+0x1f7/0x330 [ 2109.652555] v4l_create_bufs+0xa4/0x150 [ 2109.656524] __video_do_ioctl+0x65b/0x6a0 [ 2109.660656] ? video_ioctl2+0x30/0x30 [ 2109.664435] ? __might_fault+0x177/0x1b0 [ 2109.668501] video_usercopy+0xf5/0xe90 [ 2109.672394] ? video_ioctl2+0x30/0x30 [ 2109.676180] ? v4l_g_ctrl+0x390/0x390 [ 2109.679967] ? proc_fail_nth_write+0x7b/0x180 [ 2109.684442] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2109.689375] ? trace_hardirqs_on+0x10/0x10 [ 2109.693615] ? fsnotify+0x974/0x11b0 [ 2109.697320] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2109.702230] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2109.707242] v4l2_ioctl+0x1bb/0x2f0 [ 2109.711035] ? v4l2_open+0x2f0/0x2f0 [ 2109.714729] do_vfs_ioctl+0x75a/0xff0 [ 2109.718514] ? ioctl_preallocate+0x1a0/0x1a0 [ 2109.722910] ? lock_downgrade+0x740/0x740 [ 2109.727053] ? __fget+0x225/0x360 [ 2109.730505] ? do_vfs_ioctl+0xff0/0xff0 [ 2109.734501] ? security_file_ioctl+0x83/0xb0 [ 2109.738890] SyS_ioctl+0x7f/0xb0 [ 2109.742244] ? do_vfs_ioctl+0xff0/0xff0 [ 2109.746213] do_syscall_64+0x1d5/0x640 [ 2109.750110] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2109.755292] RIP: 0033:0x465ef9 [ 2109.758459] RSP: 002b:00007f33827f5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2109.766154] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 2109.773426] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 2109.780673] RBP: 00007f33827f51d0 R08: 0000000000000000 R09: 0000000000000000 13:08:59 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:59 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x0, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:59 executing program 5: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000200)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4080) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x0, [{}, {}, {0x1}]}}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x210081, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000001c0)={0x8, 0x8000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x18, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001700)={'batadv_slave_0\x00'}) 13:08:59 executing program 0: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000200)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4080) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x0, [{}, {}, {0x1}]}}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x210081, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000001c0)={0x8, 0x8000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x18, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001700)={'batadv_slave_0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000001880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001840)={&(0x7f0000001740)={0x100, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x31}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={[], [], @rand_addr=0x64010100}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x24040040}, 0x400c4) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, r7, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x625}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000100) 13:08:59 executing program 1 (fault-call:1 fault-nth:1): r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) 13:08:59 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) [ 2109.787944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2109.795206] R13: 00007ffc63a66d7f R14: 00007f33827f5300 R15: 0000000000022000 13:08:59 executing program 2 (fault-call:1 fault-nth:2): r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:59 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x0, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:59 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x0, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) [ 2109.860162] FAULT_INJECTION: forcing a failure. [ 2109.860162] name failslab, interval 1, probability 0, space 0, times 0 [ 2109.876405] CPU: 1 PID: 942 Comm: syz-executor.1 Not tainted 4.14.222-syzkaller #0 [ 2109.884153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2109.893531] Call Trace: [ 2109.896124] dump_stack+0x1b2/0x281 [ 2109.899755] should_fail.cold+0x10a/0x149 [ 2109.903908] should_failslab+0xd6/0x130 13:08:59 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x0, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:08:59 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1], 0x4}}}) [ 2109.907889] __kmalloc+0x2c1/0x400 [ 2109.911434] ? __vb2_queue_alloc+0xf4/0xd90 [ 2109.915787] __vb2_queue_alloc+0xf4/0xd90 [ 2109.919937] ? vid_cap_queue_setup+0x376/0x960 [ 2109.924544] ? kernel_text_address+0xbd/0xf0 [ 2109.928967] vb2_core_create_bufs+0x279/0x5a0 [ 2109.933466] ? __vb2_queue_free+0x7a0/0x7a0 [ 2109.938575] ? trace_hardirqs_on+0x10/0x10 [ 2109.942816] ? __lock_acquire+0x5fc/0x3f20 [ 2109.947070] vb2_create_bufs+0x2e1/0x5b0 [ 2109.951852] ? vb2_thread_start+0x310/0x310 [ 2109.956189] ? trace_hardirqs_on+0x10/0x10 [ 2109.960480] vb2_ioctl_create_bufs+0x1f7/0x330 [ 2109.965090] v4l_create_bufs+0xa4/0x150 [ 2109.969082] __video_do_ioctl+0x65b/0x6a0 [ 2109.973252] ? video_ioctl2+0x30/0x30 [ 2109.977061] ? __might_fault+0x177/0x1b0 [ 2109.981137] video_usercopy+0xf5/0xe90 [ 2109.985034] ? video_ioctl2+0x30/0x30 [ 2109.988847] ? v4l_g_ctrl+0x390/0x390 [ 2109.992689] ? proc_fail_nth_write+0x7b/0x180 [ 2109.997188] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2110.002133] ? trace_hardirqs_on+0x10/0x10 [ 2110.006477] ? fsnotify+0x974/0x11b0 [ 2110.010202] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2110.015135] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2110.020161] v4l2_ioctl+0x1bb/0x2f0 [ 2110.023794] ? v4l2_open+0x2f0/0x2f0 [ 2110.027526] do_vfs_ioctl+0x75a/0xff0 [ 2110.031331] ? ioctl_preallocate+0x1a0/0x1a0 [ 2110.035751] ? lock_downgrade+0x740/0x740 [ 2110.039906] ? __fget+0x225/0x360 [ 2110.043357] ? do_vfs_ioctl+0xff0/0xff0 [ 2110.047332] ? security_file_ioctl+0x83/0xb0 [ 2110.051751] SyS_ioctl+0x7f/0xb0 [ 2110.055296] ? do_vfs_ioctl+0xff0/0xff0 [ 2110.059295] do_syscall_64+0x1d5/0x640 [ 2110.063198] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2110.068404] RIP: 0033:0x465ef9 [ 2110.071600] RSP: 002b:00007feb7458f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2110.079312] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 2110.086604] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 2110.093877] RBP: 00007feb7458f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2110.101148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2110.108431] R13: 00007ffeaa518faf R14: 00007feb7458f300 R15: 0000000000022000 13:09:00 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1], 0x4}}}) [ 2110.132364] FAULT_INJECTION: forcing a failure. [ 2110.132364] name failslab, interval 1, probability 0, space 0, times 0 [ 2110.157323] CPU: 1 PID: 946 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 2110.165077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2110.174530] Call Trace: [ 2110.177148] dump_stack+0x1b2/0x281 [ 2110.180798] should_fail.cold+0x10a/0x149 [ 2110.184959] should_failslab+0xd6/0x130 [ 2110.188946] kmem_cache_alloc_trace+0x29a/0x3d0 [ 2110.193631] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2110.199009] vb2_vmalloc_alloc+0x63/0x2d0 [ 2110.203260] __vb2_queue_alloc+0x47a/0xd90 [ 2110.207516] vb2_core_create_bufs+0x279/0x5a0 [ 2110.212022] ? __vb2_queue_free+0x7a0/0x7a0 [ 2110.216359] ? trace_hardirqs_on+0x10/0x10 [ 2110.220605] ? __lock_acquire+0x5fc/0x3f20 [ 2110.224849] vb2_create_bufs+0x2e1/0x5b0 13:09:00 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1], 0x4}}}) [ 2110.228919] ? __free_pages_ok+0x539/0xeb0 [ 2110.233163] ? vb2_thread_start+0x310/0x310 [ 2110.237525] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2110.242556] ? trace_hardirqs_on+0x10/0x10 [ 2110.246805] ? trace_hardirqs_on+0x10/0x10 [ 2110.251053] vb2_ioctl_create_bufs+0x1f7/0x330 [ 2110.255650] v4l_create_bufs+0xa4/0x150 [ 2110.259646] __video_do_ioctl+0x65b/0x6a0 [ 2110.263823] ? video_ioctl2+0x30/0x30 [ 2110.267636] ? __might_fault+0x177/0x1b0 [ 2110.271723] video_usercopy+0xf5/0xe90 [ 2110.275641] ? video_ioctl2+0x30/0x30 [ 2110.279494] ? v4l_g_ctrl+0x390/0x390 [ 2110.283316] ? proc_fail_nth_write+0x7b/0x180 [ 2110.287826] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2110.292776] ? trace_hardirqs_on+0x10/0x10 [ 2110.297029] ? fsnotify+0x974/0x11b0 [ 2110.300762] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2110.305715] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2110.310753] v4l2_ioctl+0x1bb/0x2f0 [ 2110.314406] ? v4l2_open+0x2f0/0x2f0 [ 2110.318144] do_vfs_ioctl+0x75a/0xff0 [ 2110.321969] ? ioctl_preallocate+0x1a0/0x1a0 [ 2110.326393] ? lock_downgrade+0x740/0x740 [ 2110.330562] ? __fget+0x225/0x360 [ 2110.334027] ? do_vfs_ioctl+0xff0/0xff0 [ 2110.338009] ? security_file_ioctl+0x83/0xb0 [ 2110.342435] SyS_ioctl+0x7f/0xb0 [ 2110.345826] ? do_vfs_ioctl+0xff0/0xff0 [ 2110.349814] do_syscall_64+0x1d5/0x640 [ 2110.353742] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2110.358959] RIP: 0033:0x465ef9 [ 2110.362149] RSP: 002b:00007f33827f5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2110.369869] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 13:09:00 executing program 5: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000200)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4080) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x0, [{}, {}, {0x1}]}}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x210081, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000001c0)={0x8, 0x8000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x18, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) 13:09:00 executing program 3: ioctl$VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64) ioctl$SOUND_PCM_READ_RATE(0xffffffffffffffff, 0x80045002, &(0x7f0000000000)) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x3) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x8, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) [ 2110.377143] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 2110.384435] RBP: 00007f33827f51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2110.391710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2110.398984] R13: 00007ffc63a66d7f R14: 00007f33827f5300 R15: 0000000000022000 13:09:00 executing program 0: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000200)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4080) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x0, [{}, {}, {0x1}]}}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x210081, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000001c0)={0x8, 0x8000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x18, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001700)={'batadv_slave_0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000001880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001840)={&(0x7f0000001740)={0x100, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x31}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={[], [], @rand_addr=0x64010100}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x24040040}, 0x400c4) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, r7, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x625}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000100) 13:09:00 executing program 1 (fault-call:1 fault-nth:2): r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) 13:09:00 executing program 2 (fault-call:1 fault-nth:3): r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:00 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) [ 2110.485188] FAULT_INJECTION: forcing a failure. [ 2110.485188] name failslab, interval 1, probability 0, space 0, times 0 [ 2110.519622] CPU: 1 PID: 968 Comm: syz-executor.1 Not tainted 4.14.222-syzkaller #0 [ 2110.527370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2110.536727] Call Trace: [ 2110.539306] dump_stack+0x1b2/0x281 [ 2110.542926] should_fail.cold+0x10a/0x149 [ 2110.547079] should_failslab+0xd6/0x130 [ 2110.551055] kmem_cache_alloc_trace+0x29a/0x3d0 [ 2110.555740] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2110.561105] vb2_vmalloc_alloc+0x63/0x2d0 [ 2110.565261] __vb2_queue_alloc+0x47a/0xd90 [ 2110.569602] vb2_core_create_bufs+0x279/0x5a0 [ 2110.574090] ? __vb2_queue_free+0x7a0/0x7a0 [ 2110.578424] ? trace_hardirqs_on+0x10/0x10 [ 2110.582646] ? __lock_acquire+0x5fc/0x3f20 [ 2110.586872] vb2_create_bufs+0x2e1/0x5b0 [ 2110.590927] ? vb2_thread_start+0x310/0x310 [ 2110.595236] ? trace_hardirqs_on+0x10/0x10 [ 2110.599461] vb2_ioctl_create_bufs+0x1f7/0x330 [ 2110.604031] v4l_create_bufs+0xa4/0x150 [ 2110.607993] __video_do_ioctl+0x65b/0x6a0 [ 2110.612154] ? video_ioctl2+0x30/0x30 [ 2110.615940] ? __might_fault+0x177/0x1b0 [ 2110.619987] video_usercopy+0xf5/0xe90 [ 2110.623861] ? video_ioctl2+0x30/0x30 [ 2110.627647] ? v4l_g_ctrl+0x390/0x390 [ 2110.631455] ? proc_fail_nth_write+0x7b/0x180 [ 2110.635930] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2110.640843] ? trace_hardirqs_on+0x10/0x10 [ 2110.645155] ? fsnotify+0x974/0x11b0 [ 2110.648859] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2110.653799] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2110.658829] v4l2_ioctl+0x1bb/0x2f0 [ 2110.662453] ? v4l2_open+0x2f0/0x2f0 [ 2110.666152] do_vfs_ioctl+0x75a/0xff0 [ 2110.669965] ? ioctl_preallocate+0x1a0/0x1a0 [ 2110.674370] ? lock_downgrade+0x740/0x740 [ 2110.678534] ? __fget+0x225/0x360 [ 2110.681989] ? do_vfs_ioctl+0xff0/0xff0 [ 2110.685965] ? security_file_ioctl+0x83/0xb0 [ 2110.690356] SyS_ioctl+0x7f/0xb0 [ 2110.693733] ? do_vfs_ioctl+0xff0/0xff0 [ 2110.697713] do_syscall_64+0x1d5/0x640 [ 2110.701615] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2110.706791] RIP: 0033:0x465ef9 [ 2110.709968] RSP: 002b:00007feb7458f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2110.717684] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 2110.724972] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 13:09:00 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) [ 2110.732237] RBP: 00007feb7458f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2110.739502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2110.746761] R13: 00007ffeaa518faf R14: 00007feb7458f300 R15: 0000000000022000 [ 2110.767185] FAULT_INJECTION: forcing a failure. [ 2110.767185] name failslab, interval 1, probability 0, space 0, times 0 [ 2110.787493] CPU: 1 PID: 971 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 2110.795270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2110.804632] Call Trace: [ 2110.807248] dump_stack+0x1b2/0x281 [ 2110.810894] should_fail.cold+0x10a/0x149 [ 2110.815059] should_failslab+0xd6/0x130 [ 2110.819049] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2110.824175] __get_vm_area_node+0xed/0x340 [ 2110.828460] __vmalloc_node_range+0x9c/0x150 [ 2110.832884] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2110.837226] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2110.842604] vmalloc_user+0x47/0xa0 [ 2110.846243] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2110.850575] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2110.855949] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2110.860111] __vb2_queue_alloc+0x47a/0xd90 [ 2110.864390] vb2_core_create_bufs+0x279/0x5a0 [ 2110.868892] ? __vb2_queue_free+0x7a0/0x7a0 [ 2110.873229] ? trace_hardirqs_on+0x10/0x10 [ 2110.877481] ? mark_held_locks+0xa6/0xf0 [ 2110.881552] ? __lock_acquire+0x5fc/0x3f20 13:09:00 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) [ 2110.885798] vb2_create_bufs+0x2e1/0x5b0 [ 2110.889872] ? vb2_thread_start+0x310/0x310 [ 2110.894208] ? trace_hardirqs_on+0x10/0x10 [ 2110.898542] ? mark_held_locks+0xa6/0xf0 [ 2110.902623] ? trace_hardirqs_on+0x10/0x10 [ 2110.907140] vb2_ioctl_create_bufs+0x1f7/0x330 [ 2110.911740] v4l_create_bufs+0xa4/0x150 [ 2110.915738] __video_do_ioctl+0x65b/0x6a0 [ 2110.919900] ? video_ioctl2+0x30/0x30 [ 2110.923709] ? __might_fault+0x177/0x1b0 [ 2110.927781] video_usercopy+0xf5/0xe90 [ 2110.931678] ? video_ioctl2+0x30/0x30 [ 2110.935516] ? v4l_g_ctrl+0x390/0x390 [ 2110.939324] ? proc_fail_nth_write+0x7b/0x180 [ 2110.943828] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2110.948769] ? trace_hardirqs_on+0x10/0x10 [ 2110.953015] ? fsnotify+0x974/0x11b0 [ 2110.956735] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2110.961671] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2110.966718] v4l2_ioctl+0x1bb/0x2f0 [ 2110.970347] ? v4l2_open+0x2f0/0x2f0 [ 2110.974058] do_vfs_ioctl+0x75a/0xff0 [ 2110.977859] ? ioctl_preallocate+0x1a0/0x1a0 [ 2110.982276] ? lock_downgrade+0x740/0x740 [ 2110.986423] ? __fget+0x225/0x360 [ 2110.989871] ? do_vfs_ioctl+0xff0/0xff0 [ 2110.993838] ? security_file_ioctl+0x83/0xb0 [ 2110.998248] SyS_ioctl+0x7f/0xb0 [ 2111.001616] ? do_vfs_ioctl+0xff0/0xff0 [ 2111.005587] do_syscall_64+0x1d5/0x640 [ 2111.009500] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2111.014690] RIP: 0033:0x465ef9 [ 2111.017876] RSP: 002b:00007f33827f5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2111.025579] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 2111.032847] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 2111.040199] RBP: 00007f33827f51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2111.047467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2111.055391] R13: 00007ffc63a66d7f R14: 00007f33827f5300 R15: 0000000000022000 [ 2111.077298] syz-executor.2: vmalloc: allocation failure: 15138816 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) 13:09:01 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) [ 2111.089088] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2111.094217] CPU: 1 PID: 971 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 2111.101945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2111.111301] Call Trace: [ 2111.113898] dump_stack+0x1b2/0x281 [ 2111.117538] warn_alloc.cold+0x96/0x1cc [ 2111.121518] ? zone_watermark_ok_safe+0x220/0x220 [ 2111.126369] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2111.131828] ? __get_vm_area_node+0xed/0x340 [ 2111.136249] ? __get_vm_area_node+0x27d/0x340 [ 2111.140759] __vmalloc_node_range+0x10e/0x150 [ 2111.145265] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2111.150635] vmalloc_user+0x47/0xa0 [ 2111.154292] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2111.158618] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2111.164013] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2111.168173] __vb2_queue_alloc+0x47a/0xd90 [ 2111.172427] vb2_core_create_bufs+0x279/0x5a0 [ 2111.176935] ? __vb2_queue_free+0x7a0/0x7a0 [ 2111.181267] ? trace_hardirqs_on+0x10/0x10 [ 2111.185506] ? mark_held_locks+0xa6/0xf0 [ 2111.189597] ? __lock_acquire+0x5fc/0x3f20 [ 2111.193843] vb2_create_bufs+0x2e1/0x5b0 [ 2111.197915] ? vb2_thread_start+0x310/0x310 [ 2111.202242] ? trace_hardirqs_on+0x10/0x10 [ 2111.206483] ? mark_held_locks+0xa6/0xf0 [ 2111.210546] ? trace_hardirqs_on+0x10/0x10 [ 2111.214788] vb2_ioctl_create_bufs+0x1f7/0x330 [ 2111.219377] v4l_create_bufs+0xa4/0x150 [ 2111.223360] __video_do_ioctl+0x65b/0x6a0 [ 2111.227520] ? video_ioctl2+0x30/0x30 [ 2111.231326] ? __might_fault+0x177/0x1b0 [ 2111.235399] video_usercopy+0xf5/0xe90 [ 2111.239309] ? video_ioctl2+0x30/0x30 [ 2111.243118] ? v4l_g_ctrl+0x390/0x390 [ 2111.246937] ? proc_fail_nth_write+0x7b/0x180 [ 2111.251436] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2111.256389] ? trace_hardirqs_on+0x10/0x10 [ 2111.260630] ? fsnotify+0x974/0x11b0 [ 2111.264349] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2111.269282] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2111.274305] v4l2_ioctl+0x1bb/0x2f0 [ 2111.277933] ? v4l2_open+0x2f0/0x2f0 [ 2111.281646] do_vfs_ioctl+0x75a/0xff0 [ 2111.285465] ? ioctl_preallocate+0x1a0/0x1a0 [ 2111.289871] ? lock_downgrade+0x740/0x740 [ 2111.294038] ? __fget+0x225/0x360 [ 2111.297496] ? do_vfs_ioctl+0xff0/0xff0 [ 2111.301473] ? security_file_ioctl+0x83/0xb0 [ 2111.305900] SyS_ioctl+0x7f/0xb0 [ 2111.309265] ? do_vfs_ioctl+0xff0/0xff0 [ 2111.313240] do_syscall_64+0x1d5/0x640 [ 2111.317138] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2111.322332] RIP: 0033:0x465ef9 [ 2111.325516] RSP: 002b:00007f33827f5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2111.333251] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 2111.340554] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 2111.347858] RBP: 00007f33827f51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2111.355145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2111.362507] R13: 00007ffc63a66d7f R14: 00007f33827f5300 R15: 0000000000022000 [ 2111.385552] Mem-Info: 13:09:01 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) [ 2111.388024] active_anon:15854 inactive_anon:8819 isolated_anon:0 [ 2111.388024] active_file:6200 inactive_file:33922 isolated_file:0 [ 2111.388024] unevictable:0 dirty:162 writeback:0 unstable:0 [ 2111.388024] slab_reclaimable:27553 slab_unreclaimable:110800 [ 2111.388024] mapped:63411 shmem:9003 pagetables:850 bounce:0 [ 2111.388024] free:1432003 free_pcp:352 free_cma:0 [ 2111.422013] Node 0 active_anon:61304kB inactive_anon:35276kB active_file:24728kB inactive_file:135688kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:253644kB dirty:648kB writeback:0kB shmem:36012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 51200kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2111.451139] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2111.477689] Node 0 DMA free:15908kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2111.504278] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2111.510192] Node 0 DMA32 free:1643076kB min:36200kB low:45248kB high:54296kB active_anon:63424kB inactive_anon:35276kB active_file:24728kB inactive_file:135708kB unevictable:0kB writepending:668kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7744kB pagetables:3400kB bounce:0kB free_pcp:1532kB local_pcp:788kB free_cma:0kB 13:09:01 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) [ 2111.540546] lowmem_reserve[]: 0 0 0 0 0 [ 2111.544557] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2111.570472] lowmem_reserve[]: 0 0 0 0 0 [ 2111.574483] Node 1 Normal free:4041300kB min:53696kB low:67120kB high:80544kB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2111.602730] lowmem_reserve[]: 0 0 0 0 0 [ 2111.606981] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 2111.621062] Node 0 DMA32: 100*4kB (UE) 3*8kB (UE) 794*16kB (UE) 498*32kB (UME) 172*64kB (U) 121*128kB (UME) 116*256kB (UM) 68*512kB (UM) 47*1024kB (U) 27*2048kB (UE) 345*4096kB (M) = 1636616kB [ 2111.639387] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2111.650532] Node 1 Normal: 75*4kB (UME) 423*8kB (UME) 283*16kB (UME) 78*32kB (UME) 34*64kB (UME) 14*128kB (UME) 13*256kB (UME) 2*512kB (U) 2*1024kB (ME) 3*2048kB (M) 980*4096kB (M) = 4041300kB [ 2111.668276] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2111.677453] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 13:09:01 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:01 executing program 5: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000200)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4080) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x0, [{}, {}, {0x1}]}}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x210081, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000001c0)={0x8, 0x8000}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) 13:09:01 executing program 1 (fault-call:1 fault-nth:3): r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) 13:09:01 executing program 0: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000200)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4080) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x0, [{}, {}, {0x1}]}}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x210081, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000001c0)={0x8, 0x8000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x18, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001700)={'batadv_slave_0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000001880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001840)={&(0x7f0000001740)={0x100, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x31}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={[], [], @rand_addr=0x64010100}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x24040040}, 0x400c4) [ 2111.686367] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2111.695221] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2111.704242] 27565 total pagecache pages [ 2111.708512] 0 pages in swap cache [ 2111.711973] Swap cache stats: add 0, delete 0, find 0/0 [ 2111.717743] Free swap = 0kB [ 2111.720772] Total swap = 0kB [ 2111.723784] 2097051 pages RAM [ 2111.728116] 0 pages HighMem/MovableOnly [ 2111.732186] 363840 pages reserved [ 2111.737141] 0 pages cma reserved 13:09:01 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x1) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000000)={0x1, 0x2, 0x3f, 0x0, 'syz0\x00', 0x4}) 13:09:01 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240)='ethtool\x00', r0) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x48}}, 0x40010d5) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:01 executing program 0: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000200)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4080) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x0, [{}, {}, {0x1}]}}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x210081, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000001c0)={0x8, 0x8000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x18, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001700)={'batadv_slave_0\x00'}) 13:09:01 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00', 0xffffffffffffffff) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) 13:09:01 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) r1 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x81, 0x2) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x141300, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)={0x32c7, 0x2, 0x4, 0xe000, 0x3, {}, {0x1, 0x1, 0x0, 0x4, 0x80, 0xe2, "f174cfd5"}, 0x5, 0x2, @userptr=0x3, 0x20, 0x0, r2}) 13:09:01 executing program 5: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000200)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4080) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x0, [{}, {}, {0x1}]}}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x210081, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000001c0)={0x8, 0x8000}) socket$nl_generic(0x10, 0x3, 0x10) 13:09:01 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x0, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:01 executing program 5: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000200)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4080) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x0, [{}, {}, {0x1}]}}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x210081, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000001c0)={0x8, 0x8000}) 13:09:01 executing program 0: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000200)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4080) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x0, [{}, {}, {0x1}]}}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x210081, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000001c0)={0x8, 0x8000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x18, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) 13:09:01 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) set_tid_address(&(0x7f0000000000)) 13:09:02 executing program 3: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x2, "2f3fe808"}}) 13:09:02 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x0, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:02 executing program 0: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000200)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4080) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x0, [{}, {}, {0x1}]}}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x210081, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000001c0)={0x8, 0x8000}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) 13:09:02 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8], 0x4}}}) 13:09:02 executing program 5: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000200)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4080) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x0, [{}, {}, {0x1}]}}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x210081, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') 13:09:02 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) 13:09:02 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000540)={0x7f, 0x1, 0x4, 0x40, 0x3, {r1, r2/1000+60000}, {0x2, 0xc, 0x9, 0x6, 0xf7, 0xff, "21dca79c"}, 0xb88, 0x1, @planes=&(0x7f0000000500)={0x4, 0x8001, @fd}, 0x7}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x44850cb1, 0x2, 0x0, "eacc49f33619c625f1ecfd9a7aace8bcc4b1fd8ef8f766a5ab15ff0ebdd5d14e", 0x41564e57}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x4, 0x0, 0x1, 0x0, 0x0, 0x0, "2f3fe808"}}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="000000d6dcc04d670e3d46004b1b7a260ea605db7e50261d773f149ece220cfc0e2e14aabb632837397822c04abe4debc7a3dcf6ab4fb50dc5d6ab5228312afe1b75fb248e522a72640affc68948ab6e5553114ba5b5b7099a7d9268664ae3ec9081e93b9a3581d4c375194743d3d74803a8c04a70da00c67f6a0752e7b4f0c246eb84de9154e59c02f097e906b20d7253ca2d15fb52e912d236fac5211ea996ff4867562be32bcfa4bf3efb427219c5a4bb0a", @ANYRES16=0x0, @ANYBLOB="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"], 0x2d8}, 0x1, 0x0, 0x0, 0x4}, 0x4004080) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000005c0)=0x1) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vfio/vfio\x00', 0x88040, 0x0) r4 = getpid() syz_open_procfs$namespace(r4, &(0x7f0000000280)='ns/net\x00') ioctl$VFIO_IOMMU_MAP_DMA(r3, 0x3b71, &(0x7f0000000240)={0x20, 0x0, 0x20, 0x9, 0x100000001}) 13:09:02 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x0, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:02 executing program 5: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000200)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4080) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x0, [{}, {}, {0x1}]}}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x210081, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') 13:09:02 executing program 0: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000200)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4080) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x0, [{}, {}, {0x1}]}}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x210081, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000001c0)={0x8, 0x8000}) socket$nl_generic(0x10, 0x3, 0x10) 13:09:02 executing program 3: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:02 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000002c0)={0x3, @pix={0x6, 0x4, 0x35335150, 0x3, 0xb6, 0x3ff, 0x8, 0x6, 0x1, 0x8, 0x1, 0x2}}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x7, 0x50313134, 0x1, @discrete={0x8, 0xfffffff7}}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr={0x3132564e, 0x7f}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00', r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) socket$l2tp6(0xa, 0x2, 0x73) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r4) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f0000000280)={0x0, 0x4, 0xcd, 0x7, 'syz1\x00', 0x9}) 13:09:02 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)={0x9, 0x3, 0x4, 0x70000, 0x7, {}, {0x5, 0x8, 0x8c, 0x81, 0x3f, 0x27, "1c3d7d33"}, 0x4, 0x3, @userptr=0x1200, 0x7, 0x0, r1}) r2 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:02 executing program 0: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000200)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4080) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x0, [{}, {}, {0x1}]}}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x210081, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000001c0)={0x8, 0x8000}) 13:09:02 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:02 executing program 5: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000200)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4080) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x0, [{}, {}, {0x1}]}}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') 13:09:02 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x840, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0) 13:09:02 executing program 0: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000200)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4080) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x0, [{}, {}, {0x1}]}}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x210081, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') 13:09:02 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x0, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0xfffd, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x200], 0x4}}}) 13:09:02 executing program 5: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000200)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4080) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') [ 2112.636674] Unknown ioctl -2140645888 13:09:02 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:02 executing program 0: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000200)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4080) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x0, [{}, {}, {0x1}]}}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x210081, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') 13:09:02 executing program 5: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000200)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') 13:09:02 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r1, 0x40184152, &(0x7f0000000140)={0x0, &(0x7f0000000100)=[&(0x7f0000000000)="e9025664864cce699cc49fd547ae6aa39857e3db93b8425e91f14e3bc26dfe122400", &(0x7f0000000080)="8f67883c421d12ffb091bf7dbb9ddc6b2e92f459ff76162ee421320c8177c554754ce24e0c12d4efeeefc6b34b17c11de7dfe70c2a116dcbf1634292d4d96b7447ffad0d61979c3f5accc3608ddf90b34163687669bc7bb71993de65f05ddfe0b3b06747cd3e4d76abc1"], 0x9}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) ioctl$SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0) 13:09:02 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x0, @vbi={0xe6, 0x8, 0x3, 0x4f565559, [0x200, 0x8], [0x6, 0x9], 0x13a}}, 0xfffffffd}) 13:09:02 executing program 3: ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:02 executing program 5: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') 13:09:02 executing program 0: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000200)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4080) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x0, [{}, {}, {0x1}]}}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') 13:09:02 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @raw_data="2af4038548ff4c9192850af256bb547f6cacb4d672e146f64f6d9b8c5206eef614341520f2cdbb30b21e48b9d977ca9e1eb1b428608913c7a05d372b2eb7158fe8536c44e1f376321b32d648f6de9d91d1f0a765c819a0299d627d21ddf2ee2e6f1a08bd492f696e4460b994af7e097cb747784038b6dc9c640de3c1155e62d99a07e3373f2fe5265424b09baa3d3afcc510bbf2dfe5600d137b1e6d67540082fee93d85216e2e062577b05f4404277047a5c8a1e5e0252ca6441225859186e8f7953051b5cfabd3"}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:02 executing program 5: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') 13:09:02 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x9, 0x0, 0x0, "2f3fe808"}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000080)={0x2, @pix_mp={0x646, 0x7f1b, 0xa0363159, 0x9, 0xc, [{0x6, 0x2}, {0x800, 0x7ff}, {0x100, 0x396}, {0x1ff, 0x9}, {0xfffffffe}, {0x2, 0xfffffc01}, {0x6, 0x8001}, {0x7f, 0x4}], 0x2, 0x0, 0x1, 0x2}}) 13:09:02 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:02 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)={0x1, 0x1, 0x4, 0x4000, 0x2, {0x77359400}, {0x3, 0x0, 0x0, 0x0, 0xfe, 0x5a, "721c5cbc"}, 0x502a, 0x3, @planes=&(0x7f0000000000)={0x5, 0x81, @mem_offset=0x6, 0x3}, 0x8cb, 0x0, r1}) 13:09:02 executing program 5: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') 13:09:02 executing program 5: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') 13:09:03 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080)) 13:09:03 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x6, 0x400}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00', 0xffffffffffffffff) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x3) 13:09:03 executing program 0: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000200)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4080) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') 13:09:03 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x0, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:03 executing program 5: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') 13:09:03 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x4, 0x10000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000500)={0xfffffffe, 0xc, [0x80000001, 0x3, 0x1]}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x80000, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@dellinkprop={0x260, 0x6d, 0x400, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8, 0x2000}, [@IFLA_VFINFO_LIST={0x1cc, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x1020000, 0x1ff}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x10001, 0x1ff}}]}, {0x54, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x80000001}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3, 0x1000}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xb9, 0x6}}, @IFLA_VF_RATE={0x10, 0x6, {0xffff, 0x400, 0x4}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x6, 0x7}}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xd7, 0x7f}}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x2, 0xfff}}, @IFLA_VF_RATE={0x10, 0x6, {0x8, 0x22, 0x7fff}}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x0, 0x1}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8001, 0x200}}]}, {0x78, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0xd36, 0x34d}}, @IFLA_VF_RATE={0x10, 0x6, {0xc1, 0x6, 0x5}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x80}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x1, 0x5}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x2}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xb2ef, 0xe8b}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x9}}, @IFLA_VF_TRUST={0xc, 0x9, {0x3f, 0xffffffff}}]}, {0x7c, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x4, 0x5, 0x9}}, @IFLA_VF_MAC={0x28, 0x1, {0x6, @remote}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x101, 0x918}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x4, 0xffffffff}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x8000, 0x1}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x1, 0x2d5}}]}]}, @IFLA_AF_SPEC={0x74, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_INET6={0x6c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x41}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, [], 0xb}}, @IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}]}]}, 0x260}}, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x5000, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x7) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r4) ioctl$SNDCTL_DSP_NONBLOCK(r4, 0x500e, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r5) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000580)={{0x4, 0x1, 0x7, 0x0, 'syz0\x00', 0x2}, 0x2, 0x10000000, 0x3, 0x0, 0x1, 0x3, 'syz1\x00', &(0x7f0000000540)=['\x00'], 0x1, [], [0x6, 0x2, 0x6c3e, 0xffff]}) 13:09:03 executing program 0: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000200)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') 13:09:03 executing program 0: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') 13:09:03 executing program 5: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') 13:09:03 executing program 5: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)) syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') 13:09:03 executing program 5: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') 13:09:03 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x0, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:03 executing program 1: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000080)={0x2, @sliced={0x739a, [0x2, 0x6, 0x1f, 0x2000, 0x2, 0x8000, 0x8dc, 0x9, 0x4, 0x7a4, 0x0, 0x9, 0x9, 0x9, 0x1ff, 0x1f, 0x1f, 0xd375, 0x2, 0x4, 0x0, 0x7, 0x3, 0x9, 0x4, 0x1, 0x3f, 0x1, 0x200, 0x2, 0x1, 0x3, 0x0, 0xfffd, 0x2, 0x7ff, 0x3, 0x0, 0xbd, 0xfc00, 0x0, 0x9, 0x6, 0xfffa, 0xea, 0x4, 0xdda, 0x40], 0x7}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe4, 0xffff, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) 13:09:03 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:03 executing program 0: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') 13:09:03 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') 13:09:03 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000013c0)=0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000000)={0x9, 0x7, 0x20, 0x81, 'syz0\x00', 0x1}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x100, 0x0, {0x77359400}, {}, 0x0, 0x0, @userptr=0x6b4, 0x800}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000012c0)={0x1, @win={{0xfffffff7, 0x1f, 0x5535, 0x2}, 0x5, 0x7, &(0x7f0000001240)={{0x0, 0x4, 0x7f, 0x40}, &(0x7f0000001200)={{0x3, 0x800, 0x32, 0x5}, &(0x7f0000000140)={{0x7f, 0x5, 0x6, 0x3}}}}, 0x3, &(0x7f0000001280)="1e5fde1239d7438406f20568b40d9629a50490da77cbbabf6164b2e59b0a06"}}) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000200)=""/4096) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000000c0)={0x200, 0x2, 0x0, "96fc0a983f2be4349d8a3ecf0c34030ec83ecf307f6c5d8bfeec76508f4d8c5a", 0x35315241}) 13:09:03 executing program 5: syz_open_procfs$namespace(0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') 13:09:03 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x0, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:03 executing program 5: syz_open_procfs$namespace(0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') 13:09:03 executing program 5: syz_open_procfs$namespace(0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') 13:09:03 executing program 0: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') 13:09:03 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 13:09:03 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 13:09:03 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xfaf, 0x3, 0x1, {0x2, @raw_data="1b18ade1ba54d875957eb15f3372d6043e8ab5e58d9eb1097290ddaaa47deb967e3da5d31b9e64a98d1243664b3d5140602dc5319cb3c41325b2df9f36e750e9366560fd20ca95b2420e3919193d1e6ba8c12b70be2114a69724642ea0a9dc212ff4bb758da15a17c4d8bf1845503c85c8e43ead5db3cece77cb4ee8a24f176b8ba7179bea9bece37b21cf6c4496e15597950194b3a27d863f22a4ae91ed9e647fee82ebb63e92e00d651484473f42c54930a2648cea64129c055d2408746f781849d2e4e3382f2a"}}) 13:09:03 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe], 0x4}}}) ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000080)) 13:09:03 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0x0, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:03 executing program 0: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') 13:09:03 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000080)={0x3, @raw_data="f38303a1ecd85345efabea3e0cdcfe1cba36ac902c369e975483fb1ff42373754c0e8ce71c602cdb76261f581390e78ace1b62fdc3be45462d8822c926f26eaa58d6e35402bd0b3292afac4f38aff8962f0e2a44a80b58669e059d0c2f5ffa9719647a0d17816d29f70c753a890c4f3c0c4be507bc2d8150b3bde3bbac4895cc46cbaba7554b6d2c588739a4fbe08eaf2967d98cae2305ea4f19d1b6bb056cd2ba7ee6ce0f32d28ca7c04459b2eaf2f8d2ddd934910f5233f6aac6e6ead323a37b58c0716e304b7c"}) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x214, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xb4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1093}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}, @TIPC_NLA_NODE={0x14c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x44, 0x3, "26e87e684790dee722b2f86578ff1e0130ab40671c3656b395eeaeb3f1c1caf827a3e263864f7866d1871215fc0b5d7686a61fcce695e28a65185eef946f8a11"}, @TIPC_NLA_NODE_ID={0xb3, 0x3, "52dd8c37e55158238144c1d1d4c74d95938529c1368c3af80b82993b1895a1e0f57687a669bb85a84824ccba3d092d3ccc376bb16087d77a4311d904af4e4cd62ffea41e7a43844c490a7fc28e5f90d6751add01023a6b9443b5c73f66dd00c2ece82aa83547dd064227f50edcc6970efffb9473a61d433055a08ac99e1622ada303340c53b23f81457796f0d98fe6a7e476b633b924288fb02027087c04a9a2db1a73ffa371bd49860a4283d8e277"}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "074c4bb845f3660cceff76ef20a2487df632850cd190d3b3b4bc366f5b56f4"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd7c}]}]}, 0x214}, 0x1, 0x0, 0x0, 0xc000880}, 0x20000000) 13:09:03 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 13:09:03 executing program 0: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') 13:09:03 executing program 5: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000080)={0x2, @sliced={0x739a, [0x2, 0x6, 0x1f, 0x2000, 0x2, 0x8000, 0x8dc, 0x9, 0x4, 0x7a4, 0x0, 0x9, 0x9, 0x9, 0x1ff, 0x1f, 0x1f, 0xd375, 0x2, 0x4, 0x0, 0x7, 0x3, 0x9, 0x4, 0x1, 0x3f, 0x1, 0x200, 0x2, 0x1, 0x3, 0x0, 0xfffd, 0x2, 0x7ff, 0x3, 0x0, 0xbd, 0xfc00, 0x0, 0x9, 0x6, 0xfffa, 0xea, 0x4, 0xdda, 0x40], 0x7}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe4, 0xffff, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) 13:09:03 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0x0, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:03 executing program 0: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') 13:09:03 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0x0, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:03 executing program 0: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)) syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') 13:09:04 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x7fffffff, 0x1, 0x2, "159b2f6dc43cbceaadcb546bfc609bccea35a68f3248e816cf890b1b6557a400", 0x3147504d}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) 13:09:04 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0x0, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:04 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xc44}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xf15}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}]}, 0x44}, 0x1, 0x0, 0x0, 0xc040}, 0x24000821) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x41c7, 0xffff8000, 0x1, {0x3, @vbi={0x9, 0x5, 0x3f, 0x44495658, [0x41f58844], [0x8e56, 0x1ff], 0x1}}, 0xae}) 13:09:04 executing program 0: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') 13:09:04 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xa97f, 0x8001}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:04 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') 13:09:04 executing program 5: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000080)={0x2, @sliced={0x739a, [0x2, 0x6, 0x1f, 0x2000, 0x2, 0x8000, 0x8dc, 0x9, 0x4, 0x7a4, 0x0, 0x9, 0x9, 0x9, 0x1ff, 0x1f, 0x1f, 0xd375, 0x2, 0x4, 0x0, 0x7, 0x3, 0x9, 0x4, 0x1, 0x3f, 0x1, 0x200, 0x2, 0x1, 0x3, 0x0, 0xfffd, 0x2, 0x7ff, 0x3, 0x0, 0xbd, 0xfc00, 0x0, 0x9, 0x6, 0xfffa, 0xea, 0x4, 0xdda, 0x40], 0x7}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe4, 0xffff, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) 13:09:04 executing program 0: syz_open_procfs$namespace(0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') 13:09:04 executing program 0: syz_open_procfs$namespace(0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') 13:09:04 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x3, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x76, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1ce], 0x4}}}) 13:09:04 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x4000, 0x200081, {0x0, 0xea60}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, "8d6d4a15"}, 0x0, 0x0, @planes=&(0x7f0000000000)={0x0, 0x0, @mem_offset=0x8, 0x1ff}}) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='@},.}\\\x00', 0x7) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000200)=""/228) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000100)={0x7, 0x6, 0x9, 0xff, 'syz0\x00', 0x101}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140)='mptcp_pm\x00', r1) 13:09:04 executing program 0: syz_open_procfs$namespace(0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') 13:09:04 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80984120, &(0x7f0000000080)) 13:09:04 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 13:09:04 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0x0, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:04 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x9, 0xa0363159, 0x8f73ef8f7c9e2f4b, @discrete={0x4, 0x101}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x335, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xfff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x4}}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x7fff, 0x16711e11, 0x1, @discrete={0x101, 0x80000001}}) 13:09:04 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 13:09:04 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 13:09:04 executing program 5: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000080)={0x2, @sliced={0x739a, [0x2, 0x6, 0x1f, 0x2000, 0x2, 0x8000, 0x8dc, 0x9, 0x4, 0x7a4, 0x0, 0x9, 0x9, 0x9, 0x1ff, 0x1f, 0x1f, 0xd375, 0x2, 0x4, 0x0, 0x7, 0x3, 0x9, 0x4, 0x1, 0x3f, 0x1, 0x200, 0x2, 0x1, 0x3, 0x0, 0xfffd, 0x2, 0x7ff, 0x3, 0x0, 0xbd, 0xfc00, 0x0, 0x9, 0x6, 0xfffa, 0xea, 0x4, 0xdda, 0x40], 0x7}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe4, 0xffff, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) 13:09:04 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @raw_data="a6d99c2f1139a042ff539aaf0a2d8809496f9dd2308c7ac4a0bbd9e9f1584009c3efe90fb72aa0922b19e165d948088af5820f69ea4a3ea3f6b9e913d9e316ae4c2671e9674b581336832152e380d9834b8583fd3c329050a2ad41b4245ca42c87c8873b04bf63c899727e67c486642c2c82b6af600fa25fcd70d70add37060681f47dcbcd8110c86deb5e76adbd09da12f9fd4e988df8a2f5fb1259e718ce4db9223c96648816c01641182d697f4f12274a9dba98cea0d082aefd34883c453ddec45c346f366b34"}}) 13:09:04 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x8, {0x77359400}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x3, "2f3fe808"}, 0x0, 0x0, @planes=&(0x7f0000000000)={0xfffeffff, 0x101, @fd, 0x9}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', r2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)={0x4, 0x1, 0x4, 0x10000, 0x5c1a323, {0x0, 0xea60}, {0x4, 0x8, 0x7f, 0x6, 0x0, 0xe8, "2e40e735"}, 0x200, 0x2, @offset=0x80, 0xfffffffb, 0x0, r1}) 13:09:04 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 13:09:04 executing program 0: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') 13:09:04 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0x0, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:04 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 13:09:04 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000002c0)={0x3, @pix={0x6, 0x4, 0x35335150, 0x3, 0xb6, 0x3ff, 0x8, 0x6, 0x1, 0x8, 0x1, 0x2}}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x7, 0x50313134, 0x1, @discrete={0x8, 0xfffffff7}}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr={0x3132564e, 0x7f}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00', r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) socket$l2tp6(0xa, 0x2, 0x73) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r4) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f0000000280)={0x0, 0x4, 0xcd, 0x7, 'syz1\x00', 0x9}) 13:09:04 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x0, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) [ 2122.203407] oom_reaper: reaped process 1239 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2122.240097] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2122.253497] systemd-journal cpuset=/ mems_allowed=0-1 [ 2122.259003] CPU: 0 PID: 4619 Comm: systemd-journal Not tainted 4.14.222-syzkaller #0 [ 2122.266880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2122.276263] Call Trace: [ 2122.278885] dump_stack+0x1b2/0x281 [ 2122.282515] dump_header+0x178/0x82f [ 2122.286230] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2122.291330] ? ___ratelimit+0x2cd/0x530 [ 2122.295303] oom_kill_process.cold+0x10/0xb18 [ 2122.299840] out_of_memory+0xe3e/0x1190 [ 2122.303822] ? oom_killer_disable+0x1c0/0x1c0 [ 2122.308318] ? mutex_trylock+0x152/0x1a0 [ 2122.312377] __alloc_pages_nodemask+0x23e1/0x2720 [ 2122.317232] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2122.322089] alloc_pages_current+0x155/0x260 [ 2122.326495] filemap_fault+0xea3/0x1980 [ 2122.330480] ext4_filemap_fault+0x84/0xb0 [ 2122.334631] __do_fault+0xfa/0x380 [ 2122.338170] __handle_mm_fault+0x2497/0x4620 [ 2122.342575] ? ep_poll+0x1ab/0xa50 [ 2122.346110] ? vm_insert_page+0x7c0/0x7c0 [ 2122.350263] handle_mm_fault+0x391/0x860 [ 2122.354322] __do_page_fault+0x549/0xad0 [ 2122.358388] ? spurious_fault+0x640/0x640 [ 2122.362618] ? do_page_fault+0x60/0x500 [ 2122.366792] ? page_fault+0x2f/0x50 [ 2122.370419] page_fault+0x45/0x50 [ 2122.373869] RIP: 0001:0xffffffffffffffff [ 2122.377921] RSP: 16e711e0:00007ffcc337b610 EFLAGS: 7ffcc337b420 [ 2122.378899] Mem-Info: [ 2122.390280] active_anon:20316 inactive_anon:8819 isolated_anon:0 [ 2122.390280] active_file:16 inactive_file:18 isolated_file:0 [ 2122.390280] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2122.390280] slab_reclaimable:26490 slab_unreclaimable:98367 [ 2122.390280] mapped:56350 shmem:9003 pagetables:823 bounce:0 [ 2122.390280] free:13819 free_pcp:115 free_cma:0 [ 2122.428288] Node 0 active_anon:81244kB inactive_anon:35276kB active_file:64kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:225400kB dirty:0kB writeback:0kB shmem:36012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2122.430353] syz-executor.1: [ 2122.461539] Node 1 active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2122.463648] vmalloc: allocation failure, allocated 2659028992 of 3296370688 bytes [ 2122.464562] Node 0 [ 2122.496520] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2122.501767] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2122.512810] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2122.538748] lowmem_reserve[]: 0 [ 2122.541889] CPU: 0 PID: 1239 Comm: syz-executor.1 Not tainted 4.14.222-syzkaller #0 [ 2122.541897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2122.545159] 2717 [ 2122.552930] Call Trace: [ 2122.552952] dump_stack+0x1b2/0x281 [ 2122.552966] warn_alloc.cold+0x96/0x1cc [ 2122.552979] ? zone_watermark_ok_safe+0x220/0x220 [ 2122.553002] __vmalloc_area_node+0x48a/0x680 [ 2122.553017] ? __vmalloc_node_range+0x150/0x150 [ 2122.553025] ? __get_vm_area_node+0x27d/0x340 [ 2122.553038] __vmalloc_node_range+0xbe/0x150 [ 2122.553053] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2122.569196] 2718 [ 2122.570655] vmalloc_user+0x47/0xa0 [ 2122.574646] 2718 [ 2122.579475] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2122.579484] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2122.579493] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2122.579504] __vb2_queue_alloc+0x47a/0xd90 [ 2122.579524] vb2_core_create_bufs+0x279/0x5a0 [ 2122.579535] ? __vb2_queue_free+0x7a0/0x7a0 [ 2122.579549] ? trace_hardirqs_on+0x10/0x10 [ 2122.589796] 2718 [ 2122.593116] ? mark_held_locks+0xa6/0xf0 [ 2122.602856] ? __lock_acquire+0x5fc/0x3f20 [ 2122.604891] Node 0 [ 2122.608513] vb2_create_bufs+0x2e1/0x5b0 [ 2122.608528] ? vb2_thread_start+0x310/0x310 [ 2122.608539] ? trace_hardirqs_on+0x10/0x10 [ 2122.608547] ? mark_held_locks+0xa6/0xf0 [ 2122.608556] ? trace_hardirqs_on+0x10/0x10 [ 2122.608568] vb2_ioctl_create_bufs+0x1f7/0x330 [ 2122.608583] v4l_create_bufs+0xa4/0x150 [ 2122.608595] __video_do_ioctl+0x65b/0x6a0 [ 2122.608611] ? video_ioctl2+0x30/0x30 [ 2122.615279] DMA32 free:18024kB min:36200kB low:45248kB high:54296kB active_anon:81244kB inactive_anon:35276kB active_file:64kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:3292kB bounce:0kB free_pcp:340kB local_pcp:232kB free_cma:0kB [ 2122.620326] ? __might_fault+0x177/0x1b0 [ 2122.620341] video_usercopy+0xf5/0xe90 [ 2122.620353] ? video_ioctl2+0x30/0x30 [ 2122.620364] ? v4l_g_ctrl+0x390/0x390 [ 2122.620373] ? lock_acquire+0x170/0x3f0 [ 2122.620387] ? trace_hardirqs_on+0x10/0x10 [ 2122.620401] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2122.630466] lowmem_reserve[]: [ 2122.633243] v4l2_ioctl+0x1bb/0x2f0 [ 2122.639322] 0 [ 2122.641776] ? v4l2_open+0x2f0/0x2f0 [ 2122.643833] 0 [ 2122.647902] do_vfs_ioctl+0x75a/0xff0 [ 2122.647915] ? ioctl_preallocate+0x1a0/0x1a0 [ 2122.647925] ? lock_downgrade+0x740/0x740 [ 2122.647939] ? __fget+0x225/0x360 [ 2122.647949] ? do_vfs_ioctl+0xff0/0xff0 [ 2122.647960] ? security_file_ioctl+0x83/0xb0 [ 2122.647971] SyS_ioctl+0x7f/0xb0 [ 2122.647979] ? do_vfs_ioctl+0xff0/0xff0 [ 2122.647991] do_syscall_64+0x1d5/0x640 [ 2122.648009] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2122.648016] RIP: 0033:0x465ef9 [ 2122.648021] RSP: 002b:00007feb7458f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2122.648031] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 2122.648037] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 2122.648045] RBP: 00000000004bfa0c R08: 0000000000000000 R09: 0000000000000000 [ 2122.657685] 0 [ 2122.658545] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2122.662862] 0 [ 2122.667093] R13: 00007ffeaa518faf R14: 00007feb7458f300 R15: 0000000000022000 [ 2122.676505] Mem-Info: [ 2122.681596] 0 [ 2122.684066] active_anon:20316 inactive_anon:8819 isolated_anon:0 [ 2122.684066] active_file:16 inactive_file:18 isolated_file:0 [ 2122.684066] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2122.684066] slab_reclaimable:26490 slab_unreclaimable:98367 [ 2122.684066] mapped:56350 shmem:9003 pagetables:823 bounce:0 [ 2122.684066] free:13819 free_pcp:115 free_cma:0 [ 2122.698866] Node 0 active_anon:81244kB inactive_anon:35276kB active_file:64kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:225400kB dirty:0kB writeback:0kB shmem:36012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2122.723294] Node 0 [ 2122.729560] Node 1 active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2122.735271] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2122.738281] Node 0 [ 2122.742324] lowmem_reserve[]: [ 2122.744431] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2122.753355] 0 [ 2122.760386] lowmem_reserve[]: [ 2122.763986] 0 [ 2122.767465] 0 2717 2718 2718 2718 [ 2122.767486] Node 0 DMA32 free:18024kB min:36200kB low:45248kB high:54296kB active_anon:81244kB inactive_anon:35276kB active_file:64kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:3292kB bounce:0kB free_pcp:340kB local_pcp:108kB free_cma:0kB [ 2122.767513] lowmem_reserve[]: [ 2122.777591] 0 [ 2122.783715] 0 [ 2122.791172] 0 [ 2122.791305] 0 [ 2122.795286] 0 [ 2122.801276] 0 [ 2122.819136] 0 [ 2122.822727] Node 1 [ 2122.835809] 0 [ 2122.841361] Normal free:26284kB min:53696kB low:67120kB high:80544kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2122.859597] lowmem_reserve[]: [ 2122.859646] Node 0 [ 2122.895543] 0 [ 2122.935612] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2122.951232] 0 [ 2122.982861] lowmem_reserve[]: [ 2123.007900] 0 [ 2123.016019] 0 [ 2123.049339] 0 [ 2123.055804] 0 [ 2123.057396] 0 [ 2123.059178] 0 [ 2123.063229] 0 [ 2123.065037] Node 0 [ 2123.098590] 0 [ 2123.104065] DMA: [ 2123.134694] 0*4kB [ 2123.135133] Node 1 [ 2123.137013] 1*8kB (U) 1*16kB [ 2123.140128] Normal free:26284kB min:53696kB low:67120kB high:80544kB active_anon:20kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2123.140606] (U) 0*32kB [ 2123.142407] lowmem_reserve[]: [ 2123.144628] 1*64kB [ 2123.152996] 0 [ 2123.156833] (U) [ 2123.191113] 0 [ 2123.193767] 1*128kB [ 2123.194975] 0 [ 2123.196863] (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10968kB [ 2123.201574] 0 [ 2123.210853] Node 0 DMA32: 1640*4kB (ME) 603*8kB (UME) 203*16kB (UME) 65*32kB (M) 15*64kB (UM) 1*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18056kB [ 2123.214631] 0 [ 2123.229642] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2123.242350] Node 0 [ 2123.242352] Node 1 Normal: [ 2123.244594] DMA: [ 2123.244602] 3*4kB (UME) 4*8kB (UME) 2*16kB (UE) 3*32kB (UME) 2*64kB (ME) 3*128kB (UME) 2*256kB (ME) 1*512kB (U) 2*1024kB (ME) 3*2048kB (M) 4*4096kB (M) = 26284kB [ 2123.255506] 0*4kB [ 2123.268646] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2123.274303] 1*8kB (U) [ 2123.279849] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2123.283182] 1*16kB [ 2123.293152] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2123.298898] (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB [ 2123.304261] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2123.304267] (M) [ 2123.316051] 9035 total pagecache pages [ 2123.329945] = 10968kB [ 2123.329992] 0 pages in swap cache [ 2123.332359] Node 0 [ 2123.335839] Swap cache stats: add 0, delete 0, find 0/0 [ 2123.335843] Free swap = 0kB [ 2123.335846] Total swap = 0kB [ 2123.335943] 2097051 pages RAM [ 2123.343469] DMA32: [ 2123.348541] 0 pages HighMem/MovableOnly [ 2123.352225] 1640*4kB [ 2123.352624] 363840 pages reserved [ 2123.354843] (ME) [ 2123.358857] 0 pages cma reserved [ 2123.358865] Out of memory (oom_kill_allocating_task): Kill process 4619 (systemd-journal) score 0 or sacrifice child [ 2123.359235] Killed process 4619 (systemd-journal) total-vm:70672kB, anon-rss:504kB, file-rss:4kB, shmem-rss:24804kB [ 2123.366644] 603*8kB [ 2123.387573] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2123.403242] (UME) 203*16kB (UME) 65*32kB (M) 15*64kB (UM) 1*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18056kB [ 2123.421784] in:imklog cpuset=/ mems_allowed=0-1 [ 2123.431127] CPU: 1 PID: 7703 Comm: in:imklog Not tainted 4.14.222-syzkaller #0 [ 2123.434142] Node 0 [ 2123.438498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2123.438503] Call Trace: [ 2123.438522] dump_stack+0x1b2/0x281 [ 2123.438534] dump_header+0x178/0x82f [ 2123.440771] Normal: [ 2123.450136] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2123.450145] ? ___ratelimit+0x2cd/0x530 [ 2123.450158] oom_kill_process.cold+0x10/0xb18 [ 2123.452741] 0*4kB [ 2123.456386] out_of_memory+0xe3e/0x1190 [ 2123.456400] ? oom_killer_disable+0x1c0/0x1c0 [ 2123.460108] 0*8kB [ 2123.462422] ? mutex_trylock+0x152/0x1a0 [ 2123.467517] 0*16kB [ 2123.471480] __alloc_pages_nodemask+0x23e1/0x2720 [ 2123.476054] 0*32kB [ 2123.478185] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2123.482118] 0*64kB [ 2123.486642] alloc_pages_current+0x155/0x260 [ 2123.486659] filemap_fault+0xea3/0x1980 [ 2123.488787] 0*128kB [ 2123.492867] ext4_filemap_fault+0x84/0xb0 [ 2123.495069] 0*256kB [ 2123.499909] __do_fault+0xfa/0x380 [ 2123.499918] __handle_mm_fault+0x2497/0x4620 [ 2123.499927] ? vm_insert_page+0x7c0/0x7c0 [ 2123.499937] ? lock_downgrade+0x740/0x740 [ 2123.499955] handle_mm_fault+0x391/0x860 [ 2123.502162] 0*512kB [ 2123.507017] __do_page_fault+0x549/0xad0 [ 2123.507029] ? spurious_fault+0x640/0x640 [ 2123.507039] ? do_page_fault+0x60/0x500 [ 2123.509252] 0*1024kB [ 2123.513648] ? page_fault+0x2f/0x50 [ 2123.517618] 0*2048kB [ 2123.519906] page_fault+0x45/0x50 [ 2123.524028] 0*4096kB [ 2123.526380] RIP: 1fa0:0x1f9f [ 2123.526384] RSP: 0000:000055672ad6f9d0 EFLAGS: 7f72817bfda0 [ 2123.531613] Mem-Info: [ 2123.534307] = 0kB [ 2123.538501] active_anon:20316 inactive_anon:8819 isolated_anon:0 [ 2123.538501] active_file:13 inactive_file:11 isolated_file:0 [ 2123.538501] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2123.538501] slab_reclaimable:26487 slab_unreclaimable:98359 [ 2123.538501] mapped:56350 shmem:9003 pagetables:823 bounce:0 [ 2123.538501] free:13819 free_pcp:136 free_cma:0 [ 2123.538516] Node 0 active_anon:81244kB inactive_anon:35276kB active_file:48kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:225400kB dirty:0kB writeback:0kB shmem:36012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2123.538529] Node 1 active_anon:20kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2123.538533] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2123.538551] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2123.538571] Node 0 DMA32 free:18024kB min:36200kB low:45248kB high:54296kB active_anon:81244kB inactive_anon:35276kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:3292kB bounce:0kB free_pcp:424kB local_pcp:276kB free_cma:0kB [ 2123.538588] lowmem_reserve[]: 0 [ 2123.550655] Node 1 [ 2123.553269] systemd-journal: [ 2123.559942] Normal: [ 2123.561533] 0 [ 2123.563920] 3*4kB [ 2123.567585] 0 0 0 [ 2123.575526] (UME) [ 2123.575978] page allocation failure: order:0 [ 2123.578941] 4*8kB (UME) [ 2123.584672] , mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 2123.595087] 2*16kB [ 2123.622350] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2123.622377] lowmem_reserve[]: [ 2123.658085] (UE) [ 2123.676668] 0 [ 2123.709846] 3*32kB [ 2123.738573] (null) [ 2123.745571] (UME) [ 2123.747490] systemd-journal cpuset= [ 2123.749180] 2*64kB (ME) 3*128kB (UME) 2*256kB (ME) 1*512kB (U) 2*1024kB (ME) 3*2048kB [ 2123.751503] / [ 2123.753605] (M) 4*4096kB (M) = 26284kB [ 2123.753625] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2123.753634] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2123.753642] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2123.753649] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2123.756098] mems_allowed=0-1 [ 2123.768241] 9035 total pagecache pages [ 2123.769971] 0 [ 2123.772167] 0 pages in swap cache [ 2123.797768] CPU: 1 PID: 4619 Comm: systemd-journal Not tainted 4.14.222-syzkaller #0 [ 2123.807349] Swap cache stats: add 0, delete 0, find 0/0 [ 2123.809050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2123.811182] Free swap = 0kB [ 2123.814793] Call Trace: [ 2123.822863] Total swap = 0kB [ 2123.824535] dump_stack+0x1b2/0x281 [ 2123.828418] 2097051 pages RAM [ 2123.837239] warn_alloc.cold+0x96/0x1cc [ 2123.837250] ? zone_watermark_ok_safe+0x220/0x220 [ 2123.837258] ? usleep_range+0x130/0x130 [ 2123.837269] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2123.846038] 0 pages HighMem/MovableOnly [ 2123.854842] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2123.863434] 363840 pages reserved [ 2123.866487] ? run_timer_softirq+0x5a0/0x5a0 [ 2123.866504] __alloc_pages_nodemask+0x2127/0x2720 [ 2123.866525] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2123.870378] 0 pages cma reserved [ 2123.872180] alloc_pages_current+0x155/0x260 [ 2123.965516] filemap_fault+0xea3/0x1980 [ 2123.969501] ext4_filemap_fault+0x84/0xb0 [ 2123.973644] __do_fault+0xfa/0x380 [ 2123.977178] __handle_mm_fault+0x2497/0x4620 [ 2123.981578] ? ep_poll+0x1ab/0xa50 [ 2123.985110] ? vm_insert_page+0x7c0/0x7c0 [ 2123.989267] handle_mm_fault+0x391/0x860 [ 2123.993351] __do_page_fault+0x549/0xad0 [ 2123.997409] ? spurious_fault+0x640/0x640 [ 2124.001571] ? do_page_fault+0x60/0x500 [ 2124.005541] ? page_fault+0x2f/0x50 [ 2124.009188] page_fault+0x45/0x50 [ 2124.012669] RIP: 0001:0xffffffffffffffff [ 2124.016739] RSP: 16e711e0:00007ffcc337b610 EFLAGS: 7ffcc337b420 [ 2124.017846] 0 0 0 [ 2124.026093] Node 1 Normal free:26284kB min:53696kB low:67120kB high:80544kB active_anon:20kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2124.053887] lowmem_reserve[]: 0 0 0 0 0 [ 2124.057931] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10968kB [ 2124.071348] Node 0 DMA32: 1640*4kB (ME) 603*8kB (UME) 203*16kB (UME) 65*32kB (M) 15*64kB (UM) 1*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18056kB [ 2124.086423] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2124.097280] Node 1 Normal: 3*4kB (UME) 4*8kB (UME) 2*16kB (UE) 3*32kB (UME) 2*64kB (ME) 3*128kB (UME) 2*256kB (ME) 1*512kB (U) 2*1024kB (ME) 3*2048kB (M) 4*4096kB (M) = 26284kB [ 2124.113352] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2124.122240] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2124.130876] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2124.139754] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2124.149039] 9035 total pagecache pages [ 2124.152928] 0 pages in swap cache [ 2124.156409] Swap cache stats: add 0, delete 0, find 0/0 [ 2124.161761] Free swap = 0kB [ 2124.164762] Total swap = 0kB [ 2124.167851] 2097051 pages RAM [ 2124.170951] 0 pages HighMem/MovableOnly [ 2124.174909] 363840 pages reserved [ 2124.178401] 0 pages cma reserved [ 2124.181760] Out of memory (oom_kill_allocating_task): Kill process 7703 (in:imklog) score 0 or sacrifice child [ 2124.192304] Killed process 7687 (rsyslogd) total-vm:254332kB, anon-rss:1072kB, file-rss:0kB, shmem-rss:0kB [ 2124.203528] oom_reaper: reaped process 4619 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:24804kB [ 2124.241982] Mem-Info: [ 2124.242882] oom_reaper: reaped process 7687 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2124.244428] active_anon:19891 inactive_anon:8819 isolated_anon:0 [ 2124.244428] active_file:16 inactive_file:16 isolated_file:0 [ 2124.244428] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2124.244428] slab_reclaimable:26471 slab_unreclaimable:98346 [ 2124.244428] mapped:56350 shmem:9003 pagetables:823 bounce:0 [ 2124.244428] free:14127 free_pcp:267 free_cma:0 [ 2124.289380] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2124.302042] in:imklog: page allocation failure: order:0, mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 2124.313858] in:imklog cpuset=/ mems_allowed=0-1 [ 2124.318595] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2124.323362] CPU: 1 PID: 7985 Comm: syz-fuzzer Not tainted 4.14.222-syzkaller #0 [ 2124.330802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2124.340151] Call Trace: [ 2124.342737] dump_stack+0x1b2/0x281 [ 2124.346362] dump_header+0x178/0x82f [ 2124.350068] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2124.355360] ? ___ratelimit+0x2cd/0x530 [ 2124.359335] oom_kill_process.cold+0x10/0xb18 [ 2124.363839] out_of_memory+0xe3e/0x1190 [ 2124.367856] ? oom_killer_disable+0x1c0/0x1c0 [ 2124.372345] ? mutex_trylock+0x152/0x1a0 [ 2124.376399] __alloc_pages_nodemask+0x23e1/0x2720 [ 2124.381250] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2124.386102] alloc_pages_current+0x155/0x260 [ 2124.390510] filemap_fault+0xea3/0x1980 [ 2124.394486] ext4_filemap_fault+0x84/0xb0 [ 2124.398631] __do_fault+0xfa/0x380 [ 2124.402190] __handle_mm_fault+0x2497/0x4620 [ 2124.406591] ? vm_insert_page+0x7c0/0x7c0 [ 2124.410743] handle_mm_fault+0x391/0x860 [ 2124.414806] __do_page_fault+0x549/0xad0 [ 2124.418868] ? spurious_fault+0x640/0x640 [ 2124.423029] ? do_page_fault+0x60/0x500 [ 2124.426998] ? page_fault+0x2f/0x50 [ 2124.430616] page_fault+0x45/0x50 [ 2124.434058] RIP: ab080:0x1ee2eb4bc95 [ 2124.437757] RSP: 03e7:000000c000451e40 EFLAGS: 00000003 [ 2124.438637] CPU: 1 PID: 7703 Comm: in:imklog Not tainted 4.14.222-syzkaller #0 [ 2124.451335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2124.460684] Call Trace: [ 2124.463273] dump_stack+0x1b2/0x281 [ 2124.466898] warn_alloc.cold+0x96/0x1cc [ 2124.470893] ? zone_watermark_ok_safe+0x220/0x220 [ 2124.475727] ? usleep_range+0x130/0x130 [ 2124.479710] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2124.484810] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2124.489829] ? run_timer_softirq+0x5a0/0x5a0 [ 2124.494240] __alloc_pages_nodemask+0x2127/0x2720 [ 2124.499089] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2124.503950] alloc_pages_current+0x155/0x260 [ 2124.508438] filemap_fault+0xea3/0x1980 [ 2124.512409] ext4_filemap_fault+0x84/0xb0 [ 2124.516550] __do_fault+0xfa/0x380 [ 2124.520084] __handle_mm_fault+0x2497/0x4620 [ 2124.524654] ? vm_insert_page+0x7c0/0x7c0 [ 2124.528791] ? lock_downgrade+0x740/0x740 [ 2124.532937] handle_mm_fault+0x391/0x860 [ 2124.536987] __do_page_fault+0x549/0xad0 [ 2124.541053] ? spurious_fault+0x640/0x640 [ 2124.545191] ? do_page_fault+0x60/0x500 [ 2124.549157] ? page_fault+0x2f/0x50 [ 2124.552770] page_fault+0x45/0x50 [ 2124.556219] RIP: 1fa0:0x1f9f [ 2124.559238] RSP: 0000:000055672ad6f9d0 EFLAGS: 7f72817bfda0 [ 2124.559382] Node 0 active_anon:79544kB inactive_anon:35276kB active_file:64kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:225400kB dirty:0kB writeback:0kB shmem:36012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2124.572002] Mem-Info: [ 2124.593528] Node 1 active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2124.621275] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2124.630078] active_anon:19891 inactive_anon:8819 isolated_anon:0 [ 2124.630078] active_file:16 inactive_file:16 isolated_file:0 [ 2124.630078] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2124.630078] slab_reclaimable:26471 slab_unreclaimable:98346 [ 2124.630078] mapped:56350 shmem:9003 pagetables:823 bounce:0 [ 2124.630078] free:27652 free_pcp:477 free_cma:0 [ 2124.647872] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2124.685927] Node 0 DMA32 free:19256kB min:36200kB low:45248kB high:54296kB active_anon:79544kB inactive_anon:35276kB active_file:64kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:3292kB bounce:0kB free_pcp:948kB local_pcp:276kB free_cma:0kB [ 2124.714922] lowmem_reserve[]: 0 0 0 0 0 [ 2124.720166] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2124.745811] Node 0 active_anon:79544kB inactive_anon:35276kB active_file:64kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:225400kB dirty:0kB writeback:0kB shmem:36012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2124.773898] lowmem_reserve[]: 0 0 0 0 0 [ 2124.777937] Node 1 Normal free:226216kB min:53696kB low:67120kB high:80544kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:740kB local_pcp:120kB free_cma:0kB [ 2124.806141] Node 1 active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2124.832511] lowmem_reserve[]: 0 0 0 0 0 [ 2124.837058] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10968kB [ 2124.850815] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2124.851057] Node 0 DMA32: 1770*4kB (UME) 639*8kB (UME) 216*16kB (UME) 73*32kB (UM) 16*64kB (UM) 1*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19392kB [ 2124.892288] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2124.903065] Node 1 Normal: 4*4kB (UE) 3*8kB (UE) 4*16kB (UE) 5*32kB (UE) 4*64kB (UE) 5*128kB (UME) 3*256kB (UME) 5*512kB (UM) 3*1024kB (UE) 4*2048kB (UM) 89*4096kB (UM) = 380296kB [ 2124.909256] lowmem_reserve[]: [ 2124.920142] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2124.932805] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2124.935522] 0 2717 2718 2718 2718 [ 2124.943452] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2124.944949] Node 0 DMA32 free:19320kB min:36200kB low:45248kB high:54296kB active_anon:79544kB inactive_anon:35276kB active_file:60kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:3292kB bounce:0kB free_pcp:944kB local_pcp:672kB free_cma:0kB [ 2124.965560] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2124.991336] lowmem_reserve[]: 0 0 0 0 0 [ 2124.999475] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2125.015564] 9281 total pagecache pages [ 2125.028918] lowmem_reserve[]: 0 0 0 0 0 [ 2125.032941] Node 1 Normal free:466408kB min:53696kB low:67120kB high:80544kB active_anon:20kB inactive_anon:0kB active_file:4kB inactive_file:992kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:1308kB local_pcp:648kB free_cma:0kB [ 2125.045590] 0 pages in swap cache [ 2125.064502] Swap cache stats: add 0, delete 0, find 0/0 [ 2125.069955] Free swap = 0kB [ 2125.072966] Total swap = 0kB [ 2125.076051] 2097051 pages RAM [ 2125.079150] 0 pages HighMem/MovableOnly [ 2125.083106] 363840 pages reserved [ 2125.085557] lowmem_reserve[]: 0 0 0 0 0 [ 2125.086644] 0 pages cma reserved [ 2125.090534] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10968kB [ 2125.111071] Node 0 DMA32: 1770*4kB (UME) 668*8kB (UME) 216*16kB (UME) 73*32kB (UM) 16*64kB (UM) 1*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19624kB [ 2125.131738] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2125.142538] Node 1 Normal: 7*4kB (UE) 5*8kB (UME) 7*16kB (UME) 7*32kB (UME) 8*64kB (UME) 5*128kB (UME) 6*256kB (UME) 5*512kB (U) 3*1024kB (UE) 6*2048kB (UM) 136*4096kB (UM) = 578068kB [ 2125.163133] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2125.172013] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2125.184564] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2125.193458] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2125.206380] 9288 total pagecache pages [ 2125.210286] 0 pages in swap cache [ 2125.213752] Swap cache stats: add 0, delete 0, find 0/0 [ 2125.221772] Free swap = 0kB [ 2125.224799] Total swap = 0kB [ 2125.229195] 2097051 pages RAM [ 2125.232318] 0 pages HighMem/MovableOnly [ 2125.238932] 363840 pages reserved [ 2125.242379] 0 pages cma reserved [ 2125.247134] Out of memory (oom_kill_allocating_task): Kill process 7985 (syz-fuzzer) score 0 or sacrifice child [ 2125.260465] Killed process 7990 (syz-executor.0) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 2125.294306] oom_reaper: reaped process 7990 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2125.519792] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2125.534331] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 2125.552714] systemd[1]: rsyslog.service: Unit entered failed state. [ 2125.563394] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 2125.571590] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2125.596646] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2125.604321] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2125.615891] systemd[1]: Stopped Journal Service. [ 2125.631752] systemd[1]: Starting Journal Service... [ 2125.782331] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 2125.920933] systemd-journald[1262]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2127.905571] syz-executor.1 (1239) used greatest stack depth: 24320 bytes left 13:09:17 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x0, @offset, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x1c, 0x1, 0x4, 0x1, 0x2, {0x77359400}, {0x4, 0x1, 0x5, 0x0, 0x1, 0x4, "f12e1e84"}, 0x6, 0x2, @fd, 0x9, 0x0, r1}) 13:09:18 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x0, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:18 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000002c0)={0x3, @pix={0x6, 0x4, 0x35335150, 0x3, 0xb6, 0x3ff, 0x8, 0x6, 0x1, 0x8, 0x1, 0x2}}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x7, 0x50313134, 0x1, @discrete={0x8, 0xfffffff7}}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr={0x3132564e, 0x7f}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00', r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) socket$l2tp6(0xa, 0x2, 0x73) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r4) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f0000000280)={0x0, 0x4, 0xcd, 0x7, 'syz1\x00', 0x9}) 13:09:18 executing program 5: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe4, 0xffff, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) 13:09:18 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0xff, 0x1, 0x3, "dee56653406ee63ef81592a7f4400691a7535ac96470c93a76c73b34b2b33492", 0xb5315241}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x100, 0x2, 0x4, 0x4, 0x7ff, {0x0, 0x2710}, {0x4, 0x1, 0x3, 0x1, 0x81, 0x1, "1d96c8a9"}, 0x10001, 0x3, @fd=r1, 0x3ff}) recvmmsg(r1, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/110, 0x6e}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/80, 0x50}, {&(0x7f0000001b40)=""/4096, 0x1000}], 0x4}, 0x20}, {{&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000480)=""/58, 0x3a}, {&(0x7f00000004c0)=""/16, 0x10}, {&(0x7f0000000500)=""/207, 0xcf}], 0x3, &(0x7f0000000640)=""/221, 0xdd}, 0x5}, {{&(0x7f0000000740)=@can, 0x80, &(0x7f0000002e80)=[{&(0x7f00000007c0)=""/122, 0x7a}, {&(0x7f0000000840)=""/224, 0xe0}, {&(0x7f0000000980)=""/229, 0xe5}, {&(0x7f0000000a80)=""/87, 0x57}, {&(0x7f0000002b40)=""/89, 0x59}, {&(0x7f0000002bc0)=""/174, 0xae}, {&(0x7f0000002c80)=""/59, 0x3b}, {&(0x7f0000002cc0)=""/23, 0x17}, {&(0x7f0000002d00)=""/245, 0xf5}, {&(0x7f0000002e00)=""/71, 0x47}], 0xa, &(0x7f0000002f40)=""/215, 0xd7}, 0xffffffff}, {{&(0x7f0000003040)=@llc, 0x80, &(0x7f0000003180)=[{&(0x7f00000030c0)=""/137, 0x89}], 0x1, &(0x7f00000031c0)=""/155, 0x9b}, 0xd345}, {{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f0000003280)=""/76, 0x4c}, {&(0x7f0000003300)=""/228, 0xe4}, {&(0x7f0000003400)=""/28, 0x1c}, {&(0x7f0000003440)=""/100, 0x64}, {&(0x7f00000034c0)=""/86, 0x56}, {&(0x7f0000003540)=""/140, 0x8c}], 0x6, &(0x7f0000003680)=""/4096, 0x1000}, 0x292}], 0x5, 0x40000000, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280)='wireguard\x00', r2) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4800) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000140)=0x1) 13:09:18 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x8201, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048800}, 0x4010) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r3) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00', 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r4, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0xc005) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0x9, &(0x7f0000000080)=@raw=[@jmp={0x5, 0x0, 0x6, 0x9, 0xb, 0x1, 0xfffffffffffffff0}, @generic={0x0, 0x7, 0x5, 0x2a, 0x3}, @alu={0x7, 0x1, 0x6, 0x5, 0x6, 0xffffffffffffffb2, 0x4}, @map={0x18, 0xf, 0x1, 0x0, r0}, @map={0x18, 0x3}, @alu={0x7, 0x1, 0xc, 0x0, 0xb, 0x30, 0xffffffffffffffe5}, @ldst={0x1, 0x1, 0x0, 0x9, 0x1, 0xc, 0xffffffffffffffff}], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, [], r2, 0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xf, 0x0, 0x9}, 0x10}, 0x78) r6 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) 13:09:18 executing program 5: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe4, 0xffff, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) 13:09:18 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x3549, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) socketpair(0x8, 0x2, 0xc, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048800}, 0x4010) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048800}, 0x4010) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048800}, 0x4010) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048800}, 0x4010) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa4, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000c0) mq_open(&(0x7f0000000380)='.\x8b(\'\x00', 0x800, 0x4d, &(0x7f0000000400)={0x5, 0xfff, 0x5, 0x651ec83}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000240)={0x1, 0xff, 0x7, 0x4, [], [], [], 0x7, 0x8001, 0x8, 0x3, "200010648c3190e8012d7a93606dc22c"}) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x401, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x1402, 0x20, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r9}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 13:09:18 executing program 1: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) 13:09:18 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x20000000, 0x3, 0x2, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe7, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x1, @raw_data="5b24b82861b5bac7854e7a655d766aca27e16a11136ceed6f4bb76edfc43d5c4596f4413073e34925309f86fe9f62768d79682947178e13a83bc0141b0978672eca4589ecf997edaf8bcc56f99e090c2f6eae90d7cfc7bdd2c1ff2f88dbcc35afe99e431441adeec3bde766d892f4b73319da2b0ca08182e42e3c85c79687085f25a6f79e90f3336f409946ee09d1a01cfe15d8501051b33cb17ee850c0e2542b5de218535211adba254be8804e6551f1a05f956edf32d836800cd654c9313a5fe5fbdf0717a6533"}) 13:09:18 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000080)={0x1, @pix={0x1000, 0x6, 0x30313953, 0x6, 0xffffffff, 0xb1, 0x6, 0x14000000, 0x0, 0x8, 0x2, 0x2}}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000240)) 13:09:18 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x0, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:18 executing program 1: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x6800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', r1) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, &(0x7f0000000000)=0x293) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r1, 0x4122, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x2000, [0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81]}}}) 13:09:18 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x4}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x7c001, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f00000003c0)={0xfff, 0x1, 0xff, 0x45, [], [], [], 0x7, 0x5, 0x1000, 0x10001, "c5b8b3223b88c661e7f3b6aa98ab5e0e"}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x3, @pix={0xff, 0x3, 0x38414262, 0x3, 0x52e, 0x4, 0x3, 0x1, 0x1, 0x3, 0x3}}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r3) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000280)={0x0, @sdr={0x34343459, 0x5}}) [ 2128.525273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2128.547162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2128.560520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2128.568937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2128.601042] device bridge_slave_1 left promiscuous mode [ 2128.607236] bridge0: port 2(bridge_slave_1) entered disabled state [ 2128.620852] device bridge_slave_0 left promiscuous mode [ 2128.650487] bridge0: port 1(bridge_slave_0) entered disabled state [ 2128.669800] device veth1_macvtap left promiscuous mode [ 2128.680630] device veth0_macvtap left promiscuous mode [ 2128.686702] device veth1_vlan left promiscuous mode [ 2128.691840] device veth0_vlan left promiscuous mode [ 2128.804687] device hsr_slave_1 left promiscuous mode [ 2128.812943] device hsr_slave_0 left promiscuous mode [ 2128.832375] team0 (unregistering): Port device team_slave_1 removed [ 2128.846284] team0 (unregistering): Port device team_slave_0 removed [ 2128.857537] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2128.869015] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2128.897339] bond0 (unregistering): Released all slaves [ 2130.582474] IPVS: ftp: loaded support on port[0] = 21 [ 2130.690814] chnl_net:caif_netlink_parms(): no params data found [ 2130.747409] bridge0: port 1(bridge_slave_0) entered blocking state [ 2130.753931] bridge0: port 1(bridge_slave_0) entered disabled state [ 2130.761869] device bridge_slave_0 entered promiscuous mode [ 2130.768940] bridge0: port 2(bridge_slave_1) entered blocking state [ 2130.775320] bridge0: port 2(bridge_slave_1) entered disabled state [ 2130.782896] device bridge_slave_1 entered promiscuous mode [ 2130.802363] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2130.811922] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2130.830708] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2130.838100] team0: Port device team_slave_0 added [ 2130.843462] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2130.851558] team0: Port device team_slave_1 added [ 2130.869569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2130.876486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2130.902508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2130.913966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2130.920721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2130.946376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2130.958619] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2130.966357] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2130.988124] device hsr_slave_0 entered promiscuous mode [ 2130.993717] device hsr_slave_1 entered promiscuous mode [ 2131.001055] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2131.008797] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2131.079903] bridge0: port 2(bridge_slave_1) entered blocking state [ 2131.086288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2131.092866] bridge0: port 1(bridge_slave_0) entered blocking state [ 2131.099267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2131.130327] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2131.137778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2131.145974] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2131.154146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2131.161927] bridge0: port 1(bridge_slave_0) entered disabled state [ 2131.179231] bridge0: port 2(bridge_slave_1) entered disabled state [ 2131.190756] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2131.197170] 8021q: adding VLAN 0 to HW filter on device team0 [ 2131.205683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2131.213295] bridge0: port 1(bridge_slave_0) entered blocking state [ 2131.219693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2131.229882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2131.239666] bridge0: port 2(bridge_slave_1) entered blocking state [ 2131.246076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2131.261363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2131.269223] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2131.280685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2131.292160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2131.302183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2131.312776] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2131.318972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2131.333032] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2131.340324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2131.347095] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2131.358338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2131.411771] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2131.423389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2131.457221] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2131.464277] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2131.471088] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2131.480224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2131.488706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2131.496308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2131.504756] device veth0_vlan entered promiscuous mode [ 2131.514683] device veth1_vlan entered promiscuous mode [ 2131.520979] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2131.530284] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2131.542156] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2131.553082] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2131.561279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2131.569206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2131.579479] device veth0_macvtap entered promiscuous mode [ 2131.585492] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2131.594790] device veth1_macvtap entered promiscuous mode [ 2131.603958] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2131.613130] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2131.622067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2131.632192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2131.641378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2131.651157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2131.660515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2131.670309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2131.679552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2131.689342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2131.698657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2131.708616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2131.719464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2131.729887] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2131.737585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2131.746652] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2131.754682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2131.765001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2131.774327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2131.784108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2131.793256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2131.803038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2131.812322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2131.822113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2131.831318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2131.841094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2131.851139] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2131.858155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2131.865288] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2131.873535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 13:09:22 executing program 0: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000200)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4080) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') 13:09:22 executing program 1: ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x8, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x2abc}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000080)={0x0, @sliced={0xff80, [0x5, 0x4, 0x6f5e, 0x6, 0x4, 0x4, 0x36, 0x400, 0x0, 0x7, 0xa94, 0xfbff, 0x200, 0x1000, 0xaf, 0x6498, 0x9, 0x3, 0xfff7, 0x6, 0x7, 0x7aba, 0x5, 0x3f, 0xe4, 0x4e, 0x1, 0x2, 0x3, 0x200, 0x200, 0xffff, 0x6, 0x7ff, 0x5, 0x6, 0x2, 0x7, 0x8, 0x8, 0x9, 0x7, 0x1, 0x9, 0x0, 0xeed, 0x6, 0x401], 0x7}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000440)={0xfffffffc, 0x1, 0x4, 0x810, 0x4, {}, {0x1, 0xc, 0x1, 0x5, 0x2, 0x4, "83bc3582"}, 0x7, 0x2, @userptr=0x3, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x8, 0x3, 0x3}) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x4000) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000340)={0x45, 0x2, 0x4, 0x20, 0x2, {}, {0x5, 0x0, 0x1, 0x3, 0x4, 0xfc, "0588ebc0"}, 0x661e, 0x1, @fd=r1, 0xfffffff9, 0x0, r0}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000003c0)={0x2, 0x3, 0x4, 0x4000, 0x6, {0x77359400}, {0x1, 0xc, 0x5, 0xff, 0x5f, 0x1, "bd1b9c59"}, 0xe03, 0x3, @fd=r3, 0x95a6, 0x0, r4}) 13:09:22 executing program 5: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe4, 0xffff, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) 13:09:22 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0x0, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:22 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:22 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x1, 0x3, 0x1, {0x1, @sliced={0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0xdc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xd79d], 0x4}}}) 13:09:22 executing program 0: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000200)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4080) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') 13:09:22 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x401, 0x38414761, 0x2, @stepwise={0xfffffffe, 0x2, 0x6, 0x4, 0x9, 0x7f}}) 13:09:22 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0x0, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:22 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0xfe, 0x0, 0x80, 0x2, "2f3fe808"}}) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140)='mptcp_pm\x00', 0xffffffffffffffff) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x4800) ioctl$SNDRV_PCM_IOCTL_START(r2, 0x4142, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc805}, 0x20000000) 13:09:22 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0x0, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:22 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x100, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d4}, 0x4008800) recvmmsg(r1, &(0x7f0000008a00)=[{{&(0x7f0000000780)=@tipc, 0x80, &(0x7f0000000880)=[{&(0x7f0000000800)=""/112, 0x70}, {&(0x7f0000000980)=""/232, 0xe8}], 0x2}, 0x7}, {{&(0x7f00000008c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000a80)=""/90, 0x5a}, {&(0x7f0000000b40)=""/39, 0x27}, {&(0x7f0000000b80)=""/245, 0xf5}], 0x3, &(0x7f0000000cc0)=""/202, 0xca}}, {{&(0x7f0000000dc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/103, 0x67}, {&(0x7f0000000ec0)=""/46, 0x2e}, {&(0x7f0000000f00)=""/150, 0x96}, {&(0x7f0000000fc0)=""/160, 0xa0}, {&(0x7f0000001080)=""/64, 0x40}, {&(0x7f00000010c0)=""/64, 0x40}, {&(0x7f0000001100)=""/82, 0x52}], 0x7, &(0x7f0000001200)=""/76, 0x4c}, 0x1}, {{&(0x7f0000001280)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000001540)=[{&(0x7f0000001300)=""/96, 0x60}, {&(0x7f0000001380)=""/188, 0xbc}, {&(0x7f0000001440)=""/204, 0xcc}], 0x3, &(0x7f0000001580)=""/96, 0x60}, 0x8000}, {{0x0, 0x0, &(0x7f0000005800)=[{&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/89, 0x59}, {&(0x7f0000002680)=""/85, 0x55}, {&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/129, 0x81}, {&(0x7f00000047c0)}, {&(0x7f0000004800)=""/4096, 0x1000}], 0x8, &(0x7f0000005880)=""/130, 0x82}, 0x5}, {{0x0, 0x0, &(0x7f0000006c80)=[{&(0x7f0000005940)=""/150, 0x96}, {&(0x7f0000005a00)=""/209, 0xd1}, {&(0x7f0000005b00)=""/198, 0xc6}, {&(0x7f0000005c00)=""/4096, 0x1000}, {&(0x7f0000006c00)=""/81, 0x51}], 0x5, &(0x7f0000006d00)=""/71, 0x47}, 0x2}, {{&(0x7f0000006d80)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000008200)=[{&(0x7f0000006e00)=""/4096, 0x1000}, {&(0x7f0000007e00)=""/114, 0x72}, {&(0x7f0000007e80)=""/218, 0xda}, {&(0x7f0000007f80)=""/43, 0x2b}, {&(0x7f0000007fc0)=""/43, 0x2b}, {&(0x7f0000008000)=""/81, 0x51}, {&(0x7f0000008080)=""/228, 0xe4}, {&(0x7f0000008180)=""/117, 0x75}], 0x8, &(0x7f0000008280)=""/228, 0xe4}, 0x2d9f}, {{&(0x7f0000008380)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000008580)=[{&(0x7f0000008400)=""/171, 0xab}, {&(0x7f00000084c0)=""/172, 0xac}], 0x2}, 0x4}, {{&(0x7f00000085c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f00000088c0)=[{&(0x7f0000008640)=""/47, 0x2f}, {&(0x7f0000008680)=""/109, 0x6d}, {&(0x7f0000008700)=""/141, 0x8d}, {&(0x7f00000087c0)=""/191, 0xbf}, {&(0x7f0000008880)=""/61, 0x3d}], 0x5, &(0x7f0000008940)=""/183, 0xb7}, 0x5}], 0x9, 0x2001, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00', r3) r4 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000180)={0x0, 0x7fff, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xa3, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x64, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xf000], 0x4}}}) 13:09:22 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x5, 0x41416770, 0x1, @stepwise={0x7, 0x9, 0x0, 0x1f, 0x7, 0x1ff}}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x10000, 0xfffffffe, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) r2 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x5, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x3, 0x1}) [ 2132.636281] Bluetooth: hci5 command 0x0409 tx timeout 13:09:22 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000100)=""/213) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)={0xe7a, 0x3, 0x4, 0x0, 0x9, {0x77359400}, {0x4, 0x0, 0x6, 0x6, 0x6, 0x1, "9ab6f6f6"}, 0xffffff7f, 0x4, @offset=0x3250, 0x2}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000280)={0x0, 0x3, 0x2, {0x1, @sliced={0x9, [0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7b3]}}}) 13:09:22 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:22 executing program 5: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe4, 0xffff, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) 13:09:22 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x0, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:22 executing program 0: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000200)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4080) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x0, [{}, {}, {0x1}]}}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x210081, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000001c0)={0x8, 0x8000}) 13:09:23 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x0, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:23 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x0, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:23 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x0, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:23 executing program 5: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe4, 0xffff, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) 13:09:23 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000180)={0x3, @vbi={0xffffffff, 0x9, 0x79, 0x31435750, [0x8, 0x3975], [0x2], 0x108}}) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x5, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000280)={0x3, @raw_data="9dfa9f88dc085c30a566324f21aed19ce7a73eb8f68a608f53d5cef96abbee8a1f6f6a01e23cf6c9f60812314addcc546d5560d1d4b6bda9c6af006306f696a4da83c06d0a4d48e095a46e0933dbd7197ca06d060d90f1bf9923526c0a0d2d20bf1608517d53f4b83720f3416f140b22eb4c1dc0e2ae71f0186276259bbd8cac00d20ee039c5dc3d92c322da30ce368e343ed2ce8a6b156bb4ee253c2b901f429376d9e2cd24804297ad236d88c6c15a4b631489d7b3c5a45f6b8b41a2388cf5b42eb1335b4a0216"}) 13:09:23 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x110) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) 13:09:23 executing program 0: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000200)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4080) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x0, [{}, {}, {0x1}]}}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x210081, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000001c0)={0x8, 0x8000}) 13:09:23 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x101000, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)={0x0, 0x3, 0x4, 0x1, 0x4, {0x77359400}, {0x1, 0x1, 0x0, 0x0, 0x3f, 0x1f, "4255f010"}, 0x0, 0x4, @offset=0x2, 0x8001, 0x0, r1}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0x101, 0x4, 0x1}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:23 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x0, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:23 executing program 5: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe4, 0xffff, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) 13:09:23 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:23 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe4, 0xffff, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) 13:09:23 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x0, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:23 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900b, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x400000, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000080)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) recvmmsg(r2, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)}, {&(0x7f00000002c0)=""/168, 0xa8}, {&(0x7f0000000380)=""/93, 0x5d}], 0x3, &(0x7f0000000440)=""/4096, 0x1000}, 0x80000001}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000001440)=""/166, 0xa6}, {&(0x7f0000001500)=""/81, 0x51}, {&(0x7f0000001580)=""/29, 0x1d}, {&(0x7f00000015c0)=""/188, 0xbc}, {&(0x7f0000001680)=""/209, 0xd1}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x6, &(0x7f0000002800)=""/55, 0x37}, 0x9}, {{0x0, 0x0, &(0x7f0000002840)}, 0xbf}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002880)=""/183, 0xb7}, {&(0x7f0000002940)=""/178, 0xb2}, {&(0x7f0000002a00)=""/255, 0xff}], 0x3, &(0x7f0000002b40)=""/22, 0x16}, 0x2}, {{&(0x7f0000002b80)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002c00)=""/115, 0x73}, {&(0x7f0000002c80)=""/63, 0x3f}, {&(0x7f0000002cc0)=""/244, 0xf4}, {&(0x7f0000002dc0)=""/46, 0x2e}], 0x4, &(0x7f0000002e40)=""/4096, 0x1000}, 0x4}], 0x5, 0x10001, &(0x7f0000003f80)={0x77359400}) 13:09:23 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:23 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000080)) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x1000, 0x0, {0x77359400}, {0x3, 0x0, 0x0, 0x0, 0x1, 0x4, "2f3fe808"}, 0x0, 0x3, @planes=&(0x7f00000000c0)={0x5a6, 0x7, @mem_offset=0x1f, 0x9}}) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000100)) 13:09:23 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xa056, 0x81a8}) 13:09:23 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:23 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe4, 0xffff, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) 13:09:23 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0xe7, 0x0, 0x8101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff]}}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 13:09:23 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000140)=""/40, 0x28, 0x5, &(0x7f0000000400)={0x0, 0x989680}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)={0xd7, 0x1, 0x4, 0x800, 0x400, {0x0, 0xea60}, {0x2, 0xc, 0x81, 0x1f, 0xf, 0xc0, "0000fb00"}, 0x4, 0x3, @fd=0xffffffffffffffff, 0x400, 0x0, 0xffffffffffffffff}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r5) ioctl$vim2m_VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f0000000440)={0x0, 0x3, 0x4, 0x4000, 0x2, {0x0, 0x2710}, {0x2, 0xc, 0xc3, 0xf7, 0x80, 0x7, 'oQE*'}, 0x6, 0x1, @offset, 0x15, 0x0, r4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000200)={0x100, 0x1, 0x4, 0x40, 0x7fff, {0x77359400}, {0x2, 0x1, 0x40, 0x72, 0x0, 0x9, "ef87b4f2"}, 0x4, 0x3, @planes=&(0x7f0000000100)={0x0, 0x7, @fd, 0xcf}, 0x3, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x0, @sdr={0x34524742, 0xfffff800}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000280)={0x5, 0x3, 0x4, 0x400, 0x1, {r1, r2/1000+10000}, {0x5, 0x8, 0x4a, 0x1, 0x80, 0x4, "831b0eb0"}, 0x10001, 0x2, @fd=r3, 0x1, 0x0, r6}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:23 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe4, 0xffff, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) 13:09:24 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) 13:09:24 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:24 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe4, 0xffff, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) 13:09:24 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe4, 0xffff, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) 13:09:24 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:24 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe4, 0xffff, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) 13:09:24 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe4, 0xffff, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) 13:09:24 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0xe7, 0x0, 0x8101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff]}}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 13:09:24 executing program 1: sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240), 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xb2fd, 0x75}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7fff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7fff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1ff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1b}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8000}, @NL80211_ATTR_NOACK_MAP={0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000010}, 0x200400c0) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x3, 0x2, {0x1, @sliced={0xffff, [0x0, 0x41, 0x0, 0x0, 0x1a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, 0xfffffffe}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000080)={0x1, @pix={0x7, 0x2, 0x64737664, 0x4, 0x7, 0x3, 0x4, 0x5, 0x1, 0x2, 0x2, 0x6}}) syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x716402b7, 0x2) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000180)) r2 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x4, 0x2) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x101, 0x40080) ioctl$SNDRV_PCM_IOCTL_STATUS32(r3, 0x806c4120, &(0x7f0000000480)) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000280)={0x1, @sliced={0x3, [0x20, 0x1c91, 0x8, 0x2, 0x20, 0x5, 0x6, 0x1, 0x0, 0x70, 0x3, 0x3da, 0x0, 0x2, 0x8, 0x2, 0xc4, 0x3, 0x4, 0x7, 0x9, 0x3, 0x0, 0x40, 0x30b2, 0x7, 0x6, 0x4, 0xfffc, 0x4, 0xfffe, 0x0, 0x0, 0x3, 0xff, 0x8, 0x40, 0x8000, 0x80dd, 0xfff, 0x3, 0x80, 0xfff9, 0x7ff, 0x8, 0xff83, 0x5, 0x3], 0xfffffff8}}) 13:09:24 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) socket$inet6_udp(0xa, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000200)={{0x0, 0x6, 0x7fff, 0x8000, 'syz0\x00', 0xd88}, 0x3, 0x20000000, 0x3, 0x0, 0x4, 0xcb4, 'syz1\x00', &(0x7f0000000080)=['/dev/video#\x00', '/dev/video#\x00', '}\']/\x00', '\'^-\x00'], 0x21, [], [0x2, 0x4, 0x4, 0xd8]}) 13:09:24 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 13:09:24 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:24 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x0, @pix={0x2, 0x7, 0x32525942, 0x5, 0x3, 0x10001, 0x7, 0xfffeffff, 0x1, 0x4, 0x0, 0x5}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:24 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 13:09:24 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:24 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x7, 0xffff, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:24 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}}, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x8080) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r5, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r6, 0x200, 0x70bd29, 0x25dfdbfb, {}, ["", ""]}, 0x14}}, 0x4040000) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r2, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffffc, 0x66}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) 13:09:24 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0xfffffffd, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x0, @offset=0x4}) 13:09:24 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 13:09:24 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe4, 0xffff, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) 13:09:24 executing program 0: socketpair(0xb, 0x5, 0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4000800) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000200)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4080) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x0, 0x0, [{}, {}, {0x1}]}}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x210081, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/pid\x00') ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000001c0)={0x8, 0x8000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x18, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001700)={'batadv_slave_0\x00'}) 13:09:24 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe4, 0xffff, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) 13:09:24 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:24 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe4, 0xffff, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) [ 2134.725667] Bluetooth: hci5 command 0x041b tx timeout 13:09:24 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000100)={0x8, 0x1, 0x4, 0x1, 0xfffffffd, {}, {0x0, 0x2, 0x4, 0x4, 0x0, 0x6, "e1b9a4ab"}, 0x81, 0x2, @planes=&(0x7f00000000c0)={0x80000000, 0x8, @fd=0xffffffffffffffff}, 0x3}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000200)={0x800, 0x2, 0x4, 0x1000, 0x2, {}, {0x5, 0x8, 0x20, 0x1, 0xd3, 0x7f, "532387a9"}, 0xfffffffa, 0x1, @offset=0x9, 0x3f, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000280)={0x7, 0x1, 0x4, 0x4, 0x5, {r2, r3/1000+10000}, {0x2, 0x2, 0x7, 0x1, 0x1a, 0x69, "94585919"}, 0x61, 0x1, @fd=r4, 0x0, 0x0, r5}) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nvram\x00', 0x80002, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000440)={0x3, @win={{0x7fff, 0x8, 0xad00000, 0x4}, 0x3, 0x1, &(0x7f0000000340)={{0x9, 0x10001, 0x0, 0x1ff}}, 0x94, &(0x7f0000000380)="0ac03f8953c11ab8e33ef7980561f8637484382062ce788de700cb912994d09106a4d4ca0470666dc8d078bb2a56d339b323170e3ac4d2742b44e4e71cd8310cbfd3738029c065f596a80e3a384b3426af65db6f659401c74bfbcb966164a039564a7f08d67dbe1382535d8c0ce95066bf152163eb2dbb54771d72cb33b2bc8a435ea737b472d4a1ee620807dbb7e9cd38c92b57226df0d6a7a9502dbe21abc5ba7476ac23", 0x40}}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x20, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:24 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) r1 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x101, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x2000, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) ioctl$VFIO_GET_API_VERSION(r2, 0x3b64) r3 = getpid() syz_open_procfs$namespace(r3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000280)={{0x9, 0x3, 0x20, 0x80, '\x00', 0x400}, 0x4, 0x40, 0x1000, r3, 0x2, 0xcf, 'syz0\x00', &(0x7f0000000100)=['/dev/video#\x00', '+\x00'], 0xe, [], [0x1000, 0xec8, 0x7, 0x9]}) ioprio_set$uid(0x0, 0xffffffffffffffff, 0x4007) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r5) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f00000003c0)={0x8, 0x9, 0xe8, 0xcab, [], [], [], 0x2, 0x7f, 0x4, 0x100, "1190c705e9b1d8111c32e6a27f0a8395"}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f00000000c0)=""/64) 13:09:24 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002d00)=[{{&(0x7f0000000080)=@ax25={{}, [@netrom, @null, @remote, @default, @netrom, @netrom, @remote, @rose]}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000280)=""/163, 0xa3}, {&(0x7f0000000000)=""/21, 0x15}, {&(0x7f0000000340)=""/167, 0xa7}, {&(0x7f0000000100)=""/24, 0x18}, {&(0x7f0000000400)=""/195, 0xc3}, {&(0x7f0000000140)}], 0x6, &(0x7f0000000580)=""/74, 0x4a}, 0xffff8001}, {{&(0x7f0000000600)=@isdn, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)=""/143, 0x8f}, {&(0x7f0000000740)=""/200, 0xc8}, {&(0x7f0000000840)=""/8, 0x8}], 0x3, &(0x7f00000008c0)=""/79, 0x4f}, 0x67c9}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000940)=""/129, 0x81}, {&(0x7f0000000a00)=""/117, 0x75}, {&(0x7f0000000a80)=""/219, 0xdb}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/222, 0xde}, {&(0x7f0000001c80)=""/47, 0x2f}, {&(0x7f0000001cc0)=""/214, 0xd6}, {&(0x7f0000001dc0)=""/57, 0x39}], 0x8, &(0x7f0000001e80)=""/106, 0x6a}, 0x939}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000001f00)=""/124, 0x7c}, {&(0x7f0000001f80)=""/87, 0x57}, {&(0x7f0000002000)=""/176, 0xb0}, {&(0x7f00000020c0)=""/47, 0x2f}, {&(0x7f0000002100)=""/213, 0xd5}, {&(0x7f0000002200)=""/182, 0xb6}], 0x6}, 0x1}, {{&(0x7f0000002340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000027c0)=[{&(0x7f00000023c0)=""/66, 0x42}, {&(0x7f0000002440)=""/154, 0x9a}, {&(0x7f0000002500)=""/89, 0x59}, {&(0x7f0000002580)=""/253, 0xfd}, {&(0x7f0000002680)=""/24, 0x18}, {&(0x7f00000026c0)=""/207, 0xcf}], 0x6}, 0x8}, {{&(0x7f0000002840)=@l2tp, 0x80, &(0x7f0000002bc0)=[{&(0x7f00000028c0)=""/251, 0xfb}, {&(0x7f00000029c0)=""/37, 0x25}, {&(0x7f0000002a00)=""/164, 0xa4}, {&(0x7f0000002ac0)=""/249, 0xf9}], 0x4, &(0x7f0000002c00)=""/232, 0xe8}, 0x4}], 0x6, 0x1, &(0x7f0000002e80)) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:24 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0xfffffffd, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x0, @offset=0x4}) 13:09:24 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x0, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe4, 0xffff, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) 13:09:24 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x0, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe4, 0xffff, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) 13:09:24 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000200)={0x1, @win={{0x9, 0x1ff, 0x3f, 0x1}, 0x6, 0x1, &(0x7f0000000000)={{0x4, 0x0, 0x401, 0x8}}, 0x2, &(0x7f0000000080)="801e8f4e2dcd9e01cbfa63f5615e014e6b4fe2d2c69e338fa82ad91dd8a178e46b33e9188f7f52902898d637b73c532c30a8f9351a57f9f7d16b507043d39e3b0c0de1975a1b6dc8c3fe0b276aa52b4dbf23f536e8fa88b83c3d8fcdf35a93b32546d747422452fbed567823b960c8a5a1d0b732b85664c3eba3eda1ffcb482e6c802b59a846f210e322f88d584bb10eda9a17ead33478aefd223b9cfe5e3e3f0e8af4ca28176ee5c2baf289805bc137364d316d91b3a4f28d6108e1b3349289a3903d6e8e", 0x81}}) 13:09:24 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0xfffffffd, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x0, @offset=0x4}) 13:09:24 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:24 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x0, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe4, 0xffff, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) 13:09:24 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x0, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe4, 0xffff, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) 13:09:24 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x0, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe4, 0xffff, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) 13:09:24 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x0, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe4, 0xffff, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) 13:09:25 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) 13:09:25 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000080)={0x200, 0x0, 0x4, 0x4000, 0x5, {r2, r3/1000+10000}, {0x1, 0x1, 0x4, 0x9, 0x3f, 0x6d, "54bccb1d"}, 0x5, 0x1, @offset=0x2, 0x7f, 0x0, 0xffffffffffffffff}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r5) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f00000003c0)={0x2, @win={{0x10000, 0x8001, 0xfffffffb}, 0x8, 0xfff, &(0x7f0000000280)={{0x4, 0x3, 0x2, 0x3}}, 0x8001, &(0x7f00000002c0)="32e1a8191f3768e5e0d72fb1b4eae7cd453812a0a3305c56b86b8211c71eaf1195eaf2e8255ddfb1c8246c89a7f7ddeb1653eeaf6bd68eb4a642aac50309d9120cf2c9381842a9b063108cb1e50d253ed354b66876266c68a3fa7422a0f879a5be53eea40c1d46cf48dd67eab87d6853aff68ae1354593101796632395dde180b593641486a90902b0d47b76b28025850e1ccd3a85d7d49bb18c196877bed848eece59ceeaf4390c8bb32f957c2666537925f1cd895b89357aaa88a16bc4a7a7ec4475ccf8842aca27378a60241f47ff4863febd0e1dd61826777ead2c2c38a4c994dafdea62c169075e115720502d6f9037", 0x7}}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)={0x2, 0x1, 0x4, 0x0, 0xbe26, {0x0, 0xea60}, {0x5, 0x1, 0x5b, 0x3, 0x0, 0x0, "f8a9e64d"}, 0x3f, 0x4, @userptr=0x8000, 0x0, 0x0, r4}) 13:09:25 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe4, 0xffff, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100]}}}) 13:09:25 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0xfffffffd, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x0, @offset=0x4}) 13:09:25 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:25 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x100000000, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x8, 0x10000, 0x2, {0x2, @pix={0x40, 0x9, 0x20303159, 0x1, 0x6, 0x6, 0xa, 0x3, 0x0, 0x3, 0x0, 0x4}}}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:25 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x10000, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xe7, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffd]}}}) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0x80000000, 0x9}) 13:09:25 executing program 0: ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0xfffffffd, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x0, @offset=0x4}) 13:09:25 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = getpid() r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0xc02, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000000c0)={0x9, 0x2}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000200)={{0x3, 0x2, 0x14, 0xe9, 'syz0\x00', 0x5}, 0x2, 0x1, 0x1, r1, 0x4, 0xffffffff, 'syz1\x00', &(0x7f0000000000)=['/dev/video#\x00', '\'\xbb:\x00', '^)}\x00', '\x00'], 0x15, [], [0x6, 0x9, 0x800, 0x59]}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x7ff, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, @userptr=0xa7}) 13:09:25 executing program 0: ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0xfffffffd, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x0, @offset=0x4}) 13:09:25 executing program 0: ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0xfffffffd, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x0, @offset=0x4}) 13:09:25 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe4, 0xffff, 0x101]}}}) 13:09:25 executing program 0: r0 = syz_open_dev$vim2m(0x0, 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0xfffffffd, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x0, @offset=0x4}) 13:09:25 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:25 executing program 0: r0 = syz_open_dev$vim2m(0x0, 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0xfffffffd, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x0, @offset=0x4}) 13:09:25 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x0, @userptr=0x100}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x6, @vbi={0x0, 0x1, 0x7, 0x3436324d, [0x3, 0x80], [0x2, 0x1], 0x1}}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0x7, 0x9}) 13:09:25 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:25 executing program 0: r0 = syz_open_dev$vim2m(0x0, 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0xfffffffd, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x0, @offset=0x4}) 13:09:25 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff]}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000000)=0x1) ioctl$VFIO_GET_API_VERSION(r1, 0x3b64) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @win={{0xc96, 0xfffe, 0x2d9, 0x2}, 0x8, 0x4793, &(0x7f0000000300)={{0x8, 0x400, 0xa}, &(0x7f00000002c0)={{0x4, 0x40, 0x8, 0x9}, &(0x7f0000000280)={{0x8, 0x5, 0x5, 0x8}}}}, 0x1f, &(0x7f00000003c0)="35e633623b34a86568aaf80b1b7e1c988f69a04a61db2c619ddcc0f3571f20e3dd0b24d8568e902f91f7278d904129867080ffd00ca7b7ca2eba0190024c256bf0342510d948f2a5648145a545ccdfc3450e575ac3a4a49a1be057d20dec", 0x2}}) 13:09:25 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) r1 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x3) 13:09:25 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0xfffffffd, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x0, @offset=0x4}) 13:09:25 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe4, 0xffff]}}}) 13:09:25 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xffffff01, 0xfff}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x7f, 0x0, 0x0, 0x20, "2f3fe808"}}) 13:09:25 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0xfffffffd, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x0, @offset=0x4}) 13:09:25 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:25 executing program 2: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) 13:09:25 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) 13:09:25 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0xfffffffd, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x0, @offset=0x4}) 13:09:25 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x2, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0xffa2, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x1], 0x4}}}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000340)={0x7, 0x0, 0x2, "642bd8c05b12f9d1f0f79fd630779b25cc3d7c3d8d1479d407f076b48960cdb0", 0x32435750}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc01d}, 0x48002) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00', r5) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000128bd7000fbdbdf25095693065152c9bf3f4849406bdd000000060028000200000005003500300000006508f2c6ce8ce52a50b03f49b5f49e6b6e71961c475ae02fe6c442c69130336ef8476f553330cb8ab2212b4cfb8e4cf98845d8bf71bc7be15c01ef861dc42e8f3f8bfce555fdd83578e49c899561a30b34bd1df32ada89a83f614b3a88"], 0x24}}, 0xc000) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x3f, 0x3, 0x4, 0x0, 0x4, {r2, r3/1000+60000}, {0x5, 0x0, 0x40, 0x81, 0x5, 0x0, "b5944c5d"}, 0x8, 0x4, @userptr=0x8001, 0x3, 0x0, r6}) 13:09:25 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe4]}}}) 13:09:25 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x3, 0x0, 0x4, 0x0, 0x80000000, {0x77359400}, {0x5, 0xc, 0xfe, 0x0, 0x0, 0x8}, 0x0, 0x0, @planes=&(0x7f0000000080)={0x8, 0x5, @fd, 0xfffeffff}, 0x0, 0x0, r1}) 13:09:25 executing program 0: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0xfffffffd, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x0, @offset=0x4}) 13:09:26 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2]}}}) 13:09:26 executing program 0: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0xfffffffd, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x0, @offset=0x4}) 13:09:26 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}) 13:09:26 executing program 0: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0xfffffffd, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x0, @offset=0x4}) 13:09:26 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}) 13:09:26 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2]}}}) 13:09:26 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(0xffffffffffffffff, 0x40044104, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0xe7, 0x0, 0x101, 0x0, 0x0, 0x3f]}}}) 13:09:26 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="faffffff", @ANYRES16=0x0, @ANYBLOB="200025bd7000fddbdf257f00000008000300", @ANYRES32=r1, @ANYBLOB="0a00f50050505050505000000a0034000101010101010000"], 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x42) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) 13:09:26 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x0, 0x4}) 13:09:26 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}) 13:09:26 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, 0x0) 13:09:26 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4]}}}) 13:09:26 executing program 3: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x3, 0x3, 0x4, 0x0, 0x3, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0xfec, 0x0, @offset, 0x5740}) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000080)=""/81) 13:09:26 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, 0x0) 13:09:26 executing program 2: ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x81) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffd], 0x4}}}) pipe(&(0x7f0000000000)) 13:09:26 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0xffffffb5, 0x2, 0x0, {0x77359400}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)) 13:09:26 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x2, {0x1, @vbi={0x7, 0x101, 0x2, 0x43564548, [0x20, 0x9], [0xb, 0x9e], 0x1}}, 0x10000000}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x0, @pix={0x6, 0x7, 0x31384142, 0x3, 0x0, 0x102, 0x5, 0x0, 0x1, 0x6, 0x1}}) 13:09:26 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2]}}}) 13:09:26 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, 0x0) 13:09:26 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x8]}}}) ioctl$SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000000000)) 13:09:26 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {r1, r2/1000+60000}, {0x0, 0x0, 0x0, 0x0, 0x7f, 0x9, "2f3fe808"}, 0x0, 0x0, @offset, 0x8000000}) 13:09:26 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0xfffffffd, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x0, @offset=0x4}) 13:09:26 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x2, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0xffa2, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x1], 0x4}}}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000340)={0x7, 0x0, 0x2, "642bd8c05b12f9d1f0f79fd630779b25cc3d7c3d8d1479d407f076b48960cdb0", 0x32435750}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc01d}, 0x48002) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00', r5) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000128bd7000fbdbdf25095693065152c9bf3f4849406bdd000000060028000200000005003500300000006508f2c6ce8ce52a50b03f49b5f49e6b6e71961c475ae02fe6c442c69130336ef8476f553330cb8ab2212b4cfb8e4cf98845d8bf71bc7be15c01ef861dc42e8f3f8bfce555fdd83578e49c899561a30b34bd1df32ada89a83f614b3a88"], 0x24}}, 0xc000) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x3f, 0x3, 0x4, 0x0, 0x4, {r2, r3/1000+60000}, {0x5, 0x0, 0x40, 0x81, 0x5, 0x0, "b5944c5d"}, 0x8, 0x4, @userptr=0x8001, 0x3, 0x0, r6}) 13:09:26 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0xfffffffd, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x0, @offset=0x4}) [ 2136.795906] Bluetooth: hci5 command 0x040f tx timeout 13:09:26 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) 13:09:26 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x4161, 0x0) 13:09:26 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000280)={0x3, 0xe86f}) 13:09:26 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0xfffffffd, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x0, @offset=0x4}) 13:09:26 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x42) 13:09:26 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:26 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x8, 0x1, 0x1, "3c7f2d4b66447cf4cd58e09732fcb7d2f0d4a78d296278aad0aae2360cf05482", 0x3147504d}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:26 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x98, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40011}, 0x20000000) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) 13:09:26 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x0, @offset=0x4}) 13:09:27 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$VFIO_IOMMU_GET_INFO(r2, 0x3b70, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x8}) 13:09:27 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:27 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:27 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) r1 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x80000000, 0x2) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r4) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)={0x7, 0x3, 0x4, 0x0, 0x401, {r2, r3/1000+10000}, {0x4, 0x1, 0xbd, 0x6, 0x0, 0xcc, "b47f230a"}, 0x8, 0x4, @planes=&(0x7f00000000c0)={0x7, 0x101, @mem_offset=0x4}, 0x5, 0x0, r4}) 13:09:27 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:27 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000000)) [ 2137.268446] FAULT_INJECTION: forcing a failure. [ 2137.268446] name failslab, interval 1, probability 0, space 0, times 0 [ 2137.302367] CPU: 0 PID: 1932 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 2137.310232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2137.319590] Call Trace: [ 2137.322187] dump_stack+0x1b2/0x281 [ 2137.325844] should_fail.cold+0x10a/0x149 [ 2137.330002] should_failslab+0xd6/0x130 [ 2137.333979] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2137.339087] __kmalloc_node+0x38/0x70 [ 2137.342889] kvmalloc_node+0x46/0xd0 [ 2137.346603] video_usercopy+0x31b/0xe90 [ 2137.350577] ? video_ioctl2+0x30/0x30 [ 2137.354374] ? v4l2_ioctl+0x127/0x2f0 [ 2137.358174] ? v4l_g_ctrl+0x390/0x390 [ 2137.361975] ? proc_fail_nth_write+0x7b/0x180 [ 2137.366473] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2137.371412] ? trace_hardirqs_on+0x10/0x10 [ 2137.375651] ? fsnotify+0x974/0x11b0 [ 2137.379362] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2137.384291] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2137.389316] v4l2_ioctl+0x1bb/0x2f0 [ 2137.394073] ? v4l2_open+0x2f0/0x2f0 [ 2137.397790] do_vfs_ioctl+0x75a/0xff0 [ 2137.401593] ? ioctl_preallocate+0x1a0/0x1a0 [ 2137.406005] ? lock_downgrade+0x740/0x740 [ 2137.410157] ? __fget+0x225/0x360 [ 2137.413614] ? do_vfs_ioctl+0xff0/0xff0 [ 2137.417615] ? security_file_ioctl+0x83/0xb0 [ 2137.422021] SyS_ioctl+0x7f/0xb0 [ 2137.425381] ? do_vfs_ioctl+0xff0/0xff0 [ 2137.429377] do_syscall_64+0x1d5/0x640 [ 2137.433278] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2137.438462] RIP: 0033:0x465ef9 [ 2137.441643] RSP: 002b:00007fcd71336188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2137.449346] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 2137.456622] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 13:09:27 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:27 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00', r1) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x200, {}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x0, @offset, 0xffffffff}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x5, 0x3, 0x1, "792356f61b2e8b9c0b569c755a300f90c7884a8ea0e984745297f7beea18c12a", 0x32435750}) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0xa00, 0x0) 13:09:27 executing program 1: syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x7c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}}) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x10000, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x7, 0x9}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f00000000c0)=0x2) [ 2137.463897] RBP: 00007fcd713361d0 R08: 0000000000000000 R09: 0000000000000000 [ 2137.471168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2137.478427] R13: 00007ffcb3b3430f R14: 00007fcd71336300 R15: 0000000000022000 13:09:27 executing program 5 (fault-call:1 fault-nth:1): r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:27 executing program 4 (fault-call:1 fault-nth:0): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4]}}}) 13:09:27 executing program 2: ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0xff, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0xfffe, 0x66, 0x0, 0x100, 0x8, 0x0, 0xd3, 0x0, 0x2, 0xfffe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x4}}}) [ 2137.593789] FAULT_INJECTION: forcing a failure. [ 2137.593789] name failslab, interval 1, probability 0, space 0, times 0 [ 2137.617090] CPU: 0 PID: 1956 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 2137.624919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2137.634307] Call Trace: [ 2137.636900] dump_stack+0x1b2/0x281 [ 2137.640532] should_fail.cold+0x10a/0x149 [ 2137.644680] should_failslab+0xd6/0x130 [ 2137.648665] __kmalloc+0x2c1/0x400 [ 2137.652205] ? __vb2_queue_alloc+0xf4/0xd90 [ 2137.656529] __vb2_queue_alloc+0xf4/0xd90 [ 2137.660680] ? is_bpf_text_address+0xb8/0x150 [ 2137.665174] ? kernel_text_address+0xbd/0xf0 [ 2137.669591] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2137.674972] vb2_core_create_bufs+0x279/0x5a0 [ 2137.679469] ? __vb2_queue_free+0x7a0/0x7a0 [ 2137.683798] ? trace_hardirqs_on+0x10/0x10 [ 2137.688034] ? __lock_acquire+0x5fc/0x3f20 [ 2137.692280] vb2_create_bufs+0x2e1/0x5b0 [ 2137.696346] ? vb2_thread_start+0x310/0x310 [ 2137.700671] ? trace_hardirqs_on+0x10/0x10 [ 2137.704912] vb2_ioctl_create_bufs+0x1f7/0x330 [ 2137.709518] v4l_create_bufs+0xa4/0x150 [ 2137.713617] __video_do_ioctl+0x65b/0x6a0 [ 2137.717774] ? video_ioctl2+0x30/0x30 [ 2137.721576] ? __might_fault+0x177/0x1b0 [ 2137.725644] video_usercopy+0xf5/0xe90 [ 2137.729535] ? video_ioctl2+0x30/0x30 [ 2137.733336] ? v4l_g_ctrl+0x390/0x390 [ 2137.737244] ? proc_fail_nth_write+0x7b/0x180 [ 2137.741741] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2137.746670] ? trace_hardirqs_on+0x10/0x10 [ 2137.750908] ? fsnotify+0x974/0x11b0 [ 2137.754634] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2137.759562] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2137.764579] v4l2_ioctl+0x1bb/0x2f0 [ 2137.768206] ? v4l2_open+0x2f0/0x2f0 [ 2137.771919] do_vfs_ioctl+0x75a/0xff0 [ 2137.775716] ? ioctl_preallocate+0x1a0/0x1a0 [ 2137.780123] ? lock_downgrade+0x740/0x740 [ 2137.784274] ? __fget+0x225/0x360 [ 2137.787724] ? do_vfs_ioctl+0xff0/0xff0 [ 2137.791697] ? security_file_ioctl+0x83/0xb0 [ 2137.796133] SyS_ioctl+0x7f/0xb0 [ 2137.799498] ? do_vfs_ioctl+0xff0/0xff0 [ 2137.803727] do_syscall_64+0x1d5/0x640 [ 2137.807627] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2137.812814] RIP: 0033:0x465ef9 [ 2137.815999] RSP: 002b:00007fcd71336188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2137.823706] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 2137.830971] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 13:09:27 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:27 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000000)) 13:09:27 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}}) 13:09:27 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80, "2f3fe808"}, 0x4}) 13:09:27 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) [ 2137.838245] RBP: 00007fcd713361d0 R08: 0000000000000000 R09: 0000000000000000 [ 2137.845518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2137.852778] R13: 00007ffcb3b3430f R14: 00007fcd71336300 R15: 0000000000022000 [ 2137.866136] FAULT_INJECTION: forcing a failure. [ 2137.866136] name failslab, interval 1, probability 0, space 0, times 0 13:09:27 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xf6, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) [ 2137.907069] CPU: 1 PID: 1967 Comm: syz-executor.4 Not tainted 4.14.222-syzkaller #0 [ 2137.914890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2137.924267] Call Trace: [ 2137.926860] dump_stack+0x1b2/0x281 [ 2137.930494] should_fail.cold+0x10a/0x149 [ 2137.934649] should_failslab+0xd6/0x130 [ 2137.938633] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2137.943774] __kmalloc_node+0x38/0x70 [ 2137.947596] kvmalloc_node+0x46/0xd0 [ 2137.951343] video_usercopy+0x31b/0xe90 13:09:27 executing program 0: ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000200)={{0x6, 0x3, 0x7, 0xbb, '\x00', 0x7}, 0x0, [0x100, 0x9, 0x4, 0x7fff, 0x3, 0x3ff, 0x3, 0x1, 0x6, 0x7, 0x0, 0x12d, 0x1, 0x9b, 0x6, 0x0, 0x4, 0x7, 0x7ff80000000, 0x6b02, 0x0, 0x100000000, 0x8, 0x1, 0x7, 0x488, 0x5ff0, 0x6, 0x200, 0x3f, 0xe, 0x8, 0x0, 0x8, 0x59d, 0x836c, 0x1f, 0xf, 0x1, 0x7fffffff, 0x8c6, 0xb4, 0x800, 0x0, 0x2, 0x7, 0xffffffffffffff7a, 0x400, 0x40, 0x3, 0xffffffffffff09c7, 0x2, 0x2d9, 0x9, 0xffffffffffffff5a, 0x7, 0x6, 0x8, 0xfffffffffffffffc, 0xa37, 0x5, 0x8000, 0x7, 0x1, 0x8, 0x100, 0x5, 0x9, 0xa0e, 0x2, 0x800, 0x100000001, 0x7fff, 0xffffffff, 0x1, 0x8, 0x7f, 0x10001, 0x100000000, 0x7, 0x8, 0xfffffffffffffff8, 0xfffffffffffeffff, 0x6, 0x2, 0xbf, 0x20, 0x1f, 0x9, 0x800, 0x9, 0x8000, 0x5, 0x1f, 0x3, 0x1a, 0x8, 0x8, 0x46df, 0x4, 0x3, 0xfffffffffffffffd, 0x40, 0x9, 0x4, 0x6, 0x1, 0x782d, 0x6, 0x7ff, 0xeb3, 0x6c4, 0x6, 0x7, 0x5, 0xff, 0x4, 0x10001, 0x3, 0x3000, 0x4, 0x9, 0x800, 0x6, 0x2, 0x5, 0x3ec, 0x3]}) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000080)) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x4, 0x2, 0xff, 0x0, 0x0, 0x0, "2f3fe808"}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x2, 0x2}) [ 2137.955320] ? video_ioctl2+0x30/0x30 [ 2137.959121] ? v4l2_ioctl+0x127/0x2f0 [ 2137.962929] ? v4l_g_ctrl+0x390/0x390 [ 2137.966727] ? proc_fail_nth_write+0x7b/0x180 [ 2137.971225] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2137.976152] ? trace_hardirqs_on+0x10/0x10 [ 2137.980389] ? fsnotify+0x974/0x11b0 [ 2137.984111] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2137.989048] v4l2_ioctl+0x1bb/0x2f0 [ 2137.992671] ? v4l2_open+0x2f0/0x2f0 [ 2137.996386] do_vfs_ioctl+0x75a/0xff0 [ 2138.000191] ? ioctl_preallocate+0x1a0/0x1a0 [ 2138.004607] ? lock_downgrade+0x740/0x740 [ 2138.008760] ? __fget+0x225/0x360 [ 2138.012215] ? do_vfs_ioctl+0xff0/0xff0 [ 2138.016188] ? security_file_ioctl+0x83/0xb0 [ 2138.020592] SyS_ioctl+0x7f/0xb0 [ 2138.023951] ? do_vfs_ioctl+0xff0/0xff0 [ 2138.027930] do_syscall_64+0x1d5/0x640 [ 2138.031818] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2138.037000] RIP: 0033:0x465ef9 [ 2138.040184] RSP: 002b:00007fbaf9485188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2138.047890] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 13:09:28 executing program 5 (fault-call:1 fault-nth:2): r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:28 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)={0x101, 0x1, 0x4, 0x70000, 0x400, {0x77359400}, {0x5, 0x2, 0x40, 0x40, 0x1f, 0x2, "153bd24b"}, 0x6, 0x1, @fd, 0x1}) 13:09:28 executing program 4 (fault-call:1 fault-nth:1): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4]}}}) [ 2138.055154] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 2138.062436] RBP: 00007fbaf94851d0 R08: 0000000000000000 R09: 0000000000000000 [ 2138.069702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2138.076990] R13: 00007ffe50dcef1f R14: 00007fbaf9485300 R15: 0000000000022000 13:09:28 executing program 0: socketpair(0x15, 0xa, 0x1, &(0x7f0000000000)) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) [ 2138.130196] FAULT_INJECTION: forcing a failure. [ 2138.130196] name failslab, interval 1, probability 0, space 0, times 0 [ 2138.153673] CPU: 1 PID: 1993 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 2138.161522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2138.170884] Call Trace: [ 2138.173492] dump_stack+0x1b2/0x281 [ 2138.177134] should_fail.cold+0x10a/0x149 [ 2138.181287] should_failslab+0xd6/0x130 [ 2138.185265] kmem_cache_alloc_trace+0x29a/0x3d0 [ 2138.189943] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2138.195302] vb2_vmalloc_alloc+0x63/0x2d0 [ 2138.199447] __vb2_queue_alloc+0x47a/0xd90 [ 2138.203701] vb2_core_create_bufs+0x279/0x5a0 [ 2138.208203] ? __vb2_queue_free+0x7a0/0x7a0 [ 2138.212534] ? trace_hardirqs_on+0x10/0x10 [ 2138.216778] ? __lock_acquire+0x5fc/0x3f20 [ 2138.221009] vb2_create_bufs+0x2e1/0x5b0 [ 2138.225084] ? vb2_thread_start+0x310/0x310 [ 2138.229427] ? trace_hardirqs_on+0x10/0x10 [ 2138.233661] vb2_ioctl_create_bufs+0x1f7/0x330 [ 2138.238243] v4l_create_bufs+0xa4/0x150 [ 2138.242216] __video_do_ioctl+0x65b/0x6a0 [ 2138.246366] ? video_ioctl2+0x30/0x30 [ 2138.250160] ? __might_fault+0x177/0x1b0 [ 2138.254218] video_usercopy+0xf5/0xe90 [ 2138.258103] ? video_ioctl2+0x30/0x30 [ 2138.261909] ? v4l_g_ctrl+0x390/0x390 [ 2138.265702] ? proc_fail_nth_write+0x7b/0x180 [ 2138.270205] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2138.275127] ? trace_hardirqs_on+0x10/0x10 [ 2138.279370] ? fsnotify+0x974/0x11b0 [ 2138.283074] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2138.287997] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2138.293005] v4l2_ioctl+0x1bb/0x2f0 [ 2138.296638] ? v4l2_open+0x2f0/0x2f0 [ 2138.300342] do_vfs_ioctl+0x75a/0xff0 [ 2138.304137] ? ioctl_preallocate+0x1a0/0x1a0 [ 2138.308536] ? lock_downgrade+0x740/0x740 [ 2138.312679] ? __fget+0x225/0x360 [ 2138.316126] ? do_vfs_ioctl+0xff0/0xff0 [ 2138.320092] ? security_file_ioctl+0x83/0xb0 [ 2138.324494] SyS_ioctl+0x7f/0xb0 [ 2138.327852] ? do_vfs_ioctl+0xff0/0xff0 [ 2138.331854] do_syscall_64+0x1d5/0x640 [ 2138.335745] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2138.340933] RIP: 0033:0x465ef9 [ 2138.344112] RSP: 002b:00007fcd71336188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2138.351814] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 2138.359076] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 2138.366338] RBP: 00007fcd713361d0 R08: 0000000000000000 R09: 0000000000000000 [ 2138.373607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 13:09:28 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000080)={0x8, 0x0, 0x4, 0x20, 0x4, {0x0, 0x2710}, {0x5, 0x1, 0xea, 0x1, 0x87, 0x6, "c0097a78"}, 0x6, 0x3, @fd=r1, 0xd5ab, 0x0, r0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:28 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nvram\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x8, 0x200, 0x4, @empty, @remote, 0x7800, 0x10, 0x800, 0xba8}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x800, 0x2f7, 0x4, {0x1, @vbi={0x3, 0x7, 0x2, 0x34324948, [0x3, 0x2], [0x1f, 0x200], 0x1}}, 0x14d}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x100, 0x0) mq_getsetattr(r2, &(0x7f0000000280)={0xfffffffffffffffa, 0x4, 0x1, 0x6}, &(0x7f00000002c0)) [ 2138.380895] R13: 00007ffcb3b3430f R14: 00007fcd71336300 R15: 0000000000022000 13:09:28 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4]}}}) 13:09:28 executing program 5 (fault-call:1 fault-nth:3): r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:28 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x602, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) read$snddsp(r1, &(0x7f0000000080)=""/175, 0xaf) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', r2) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x48, r3, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x11c60cec, 0x5}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "385dec1243c0540c6668eddadfda0273"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d423717215efe37496fa46085fee1a42"}]}, 0x48}}, 0x4001) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x20, 0x0, 0x0, "2f3fe808"}, 0x0, 0x0, @offset, 0x0, 0x0, r2}) 13:09:28 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x400, 0x2, 0x4, 0x4, 0x200, {0x0, 0xea60}, {0x1, 0x0, 0xb9, 0xc0, 0x0, 0x2, "34d68665"}, 0x7fff, 0x1, @userptr=0x8, 0x1, 0x0, r0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r4, 0x9f6f37c8753f0475}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x90820012}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2048895}, 0x40c0) [ 2138.587687] FAULT_INJECTION: forcing a failure. [ 2138.587687] name failslab, interval 1, probability 0, space 0, times 0 [ 2138.602189] CPU: 1 PID: 2017 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 2138.609997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2138.619357] Call Trace: [ 2138.621953] dump_stack+0x1b2/0x281 [ 2138.625588] should_fail.cold+0x10a/0x149 [ 2138.629741] should_failslab+0xd6/0x130 [ 2138.633721] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2138.638832] __get_vm_area_node+0xed/0x340 [ 2138.643067] __vmalloc_node_range+0x9c/0x150 [ 2138.647478] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2138.651811] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2138.657176] vmalloc_user+0x47/0xa0 [ 2138.660807] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2138.665128] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2138.670490] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2138.674638] __vb2_queue_alloc+0x47a/0xd90 [ 2138.678878] vb2_core_create_bufs+0x279/0x5a0 [ 2138.683397] ? __vb2_queue_free+0x7a0/0x7a0 [ 2138.687743] ? trace_hardirqs_on+0x10/0x10 [ 2138.691983] ? __lock_acquire+0x5fc/0x3f20 [ 2138.696220] vb2_create_bufs+0x2e1/0x5b0 [ 2138.700280] ? vb2_thread_start+0x310/0x310 [ 2138.704599] ? trace_hardirqs_on+0x10/0x10 [ 2138.708830] vb2_ioctl_create_bufs+0x1f7/0x330 [ 2138.713408] v4l_create_bufs+0xa4/0x150 [ 2138.717376] __video_do_ioctl+0x65b/0x6a0 [ 2138.721536] ? video_ioctl2+0x30/0x30 [ 2138.725327] ? __might_fault+0x177/0x1b0 [ 2138.729383] video_usercopy+0xf5/0xe90 [ 2138.733275] ? video_ioctl2+0x30/0x30 [ 2138.737068] ? v4l_g_ctrl+0x390/0x390 [ 2138.741561] ? proc_fail_nth_write+0x7b/0x180 [ 2138.746058] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2138.750983] ? trace_hardirqs_on+0x10/0x10 [ 2138.755209] ? fsnotify+0x974/0x11b0 [ 2138.758908] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2138.763844] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2138.768866] v4l2_ioctl+0x1bb/0x2f0 [ 2138.772571] ? v4l2_open+0x2f0/0x2f0 [ 2138.776274] do_vfs_ioctl+0x75a/0xff0 [ 2138.780061] ? ioctl_preallocate+0x1a0/0x1a0 [ 2138.784468] ? lock_downgrade+0x740/0x740 [ 2138.788618] ? __fget+0x225/0x360 [ 2138.792064] ? do_vfs_ioctl+0xff0/0xff0 [ 2138.796077] ? security_file_ioctl+0x83/0xb0 [ 2138.800500] SyS_ioctl+0x7f/0xb0 [ 2138.803857] ? do_vfs_ioctl+0xff0/0xff0 [ 2138.807825] do_syscall_64+0x1d5/0x640 [ 2138.811707] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2138.816887] RIP: 0033:0x465ef9 [ 2138.820062] RSP: 002b:00007fcd71336188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2138.827782] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 13:09:28 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0xe000, 0x0, {0x77359400}, {0x4, 0x0, 0x31, 0x0, 0x0, 0x2, "2f3fe808"}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000000)={0x20, 0x3, 0x9, 0x1, 0x3}) 13:09:28 executing program 2: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) 13:09:28 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000100)="45964948df64651313d4e7065b7ede8c9ae11544c7a2ea18f21d246d318efa52ca33f4e619146f01b5f51f99b69e52cdbd0db58142971e95416b33bd56421dc1b4fe1281ee86e24027e9dc31769f72ff448ffcec7cbc", 0x56, 0xe71c, &(0x7f0000000180)={0x77359400}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x1, 0x4, 0x10, 0x3, {r1, r2/1000+10000}, {0x2, 0x1, 0x5, 0x6, 0xff, 0x8, "cd3c35b2"}, 0x7f, 0x3, @userptr=0x7, 0x3}) [ 2138.835047] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 2138.842917] RBP: 00007fcd713361d0 R08: 0000000000000000 R09: 0000000000000000 [ 2138.850176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2138.857441] R13: 00007ffcb3b3430f R14: 00007fcd71336300 R15: 0000000000022000 [ 2138.880222] Bluetooth: hci5 command 0x0419 tx timeout 13:09:28 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4]}}}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x4000, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000080)={0x0, @vbi={0x10000, 0x7fff, 0x3, 0x3147504d, [0x6, 0x7], [0xd4c8, 0x1], 0x2}}) 13:09:28 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0xa1d, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000040)={0x7, 0x2, 0x4, 0x100, 0x0, {0x77359400}, {0x4, 0x0, 0x81, 0x1, 0x7, 0xb8, "b4207ef9"}, 0xdc, 0x4, @fd, 0xfffffff9}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84c6], 0x4}}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000000c0)) [ 2138.975480] syz-executor.5: vmalloc: allocation failure: 15142912 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2138.998801] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2139.004505] CPU: 1 PID: 2017 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 2139.012311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2139.021660] Call Trace: 13:09:29 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40c1) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) [ 2139.024252] dump_stack+0x1b2/0x281 [ 2139.027887] warn_alloc.cold+0x96/0x1cc [ 2139.031866] ? zone_watermark_ok_safe+0x220/0x220 [ 2139.036716] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2139.042165] ? __get_vm_area_node+0xed/0x340 [ 2139.046580] ? __get_vm_area_node+0x27d/0x340 [ 2139.051082] __vmalloc_node_range+0x10e/0x150 [ 2139.055581] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2139.060948] vmalloc_user+0x47/0xa0 [ 2139.064585] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2139.068941] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2139.074308] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2139.078476] __vb2_queue_alloc+0x47a/0xd90 [ 2139.082733] vb2_core_create_bufs+0x279/0x5a0 [ 2139.087232] ? __vb2_queue_free+0x7a0/0x7a0 [ 2139.091557] ? trace_hardirqs_on+0x10/0x10 [ 2139.095792] ? __lock_acquire+0x5fc/0x3f20 [ 2139.100033] vb2_create_bufs+0x2e1/0x5b0 [ 2139.104097] ? vb2_thread_start+0x310/0x310 [ 2139.108423] ? trace_hardirqs_on+0x10/0x10 [ 2139.112688] vb2_ioctl_create_bufs+0x1f7/0x330 [ 2139.117284] v4l_create_bufs+0xa4/0x150 [ 2139.121268] __video_do_ioctl+0x65b/0x6a0 [ 2139.125447] ? video_ioctl2+0x30/0x30 [ 2139.129273] ? __might_fault+0x177/0x1b0 [ 2139.133345] video_usercopy+0xf5/0xe90 [ 2139.137241] ? video_ioctl2+0x30/0x30 [ 2139.141400] ? v4l_g_ctrl+0x390/0x390 [ 2139.145202] ? proc_fail_nth_write+0x7b/0x180 [ 2139.149718] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2139.154653] ? trace_hardirqs_on+0x10/0x10 [ 2139.158892] ? fsnotify+0x974/0x11b0 [ 2139.162626] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2139.167587] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2139.172612] v4l2_ioctl+0x1bb/0x2f0 [ 2139.176239] ? v4l2_open+0x2f0/0x2f0 [ 2139.179953] do_vfs_ioctl+0x75a/0xff0 [ 2139.183756] ? ioctl_preallocate+0x1a0/0x1a0 [ 2139.188164] ? lock_downgrade+0x740/0x740 [ 2139.192318] ? __fget+0x225/0x360 [ 2139.195774] ? do_vfs_ioctl+0xff0/0xff0 [ 2139.199775] ? security_file_ioctl+0x83/0xb0 [ 2139.204182] SyS_ioctl+0x7f/0xb0 [ 2139.207546] ? do_vfs_ioctl+0xff0/0xff0 [ 2139.211519] do_syscall_64+0x1d5/0x640 [ 2139.215412] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2139.220594] RIP: 0033:0x465ef9 [ 2139.223771] RSP: 002b:00007fcd71336188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2139.231496] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 2139.239299] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 2139.246558] RBP: 00007fcd713361d0 R08: 0000000000000000 R09: 0000000000000000 [ 2139.253819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2139.261090] R13: 00007ffcb3b3430f R14: 00007fcd71336300 R15: 0000000000022000 13:09:29 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4]}}}) syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x4, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x7ff, 0x56595559, 0x3, @stepwise={0x73, 0x101, 0x3, 0x0, 0x3, 0x2}}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000280)={{0x5, 0x4, 0x0, 0xffffffff, 'syz0\x00', 0x4}, 0x1, [0x33c000000, 0x1, 0x81, 0x6, 0x37b79c8c, 0x6, 0x5, 0x5, 0x5, 0xffffffffffffffff, 0x101, 0x0, 0x7b, 0xfffffffffffffffa, 0x6, 0x10000, 0x800, 0xa2, 0x2, 0x82, 0x81, 0x0, 0x4, 0x1, 0x7, 0x1000, 0x0, 0x1f, 0x2, 0x9, 0x4, 0x0, 0x3, 0x883b, 0x100000001, 0x80000001, 0x7c000000, 0x1, 0x80, 0x5, 0x1, 0x2, 0x200, 0x8e, 0x7, 0x7, 0x0, 0x8, 0x9, 0x10000, 0x101, 0x9, 0x40000000800, 0x5, 0x0, 0x100000000, 0x3, 0x200000000000000, 0x8001, 0x2, 0xfff, 0x7, 0xc5f, 0x7, 0x81, 0x1, 0xffffffff, 0x130, 0xff, 0x9, 0x9, 0x7, 0x8, 0xc26d, 0xf7, 0x7f, 0x280000000000000, 0x4, 0xe000000000000000, 0x10001, 0x3, 0x800, 0x5, 0x2, 0xfffffffffffffffc, 0x1ff, 0x1f, 0x4, 0x6, 0x0, 0x6b2, 0x1, 0x8, 0x1ff, 0x101, 0x3, 0x80000001, 0xf01, 0x8, 0x6, 0x7f, 0x1, 0x2e40000000, 0x1, 0x5577, 0x9, 0xbd00000000000000, 0x9, 0xfffffffffffff399, 0x7fffffff, 0x3, 0x4, 0x655511d2, 0x1, 0x5, 0x2, 0x1, 0x8000, 0x3, 0xff, 0xa3cd, 0x5, 0xfa, 0x7fffffff, 0x8001, 0x9, 0x1, 0x100000000]}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x85, 0x1, 0x2}) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000100)=0x1) 13:09:29 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x2, 0x0, {0x77359400}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x0, @userptr=0xa5}) 13:09:29 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000000)={0x7fff, 0x10, [0x8000, 0x4, 0x2, 0x4]}) [ 2139.277783] warn_alloc_show_mem: 1 callbacks suppressed [ 2139.277787] Mem-Info: [ 2139.285618] active_anon:20223 inactive_anon:8724 isolated_anon:0 [ 2139.285618] active_file:2098 inactive_file:6794 isolated_file:0 [ 2139.285618] unevictable:0 dirty:190 writeback:0 unstable:0 [ 2139.285618] slab_reclaimable:25229 slab_unreclaimable:100041 [ 2139.285618] mapped:57769 shmem:11051 pagetables:737 bounce:0 [ 2139.285618] free:1467538 free_pcp:467 free_cma:0 [ 2139.329211] Node 0 active_anon:84144kB inactive_anon:26704kB active_file:3360kB inactive_file:21416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:221924kB dirty:756kB writeback:0kB shmem:36012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2139.385393] Node 1 active_anon:856kB inactive_anon:8192kB active_file:5032kB inactive_file:5760kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:9152kB dirty:4kB writeback:0kB shmem:8192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2139.431341] Node 0 DMA free:15908kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2139.457713] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2139.462837] Node 0 DMA32 free:1786496kB min:36200kB low:45248kB high:54296kB active_anon:84212kB inactive_anon:26704kB active_file:3360kB inactive_file:21416kB unevictable:0kB writepending:756kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7552kB pagetables:2916kB bounce:0kB free_pcp:824kB local_pcp:148kB free_cma:0kB [ 2139.494938] lowmem_reserve[]: 0 0 0 0 0 [ 2139.499097] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2139.524900] lowmem_reserve[]: 0 0 0 0 0 [ 2139.529047] Node 1 Normal free:4008996kB min:53696kB low:67120kB high:80544kB active_anon:856kB inactive_anon:8192kB active_file:5032kB inactive_file:5760kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:180kB bounce:0kB free_pcp:552kB local_pcp:156kB free_cma:0kB [ 2139.575598] lowmem_reserve[]: 0 0 0 0 0 [ 2139.579646] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15908kB [ 2139.593541] Node 0 DMA32: 1804*4kB (UME) 1632*8kB (UME) 3815*16kB (UME) 1742*32kB (UME) 646*64kB (UME) 280*128kB (UM) 188*256kB (UM) 107*512kB (UM) 66*1024kB (U) 29*2048kB (UM) 341*4096kB (UM) = 1840864kB [ 2139.613641] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2139.624759] Node 1 Normal: 115*4kB (UME) 438*8kB (UM) 426*16kB (UM) 333*32kB (UME) 292*64kB (UME) 215*128kB (UE) 190*256kB (UE) 131*512kB (UM) 72*1024kB (UE) 62*2048kB (U) 885*4096kB (UM) = 4009020kB [ 2139.646779] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2139.658309] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2139.668272] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 13:09:29 executing program 5: ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)=0xc4e) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x0, 0x2, 0x1}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0xfffc, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x96, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff], 0x4}}}) 13:09:29 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x1, 0x0, {0x77359400}, {0x0, 0x0, 0x3f, 0x0, 0x80, 0x0, "2f3fe808"}, 0x8000}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x8, 0x2, 0x4}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x103001, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000200)={0x4, 0x0, 0x4, 0x4, 0xc391, {0x0, 0xea60}, {0x5, 0x2, 0x8, 0xff, 0x20, 0x9, "05c03a7f"}, 0x80000000, 0x2, @userptr=0x5, 0x2}) 13:09:29 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)={0x7d90, 0x2, 0x4, 0x20, 0x4, {0x0, 0x2710}, {0x4, 0x1, 0x9b, 0x7f, 0x8, 0x6, "cecef1fe"}, 0x6, 0x1, @userptr=0x101, 0x80000001}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:29 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 13:09:29 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x2, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x0, @planes=&(0x7f0000000000)={0x20, 0x10001, @mem_offset=0x8, 0x9c5}}) 13:09:29 executing program 4: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xdc}]}, 0x28}, 0x1, 0x0, 0x0, 0x8084}, 0x4000000) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x280, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x160, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x10000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1e8f}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x100}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x40}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x400}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa91}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xe7d1}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xf4e6}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x99a1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x101}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x200}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3ff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffffff81}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8000}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xc}, @NL80211_ATTR_REG_RULES={0xf0, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1fffe0}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7fffffff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x80000001}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x512}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xaa9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xb5}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x40}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x280}, 0x1, 0x0, 0x0, 0x4008014}, 0x850) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r2, 0x404, 0x70bd25, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048813}, 0x4004000) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", "", "", ""]}, 0x24}}, 0x10) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4]}}}) [ 2139.679795] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2139.690392] 18848 total pagecache pages [ 2139.694492] 0 pages in swap cache [ 2139.700747] Swap cache stats: add 0, delete 0, find 0/0 [ 2139.707112] Free swap = 0kB [ 2139.710259] Total swap = 0kB [ 2139.713327] 2097051 pages RAM [ 2139.716916] 0 pages HighMem/MovableOnly [ 2139.720883] 363840 pages reserved [ 2139.724322] 0 pages cma reserved 13:09:29 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', r1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)={0x8001, 0x1, 0x4, 0x100, 0xd42c, {0x77359400}, {0x4, 0x1, 0x6, 0x5, 0x6, 0x20, "9c6bdd97"}, 0xa6, 0x2, @planes=&(0x7f0000000000)={0x0, 0x4, @mem_offset=0x8, 0x3}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x10, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x4000) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x80800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r6, 0x9f6f37c8753f0475}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r6, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'syzkaller0\x00'}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:29 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x3a, 0x100, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000080) 13:09:29 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:30 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0xffffffff, 0x2, 0x4}) syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x1ff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0xe7, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x800]}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}}, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)={0x288, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x59}}}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x9}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x9b}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x800}, @NL80211_ATTR_IE={0x24d, 0x2a, [@measure_req={0x26, 0xfb, {0x2, 0x1, 0x2, "0d7101b26b123198ec74a68542eb7f549dcc691394f82c3a982249c8062689763a1c8660e2dcca03c6886f01ec807ee21a2278ccc9ba99c363bbcb3494d492bc3834dfc1d09b4ebb61b82dec4cd73ccf8d5d2df65f32a203b4c0bec7888465f30d3de97a21c9b6c666ea5db3f7774db1362212a9ac9dea1c82d86616bff70625a5c1ede82c77de6c824a7e0f693270fdae53b8e7d1825cdba1d1eb256dff0b6a075123f7501e5c622d3dc542a319cb0cd2b2fc9086cc3c1a0ce0139373888719183ef32b374d5f28d2289de45031b6f6ce4068c6a47457e5d03071403c61fd0af40858d4957b00a65b4a46c72b73166b8b3617fc1a0e24fd"}}, @mic={0x8c, 0x10, {0xbdc, "bea149c3ceb1", @short="d7f31be49de23a07"}}, @peer_mgmt={0x75, 0x14, {0x0, 0xf001, @void, @void, @val="fd445f895b25d16b7ec3b4e5d8697289"}}, @preq={0x82, 0x41, @ext={{0x1}, 0x1, 0x8, 0x0, @broadcast, 0x82, @device_b, 0x45, 0x9, 0x3, [{{0x1}, @broadcast, 0x5}, {{}, @broadcast, 0x3}, {{}, @broadcast, 0xfd7}]}}, @tim={0x5, 0x35, {0x6, 0x4e, 0x7, "4c6ea8729bcc6012b28314b8e8fe6895b1d249827337595af9eb2168850e875420ba489a52d28d0dadbff375d00494cab8a1"}}, @peer_mgmt={0x75, 0x8, {0x0, 0xfff7, @val=0x7ffd, @val=0x8, @void}}, @ht={0x2d, 0x1a, {0x1, 0x0, 0x1, 0x0, {0x8, 0x7f, 0x0, 0x81, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x300, 0x5, 0x5}}, @tim={0x5, 0x78, {0x0, 0xe9, 0x8, "b433ca5f6e4b13d1db05e923ca8f1d40f9e9db86799cf2470052298aa5e11eefafc96e330f631cec029a38b7678db8cda3692a346680af4235d44e9362c242c040828df39687af1f2046e8ddddd77c5b27e0b357252ac92c91e885fea7afcfcdc113acb244e6f524d1ef72bb5f21ffd56ad6cfac70"}}, @supported_rates={0x1, 0x8, [{0x6}, {0x12}, {0x4}, {0x18}, {0x1f, 0x1}, {0x3c}, {0x5}, {0x60}]}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x4011}, 0x820) 13:09:30 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd], 0x4}}}) 13:09:30 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe], 0x4}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00', r1) 13:09:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000c801) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00', r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r1, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe37}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x25) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r4) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x32, 0x7, 0x80}, @WGDEVICE_A_FWMARK={0x0, 0x7, 0x9a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4]}}}) 13:09:30 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) socket$l2tp(0x2, 0x2, 0x73) 13:09:30 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) syz_open_pts(r1, 0xc0600) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0xfffffffe, {r2, r3/1000+10000}, {0x0, 0xc, 0x6, 0x0, 0x0, 0xfe, "2f3fe808"}, 0x9, 0x0, @planes=&(0x7f0000000000)={0x6cc5, 0x9, @userptr=0xaaf}}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000180)={0x8000000, 0x1, 0x4, 0x8, 0xfffffffc, {0x0, 0x2710}, {0x3, 0x2, 0xf8, 0x40, 0x3, 0x7c, "85401e06"}, 0x5, 0x3, @fd, 0xffffffff, 0x0, r5}) 13:09:30 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x8, 0x1, 0x3}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x2, 0x4, 0x0, 0x8, {0x77359400}, {0x2, 0x2, 0x0, 0x7, 0x0, 0x0, "ccba1e74"}, 0x0, 0x0, @offset, 0x0, 0x0, r1}) 13:09:30 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) socket$l2tp6(0xa, 0x2, 0x73) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:30 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r5) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x81, 0x1, 0x4, 0x10000, 0x6, {r2, r3/1000+60000}, {0x2, 0xc, 0x8, 0x7, 0x5d, 0x3c, "3bf85f26"}, 0x6, 0x3, @fd=r4, 0x0, 0x0, r5}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)={0x7, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x4, 0x8, 0xff, 0xa, 0x5c, 0xa0, "2e40dc5c"}, 0x9, 0x2, @fd=r1, 0xc58b}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)={0x9, 0x3, 0x4, 0x10, 0x81fff, {0x77359400}, {0x4, 0x8, 0x0, 0x81, 0x0, 0x1, "2f3fe808"}, 0x2, 0x0, @fd=r6, 0x1}) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x180000) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000)='wireguard\x00', r7) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r9) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)={0x35, 0x1, 0x4, 0x10, 0xfff, {}, {0x5804bbed2a4d438f, 0x2, 0x2, 0x8, 0x7, 0x3f, "d48179be"}, 0x9, 0x0, @offset=0x1f, 0xffff, 0x0, r8}) r11 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r11) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x44) ioctl$SNDCTL_DSP_NONBLOCK(r11, 0x500e, 0x0) ioctl$vim2m_VIDIOC_QBUF(r9, 0xc058560f, &(0x7f0000000240)={0x7, 0x1, 0x4, 0x2000, 0x1, {0x0, 0x2710}, {0x1, 0xc, 0x7a, 0xba, 0x2, 0xe0, 'C^\a0'}, 0x800, 0x4, @offset=0x1, 0x1, 0x0, r10}) 13:09:30 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x1, 0x1, 0x4, 0x4000, 0x200, {}, {0x3, 0xc, 0x2, 0x40, 0x6, 0x40, "ffcebcaa"}, 0x7ff, 0x1, @planes=&(0x7f0000000000)={0x8000, 0x6, @fd, 0x10001}, 0x7}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) 13:09:30 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x0, @offset, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r1, 0x4122, 0x0) 13:09:30 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000010010001, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000280)) pipe2(&(0x7f0000000440), 0x4800) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=@can_newroute={0x78, 0x18, 0x10, 0x70bd28, 0x25dfdbfe, {0x1d, 0x1, 0x4}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x0, 0x0, 0x1, 0x1}, 0x3, 0x2, 0x0, 0x0, "47c58a5637444b3e"}, 0x4}}, @CGW_SRC_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x1, 0x0, 0x1}, 0x1, 0x3, 0x0, 0x0, "743ee4ad30de4c31"}}}, @CGW_FILTER={0xc, 0xb, {{0x4, 0x0, 0x1}, {0x0, 0x1, 0x1}}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x4, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "55ae9bcaa9130182"}, 0x7}}, @CGW_DST_IF={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x4048050}, 0x404c0d1) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x2, @pix={0x4, 0x1fec0e88, 0xb5315241, 0x6, 0x6, 0x200, 0x4, 0x8, 0x0, 0xa, 0x0, 0x6}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000300)=@hat={'permhat ', 0x4, 0x5e, ['{/(\x00', '\x00']}, 0x20) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000340)={0x2, @raw_data="6006ec5805e53f35ae7a1d389ce5a0ec8853460eeb24312dc86bccc6b33eef51f747506b728247da3b2746f36d3bcf071c73f4d3933604165f9e0ffb7938fcc5657fee3078eb824cc202383d86faa0e83bc482c24c31da4ff85897511e8bb6aad1d0883aad7b7004ae9be8bf1b68f9599810eb8745abdd77f48aa08f01923ca6bab3079422d7c007a834214278a2d1507ab4c5fe45b565279518fc4c087202467cf3d78b6c70fdcfd99184334771974a3d506d2c2f17a51375c946a45a33b2f90f889dee17f48141"}) 13:09:30 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:30 executing program 5: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x1, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3ff, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x4, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], 0x4}}}) 13:09:30 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xd43f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) ioctl$SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0) 13:09:30 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4]}}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x8, 0x3, 0x4, "e4ba4ca487a8d1073dc49ca16eae7ab64f0ad5c6d2e8f959784cb22032ce6e16", 0x32314d4e}) 13:09:30 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000)='mptcp_pm\x00', 0xffffffffffffffff) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:30 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x1000, 0x0, {0x0, 0xea60}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, "7284e808"}, 0x40000, 0x0, @planes=&(0x7f0000000000)={0xffffff00, 0x5b45, @fd=r1, 0xf2}, 0x0, 0x0, r1}) 13:09:30 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000080)={0x9, 0xa, 0x81, 0x3, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000480)={0x9, 0x6, 0x1}) 13:09:30 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x20, 0x2, 0x1, "5efb5884d2bcbd50df2bbc2e8b331a1e4f1c2145dc1376907030f92a445ef226", 0x30364d54}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) 13:09:30 executing program 3: sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc602b453f94fe909}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x200, 0x8}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8001) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:30 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @vbi={0x6, 0xafbf, 0x8, 0x31364d59, [0x1000, 0xf535], [0x8, 0x1], 0x1}}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x40400, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x100, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:30 executing program 0: ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000000)) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:31 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x0, @offset, 0x0, 0x0, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x8, 0x1, 0x4, 0x400, 0x343, {0x77359400}, {0x1, 0x0, 0x2, 0x0, 0x6, 0x0, "48ff03bf"}, 0x101, 0x3, @planes=&(0x7f0000000000)={0x1c1a, 0x5, @userptr=0x5, 0x8}, 0x4, 0x0, r1}) 13:09:31 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x80000001, 0x2, 0x4, 0x1000, 0x7, {}, {0x3, 0x2, 0x7, 0x1, 0x3f, 0x1, "c41965ff"}, 0x0, 0x1, @fd, 0x7, 0x0, r1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}}}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x500, 0x1, 0x2}) 13:09:31 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x3, @pix_mp={0x7fff, 0x1f, 0x34325241, 0xd, 0x1, [{0x3c, 0x5}, {0x7dc, 0x5}, {0x49b5, 0x40000005}, {0x8}, {0x9, 0xffffffff}, {0x5, 0x1}, {0x34f0, 0xee}, {0x4, 0x6}], 0x0, 0x1, 0x6, 0x0, 0x1}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x5d1, 0x2, 0x0, "979e0c7cf4cb7fd0ca4a431affe651b90eb1e1533621f883c62a03fc15eeb564", 0x34424752}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000280)={0x1, @sliced={0x9, [0xcdf, 0x131, 0x7, 0x1, 0x4, 0x81, 0x4, 0x6, 0x9, 0xfff, 0x401, 0xa920, 0xfff7, 0x1000, 0x7ff, 0xfffd, 0x1, 0xfdc4, 0x3ff, 0x9, 0x8, 0x3, 0x800, 0x2, 0x3, 0xdb, 0x6, 0x20, 0x3ff, 0x1, 0x7, 0x5, 0x6, 0x6, 0x5, 0x9e48, 0x1, 0x81, 0x2, 0x5, 0x5, 0x80, 0x340b, 0x100, 0x7fff, 0x1, 0x6, 0x3], 0x6}}) 13:09:31 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x4}}}) 13:09:31 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x0, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffa, 0x0, 0x7fff]}}}) 13:09:31 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@getneigh={0x14, 0x1e, 0x4, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x14}}, 0x10) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0xffffffff, 0x2, 0x3}) ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000000280)=0x3) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000000)=0x9) 13:09:31 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x100000001, 0x2040) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000080)=0xe4) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:31 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000200)={0x3, @win={{0x1, 0x7, 0x3ff, 0xfffffe01}, 0x6, 0x9, &(0x7f0000000040)={{0x5, 0x3, 0x9, 0x1}}, 0xe5, &(0x7f0000000080)="05d5ca6f0e0c63e27e66ede8bedb08ac553736305c3b49f821b4bace673dae7b4a6ba974d54a80d1a21ab2fc0d44b0451da32ec9baf97090241dedc73b7ae792c850591e1fafa734af6715e427b72321c139af9aa3ef3c79f1cdb44305e59154", 0x1}}) 13:09:31 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4]}}}) 13:09:31 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, "2f3fe808"}, 0x0, 0x0, @userptr=0x1007ff}) 13:09:31 executing program 2: ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(0xffffffffffffffff, 0x40044104, &(0x7f0000000080)=0xfffff800) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x2, 0x0, 0x0, "2f628004eb597c87686aab584d56502ec83db283e813a9aad5caa0420bdde92f", 0x31435641}) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x4000, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x2, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x8, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffc], 0x4}}}) 13:09:31 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x2, @sliced={0x0, [0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0xe7, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000000)='@\x00', 0x2) 13:09:31 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}) 13:09:31 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000003a00000425bd7000ffdbdf250a00000056f56eeea6d3445bad721f245673d65511919fa3a6267d691beea39cce7520b3807cf60b73d36a307f32ac049213ed7b55d1d49de14116f60cca0341c8ac6a569da17735157928a7b764ec36ae2af3bd441f3e66652afe93eaa63d29abe6e1745aafa605b273f66e2b6a6a538ecd850f38d48c4d4da3fd1fe298e36f759e11d7e038039b125d5368716be00bb7ea0f71b0a069300a7b24612a63eb5d200fe52bd2e0b18971f5d24454601cbb585f7b106c26e3b898a383d18e1fa595f420fd20e87a2af96661cdf95f18c9c5bcdd7379"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x8042, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x2, &(0x7f0000000080)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000500)='syzkaller\x00', 0x8, 0x5c, &(0x7f0000000340)=""/92, 0x41100, 0x15, [], 0x0, 0x0, r1, 0x8, &(0x7f0000000400)={0x1008, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x200b, 0x401, 0x5e}, 0x10, 0xffffffffffffffff, r2}, 0x78) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', r0) r3 = syz_open_dev$vim2m(&(0x7f0000000140)='/dev/video#\x00', 0x56, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:31 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:31 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x6, 'syz0\x00', 0x2}) 13:09:31 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x10800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xf4}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, @map={0x18, 0x1, 0x1, 0x0, r1}]}, &(0x7f0000000080)='GPL\x00', 0x80000000, 0x67, &(0x7f00000000c0)=""/103, 0x40f00, 0xd, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x9, 0x3, 0x7fffffff}, 0x10, 0xffffffffffffffff, r2}, 0x78) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) 13:09:31 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x110000000000fffd, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0x80184132, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x100, 0x66, 0x0, 0x100, 0x0, 0x1000, 0x0, 0x400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x5], 0x4}}}) 13:09:31 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x0, @userptr=0x400}) 13:09:31 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) clock_gettime(0x0, &(0x7f0000007000)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000006f40)=[{{&(0x7f0000005200)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000005640)=[{&(0x7f0000005280)=""/192, 0xc0}, {&(0x7f0000005340)=""/83, 0x53}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000005480)=""/8, 0x8}, {&(0x7f00000054c0)=""/39, 0x27}, {&(0x7f0000005500)=""/182, 0xb6}, {&(0x7f00000055c0)=""/103, 0x67}], 0x7, &(0x7f00000056c0)=""/197, 0xc5}, 0x4}, {{&(0x7f00000057c0)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000005940)=[{&(0x7f0000005840)=""/66, 0x42}, {&(0x7f00000058c0)=""/102, 0x66}], 0x2, &(0x7f0000005980)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000006980)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000006dc0)=[{&(0x7f0000006a00)=""/216, 0xd8}, {&(0x7f0000006b00)=""/115, 0x73}, {&(0x7f0000006b80)=""/107, 0x6b}, {&(0x7f0000006c00)=""/161, 0xa1}, {&(0x7f0000006cc0)=""/78, 0x4e}, {&(0x7f0000006d40)=""/104, 0x68}], 0x6, &(0x7f0000006e40)=""/212, 0xd4}, 0x8}], 0x3, 0x0, &(0x7f0000007040)={r2, r3+60000000}) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000007140)={&(0x7f0000007080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000007100)={&(0x7f00000070c0)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4040844) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x8051}, 0x84) sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x144, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "4667115090f847ec4b33fb8b3562db86c4221bec475e798969"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffa3ce}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff800}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x2, @local, 0x20}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @mcast2, 0x6}}}}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x972}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x3}, 0x80) sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000f80)={0x438, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1a7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}]}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x14c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xf2, 0x3, "d3d0f2790fce506123cf5e0cac7b9982ab86a157fefebc3ded1ec294fc70f3f237955452e19dcef08344813311646142c8a7c95e69ce82d2d8caac535cc40859e69b5a983e14905ca514fd3f34796db2e4e001f4b88de7c623f0bcbf86410ff701baecb3968c34602ea57ac827d3558f07a919ebaa54741fdd0762c4864ff1ff1e12caa8356a2b63689ab2293f545f35bdf9f0c9382027a4df46fcba46615d3066df37c4053a8a8f3be7422679f4717dc741ba8fd44d3ec7f3bb23a8cb258f8f8f72f2a1af715aec63253f284199972383dc1345a4ccf87a00c5e826c332c6f6ff1467c0f4ba87bb5426d2550625"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "a93f2258f123775f702efaf80c76990d6f9310be1219378c3996a3"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa63f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x45}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x36}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xeb4c431}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x46c}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc31f}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x82b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb59b}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}]}, 0x438}, 0x1, 0x0, 0x0, 0x40}, 0x8800) 13:09:31 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x4000, 0x0, 0x2], 0x4}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x284302, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000080)={0x3, 0x77, "83559a0645d8b1190a3aa5fda95192cd4a6a0b5a7d8a4f12cf800fb329201721c60c07adcb51cd5acb6df7e237f00cda723634bce16cc429ce83acaf430d538dc760ceffcc713dc2f01d07d50df35fcfd3fd8dac35d337579a00c2c65bc75a898f2cb8c3a0c569cdd3e1152387f682fa5c75af535294cb"}) 13:09:31 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x30002, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FLOW={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x30049010) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0xfffe]}}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000140)={0x4, 0x38414262, 0x2, @discrete={0x5, 0x80}}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x464000, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000280)=0x2) 13:09:31 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x1ffffc, 0x3, 0x1, {0x1, @sliced={0x0, [0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100]}}}) 13:09:31 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r0) ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:32 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) read$snddsp(r1, &(0x7f0000000080)=""/157, 0x9d) 13:09:32 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc06090}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4cc07ec4ff18bd7000fb00000000000000000000ee83975b928b44d20b9bc813871688b0905aceb28321d49e6ccadf397fdb957a30f79c57c4e423419c184f52683cb06d62610092c4b503021a53ec187513347701132b35ef337886391e04186b618acf0f3cc62f58f393f78a4876df5e353007232afb085292f441cc", @ANYRES32=0x0, @ANYRESHEX=r1], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe4]}}}) 13:09:32 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200400, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000080)=0x1) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f00000000c0)={0x8, 0x20, [0x1, 0x6, 0x940c, 0x0, 0xfffffff7, 0x9, 0x6, 0x0]}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x3, 0x3, 0x1, {0x0, @sliced={0x0, [0x6, 0x0, 0xd6, 0x3, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x1, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffb], 0x4}}}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)={0x4, 0x2, 0x4, 0x1, 0xc2, {r4, r5/1000+10000}, {0x3, 0x2, 0x7, 0x3, 0x2, 0x5c, "ec98c702"}, 0x20000000, 0x1, @planes=&(0x7f0000000280)={0x312d, 0x4a0, @fd=r2, 0xce}, 0x81, 0x0, r3}) 13:09:32 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 13:09:32 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x0, @offset, 0x0, 0x0, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r4 = mq_open(&(0x7f0000000200)='/dev/video#\x00', 0x40, 0x134, &(0x7f0000000240)={0x7, 0x1, 0x5e13, 0xa841}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) mq_timedsend(r4, &(0x7f0000000280)="5a83288e0ad9501270d8ce11a0e4b189f9a1ef760f877053e1fcbd24ca58925eaee1fe1634a0e10931562e5ac78fc47f3b9a7af24137017e33ab109fd844b1fc9f43ff654f3e", 0x46, 0x10001, &(0x7f0000000340)={r5, r6+10000000}) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000380)) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)={0x3ff, 0x3, 0x4, 0x400, 0x6, {r2, r3/1000+10000}, {0x2, 0x0, 0x1, 0x7, 0x9, 0x1, "d0721a4c"}, 0x8, 0x4, @fd, 0xc6f8, 0x0, r1}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000100)="4260dbfb7c45aa46d1cb72a89f3cbc09145b9a60da2095c065b3855257ad5c44c227359e868941fed0cd867ca53f1d4e2bd4978293e5900cc7389fc1337cc4c2e1bced0c9390d48664b18a06f9d299820a8301a1a4e7", 0x56, 0x1000, 0x0) 13:09:32 executing program 0: ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x8, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x81, 0x0, "2f3fe808"}}) 13:09:32 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x5, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x1000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x7eb0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x944]}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000280)={0x1, @win={{0x3, 0x8, 0x9, 0x1f}, 0x3, 0x200, &(0x7f0000000040)={{0x246cc9e7, 0x6ce9, 0xbcdb, 0xb3f8}}, 0x7, &(0x7f0000000080)="185a4d64deaa2bd7a531ea0c73122b3e306a163ced14290b60d17713114536be1850f8da97d509b60f79c69c751b63c0ad31486fc692d36a36cef1c3f0e08c398387fe790f555fdd81a68b397ceaacbbf5d71827957b9c70a870909fc020f9da3be6795ab5", 0x20}}) 13:09:32 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)) r2 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x31, 0x81) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000100)) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:32 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = mq_open(&(0x7f0000000080)='/dev/video#\x00', 0x1, 0x14, &(0x7f00000000c0)={0x3f, 0x6, 0x1ff, 0x6}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) mq_timedreceive(r3, &(0x7f0000000100)=""/49, 0x31, 0x5, &(0x7f0000000200)={r4, r5+60000000}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x10000, 0x1ff, {r1, r2/1000+10000}, {0x0, 0x12, 0x0, 0x0, 0x0, 0x0, '\b\b\x00'}}) 13:09:32 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x0, 0x40, 0x3, 0xd29, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x10004, 0x13, 0x5}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x9, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x1d8}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1f2f, 0x0, 0x0, 0x0, 0x4dd1}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x3, 0xab, &(0x7f0000000200)=""/171, 0x100, 0x2, [], 0x0, 0x12, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x6, 0x0, 0x1}, 0x10, 0xffffffffffffffff}, 0x78) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, "2f3fe808"}}) sched_rr_get_interval(0x0, &(0x7f00000003c0)) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000440)) 13:09:32 executing program 1: syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0xfffffffffffffffe, 0x2) 13:09:32 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2000, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0x1000, 0x4, 0x59555956, 0x1, 0x2, 0x9, 0x0, 0x7ff, 0x1, 0x8, 0x2, 0x5}}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) 13:09:32 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x0, @offset, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0xffffff01, 0x1, 0x4, 0x4, 0x401, {}, {0x5, 0x0, 0x5, 0x1a, 0x1f, 0xd9, "281bc7c8"}, 0x1, 0x2, @offset=0xa7, 0x5, 0x0, r1}) [ 2142.536426] Unknown ioctl -1060088256 13:09:32 executing program 4: ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x1fc0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4]}}}) 13:09:32 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:32 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x20000810) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:32 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x200000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000200)={{0x7, 0x0, 0xd6a, 0x40000, 'syz1\x00', 0xc4}, 0x1, 0x1, 0x80000000, 0x0, 0x4, 0x5, 'syz1\x00', &(0x7f0000000080)=['/dev/video#\x00', '\x00', '/dev/video#\x00', '}$(\x00'], 0x1d, [], [0x200, 0x605, 0x0, 0x6]}) 13:09:32 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x4, 0x1, 0x3}) 13:09:32 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) socketpair(0x3, 0xa, 0x7, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0xe02, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) sendto$rxrpc(r3, &(0x7f0000000300)="faa99ffaad67e11e0b2dbbeb9e31c352063007686e9b991a9825f21958951776f3a4d4e1e5c612b3deadddbd249b1857e549", 0x32, 0x4000, &(0x7f0000000340)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x64010102}}, 0x24) write$apparmor_current(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="6368616e676570726dd936541a7f134e48e466b36c65202f"], 0x18) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x2, {0x1, @sliced={0x151, [0x6, 0x0, 0x3, 0x3f, 0x0, 0x1, 0x5, 0xf7, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x68, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffff, 0x0, 0xfffa, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xfffd, 0x0, 0xff, 0x3ff, 0x0, 0x0, 0x0, 0x800, 0xfff7], 0x4}}}) 13:09:32 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x0, @sdr={0x36324a48, 0x2}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:32 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000100)={0x0, 0x1, 0x4, 0x0, 0xfffffffc, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x0, "2f3fe808"}, 0x0, 0x1, @planes=&(0x7f0000000080)={0x9, 0x7, @fd, 0x9}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x8000, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r3) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r4) r5 = getpid() syz_open_procfs$namespace(r5, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f00000001c0)={{0x6, 0x6, 0x1ff, 0x2, 'syz0\x00', 0x4}, 0x0, 0x400, 0x27, r5, 0x5, 0x3, 'syz0\x00', &(0x7f0000000180)=['l2tp\x00', '}+^&[,/@.\x00', '\x00', '$[*$[\x00', '/dev/urandom\x00'], 0x23, [], [0xfff, 0x8, 0x8000, 0x66f]}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0xfffffc01, 0x1, 0x3}) [ 2142.865495] Unknown ioctl -1060088256 13:09:32 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x670, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x64c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1f}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x1, @remote, 0x9}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @local}}]}, {0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x5, @mcast1, 0xfa9}}, @WGPEER_A_FLAGS={0x8}]}, {0x4a4, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8001}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x1c8, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x7, @mcast2, 0x5}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x80000001, @mcast2, 0x8}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x26c, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x40}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @multicast2}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x4}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c5c1ed87560d956afc72bc83db82d548a8d92dbf19f2c6a1f7dfadef6ecb1905"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "78139fd95df356750228585e02aef09f4dd53f4a3fafebd87b72c460282d1062"}]}, {0x58, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8, @private0, 0x8}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x5a}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4}]}]}, 0x670}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f00000000c0)=0x3) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x4000000) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x84001, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/vsock\x00', 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000ac0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x2c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x29}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x80) ioctl$SNDCTL_DSP_GETTRIGGER(r2, 0x80045010, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x8000003, 0x1, {0x1, @sliced={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xe7, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x746, 0x0, 0x0, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}}}) 13:09:32 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000340)='/dev/video#\x00', 0x1, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x8ac, 0x1, {0x2, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) ioctl$VFIO_IOMMU_GET_INFO(r2, 0x3b70, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x3f}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000300)={0x7, 0x4, [0x6]}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r3) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000280)={0x7, 0x4, 0x4, 0x40, 0x3b68, {0x0, 0x2710}, {0x2, 0xc, 0x20, 0x80, 0x7f, 0x0, "c0076eb3"}, 0x8, 0x4, @fd=r1, 0x7fff, 0x0, r1}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000080)={0x1, @raw_data="a80236b46838656d7511d3bd3202dc83678a31f304fc5823669e2b0eaafa2298ca96060fc487975db42bbad230cae12d684689b23a0e42ff17239a621f7acbc5f48402584f98135c7ac80546f8420ffacbc7011a03794a14c9be5ea066d3ac118dc5e1d2d34fde449fe849298efcfe1e61f1e9c27382d3b87a597f12490c376da2fec8c11b9689425fb7d42ef28141c01c9df65ec9deed48b44c44ee81d8d4fd2080433b1aa7f6c9085ab43fabf2b5ad404fb2a5c609d49cce206b6959af1c3c104964185c374cf3"}) 13:09:32 executing program 1: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x4, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0xe7, 0x0, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x10]}}}) 13:09:32 executing program 5: syz_genetlink_get_family_id$tipc2(0xfffffffffffffffe, 0xffffffffffffffff) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0xffff, 0x1, 0x5, 0xff, 0x85, 0x100, 0xe7, 0x8, 0x9235, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x3}}, 0x9}) 13:09:33 executing program 4: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4]}}}) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x6bf}) 13:09:33 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000540)={0x3, @win={{0x1, 0x1, 0x9d4b, 0x1}, 0x5, 0xc0, &(0x7f0000000480)={{0x25a, 0x1, 0x8, 0x6}, &(0x7f0000000440)={{0x1, 0x100, 0x3ff, 0xff}, &(0x7f0000000400)={{0x5, 0x1000, 0x401, 0x9}}}}, 0x4, &(0x7f00000004c0)="cca775f50724b5674b99dd2cb0952c267d1827000b2c9a6665af50209cc7f4511f9d340d68e974de22671a47f162129f21d4f6b11fe78d3f8554dfeb3f63f5b44240ca", 0x9}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000680)='fou\x00', r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048800}, 0x4010) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048800}, 0x4010) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048800}, 0x4010) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=@RTM_DELMDB={0xd8, 0x55, 0x10, 0x70bd28, 0x25dfdbfb, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x1, {@in6_addr=@empty}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x5, 0x4, {@ip4=@private=0xa010102, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x3, 0x0, {@ip4=@broadcast}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x0, {@ip4=@multicast2, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x1, 0x2, {@in6_addr=@empty}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x0, 0x4, {@in6_addr=@private0, 0x8edd}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40800}, 0x20000830) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000640)=0x1) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x0, @offset, 0x0, 0x0, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$vim2m_VIDIOC_QUERYBUF(r10, 0xc0585609, &(0x7f00000000c0)={0x8, 0x0, 0x4, 0x8, 0x9, {}, {0x5, 0x0, 0x7, 0x7, 0x5, 0x7, "ade03d6b"}, 0x7f, 0x1, @fd=r11, 0x20, 0x0, r9}) 13:09:33 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x188800) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x2, @win={{0x4, 0x6, 0x4, 0x6}, 0x7, 0x80000000, &(0x7f0000000100)={{0x7, 0x2, 0x0, 0xffff}, &(0x7f00000000c0)={{0x1, 0x2, 0x6}, &(0x7f0000000080)={{0x3f, 0x10000, 0x3, 0x2}}}}, 0x6, &(0x7f0000000280)="57b08973740ac7c89ab33ac6758c3539af3a54a8a58bcebeacaf068a5bb3364663fdef823944a4a77979240fbca297f7953f44ebf49a3b820c2194efe991e45c1579c44195be65d33fea0e04d6aa127dd7a05ff8e413b6ead0a72ee9ed61cc86ba8a40ee21692e707e122efb06c6e874a9f3b31238fda31897a4e9f322922a855ebc63973a5e0190f0ffd3d8544fc01822c7a6ab21f6a815ba7de6174f7a1fa50eb559fe4b72d4e69bc1005e77aad367db9bb7efe7966e2e3354a370175b84bd639ca1b9886ded3e56bb5b2a590a6f5c6ef4671fe244658393aa8654ff5272d8", 0x9}}) 13:09:33 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x12e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100)='l2tp\x00', r1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000280)={0x3, 0x8000}) r2 = syz_open_dev$vim2m(&(0x7f0000000140)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000003c0)={0x2, @pix={0x5, 0x7, 0x30314247, 0x1, 0x10000, 0xbf4, 0x6, 0x5, 0x0, 0x0, 0x2, 0x6}}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r3) openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvram\x00', 0x140, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r1, 0xc0884123, &(0x7f0000000040)={0x6, "a6a3a231ab48445dbad6ff0f0000050000009527f3da09af01b48cfe2d000072000000cb0a41ca96eda80100000080000000d90000000504e7ffff72b1696100", {0x2, 0x2}}) 13:09:33 executing program 0: r0 = mq_open(&(0x7f0000000000)='/dev/video#\x00', 0x800, 0x20, &(0x7f0000000080)={0x3, 0x9, 0x7f, 0x6}) mq_timedsend(r0, &(0x7f00000000c0)="3107ca40a2c417b584b0d238a5", 0xd, 0x6, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r3) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000200)={0x401, 0x3, 0x4, 0x1000, 0x4b77, {0x77359400}, {0x737a8c4409532cc5, 0xc, 0x3f, 0x4, 0x3, 0x7, "b712fffe"}, 0x1ff, 0x2, @fd=r3, 0x80}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000100)={0x9, 0x5001b17, 0x1, @discrete={0x3, 0x2}}) 13:09:33 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91, 0x0, 0xe7, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) syz_open_pts(r1, 0x98d00) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) 13:09:33 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) pipe(&(0x7f0000000100)) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x3, 0x4, 0x40, 0x0, {r1, r2/1000+10000}, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:33 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc000000) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a2c, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x4}}}) 13:09:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x14000, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280)='l2tp\x00', r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r3, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xfc}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_virt_wifi\x00'}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1000}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x50}}, 0x8040) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0xd08, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x26}, @val={0x8}, @val={0xc, 0x99, {0x3, 0x5b}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x25}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4080800) r4 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000000180)={0x3ff, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, "2f3fe808"}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00', 0xffffffffffffffff) 13:09:33 executing program 5: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) 13:09:33 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f00000002c0)={0x2, @vbi={0xc7, 0xffff, 0x2, 0x3631564e, [0x4, 0x1], [0x80, 0xfffffffb], 0x13a}}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r3) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)={0x3f, 0x1, 0x4, 0x70000, 0x7, {0x0, 0x2710}, {0x4, 0x2, 0x6, 0x81, 0x1, 0x2a, "03206b27"}, 0xff, 0x3, @userptr=0x4, 0x1}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r4) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x80000) ioctl$vim2m_VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f0000000200)={0x291, 0x1, 0x4, 0x10, 0x1, {0x77359400}, {0x4, 0x2, 0x1, 0xf2, 0x8, 0x4, "b50f3c12"}, 0x401, 0x3, @offset=0x4, 0xfffffffd}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000100)={0x0, 0x3, 0x4, 0x100000, 0x0, {0x77359400}, {0x0, 0x2}, 0x0, 0x4, @planes=&(0x7f0000000000)={0x6, 0x8, @fd=r4, 0x2}}) 13:09:33 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x1, 0x9}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) [ 2143.462828] Unknown ioctl -1060088256 13:09:33 executing program 2: syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x100000000010001, 0x2) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x4000) read$snddsp(r1, &(0x7f0000000100)=""/138, 0x8a) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x101, 0x1}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 13:09:33 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4]}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x420200, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048800}, 0x4010) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r4, 0x16, 0xfb, 0x80, 0x400, 0x1, @private2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7, 0x40, 0xecf, 0x400}}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x2, 0x1, 0x3}) 13:09:33 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x3, @offset, 0xff}) [ 2143.618772] Unknown ioctl -1060088256 13:09:33 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x24, 0x0, "2f3fe808"}, 0x0, 0x0, @planes=&(0x7f0000000080)={0x85, 0xb2a638e, @fd, 0x8}}) 13:09:33 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x14240, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)={0x1, 0x2, 0x4, 0x0, 0x2, {0x0, 0xea60}, {0x2, 0x0, 0xc9, 0x6, 0xfb, 0x0, "2b0060e9"}, 0x1, 0x1, @fd, 0x1ff}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:33 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000080)={0x0, @pix_mp={0xbe, 0x3, 0x3032344d, 0x8, 0x6, [{0xfcc2, 0x7ff}, {0x7ff, 0x4}, {0x0, 0x4}, {0x5, 0x1}, {0x6, 0x7}, {0x1f, 0x7fffffff}, {0x8001, 0x2}, {0x9, 0x3}], 0x40, 0xff, 0x2, 0x2, 0x7}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0xe7, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}}) 13:09:33 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x3, {0x77359400}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9, 0x8100) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r1, 0x40044103, &(0x7f0000000080)=0x7) 13:09:33 executing program 0: ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x4}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair(0x2c, 0x80000, 0x6, &(0x7f0000000100)) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4, @private0}}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x2, @pix_mp={0x3, 0x100, 0x30314142, 0x8, 0x8, [{0x2, 0x9}, {0x1965, 0x3}, {0x2, 0x200}, {0x5}, {0x62c, 0x13fb}, {0x5, 0x5}, {0xfffffff8, 0xe2}, {0x3, 0xa00}], 0x81, 0x7, 0x4, 0x1, 0x5}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000200)={0x2, 0x6, 0x1, {0x3, @raw_data="ebaa17c92e52b81d435800878c7ab1fea735e9a7fb9f8cca7f5e3c56933250df486b29a7961f8d5abdf28a72ce836b17ea48a2633542a4eb98c239528a6d2644814414b3a635f5788a39d5345277dfd6d68a28d621aa5136c784b40bcad9d85393948b2c744ff35333309eb760eb564b6d2caa7774735d7f766941090150fcbd9d6b71d6b9c820d19c5d48e7da9d34da9d9124b76e2825826b455e2675a50d8da898fe1e3ccd7952be6844814df86693c7490c7a6258b0cd4c0031b0f13abd9626311cbe93458990"}}) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000300)={0x3, 0x5, 0x1, {0x1, @sliced={0x4, [0x1, 0xff, 0x8, 0x3, 0x8, 0x5, 0x9, 0x7ff, 0x200, 0x8000, 0x3f, 0x7, 0x9, 0x1ff, 0x0, 0xcc, 0x9, 0x800, 0x40, 0x1, 0x0, 0xff, 0x20, 0xffff, 0x1f, 0x3, 0x80, 0x2, 0x3, 0x6, 0x8001, 0x9, 0x1, 0x68, 0x3, 0x5a40, 0x1, 0x76, 0x800, 0x7fff, 0x3f, 0xf70b, 0x27, 0x0, 0x3, 0x1, 0x1, 0x4], 0x726a}}, 0x20}) 13:09:33 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0xfffffffd, {0x77359400}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x83, "2f3fe808"}, 0x0, 0x0, @planes=&(0x7f0000000000)={0x9a, 0x7f, @userptr=0xff, 0x7fffffff}, 0xffffffff}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x6, 0x0, 0x4, 0x20, 0x93, {0x0, 0x2710}, {0x3, 0x8, 0x3, 0x81, 0xfc, 0x1, "1b5ae8dd"}, 0x6, 0x0, @fd, 0x4}) 13:09:33 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x2, @win={{0x3, 0x3f, 0x2, 0x800}, 0x2, 0x0, &(0x7f00000000c0)={{0x1, 0x1000, 0x0, 0x3}, &(0x7f0000000080)={{0x8, 0x7ff, 0x7fffffff, 0x3f}, &(0x7f0000000000)={{0x8, 0x8, 0x3, 0x82}}}}, 0x8000, &(0x7f0000000280)="c34e9e131ebda777905e2c18d85fff8dc0c470b9b15d97cfde4ac8ac9505206a0a9bb10ab1772a88ddbb3f5756dfa170ed82824aab88b7b4d2393d590829d612b8caf01d35221f9ccf9d3c21bb04eaf5962658d4d419f92a636553c00502ec8ebde82512aa6f04b06a60763d7fb35017783a543d0ce5988bd92e99ba8cf6d85ea76d59fb2100527d2b06ec94d42a84a45b3c93e2e5a6ac22bb2b399e6ee0329a06f36ad2719bc73d2cce310862de84611d611d8a", 0x81}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:33 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0xae, 0x3, 0x4, 0xe000, 0xfffffffb, {0x0, 0xea60}, {0x3, 0x2, 0x69, 0x4, 0x3f, 0x81, "206069c6"}, 0xfffffff8, 0x2, @planes=&(0x7f0000000040)={0xc2, 0x7, @userptr=0x4, 0x19ab4cd}, 0xffff}) ioctl$SNDRV_PCM_IOCTL_INFO(0xffffffffffffffff, 0x81204101, &(0x7f0000000340)) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4]}}}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040028bd7000fcdbdf257f0000000c7c1f197df4c8dd5500990080000000640000000a00f5000802110000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4010) 13:09:33 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x0, @offset, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x3ff, 0x2, 0x4, 0x4, 0x101, {0x77359400}, {0x4, 0x0, 0x6, 0x3, 0x0, 0x7, "7b7ad6ef"}, 0xaf, 0x1, @planes=&(0x7f0000000000)={0x3ff, 0x5, @userptr=0x7f, 0x6}, 0x7, 0x0, r1}) 13:09:34 executing program 2: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x7fffffff, 0x8, 0x4, {0x1, @raw_data="5af56915472333f05188cc848ab6735fefc3b79183ea385fcbaa3bf603e3999ee142218bb5bb34ad7bde056990cddefeb6ed097c461ef723eda4c1f95d45e5746a39323d050d2d56831d74463902046d41743b87e05acc3ca82d40418b664a25f94628154023e20c1dc874a6ba5ff6e8d639e59072f6c09890f3ee27414146301d27e57855eb8d6fd962de70096c9d71e9664f12b9755713b209ed5b97051729f62be8bfa5d89097237b85eef753220efae2ae777328ef987e909850dedfc35c682775f8ccacf727"}, 0x2}) 13:09:34 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x301840, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000000)=0x2) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000340)) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) r3 = getpid() syz_open_procfs$namespace(r3, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r4) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r5) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x11c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4880}, 0x40) 13:09:34 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) 13:09:34 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:34 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @vbi={0x10000, 0x8f, 0x400, 0x64737664, [0x1, 0x2], [0x2, 0xb], 0x1}}, 0x1}) syz_open_dev$vim2m(&(0x7f0000000280)='/dev/video#\x00', 0x2, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0xa3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x2, @raw_data="03c45c750d57c2b0276405743b8274d0a28bc3a83093903a6241a00fdc2977015801b8a4440b1bdae9a60148a6b6644b2aa339d277f00ace7ca086339097e7b5d10dc51b7eba4bb4938a790191a9d733f7ccf219519a911cbda34ffb6b70b12f13317c29f3c5e4388acca88cf81d6a0e88ac48cea980b905625807166e6d7a6d7c62c36368bfedffb61483c0013dd9eaa0e7907549c4db7f6605fc48adfd00441b07a70da567b94cee7d9e001a18732eb61d9e5f371d2e6b87865174b10c1843b067b53fe488281a"}) 13:09:34 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x191000, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000140)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x1) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x488000, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xc8, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x48810}, 0x4815) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xe4, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1f, 0x2000, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) 13:09:34 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xef93, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000240)={{0x4, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:34 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) pipe(&(0x7f0000000080)) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000000)='$\\#-\x80$0,\x00', 0x9) 13:09:34 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x808080}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c9a00002200000126bd7000fedbdf250280147f040000080e00dcb8"], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvram\x00', 0x80900, 0x0) mq_timedsend(r2, &(0x7f00000002c0)="a1ccad80362b3ba28982259cd123ea500f2b4cc29c69e03f291209366c7b83cf7dd670c15bafab80f1c138302f0eec693c5138485eccf3b181638919aee232ad0504c4d3654b57336c816a8e82b9cd2386d8e0012e6b907b5fbcfe0d195a20a9d1b29d299389f7802705ca8c1c970e4a61ae5208c3732143ff4dad96f29a6575f3bb0fa7b642f0b41f7e6cf7c3cdcd330fd6", 0x92, 0x0, &(0x7f0000000380)={0x77359400}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r3) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x4, &(0x7f00000003c0)=@raw=[@jmp={0x5, 0x1, 0x2, 0x4, 0x8, 0x100}, @map={0x18, 0x8, 0x1, 0x0, r3}, @exit], &(0x7f0000000400)='syzkaller\x00', 0x9b, 0x43, &(0x7f0000000440)=""/67, 0x40f00, 0x13, [], 0x0, 0x18, r4, 0x8, &(0x7f00000004c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0xc, 0x5, 0x7f}, 0x10}, 0x78) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:34 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:34 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00', r1) 13:09:34 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x10800, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyprintk\x00', 0x10000, 0x0) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000100)) r3 = getpid() syz_open_procfs$namespace(r3, 0x0) mq_notify(r1, &(0x7f0000000080)={0x0, 0x4, 0x0, @tid=r3}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x100, 0xfffffffd, {0x77359400}, {0x4, 0x8, 0x0, 0x0, 0x0, 0x4, "2fd7e808"}}) prlimit64(r3, 0xd, &(0x7f0000000140)={0x4, 0x443}, &(0x7f0000000200)) 13:09:34 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x7, 0x4}) 13:09:34 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000040)={0xe2, 0xfffffffe, 0x7, 0x101, [], [], [], 0x5, 0x0, 0x6, 0xfffffa4e, "51433c446acebad4659ddc13a972c062"}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4]}}}) 13:09:34 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r4) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)={0x2, 0x3, 0x4, 0x2830, 0x3, {r2, r3/1000+10000}, {0x4, 0x1, 0xe3, 0xff, 0x9, 0x3, "8c7229bd"}, 0x7, 0x4, @offset=0x1000, 0x2, 0x0, r4}) r5 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x2000, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r5, 0x3b70, &(0x7f0000000140)={0x18, 0x0, 0x0, 0x5}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @raw_data="7b74fc47238b35631e14b0198bf7b9bc77da3c5d3889b5f30d0f5cb5cca691fec968b98124c6a18062afa9ccb6988b731e10a3d6370604a784d9b1bb61dea82ed6351c43c65cafa7c7a0ac31c4a852f17c18c48a4e24a14063cd552ad7fe6caee7c28b713abb7c14a28491fe6c27692deee4522918280b480ce0f233bd290abde4de1febfa4582f4c3f5859364d4e6531a91a0d5b3a1900f4261c2ae870913d6bcfb33aa468af38dba01d16ab37b5c4f011627c4edf264072d53ef6c2addf590518b5839be554a2d"}}) 13:09:34 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000100)={0x2, @sdr={0x47504a4d, 0x1}}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00 \x00', @ANYRES16=r3, @ANYBLOB="7504000000000000000008000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008}, 0x20004803) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xfffffffffffffc21}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x0, 0x2, 0x2, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x25}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x20060000}, 0x8054) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x4000000, 0x1, 0x4, 0x100, 0x7fffffe, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x0, @userptr=0xc811, 0x7}) syz_open_dev$vim2m(&(0x7f0000000440)='/dev/video#\x00', 0x8, 0x2) 13:09:34 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000100)={0x3, 0x3, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a9ede808"}, 0x0, 0x0, @offset=0x3ff, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000001c0)) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000080)={0x9, 0x6, 0x4, 0x2000, 0x122, {0x0, 0x2710}, {0x5, 0x2, 0x0, 0x4, 0x0, 0xda, "5ec0a556"}, 0x4, 0x4, @offset=0x49, 0x1e3062f, 0x0, r1}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000180)={0x800, 0x2, 0x0, "a70c08c7783efe3e31bf01b01565789cd7361c44b7279f682027258d114f6d23", 0x5347504d}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000240)={0x0, 0x6, 0x4, 0x4000, 0x6, {}, {0x1, 0x8, 0x81, 0xe, 0x6, 0x8, "26650567"}, 0x2, 0x1, @userptr=0x81, 0xffff}) 13:09:34 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xa7b2910b5b46a570}, 0x800) 13:09:34 executing program 4: ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000040)={0x8, [0x5, 0x9, 0x3], [{0x1, 0x20, 0x0, 0x0, 0x0, 0x1}, {0x200, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x2, 0x10000, 0x1, 0x1, 0x1, 0x1}, {0x0, 0x4}, {0x1f, 0xe1, 0x1, 0x1}, {0x7, 0x200, 0x0, 0x1, 0x1}, {0x4, 0x3ff, 0x1, 0x1, 0x1, 0x1}, {0xffffff01, 0xa000, 0x1, 0x1}, {0x7fff, 0x7fff, 0x0, 0x1}, {0x21, 0x9}, {0x6, 0xb5, 0x0, 0x0, 0x0, 0x1}, {0x401, 0xffff0972, 0x1, 0x1}]}) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4]}}}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000380)={0x0, 0x20, 0x3, 0x6, 0x9, 0x0, 0x10000, 0x80000001, 0x5, 0x74f, 0x7, 0x4}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000280)={0x4, 0x7e, 0x2, {0x1, @vbi={0x0, 0x29e5, 0xfff, 0x43564548, [0x87, 0x97], [0x9, 0xe106], 0x1}}, 0x6}) 13:09:35 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000100)={0x1, 0x2, 0x4, 0x10, 0x7, {r1, r2/1000+10000}, {0x1, 0x1, 0x3f, 0xfa, 0x0, 0x27, "ffcca686"}, 0x401, 0x3, @planes=&(0x7f00000000c0)={0x8000, 0x0, @mem_offset=0x2, 0x9}, 0x4}) r3 = mq_open(&(0x7f0000000280)='/dev/video#\x00', 0x2, 0x10, &(0x7f00000002c0)={0x2, 0x9, 0x4f3}) mq_timedreceive(r3, &(0x7f0000000300)=""/204, 0xcc, 0x100, &(0x7f0000000400)={0x0, 0x989680}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:35 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0xf98, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}}) 13:09:35 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x101, 0x0, 0x5a23, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0xc19, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10]}}}) 13:09:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x100000004010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:35 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x20001, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000080)={0x2, 0x2, 0x4, 0x100, 0x3, {0x77359400}, {0x0, 0x2, 0x7, 0x3, 0x1, 0xff, "d3bc0a63"}, 0xffffff7f, 0x0, @planes=&(0x7f0000000040)={0x7, 0x3ff, @userptr=0x7ff, 0x3f}, 0x9}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4]}}}) 13:09:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x6, 0x0, "2f3fe808"}}) 13:09:35 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000380)) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0xa, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x25}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x24000086) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x7, 0x9, 0x3, {0x0, @sdr={0x30314142, 0xf5c}}, 0x10001}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000000)={0x3, 0x18, [0x2, 0x1000, 0x3, 0x1, 0x3f, 0x5]}) 13:09:35 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048800}, 0x4010) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r1, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x4080}, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000080)={0x1, 0x1, 0x4, 0x4000, 0x2, {}, {0x3, 0xc, 0x9, 0x0, 0x70, 0x4, "fd337223"}, 0x1, 0x2, @fd, 0x3}) 13:09:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000100)={0x20, 0x3, 0x4, 0x6, 0x7}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x3, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1bf5c8fbf523abac) r3 = getpid() syz_open_procfs$namespace(r3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000200)={{0x9, 0x1, 0x5, 0x10001, 'syz0\x00', 0x1ff}, 0x2, 0x20000000, 0x7f, r3, 0x2, 0x8, 'syz1\x00', &(0x7f0000000080)=['<(-//-*\x97$*)-,\'\xd9-\\@\x00', '&]A\x00'], 0x17, [], [0x9, 0x0, 0x7f, 0x7ff]}) 13:09:35 executing program 1: ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000280)={0x2, [[0x1, 0xffffb1da, 0xa4d, 0x2, 0x3f, 0x2, 0x81, 0x5], [0x2, 0x0, 0x5, 0x7fff, 0x4, 0x48e3, 0x80, 0x1ff], [0x2, 0x9, 0x8000, 0x4, 0x3ff, 0x1, 0x5, 0xe2]], [], [{0x0, 0x3, 0x1, 0x0, 0x0, 0x1}, {0x3, 0xca, 0x0, 0x1}, {0x9, 0xbc}, {0x1f, 0x433a680c, 0x0, 0x1, 0x0, 0x1}, {0xe2b5, 0x40, 0x1, 0x0, 0x1, 0x1}, {0x0, 0x9, 0x1, 0x1}, {0x101, 0x81, 0x0, 0x0, 0x1}, {0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x3, 0xffffff81, 0x1, 0x1, 0x0, 0x1}, {0x6745, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x1551, 0x3, 0x0, 0x0, 0x1}, {0x9, 0xb, 0x1, 0x1, 0x0, 0x1}], [], 0x6}) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) 13:09:35 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x3, @vbi={0x7f, 0x6, 0x8a8a, 0x32314d4e, [0x6, 0xfffff001], [0x9697, 0x8109], 0x108}}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:35 executing program 5: add_key$fscrypt_provisioning(&(0x7f00000000c0)='fscrypt-provisioning\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)={0x2, 0x0, @auto=[0x2e]}, 0x9, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @multicast1}}, 0x24) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x80, 0x0, 0x3, "dd0f5aaee28a9ec84b14ef030519beff966779424d4a9913d3e5236c0a0df963", 0x31303553}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x3, @sliced={0x0, [0x6, 0xffff, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0x7ff, 0x8, 0x101, 0x66, 0x10, 0x100, 0xb633, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, 0xfffd, 0x8, 0x0, 0x0, 0xfffe], 0xfffffff9}}}) socketpair(0x29, 0xa, 0x8000, &(0x7f0000000280)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8001, 0x55}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r5) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0x90, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x920}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7fff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffff9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xf385}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}]}]}]}, 0xcc}}, 0x8081) 13:09:35 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, 0xfffffffffffffffe) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4]}}}) 13:09:35 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xffff0000, 0x3, 0x0, "5f809d2f82a03b3eac0f0739dd96a9ebe2efb7abbe2bd03c6eeb12182bf602a8", 0x48524742}) 13:09:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x40000810000, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:35 executing program 2: r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x18, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000400)={0x2e0, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8a82}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x56c6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_LINK={0x100, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3125}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x11c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd907}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdd8f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffc2f}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x24048850}, 0x4008040) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r0, 0x1}, 0x14}}, 0x0) socketpair(0x15, 0x80000, 0x1, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)={0x44, r6, 0x9f6f37c8753f0475, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7ff}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x101}]}, 0x44}}, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r7) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="007008001700000000", @ANYRES32=r7, @ANYBLOB="05000400e0000000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000827bd7000fedbdf2503000000000000000000aa050003008400000008000600ac1414bb050003003a00000008000800"/66], 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x800) r8 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, r9, 0x1}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000003bc0)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x80000881}, 0xc, &(0x7f0000003b80)={&(0x7f0000003a40)={0x130, r9, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x130}, 0x1, 0x0, 0x0, 0x14}, 0x40884) 13:09:35 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) recvfrom$rxrpc(r1, &(0x7f0000000200)=""/4096, 0x1000, 0x20, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x24) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x5a3fc3525fb6ca85, @sdr={0x31435750}}) 13:09:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) ioctl$SNDRV_PCM_IOCTL_RESUME(0xffffffffffffffff, 0x4147, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)={0x81, 0x2, 0x4, 0x8, 0x8, {0x0, 0x2710}, {0x4, 0x0, 0x90, 0xff, 0x7f, 0x0, "edfbc0ab"}, 0x8, 0x2, @planes=&(0x7f0000000080)={0x10001, 0x6, @mem_offset=0x4, 0x18}, 0x1ff}) 13:09:35 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x25}}}}, ["", ""]}, 0x20}}, 0x20004804) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0xe000, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x0, @fd}) 13:09:35 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00', r1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x7, 0x2, 0x4, 0x20, 0x20, {0x77359400}, {0x3, 0xc, 0x9, 0x7f, 0x1, 0x1, "0259f002"}, 0x5, 0x4, @fd, 0x3f, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000100)={0x8001, 0x3, 0x4, 0x1, 0x3c1, {}, {0x2, 0x2, 0x5, 0x6, 0x5, 0x4, "c115da24"}, 0x5, 0x2, @planes=&(0x7f0000000000)={0x4, 0xffff9b89, @fd=r1, 0x7}, 0x7, 0x0, r2}) 13:09:36 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x802, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_pts(r1, 0x900) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4]}}}) 13:09:36 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x1, 0x2, 0x6}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x3, @sliced={0x0, [0x2, 0x0, 0x0, 0x0, 0xc8, 0x0, 0xfffe, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x63, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4], 0x4}}}) 13:09:36 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x2, @sdr={0x20493859, 0x6}}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:36 executing program 5: ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000100)={0x75, 0x2, 0x0, 0x9, "3dc05761a33a2dfd209d3b3c46e2a7bcb7a33510542704007841b9bffc021f08db69383e2f12834df55b836b7bdf8934c99657e5a76361fa154686714fda1fc62bed07c568f5c9f5508500ff140941235f2164378e18020224be7351b5"}) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000002c0)={0x3f, 0x3, 0x4, 0x100000, 0x2, {r1, r2/1000+60000}, {0x4, 0x2, 0x80, 0x1, 0x2e, 0x80, "559501ad"}, 0x0, 0x4, @planes=&(0x7f0000000340)={0x0, 0x10000, @fd, 0x1000}, 0xb7f}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x64b6, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0xffff], 0x4}}}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080)) 13:09:36 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000080)='-!\x00', 0x3) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:36 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x2) 13:09:36 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000000c0)={0x1, 0x3, 0x4, 0xe000, 0x80000001, {r2, r3/1000+10000}, {0x3, 0x8, 0x7, 0x1c, 0x1, 0xf7, "5ebacaf3"}, 0x2, 0x3, @userptr=0x5}) ioctl$SNDRV_PCM_IOCTL_RESET(r1, 0x4141, 0x0) 13:09:36 executing program 1: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$SOUND_PCM_READ_RATE(0xffffffffffffffff, 0x80045002, &(0x7f0000000000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0xffff, 0x3, 0x1, {0x1, @sliced={0x51, [0xa000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x5]}}}) 13:09:36 executing program 3: ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, &(0x7f0000000380)) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xeb}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) mq_notify(r1, &(0x7f0000000000)={0x0, 0x34, 0x1, @thr={&(0x7f0000000080)="1d761f63ab541c6e2dce4e13ffaadc29f35bd215425deb026c3a05a36a89a57f9d6403d97d85f7d0242cd7542af41be287a8a61a46a07282c33af968259b2c5c4e66ab95905f57c71e7c0d01641a4681e11ecb4c8ba64d9c645c90a1c7ac88e92f4abdf47782096524c8ecc56fd27c7b20e293d0ff011336f68ba490de3153ccbc52baacb00bf4aff929e018c01d7b3538e54422bf5abc74511808e5ce602dea282c5c138f43ac771838c55da0c29653b17c7913e066e455ee5eb4d54e0177d4c352", &(0x7f0000000200)="ad6abe73e2b693b7b553e291a2737552a609cfdb3b945741676e832e1ee8a3730963efc37884b4f7a547f1fa4482afe8f72e57ec5e194fa5d6642e93954b6b323c996a5afb936165d2c5eee8c98eba167c87edc84f2cf91c0e8dc1d4c8c4098d260337ee6abdac96414397ac3dcd619775aad602e6e93d1b8ef709908183"}}) 13:09:36 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x2, 0xa2be0f7, 0x1, @discrete={0x10001, 0x80000001}}) 13:09:36 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x2) 13:09:36 executing program 4: ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) prlimit64(0x0, 0xd, &(0x7f0000000040)={0x81, 0x100}, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x50000) ioctl$KIOCSOUND(r0, 0x4b2f, 0x604f) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x66]}}}) syz_open_dev$tty20(0xc, 0x4, 0x0) 13:09:36 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:36 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4]}}}) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x3, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1b}}, 0xec}}, 0x24) 13:09:36 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r4) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f0000000280)={0xfffffffd, 0xec, "f0d4344afeb3233b1d2fffe3aefaf94d52403b0ad145a4461cfff561c1d8a1b52b73820dfbb221530de3935a49104013c89d0bd0d05cb8ceb6597b48d2185e86c20fd33705ee41d84d6397769dec5262c0e06665d84c8ae44631f6214a3aba846392d2e430c48984bdec6a08377e2f97e107233e4fc7d9f3637e2f0f1c83ba5e7777468fca159886a93d23ae57873cdad1086732f2257fc068fe65e9cd98f625acdcd69d9ab3c04417d13cb506d168b9124b4e0d7c4c1c1173fc7b88fc9fcad785cd0c7407eaaa4a2429552227cd0fe697e7e0ef39b5a6173b4326db3871bf7f805ec6940bec36f9338f3a84"}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)={0x4, 0x3, 0x4, 0x1, 0x1, {r2, r3/1000+60000}, {0x2, 0xc, 0x1, 0x20, 0x7, 0xf8, "a4ad2ae9"}, 0x10001, 0x3, @offset=0x8, 0x5a9}) 13:09:36 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000000c0)={0x4, 0x1, 0x4, 0x10, 0x9, {r2, r3/1000+10000}, {0x4, 0x1, 0x20, 0x2, 0x1, 0xff, "0cc4852e"}, 0x8, 0x4, @offset=0xfc, 0xfffffff8}) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000140)=0x3) 13:09:36 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000b40)=[{{&(0x7f0000000040)=@rc={0x1f, @fixed}, 0x80, 0x0, 0x0, &(0x7f0000000340)=""/66, 0x42}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000440)=""/134, 0x86}, {0x0}, {&(0x7f00000005c0)=""/227, 0xe3}, {&(0x7f00000006c0)=""/38, 0x26}, {0x0}, {0x0}, {&(0x7f00000008c0)=""/34, 0x22}, {&(0x7f0000000900)=""/156, 0x9c}, {0x0}], 0x9}, 0xfff}], 0x2, 0x10000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00', r1) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x68, 0x0, 0x0, 0x0, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'macvlan0\x00'}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7fffffff}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x800}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x61}]}, 0x68}}, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0xfffffffd, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x7, @planes=&(0x7f0000000000)={0x80000001, 0xb36f, @fd, 0x620}}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000080)=0xd0) 13:09:36 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000000)=0x1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000300)={0x2, @raw_data="dd88b90f2351e629638622be7297acca86fd64cb7882ff93fbdcd74874eda03e5295835eebcf2141b242438dc8bf3564c011f1c610189e6b248baa3d7a7a1d53a342859ece4b201e794e16f94f3f50fdf03bfcd1870ecf34e05ac0f227269cef9d125df98ceed8c000867dbc411438a720be5f47ef90aba0d3e5739712776c5d1f83c4eff24184055c613e5895b6bcea7b1b2cf96113efdfaf78f708892c05ca2716acb4a1fd425754046f5aeba822f30f6ec171bcadba406529f3baf66033118dba3547abb41e06"}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0xfffd, 0xfffe, 0x0, 0x0, 0xe7, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40]}}}) r3 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x8, 0x40100) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r4) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000400)={0x6, 0x0, 0x2}) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=@delnexthop={0x28, 0x69, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000000c0)) 13:09:36 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x9}) 13:09:36 executing program 2: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0xd00, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}, 0x372}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00', r1) 13:09:36 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000100)={0x7, 0x3, 0x4, 0x1, 0x401, {r1, r2/1000+60000}, {0x7, 0x1, 0x9c, 0x4, 0xaf, 0x2, "f6162f25"}, 0x1, 0x3, @offset=0x8010, 0x80000000}) 13:09:36 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x0, @pix={0x7, 0x3, 0x30323953, 0x5, 0x7, 0x2, 0x6, 0x0, 0x1, 0x6, 0x0, 0x7}}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x100, 0x0) r2 = getpid() syz_open_procfs$namespace(r2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000002c0)={{0x7, 0x2, 0x10001, 0x80000001, 'syz1\x00', 0x2}, 0x0, 0x3, 0x8000, r2, 0x1, 0x2, 'syz0\x00', &(0x7f0000000280)=['-#)\x00'], 0x4, [], [0x3, 0x9946, 0x0, 0x8]}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) [ 2146.971686] Unknown ioctl -1056942500 13:09:37 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x100000000010004, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) [ 2147.022911] Unknown ioctl -1056942500 [ 2147.032141] Unknown ioctl -1055894248 13:09:37 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r0) write$apparmor_current(r0, &(0x7f0000000280)=@hat={'changehat ', 0x2, 0x5e, ['/dev/vim2m\x00', '/dev/vim2m\x00', '\'%#[}^&-\xea/\x00', '\x00', '/dev/vim2m\x00']}, 0x4a) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000100)=0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4]}}}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000080)={0x7, 0x3, 0x7}) 13:09:37 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(0xffffffffffffffff, 0x40044104, &(0x7f0000000000)=0x20) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x1000, 0x3, 0x4, 0x40, 0x1aef, {r1, r2/1000+60000}, {0x7, 0x0, 0x4, 0x8, 0x3, 0x7f, "6628fe5f"}, 0xfffff3c3, 0x4, @fd, 0x3, 0x0, 0xffffffffffffffff}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r4) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000001300)={0x6, @win={{0x1, 0x10000, 0xfffffff9, 0x3}, 0x6, 0x2, &(0x7f00000002c0)={{0x5dce, 0x80000001, 0x7ff, 0x9}, &(0x7f0000000280)={{0x4, 0x0, 0x12837c75, 0x6}, &(0x7f0000000140)={{0x8000, 0x41f61edb, 0x8a, 0x1}}}}, 0x1f, &(0x7f0000000300)="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"}}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000200)={0x200, 0x2, 0x4, 0x2, 0x0, {0x77359400}, {0x4, 0x8, 0x6, 0x2, 0x20, 0xfe, "9d70c21b"}, 0x8001, 0x1, @fd, 0x0, 0x0, r3}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:37 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x7) 13:09:37 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x87, 0x7fffffff, 0x4, {0x1, @sliced={0x1, [0x400, 0x6, 0x7, 0x3, 0xb3, 0x7, 0x1, 0x0, 0x0, 0x3, 0x3f, 0xb, 0x3629, 0x401, 0x1, 0x80, 0x8001, 0x7fff, 0xfff, 0x8001, 0xf832, 0xfff, 0x101, 0x0, 0x7, 0x1, 0x0, 0x9, 0x40, 0x7, 0x5, 0xffff, 0x6, 0x7fff, 0x7fff, 0x3ff, 0x400, 0x8, 0x469, 0x59f6, 0x1, 0x37, 0x6, 0x0, 0x8060, 0x2, 0x5c, 0x8], 0x2a05}}}) 13:09:37 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x402100) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000200)={{0x4, 0x5, 0x3, 0x6, 'syz0\x00', 0x3}, 0x4, 0x10, 0x4, r1, 0x8, 0x7, 'syz1\x00', &(0x7f0000000080)=['/dev/video#\x00', '/dev/video#\x00', '+}(\x00', '\xb3\x00', '/dev/video#\x00', '/dev/video#\x00', '\\](+$(/&^\x00', '/-\x00'], 0x43, [], [0x4, 0x2, 0x3ff, 0x800]}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000400)={0x40, 0x3, 0x4, 0x10, 0xfffffff9, {r2, r3/1000+10000}, {0x3, 0x2, 0x20, 0x6, 0x0, 0x9, 'L~>w'}, 0x8, 0x3, @planes=&(0x7f00000003c0)={0x2, 0x1000, @fd, 0x6}, 0x8}) prlimit64(r1, 0x2, &(0x7f0000000040)={0x0, 0x7}, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000340)={0x2, 0x2, 0x4, 0x10, 0x9, {}, {0x1, 0x2, 0x0, 0x9, 0x8, 0x8, "5f868323"}, 0x7, 0x3, @userptr=0xa99e, 0x4}) syz_genetlink_get_family_id$batadv(&(0x7f0000000580)='batadv\x00', r4) r6 = getpid() syz_open_procfs$namespace(r6, 0x0) syz_open_procfs$namespace(r6, &(0x7f0000000500)='ns/time\x00') ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000480)={0x1f, 0x2, 0x4, 0x1000, 0x9, {}, {0x2, 0x0, 0x4, 0x3f, 0x1f, 0x4, "b57ab482"}, 0x800, 0x1, @userptr=0x8, 0x4931}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000540)={0x7, 0x3, 0x7, 0x9, '\x00', 0x1}) [ 2147.234844] Unknown ioctl -1055894248 13:09:37 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080)) 13:09:37 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:37 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101, 0x0, 0x6, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc]}}}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)={0x80000001, 0x3, 0x4, 0x1000, 0x8, {}, {0x4, 0x0, 0x0, 0x15, 0xff, 0x48, "c5dd6a2c"}, 0x100, 0x4, @offset=0x2, 0x9adb}) 13:09:37 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/136, 0x88}], 0x1, &(0x7f0000000280)=""/83, 0x53}, 0xc32c}, {{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000380)=""/127, 0x7f}, {&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/167, 0xa7}], 0x3, &(0x7f0000000580)=""/232, 0xe8}, 0x31}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000680)=""/190, 0xbe}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/172, 0xac}, {&(0x7f0000001800)=""/218, 0xda}, {&(0x7f0000001900)=""/224, 0xe0}, {&(0x7f0000001a00)=""/157, 0x9d}, {&(0x7f0000001ac0)=""/173, 0xad}, {&(0x7f0000001b80)=""/175, 0xaf}], 0x8, &(0x7f0000001cc0)=""/178, 0xb2}, 0x3}, {{&(0x7f0000001d80)=@nfc, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001e00)=""/43, 0x2b}], 0x1, &(0x7f0000001e80)=""/90, 0x5a}, 0x6}, {{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000001f00)=""/74, 0x4a}, {&(0x7f0000001f80)=""/161, 0xa1}, {&(0x7f0000002040)=""/28, 0x1c}, {&(0x7f0000002080)=""/249, 0xf9}, {&(0x7f0000002180)=""/91, 0x5b}, {&(0x7f0000002200)=""/240, 0xf0}, {&(0x7f0000002300)=""/120, 0x78}, {&(0x7f0000002380)=""/44, 0x2c}, {&(0x7f00000023c0)=""/252, 0xfc}], 0x9, &(0x7f0000002580)=""/62, 0x3e}, 0x6}, {{0x0, 0x0, &(0x7f0000004a40)=[{&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/203, 0xcb}, {&(0x7f00000036c0)=""/86, 0x56}, {&(0x7f0000003740)=""/214, 0xd6}, {&(0x7f0000003840)=""/4096, 0x1000}, {&(0x7f0000004840)=""/138, 0x8a}, {&(0x7f0000004900)=""/158, 0x9e}, {&(0x7f00000049c0)}, {&(0x7f0000004a00)=""/55, 0x37}], 0x9, &(0x7f0000004b00)=""/218, 0xda}, 0x7fff}, {{&(0x7f0000004c00)=@un=@abs, 0x80, &(0x7f0000005cc0)=[{&(0x7f0000004c80)}, {&(0x7f0000004cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000005d00)=""/64, 0x40}, 0x5}, {{&(0x7f0000005d40)=@generic, 0x80, &(0x7f0000006080)=[{&(0x7f0000005dc0)=""/84, 0x54}, {&(0x7f0000005e40)=""/199, 0xc7}, {&(0x7f0000005f40)=""/126, 0x7e}, {&(0x7f0000005fc0)=""/169, 0xa9}], 0x4, &(0x7f00000060c0)=""/66, 0x42}, 0xfffffe01}], 0x8, 0x11100, &(0x7f0000006340)={0x0, 0x3938700}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4]}}}) 13:09:37 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x1], 0x4}}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048800}, 0x4010) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048800}, 0x4010) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048800}, 0x4010) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x43, 0x3, 0x9, 0x9, @ipv4={[], [], @broadcast}, @empty, 0x10, 0x8000, 0xfffffff7, 0x67}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000002b80)={'wg2\x00', 0x0}) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r9) setsockopt$RXRPC_SECURITY_KEY(r9, 0x110, 0x1, &(0x7f0000000280)='syzkaller1\x00', 0xb) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r10, 0x9f6f37c8753f0475}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r10, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000002d40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002d00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf25060000004c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="080003000100000014000200000000000000000000000000000000001400020076657468315f766972745f776966690008000300020000003000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="140002723100000000000058000180140002006e657470636930000000000000000000080003000000000014000200776c616e300000000000000000000000140002006e72300000000000005ad80000000000080003000200000008000300010000004400018008005e135e426db10100837440911d899d1f6905172f733d3db5aef9da72d99995ac7728be425edf89f258a3dc873b01c9ed22f9091c309f0ff1efefb22c890b43ce2afb52cf135145c313c96a73c8c7d01602b949a9af79e6b3dc7cae160ad614d725607934516905ed061be0c1a4af939aa61e27fd138a2e5ed75ed8eeb622ab70db6c20d0c6b2ab85b262", @ANYRES32=0x0, @ANYBLOB="140002006970365f76746930000000000000000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="14000200626f6e645f736c6176655f3000000000"], 0x12c}, 0x1, 0x0, 0x0, 0x20044040}, 0x40) 13:09:37 executing program 2: ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) 13:09:37 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) r1 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x4, 0x1, 0x2}) [ 2147.666613] Unknown ioctl -1067952631 13:09:37 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x0, 0x3, 0x0, "d088b8444c6a73544adfaf9a5a4d55bb62ea0c13e7004da59eb535aead63003f", 0x48524742}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @vbi={0x3, 0x6, 0x7, 0x31424752, [0x9a], [0x4, 0x3], 0x1}}) r2 = mq_open(&(0x7f0000000200)='\x00', 0x2, 0x1, &(0x7f0000000240)={0x1, 0x400, 0x8, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000300)=0x1) mq_timedsend(r2, &(0x7f0000000280)="215d5d9b7a453210fb0926a0de21a24c1199cf9d7ea9c2cbc8b7b87e1cbee042a3696e6eb0299e7c813f481490125572660c37f7b46bf1c47427b878ccfad8c8929c8c085ded3f166836391e5ecc927f556b4040211c20496a2d16f0e21b7792795ed8fc3ba61b21afce2e", 0x6b, 0xaf, 0x0) 13:09:37 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', r1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)={0x1, 0x2, 0x4, 0x40, 0x5, {0x0, 0xea60}, {0x3, 0x1, 0x46, 0x9, 0x16, 0x1, "809baad4"}, 0x3, 0x4, @offset=0x1, 0x6}) 13:09:37 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)) 13:09:37 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4]}}}) socket$inet(0x2, 0x0, 0x4) 13:09:37 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x3, @raw_data="0617832bfeb2f6abcaa3238cccc8fdde45cce6028ba610e1618b67d79224483ef90805048181e194ddde3a97992b1f05dab0d6ffa1aacf72862b1893c09d10368cf8a0ddd67ca4f37498933c48b3f06eedcd0daeb9e185c550dcf72f492123e0e71796122330a3dfa86d5e3b1fd503fdbfe220bbcdaba09a638e07c0706586496c285ced6485d8bbac61d0ed0c5be41ddbc6de8548e629c6d31045616c34937c90a69431a61b480f0182c89f40204cf6a7da7982be115277224e59d817b61a83cbb3c0e83d7579c1"}) 13:09:38 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x3, @vbi={0x74c, 0xfffffffa, 0x1, 0x3631564e, [0x9, 0x10000], [0x69, 0xe4], 0x2}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x8, 0x0, 0x4, 0x100, 0x400, {}, {0x2, 0x0, 0x34, 0x0, 0x7, 0x4, "68121d97"}, 0x1f, 0x3, @fd}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) 13:09:38 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:38 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1600db00"}, 0x0, 0x3, @fd}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000000c0)={0x3, 0x3, 0x3, "69c9d4feebfe8edc675fd6dec63456f510e5ca6dbfe537ef56706dffbae7b3e1", 0x52424752}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000200)={0x3, 0x1, 0x4, 0x2, 0xfffffffa, {}, {0x3, 0xc, 0x81, 0x3f, 0xf9, 0x20, "2ff90ba5"}, 0x0, 0x3, @fd=r1, 0x7}) 13:09:38 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x20200, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000080)={0x3, 0x3631564e, 0x2, @discrete={0x1, 0x9}}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000040)={0x1, 0x0, 0x3, 0xa6, '\x00', 0x5}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) 13:09:38 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4]}}}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000040)={0x6, 0x1, 0x4, 0x40, 0x1000, {0x77359400}, {0x2, 0x0, 0x5, 0xfa, 0x3, 0x40, "9c436451"}, 0x1ff, 0x1, @userptr, 0x30d}) 13:09:38 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x58}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x2c}}, 0x20040080) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) syz_open_dev$vim2m(&(0x7f0000000280)='/dev/video#\x00', 0xa1, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x7, 0x2e32, 0x4, {0x0, @sliced={0x61e8, [0x587, 0x6, 0xff0a, 0x100, 0x20, 0x8, 0x8, 0xdb, 0x2, 0xfffe, 0xe2f, 0x1400, 0x200, 0x2, 0x8000, 0xc8, 0x9, 0x4, 0x3, 0x5, 0x3, 0x1f, 0x1e, 0x9, 0xfffe, 0x3, 0xff81, 0x7, 0x4, 0x3f, 0x6, 0x7f, 0x9124, 0x4, 0x7, 0xf8, 0x7, 0x9, 0x1, 0x7fff, 0x1, 0xd1c, 0xfff7, 0x0, 0xffff, 0x800, 0x2, 0x40], 0x7}}, 0xedd}) 13:09:38 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], 0x4}}}) 13:09:38 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) 13:09:38 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x48000, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000080)) 13:09:38 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r3) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x4, 0x0, 0x4, 0x40, 0x3, {r1, r2/1000+10000}, {0x1, 0xc, 0x7, 0x81, 0xec, 0x9, "a99e6adc"}, 0x7ff, 0x3, @planes=&(0x7f0000000080)={0x5, 0xb6fe, @mem_offset=0xe, 0x5}, 0x6, 0x0, r3}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}}}) 13:09:38 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x9, 0x0, 0x3, "f3716694f11629d74aa8ffeed22eb4be33441995831621cf45b2a9128302a461", 0x32314142}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0)='mptcp_pm\x00', 0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nvram\x00', 0x404640, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, &(0x7f0000000400)={0x6, 0x4, 0x0, 0xffffffff, &(0x7f0000000300)=[{}, {}, {}, {}]}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x4080) [ 2148.674726] Unknown ioctl 19251 13:09:38 executing program 0: socketpair(0x28, 0x805, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x810800}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x380, r1, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x11}]}, @TIPC_NLA_MEDIA={0xb4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5a1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8397}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x94d4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_LINK={0xe4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf1b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x28000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}]}, 0x380}, 0x1, 0x0, 0x0, 0x84}, 0x4048880) r2 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:38 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000000), 0x4) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:38 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @local}}, 0x24) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x9, 0x0, 0x4, 0x2, 0x9, {r1, r2/1000+60000}, {0x2, 0x8, 0x3, 0x2, 0x7f, 0x44, "987fa63a"}, 0x3ff, 0x2, @fd, 0x1f, 0x0, r3}) 13:09:38 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x0, @offset, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000140)={0x37, 0x1, 0x10000, 0xe7e, "db79084f2ecc68fb0e1b6d14b477c4132a2d8ae8c0a87f36614f6f3adf97b8"}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x425, 0x0, 0x4, 0x100000, 0x4, {0x0, 0x2710}, {0x5, 0xc, 0x5, 0xff, 0x3f, 0x0, 'fjY?'}, 0x2, 0x1, @planes=&(0x7f0000000080)={0x0, 0x90000000, @mem_offset=0xfe1, 0xae}, 0xffff, 0x0, r1}) 13:09:38 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x800, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:38 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) syz_open_dev$vim2m(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x800, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000080)={0x9a, 0x3, 0x4, 0x8, 0xc14, {0x77359400}, {0x3, 0x1, 0xff, 0xff, 0x5, 0x77, "9186c1cd"}, 0x7db7, 0x4, @fd=0xffffffffffffffff, 0xfffffff7}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0xffff, 0x2, 0x4, 0x0, 0x5, {0x77359400}, {0x5, 0x0, 0x9, 0x50, 0x4, 0x6, "dbe2005f"}, 0x8, 0x1, @planes=&(0x7f0000000100)={0x6, 0xcf9, @fd=r2, 0x3}, 0x5}) 13:09:38 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x0, @fd}) 13:09:38 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x4, 0x1, 0x5, 0xff, 0x89, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x400], 0x4}}}) 13:09:39 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x5, 0x0, 0xfd, "c699d23b"}, 0x40}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f0000000000)=0x9) 13:09:39 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {r1, r2/1000+10000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:39 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4]}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000040)={0x7, 0x1, 0x4, 0x4000, 0x9, {0x77359400}, {0x4, 0xc, 0x81, 0xe, 0x6d, 0x8, "1cf5c3e6"}, 0x1, 0x1, @fd, 0x8, 0x0, r1}) 13:09:39 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x85, 0xfffa, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:39 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000080)=0x9) 13:09:39 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r3) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000100)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x10000, 0x1, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x18, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000280)={0x400, r5, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x2a0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc4, 0x3, "7085cabf954991aa8ab77d2d0a85cace9a1e4f01898e3d1f29be1739872411915ab7ca30873b9df65ff358d83382b47c2ffab7dc5c4d4ad80e988ad3087ca6411bc2da909a857962eff2b35069af0674b2e8f46030e0617f195f8e5e1bfe26b31a8ffda929f780c1106b049a0aa907719d6334cc6aef8003bb4706fa32c011ef1da83d5676b1916bdfce4f13bf4f0521dbace3192ddae83b1d39e7ef3fc76d5de4252227e33c3cf087af28c17a87923083d400791d7f7aa1e3b6497a40829fdb"}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "4299035daf5dcd761e91e8b47fce81dd22520d5d9a2b85b15a3fe306"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xfb, 0x3, "a2ff2583830f54351a18699ff5f6470346fa4d60ce0b07db125a1f9ac87b64e158414d81b0eb799362240e7f078ed618733957cc70bdef17d750c063dfd96c79eaf55cd686ab224c688bd560c252e40f42106547c57ff117df8ad939a77b4f844ef929ac0a103c1d75e9a84540b36cc6929ee5ce5b370068ecfc74f425164052e7e09ade8be8901ddd2a992330af2b7ed7093e060b789716c4e73be3ff1cc964fe76d796f35799547435a2da5b2bc0c93b8c44d2ec94cb39b4c4ec99243e12d988f8830f8fb119fa7ef9ac46d45de69fa7cc1250c82eaab399226c5fb5517dae43054bed0061a81b63c3b05be448347de28901427ee21b"}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "9353cae56321b63d322da1d298624bfec86b85deccb08400f0be3d2d"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "63d37b2fac816ac10a670ec070790e0df2d909b455aa8e79"}}]}, @TIPC_NLA_SOCK={0xa4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7b5b}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf13}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}]}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010102}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010100}}}}]}, @TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5a11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x48be}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}]}, 0x400}}, 0x40) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00', 0xffffffffffffffff) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) 13:09:39 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, "2f3fe808"}, 0x0, 0x0, @offset=0x200000}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x2, 0x3, 0x4, 0x1, 0x9f, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x6, 0x20, 0x5, "cf12a932"}, 0x80000000, 0x2, @offset=0x7, 0x8, 0x0, r1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000002740)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x102020000}, 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x24, r4, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x7fff}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) 13:09:39 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x20, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:39 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r0) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000240)={0x0, "24390b791d5fd642b597e5f7e85ab22440811fba18e39993fa8dda2826c0f91ad82467b898f309933a5b3e7c5e97755287d6b9f7750be66f45a7f1242e5d7782", {0x9, 0x4}}) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x60, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xe}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8081}, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:39 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x28c, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x18c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xe1, 0x3, "6a606181a534b163fffef8b377322dc68272a3c30b7957b419a80c92d409fcc0abb6692a9d8628024f9834440068eb16c3353c4aa562ad53bf514c755d19916b1c25ba6be6332097ffd7116fef0e716ba1a21760c029bbfcb527a3f55b52d120fad3ee409ad61ac5e0ae1cc20bce83d33f06c5d2ec0d1b0232d5016fd419efd8b7261e816210e108f870ad333a854ec8292de30804998005b0c7029db80b85634d702e205f710e5090d8de1218e056e0598d02edf4c8d1e3e988d7b1e568de7ce7dbc29711d202f1d10441b30a0b718712920207abc029aa40a9149736"}, @TIPC_NLA_NODE_ID={0xa4, 0x3, "1ec6a4d1527c643a169ead1f8f704f7b621079f1f304b3d9ed39efa69140f15939988be971a5a295d6f18555dfa7005a332303511bf92e753937550b5cc05e55aa3ec358ff217fffb424cbffb9673de9b470093eeb95d90cc6840448448d25419609662cfd061bc1848d920828891388aeb6dbde745512c28ec40deb7047273c7238c698b147a7929bf3c6b04c5e0c8d8544e38f02237b9b3c1ca67bd635d5d0"}]}, @TIPC_NLA_NODE={0xec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xe7, 0x3, "2e26224dd11ca7f8b8a9f96d1f18b8c5ac6b8c54ffb631b132e3f1cf54e7169719af8827da3367bc0266be424a2ac3773c76158941e825687c1922a017d35ba9463804f7dcaefad0c9838a38a315c0d83d346b378122ebc48c8492165349998484d94b4fbb1f929470c875669c30e2d7204e29c5f0e8f0dc0796a75f6ef8a3321301a4f264b96bc688246ee5394f2b60f8cdc126e10e5f7e40125a989fbbc79917a261b2ad412d924690da75c428bd677f06d20114ce1768088c72edaa61f5b0dd16980e29f4b6450edb9a240f771aca6f7289ea952de3673edd734ec53ac0f1d46ee3"}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0xc840}, 0x20000085) 13:09:39 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x40000) 13:09:39 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x56a, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200]}}}) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) 13:09:39 executing program 1: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000400)) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) socketpair(0x9, 0x80000, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r4) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r5) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r6) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x1402, 0x1, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r6}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x20006855) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x64, 0x1407, 0x20, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004004}, 0x4000000) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @raw_data="fa5a38355e77028d15a71e2ca6c86f954cf256f037e4a70b4bf8cf103a2cd3973aba852fc3d6edb9f28c76b08aa1574cb505eaa1faa9a4b55d7b157b05ca906253320530403f25d51e0f4bb70bdfed93b0f9a2d68224368e8f153f81a1446da71225ec8068eca1769769720ac38061789029bed8573f4c9a79627791a97b5a69886295772c272360882ae421dd9ee3b792c96120483e888a05103332da450c6a97088163e40def57d0d560b3164a759dbb1a5fe0dfb211081ca9b0dd888d88e854cf0ecdfbf3af74"}}) 13:09:39 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x0, @sdr={0x35303553, 0x100}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:39 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x45b, 0x1}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:39 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)={0x48, 0x2, 0x4, 0x1000, 0x6, {r3, r4/1000+10000}, {0x2, 0x0, 0xc6, 0x38, 0x3, 0xff, "3225912e"}, 0x80, 0x3, @offset=0x1ff, 0x80, 0x0, r2}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:40 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x4}}}) 13:09:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r1, 0x9f6f37c8753f0475}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r1, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gre0\x00'}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_DEBUG={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r2 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000080)={0x8, 0x8000, 0x2, {0x0, @vbi={0x8000, 0xfffffffb, 0x401, 0x62707561, [0x2, 0x9], [0xffffff61], 0x13a}}, 0x3}) 13:09:40 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:40 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff], 0x4}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @sliced={0x34e, [0x2105, 0x4, 0x101, 0xe35, 0x6dc8, 0x400, 0x80, 0x1, 0x5, 0x4, 0x1, 0x7fff, 0x9, 0x40, 0x7f, 0x200, 0x0, 0x1ff, 0x7, 0x5, 0x206, 0x0, 0xfffb, 0x4, 0x101, 0x5, 0x7, 0xff, 0x3, 0x7, 0x3, 0x4, 0x1, 0x0, 0x1ff, 0x9, 0x0, 0x3f, 0x3, 0x9, 0x7, 0x8, 0x5, 0x82, 0x4, 0xfa8, 0xfff9, 0x9], 0x7}}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000280)) 13:09:40 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:41 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0xffffffffffff0000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000000c0)={0x10000, 0x7b172229, 0x2, @stepwise={0x1, 0x9, 0x9, 0x3, 0x101, 0x7ff}}) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x3) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x2000, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x2, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5], 0x4}}}) 13:09:41 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340)='batadv\x00', r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x44889) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x18, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000900)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000580)={0x304, r7, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xf0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @mcast2, 0xff}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x200, @dev={0xfe, 0x80, [], 0x2c}, 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff7fff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xdd88}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe8ed}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7dd7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe562}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}]}]}, 0x304}, 0x1, 0x0, 0x0, 0x2000e05c}, 0x4000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r5) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x1, 0x4, 0x100, 0x80000001, {0x0, 0x2710}, {0x3, 0x2, 0xec, 0x1, 0x0, 0x80, "212cc695"}, 0x3053, 0x4, @fd=r3, 0x0, 0x0, r1}) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044010}, 0x400c810) ioctl$vim2m_VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f0000000280)={0x7fff, 0x0, 0x4, 0x40, 0xffff, {}, {0x4, 0x8, 0x40, 0x3, 0x6, 0x10, "54bcba96"}, 0x100, 0x1, @planes=&(0x7f00000000c0)={0xfffffff9, 0x9, @fd, 0x2}, 0x9, 0x0, r8}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0xf8d, 0x3, 0x1}) 13:09:41 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7]}}}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000280)={0x0, @pix={0x2, 0x101, 0x30314742, 0x0, 0x5, 0x4, 0x4, 0x0, 0x1, 0x7, 0x1, 0x2}}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)={0x1c, 0x3, 0x4, 0x2, 0x863, {}, {0x1, 0x4, 0x31, 0x2, 0x0, 0x7f, "6b81a7ab"}, 0x5, 0x2, @offset=0x9, 0x0, 0x0, r2}) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, &(0x7f0000000040)) 13:09:41 executing program 0: ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000200)={0x8, [0x2, 0x9, 0xcd], [{0xfffffe01, 0x20}, {0x9, 0xffff, 0x0, 0x0, 0x1}, {0xff, 0x5, 0x1, 0x1, 0x1}, {0x4, 0x7, 0x1, 0x1, 0x1}, {0xfff, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x3, 0x1f64, 0x1}, {0x7fffffff, 0x2, 0x1, 0x1, 0x1, 0x1}, {0x400000, 0x8001, 0x1}, {0x2, 0x3ff, 0x0, 0x0, 0x0, 0x1}, {0x6, 0x7fff, 0x1, 0x0, 0x1}, {0x1679, 0x4, 0x0, 0x1, 0x1}, {0xc23, 0x1, 0x1, 0x1, 0x1, 0x1}], 0x8}) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x4, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000080)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x654003, 0x0) 13:09:41 executing program 5: ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:41 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)={0x7, 0x3, 0x4, 0x800, 0x49d8, {0x77359400}, {0x2, 0x2, 0x8d, 0x1f, 0x0, 0x20, "4b6b3df2"}, 0x100, 0x1, @planes=&(0x7f0000000000)={0x9, 0x3, @userptr=0x8, 0x9}, 0x1acd, 0x0, r1}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x2400, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000280)={0x9, 0x1, 0x4, 0x10, 0x101, {0x0, 0x2710}, {0x2, 0x8, 0x7, 0xd1, 0x8, 0x5, "a28a5fed"}, 0x97, 0x2, @fd=r2, 0x6, 0x0, r3}) 13:09:41 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00', r1) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x54, r3, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x7}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="f8fab2a48c0a"}, @NL80211_ATTR_SSID={0x19, 0x34, @random="23b6048e2130dcd75c66ffd53b904bca0f7257fe9a"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="bbdaf05b7226"}]}, 0x54}, 0x1, 0x0, 0x0, 0x24040030}, 0x40) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00', r1) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000008}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x200, r4, 0x4, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x283}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "9987ce003eb609d39e1e7e77ceebeacdd6ffbbf4470621548e483f5f"}}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0xb0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x66}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbfa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff5b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x24008014}, 0x80) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x1, 0x33363248, 0x3, @stepwise={0x8, 0x2, 0x1, 0x32, 0xdce, 0x400}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) 13:09:41 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000200)={0x1f, 0x0, 0x4, 0x70000, 0x8001, {r1, r2/1000+10000}, {0x2, 0xc, 0x7, 0x9, 0x9, 0x0, "f94c7a51"}, 0x2, 0x1, @fd=0xffffffffffffffff, 0x6}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)={0x8001, 0x0, 0x4, 0x100000, 0x1ff, {0x0, 0xea60}, {0x1, 0x1, 0x7f, 0x3f, 0x2, 0x5, "437d132a"}, 0xac, 0x1, @fd=r3, 0xffffffff, 0x0, r4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r5) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r5, 0xc008551b, &(0x7f0000000000)={0x3cab, 0x8, [0x4, 0x100]}) 13:09:42 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x4f, @multicast1, 0x4e20, 0x0, 'ovf\x00', 0x25, 0x2, 0x39}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x3, 0x1, 0x800, 0xffffffc1}}, 0x44) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {r1, r2/1000+10000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x2}) 13:09:42 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x400101, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x8dc6cfa6b5fd135b, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x41414770, 0x1, @stepwise={0x200, 0x4, 0x7, 0x81, 0x1f, 0x6}}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x63, "2f3fe808"}, 0x6}) 13:09:42 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @raw_data="39a77b960b810ff7e5c42bced3133ac97b65cfd325d9dd92c5192eb24ddc5908c151034906450f0e89d9df3b7b571575090ba90d4dd6b2b8ae038f6f6c349f392fd887b6858cd57b23022990ae0366f0611fe670dad909d9be474155ea312409decaf07e991a33b8e590be2620101cc3429104ebc3f62fa2593e929f66c25a9ce39255f99224e6d10eca3957b1a8e0759fc3c9c7dbe7caadec5c07f81ff7876ec7ea7552a2c9877e86038211d3157104648808026913ebe0a427a799f66ddadceb26f6374f45ef45"}}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x3) 13:09:42 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x0, @pix_mp={0x4, 0xffffec3e, 0x39565559, 0x9, 0x6, [{0xe26d, 0x5}, {0x204dd5bc, 0x5e}, {0x9, 0x80}, {0x8, 0x5}, {0x4, 0x800}, {0x7, 0x8}, {0x4, 0x16}, {0x8, 0x3}], 0x7, 0x0, 0x1, 0x2, 0x5}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe], 0x4}}}) 13:09:42 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4]}}}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000040)={0x4, 0x3, 0x4, 0x70000, 0x5, {0x0, 0x2710}, {0x5, 0x1, 0x0, 0x7f, 0xff, 0x6, "62b0040a"}, 0x8, 0x2, @offset=0x7, 0x4}) 13:09:42 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x1, 0x8001}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x3, 0xff}) 13:09:42 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x80040, 0x0) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x88}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x29}]}, 0x60}, 0x1, 0x0, 0x0, 0x55}, 0x4000004) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x2000, 0xe7, 0x5, 0x0, 0x66, 0x4, 0x100, 0x0, 0x0, 0x0, 0x10, 0x2, 0x3, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0xf7fc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001], 0x4}}}) 13:09:42 executing program 1: socket$inet(0x2, 0x800, 0xfff) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0xffff, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffd]}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x200, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280)='l2tp\x00', r1) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="10000007071420002bbd7400fed9cf250504540010000000"], 0x18}, 0x1, 0x0, 0x0, 0x820}, 0x0) 13:09:42 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x800, 0x2) clock_gettime(0x0, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000100)={0xfffffffe, 0x2, 0x4, 0x0, 0xac, {0x0, 0x2710}, {0x0, 0x1, 0x0, 0x0, 0x0, 0xfc, "2f2fe80a"}, 0x0, 0x3, @offset=0x3}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x12080, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000004dc0)=[{{&(0x7f00000001c0)=@ipx, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/124, 0x7c}, {&(0x7f00000002c0)=""/40, 0x28}, {&(0x7f0000000300)=""/27, 0x1b}, {&(0x7f0000000340)=""/232, 0xe8}, {&(0x7f0000000440)=""/93, 0x5d}, {&(0x7f00000004c0)=""/178, 0xb2}, {&(0x7f0000000580)=""/3, 0x3}], 0x7, &(0x7f0000000b40)=""/4096, 0x1000}, 0x8001}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000006c0)=""/157, 0x9d}, {&(0x7f0000000780)=""/125, 0x7d}], 0x3, &(0x7f0000000840)=""/60, 0x3c}, 0x20}, {{&(0x7f0000000880)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000000900)=""/152, 0x98}, {&(0x7f00000009c0)=""/49, 0x31}, {&(0x7f0000002b40)=""/4096, 0x1000}], 0x4, &(0x7f0000003b40)=""/4096, 0x1000}}, {{&(0x7f0000000a40)=@xdp, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000004b40)=""/203, 0xcb}, {&(0x7f0000004c40)=""/161, 0xa1}, {&(0x7f0000004d00)=""/128, 0x80}], 0x3, &(0x7f0000004d80)=""/29, 0x1d}, 0x2}], 0x4, 0x40002003, &(0x7f0000004ec0)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r3) pipe2(&(0x7f0000004f00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x6800) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r5) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000004f80)={0x7, 0xa1c58139d36f006, 0x4, 0x100000, 0x8, {0x77359400}, {0x3, 0x8, 0x81, 0xff, 0x40, 0x2, "337e6ddb"}, 0xff, 0x0, @planes=&(0x7f0000004f40)={0xffff25e7, 0x2, @fd=r4, 0x1}, 0x9, 0x0, r5}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x7, 0x1, 0x4, 0x1, 0x3fe, {}, {0x2, 0xc, 0xb7, 0xff, 0x6, 0x4, "e7075c6b"}, 0x24, 0x1, @userptr=0x2, 0x7c, 0x0, r1}) socketpair(0x18, 0x3, 0xfffffe01, &(0x7f0000005000)) 13:09:42 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=""/39, 0x27, 0x0, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0xb1a6, @dev={0xfe, 0x80, [], 0xc}, 0x9}}, 0x24) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000100)={0x7fff, 0x4c47504a, 0x1, @discrete={0x5, 0xffffff15}}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r3) recvfrom$rxrpc(r3, &(0x7f0000000340)=""/5, 0x5, 0x60, &(0x7f0000000380)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x1f, @local, 0x3}}, 0x24) recvfrom$rxrpc(r2, &(0x7f0000000200)=""/215, 0xd7, 0x60, &(0x7f00000000c0)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x930, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x401}}, 0x24) pipe(&(0x7f0000000140)) connect$rxrpc(r1, &(0x7f0000000300)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x7, @remote, 0x3ff}}, 0x24) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:42 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x8, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x2}) 13:09:42 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x7, 0x1, 0x2}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:42 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00', 0xffffffffffffffff) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:42 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fea08"}, 0x2, 0x3, @offset=0x82, 0x10000, 0x0, 0xffffffffffffffff}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x202000, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f00000002c0)={0x0, @sliced={0x2, [0x80, 0xfff7, 0x100, 0x7, 0x9, 0x40, 0x401, 0x7, 0xfff9, 0x4, 0x8001, 0xfffa, 0x0, 0x401, 0x5, 0x81, 0x4, 0x4a3c, 0xa21, 0x0, 0x401, 0xff, 0x704, 0x0, 0x80, 0x52d1, 0x1, 0x9, 0x40, 0x3d, 0x4816, 0x5a51, 0x0, 0xff, 0x5, 0x2, 0xa1, 0x0, 0xb1f, 0x200, 0xfa41, 0x8, 0x8001, 0x2, 0x1, 0x5, 0x5, 0xd8], 0x4}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x800, 0x5000, {}, {0x0, 0x8, 0x7, 0x7, 0x51, 0xc9, "afb7a4d6"}, 0x4, 0x5, @fd, 0x1, 0x0, r1}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0xbea, 0x0, 0x4, 0x2, 0x1, {0x0, 0x2710}, {0x3, 0x8, 0x20, 0x6, 0x5, 0x79, "5cdcb2ac"}, 0x6, 0x3, @offset=0x1000, 0x6, 0x0, r1}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x301400, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000000200)={0x6, 0x0, 0x4, 0x10000, 0x1, {0x0, 0x2710}, {0x2, 0x0, 0x9, 0x2c, 0x4, 0x6, "25485dc3"}, 0x9, 0x2, @offset=0x1, 0xa017, 0x0, r3}) 13:09:42 executing program 5: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x0, 0xffffffff}) 13:09:42 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000080)={0x400, 0x3147504d, 0x1, @stepwise={0x7, 0xe74, 0x4, 0xffffc80f, 0x6, 0x7}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x1, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xfffffffd}) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) 13:09:42 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x580c0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000000c0)={0x8, 0x3, 0x4, 0x4000, 0x2, {}, {0x5, 0x8, 0x7, 0x81, 0xff, 0x1, "3b36801b"}, 0x7fff, 0x2, @planes=&(0x7f0000000080)={0x0, 0xb6, @userptr=0x7, 0x1400000}, 0xfff}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xfc, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:42 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40]}}}) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) 13:09:43 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @raw_data="f6a0a14b1d7311fb1007c110be7ac80ba682aa48978ef870843df87035f06b879a97969a035993b1f10785f00f3d22a8296629b0b7be2ef6fc71866966df1b2973746c125819a54db90a219400a3df56a10edd04bb104d3b802e1605680e4849a44f8ecab606b4d86169a9b628739f351f98081ca6b285e133f5ddbc206a542559b1db312c7fae54c361e2f6dbd94433408f59375563184c6706dbe95fccb08c57905d1e4c8c1a2eaef57c38d975eb7d1c540fedeca0195cbe96ff2dcfa0aa65beda1ef127507c85"}) 13:09:43 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x3) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000000000)) 13:09:43 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x40, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe6, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x8, 0x8001, 0x1, {0x0, @sliced={0x4, [0x0, 0x7, 0x400, 0xfffe, 0x6, 0x2, 0x7ff0, 0x1, 0x0, 0x8e7c, 0x5, 0x7, 0x1000, 0x200, 0x1, 0x2, 0x917, 0x9, 0x5, 0x8c, 0x0, 0x401, 0x8336, 0xf4f0, 0x6, 0x7f, 0x3f, 0x3ff, 0x7ff, 0x0, 0x2, 0x46c, 0x101, 0x1000, 0x3ff, 0x99, 0x101, 0x2, 0x200, 0x1, 0x4, 0x0, 0x101, 0xf000, 0x98e, 0x0, 0x6, 0x1], 0x6}}, 0x6}) 13:09:43 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/cgroup\x00') setns(r0, 0x8000000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x38, 0x1407, 0x100, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0x6a4, 0x1}) 13:09:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r1, 0x9f6f37c8753f0475}, 0x14}}, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) syz_genetlink_get_family_id$wireguard(&(0x7f0000000240)='wireguard\x00', r2) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c0000056d019ad877f3ee67ec3cb5ec8233e783b1eb07ac7a76fe01a414688e6f1415c7724d44357fcba37134b4af5657e5413baf6861c4c0bb26256e32fc2d6ad1f2567355bcb49b2fe4bbc8b3267038db01a9d9eec2b85d4e5575d40648cadba8fb06f9052f8dc250172304ed9454ea4ffc8832868ef067a4fbed883f0000000000", @ANYRES16=r1, @ANYBLOB="000129bd7000fddbdf25080000000500220000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r3) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xfc}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000080)=0x5880ac49) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r5, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r6, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x4000) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00', r7) ioctl$vim2m_VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000000180)={0xfffffffc, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, "2f3fe808"}, 0x0, 0x1, @offset, 0x42}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x1f, 0x1, 0x2}) 13:09:43 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x404000, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)={0x928c, 0x3, 0x4, 0x100000, 0xffffffff, {0x0, 0xea60}, {0x3, 0x2, 0x58, 0x8, 0x7, 0xb5, "1d8ebb14"}, 0x8, 0x2, @userptr=0x3f, 0x2}) 13:09:43 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r2) sendmsg$nl_route(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@mpls_newroute={0x58, 0x18, 0x400, 0x70bd26, 0x25dfdbfc, {0x1c, 0x10, 0x10, 0x2, 0xfd, 0x0, 0xff, 0x3, 0x2400}, [@RTA_OIF={0x8}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1}, @RTA_DST={0x8, 0x1, {0x3, 0x0, 0x1}}, @RTA_DST={0x8, 0x1, {0x7, 0x0, 0x1}}, @RTA_DST={0x8, 0x1, {0x4000, 0x0, 0x1}}, @RTA_VIA={0x14, 0x12, {0x11, "31b9f19c4f46844e2bab85825d2e"}}]}, 0x58}, 0x1, 0x0, 0x0, 0x64040000}, 0x4000080) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x335bc760, 0x2, 0x0, "c2901020da5e49e1354a7bc80de337392e85859ae80898a542984c2811b14764", 0x20323159}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000003c0)={0x7, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x6, @win={{0x101, 0x1f, 0x5, 0x10001}, 0x9, 0x7, &(0x7f0000000280)={{0x100, 0x3ff, 0x72ce44d9}, &(0x7f0000000240)={{0x3ff, 0x80000000, 0x1f, 0x4}, &(0x7f0000000200)={{0x3000000, 0x67c8, 0x100, 0x40}}}}, 0x8, &(0x7f00000002c0)="d7d734f254cfb221986bfa388687050dc84ec381b1775147ccadfbf0582a44c1886c9607b7f681e9617957c754f57e52bc60c2e6f72966554887beba92fe39736f6855dee38065b2ca6f6b7fcfaa843f96b20c604015903c7f343c624e15b0eb6f8f7db97edcef2e2a1b2629e77f21c68bbb3d71acbfd13aae59ffcf7b778ea03b23dc24452079e3b8c366fda3e903dd65c7f261a3d4d4247cc8ab023053af03233b872925f77c6ed6d182facebb0518b970de8b30b35ecb4754d1b14eb3b25031bc83a3ef7690c050c90b57cf5c032506019ee9a12fc3a8194a677438ba167bd84f2fc79a", 0x1}}) 13:09:43 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x7, 0x1, 0x2}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:43 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x40, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000080)={0xb9, 0x1, 0xcaa7, 0x58, "fe510113b3bd14153ea8b33967590fcbce4d22ec013a02876f113fa08ad70922c9414ece49f6b98720e60032432327c276aa8d9392e80d8f48a27760d849462f04222f636df95a4c5b44e17174ca4a17f4da9f1b195b2692078f72c6fdb6aaede66ce1d5eedbffc3561756d06a25249187c3de44cbc603b72fc14abe1feb2be090558a266ed85472666234b912e4e076ba72f42a34082fa099326f26ec11824d20"}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) 13:09:43 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x2, 0xfffffffe}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:43 executing program 2: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x480d}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={[], [], @empty}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9d2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7f}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x14}, 0x4800) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x2) 13:09:43 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0xfffffff7, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:43 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4]}}}) 13:09:43 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$SNDRV_PCM_IOCTL_INFO(r1, 0x81204101, &(0x7f0000000280)) 13:09:43 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f]}}}) 13:09:43 executing program 2: ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f0000000000)={0x9, 0x3, 0x2, 0x81, '\x00', 0x96e}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000840)=0x9) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00', r0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="a2fecf16972097b89e716049e3f7123483b97f6923391e9c071c7aa78c52eb8b180e1693ed56808a339ab4ae", @ANYRES16=r2, @ANYBLOB="080328bd7000ffdbdf2509000000040002802c000380080002000000000008000200020000000800030000800000080001000700000008000200060000001c0004800900010073797a31000000000900010073797a300000000030000280240003800800020003000000080001000100000008000200ff7f0000080001000700000008000200000000001c000380080003000200000008000200090000000800010002000000240007800c00030008000000000000000c000400da9ce17c00000000080002000400000028000280040004000400040004000400080001000700000008000200ffff000008000100480b0000f80306806b000300e5e27cec63fea9c15a3671aee3642d5deb963bab7a373cbe9b0a4cabef9a6aee9da2937265f48de2c3126fb61dd616e7bc6a3423179db227db97a82aa98a38db222f6f6a72846c01cb3d11017325e9b6c9b8e71af25bc790c6dd234cfeed596d029c27696877440086000300fdfc330d0f9411c3c31a9e704a265667ddcb9da1a0b955348de377c1a33a40dde1b642c8a3ebfa88c674e41c6aecdd84a487039a98d9ae6e2df4e5209da47705aeb0c0804cba22c4cd9d9050cc534b0f206d0013ada2f9099b831ebc5308ec715f25ad3ed78fbe31586adcb03070a5221c44c7060fd024795ae9632244d935390e61000004000200e60003003636f49c04abecdd8e3046d37038e97af9db372cb1903239adc428aee70cb05ba125ce8b8fac9434682b8f496184686b1768d93e7fe11f12ec86f1a7761d6c5ee3f1e5b0e996c59679a667127bef93242697263a175faddab0ac268ebadc65f9cf812d7013565eba94084f3dc577d68e91ef9feeaaa46a97098851cec0c58ab9a39e55c3d9802070667921ee5526d85663402a184a34b4746e301f30ad13fa530b9871d6f0d84d2ee1f55478073147be313ce0c25beccb19764f24b7500fdb21b45d61f378cb30216d7bbbcec544e2cd9bbfba5d9587507a23c8dce2ac9c15fe1adc00003e00040067636d286165732900000000000000000000000000000000000000000000000016000000ea5843d5a8f6c90cf250c3408e88c1bf443f0340dd910000e6000300167f4d410db7a566bdbc56011da0546297abd453439d157259113a6ee93216d331ab9360045933457eb1065c47c2f0fdbd730b1c5705ead0cd2cbff9708bddfcd754bcec6134c8ed370e97f87e122e9af51a0d7dcdc3fc32ebcbff33ff0c1d934c11d8596e81c42c8a495efcde18074e02d9f2d0c6ea471122c528fcdd3c903e16cf8b976a15e02f7ba890ba86122e0ea4370d19a1fd85fe5182e09b1c4d47ba9e26f9da32eb6dbf156e79f54e3a8fd7f23f89a8851a562b7e45ab8aa9e25f83563391ba2979e627055e1eb0916f020cdcf4e587192b19eb9b4aab675d5cfe4fdc850000eb000300ddf3e0d11ee395ba5d972ff91506c330b32d9a50108de89deefdb5b5a564dca7b7e2400b574a2e5504db4debd25d83f9b1cddcc301314df75ca1475772fff11d5fca71601b280aa5926203fd3cb48aa4eba1ce4b244ed1c12137cdf5807949c305073a21b52ec5335719374e6b155262cf6e448c9482bd1a77844a54513efce6ade5a7365fb09c4fcdfad60108558d75882b6e2d876ec59c836a04811a286fb07d3a2e013a5c1eb05002567d3ee1324c8d5f9a756a6fa8f3a41ddd742c1dec1923771a07d633adf5944ed31f69ecc7d3b9e4efa6666190ed918748d9e54a912cba0f354a795486000c00028008000200050000001400098008000100000000000800010006000000"], 0x510}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080)=0x2553) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4161, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000280)={0x0, 0x2, 0x80000001, 0x5, '\x00', 0x1ff}) 13:09:43 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f3fe808"}}) 13:09:43 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x813, 0x2]}}}) 13:09:43 executing program 5: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x6, 0x0, 0xd6, 0x0, 0x0, 0x1, 0x5, 0xff, 0x85, 0xff, 0xe7, 0x8, 0x101, 0x66, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x2], 0x4}}}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x2, @raw_data="c84d4c2f5f670cf04a26424d121ba8ea1efa68a465a79d77ca230ea5db075368bc6e7810f8425631029080dc5f7ade3e0a2559e7f91eeec2bd300ea70af587e39e4ad33c0ddce3d1164e36b16139c006e9a8d6ee3a4a449ce2fefd9804fa01667480dce10846d83a84f72dfb46b5793694d8a19a014600dc54026c88985616d79ee42cb15c16fbc3e15727835b17a22d3a435080f57b0094149e0482efe5ea8e31e7180161558899757c7f755ffa7f5a31ae2a5726c4091605c1752f44e9fc4c0006a11842c423df"}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000280)={0x191657cd, 0x3, 0x4, 0x10000, 0xff, {r1, r2/1000+60000}, {0x5, 0x1, 0x0, 0x5, 0x7, 0x9, "8b477b7a"}, 0x2, 0x4, @offset=0x8, 0x3}) 13:09:43 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x7, 0x1, 0x2}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0xe7, 0x8, 0x0, 0x66, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2], 0x4}}}) 13:09:43 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="0100000020000000000009000080"], 0x18}}, 0x80080c1) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="70009b5d", @ANYRES16=r2, @ANYBLOB="100025bd7000ffdbdf25150000003400038008000300010000000800020040000000080003000400000008000200ec0d0000080001000800000008000300dfc60000100007800c00040006000000000000001800028008000200e3020000040004000800020000100000"], 0x70}, 0x1, 0x0, 0x0, 0x4081}, 0x48000) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x1000000000000072, 0x2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nvram\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00)='l2tp\x00', r3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000020c0)={'wg1\x00'}) recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000180)=@sco={0x1f, @none}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/212, 0xd4}, {&(0x7f0000000440)=""/195, 0xc3}, {&(0x7f0000000540)=""/34, 0x22}, {&(0x7f0000000580)=""/44, 0x2c}, {&(0x7f00000005c0)=""/251, 0xfb}, {&(0x7f00000006c0)=""/231, 0xe7}], 0x8}, 0x10000}, {{&(0x7f0000000840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000980)=""/194, 0xc2}], 0x1, &(0x7f0000000a80)=""/84, 0x54}, 0x3}, {{&(0x7f0000001b40)=@tipc=@name, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000900)=""/21, 0x15}], 0x1, &(0x7f0000001c00)=""/3, 0x3}, 0x2}, {{&(0x7f0000001c40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001cc0)=""/72, 0x48}], 0x1, &(0x7f0000001d80)=""/74, 0x4a}, 0x8}], 0x4, 0x10000, &(0x7f0000001f00)) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001f80)='wireguard\x00', r0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000002080)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002040)={&(0x7f0000001fc0)={0x6c, r5, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a='\xa0\\\xa8Ol\x9c\x8e8S\xe2\xfdzp\xae\x0f\xb2\x0f\xa1R`\f\xb0\bE\x17O\b\ao\x8dxC'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x24000810) 13:09:43 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @pix={0x5, 0x7949, 0x47314356, 0x6, 0x3, 0x80000000, 0x1, 0x2, 0x0, 0x0, 0x0, 0x5}}}) 13:09:44 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) r1 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x9, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000080)={0x0, @vbi={0x8d3, 0x198400, 0x3, 0x584e4f53, [0x3, 0x7cf6], [0x2, 0x3ff], 0x1}}) 13:09:44 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000010001, 0x2) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') setns(r1, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x101]}}}) 13:09:44 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x3, 0x1, {0x1, @vbi={0xffff, 0x80d2, 0xffffffff, 0x56555959, [0x8001, 0x80000001], [0x3, 0x10001], 0x1}}}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x4, 0x1, 0x4, 0x40, 0x3, {}, {0x1, 0x1, 0x0, 0x1, 0xb, 0x9, "6ed6c549"}, 0x9, 0x4, @planes=&(0x7f0000000040)={0x7, 0x80000000, @mem_offset=0xc3, 0x1}, 0x80000001}) [ 2154.170592] kasan: CONFIG_KASAN_INLINE enabled [ 2154.185708] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 2154.202842] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 2154.209178] Modules linked in: [ 2154.212381] CPU: 1 PID: 2891 Comm: syz-executor.3 Not tainted 4.14.222-syzkaller #0 [ 2154.220166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2154.229527] task: ffff88806caca0c0 task.stack: ffff888080548000 [ 2154.235593] RIP: 0010:vb2_vmalloc_put_userptr+0x6a/0x210 [ 2154.241037] RSP: 0018:ffff88808054fc78 EFLAGS: 00010202 [ 2154.246402] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffffffff103f320 [ 2154.253666] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000009 [ 2154.260951] RBP: ffff8880b196a780 R08: 0000000000000000 R09: 000000000004054f [ 2154.268213] R10: ffff88806caca970 R11: ffff88806caca0c0 R12: 0000000000000000 [ 2154.275478] R13: ffff8880b196a788 R14: ffffc90015c9e000 R15: ffff8880b196a780 [ 2154.282741] FS: 0000000002f05400(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000 [ 2154.290961] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2154.296838] CR2: 0000000000970004 CR3: 00000000a9816000 CR4: 00000000001406e0 [ 2154.304123] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2154.311427] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2154.318688] Call Trace: [ 2154.321284] __vb2_queue_free+0x394/0x7a0 [ 2154.325434] ? vb2_vmalloc_detach_dmabuf+0x80/0x80 [ 2154.330368] vb2_core_queue_release+0x5b/0x70 [ 2154.334866] _vb2_fop_release+0x1c1/0x280 [ 2154.339013] vivid_fop_release+0x17d/0x6c0 [ 2154.343250] ? fcntl_setlk+0xdb0/0xdb0 [ 2154.347140] ? vivid_probe+0x390/0x390 [ 2154.351031] ? dev_debug_store+0xe0/0xe0 [ 2154.355791] v4l2_release+0xf4/0x190 [ 2154.359506] __fput+0x25f/0x7a0 [ 2154.362788] task_work_run+0x11f/0x190 [ 2154.366676] exit_to_usermode_loop+0x1ad/0x200 [ 2154.371262] do_syscall_64+0x4a3/0x640 [ 2154.375151] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2154.380337] RIP: 0033:0x41920b [ 2154.383611] RSP: 002b:00007ffd43008180 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 2154.391336] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 000000000041920b [ 2154.398601] RDX: 0000000000000000 RSI: 00007fbe1f4e4c38 RDI: 0000000000000003 [ 2154.405896] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b2ff23500 [ 2154.413164] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000056c9e0 [ 2154.420479] R13: 000000000056c9e0 R14: 000000000056bf60 R15: 000000000020de75 [ 2154.427759] Code: 4c 89 ea 48 c1 ea 03 80 3c 02 00 0f 85 91 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 65 08 49 8d 7c 24 09 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 40 01 00 [ 2154.446920] RIP: vb2_vmalloc_put_userptr+0x6a/0x210 RSP: ffff88808054fc78 [ 2154.468748] ---[ end trace 9239aa3ee7aee6e0 ]--- [ 2154.473533] Kernel panic - not syncing: Fatal exception [ 2154.479421] Kernel Offset: disabled [ 2154.483040] Rebooting in 86400 seconds..