x1, 0x2, 0x0, 0x40, 0x86, 0xe, "328b4773"}, 0x10, 0x4, @fd, 0xffffee6b, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)={0x1, 0x6, 0x4, 0x2, 0x0, {0x0, 0xea60}, {0x5, 0x1, 0x4, 0x3b, 0x25, 0x7, "1ce13f62"}, 0x80000001, 0xd, @fd, 0x3, 0x0, r5}) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000240)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, 0x81, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000340)={0x3, @win={{}, 0x3, 0x0, &(0x7f0000000140)={{0x6, 0x0, 0xffffffff, 0x4}}, 0x81, &(0x7f00000000c0)="1226114e5bc1957eb4"}}) 17:01:42 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix_mp={0x2, 0xec, 0x3147504d, 0x9, 0x2, [{0x4, 0x4}, {0x10001, 0x3ff}, {0x7ff, 0x8}, {0x3, 0x4}, {0xffffffff, 0x6}, {0x9, 0xfffffffd}, {0x5, 0x5}, {0x3, 0x4}], 0x5, 0xf6, 0x0, 0x1, 0x6}}) 17:01:42 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x9b, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000240)) 17:01:42 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x1, @sliced={0x0, [0x5f1e, 0x3, 0x9, 0x0, 0x0, 0x2, 0xfbd, 0xfff, 0x7, 0x1, 0x67, 0x81, 0xe2, 0x7, 0x3ff], 0x4}}, 0x40}) 17:01:42 executing program 1: ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000100)={0x3, 0x9}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000080)={r0, &(0x7f0000000440)=""/4096}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) syz_init_net_socket$ax25(0x3, 0x5, 0xf0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000001c0)={0x6, 0x2, 0x4, 0x0, 0xde24, {r2, r3/1000+60000}, {0x1, 0x2, 0x0, 0x40, 0x86, 0xe, "328b4773"}, 0x10, 0x4, @fd, 0xffffee6b, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)={0x1, 0x6, 0x4, 0x2, 0x0, {0x0, 0xea60}, {0x5, 0x1, 0x4, 0x3b, 0x25, 0x7, "1ce13f62"}, 0x80000001, 0xd, @fd, 0x3, 0x0, r4}) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000340)={0x3, @win={{}, 0x3, 0x0, &(0x7f0000000140)={{0x6, 0x0, 0xffffffff, 0x4}}, 0x81, &(0x7f00000000c0)="1226114e5bc1957eb4"}}) 17:01:42 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix_mp={0x2, 0xec, 0x3147504d, 0x9, 0x2, [{0x4, 0x4}, {0x10001, 0x3ff}, {0x7ff, 0x8}, {0x3, 0x4}, {0xffffffff, 0x6}, {0x9, 0xfffffffd}, {0x5, 0x5}, {0x3, 0x4}], 0x5, 0xf6, 0x0, 0x1, 0x6}}) 17:01:42 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000180)={0x980000, 0xa4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980923, 0x6, [], @string=&(0x7f0000000100)}}) 17:01:42 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x2, @pix_mp={0x0, 0x2, 0x31303453, 0x8, 0xa, [{0x47, 0x10000}, {0x101, 0x8d}, {0x7f, 0x858f}, {0x9, 0x4}, {0x80, 0xd69}, {0xb7, 0x1}, {0x0, 0xd27a}, {0x10001, 0x80}], 0x2, 0xa6, 0x0, 0x2, 0x4}}) 17:01:42 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000180)={0x980000, 0x0, 0x180000, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980923, 0x6, [], @string=&(0x7f0000000100)}}) 17:01:42 executing program 1: ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000100)={0x3, 0x9}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000080)={r0, &(0x7f0000000440)=""/4096}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) syz_init_net_socket$ax25(0x3, 0x5, 0xf0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000001c0)={0x6, 0x2, 0x4, 0x0, 0xde24, {r2, r3/1000+60000}, {0x1, 0x2, 0x0, 0x40, 0x86, 0xe, "328b4773"}, 0x10, 0x4, @fd, 0xffffee6b}) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000340)={0x3, @win={{}, 0x3, 0x0, &(0x7f0000000140)={{0x6, 0x0, 0xffffffff, 0x4}}, 0x81, &(0x7f00000000c0)="1226114e5bc1957eb4"}}) 17:01:42 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000180)={0x980000, 0xa4, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 17:01:42 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix_mp={0x2, 0xec, 0x3147504d, 0x9, 0x2, [{0x4, 0x4}, {0x10001, 0x3ff}, {0x7ff, 0x8}, {0x3, 0x4}, {0xffffffff, 0x6}, {0x9, 0xfffffffd}, {0x5, 0x5}, {0x3, 0x4}], 0x5, 0xf6, 0x0, 0x1, 0x6}}) 17:01:42 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x2, @pix_mp={0x0, 0x0, 0x31303453, 0x8, 0xa, [{0x47, 0x10000}, {0x101, 0x8d}, {0x7f, 0x858f}, {0x9, 0x4}, {0x80, 0xd69}, {0xb7, 0x1}, {0x0, 0xd27a}, {0x10001, 0x80}], 0x2, 0xa6, 0x0, 0x2, 0x4}}) 17:01:42 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x1, @sliced={0x0, [0x5f1e, 0x3, 0x9, 0x0, 0x0, 0x2, 0xfbd, 0xfff, 0x7, 0x1, 0x67, 0x81, 0xe2, 0x7], 0x4}}, 0x40}) 17:01:42 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000180)={0x980000, 0x0, 0x180000, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980923, 0x6, [], @string=&(0x7f0000000100)}}) 17:01:42 executing program 1: ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000100)={0x3, 0x9}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000080)={r0, &(0x7f0000000440)=""/4096}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) syz_init_net_socket$ax25(0x3, 0x5, 0xf0) clock_gettime(0x0, &(0x7f0000000180)) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000340)={0x3, @win={{}, 0x3, 0x0, &(0x7f0000000140)={{0x6, 0x0, 0xffffffff, 0x4}}, 0x81, &(0x7f00000000c0)="1226114e5bc1957eb4"}}) 17:01:42 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x8, 0xa, [{0x47, 0x10000}, {0x101, 0x8d}, {0x7f, 0x858f}, {0x9, 0x4}, {0x80, 0xd69}, {0xb7, 0x1}, {0x0, 0xd27a}, {0x10001, 0x80}], 0x2, 0xa6, 0x0, 0x2, 0x4}}) 17:01:42 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000180)={0x980000, 0xa4, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 17:01:42 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x1, @sliced={0x0, [0x5f1e, 0x3, 0x9, 0x0, 0x0, 0x2, 0xfbd, 0xfff, 0x7, 0x1, 0x67, 0x81, 0xe2], 0x4}}, 0x40}) 17:01:42 executing program 3: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x3, @pix_mp={0x2, 0xec, 0x3147504d, 0x9, 0x2, [{0x4, 0x4}, {0x10001, 0x3ff}, {0x7ff, 0x8}, {0x3, 0x4}, {0xffffffff, 0x6}, {0x9, 0xfffffffd}, {0x5, 0x5}, {0x3, 0x4}], 0x5, 0xf6, 0x0, 0x1, 0x6}}) 17:01:42 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000180)={0x980000, 0x0, 0x180000, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980923, 0x6, [], @string=&(0x7f0000000100)}}) 17:01:42 executing program 1: ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000100)={0x3, 0x9}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000080)={r0, &(0x7f0000000440)=""/4096}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) syz_init_net_socket$ax25(0x3, 0x5, 0xf0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000340)={0x3, @win={{}, 0x3, 0x0, &(0x7f0000000140)={{0x6, 0x0, 0xffffffff, 0x4}}, 0x81, &(0x7f00000000c0)="1226114e5bc1957eb4"}}) 17:01:42 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0xa, [{0x47, 0x10000}, {0x101, 0x8d}, {0x7f, 0x858f}, {0x9, 0x4}, {0x80, 0xd69}, {0xb7, 0x1}, {0x0, 0xd27a}, {0x10001, 0x80}], 0x2, 0xa6, 0x0, 0x2, 0x4}}) 17:01:42 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000180)={0x980000, 0xa4, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 17:01:42 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x1, @sliced={0x0, [0x5f1e, 0x3, 0x9, 0x0, 0x0, 0x2, 0xfbd, 0xfff, 0x7, 0x1, 0x67, 0x81], 0x4}}, 0x40}) 17:01:42 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x47, 0x10000}, {0x101, 0x8d}, {0x7f, 0x858f}, {0x9, 0x4}, {0x80, 0xd69}, {0xb7, 0x1}, {0x0, 0xd27a}, {0x10001, 0x80}], 0x2, 0xa6, 0x0, 0x2, 0x4}}) 17:01:42 executing program 4: ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000180)={0x980000, 0x0, 0x180000, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980923, 0x6, [], @string=&(0x7f0000000100)}}) 17:01:42 executing program 1: ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000100)={0x3, 0x9}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000080)={r0, &(0x7f0000000440)=""/4096}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000340)={0x3, @win={{}, 0x3, 0x0, &(0x7f0000000140)={{0x6, 0x0, 0xffffffff, 0x4}}, 0x81, &(0x7f00000000c0)="1226114e5bc1957eb4"}}) 17:01:42 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000180)={0x980000, 0xa4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x6, [], @string=&(0x7f0000000100)}}) 17:01:42 executing program 3: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x3, @pix_mp={0x2, 0xec, 0x3147504d, 0x9, 0x2, [{0x4, 0x4}, {0x10001, 0x3ff}, {0x7ff, 0x8}, {0x3, 0x4}, {0xffffffff, 0x6}, {0x9, 0xfffffffd}, {0x5, 0x5}, {0x3, 0x4}], 0x5, 0xf6, 0x0, 0x1, 0x6}}) 17:01:42 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x1, @sliced={0x0, [0x5f1e, 0x3, 0x9, 0x0, 0x0, 0x2, 0xfbd, 0xfff, 0x7, 0x1, 0x67], 0x4}}, 0x40}) 17:01:42 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x47, 0x10000}, {0x101, 0x8d}, {0x7f, 0x858f}, {0x9, 0x4}, {0x80, 0xd69}, {0xb7, 0x1}, {0x0, 0xd27a}, {0x0, 0x80}], 0x2, 0xa6, 0x0, 0x2, 0x4}}) 17:01:42 executing program 4: ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000180)={0x980000, 0x0, 0x180000, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980923, 0x6, [], @string=&(0x7f0000000100)}}) 17:01:42 executing program 1: ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000100)={0x3, 0x9}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000080)={r0, &(0x7f0000000440)=""/4096}) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000340)={0x3, @win={{}, 0x3, 0x0, &(0x7f0000000140)={{0x6, 0x0, 0xffffffff, 0x4}}, 0x81, &(0x7f00000000c0)="1226114e5bc1957eb4"}}) 17:01:42 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x1, @sliced={0x0, [0x5f1e, 0x3, 0x9, 0x0, 0x0, 0x2, 0xfbd, 0xfff, 0x7, 0x1], 0x4}}, 0x40}) 17:01:42 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000180)={0x980000, 0xa4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x6, [], @string=&(0x7f0000000100)}}) 17:01:42 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x47, 0x10000}, {0x101, 0x8d}, {0x7f, 0x858f}, {0x9, 0x4}, {0x80, 0xd69}, {0xb7, 0x1}, {0x0, 0xd27a}], 0x2, 0xa6, 0x0, 0x2, 0x4}}) 17:01:42 executing program 3: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x3, @pix_mp={0x2, 0xec, 0x3147504d, 0x9, 0x2, [{0x4, 0x4}, {0x10001, 0x3ff}, {0x7ff, 0x8}, {0x3, 0x4}, {0xffffffff, 0x6}, {0x9, 0xfffffffd}, {0x5, 0x5}, {0x3, 0x4}], 0x5, 0xf6, 0x0, 0x1, 0x6}}) 17:01:42 executing program 4: ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000180)={0x980000, 0x0, 0x180000, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980923, 0x6, [], @string=&(0x7f0000000100)}}) 17:01:42 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000180)={0x980000, 0xa4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x6, [], @string=&(0x7f0000000100)}}) 17:01:42 executing program 1: ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000100)={0x3, 0x9}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000080)={r0, &(0x7f0000000440)=""/4096}) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000340)={0x3, @win={{}, 0x3, 0x0, &(0x7f0000000140)={{0x6, 0x0, 0xffffffff, 0x4}}, 0x81, &(0x7f00000000c0)="1226114e5bc1957eb4"}}) 17:01:42 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x1, @sliced={0x0, [0x5f1e, 0x3, 0x9, 0x0, 0x0, 0x2, 0xfbd, 0xfff, 0x7], 0x4}}, 0x40}) 17:01:42 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x47, 0x10000}, {0x101, 0x8d}, {0x7f, 0x858f}, {0x9, 0x4}, {0x80, 0xd69}, {0xb7, 0x1}], 0x2, 0xa6, 0x0, 0x2, 0x4}}) 17:01:42 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000180)={0x980000, 0xa4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980923, 0x0, [], @string=&(0x7f0000000100)}}) 17:01:42 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 17:01:42 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x47, 0x10000}, {0x101, 0x8d}, {0x7f, 0x858f}, {0x9, 0x4}, {0x80, 0xd69}, {0x0, 0x1}], 0x2, 0xa6, 0x0, 0x2, 0x4}}) 17:01:42 executing program 1: ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000100)={0x3, 0x9}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000080)={r0, &(0x7f0000000440)=""/4096}) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000340)={0x3, @win={{}, 0x3, 0x0, &(0x7f0000000140)={{0x6, 0x0, 0xffffffff, 0x4}}, 0x81, &(0x7f00000000c0)="1226114e5bc1957eb4"}}) 17:01:42 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x1, @sliced={0x0, [0x5f1e, 0x3, 0x9, 0x0, 0x0, 0x2, 0xfbd, 0xfff], 0x4}}, 0x40}) 17:01:43 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000180)={0x980000, 0xa4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980923, 0x0, [], @string=0x0}}) 17:01:43 executing program 1: ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000100)={0x3, 0x9}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x3, @win={{}, 0x3, 0x0, &(0x7f0000000140)={{0x6, 0x0, 0xffffffff, 0x4}}, 0x81, &(0x7f00000000c0)="1226114e5bc1957eb4"}}) 17:01:43 executing program 4: r0 = syz_open_dev$video(0x0, 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000180)={0x980000, 0x0, 0x180000, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980923, 0x6, [], @string=&(0x7f0000000100)}}) 17:01:43 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x1, @sliced={0x0, [0x5f1e, 0x3, 0x9, 0x0, 0x0, 0x2, 0xfbd], 0x4}}, 0x40}) 17:01:43 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000180)={0x980000, 0xa4, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 17:01:43 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 17:01:43 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x47, 0x10000}, {0x101, 0x8d}, {0x7f, 0x858f}, {0x9, 0x4}, {0x80, 0xd69}], 0x2, 0xa6, 0x0, 0x2, 0x4}}) 17:01:43 executing program 1: ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000100)={0x3, 0x9}) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x3, @win={{}, 0x3, 0x0, &(0x7f0000000140)={{0x6, 0x0, 0xffffffff, 0x4}}, 0x81, &(0x7f00000000c0)="1226114e5bc1957eb4"}}) 17:01:43 executing program 4: r0 = syz_open_dev$video(0x0, 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000180)={0x980000, 0x0, 0x180000, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980923, 0x6, [], @string=&(0x7f0000000100)}}) 17:01:43 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x1, @sliced={0x0, [0x5f1e, 0x3, 0x9, 0x0, 0x0, 0x2], 0x4}}, 0x40}) 17:01:43 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x3, @win={{}, 0x3, 0x0, &(0x7f0000000140)={{0x6, 0x0, 0xffffffff, 0x4}}, 0x81, &(0x7f00000000c0)="1226114e5bc1957eb4"}}) 17:01:43 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x47, 0x10000}, {0x101, 0x8d}, {0x7f, 0x858f}, {0x9, 0x4}, {0x80, 0xd69}, {0x0, 0x1}], 0x2, 0xa6, 0x0, 0x2, 0x4}}) 17:01:43 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x47, 0x10000}, {0x101, 0x8d}, {0x7f, 0x858f}, {0x9, 0x4}, {0x0, 0xd69}], 0x2, 0xa6, 0x0, 0x2, 0x4}}) 17:01:43 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 17:01:43 executing program 4: r0 = syz_open_dev$video(0x0, 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000180)={0x980000, 0x0, 0x180000, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980923, 0x6, [], @string=&(0x7f0000000100)}}) 17:01:43 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x1, @sliced={0x0, [0x5f1e, 0x3, 0x9], 0x4}}, 0x40}) 17:01:43 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x3, @win={{}, 0x3, 0x0, &(0x7f0000000140)={{0x6, 0x0, 0xffffffff, 0x4}}, 0x81, &(0x7f00000000c0)="1226114e5bc1957eb4"}}) 17:01:43 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x47, 0x10000}, {0x101, 0x8d}, {0x7f, 0x858f}, {0x9, 0x4}], 0x2, 0xa6, 0x0, 0x2, 0x4}}) 17:01:43 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)={0x4f1, 0x1, 0x4, 0x70000, 0x6, {}, {0x2, 0x0, 0x97, 0x9, 0x1f, 0x2, "15e3d15e"}, 0x5, 0x3, @fd, 0x7fff, 0x0, 0xffffffffffffffff}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000280)={0x80000001, 0x7}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x11, 0x2, 0x4, 0x100008, 0x2, {}, {0x1, 0x2, 0xf8, 0x2, 0x1, 0x20, "36675ad3"}, 0x5, 0x1, @planes=&(0x7f0000000080)={0x80000000, 0x20000000, @mem_offset=0x2, 0x3}, 0x1, 0x0, r2}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x3, @win={{0x5, 0x0, 0x0, 0x2000}, 0x0, 0x0, &(0x7f0000000140)={{0x6, 0xffffffff}}, 0xff, &(0x7f0000000180)="1026114e5bc1957ebc"}}) 17:01:43 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000180)={0x980000, 0x0, 0x180000, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980923, 0x6, [], @string=&(0x7f0000000100)}}) 17:01:43 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x0, @pix_mp={0x2, 0xec, 0x3147504d, 0x9, 0x2, [{0x4, 0x4}, {0x10001, 0x3ff}, {0x7ff, 0x8}, {0x3, 0x4}, {0xffffffff, 0x6}, {0x9, 0xfffffffd}, {0x5, 0x5}, {0x3, 0x4}], 0x5, 0xf6, 0x0, 0x1, 0x6}}) 17:01:43 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x47, 0x10000}, {0x101, 0x8d}, {0x7f, 0x858f}, {0x0, 0x4}], 0x2, 0xa6, 0x0, 0x2, 0x4}}) 17:01:43 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x3, @win={{}, 0x3, 0x0, &(0x7f0000000140)={{0x6, 0x0, 0xffffffff, 0x4}}, 0x81, &(0x7f00000000c0)="1226114e5bc1957eb4"}}) 17:01:43 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x1, @sliced={0x0, [0x5f1e, 0x3], 0x4}}, 0x40}) 17:01:43 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000180)={0x980000, 0x0, 0x180000, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980923, 0x6, [], @string=&(0x7f0000000100)}}) 17:01:43 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x3, @win={{}, 0x3, 0x0, &(0x7f0000000140)={{0x6, 0x0, 0xffffffff, 0x4}}, 0x81, &(0x7f00000000c0)="1226114e5bc1957eb4"}}) 17:01:43 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x47, 0x10000}, {0x101, 0x8d}, {0x7f, 0x858f}], 0x2, 0xa6, 0x0, 0x2, 0x4}}) 17:01:43 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)={0x4f1, 0x1, 0x4, 0x70000, 0x6, {}, {0x2, 0x0, 0x97, 0x9, 0x1f, 0x2, "15e3d15e"}, 0x5, 0x3, @fd, 0x7fff, 0x0, 0xffffffffffffffff}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000280)={0x80000001, 0x7}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x11, 0x2, 0x4, 0x100008, 0x2, {}, {0x1, 0x2, 0xf8, 0x2, 0x1, 0x20, "36675ad3"}, 0x5, 0x1, @planes=&(0x7f0000000080)={0x80000000, 0x20000000, @mem_offset=0x2, 0x3}, 0x1, 0x0, r2}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x3, @win={{0x5, 0x0, 0x0, 0x2000}, 0x0, 0x0, &(0x7f0000000140)={{0x6, 0xffffffff}}, 0xff, &(0x7f0000000180)="1026114e5bc1957ebc"}}) 17:01:43 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000180)={0x980000, 0x0, 0x180000, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980923, 0x6, [], @string=&(0x7f0000000100)}}) 17:01:43 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x1, @sliced={0x0, [0x5f1e], 0x4}}, 0x40}) 17:01:43 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x0, @pix_mp={0x2, 0xec, 0x3147504d, 0x9, 0x2, [{0x4, 0x4}, {0x10001, 0x3ff}, {0x7ff, 0x8}, {0x3, 0x4}, {0xffffffff, 0x6}, {0x9, 0xfffffffd}, {0x5, 0x5}, {0x3, 0x4}], 0x5, 0xf6, 0x0, 0x1, 0x6}}) 17:01:43 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x47, 0x10000}, {0x101, 0x8d}, {0x0, 0x858f}], 0x2, 0xa6, 0x0, 0x2, 0x4}}) 17:01:43 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x3, @win={{}, 0x3, 0x0, &(0x7f0000000140)={{0x6, 0x0, 0xffffffff, 0x4}}, 0x81, &(0x7f00000000c0)="1226114e5bc1957eb4"}}) 17:01:43 executing program 4: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000180)={0x980000, 0x0, 0x180000, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980923, 0x6, [], @string=&(0x7f0000000100)}}) 17:01:43 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x1, @sliced={0x0, [], 0x4}}, 0x40}) 17:01:43 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x47, 0x10000}, {0x101, 0x8d}], 0x2, 0xa6, 0x0, 0x2, 0x4}}) 17:01:43 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x0, @pix_mp={0x2, 0xec, 0x3147504d, 0x9, 0x2, [{0x4, 0x4}, {0x10001, 0x3ff}, {0x7ff, 0x8}, {0x3, 0x4}, {0xffffffff, 0x6}, {0x9, 0xfffffffd}, {0x5, 0x5}, {0x3, 0x4}], 0x5, 0xf6, 0x0, 0x1, 0x6}}) 17:01:43 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a305f3ba"}, 0x0, 0x1, @userptr}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000002c0)={0x2, @win={{0x5, 0x6, 0x40, 0x6}, 0x7, 0x3, &(0x7f00000001c0)={{0xffffffd9, 0x7, 0x9, 0xfffffffb}, &(0x7f0000000180)={{0x5a, 0xffffffff, 0x7, 0x80000000}, &(0x7f0000000140)={{0x40, 0x0, 0x3, 0x1}}}}, 0x5, &(0x7f0000000200)="11da910507883c6f2d6c3e2ad414bd5095b5254a92682f62e518347c3db4f8e8b06bb1a6e75c2cecde69f6676fdb22732669f06db48eaba9e517d2c2b3f9a23ac122110d2bee05476ea35a1241917afa92bb666dbd4a731b497bb3f7062c21fd264f0ca5c56464871864d21981e3a4b6d8692081b26046ff9898aae221a38341f2f12c4e97a121f1732980931abfdf83a471d1f422d3e3a36832183a444c0fedfcc3a48d604eeb5979553a21fb21", 0x7}}) ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, &(0x7f0000000000)) 17:01:43 executing program 4: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000180)={0x980000, 0x0, 0x180000, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980923, 0x6, [], @string=&(0x7f0000000100)}}) 17:01:43 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x3, @win={{}, 0x3, 0x0, &(0x7f0000000140)={{0x6, 0x0, 0xffffffff, 0x4}}, 0x81, &(0x7f00000000c0)="1226114e5bc1957eb4"}}) 17:01:43 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x47, 0x10000}, {0x0, 0x8d}], 0x2, 0xa6, 0x0, 0x2, 0x4}}) 17:01:43 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x1, @sliced}, 0x40}) 17:01:43 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix_mp={0x0, 0xec, 0x3147504d, 0x9, 0x2, [{0x4, 0x4}, {0x10001, 0x3ff}, {0x7ff, 0x8}, {0x3, 0x4}, {0xffffffff, 0x6}, {0x9, 0xfffffffd}, {0x5, 0x5}, {0x3, 0x4}], 0x5, 0xf6, 0x0, 0x1, 0x6}}) 17:01:43 executing program 4: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000180)={0x980000, 0x0, 0x180000, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980923, 0x6, [], @string=&(0x7f0000000100)}}) 17:01:43 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x47, 0x10000}], 0x2, 0xa6, 0x0, 0x2, 0x4}}) 17:01:43 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)="ed9f63075e25eb83b40dfd48cc2c5eb7b7ab8c1e6fab7f1d66e315982a61"}}) 17:01:43 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x1, @sliced}}) 17:01:43 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x3, @win={{}, 0x3, 0x0, &(0x7f0000000140)={{0x6, 0x0, 0xffffffff, 0x4}}, 0x81, &(0x7f00000000c0)="1226114e5bc1957eb4"}}) 17:01:43 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix_mp={0x0, 0x0, 0x3147504d, 0x9, 0x2, [{0x4, 0x4}, {0x10001, 0x3ff}, {0x7ff, 0x8}, {0x3, 0x4}, {0xffffffff, 0x6}, {0x9, 0xfffffffd}, {0x5, 0x5}, {0x3, 0x4}], 0x5, 0xf6, 0x0, 0x1, 0x6}}) 17:01:43 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x10000}], 0x2, 0xa6, 0x0, 0x2, 0x4}}) 17:01:43 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, 0x0) 17:01:43 executing program 1: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000340)={0x3, @win={{}, 0x3, 0x0, &(0x7f0000000140)={{0x6, 0x0, 0xffffffff, 0x4}}, 0x81, &(0x7f00000000c0)="1226114e5bc1957eb4"}}) 17:01:43 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) accept$alg(r2, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000, 0xffffffffffffffff}) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000180)={0x6, 0x1f, 0x7, 0x80000, r5}) r6 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x8000, 0x2) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) ioctl$vim2m_VIDIOC_QUERYCAP(r6, 0x80685600, &(0x7f00000002c0)) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x7, 0x3, 0x4, 0x8, 0xd6, {0x77359400}, {0x5, 0x8, 0x9, 0x0, 0x3, 0x4, "9e7827e9"}, 0xffff, 0x2, @fd, 0xc088, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000240)={0xfd, 0xc, 0x4, 0x0, 0x0, {r3, r4/1000+60000}, {0x5, 0xc, 0x1, 0x1, 0x3, 0x59, "bc5b6597"}, 0x2, 0x4, @offset=0x400, 0xffff92ef, 0x0, r7}) 17:01:43 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000440)={0x3, 0x2, 0x4, 0x100000, 0x9, {}, {0xd0bda484fe5ae15a, 0x0, 0x8, 0x6, 0x7, 0x3f, "3e75f810"}, 0xffff, 0x3, @planes=&(0x7f0000000300)={0x5, 0xa6b, @mem_offset=0x56, 0x2}, 0xfffffff9}) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000040)={0x0, @pix_mp={0x4, 0x80000001, 0x30395056, 0xa74cd8b6bbc6e9af, 0x0, [{0x18b, 0x6}, {0x8, 0x3}, {0x7, 0x8001}, {0x2, 0x5}, {0xccf, 0x2}, {0x964, 0xffff}, {0x200, 0x1}, {0x7, 0x7}], 0x3, 0x7f, 0x7, 0x2, 0x2}}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x10800, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f00000001c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x20303159, 0x0, 0x0, [{0xffffffff}, {}, {}, {0x3f3}, {}, {0x100}]}}}) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f0000000200)={0x0, @bt={0x4, 0x3f, 0x1, 0x0, 0x7, 0x7, 0x0, 0xbb, 0xe9, 0x1, 0x7, 0xaf03, 0x10000, 0x3, 0x4, 0x8, {0x20, 0x2}, 0x1}}) 17:01:43 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x9, 0x2, [{0x4, 0x4}, {0x10001, 0x3ff}, {0x7ff, 0x8}, {0x3, 0x4}, {0xffffffff, 0x6}, {0x9, 0xfffffffd}, {0x5, 0x5}, {0x3, 0x4}], 0x5, 0xf6, 0x0, 0x1, 0x6}}) 17:01:43 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, 0x0) 17:01:43 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x2, 0xa6, 0x0, 0x2, 0x4}}) 17:01:43 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) accept$alg(r2, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000, 0xffffffffffffffff}) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000180)={0x6, 0x1f, 0x7, 0x80000, r5}) r6 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x8000, 0x2) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) ioctl$vim2m_VIDIOC_QUERYCAP(r6, 0x80685600, &(0x7f00000002c0)) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x7, 0x3, 0x4, 0x8, 0xd6, {0x77359400}, {0x5, 0x8, 0x9, 0x0, 0x3, 0x4, "9e7827e9"}, 0xffff, 0x2, @fd, 0xc088, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000240)={0xfd, 0xc, 0x4, 0x0, 0x0, {r3, r4/1000+60000}, {0x5, 0xc, 0x1, 0x1, 0x3, 0x59, "bc5b6597"}, 0x2, 0x4, @offset=0x400, 0xffff92ef, 0x0, r7}) 17:01:43 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000440)={0x3, 0x2, 0x4, 0x100000, 0x9, {}, {0xd0bda484fe5ae15a, 0x0, 0x8, 0x6, 0x7, 0x3f, "3e75f810"}, 0xffff, 0x3, @planes=&(0x7f0000000300)={0x5, 0xa6b, @mem_offset=0x56, 0x2}, 0xfffffff9}) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000040)={0x0, @pix_mp={0x4, 0x80000001, 0x30395056, 0xa74cd8b6bbc6e9af, 0x0, [{0x18b, 0x6}, {0x8, 0x3}, {0x7, 0x8001}, {0x2, 0x5}, {0xccf, 0x2}, {0x964, 0xffff}, {0x200, 0x1}, {0x7, 0x7}], 0x3, 0x7f, 0x7, 0x2, 0x2}}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x10800, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f00000001c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x20303159, 0x0, 0x0, [{0xffffffff}, {}, {}, {0x3f3}, {}, {0x100}]}}}) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f0000000200)={0x0, @bt={0x4, 0x3f, 0x1, 0x0, 0x7, 0x7, 0x0, 0xbb, 0xe9, 0x1, 0x7, 0xaf03, 0x10000, 0x3, 0x4, 0x8, {0x20, 0x2}, 0x1}}) 17:01:43 executing program 1: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000340)={0x3, @win={{}, 0x3, 0x0, &(0x7f0000000140)={{0x6, 0x0, 0xffffffff, 0x4}}, 0x81, &(0x7f00000000c0)="1226114e5bc1957eb4"}}) 17:01:43 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, 0x4}, {0x10001, 0x3ff}, {0x7ff, 0x8}, {0x3, 0x4}, {0xffffffff, 0x6}, {0x9, 0xfffffffd}, {0x5, 0x5}, {0x3, 0x4}], 0x5, 0xf6, 0x0, 0x1, 0x6}}) 17:01:44 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xa6, 0x0, 0x2, 0x4}}) 17:01:44 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) accept$alg(r2, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000, 0xffffffffffffffff}) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000180)={0x6, 0x1f, 0x7, 0x80000, r5}) r6 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x8000, 0x2) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) ioctl$vim2m_VIDIOC_QUERYCAP(r6, 0x80685600, &(0x7f00000002c0)) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x7, 0x3, 0x4, 0x8, 0xd6, {0x77359400}, {0x5, 0x8, 0x9, 0x0, 0x3, 0x4, "9e7827e9"}, 0xffff, 0x2, @fd, 0xc088, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000240)={0xfd, 0xc, 0x4, 0x0, 0x0, {r3, r4/1000+60000}, {0x5, 0xc, 0x1, 0x1, 0x3, 0x59, "bc5b6597"}, 0x2, 0x4, @offset=0x400, 0xffff92ef, 0x0, r7}) 17:01:44 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, 0x0) 17:01:44 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x4, 0x4}, {0x10001, 0x3ff}, {0x7ff, 0x8}, {0x3, 0x4}, {0xffffffff, 0x6}, {0x9, 0xfffffffd}, {0x5, 0x5}, {0x3, 0x4}], 0x5, 0xf6, 0x0, 0x1, 0x6}}) 17:01:44 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 17:01:44 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0, 0x2, 0x4}}) 17:01:44 executing program 1: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000340)={0x3, @win={{}, 0x3, 0x0, &(0x7f0000000140)={{0x6, 0x0, 0xffffffff, 0x4}}, 0x81, &(0x7f00000000c0)="1226114e5bc1957eb4"}}) 17:01:44 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000180)={0x0, 0x0, 0x180000, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980923, 0x6, [], @string=&(0x7f0000000100)}}) 17:01:44 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x4, 0x4}, {0x10001, 0x3ff}, {0x7ff, 0x8}, {0x3, 0x4}, {0xffffffff, 0x6}, {0x9, 0xfffffffd}, {0x5, 0x5}, {0x3, 0x4}], 0x5, 0xf6, 0x0, 0x1, 0x6}}) 17:01:44 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) accept$alg(r2, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000, 0xffffffffffffffff}) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000180)={0x6, 0x1f, 0x7, 0x80000, r3}) r4 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x8000, 0x2) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f00000002c0)) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x7, 0x3, 0x4, 0x8, 0xd6, {0x77359400}, {0x5, 0x8, 0x9, 0x0, 0x3, 0x4, "9e7827e9"}, 0xffff, 0x2, @fd, 0xc088}) 17:01:44 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a305f3ba"}, 0x0, 0x1, @userptr, 0x5, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x100000000000000, 0x2) r5 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000240)={0x93, 0x2, 0x4, 0x400, 0xfffff001, {0x0, 0xea60}, {0x0, 0x8, 0x0, 0xce, 0x2, 0x47, "209b87fc"}, 0xff, 0x1, @offset=0x4d, 0x9, 0x0, r2}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000002c0)={0x10001, 0x0, 0x4, 0xe000, 0xdb, {0x77359400}, {0x3, 0x8, 0x8d, 0x0, 0x3f, 0x72, "7436c386"}, 0x400, 0x0, @fd, 0x1ff, 0x0, r6}) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000140)={0x2, @raw_data="814a839d105890d28f4fa7ec210f562f2213335c159b67c5a3329b666c00fbe11f5860d3922ceafd9a163586bfc05ce700631da94dd97cac683c37e1c77f9ab85dd93ad7e3315b5903f67a63d774532aa6a726b68b8fc0e3ea1bbc0eb6d6706375d6ed81f869ec32277f5cd4bea89809e19e390127c835e18a4c8507e635883c6e320b64dcc1db91417811d9e0bb33c970d8203aa19e61b235291e07a824437a35f2250ad8900b481511a9caf134bcd1e4cd8e801684493c155e2750bc447b5584bfb0e81e2bec73"}) r7 = syz_open_dev$vim2m(&(0x7f0000000340)='/dev/video#\x00', 0x2, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r7, 0xc0585611, &(0x7f0000000380)={0x1, 0x1, 0x4, 0x10, 0xad4, {}, {0x6, 0xe, 0xff, 0x7f, 0x74, 0x99, "840bcf03"}, 0xa, 0x4, @userptr=0xffff, 0x9, 0x0, r3}) 17:01:44 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0, 0x0, 0x4}}) 17:01:44 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 17:01:44 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000180)={0x0, 0x0, 0x180000, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980923, 0x6, [], @string=&(0x7f0000000100)}}) 17:01:44 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x4, 0x4}, {0x10001, 0x3ff}, {0x7ff, 0x8}, {0x3, 0x4}, {0xffffffff, 0x6}, {0x9, 0xfffffffd}, {0x5, 0x5}, {0x3, 0x4}], 0x5, 0xf6, 0x0, 0x1, 0x6}}) 17:01:44 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) accept$alg(r2, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000, 0xffffffffffffffff}) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000180)={0x6, 0x1f, 0x7, 0x80000, r3}) r4 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x8000, 0x2) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f00000002c0)) 17:01:44 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a305f3ba"}, 0x0, 0x1, @userptr, 0x5, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x100000000000000, 0x2) r5 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000240)={0x93, 0x2, 0x4, 0x400, 0xfffff001, {0x0, 0xea60}, {0x0, 0x8, 0x0, 0xce, 0x2, 0x47, "209b87fc"}, 0xff, 0x1, @offset=0x4d, 0x9, 0x0, r2}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000002c0)={0x10001, 0x0, 0x4, 0xe000, 0xdb, {0x77359400}, {0x3, 0x8, 0x8d, 0x0, 0x3f, 0x72, "7436c386"}, 0x400, 0x0, @fd, 0x1ff, 0x0, r6}) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000140)={0x2, @raw_data="814a839d105890d28f4fa7ec210f562f2213335c159b67c5a3329b666c00fbe11f5860d3922ceafd9a163586bfc05ce700631da94dd97cac683c37e1c77f9ab85dd93ad7e3315b5903f67a63d774532aa6a726b68b8fc0e3ea1bbc0eb6d6706375d6ed81f869ec32277f5cd4bea89809e19e390127c835e18a4c8507e635883c6e320b64dcc1db91417811d9e0bb33c970d8203aa19e61b235291e07a824437a35f2250ad8900b481511a9caf134bcd1e4cd8e801684493c155e2750bc447b5584bfb0e81e2bec73"}) r7 = syz_open_dev$vim2m(&(0x7f0000000340)='/dev/video#\x00', 0x2, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r7, 0xc0585611, &(0x7f0000000380)={0x1, 0x1, 0x4, 0x10, 0xad4, {}, {0x6, 0xe, 0xff, 0x7f, 0x74, 0x99, "840bcf03"}, 0xa, 0x4, @userptr=0xffff, 0x9, 0x0, r3}) 17:01:44 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x2, @pix_mp}) 17:01:44 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 17:01:44 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, 0x4}, {0x10001, 0x3ff}, {0x7ff, 0x8}, {0x3, 0x4}, {0xffffffff, 0x6}, {0x9, 0xfffffffd}, {0x5, 0x5}, {0x0, 0x4}], 0x5, 0xf6, 0x0, 0x1, 0x6}}) 17:01:44 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) accept$alg(r2, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000, 0xffffffffffffffff}) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000180)={0x6, 0x1f, 0x7, 0x80000, r3}) syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x8000, 0x2) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) 17:01:44 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 17:01:44 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000200)={0x0, @win={{0xfffffffb, 0x5, 0x7f, 0x311f}, 0x4, 0x1000, &(0x7f0000000100)={{0x5, 0x7fffffff, 0x5, 0x400}, &(0x7f00000000c0)={{0x400, 0x6, 0x7, 0x4}, &(0x7f0000000080)={{0x1, 0x7fff, 0x5900dd91, 0x1ff}}}}, 0x5, &(0x7f0000000140)="1cb3194962bd07d3b15a20b3edfc743c8f49e59746776571c80be78e5ac7b18dfd857e7dcd93e866b8f558f2ea4c0540c1cf245f197fa4f342f854e53a555559ed03b652f74b19c8fc77674a079c17c28f37365dcb15a5322dff5c16253300cfa6ca9cdef3ba8393b70b5e56d9d1d6c3b296e24df7212d609c3242b4c8aa421425d604a1fa302b511ab58a257c15f0", 0xff}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:44 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000180)={0x0, 0x0, 0x180000, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980923, 0x6, [], @string=&(0x7f0000000100)}}) 17:01:44 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a305f3ba"}, 0x0, 0x1, @userptr, 0x5, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x100000000000000, 0x2) r5 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000240)={0x93, 0x2, 0x4, 0x400, 0xfffff001, {0x0, 0xea60}, {0x0, 0x8, 0x0, 0xce, 0x2, 0x47, "209b87fc"}, 0xff, 0x1, @offset=0x4d, 0x9, 0x0, r2}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000002c0)={0x10001, 0x0, 0x4, 0xe000, 0xdb, {0x77359400}, {0x3, 0x8, 0x8d, 0x0, 0x3f, 0x72, "7436c386"}, 0x400, 0x0, @fd, 0x1ff, 0x0, r6}) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000140)={0x2, @raw_data="814a839d105890d28f4fa7ec210f562f2213335c159b67c5a3329b666c00fbe11f5860d3922ceafd9a163586bfc05ce700631da94dd97cac683c37e1c77f9ab85dd93ad7e3315b5903f67a63d774532aa6a726b68b8fc0e3ea1bbc0eb6d6706375d6ed81f869ec32277f5cd4bea89809e19e390127c835e18a4c8507e635883c6e320b64dcc1db91417811d9e0bb33c970d8203aa19e61b235291e07a824437a35f2250ad8900b481511a9caf134bcd1e4cd8e801684493c155e2750bc447b5584bfb0e81e2bec73"}) r7 = syz_open_dev$vim2m(&(0x7f0000000340)='/dev/video#\x00', 0x2, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r7, 0xc0585611, &(0x7f0000000380)={0x1, 0x1, 0x4, 0x10, 0xad4, {}, {0x6, 0xe, 0xff, 0x7f, 0x74, 0x99, "840bcf03"}, 0xa, 0x4, @userptr=0xffff, 0x9, 0x0, r3}) 17:01:44 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) accept$alg(r2, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000, 0xffffffffffffffff}) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000180)={0x6, 0x1f, 0x7, 0x80000, r3}) syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x8000, 0x2) 17:01:44 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, 0x4}, {0x10001, 0x3ff}, {0x7ff, 0x8}, {0x3, 0x4}, {0xffffffff, 0x6}, {0x9, 0xfffffffd}, {0x5, 0x5}], 0x5, 0xf6, 0x0, 0x1, 0x6}}) 17:01:44 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a305f3ba"}, 0x0, 0x1, @userptr, 0x5}) r3 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x100000000000000, 0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000240)={0x93, 0x2, 0x4, 0x400, 0xfffff001, {0x0, 0xea60}, {0x0, 0x8, 0x0, 0xce, 0x2, 0x47, "209b87fc"}, 0xff, 0x1, @offset=0x4d, 0x9, 0x0, r2}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000002c0)={0x10001, 0x0, 0x4, 0xe000, 0xdb, {0x77359400}, {0x3, 0x8, 0x8d, 0x0, 0x3f, 0x72, "7436c386"}, 0x400, 0x0, @fd, 0x1ff, 0x0, r5}) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000140)={0x2, @raw_data="814a839d105890d28f4fa7ec210f562f2213335c159b67c5a3329b666c00fbe11f5860d3922ceafd9a163586bfc05ce700631da94dd97cac683c37e1c77f9ab85dd93ad7e3315b5903f67a63d774532aa6a726b68b8fc0e3ea1bbc0eb6d6706375d6ed81f869ec32277f5cd4bea89809e19e390127c835e18a4c8507e635883c6e320b64dcc1db91417811d9e0bb33c970d8203aa19e61b235291e07a824437a35f2250ad8900b481511a9caf134bcd1e4cd8e801684493c155e2750bc447b5584bfb0e81e2bec73"}) syz_open_dev$vim2m(&(0x7f0000000340)='/dev/video#\x00', 0x2, 0x2) 17:01:44 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000200)={0x0, @win={{0xfffffffb, 0x5, 0x7f, 0x311f}, 0x4, 0x1000, &(0x7f0000000100)={{0x5, 0x7fffffff, 0x5, 0x400}, &(0x7f00000000c0)={{0x400, 0x6, 0x7, 0x4}, &(0x7f0000000080)={{0x1, 0x7fff, 0x5900dd91, 0x1ff}}}}, 0x5, &(0x7f0000000140)="1cb3194962bd07d3b15a20b3edfc743c8f49e59746776571c80be78e5ac7b18dfd857e7dcd93e866b8f558f2ea4c0540c1cf245f197fa4f342f854e53a555559ed03b652f74b19c8fc77674a079c17c28f37365dcb15a5322dff5c16253300cfa6ca9cdef3ba8393b70b5e56d9d1d6c3b296e24df7212d609c3242b4c8aa421425d604a1fa302b511ab58a257c15f0", 0xff}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:44 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x0, @win={{}, 0x3, 0x0, &(0x7f0000000140)={{0x6, 0x0, 0xffffffff, 0x4}}, 0x81, &(0x7f00000000c0)="1226114e5bc1957eb4"}}) 17:01:44 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000180)={0x980000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980923, 0x6, [], @string=&(0x7f0000000100)}}) 17:01:44 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, 0x4}, {0x10001, 0x3ff}, {0x7ff, 0x8}, {0x3, 0x4}, {0xffffffff, 0x6}, {0x9, 0xfffffffd}, {0x0, 0x5}], 0x5, 0xf6, 0x0, 0x1, 0x6}}) 17:01:44 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) accept$alg(r2, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000, 0xffffffffffffffff}) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000180)={0x6, 0x1f, 0x7, 0x80000, r3}) 17:01:44 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a305f3ba"}, 0x0, 0x1, @userptr, 0x5}) r3 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x100000000000000, 0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000240)={0x93, 0x2, 0x4, 0x400, 0xfffff001, {0x0, 0xea60}, {0x0, 0x8, 0x0, 0xce, 0x2, 0x47, "209b87fc"}, 0xff, 0x1, @offset=0x4d, 0x9, 0x0, r2}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000002c0)={0x10001, 0x0, 0x4, 0xe000, 0xdb, {0x77359400}, {0x3, 0x8, 0x8d, 0x0, 0x3f, 0x72, "7436c386"}, 0x400, 0x0, @fd, 0x1ff, 0x0, r5}) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000140)={0x2, @raw_data="814a839d105890d28f4fa7ec210f562f2213335c159b67c5a3329b666c00fbe11f5860d3922ceafd9a163586bfc05ce700631da94dd97cac683c37e1c77f9ab85dd93ad7e3315b5903f67a63d774532aa6a726b68b8fc0e3ea1bbc0eb6d6706375d6ed81f869ec32277f5cd4bea89809e19e390127c835e18a4c8507e635883c6e320b64dcc1db91417811d9e0bb33c970d8203aa19e61b235291e07a824437a35f2250ad8900b481511a9caf134bcd1e4cd8e801684493c155e2750bc447b5584bfb0e81e2bec73"}) 17:01:44 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x0, @win={{}, 0x3, 0x0, &(0x7f0000000140)={{0x6, 0x0, 0xffffffff, 0x4}}, 0x81, &(0x7f00000000c0)="1226114e5bc1957eb4"}}) 17:01:44 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000200)={0x0, @win={{0xfffffffb, 0x5, 0x7f, 0x311f}, 0x4, 0x1000, &(0x7f0000000100)={{0x5, 0x7fffffff, 0x5, 0x400}, &(0x7f00000000c0)={{0x400, 0x6, 0x7, 0x4}, &(0x7f0000000080)={{0x1, 0x7fff, 0x5900dd91, 0x1ff}}}}, 0x5, &(0x7f0000000140)="1cb3194962bd07d3b15a20b3edfc743c8f49e59746776571c80be78e5ac7b18dfd857e7dcd93e866b8f558f2ea4c0540c1cf245f197fa4f342f854e53a555559ed03b652f74b19c8fc77674a079c17c28f37365dcb15a5322dff5c16253300cfa6ca9cdef3ba8393b70b5e56d9d1d6c3b296e24df7212d609c3242b4c8aa421425d604a1fa302b511ab58a257c15f0", 0xff}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:44 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, 0x4}, {0x10001, 0x3ff}, {0x7ff, 0x8}, {0x3, 0x4}, {0xffffffff, 0x6}, {0x9, 0xfffffffd}], 0x5, 0xf6, 0x0, 0x1, 0x6}}) 17:01:44 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000180)={0x980000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 17:01:44 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) accept$alg(r2, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000}) 17:01:44 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, 0x4}, {0x10001, 0x3ff}, {0x7ff, 0x8}, {0x3, 0x4}, {0xffffffff, 0x6}, {0x0, 0xfffffffd}], 0x5, 0xf6, 0x0, 0x1, 0x6}}) 17:01:44 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x0, @win={{}, 0x3, 0x0, &(0x7f0000000140)={{0x6, 0x0, 0xffffffff, 0x4}}, 0x81, &(0x7f00000000c0)="1226114e5bc1957eb4"}}) 17:01:44 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a305f3ba"}, 0x0, 0x1, @userptr, 0x5}) r3 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x100000000000000, 0x2) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000240)={0x93, 0x2, 0x4, 0x400, 0xfffff001, {0x0, 0xea60}, {0x0, 0x8, 0x0, 0xce, 0x2, 0x47, "209b87fc"}, 0xff, 0x1, @offset=0x4d, 0x9, 0x0, r2}) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000140)={0x2, @raw_data="814a839d105890d28f4fa7ec210f562f2213335c159b67c5a3329b666c00fbe11f5860d3922ceafd9a163586bfc05ce700631da94dd97cac683c37e1c77f9ab85dd93ad7e3315b5903f67a63d774532aa6a726b68b8fc0e3ea1bbc0eb6d6706375d6ed81f869ec32277f5cd4bea89809e19e390127c835e18a4c8507e635883c6e320b64dcc1db91417811d9e0bb33c970d8203aa19e61b235291e07a824437a35f2250ad8900b481511a9caf134bcd1e4cd8e801684493c155e2750bc447b5584bfb0e81e2bec73"}) 17:01:44 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000200)={0x0, @win={{0xfffffffb, 0x5, 0x7f, 0x311f}, 0x4, 0x1000, &(0x7f0000000100)={{0x5, 0x7fffffff, 0x5, 0x400}, &(0x7f00000000c0)={{0x400, 0x6, 0x7, 0x4}, &(0x7f0000000080)={{0x1, 0x7fff, 0x5900dd91, 0x1ff}}}}, 0x5, &(0x7f0000000140)="1cb3194962bd07d3b15a20b3edfc743c8f49e59746776571c80be78e5ac7b18dfd857e7dcd93e866b8f558f2ea4c0540c1cf245f197fa4f342f854e53a555559ed03b652f74b19c8fc77674a079c17c28f37365dcb15a5322dff5c16253300cfa6ca9cdef3ba8393b70b5e56d9d1d6c3b296e24df7212d609c3242b4c8aa421425d604a1fa302b511ab58a257c15f0", 0xff}}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:44 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000200)={0x0, @win={{0xfffffffb, 0x5, 0x7f, 0x311f}, 0x4, 0x1000, &(0x7f0000000100)={{0x5, 0x7fffffff, 0x5, 0x400}, &(0x7f00000000c0)={{0x400, 0x6, 0x7, 0x4}, &(0x7f0000000080)={{0x1, 0x7fff, 0x5900dd91, 0x1ff}}}}, 0x5, &(0x7f0000000140)="1cb3194962bd07d3b15a20b3edfc743c8f49e59746776571c80be78e5ac7b18dfd857e7dcd93e866b8f558f2ea4c0540c1cf245f197fa4f342f854e53a555559ed03b652f74b19c8fc77674a079c17c28f37365dcb15a5322dff5c16253300cfa6ca9cdef3ba8393b70b5e56d9d1d6c3b296e24df7212d609c3242b4c8aa421425d604a1fa302b511ab58a257c15f0", 0xff}}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:44 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000140)={{0x6, 0x0, 0xffffffff, 0x4}}, 0x81, &(0x7f00000000c0)="1226114e5bc1957eb4"}}) 17:01:44 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x1, 0x3, 0x4, {0x1, @raw_data="f0da9ff2acbe0794010b86646ff5d5b07b098b04df02e862cd5615f6e3abb89381bfc133d56f10a0726ff94cbae8d161333e83e7e12558728d2ae4f1061e9ed24c60bfd94dfbc438db0684899fd1f81cb7a85acf6de946bf0061b9e979b7842aae7a1e2043eb4b3ac5439571cb01e2149ab641fb88237fecfb507116be609231fb4f25d338dc9295aefbb7d0b0e4382fa62184b2f1fee5e4178788773eb65f335061f368a67b8123b92d5d21d0d8509b963fb6226a2e818e828ace2a49b7080dbccc82cfe808a4bd"}, 0x400}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000080), 0x3, 0x0}}) 17:01:44 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a305f3ba"}, 0x0, 0x1, @userptr, 0x5}) r1 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x100000000000000, 0x2) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x2, @raw_data="814a839d105890d28f4fa7ec210f562f2213335c159b67c5a3329b666c00fbe11f5860d3922ceafd9a163586bfc05ce700631da94dd97cac683c37e1c77f9ab85dd93ad7e3315b5903f67a63d774532aa6a726b68b8fc0e3ea1bbc0eb6d6706375d6ed81f869ec32277f5cd4bea89809e19e390127c835e18a4c8507e635883c6e320b64dcc1db91417811d9e0bb33c970d8203aa19e61b235291e07a824437a35f2250ad8900b481511a9caf134bcd1e4cd8e801684493c155e2750bc447b5584bfb0e81e2bec73"}) 17:01:44 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) accept$alg(r2, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000}) 17:01:44 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, 0x4}, {0x10001, 0x3ff}, {0x7ff, 0x8}, {0x3, 0x4}, {0xffffffff, 0x6}], 0x5, 0xf6, 0x0, 0x1, 0x6}}) 17:01:44 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x1, 0x3, 0x4, {0x1, @raw_data="f0da9ff2acbe0794010b86646ff5d5b07b098b04df02e862cd5615f6e3abb89381bfc133d56f10a0726ff94cbae8d161333e83e7e12558728d2ae4f1061e9ed24c60bfd94dfbc438db0684899fd1f81cb7a85acf6de946bf0061b9e979b7842aae7a1e2043eb4b3ac5439571cb01e2149ab641fb88237fecfb507116be609231fb4f25d338dc9295aefbb7d0b0e4382fa62184b2f1fee5e4178788773eb65f335061f368a67b8123b92d5d21d0d8509b963fb6226a2e818e828ace2a49b7080dbccc82cfe808a4bd"}, 0x400}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000080), 0x3, 0x0}}) 17:01:44 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000200)={0x0, @win={{0xfffffffb, 0x5, 0x7f, 0x311f}, 0x4, 0x1000, &(0x7f0000000100)={{0x5, 0x7fffffff, 0x5, 0x400}, &(0x7f00000000c0)={{0x400, 0x6, 0x7, 0x4}, &(0x7f0000000080)={{0x1, 0x7fff, 0x5900dd91, 0x1ff}}}}, 0x5, &(0x7f0000000140)="1cb3194962bd07d3b15a20b3edfc743c8f49e59746776571c80be78e5ac7b18dfd857e7dcd93e866b8f558f2ea4c0540c1cf245f197fa4f342f854e53a555559ed03b652f74b19c8fc77674a079c17c28f37365dcb15a5322dff5c16253300cfa6ca9cdef3ba8393b70b5e56d9d1d6c3b296e24df7212d609c3242b4c8aa421425d604a1fa302b511ab58a257c15f0", 0xff}}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:44 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000140)={{0x6, 0x0, 0xffffffff, 0x4}}, 0x81, &(0x7f00000000c0)="1226114e5bc1957eb4"}}) 17:01:44 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x1, 0x3, 0x4, {0x1, @raw_data="f0da9ff2acbe0794010b86646ff5d5b07b098b04df02e862cd5615f6e3abb89381bfc133d56f10a0726ff94cbae8d161333e83e7e12558728d2ae4f1061e9ed24c60bfd94dfbc438db0684899fd1f81cb7a85acf6de946bf0061b9e979b7842aae7a1e2043eb4b3ac5439571cb01e2149ab641fb88237fecfb507116be609231fb4f25d338dc9295aefbb7d0b0e4382fa62184b2f1fee5e4178788773eb65f335061f368a67b8123b92d5d21d0d8509b963fb6226a2e818e828ace2a49b7080dbccc82cfe808a4bd"}, 0x400}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000080), 0x3, 0x0}}) 17:01:44 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a305f3ba"}, 0x0, 0x1, @userptr, 0x5}) r1 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x100000000000000, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x2, @raw_data="814a839d105890d28f4fa7ec210f562f2213335c159b67c5a3329b666c00fbe11f5860d3922ceafd9a163586bfc05ce700631da94dd97cac683c37e1c77f9ab85dd93ad7e3315b5903f67a63d774532aa6a726b68b8fc0e3ea1bbc0eb6d6706375d6ed81f869ec32277f5cd4bea89809e19e390127c835e18a4c8507e635883c6e320b64dcc1db91417811d9e0bb33c970d8203aa19e61b235291e07a824437a35f2250ad8900b481511a9caf134bcd1e4cd8e801684493c155e2750bc447b5584bfb0e81e2bec73"}) 17:01:44 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, 0x4}, {0x10001, 0x3ff}, {0x7ff, 0x8}, {0x3, 0x4}, {0x0, 0x6}], 0x5, 0xf6, 0x0, 0x1, 0x6}}) 17:01:44 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000140)={{0x6, 0x0, 0xffffffff, 0x4}}, 0x81, &(0x7f00000000c0)="1226114e5bc1957eb4"}}) 17:01:44 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000}) 17:01:44 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:44 executing program 4: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) r0 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x1, 0x3, 0x4, {0x1, @raw_data="f0da9ff2acbe0794010b86646ff5d5b07b098b04df02e862cd5615f6e3abb89381bfc133d56f10a0726ff94cbae8d161333e83e7e12558728d2ae4f1061e9ed24c60bfd94dfbc438db0684899fd1f81cb7a85acf6de946bf0061b9e979b7842aae7a1e2043eb4b3ac5439571cb01e2149ab641fb88237fecfb507116be609231fb4f25d338dc9295aefbb7d0b0e4382fa62184b2f1fee5e4178788773eb65f335061f368a67b8123b92d5d21d0d8509b963fb6226a2e818e828ace2a49b7080dbccc82cfe808a4bd"}, 0x400}) 17:01:44 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, 0x4}, {0x10001, 0x3ff}, {0x7ff, 0x8}, {0x3, 0x4}], 0x5, 0xf6, 0x0, 0x1, 0x6}}) 17:01:44 executing program 4: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) r0 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x1, 0x3, 0x4, {0x1, @raw_data="f0da9ff2acbe0794010b86646ff5d5b07b098b04df02e862cd5615f6e3abb89381bfc133d56f10a0726ff94cbae8d161333e83e7e12558728d2ae4f1061e9ed24c60bfd94dfbc438db0684899fd1f81cb7a85acf6de946bf0061b9e979b7842aae7a1e2043eb4b3ac5439571cb01e2149ab641fb88237fecfb507116be609231fb4f25d338dc9295aefbb7d0b0e4382fa62184b2f1fee5e4178788773eb65f335061f368a67b8123b92d5d21d0d8509b963fb6226a2e818e828ace2a49b7080dbccc82cfe808a4bd"}, 0x400}) 17:01:44 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a305f3ba"}, 0x0, 0x1, @userptr, 0x5}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000140)={0x2, @raw_data="814a839d105890d28f4fa7ec210f562f2213335c159b67c5a3329b666c00fbe11f5860d3922ceafd9a163586bfc05ce700631da94dd97cac683c37e1c77f9ab85dd93ad7e3315b5903f67a63d774532aa6a726b68b8fc0e3ea1bbc0eb6d6706375d6ed81f869ec32277f5cd4bea89809e19e390127c835e18a4c8507e635883c6e320b64dcc1db91417811d9e0bb33c970d8203aa19e61b235291e07a824437a35f2250ad8900b481511a9caf134bcd1e4cd8e801684493c155e2750bc447b5584bfb0e81e2bec73"}) 17:01:44 executing program 5: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:44 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x3, @win={{}, 0x3, 0x0, 0x0, 0x81, &(0x7f00000000c0)="1226114e5bc1957eb4"}}) 17:01:44 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, 0x4}, {0x10001, 0x3ff}, {0x7ff, 0x8}, {0x0, 0x4}], 0x5, 0xf6, 0x0, 0x1, 0x6}}) 17:01:44 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a305f3ba"}, 0x0, 0x1, @userptr, 0x5}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000140)={0x2, @raw_data="814a839d105890d28f4fa7ec210f562f2213335c159b67c5a3329b666c00fbe11f5860d3922ceafd9a163586bfc05ce700631da94dd97cac683c37e1c77f9ab85dd93ad7e3315b5903f67a63d774532aa6a726b68b8fc0e3ea1bbc0eb6d6706375d6ed81f869ec32277f5cd4bea89809e19e390127c835e18a4c8507e635883c6e320b64dcc1db91417811d9e0bb33c970d8203aa19e61b235291e07a824437a35f2250ad8900b481511a9caf134bcd1e4cd8e801684493c155e2750bc447b5584bfb0e81e2bec73"}) 17:01:45 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000}) 17:01:45 executing program 5: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:45 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a305f3ba"}, 0x0, 0x1, @userptr, 0x5}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000140)={0x2, @raw_data="814a839d105890d28f4fa7ec210f562f2213335c159b67c5a3329b666c00fbe11f5860d3922ceafd9a163586bfc05ce700631da94dd97cac683c37e1c77f9ab85dd93ad7e3315b5903f67a63d774532aa6a726b68b8fc0e3ea1bbc0eb6d6706375d6ed81f869ec32277f5cd4bea89809e19e390127c835e18a4c8507e635883c6e320b64dcc1db91417811d9e0bb33c970d8203aa19e61b235291e07a824437a35f2250ad8900b481511a9caf134bcd1e4cd8e801684493c155e2750bc447b5584bfb0e81e2bec73"}) 17:01:45 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x3, @win={{}, 0x3, 0x0, 0x0, 0x0, &(0x7f00000000c0)="1226114e5bc1957eb4"}}) 17:01:45 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) syz_open_dev$video(0x0, 0x0, 0x100) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000}) 17:01:45 executing program 4: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x1, 0x3, 0x4, {0x1, @raw_data="f0da9ff2acbe0794010b86646ff5d5b07b098b04df02e862cd5615f6e3abb89381bfc133d56f10a0726ff94cbae8d161333e83e7e12558728d2ae4f1061e9ed24c60bfd94dfbc438db0684899fd1f81cb7a85acf6de946bf0061b9e979b7842aae7a1e2043eb4b3ac5439571cb01e2149ab641fb88237fecfb507116be609231fb4f25d338dc9295aefbb7d0b0e4382fa62184b2f1fee5e4178788773eb65f335061f368a67b8123b92d5d21d0d8509b963fb6226a2e818e828ace2a49b7080dbccc82cfe808a4bd"}, 0x400}) 17:01:45 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, 0x4}, {0x10001, 0x3ff}, {0x7ff, 0x8}], 0x5, 0xf6, 0x0, 0x1, 0x6}}) 17:01:45 executing program 5: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:45 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x3, @win={{}, 0x3, 0x0, 0x0, 0x0, 0x0}}) 17:01:45 executing program 4: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x1, 0x3, 0x4, {0x1, @raw_data="f0da9ff2acbe0794010b86646ff5d5b07b098b04df02e862cd5615f6e3abb89381bfc133d56f10a0726ff94cbae8d161333e83e7e12558728d2ae4f1061e9ed24c60bfd94dfbc438db0684899fd1f81cb7a85acf6de946bf0061b9e979b7842aae7a1e2043eb4b3ac5439571cb01e2149ab641fb88237fecfb507116be609231fb4f25d338dc9295aefbb7d0b0e4382fa62184b2f1fee5e4178788773eb65f335061f368a67b8123b92d5d21d0d8509b963fb6226a2e818e828ace2a49b7080dbccc82cfe808a4bd"}, 0x400}) 17:01:45 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) r1 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x100000000000000, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x2, @raw_data="814a839d105890d28f4fa7ec210f562f2213335c159b67c5a3329b666c00fbe11f5860d3922ceafd9a163586bfc05ce700631da94dd97cac683c37e1c77f9ab85dd93ad7e3315b5903f67a63d774532aa6a726b68b8fc0e3ea1bbc0eb6d6706375d6ed81f869ec32277f5cd4bea89809e19e390127c835e18a4c8507e635883c6e320b64dcc1db91417811d9e0bb33c970d8203aa19e61b235291e07a824437a35f2250ad8900b481511a9caf134bcd1e4cd8e801684493c155e2750bc447b5584bfb0e81e2bec73"}) 17:01:45 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000}) 17:01:45 executing program 5: r0 = syz_open_dev$vim2m(0x0, 0x39, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:45 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, 0x4}, {0x10001, 0x3ff}, {0x0, 0x8}], 0x5, 0xf6, 0x0, 0x1, 0x6}}) 17:01:45 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000200)={0x0, @win={{0xfffffffb, 0x5, 0x7f, 0x311f}, 0x4, 0x1000, &(0x7f0000000100)={{0x5, 0x7fffffff, 0x5, 0x400}, &(0x7f00000000c0)={{0x400, 0x6, 0x7, 0x4}, &(0x7f0000000080)={{0x1, 0x7fff, 0x5900dd91, 0x1ff}}}}, 0x5, &(0x7f0000000140)="1cb3194962bd07d3b15a20b3edfc743c8f49e59746776571c80be78e5ac7b18dfd857e7dcd93e866b8f558f2ea4c0540c1cf245f197fa4f342f854e53a555559ed03b652f74b19c8fc77674a079c17c28f37365dcb15a5322dff5c16253300cfa6ca9cdef3ba8393b70b5e56d9d1d6c3b296e24df7212d609c3242b4c8aa421425d604a1fa302b511ab58a257c15f0", 0xff}}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:45 executing program 4: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x1, 0x3, 0x4, {0x1, @raw_data="f0da9ff2acbe0794010b86646ff5d5b07b098b04df02e862cd5615f6e3abb89381bfc133d56f10a0726ff94cbae8d161333e83e7e12558728d2ae4f1061e9ed24c60bfd94dfbc438db0684899fd1f81cb7a85acf6de946bf0061b9e979b7842aae7a1e2043eb4b3ac5439571cb01e2149ab641fb88237fecfb507116be609231fb4f25d338dc9295aefbb7d0b0e4382fa62184b2f1fee5e4178788773eb65f335061f368a67b8123b92d5d21d0d8509b963fb6226a2e818e828ace2a49b7080dbccc82cfe808a4bd"}, 0x400}) 17:01:45 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x100000000000000, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x2, @raw_data="814a839d105890d28f4fa7ec210f562f2213335c159b67c5a3329b666c00fbe11f5860d3922ceafd9a163586bfc05ce700631da94dd97cac683c37e1c77f9ab85dd93ad7e3315b5903f67a63d774532aa6a726b68b8fc0e3ea1bbc0eb6d6706375d6ed81f869ec32277f5cd4bea89809e19e390127c835e18a4c8507e635883c6e320b64dcc1db91417811d9e0bb33c970d8203aa19e61b235291e07a824437a35f2250ad8900b481511a9caf134bcd1e4cd8e801684493c155e2750bc447b5584bfb0e81e2bec73"}) 17:01:45 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, 0x4}, {0x10001, 0x3ff}], 0x5, 0xf6, 0x0, 0x1, 0x6}}) 17:01:45 executing program 5: r0 = syz_open_dev$vim2m(0x0, 0x39, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:45 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x100000000000000, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x2, @raw_data="814a839d105890d28f4fa7ec210f562f2213335c159b67c5a3329b666c00fbe11f5860d3922ceafd9a163586bfc05ce700631da94dd97cac683c37e1c77f9ab85dd93ad7e3315b5903f67a63d774532aa6a726b68b8fc0e3ea1bbc0eb6d6706375d6ed81f869ec32277f5cd4bea89809e19e390127c835e18a4c8507e635883c6e320b64dcc1db91417811d9e0bb33c970d8203aa19e61b235291e07a824437a35f2250ad8900b481511a9caf134bcd1e4cd8e801684493c155e2750bc447b5584bfb0e81e2bec73"}) 17:01:45 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000}) 17:01:45 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, 0x4}, {0x0, 0x3ff}], 0x5, 0xf6, 0x0, 0x1, 0x6}}) 17:01:45 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0xa20000, 0xffff087f, 0x71c, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9c0907, 0x9, [], @p_u32=&(0x7f0000000000)=0x4}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) 17:01:45 executing program 5: r0 = syz_open_dev$vim2m(0x0, 0x39, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:45 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000}) 17:01:45 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x1, 0x3, 0x4, {0x1, @raw_data="f0da9ff2acbe0794010b86646ff5d5b07b098b04df02e862cd5615f6e3abb89381bfc133d56f10a0726ff94cbae8d161333e83e7e12558728d2ae4f1061e9ed24c60bfd94dfbc438db0684899fd1f81cb7a85acf6de946bf0061b9e979b7842aae7a1e2043eb4b3ac5439571cb01e2149ab641fb88237fecfb507116be609231fb4f25d338dc9295aefbb7d0b0e4382fa62184b2f1fee5e4178788773eb65f335061f368a67b8123b92d5d21d0d8509b963fb6226a2e818e828ace2a49b7080dbccc82cfe808a4bd"}, 0x400}) 17:01:45 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x100000000000000, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x2, @raw_data="814a839d105890d28f4fa7ec210f562f2213335c159b67c5a3329b666c00fbe11f5860d3922ceafd9a163586bfc05ce700631da94dd97cac683c37e1c77f9ab85dd93ad7e3315b5903f67a63d774532aa6a726b68b8fc0e3ea1bbc0eb6d6706375d6ed81f869ec32277f5cd4bea89809e19e390127c835e18a4c8507e635883c6e320b64dcc1db91417811d9e0bb33c970d8203aa19e61b235291e07a824437a35f2250ad8900b481511a9caf134bcd1e4cd8e801684493c155e2750bc447b5584bfb0e81e2bec73"}) 17:01:45 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, 0x0) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x74e, 0x1) r2 = syz_open_dev$dri(&(0x7f0000000480)='/dev/dri/card#\x00', 0x80, 0x101501) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0xfffffffffffffff9, 0x81) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f00000004c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000500)={r4, 0x3}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f0000000240)={0x0, &(0x7f0000000280)=""/68}) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000080)={0x7, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={0x0, 0x2}) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x10242, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r5, 0x80045113, &(0x7f0000000440)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r6, 0xc0086421, 0x0) ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0106426, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x0}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000003c0)={r7, &(0x7f0000000380)=""/58}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000200)={0x4, &(0x7f0000000540)=[{}, {}, {}, {}]}) 17:01:45 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:45 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000}) 17:01:45 executing program 4: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x1, 0x3, 0x4, {0x1, @raw_data="f0da9ff2acbe0794010b86646ff5d5b07b098b04df02e862cd5615f6e3abb89381bfc133d56f10a0726ff94cbae8d161333e83e7e12558728d2ae4f1061e9ed24c60bfd94dfbc438db0684899fd1f81cb7a85acf6de946bf0061b9e979b7842aae7a1e2043eb4b3ac5439571cb01e2149ab641fb88237fecfb507116be609231fb4f25d338dc9295aefbb7d0b0e4382fa62184b2f1fee5e4178788773eb65f335061f368a67b8123b92d5d21d0d8509b963fb6226a2e818e828ace2a49b7080dbccc82cfe808a4bd"}, 0x400}) 17:01:45 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:45 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, 0x4}], 0x5, 0xf6, 0x0, 0x1, 0x6}}) 17:01:45 executing program 4: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x1, 0x3, 0x4, {0x1, @raw_data="f0da9ff2acbe0794010b86646ff5d5b07b098b04df02e862cd5615f6e3abb89381bfc133d56f10a0726ff94cbae8d161333e83e7e12558728d2ae4f1061e9ed24c60bfd94dfbc438db0684899fd1f81cb7a85acf6de946bf0061b9e979b7842aae7a1e2043eb4b3ac5439571cb01e2149ab641fb88237fecfb507116be609231fb4f25d338dc9295aefbb7d0b0e4382fa62184b2f1fee5e4178788773eb65f335061f368a67b8123b92d5d21d0d8509b963fb6226a2e818e828ace2a49b7080dbccc82cfe808a4bd"}, 0x400}) 17:01:45 executing program 2: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000}) 17:01:45 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a305f3ba"}, 0x0, 0x1, @userptr, 0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xdff7, 0x2000) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000140)={0x3, 0xc, 0x4, 0xe000, 0x401, {}, {0x2, 0x8, 0x6, 0x1, 0x1, 0x2, "60755eb8"}, 0x81, 0x3, @fd, 0x8, 0x0, r1}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000001c0)={0x1, @pix={0x64, 0x4b, 0x42303159, 0x7, 0x6, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x1}}) 17:01:45 executing program 0: r0 = syz_open_dev$vim2m(0x0, 0x100000000000000, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x2, @raw_data="814a839d105890d28f4fa7ec210f562f2213335c159b67c5a3329b666c00fbe11f5860d3922ceafd9a163586bfc05ce700631da94dd97cac683c37e1c77f9ab85dd93ad7e3315b5903f67a63d774532aa6a726b68b8fc0e3ea1bbc0eb6d6706375d6ed81f869ec32277f5cd4bea89809e19e390127c835e18a4c8507e635883c6e320b64dcc1db91417811d9e0bb33c970d8203aa19e61b235291e07a824437a35f2250ad8900b481511a9caf134bcd1e4cd8e801684493c155e2750bc447b5584bfb0e81e2bec73"}) 17:01:45 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:45 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x4}], 0x5, 0xf6, 0x0, 0x1, 0x6}}) 17:01:45 executing program 2: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000}) 17:01:45 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a305f3ba"}, 0x0, 0x1, @userptr, 0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xdff7, 0x2000) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000140)={0x3, 0xc, 0x4, 0xe000, 0x401, {}, {0x2, 0x8, 0x6, 0x1, 0x1, 0x2, "60755eb8"}, 0x81, 0x3, @fd, 0x8, 0x0, r1}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000001c0)={0x1, @pix={0x64, 0x4b, 0x42303159, 0x7, 0x6, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x1}}) 17:01:45 executing program 4: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x1, 0x3, 0x4, {0x1, @raw_data="f0da9ff2acbe0794010b86646ff5d5b07b098b04df02e862cd5615f6e3abb89381bfc133d56f10a0726ff94cbae8d161333e83e7e12558728d2ae4f1061e9ed24c60bfd94dfbc438db0684899fd1f81cb7a85acf6de946bf0061b9e979b7842aae7a1e2043eb4b3ac5439571cb01e2149ab641fb88237fecfb507116be609231fb4f25d338dc9295aefbb7d0b0e4382fa62184b2f1fee5e4178788773eb65f335061f368a67b8123b92d5d21d0d8509b963fb6226a2e818e828ace2a49b7080dbccc82cfe808a4bd"}, 0x400}) 17:01:45 executing program 0: r0 = syz_open_dev$vim2m(0x0, 0x100000000000000, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x2, @raw_data="814a839d105890d28f4fa7ec210f562f2213335c159b67c5a3329b666c00fbe11f5860d3922ceafd9a163586bfc05ce700631da94dd97cac683c37e1c77f9ab85dd93ad7e3315b5903f67a63d774532aa6a726b68b8fc0e3ea1bbc0eb6d6706375d6ed81f869ec32277f5cd4bea89809e19e390127c835e18a4c8507e635883c6e320b64dcc1db91417811d9e0bb33c970d8203aa19e61b235291e07a824437a35f2250ad8900b481511a9caf134bcd1e4cd8e801684493c155e2750bc447b5584bfb0e81e2bec73"}) 17:01:45 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:45 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x2, [], 0x5, 0xf6, 0x0, 0x1, 0x6}}) 17:01:45 executing program 2: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000}) 17:01:45 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a305f3ba"}, 0x0, 0x1, @userptr, 0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xdff7, 0x2000) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000140)={0x3, 0xc, 0x4, 0xe000, 0x401, {}, {0x2, 0x8, 0x6, 0x1, 0x1, 0x2, "60755eb8"}, 0x81, 0x3, @fd, 0x8, 0x0, r1}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000001c0)={0x1, @pix={0x64, 0x4b, 0x42303159, 0x7, 0x6, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x1}}) 17:01:45 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:45 executing program 0: r0 = syz_open_dev$vim2m(0x0, 0x100000000000000, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x2, @raw_data="814a839d105890d28f4fa7ec210f562f2213335c159b67c5a3329b666c00fbe11f5860d3922ceafd9a163586bfc05ce700631da94dd97cac683c37e1c77f9ab85dd93ad7e3315b5903f67a63d774532aa6a726b68b8fc0e3ea1bbc0eb6d6706375d6ed81f869ec32277f5cd4bea89809e19e390127c835e18a4c8507e635883c6e320b64dcc1db91417811d9e0bb33c970d8203aa19e61b235291e07a824437a35f2250ad8900b481511a9caf134bcd1e4cd8e801684493c155e2750bc447b5584bfb0e81e2bec73"}) 17:01:45 executing program 4: syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x1, 0x3, 0x4, {0x1, @raw_data="f0da9ff2acbe0794010b86646ff5d5b07b098b04df02e862cd5615f6e3abb89381bfc133d56f10a0726ff94cbae8d161333e83e7e12558728d2ae4f1061e9ed24c60bfd94dfbc438db0684899fd1f81cb7a85acf6de946bf0061b9e979b7842aae7a1e2043eb4b3ac5439571cb01e2149ab641fb88237fecfb507116be609231fb4f25d338dc9295aefbb7d0b0e4382fa62184b2f1fee5e4178788773eb65f335061f368a67b8123b92d5d21d0d8509b963fb6226a2e818e828ace2a49b7080dbccc82cfe808a4bd"}, 0x400}) 17:01:45 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x2, [], 0x0, 0xf6, 0x0, 0x1, 0x6}}) 17:01:45 executing program 2: r0 = syz_open_dev$vim2m(0x0, 0x39, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000}) 17:01:45 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x2, @raw_data="814a839d105890d28f4fa7ec210f562f2213335c159b67c5a3329b666c00fbe11f5860d3922ceafd9a163586bfc05ce700631da94dd97cac683c37e1c77f9ab85dd93ad7e3315b5903f67a63d774532aa6a726b68b8fc0e3ea1bbc0eb6d6706375d6ed81f869ec32277f5cd4bea89809e19e390127c835e18a4c8507e635883c6e320b64dcc1db91417811d9e0bb33c970d8203aa19e61b235291e07a824437a35f2250ad8900b481511a9caf134bcd1e4cd8e801684493c155e2750bc447b5584bfb0e81e2bec73"}) 17:01:45 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a305f3ba"}, 0x0, 0x1, @userptr, 0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xdff7, 0x2000) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000140)={0x3, 0xc, 0x4, 0xe000, 0x401, {}, {0x2, 0x8, 0x6, 0x1, 0x1, 0x2, "60755eb8"}, 0x81, 0x3, @fd, 0x8, 0x0, r1}) 17:01:45 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:45 executing program 4: syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x1, 0x3, 0x4, {0x1, @raw_data="f0da9ff2acbe0794010b86646ff5d5b07b098b04df02e862cd5615f6e3abb89381bfc133d56f10a0726ff94cbae8d161333e83e7e12558728d2ae4f1061e9ed24c60bfd94dfbc438db0684899fd1f81cb7a85acf6de946bf0061b9e979b7842aae7a1e2043eb4b3ac5439571cb01e2149ab641fb88237fecfb507116be609231fb4f25d338dc9295aefbb7d0b0e4382fa62184b2f1fee5e4178788773eb65f335061f368a67b8123b92d5d21d0d8509b963fb6226a2e818e828ace2a49b7080dbccc82cfe808a4bd"}, 0x400}) 17:01:45 executing program 2: r0 = syz_open_dev$vim2m(0x0, 0x39, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000}) 17:01:45 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:45 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x2, [], 0x0, 0x0, 0x0, 0x1, 0x6}}) 17:01:45 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a305f3ba"}, 0x0, 0x1, @userptr}) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xdff7, 0x2000) 17:01:45 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x2, @raw_data="814a839d105890d28f4fa7ec210f562f2213335c159b67c5a3329b666c00fbe11f5860d3922ceafd9a163586bfc05ce700631da94dd97cac683c37e1c77f9ab85dd93ad7e3315b5903f67a63d774532aa6a726b68b8fc0e3ea1bbc0eb6d6706375d6ed81f869ec32277f5cd4bea89809e19e390127c835e18a4c8507e635883c6e320b64dcc1db91417811d9e0bb33c970d8203aa19e61b235291e07a824437a35f2250ad8900b481511a9caf134bcd1e4cd8e801684493c155e2750bc447b5584bfb0e81e2bec73"}) 17:01:45 executing program 4: syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x1, 0x3, 0x4, {0x1, @raw_data="f0da9ff2acbe0794010b86646ff5d5b07b098b04df02e862cd5615f6e3abb89381bfc133d56f10a0726ff94cbae8d161333e83e7e12558728d2ae4f1061e9ed24c60bfd94dfbc438db0684899fd1f81cb7a85acf6de946bf0061b9e979b7842aae7a1e2043eb4b3ac5439571cb01e2149ab641fb88237fecfb507116be609231fb4f25d338dc9295aefbb7d0b0e4382fa62184b2f1fee5e4178788773eb65f335061f368a67b8123b92d5d21d0d8509b963fb6226a2e818e828ace2a49b7080dbccc82cfe808a4bd"}, 0x400}) 17:01:45 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:45 executing program 2: r0 = syz_open_dev$vim2m(0x0, 0x39, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000}) 17:01:45 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xdff7, 0x2000) 17:01:45 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x2, [], 0x0, 0x0, 0x0, 0x0, 0x6}}) 17:01:45 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x2, @raw_data="814a839d105890d28f4fa7ec210f562f2213335c159b67c5a3329b666c00fbe11f5860d3922ceafd9a163586bfc05ce700631da94dd97cac683c37e1c77f9ab85dd93ad7e3315b5903f67a63d774532aa6a726b68b8fc0e3ea1bbc0eb6d6706375d6ed81f869ec32277f5cd4bea89809e19e390127c835e18a4c8507e635883c6e320b64dcc1db91417811d9e0bb33c970d8203aa19e61b235291e07a824437a35f2250ad8900b481511a9caf134bcd1e4cd8e801684493c155e2750bc447b5584bfb0e81e2bec73"}) 17:01:45 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:45 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000}) 17:01:45 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 17:01:45 executing program 1: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xdff7, 0x2000) 17:01:45 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x2}}) 17:01:45 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:46 executing program 0: syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x100000000000000, 0x2) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000140)={0x2, @raw_data="814a839d105890d28f4fa7ec210f562f2213335c159b67c5a3329b666c00fbe11f5860d3922ceafd9a163586bfc05ce700631da94dd97cac683c37e1c77f9ab85dd93ad7e3315b5903f67a63d774532aa6a726b68b8fc0e3ea1bbc0eb6d6706375d6ed81f869ec32277f5cd4bea89809e19e390127c835e18a4c8507e635883c6e320b64dcc1db91417811d9e0bb33c970d8203aa19e61b235291e07a824437a35f2250ad8900b481511a9caf134bcd1e4cd8e801684493c155e2750bc447b5584bfb0e81e2bec73"}) 17:01:46 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000}) 17:01:46 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 17:01:46 executing program 3: syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x1, 0x3, 0x4, {0x1, @raw_data="f0da9ff2acbe0794010b86646ff5d5b07b098b04df02e862cd5615f6e3abb89381bfc133d56f10a0726ff94cbae8d161333e83e7e12558728d2ae4f1061e9ed24c60bfd94dfbc438db0684899fd1f81cb7a85acf6de946bf0061b9e979b7842aae7a1e2043eb4b3ac5439571cb01e2149ab641fb88237fecfb507116be609231fb4f25d338dc9295aefbb7d0b0e4382fa62184b2f1fee5e4178788773eb65f335061f368a67b8123b92d5d21d0d8509b963fb6226a2e818e828ace2a49b7080dbccc82cfe808a4bd"}, 0x400}) 17:01:46 executing program 1: syz_open_dev$video4linux(0x0, 0xdff7, 0x2000) 17:01:46 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:46 executing program 0: syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x100000000000000, 0x2) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000140)={0x2, @raw_data="814a839d105890d28f4fa7ec210f562f2213335c159b67c5a3329b666c00fbe11f5860d3922ceafd9a163586bfc05ce700631da94dd97cac683c37e1c77f9ab85dd93ad7e3315b5903f67a63d774532aa6a726b68b8fc0e3ea1bbc0eb6d6706375d6ed81f869ec32277f5cd4bea89809e19e390127c835e18a4c8507e635883c6e320b64dcc1db91417811d9e0bb33c970d8203aa19e61b235291e07a824437a35f2250ad8900b481511a9caf134bcd1e4cd8e801684493c155e2750bc447b5584bfb0e81e2bec73"}) 17:01:46 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000}) 17:01:46 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 17:01:46 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:46 executing program 1: syz_open_dev$video4linux(0x0, 0xdff7, 0x2000) 17:01:46 executing program 0: syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x100000000000000, 0x2) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000140)={0x2, @raw_data="814a839d105890d28f4fa7ec210f562f2213335c159b67c5a3329b666c00fbe11f5860d3922ceafd9a163586bfc05ce700631da94dd97cac683c37e1c77f9ab85dd93ad7e3315b5903f67a63d774532aa6a726b68b8fc0e3ea1bbc0eb6d6706375d6ed81f869ec32277f5cd4bea89809e19e390127c835e18a4c8507e635883c6e320b64dcc1db91417811d9e0bb33c970d8203aa19e61b235291e07a824437a35f2250ad8900b481511a9caf134bcd1e4cd8e801684493c155e2750bc447b5584bfb0e81e2bec73"}) 17:01:46 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:46 executing program 3: ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x6, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9d0904, 0x7, [], @p_u16=&(0x7f0000000000)=0x1}}) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000180)={0x9, {0x6, 0xfffffffd, 0x8, 0xdc}, {0x1, 0x101, 0x80, 0x1}, {0x0, 0x5}}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)={0xffff, 0x3, 0x4, 0x70000, 0x7, {}, {0x4, 0x8, 0x53, 0x3, 0x2, 0x0, "88a4d5a5"}, 0x7, 0x2, @userptr=0xfffffffffffff9c1, 0x1d, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000340)={0x55d, 0x1, 0x4, 0x4000, 0x0, {0x77359400}, {0x1, 0x2, 0x81, 0xff, 0x94, 0x3, "05deac3a"}, 0x5e7dc15, 0x3, @userptr=0x7, 0x200, 0x0, r1}) r2 = socket(0x2c, 0x5, 0x3ff) accept$alg(r2, 0x0, 0x0) r3 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000140)={0x2, 0x58}) 17:01:46 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x3, 0x4, {0x1, @raw_data="f0da9ff2acbe0794010b86646ff5d5b07b098b04df02e862cd5615f6e3abb89381bfc133d56f10a0726ff94cbae8d161333e83e7e12558728d2ae4f1061e9ed24c60bfd94dfbc438db0684899fd1f81cb7a85acf6de946bf0061b9e979b7842aae7a1e2043eb4b3ac5439571cb01e2149ab641fb88237fecfb507116be609231fb4f25d338dc9295aefbb7d0b0e4382fa62184b2f1fee5e4178788773eb65f335061f368a67b8123b92d5d21d0d8509b963fb6226a2e818e828ace2a49b7080dbccc82cfe808a4bd"}, 0x400}) 17:01:46 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000}) 17:01:46 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x100000000000000, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, 0x0) 17:01:46 executing program 1: syz_open_dev$video4linux(0x0, 0xdff7, 0x2000) 17:01:46 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:46 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x4, {0x1, @raw_data="f0da9ff2acbe0794010b86646ff5d5b07b098b04df02e862cd5615f6e3abb89381bfc133d56f10a0726ff94cbae8d161333e83e7e12558728d2ae4f1061e9ed24c60bfd94dfbc438db0684899fd1f81cb7a85acf6de946bf0061b9e979b7842aae7a1e2043eb4b3ac5439571cb01e2149ab641fb88237fecfb507116be609231fb4f25d338dc9295aefbb7d0b0e4382fa62184b2f1fee5e4178788773eb65f335061f368a67b8123b92d5d21d0d8509b963fb6226a2e818e828ace2a49b7080dbccc82cfe808a4bd"}, 0x400}) 17:01:46 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000}) 17:01:46 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000140)={{0x6}}, 0x81, &(0x7f0000000180)="1226114e5bc1957eb4"}}) 17:01:46 executing program 1: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x2000) 17:01:46 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:46 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x1, @pix={0xffff, 0x81, 0x32314142, 0x3, 0x0, 0x8, 0x2, 0x6, 0x0, 0x6, 0x0, 0x5}}) 17:01:46 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x100000000000000, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, 0x0) 17:01:46 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x4, {0x1, @raw_data="f0da9ff2acbe0794010b86646ff5d5b07b098b04df02e862cd5615f6e3abb89381bfc133d56f10a0726ff94cbae8d161333e83e7e12558728d2ae4f1061e9ed24c60bfd94dfbc438db0684899fd1f81cb7a85acf6de946bf0061b9e979b7842aae7a1e2043eb4b3ac5439571cb01e2149ab641fb88237fecfb507116be609231fb4f25d338dc9295aefbb7d0b0e4382fa62184b2f1fee5e4178788773eb65f335061f368a67b8123b92d5d21d0d8509b963fb6226a2e818e828ace2a49b7080dbccc82cfe808a4bd"}, 0x400}) 17:01:46 executing program 1: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x2000) 17:01:46 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000}) 17:01:46 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x1, @vbi={0x0, 0x9a, 0x0, 0x0, [], [], 0x1}}) 17:01:46 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:46 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x100000000000000, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, 0x0) 17:01:46 executing program 1: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x2000) 17:01:46 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x4, {0x1, @raw_data="f0da9ff2acbe0794010b86646ff5d5b07b098b04df02e862cd5615f6e3abb89381bfc133d56f10a0726ff94cbae8d161333e83e7e12558728d2ae4f1061e9ed24c60bfd94dfbc438db0684899fd1f81cb7a85acf6de946bf0061b9e979b7842aae7a1e2043eb4b3ac5439571cb01e2149ab641fb88237fecfb507116be609231fb4f25d338dc9295aefbb7d0b0e4382fa62184b2f1fee5e4178788773eb65f335061f368a67b8123b92d5d21d0d8509b963fb6226a2e818e828ace2a49b7080dbccc82cfe808a4bd"}, 0x400}) 17:01:46 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000}) 17:01:46 executing program 3: ioctl$SNDCTL_TMR_SOURCE(0xffffffffffffffff, 0xc0045406) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, &(0x7f0000000080)) ioctl$SNDCTL_FM_LOAD_INSTR(r0, 0x40285107) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) r2 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000000)={0x1, @pix_mp={0x7fffffff, 0x5, 0x42303159, 0x4, 0x0, [{0x4, 0x1}, {0x800, 0x3ff}, {0x6, 0xe10da96}, {0x9, 0x800}, {0x4, 0x3000000}, {0x200, 0x8}, {0xfffff801, 0xf}, {0x6, 0x3}], 0x0, 0x4, 0x8, 0x1, 0x6}}) 17:01:46 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:46 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x100000000000000, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x0, @raw_data="814a839d105890d28f4fa7ec210f562f2213335c159b67c5a3329b666c00fbe11f5860d3922ceafd9a163586bfc05ce700631da94dd97cac683c37e1c77f9ab85dd93ad7e3315b5903f67a63d774532aa6a726b68b8fc0e3ea1bbc0eb6d6706375d6ed81f869ec32277f5cd4bea89809e19e390127c835e18a4c8507e635883c6e320b64dcc1db91417811d9e0bb33c970d8203aa19e61b235291e07a824437a35f2250ad8900b481511a9caf134bcd1e4cd8e801684493c155e2750bc447b5584bfb0e81e2bec73"}) 17:01:46 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x3, 0x0, {0x1, @raw_data="f0da9ff2acbe0794010b86646ff5d5b07b098b04df02e862cd5615f6e3abb89381bfc133d56f10a0726ff94cbae8d161333e83e7e12558728d2ae4f1061e9ed24c60bfd94dfbc438db0684899fd1f81cb7a85acf6de946bf0061b9e979b7842aae7a1e2043eb4b3ac5439571cb01e2149ab641fb88237fecfb507116be609231fb4f25d338dc9295aefbb7d0b0e4382fa62184b2f1fee5e4178788773eb65f335061f368a67b8123b92d5d21d0d8509b963fb6226a2e818e828ace2a49b7080dbccc82cfe808a4bd"}, 0x400}) 17:01:46 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4d02, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000080)={{0x100000, 0x0, 0x0, 0xfffffffe}}, 0x3, 0x0}}) 17:01:46 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000}) 17:01:46 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x100000000000000, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x0, @raw_data="814a839d105890d28f4fa7ec210f562f2213335c159b67c5a3329b666c00fbe11f5860d3922ceafd9a163586bfc05ce700631da94dd97cac683c37e1c77f9ab85dd93ad7e3315b5903f67a63d774532aa6a726b68b8fc0e3ea1bbc0eb6d6706375d6ed81f869ec32277f5cd4bea89809e19e390127c835e18a4c8507e635883c6e320b64dcc1db91417811d9e0bb33c970d8203aa19e61b235291e07a824437a35f2250ad8900b481511a9caf134bcd1e4cd8e801684493c155e2750bc447b5584bfb0e81e2bec73"}) 17:01:46 executing program 1: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xdff7, 0x0) 17:01:46 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4d02, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000080)={{0x100000, 0x0, 0x0, 0xfffffffe}}, 0x3, 0x0}}) 17:01:46 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x3, 0x0, {0x1, @raw_data="f0da9ff2acbe0794010b86646ff5d5b07b098b04df02e862cd5615f6e3abb89381bfc133d56f10a0726ff94cbae8d161333e83e7e12558728d2ae4f1061e9ed24c60bfd94dfbc438db0684899fd1f81cb7a85acf6de946bf0061b9e979b7842aae7a1e2043eb4b3ac5439571cb01e2149ab641fb88237fecfb507116be609231fb4f25d338dc9295aefbb7d0b0e4382fa62184b2f1fee5e4178788773eb65f335061f368a67b8123b92d5d21d0d8509b963fb6226a2e818e828ace2a49b7080dbccc82cfe808a4bd"}, 0x400}) 17:01:46 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x100000000000000, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x0, @raw_data="814a839d105890d28f4fa7ec210f562f2213335c159b67c5a3329b666c00fbe11f5860d3922ceafd9a163586bfc05ce700631da94dd97cac683c37e1c77f9ab85dd93ad7e3315b5903f67a63d774532aa6a726b68b8fc0e3ea1bbc0eb6d6706375d6ed81f869ec32277f5cd4bea89809e19e390127c835e18a4c8507e635883c6e320b64dcc1db91417811d9e0bb33c970d8203aa19e61b235291e07a824437a35f2250ad8900b481511a9caf134bcd1e4cd8e801684493c155e2750bc447b5584bfb0e81e2bec73"}) 17:01:46 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000}) 17:01:46 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:46 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4d02, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000080)={{0x100000, 0x0, 0x0, 0xfffffffe}}, 0x3, 0x0}}) 17:01:46 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000}) 17:01:46 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x3, @win={{0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, &(0x7f0000000140)={{0x6}}, 0x81, &(0x7f0000000180)="1226114e5bc1957eb4"}}) r1 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x80180, 0x0) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000280)=0x7) r3 = syz_open_dev$vim2m(&(0x7f00000002c0)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000440)={0x2, @sdr={0x30314442, 0x3b556a9f}}) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f00000001c0)) 17:01:46 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x3, 0x0, {0x1, @raw_data="f0da9ff2acbe0794010b86646ff5d5b07b098b04df02e862cd5615f6e3abb89381bfc133d56f10a0726ff94cbae8d161333e83e7e12558728d2ae4f1061e9ed24c60bfd94dfbc438db0684899fd1f81cb7a85acf6de946bf0061b9e979b7842aae7a1e2043eb4b3ac5439571cb01e2149ab641fb88237fecfb507116be609231fb4f25d338dc9295aefbb7d0b0e4382fa62184b2f1fee5e4178788773eb65f335061f368a67b8123b92d5d21d0d8509b963fb6226a2e818e828ace2a49b7080dbccc82cfe808a4bd"}, 0x400}) 17:01:46 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0xffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000000, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x1, 0x0, {}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "a305f3ba"}, 0x0, 0x1, @userptr}) 17:01:46 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:46 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x0, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000}) 17:01:46 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0xffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000000, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x1, 0x0, {}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "a305f3ba"}, 0x0, 0x1, @userptr}) 17:01:46 executing program 3: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4d02, 0x0) 17:01:46 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x3, 0x4, {0x0, @raw_data="f0da9ff2acbe0794010b86646ff5d5b07b098b04df02e862cd5615f6e3abb89381bfc133d56f10a0726ff94cbae8d161333e83e7e12558728d2ae4f1061e9ed24c60bfd94dfbc438db0684899fd1f81cb7a85acf6de946bf0061b9e979b7842aae7a1e2043eb4b3ac5439571cb01e2149ab641fb88237fecfb507116be609231fb4f25d338dc9295aefbb7d0b0e4382fa62184b2f1fee5e4178788773eb65f335061f368a67b8123b92d5d21d0d8509b963fb6226a2e818e828ace2a49b7080dbccc82cfe808a4bd"}, 0x400}) 17:01:46 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a305f3ba"}, 0x0, 0x1, @userptr}) 17:01:46 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, 0x0) 17:01:46 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x0, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000}) 17:01:46 executing program 1: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, r1, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8e1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffffff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x58}, 0x1, 0x0, 0x0, 0x2}, 0xc0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c000017", @ANYRES16=r1, @ANYBLOB="000428bd7000fddbdf250800000005002f000000000008003b000700000008000300", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20008080}, 0x20000001) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000540)={0x5, 0x0, 0x1014, 0x0, 0x80000001, 0x0, 0x8001}) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f00000001c0)={0x9, 0x0, 0x4, 0x400, 0x82, {0x77359400}, {0x5, 0x2, 0x80, 0x6, 0x20, 0x20, "383d4c14"}, 0x3, 0x4, @offset=0x1ff, 0x55563855}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000080)={0xcb12, 0xa, 0x4, 0x2000, 0x7c, {0x77359400}, {0x4, 0x8, 0x3, 0xcd, 0x0, 0x4, "050064bf"}, 0x0, 0x1, @userptr=0x1, 0x3ff, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000340)) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r1, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x81c5}, 0x41) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000100)={0x4, 0x2, 0x4, 0x400, 0x693, {0x0, 0x2710}, {0x1, 0x0, 0xad, 0x0, 0x20, 0x3, "9f00178a"}, 0x4, 0x3, @offset=0x81, 0x7, 0x0, r6}) 17:01:46 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x3, 0x4, {0x0, @raw_data="f0da9ff2acbe0794010b86646ff5d5b07b098b04df02e862cd5615f6e3abb89381bfc133d56f10a0726ff94cbae8d161333e83e7e12558728d2ae4f1061e9ed24c60bfd94dfbc438db0684899fd1f81cb7a85acf6de946bf0061b9e979b7842aae7a1e2043eb4b3ac5439571cb01e2149ab641fb88237fecfb507116be609231fb4f25d338dc9295aefbb7d0b0e4382fa62184b2f1fee5e4178788773eb65f335061f368a67b8123b92d5d21d0d8509b963fb6226a2e818e828ace2a49b7080dbccc82cfe808a4bd"}, 0x400}) 17:01:46 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4d02, 0x0) 17:01:46 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x0, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000}) 17:01:46 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, 0x0) 17:01:46 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) 17:01:46 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x3, 0x4, {0x0, @raw_data="f0da9ff2acbe0794010b86646ff5d5b07b098b04df02e862cd5615f6e3abb89381bfc133d56f10a0726ff94cbae8d161333e83e7e12558728d2ae4f1061e9ed24c60bfd94dfbc438db0684899fd1f81cb7a85acf6de946bf0061b9e979b7842aae7a1e2043eb4b3ac5439571cb01e2149ab641fb88237fecfb507116be609231fb4f25d338dc9295aefbb7d0b0e4382fa62184b2f1fee5e4178788773eb65f335061f368a67b8123b92d5d21d0d8509b963fb6226a2e818e828ace2a49b7080dbccc82cfe808a4bd"}, 0x400}) 17:01:46 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)=0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xa323, 0x2}) 17:01:46 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4d02, 0x0) 17:01:47 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000}) 17:01:47 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, 0x0) 17:01:47 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x3, 0x4, {0x1, @raw_data="f0da9ff2acbe0794010b86646ff5d5b07b098b04df02e862cd5615f6e3abb89381bfc133d56f10a0726ff94cbae8d161333e83e7e12558728d2ae4f1061e9ed24c60bfd94dfbc438db0684899fd1f81cb7a85acf6de946bf0061b9e979b7842aae7a1e2043eb4b3ac5439571cb01e2149ab641fb88237fecfb507116be609231fb4f25d338dc9295aefbb7d0b0e4382fa62184b2f1fee5e4178788773eb65f335061f368a67b8123b92d5d21d0d8509b963fb6226a2e818e828ace2a49b7080dbccc82cfe808a4bd"}}) 17:01:47 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)=0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xa323, 0x2}) 17:01:47 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)=0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xa323, 0x2}) 17:01:47 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4d02, 0x0) 17:01:47 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x0, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:47 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000}) 17:01:47 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)=0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xa323, 0x2}) 17:01:47 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)=0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xa323, 0x2}) 17:01:47 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)=0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xa323, 0x2}) 17:01:47 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4d02, 0x0) 17:01:47 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x0, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:47 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000}) 17:01:47 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)=0x2) 17:01:47 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x0, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:47 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000}) 17:01:47 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a305f3ba"}, 0x0, 0x1, @userptr, 0x0, 0x0, 0xffffffffffffffff}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000140)={0x200, 0x2, 0x4, 0x8, 0x1ff, {0x77359400}, {0x4, 0x8, 0x8, 0x3f, 0x90, 0x1f, "4f7cc18a"}, 0x1, 0x4, @userptr=0x200, 0x4, 0x0, r1}) 17:01:47 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)=0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xa323, 0x2}) 17:01:47 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)=0x2) 17:01:47 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) 17:01:47 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x3, @win={{}, 0x4, 0x0, &(0x7f0000000140)={{0x6}}, 0x4000083, &(0x7f0000000000)="1226114eddbaaae5e38e9ec5c3dfcc1adf8fc90000005bc1957eb4"}}) 17:01:47 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000}) 17:01:47 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x0, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:47 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)=0x2) 17:01:47 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)=0x2) 17:01:47 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) 17:01:47 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0x2, 0x200, 0x9, 0x80000}) 17:01:47 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x0, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:47 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:47 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0xfffffd3a, 0x50313134, 0x2, @stepwise={0x1, 0x7, 0x1, 0x0, 0x5, 0x4}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)={0xfffffffd, 0x3, 0x4, 0x20, 0x5, {0x77359400}, {0x2, 0x2, 0x2, 0x9e, 0x1f, 0x20, "90823d8d"}, 0x6, 0x4, @fd, 0x4, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x8000, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3, 0x0, r1}) 17:01:47 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x0, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:47 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) 17:01:47 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)=0x2) 17:01:47 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 17:01:47 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0xfffffd3a, 0x50313134, 0x2, @stepwise={0x1, 0x7, 0x1, 0x0, 0x5, 0x4}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)={0xfffffffd, 0x3, 0x4, 0x20, 0x5, {0x77359400}, {0x2, 0x2, 0x2, 0x9e, 0x1f, 0x20, "90823d8d"}, 0x6, 0x4, @fd, 0x4, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x8000, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3, 0x0, r1}) 17:01:47 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x0, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:47 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)=0x2) 17:01:47 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:47 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0xfffffd3a, 0x50313134, 0x2, @stepwise={0x1, 0x7, 0x1, 0x0, 0x5, 0x4}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)={0xfffffffd, 0x3, 0x4, 0x20, 0x5, {0x77359400}, {0x2, 0x2, 0x2, 0x9e, 0x1f, 0x20, "90823d8d"}, 0x6, 0x4, @fd, 0x4, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x8000, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3, 0x0, r1}) 17:01:47 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 17:01:47 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x0, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:47 executing program 1: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000140)=0x2) 17:01:47 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0xfffffd3a, 0x50313134, 0x2, @stepwise={0x1, 0x7, 0x1, 0x0, 0x5, 0x4}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)={0xfffffffd, 0x3, 0x4, 0x20, 0x5, {0x77359400}, {0x2, 0x2, 0x2, 0x9e, 0x1f, 0x20, "90823d8d"}, 0x6, 0x4, @fd, 0x4, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x8000, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3, 0x0, r1}) 17:01:47 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:47 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0xfffffd3a, 0x50313134, 0x2, @stepwise={0x1, 0x7, 0x1, 0x0, 0x5, 0x4}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)={0xfffffffd, 0x3, 0x4, 0x20, 0x5, {0x77359400}, {0x2, 0x2, 0x2, 0x9e, 0x1f, 0x20, "90823d8d"}, 0x6, 0x4, @fd, 0x4, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x8000, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3, 0x0, r1}) 17:01:47 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x0, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:47 executing program 1: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000140)=0x2) 17:01:47 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0xfffffd3a, 0x50313134, 0x2, @stepwise={0x1, 0x7, 0x1, 0x0, 0x5, 0x4}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x8000, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:47 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 17:01:47 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x0, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:47 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:47 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0xfffffd3a, 0x50313134, 0x2, @stepwise={0x1, 0x7, 0x1, 0x0, 0x5, 0x4}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)={0xfffffffd, 0x3, 0x4, 0x20, 0x5, {0x77359400}, {0x2, 0x2, 0x2, 0x9e, 0x1f, 0x20, "90823d8d"}, 0x6, 0x4, @fd, 0x4, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x8000, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3, 0x0, r1}) 17:01:47 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x8000, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:47 executing program 1: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000140)=0x2) 17:01:47 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x0, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:47 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x0, 0x200, 0x9, 0x80000}) 17:01:47 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0xfffffd3a, 0x50313134, 0x2, @stepwise={0x1, 0x7, 0x1, 0x0, 0x5, 0x4}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)={0xfffffffd, 0x3, 0x4, 0x20, 0x5, {0x77359400}, {0x2, 0x2, 0x2, 0x9e, 0x1f, 0x20, "90823d8d"}, 0x6, 0x4, @fd, 0x4}) 17:01:47 executing program 0: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:47 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x0, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:47 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)=0x2) 17:01:47 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0xfffffd3a, 0x50313134, 0x2, @stepwise={0x1, 0x7, 0x1, 0x0, 0x5, 0x4}}) 17:01:47 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x0, 0x0, 0x9, 0x80000}) 17:01:47 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x8000, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:47 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x0, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:47 executing program 0: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:47 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x8000, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:47 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x80000}) 17:01:47 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)=0x2) 17:01:47 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) 17:01:47 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x0, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:47 executing program 0: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:47 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x8000, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:47 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)=0x2) 17:01:47 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:47 executing program 3: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) 17:01:47 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x0, 0x8, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:47 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:48 executing program 3: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) 17:01:48 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 17:01:48 executing program 4: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x8000, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:48 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)=0x2) 17:01:48 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x0, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:48 executing program 3: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) 17:01:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:48 executing program 4: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x8000, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:48 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0xfffffd3a, 0x50313134, 0x2, @stepwise={0x1, 0x7, 0x1, 0x0, 0x5, 0x4}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)={0xfffffffd, 0x3, 0x4, 0x20, 0x5, {0x77359400}, {0x2, 0x2, 0x2, 0x9e, 0x1f, 0x20, "90823d8d"}, 0x6, 0x4, @fd, 0x4, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x8000, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3, 0x0, r1}) 17:01:48 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x0, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:48 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) 17:01:48 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)=0x2) 17:01:48 executing program 2: socket$caif_stream(0x25, 0x1, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x0, @pix_mp={0x28, 0x7ff, 0x4745504d, 0x9, 0x0, [{0x9, 0xe7}, {0x8, 0x9}, {0x7fff, 0x2}, {0x1, 0x101}, {0x4, 0x3}, {0x3, 0xdde4}, {0x5, 0x7fff}, {0x6b, 0x8}], 0x6, 0x5b, 0x0, 0x1, 0x4}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000100)={0x3e0e, 0x2, 0x3, "50828cec87f17b39cfbdc0dffa754c659c9916a3cd96138601dc51376b373494", 0x2036315a}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0x4}) 17:01:48 executing program 4: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x8000, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:48 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x0, 0x5, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:48 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) 17:01:48 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)=0x2) 17:01:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:48 executing program 4: r0 = syz_open_dev$vim2m(0x0, 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x8000, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:48 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x0, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:48 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f0000000000)={0x0, @bt={0x5, 0x101, 0x0, 0x3, 0x0, 0x9, 0x81, 0x2, 0x3, 0x6, 0xffff, 0x0, 0x0, 0x4, 0x20, 0x2, {0x7, 0x9}, 0x8, 0x4}}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000001c0)={0x8, 0x6, 0x4, 0x0, 0x7fffffff, {r3, r4/1000+60000}, {0x2, 0x0, 0x6, 0x7, 0x1, 0x8, "e49f1a2a"}, 0x6b, 0x0, @userptr=0x90, 0x6, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000240)={0x8000, 0x1, 0x4, 0x4000, 0x3ca, {r1, r2/1000+60000}, {0x1, 0x1, 0x2, 0x1, 0x0, 0x5, "69ceab19"}, 0x6, 0x1, @offset=0x4, 0x53ae, 0x0, r5}) 17:01:48 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) 17:01:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:48 executing program 4: r0 = syz_open_dev$vim2m(0x0, 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x8000, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:48 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)=0x2) 17:01:48 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x0, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:48 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x2, @vbi={0x10000, 0x7, 0x4, 0x30385056, [0x4, 0x6], [0x7, 0x1], 0x1}}) r1 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) r2 = syz_open_dev$vivid(&(0x7f0000000280)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f00000002c0)={0xa, {0x0, 0x5, 0x10000, 0x4}}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r5 = syz_open_dev$vbi(&(0x7f0000000300)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000340)={0x80000000, 0x8}) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000240)) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x2000010, 0x2, 0x4, 0x1000, 0x1800, {r3, r4/1000+10000}, {0x2, 0x8, 0x1, 0x1, 0x7f, 0xe1, "76a609dc"}, 0x5, 0x1, @userptr=0x7fff, 0x1e2}) 17:01:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:48 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) 17:01:48 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x0, 0x6, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:48 executing program 4: r0 = syz_open_dev$vim2m(0x0, 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x8000, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:48 executing program 2 (fault-call:2 fault-nth:0): r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:48 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)=0x2) 17:01:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:48 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) 17:01:48 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x0, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:48 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x8000, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:48 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)=0x2) 17:01:48 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r2, 0x80045105, &(0x7f0000000080)) ioctl$SNDCTL_TMR_TIMEBASE(r2, 0xc0045401, &(0x7f0000000440)=0xfe) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x1, @pix_mp={0x2, 0x7, 0x34324d59, 0x4, 0xc, [{0x6, 0x2}, {0x20}, {0x3, 0x5}, {0x3, 0xfffffffa}, {0x4ae}, {0xffff, 0x658}, {0x4000, 0xffffffff}, {0xfc, 0x6}], 0x9, 0x61, 0x8, 0x0, 0x7}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) syz_open_dev$vim2m(&(0x7f0000000300)='/dev/video#\x00', 0x7fff, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000280)={0x7f, 0x7, 0x4, 0x1000, 0x100, {}, {0x4, 0x875a3d090ce34bbb, 0x0, 0x81, 0x3, 0x1, "6d8c804f"}, 0x61e4, 0x3, @planes=&(0x7f0000000100)={0x8, 0x40, @userptr=0x101, 0xfffffff7}, 0xffffffa1}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)={0x464f0910, 0x4, 0x4, 0x10, 0xf88, {0x77359400}, {0x2, 0xc, 0x5, 0x1f, 0x4, 0x0, "c0bc6bf9"}, 0x1, 0x4, @fd, 0xb557, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000200)={0x94, 0x1, 0x4, 0x0, 0x0, {r3, r4/1000+60000}, {0x4, 0x0, 0x0, 0x0, 0x20, 0x4, "cd28371a"}, 0x1, 0x4, @planes=&(0x7f00000000c0)={0x3, 0x6d7d, @userptr=0xffffffffffffcb07, 0xa0}, 0x5, 0x0, r5}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:48 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x0, 0x9, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:48 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) 17:01:48 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x0, 0x0, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:48 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x8000, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:48 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x0, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)=0x2) 17:01:48 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x5, 0x2, 0x4, 0x2008, 0x1, {0x77359400}, {0x3, 0xc, 0x0, 0x3, 0x38, 0x20, "54f2dc58"}, 0x7, 0x4, @userptr=0x1f, 0x8f6}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x80000}) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000180)={0x1, @sdr={0x32315559, 0x26b1}}) 17:01:48 executing program 3: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) 17:01:48 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x0, 0x0, 0x1, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:48 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x8000, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:48 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x0, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)=0x2) 17:01:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x0, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:48 executing program 3: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) 17:01:48 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x0, 0x0, 0x0, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:48 executing program 2: socket$caif_stream(0x25, 0x1, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x70000, 0x38b, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd=0xffffffffffffffff, 0xfffffc01}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000640)={0x2, 0x1, 0x4, 0x2, 0x1, {0x77359400}, {0x1, 0x0, 0x4, 0x28, 0x91, 0x8, "ab427e71"}, 0xfffffffe, 0x0, @planes=&(0x7f0000000600)={0x8, 0x1, @fd=r1, 0xffff}, 0x101}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:48 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x0, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)=0x2) 17:01:48 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x8000, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:48 executing program 3: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) 17:01:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x0, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:48 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x0, 0x0, 0x0, "cb5f51b5"}, 0x5, 0x4, @offset=0x81, 0x81}) 17:01:48 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) sendto$ax25(r1, &(0x7f0000000080)="0360b2f73bab741546e0d074d5073ec19430da5a8439135f54deaf9c597322e6a6851d545677f6edaba10b1ea4a1697fecfbd71058e8c390eb7b64341cbf204c43452e0eb189a0fc3bc6da610cfd9e4ae08784d7c6820f197dbe952d50b469c60d40c1602b093b30dacfae1d2e47bfdbcbf420d2f2be768f2878cf876e204e73bcc72ba59dec466d769c0139", 0x8c, 0x40, &(0x7f0000000180)={{0x3, @default, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 17:01:48 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x8000, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:48 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x0, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)=0x2) 17:01:48 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) 17:01:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x0, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:48 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x0, 0x0, 0x0, "cb5f51b5"}, 0x0, 0x4, @offset=0x81, 0x81}) 17:01:48 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8000000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:48 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x0, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)=0x2) 17:01:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x0, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:48 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x0, 0x0, 0x0, "cb5f51b5"}, 0x0, 0x4, @offset=0x81, 0x81}) 17:01:48 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) 17:01:48 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x8000, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:48 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x0, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)=0x2) 17:01:48 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffffffffffff, 0x2) syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x0, 0x3}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x101, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0xfffffe00, 0x8, 0x4, 0x8, 0x5, {0x77359400}, {0x4, 0x1, 0x4, 0x1f, 0x8, 0xb3, "f9cd3727"}, 0x8, 0x1, @planes=&(0x7f0000000280)={0x7, 0x5, @userptr=0xfffffffffffffc00, 0x5}, 0x8, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000200)={0xfffffffe, 0x1, 0x4, 0xe000, 0x405, {r2, r3/1000+60000}, {0x5, 0x0, 0x3, 0x3, 0x2f, 0x1, "309b50b5"}, 0xa29, 0x1, @userptr, 0x1, 0x0, r4}) 17:01:48 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x0, 0x0, 0x0, "cb5f51b5"}, 0x0, 0x4, @offset=0x81, 0x81}) 17:01:49 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x0, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:49 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) 17:01:49 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x8000, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:49 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)=0x2) 17:01:49 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x0, 0x0, 0x0, "cb5f51b5"}, 0x5, 0x0, @offset=0x81, 0x81}) 17:01:49 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0xf14, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40805}, 0x862bbd1388324d32) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000006c0)={0x1, @pix={0x200, 0x200, 0x34363248, 0x5, 0x54, 0xf74, 0x8, 0x8, 0x0, 0x7, 0x1, 0x7}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vim2m\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000300)={0x7f6, 0x0, 0x4, 0x20, 0xa6, {0x77359400}, {0x1, 0x0, 0xfe, 0x3, 0xad, 0x81, "9ca49690"}, 0x7, 0x1, @planes=&(0x7f0000000140)={0xdd82, 0x7f, @userptr=0x9, 0x8}, 0x4, 0x0, r2}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1000) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x2, @sliced={0x1, [0x3f, 0x400, 0x3, 0x9, 0x3, 0x4, 0x1f, 0x801, 0x2, 0xfff, 0x6f, 0xab, 0x3f, 0xfe01, 0x100, 0x7fff, 0xfff8, 0x6, 0x7fff, 0xf800, 0x0, 0x7ff, 0x7, 0xfd94, 0x0, 0x9, 0xfff, 0x4, 0x400, 0x1, 0x5, 0x800, 0x7, 0x101, 0x8, 0x7, 0x3, 0x9, 0x401, 0x1f, 0x7, 0x800, 0x7, 0x20, 0x4, 0xc5b, 0x8, 0x2], 0xfffffffa}}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000500)={0x9, 0x37303250, 0x2, @stepwise={0x7f, 0x0, 0x1f, 0x33, 0x0, 0x3f}}) 17:01:49 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x2, 0x4}) 17:01:49 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x0, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:49 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x8000, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:49 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)=0x2) 17:01:49 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:49 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x8000, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:49 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x2, 0x4}) 17:01:49 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x0, 0x0, 0x0, "cb5f51b5"}, 0x5, 0x0, @offset=0x81, 0x81}) 17:01:49 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)=0x2) 17:01:49 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2e141, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r1, 0x80045113, &(0x7f00000000c0)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r2 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000100)={0x5, 0x6}) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:49 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x2, 0x4}) 17:01:49 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x8000, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:49 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x0, 0x0, 0x0, "cb5f51b5"}, 0x5, 0x0, @offset=0x81, 0x81}) 17:01:49 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp}}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)=0x2) 17:01:49 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:49 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x8000, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:49 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x0, 0x0, 0x0, "cb5f51b5"}, 0x5, 0x4, @offset, 0x81}) 17:01:49 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x8bda, 0x1, 0x4}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0x401, 0x4) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:49 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x0, 0x4}) 17:01:49 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp}}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)=0x2) 17:01:49 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:49 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x0, 0x0, 0x0, "cb5f51b5"}, 0x5, 0x4, @offset, 0x81}) 17:01:49 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x8000, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:49 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp}}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)=0x2) 17:01:49 executing program 2: ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000080)={0xff, 0x50313459, 0x0, 0x9, 0x2, @stepwise={{0x1000, 0xb}, {0x200}, {0xa1, 0x80000000}}}) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000100)={0x0, 0x0, {0x7fffffff, 0x7f, 0x30b, 0xfffffeff}}) r1 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x40000000002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4000}) 17:01:49 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x0, 0x4}) 17:01:49 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:49 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x0, 0x0, 0x0, "cb5f51b5"}, 0x5, 0x4, @offset, 0x81}) 17:01:49 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000180)={0x1, @sliced={0x6c25, [0x7, 0x27, 0x2bb, 0x5, 0x5bd8, 0x4, 0x1, 0x1ff, 0x7, 0x2, 0x1ff, 0x7, 0x38a, 0x5, 0x7ff, 0x6, 0x8, 0x1, 0x23b3, 0x2, 0x800, 0xe123, 0x8, 0x7f, 0x8, 0x1, 0x80, 0x8000, 0x9, 0x9, 0x8000, 0x3f, 0x60, 0x8, 0x5, 0x6f06, 0x3ff, 0x8001, 0xfe00, 0x7, 0x1684, 0x1f, 0x4, 0xfff9, 0x8, 0xa8ac, 0x40, 0x400], 0x1}}) 17:01:49 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x0, 0x4}) 17:01:49 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:49 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000140)=0x2) 17:01:49 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2}) 17:01:49 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x8000, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:49 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, 0x0) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000180)={0x0, 0x1, 0x9}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) r2 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r6 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f0000000240)={0x201, 0x2, 0x4, 0x4000, 0x1ff, {0x77359400}, {0x3, 0x0, 0x3f, 0x3f, 0x0, 0x1, "7dda7e66"}, 0x7, 0x1, @userptr=0x1000, 0x1000, 0x0, r3}) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000001c0)={0x5, 0x0, 0x4, 0x40, 0x6, {r4, r5/1000+60000}, {0x3, 0x0, 0x3, 0x81, 0x5, 0x9, "4f36d228"}, 0x80, 0x4, @fd, 0x6fc}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)={0x0, 0x2, 0x4, 0x40, 0x3d, {}, {0x5, 0x1, 0xe6, 0xa8, 0x0, 0x9, "c0f75eff"}, 0x903, 0x1, @userptr, 0x1000}) 17:01:49 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x0, 0x0, 0x0, "cb5f51b5"}, 0x5, 0x4, @offset=0x81}) 17:01:49 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:49 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000140)=0x2) 17:01:49 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2}) 17:01:49 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) syz_open_dev$vim2m(&(0x7f00000002c0)='/dev/video#\x00', 0x3, 0x2) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8000}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000000) ioctl$SIOCAX25GETINFOOLD(r2, 0x89e9, &(0x7f0000000580)) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0xa00000, 0x81, 0x8000, r2, 0x0, &(0x7f00000000c0)={0x9909d9, 0x0, [], @ptr=0x8f}}) 17:01:49 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:49 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x0, 0x0, 0x0, "cb5f51b5"}, 0x5, 0x4, @offset=0x81}) 17:01:49 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x8000, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:49 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000140)=0x2) 17:01:49 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2}) 17:01:49 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:01:49 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x100, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x0, 0x0, 0x0, "cb5f51b5"}, 0x5, 0x4, @offset=0x81}) 17:01:49 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:49 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x8000, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:49 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, 0x0) 17:01:49 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0xf14, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40805}, 0x862bbd1388324d32) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000006c0)={0x1, @pix={0x200, 0x200, 0x34363248, 0x5, 0x54, 0xf74, 0x8, 0x8, 0x0, 0x7, 0x1, 0x7}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vim2m\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000300)={0x7f6, 0x0, 0x4, 0x20, 0xa6, {0x77359400}, {0x1, 0x0, 0xfe, 0x3, 0xad, 0x81, "9ca49690"}, 0x7, 0x1, @planes=&(0x7f0000000140)={0xdd82, 0x7f, @userptr=0x9, 0x8}, 0x4, 0x0, r2}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1000) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x2, @sliced={0x1, [0x3f, 0x400, 0x3, 0x9, 0x3, 0x4, 0x1f, 0x801, 0x2, 0xfff, 0x6f, 0xab, 0x3f, 0xfe01, 0x100, 0x7fff, 0xfff8, 0x6, 0x7fff, 0xf800, 0x0, 0x7ff, 0x7, 0xfd94, 0x0, 0x9, 0xfff, 0x4, 0x400, 0x1, 0x5, 0x800, 0x7, 0x101, 0x8, 0x7, 0x3, 0x9, 0x401, 0x1f, 0x7, 0x800, 0x7, 0x20, 0x4, 0xc5b, 0x8, 0x2], 0xfffffffa}}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000500)={0x9, 0x37303250, 0x2, @stepwise={0x7f, 0x0, 0x1f, 0x33, 0x0, 0x3f}}) 17:01:49 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) 17:01:49 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:01:49 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x8000, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:49 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:49 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, 0x0) 17:01:49 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0xf14, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40805}, 0x862bbd1388324d32) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000006c0)={0x1, @pix={0x200, 0x200, 0x34363248, 0x5, 0x54, 0xf74, 0x8, 0x8, 0x0, 0x7, 0x1, 0x7}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vim2m\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000300)={0x7f6, 0x0, 0x4, 0x20, 0xa6, {0x77359400}, {0x1, 0x0, 0xfe, 0x3, 0xad, 0x81, "9ca49690"}, 0x7, 0x1, @planes=&(0x7f0000000140)={0xdd82, 0x7f, @userptr=0x9, 0x8}, 0x4, 0x0, r2}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1000) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x2, @sliced={0x1, [0x3f, 0x400, 0x3, 0x9, 0x3, 0x4, 0x1f, 0x801, 0x2, 0xfff, 0x6f, 0xab, 0x3f, 0xfe01, 0x100, 0x7fff, 0xfff8, 0x6, 0x7fff, 0xf800, 0x0, 0x7ff, 0x7, 0xfd94, 0x0, 0x9, 0xfff, 0x4, 0x400, 0x1, 0x5, 0x800, 0x7, 0x101, 0x8, 0x7, 0x3, 0x9, 0x401, 0x1f, 0x7, 0x800, 0x7, 0x20, 0x4, 0xc5b, 0x8, 0x2], 0xfffffffa}}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000500)={0x9, 0x37303250, 0x2, @stepwise={0x7f, 0x0, 0x1f, 0x33, 0x0, 0x3f}}) 17:01:49 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x8000, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:49 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vim2m\x00', 0x2, 0x0) 17:01:49 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:01:49 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 17:01:49 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, 0x0) 17:01:49 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x8000, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:49 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0xf14, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40805}, 0x862bbd1388324d32) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000006c0)={0x1, @pix={0x200, 0x200, 0x34363248, 0x5, 0x54, 0xf74, 0x8, 0x8, 0x0, 0x7, 0x1, 0x7}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vim2m\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000300)={0x7f6, 0x0, 0x4, 0x20, 0xa6, {0x77359400}, {0x1, 0x0, 0xfe, 0x3, 0xad, 0x81, "9ca49690"}, 0x7, 0x1, @planes=&(0x7f0000000140)={0xdd82, 0x7f, @userptr=0x9, 0x8}, 0x4, 0x0, r2}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1000) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x2, @sliced={0x1, [0x3f, 0x400, 0x3, 0x9, 0x3, 0x4, 0x1f, 0x801, 0x2, 0xfff, 0x6f, 0xab, 0x3f, 0xfe01, 0x100, 0x7fff, 0xfff8, 0x6, 0x7fff, 0xf800, 0x0, 0x7ff, 0x7, 0xfd94, 0x0, 0x9, 0xfff, 0x4, 0x400, 0x1, 0x5, 0x800, 0x7, 0x101, 0x8, 0x7, 0x3, 0x9, 0x401, 0x1f, 0x7, 0x800, 0x7, 0x20, 0x4, 0xc5b, 0x8, 0x2], 0xfffffffa}}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000500)={0x9, 0x37303250, 0x2, @stepwise={0x7f, 0x0, 0x1f, 0x33, 0x0, 0x3f}}) 17:01:49 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:01:49 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)) 17:01:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 17:01:50 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x8000, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:50 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0xf14, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40805}, 0x862bbd1388324d32) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000006c0)={0x1, @pix={0x200, 0x200, 0x34363248, 0x5, 0x54, 0xf74, 0x8, 0x8, 0x0, 0x7, 0x1, 0x7}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vim2m\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000300)={0x7f6, 0x0, 0x4, 0x20, 0xa6, {0x77359400}, {0x1, 0x0, 0xfe, 0x3, 0xad, 0x81, "9ca49690"}, 0x7, 0x1, @planes=&(0x7f0000000140)={0xdd82, 0x7f, @userptr=0x9, 0x8}, 0x4, 0x0, r2}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1000) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x2, @sliced={0x1, [0x3f, 0x400, 0x3, 0x9, 0x3, 0x4, 0x1f, 0x801, 0x2, 0xfff, 0x6f, 0xab, 0x3f, 0xfe01, 0x100, 0x7fff, 0xfff8, 0x6, 0x7fff, 0xf800, 0x0, 0x7ff, 0x7, 0xfd94, 0x0, 0x9, 0xfff, 0x4, 0x400, 0x1, 0x5, 0x800, 0x7, 0x101, 0x8, 0x7, 0x3, 0x9, 0x401, 0x1f, 0x7, 0x800, 0x7, 0x20, 0x4, 0xc5b, 0x8, 0x2], 0xfffffffa}}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vim2m\x00', 0x2, 0x0) 17:01:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x11) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x40, r2, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xc0}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x24044094) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x50, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100}}]}, 0x50}}, 0x1) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_SCAN_REQ(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r6, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x1a}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x80}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8881) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x11) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042abd7000ffdbdf252700000006000600000000000a0001007770616e310000001400300037102b0fe6295074281d0990d41ad84b0c0005000203aaaaaaaaaaaa08000200", @ANYRES32=0x0, @ANYBLOB="06000600fcff0000f1002b0003000000131d3568f3ab243740e7930eae12a1fe5acb76e0a726c30b3353ad5f5469"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20008840) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000140)) 17:01:50 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:01:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 17:01:50 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x8000, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:50 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)) 17:01:50 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0xf14, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40805}, 0x862bbd1388324d32) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000006c0)={0x1, @pix={0x200, 0x200, 0x34363248, 0x5, 0x54, 0xf74, 0x8, 0x8, 0x0, 0x7, 0x1, 0x7}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vim2m\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000300)={0x7f6, 0x0, 0x4, 0x20, 0xa6, {0x77359400}, {0x1, 0x0, 0xfe, 0x3, 0xad, 0x81, "9ca49690"}, 0x7, 0x1, @planes=&(0x7f0000000140)={0xdd82, 0x7f, @userptr=0x9, 0x8}, 0x4, 0x0, r2}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1000) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x2, @sliced={0x1, [0x3f, 0x400, 0x3, 0x9, 0x3, 0x4, 0x1f, 0x801, 0x2, 0xfff, 0x6f, 0xab, 0x3f, 0xfe01, 0x100, 0x7fff, 0xfff8, 0x6, 0x7fff, 0xf800, 0x0, 0x7ff, 0x7, 0xfd94, 0x0, 0x9, 0xfff, 0x4, 0x400, 0x1, 0x5, 0x800, 0x7, 0x101, 0x8, 0x7, 0x3, 0x9, 0x401, 0x1f, 0x7, 0x800, 0x7, 0x20, 0x4, 0xc5b, 0x8, 0x2], 0xfffffffa}}) 17:01:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:50 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:01:50 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x8000, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x0, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:50 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0xf14, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40805}, 0x862bbd1388324d32) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000006c0)={0x1, @pix={0x200, 0x200, 0x34363248, 0x5, 0x54, 0xf74, 0x8, 0x8, 0x0, 0x7, 0x1, 0x7}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vim2m\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000300)={0x7f6, 0x0, 0x4, 0x20, 0xa6, {0x77359400}, {0x1, 0x0, 0xfe, 0x3, 0xad, 0x81, "9ca49690"}, 0x7, 0x1, @planes=&(0x7f0000000140)={0xdd82, 0x7f, @userptr=0x9, 0x8}, 0x4, 0x0, r2}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1000) 17:01:50 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)) 17:01:50 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:01:50 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x2000, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, &(0x7f0000000240)) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0x200, 0x2, 0x4, 0x21b7ec5e34e6cad4, 0x1, {}, {0x1, 0xc, 0x6, 0x0, 0xfb, 0x0, "5ccedb96"}, 0x1, 0x3, @offset=0x9}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000140)={0x2, 0x0, 0xf2}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000080)={0x3, 0x2, 0x4, 0x0, 0x5, {0x77359400}, {0x2, 0x1, 0x0, 0x6, 0xff, 0x6, "dcfbf7ca"}, 0x4, 0x6, @offset=0x6, 0x81, 0x0, r1}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x3, 0x4, 0x40, 0x70, 0x1, 0xffffffffffffffff, 0x3, [], 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x40) 17:01:50 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) 17:01:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x0, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:50 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:01:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x11) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x40, r2, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xc0}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x24044094) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x50, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100}}]}, 0x50}}, 0x1) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_SCAN_REQ(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r6, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x1a}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x80}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8881) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x11) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042abd7000ffdbdf252700000006000600000000000a0001007770616e310000001400300037102b0fe6295074281d0990d41ad84b0c0005000203aaaaaaaaaaaa08000200", @ANYRES32=0x0, @ANYBLOB="06000600fcff0000f1002b0003000000131d3568f3ab243740e7930eae12a1fe5acb76e0a726c30b3353ad5f5469"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20008840) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000140)) 17:01:50 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0xf14, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40805}, 0x862bbd1388324d32) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000006c0)={0x1, @pix={0x200, 0x200, 0x34363248, 0x5, 0x54, 0xf74, 0x8, 0x8, 0x0, 0x7, 0x1, 0x7}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vim2m\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000300)={0x7f6, 0x0, 0x4, 0x20, 0xa6, {0x77359400}, {0x1, 0x0, 0xfe, 0x3, 0xad, 0x81, "9ca49690"}, 0x7, 0x1, @planes=&(0x7f0000000140)={0xdd82, 0x7f, @userptr=0x9, 0x8}, 0x4, 0x0, r2}) 17:01:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x0, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x11) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x40, r2, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xc0}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x24044094) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x50, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100}}]}, 0x50}}, 0x1) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_SCAN_REQ(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r6, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x1a}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x80}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8881) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x11) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042abd7000ffdbdf252700000006000600000000000a0001007770616e310000001400300037102b0fe6295074281d0990d41ad84b0c0005000203aaaaaaaaaaaa08000200", @ANYRES32=0x0, @ANYBLOB="06000600fcff0000f1002b0003000000131d3568f3ab243740e7930eae12a1fe5acb76e0a726c30b3353ad5f5469"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20008840) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000140)) 17:01:50 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0xf14, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40805}, 0x862bbd1388324d32) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000006c0)={0x1, @pix={0x200, 0x200, 0x34363248, 0x5, 0x54, 0xf74, 0x8, 0x8, 0x0, 0x7, 0x1, 0x7}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vim2m\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000300)={0x7f6, 0x0, 0x4, 0x20, 0xa6, {0x77359400}, {0x1, 0x0, 0xfe, 0x3, 0xad, 0x81, "9ca49690"}, 0x7, 0x1, @planes=&(0x7f0000000140)={0xdd82, 0x7f, @userptr=0x9, 0x8}, 0x4, 0x0, r2}) 17:01:50 executing program 5: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2) 17:01:50 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) 17:01:50 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 17:01:50 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x100000000, 0x2) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)={0x7bfe, 0xa, 0x4, 0x1, 0x9, {0x0, 0xea60}, {0x2, 0x0, 0x3, 0x6, 0x2, 0x6b, "a93e7c99"}, 0x7, 0x4, @offset=0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000240)={0x7, 0x3, 0x4, 0xe000, 0x1, {}, {0x4, 0x1, 0x20, 0x7f, 0x81, 0x4, "15775f10"}, 0xfffffffd, 0x4, @planes=&(0x7f0000000180)={0x7fff, 0xff, @fd, 0xffffff9c}, 0x4, 0x0, r2}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100)=0x3) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x0, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:50 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0xf14, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40805}, 0x862bbd1388324d32) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000006c0)={0x1, @pix={0x200, 0x200, 0x34363248, 0x5, 0x54, 0xf74, 0x8, 0x8, 0x0, 0x7, 0x1, 0x7}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vim2m\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f0000000080)) 17:01:50 executing program 5: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2) 17:01:50 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) 17:01:50 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vim2m\x00', 0x2, 0x0) 17:01:50 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000280)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{}, {0x0}, {}, {}]}) r2 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x8001, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)={0xff, 0x3, 0x4, 0x10000, 0x800, {}, {0x5, 0x2, 0xff, 0x20, 0x10, 0x0, 'sY?J'}, 0xffff, 0x2, @planes=&(0x7f00000001c0)={0x4, 0x4, @userptr=0x9, 0x6}, 0x4}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000180)={r1, &(0x7f0000000100)=""/26}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x0, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:50 executing program 5: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2) 17:01:50 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0xf14, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40805}, 0x862bbd1388324d32) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000006c0)={0x1, @pix={0x200, 0x200, 0x34363248, 0x5, 0x54, 0xf74, 0x8, 0x8, 0x0, 0x7, 0x1, 0x7}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vim2m\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:50 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x0, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:50 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vim2m\x00', 0x2, 0x0) 17:01:50 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0xf14, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40805}, 0x862bbd1388324d32) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000006c0)={0x1, @pix={0x200, 0x200, 0x34363248, 0x5, 0x54, 0xf74, 0x8, 0x8, 0x0, 0x7, 0x1, 0x7}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vim2m\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x0, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:50 executing program 5: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:01:50 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:50 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000280)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{}, {0x0}, {}, {}]}) r2 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x8001, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)={0xff, 0x3, 0x4, 0x10000, 0x800, {}, {0x5, 0x2, 0xff, 0x20, 0x10, 0x0, 'sY?J'}, 0xffff, 0x2, @planes=&(0x7f00000001c0)={0x4, 0x4, @userptr=0x9, 0x6}, 0x4}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000180)={r1, &(0x7f0000000100)=""/26}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:50 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:50 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0xf14, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40805}, 0x862bbd1388324d32) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000006c0)={0x1, @pix={0x200, 0x200, 0x34363248, 0x5, 0x54, 0xf74, 0x8, 0x8, 0x0, 0x7, 0x1, 0x7}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x0, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:50 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:50 executing program 5: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:01:50 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3ff, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x1, 0x1, 0x4, 0x20, 0x3, {r1, r2/1000+10000}, {0x1, 0x1, 0x9, 0x2, 0x80, 0x3, "51c367ad"}, 0x100, 0x2, @fd, 0x1000}) 17:01:50 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x0, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:50 executing program 5: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:01:50 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0xf14, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40805}, 0x862bbd1388324d32) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000006c0)={0x1, @pix={0x200, 0x200, 0x34363248, 0x5, 0x54, 0xf74, 0x8, 0x8, 0x0, 0x7, 0x1, 0x7}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:50 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:50 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:50 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x3, @vbi={0x3, 0x0, 0x2, 0x41415270, [0x2], [0x52, 0xfff], 0x1}}) r1 = syz_open_dev$vivid(&(0x7f0000000280)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f00000002c0)={0x1, {0x1, 0xe3d2, 0x9c, 0x2}}) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000080)={0x609b, 0x0, [], {0x0, @reserved}}) r2 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000340)={0x800, 0x3, 0x4, 0xe000, 0xa8368392, {0x77359400}, {0x4, 0x1, 0x7f, 0xe3, 0x4, 0x80, "55fc9db1"}, 0x80000000, 0x1, @planes=&(0x7f0000000300)={0xd6c, 0xe7fd, @mem_offset=0x5, 0x1}, 0x7fff}) 17:01:50 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:01:50 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0xf14, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40805}, 0x862bbd1388324d32) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000006c0)={0x1, @pix={0x200, 0x200, 0x34363248, 0x5, 0x54, 0xf74, 0x8, 0x8, 0x0, 0x7, 0x1, 0x7}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:50 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:50 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:50 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x1b0b, 0x1, 0x3}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) r1 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x5, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000100)={0x1, 0x1, 0x401, 0x4800}) 17:01:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:50 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:01:50 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:50 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0xf14, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40805}, 0x862bbd1388324d32) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000006c0)={0x1, @pix={0x200, 0x200, 0x34363248, 0x5, 0x54, 0xf74, 0x8, 0x8, 0x0, 0x7, 0x1, 0x7}}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:50 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:50 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x401, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x2, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:51 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0xf14, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40805}, 0x862bbd1388324d32) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:51 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:51 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:51 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:01:51 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0xf14, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40805}, 0x862bbd1388324d32) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:51 executing program 2: ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000080)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, &(0x7f0000000180)) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d03, &(0x7f00000000c0)=0x2e) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x2, 0x1, 0x3}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000140)) 17:01:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:51 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:51 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0xf14, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:51 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:51 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:01:51 executing program 1: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:51 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x4000002, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x3, @sliced={0x7fff, [0x3, 0x8000, 0x6, 0x5, 0x7, 0x101, 0xff, 0xa291, 0x20, 0x200, 0x8, 0x5, 0x20, 0x401, 0x1f, 0x3f, 0xfffe, 0x1, 0x3, 0x73be, 0x7, 0x2800, 0x13f, 0x5, 0x7, 0x1, 0x5, 0x1, 0x8, 0xc1f1, 0xc14, 0xfff8, 0x1f, 0x5, 0x7, 0x800, 0xffff, 0x3, 0x7, 0x0, 0x0, 0x0, 0x80, 0x7, 0x3ff, 0x1400, 0x3060, 0x800], 0x8}}) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000000580)) getsockopt$ax25_int(r1, 0x101, 0x6, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:51 executing program 3: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0xf14, 0x2) r0 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:51 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:51 executing program 1: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:51 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:01:51 executing program 3: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0xf14, 0x2) r0 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:51 executing program 1: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:51 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x4, 0x1000009e, 0x0, 0x80000}) 17:01:51 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:51 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:01:51 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x84800}) 17:01:51 executing program 3: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0xf14, 0x2) r0 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:51 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x4, @userptr=0x100000001, 0x3}) 17:01:51 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:51 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr=0x100000001, 0x3}) 17:01:51 executing program 2: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r0 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x0, 0x0, 0x10000, 0x84000}) 17:01:51 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:01:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:51 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:51 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:51 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x2, 0x3, 0x3}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:51 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr, 0x3}) 17:01:51 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:01:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0xdcb}) 17:01:51 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:51 executing program 3: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r0 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xdcb}) 17:01:51 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x0, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:01:51 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) 17:01:51 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) r1 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x7fffffff, 0x2, 0x2}) 17:01:51 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:51 executing program 3: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r0 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) 17:01:51 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000380)={0x1000, 0x1, 0x4, 0x10, 0xc813, {r2, r3/1000+10000}, {0x1, 0xc, 0x39, 0x80, 0x0, 0x0, "225efd82"}, 0x9, 0x4, @fd, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x1, @pix_mp={0x401, 0x8, 0x4f424752, 0x5, 0x8, [{0x8, 0x10000}, {0x0, 0x6}, {0x4, 0x3552}, {0x6, 0x1ff}, {0x3c7, 0xffff7fff}, {0x400, 0x8000}, {0x9, 0x5}, {0x9}], 0x6, 0x7f, 0x7, 0x0, 0x1}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000280)={0x0, @vbi={0x5, 0x81, 0x80, 0x33424752, [0x8, 0x80], [0x7ff, 0x7], 0x2}}) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x2002, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r4, 0x80304d65, &(0x7f0000000500)) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x3, @sliced={0x2df, [0x1f2, 0x6, 0x5, 0x9, 0x4, 0x1, 0x81, 0x7f, 0x4, 0x19ea, 0x3, 0xfffb, 0x0, 0x1ff, 0x3e, 0x2, 0x3, 0x1ff, 0x7, 0x1, 0x3, 0x344, 0x75, 0x8, 0xca4, 0x1000, 0x1ff, 0x3, 0x0, 0xbae5, 0x90, 0x4, 0x47, 0x80, 0x5, 0xe57, 0x6, 0xd1c8, 0x4, 0x81, 0x7ff, 0x3, 0x7, 0xb096, 0x4, 0x4, 0x6, 0x1], 0x42}}) 17:01:51 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x0, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:01:51 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) 17:01:51 executing program 3: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r0 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:51 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:51 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:01:51 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) r2 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)={0x1, 0x2, 0x4, 0x4, 0x9164, {}, {0x1, 0x0, 0x9, 0x7, 0x40, 0x33, "b9dd7266"}, 0x7fffffff, 0x2, @planes=&(0x7f0000000100)={0x5, 0x0, @mem_offset=0x100, 0x5}, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)={0x1, 0x0, 0x4, 0x8, 0xf3, {0x0, 0x2710}, {0x0, 0x0, 0x2, 0xff, 0x7f, 0x3f, "3a3e10b1"}, 0x3, 0x3, @userptr=0x800, 0x6}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:51 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:01:51 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:51 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x3, @vbi={0x3, 0x0, 0x2, 0x41415270, [0x2], [0x52, 0xfff], 0x1}}) r1 = syz_open_dev$vivid(&(0x7f0000000280)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f00000002c0)={0x1, {0x1, 0xe3d2, 0x9c, 0x2}}) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000080)={0x609b, 0x0, [], {0x0, @reserved}}) r2 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000340)={0x800, 0x3, 0x4, 0xe000, 0xa8368392, {0x77359400}, {0x4, 0x1, 0x7f, 0xe3, 0x4, 0x80, "55fc9db1"}, 0x80000000, 0x1, @planes=&(0x7f0000000300)={0xd6c, 0xe7fd, @mem_offset=0x5, 0x1}, 0x7fff}) 17:01:51 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x0, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:51 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:01:51 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:51 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x0, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x0, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x6, 0xf9, 0x1, {0x2, @pix={0x6, 0x5, 0x4745504a, 0x9, 0x3, 0x1, 0x0, 0x200, 0x0, 0x0, 0x1, 0x7}}, 0xdcb}) 17:01:51 executing program 2: socketpair(0x8, 0x80000, 0x4, &(0x7f00000000c0)) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x7fff, 0x2, 0x1, {0xb6cfe0f5872d603b, @raw_data="1efd6873aa43ea8c2c92586488816af97a6f24adb01e2041c2c5046863c07c4323c38dcf6bc4213a1be88868c7b0fa9b7e2c836d927373fd407d8871a0c89e50e9d189c167b5a40bb1be0b57b28d46e76306bed4f9a07cae458bf85bed9fb97b07998d65b92305d06717becedbdfd3bd6d3033cb16acfb61aff5fcfb9ae72742c59911c4c97dbacefc4e2bbb49477a963948f56ca51e7850678516c96f178271c6089ba50e2206e40391a64a0476ff8400becbf56a78a5572ac26f698a90b8d9a6c887f706696d6d"}, 0x9}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r2 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000300)={0x0, 0x9, 0x1, {0x6, @win={{0x96, 0x4e2, 0x0, 0xc}, 0x5, 0x4, &(0x7f0000000080)={{0x2, 0x1, 0x7, 0x3f}}, 0x3, &(0x7f0000000280)="58c9e578570cb12d94d393de08d56c1b84a6473e8da86bc086f5dc1d26cfd9a3db2832ee55d1ea8a6a64a58813279021ce70a4786ec2be35741c347196aed058ff82eb1576b07aa852ace4e5ad549265de540bed8a7d703ce37eef13d0ab9d870c5ed420", 0x6}}, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:51 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:51 executing program 4: socket$caif_stream(0x25, 0x1, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x70000, 0x38b, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd=0xffffffffffffffff, 0xfffffc01}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000640)={0x2, 0x1, 0x4, 0x2, 0x1, {0x77359400}, {0x1, 0x0, 0x4, 0x28, 0x91, 0x8, "ab427e71"}, 0xfffffffe, 0x0, @planes=&(0x7f0000000600)={0x8, 0x1, @fd=r1, 0xffff}, 0x101}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:51 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:51 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:01:51 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)={0x10001, 0x1, 0x4, 0x400, 0x9, {}, {0x2, 0x8, 0x7, 0x4, 0x3f, 0x5, "cc5ed44f"}, 0x5, 0x3, @planes=&(0x7f0000000080)={0x1, 0x1, @mem_offset=0x2, 0x2950}}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\b\x00\x00', @ANYRES16=r1, @ANYBLOB="00022cbd7000fbdbdf251200000005002a00010000000800310005000000"], 0x24}, 0x1, 0x0, 0x0, 0x4801}, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:51 executing program 0 (fault-call:2 fault-nth:0): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) 17:01:51 executing program 3: syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r0 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:51 executing program 4: socket$caif_stream(0x25, 0x1, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x70000, 0x38b, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd=0xffffffffffffffff, 0xfffffc01}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000640)={0x2, 0x1, 0x4, 0x2, 0x1, {0x77359400}, {0x1, 0x0, 0x4, 0x28, 0x91, 0x8, "ab427e71"}, 0xfffffffe, 0x0, @planes=&(0x7f0000000600)={0x8, 0x1, @fd=r1, 0xffff}, 0x101}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:51 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:51 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x0, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2) 17:01:52 executing program 3: syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r0 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:52 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) [ 807.858849] FAULT_INJECTION: forcing a failure. [ 807.858849] name failslab, interval 1, probability 0, space 0, times 0 17:01:52 executing program 4: socket$caif_stream(0x25, 0x1, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x70000, 0x38b, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd=0xffffffffffffffff, 0xfffffc01}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000640)={0x2, 0x1, 0x4, 0x2, 0x1, {0x77359400}, {0x1, 0x0, 0x4, 0x28, 0x91, 0x8, "ab427e71"}, 0xfffffffe, 0x0, @planes=&(0x7f0000000600)={0x8, 0x1, @fd=r1, 0xffff}, 0x101}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:52 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) [ 807.947883] CPU: 1 PID: 16723 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 807.956162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 807.966214] Call Trace: [ 807.968807] dump_stack+0x1b2/0x281 [ 807.972935] should_fail.cold+0x10a/0x149 [ 807.977135] should_failslab+0xd6/0x130 [ 807.981116] kmem_cache_alloc_node_trace+0x25a/0x400 [ 807.986280] __kmalloc_node+0x38/0x70 [ 807.990085] kvmalloc_node+0x46/0xd0 [ 807.993865] ? video_ioctl2+0x30/0x30 [ 807.997654] video_usercopy+0x330/0xe70 [ 808.001628] ? v4l_g_ctrl+0x390/0x390 [ 808.005445] ? proc_fail_nth_write+0x7b/0x180 [ 808.010961] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 808.016587] ? trace_hardirqs_on+0x10/0x10 [ 808.020861] ? fsnotify+0x974/0x11b0 [ 808.024623] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 808.036440] ? __handle_mm_fault+0x80f/0x4620 [ 808.042082] v4l2_ioctl+0x1bb/0x2f0 [ 808.046009] ? v4l2_open+0x2f0/0x2f0 [ 808.050058] do_vfs_ioctl+0x75a/0xff0 [ 808.055014] ? ioctl_preallocate+0x1a0/0x1a0 [ 808.060728] ? lock_downgrade+0x740/0x740 [ 808.065105] ? __fget+0x225/0x360 [ 808.068563] ? do_vfs_ioctl+0xff0/0xff0 [ 808.072661] ? security_file_ioctl+0x83/0xb0 [ 808.079948] SyS_ioctl+0x7f/0xb0 [ 808.083328] ? do_vfs_ioctl+0xff0/0xff0 [ 808.087306] do_syscall_64+0x1d5/0x640 [ 808.091205] entry_SYSCALL_64_after_hwframe+0x46/0xbb 17:01:52 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:52 executing program 3: syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r0 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:52 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x0, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2) [ 808.096556] RIP: 0033:0x466459 [ 808.099743] RSP: 002b:00007fd534b5e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 808.108469] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 808.115730] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000003 [ 808.122994] RBP: 00007fd534b5e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 808.130509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 808.137771] R13: 00007ffdc74258ff R14: 00007fd534b5e300 R15: 0000000000022000 17:01:52 executing program 0 (fault-call:2 fault-nth:1): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) 17:01:52 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:52 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:52 executing program 4: socket$caif_stream(0x25, 0x1, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x70000, 0x38b, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd=0xffffffffffffffff, 0xfffffc01}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000640)={0x2, 0x1, 0x4, 0x2, 0x1, {0x77359400}, {0x1, 0x0, 0x4, 0x28, 0x91, 0x8, "ab427e71"}, 0xfffffffe, 0x0, @planes=&(0x7f0000000600)={0x8, 0x1, @fd=r1, 0xffff}, 0x101}) 17:01:52 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x0, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2) 17:01:52 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:52 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x3ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x0, 0x100}) 17:01:52 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:52 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x1, 0x0, [{0xffffffff}, {}, {}, {}, {}, {}, {}, {0x4}], 0x0, 0x0, 0x0, 0x2}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) 17:01:52 executing program 4: socket$caif_stream(0x25, 0x1, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x70000, 0x38b, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:52 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:52 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x0, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, 0x0) 17:01:52 executing program 4: socket$caif_stream(0x25, 0x1, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x70000, 0x38b, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:52 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:52 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:52 executing program 0: sendmsg$alg(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)="db16569b596d8b9b6d97deaca08ef06d459ff083625481ed42e401fdc7b0a5dec7c2eb0a47f9dd319f954819a5fb7db05fac65ff0367779f3b03976555f139d468532359da30bc5aba44cca3afcc4bc5c40f54cb9e9c6b8cdbbc1e8b3bbdd4f6645f550f1abcd8372b86ad13b1", 0x6d}, {&(0x7f0000000140)="4d4d4eddb804127dbea8313bc99c2bf0c082caa68d2db3df3b", 0x19}, {&(0x7f0000000440)="4d42e25f60e251a9ea50287c4af30d8e5bd5ced1e738310a76d98eb0424c2eb81224779f230b820788f2fb0182d8f4a0132af8ae480aee17e5e2a75a73aec23381f91e1d6626674b91547388afb28f5dd02982f909a809c9891ee7e6dfe28bbb16bb3c87ea8eb3fe88870f76ecc7dceae9f69c1003b2a9a46db0564a86e858cef38e5679713a0aa241b4da701c2642eb2aa171cbc628127718780480f8a26ac5ab4a79166dbb1637cc4f6a00bb2d17fbf9ccaae1f5ba223c87b34f5b", 0xbc}, {&(0x7f0000000500)="84a5106a6b3c6d35990d0b39de12d964f81b690d9ab52c12e671ae51e27f2102c28f04cf2e3fb616fc5896afb65f371deb5fdfcb3475261fa72cd28a6ff765b68c63489ea34532ce4adad0f5f4dd3eedfe2b53b153f9c5a22f10d28530142aa72ca52db8326c4ad25db29edb3d20833a448f6bb4a1825cbc336e2a140f602dd4169395e499db339b7abc5daff199c501309723406166835d6a786a", 0x9b}, {&(0x7f00000005c0)="f871d256e88e6775f00939695c2498393aa1dfd50d44e39a91ae261419201d7229098212535d772d24797088ac365bd6492e2c4759dbd32b80838980018c6b8d51426c2d5da202267ecde1cb4ef80cedeedcff8f6cca11fe2a85a010f5d42e10ccb046e94a202e546aab51f125c1476da34d3cfd7e7e458293098f0699a7a676f18605870bd7523aa6b0743af39c94c7811ec97335e397f12bc15ef635c84f4ba850c2e7dc8f2ae0da26220fa372c573", 0xb0}], 0x5, &(0x7f0000000800)=[@iv={0xa0, 0x117, 0x2, 0x89, "06f6698ca97a972baf39aae29cca761976634d9140cc7c5f60ed33b6e2f992cb14def3893c1e1dae1396af56abaa304757ffb334d7ee79a9f2bbcbf4b49fb2290d28206bc0f5ecb7993d865a23e1fe0e190147704730c57240ca53f8f0808c364b44e009c3ccb8dcb1a6f8d79d7b4d1ec8ed3e7395363147c913ec4c515208628ead6036837c63a44a"}, @op={0x18}, @op={0x18}], 0xd0, 0x400c1}, 0x24000050) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}], 0x0, 0x0, 0x0, 0x0, 0xf}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000007c0)={0x3, 0x5, 0x1, 0x4000}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x2) 17:01:52 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x0, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, 0x0) 17:01:52 executing program 2: ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000100)) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x2, @sdr={0x38414762, 0x5}}) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0x6, 0x3, 0x2, 0x4800, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x2, 0x0, 0xed, 0x0, r2}) 17:01:52 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x0, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, 0x0) 17:01:52 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:52 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:52 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xfffffffffffffffd, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x80000001, 0x1, 0x4}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0xfae0, 0x6f, 0x0, 0x3}, {0x20, 0x40, 0x7, 0x6}, {0x40, 0x81, 0x3e, 0x4}, {0xfc00, 0x5, 0x9}, {0x2, 0xff, 0x8, 0xc94}, {0x8, 0x7f, 0x3f}, {0x7, 0x40, 0xf2, 0x1}]}, 0x10) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x2, @sliced={0x9, [0x1, 0xddf8, 0xf8ff, 0x0, 0x4, 0xff5, 0x2, 0x8001, 0x4, 0x6, 0xff, 0x1, 0x1000, 0x2, 0x0, 0xe63, 0x6, 0xfbff, 0x7, 0x710, 0x101, 0xfe00, 0x4, 0xfff, 0x8, 0x5, 0x200, 0x9, 0x8533, 0x6, 0x3, 0xae7, 0x7, 0x200, 0x100, 0x9, 0x6, 0x8, 0x400, 0x9, 0x9, 0x8000, 0x1, 0x9, 0x7, 0x7, 0x5, 0x3], 0xfd8f}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000280)={0x1, 0x0, [], {0x0, @reserved}}) 17:01:52 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000200)={0x0, @pix={0x81, 0x81, 0x3436324d, 0x0, 0x401, 0x100, 0xc, 0x100, 0x0, 0x3, 0x1, 0x1}}) 17:01:52 executing program 4: socket$caif_stream(0x25, 0x1, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x70000, 0x38b, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) [ 808.513002] vim2m vim2m.0: vidioc_s_fmt queue busy [ 808.530683] vim2m vim2m.0: vidioc_s_fmt queue busy 17:01:52 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:52 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:52 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x0, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)) 17:01:52 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0x7ff}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xfffffffe}, {0x0, 0x400}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) 17:01:52 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f0000000180)={0x3f, 0xd, 0x33, "e3158212b18236c39207cc0025179aed59a0c4e3ff0734f644c0ab7507b4c18455262c7e4ed9da6ebc73fc469a76d314e9fdf5b31a75ae397d58a2c3", 0x3c, "73679da2b4686f0c9ec763ed37b2aca469dbf19d7b409ef429ecceb5b0e181fa0d5bd3756390bec3dde7319c4d64dd054ba52cc6bb9a478f3bbf97b6", 0x28}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000300)={0x2, @pix={0x1, 0xfffeffff, 0x39565559, 0x8, 0x5, 0x1, 0x8, 0xfffffff8, 0x0, 0x0, 0x2, 0x1}}) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000240)={0x0, @bt={0x2, 0x7021, 0x1, 0x1, 0x30000, 0xc0000000, 0x51d, 0xfffffff9, 0x7, 0x53f4cc8e, 0x1, 0x1f, 0x5, 0x9, 0x16, 0x6, {0x40, 0x6}, 0x9, 0x6}}) 17:01:52 executing program 4: socket$caif_stream(0x25, 0x1, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x70000, 0x38b, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:52 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:52 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:52 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x0, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)) 17:01:52 executing program 0: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000340)={0x0, 0x6, 0x2, {0x2, @pix_mp={0x0, 0xffffffff, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000001c0)={0x2, @sliced={0x8000, [0x400, 0x3, 0x9, 0xfff, 0x401, 0x9, 0x3, 0x39, 0x1f, 0xfff, 0x9, 0xf6e4, 0x3f, 0xffff, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x1400, 0x14a, 0x8, 0x100, 0x6, 0xbf3, 0x8, 0x3, 0x48e, 0x25, 0x0, 0x3, 0x5, 0x3, 0x1000, 0x1, 0x3f, 0x3, 0xeab, 0x8, 0x100, 0xffff, 0x0, 0xfe9, 0x5, 0x9d72, 0x5, 0x8, 0x6], 0x1}}) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000006c0)={0x1, @sdr={0x20323159, 0x7fffffff}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) r0 = syz_open_dev$vim2m(&(0x7f0000000180)='/dev/video#\x00', 0x200, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000500)={0x1, @win={{0x1, 0xffffffff, 0x4800, 0x9}, 0x4, 0x1, &(0x7f0000000480)={{0x8, 0x8000, 0xfffff6d4, 0x5}, &(0x7f0000000440)={{0x0, 0x3, 0x1, 0x9}, &(0x7f0000000300)={{0x71, 0x6, 0x7f, 0x8}}}}, 0x1, &(0x7f00000004c0)="d798c03b4ffc4ee8e92dbe3f4b07ea1146fd8dd9db94d8735d", 0x4}}) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000000580)) recvfrom(r1, &(0x7f00000009c0)=""/165, 0xa5, 0x2, &(0x7f0000000a80)=@ethernet={0x306, @multicast}, 0x80) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000002c0)={0x9c0000, 0x4a, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x9b0905, 0x3ff, [], @value64=0x8}}) r2 = syz_open_dev$vim2m(&(0x7f0000000600)='/dev/video#\x00', 0x1, 0x2) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000880)=0x8) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000940)={0xff, 0x0, 0x2014, 0x7, 0xb5f, 0x100, 0x3, 0x1}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000640)) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000840)={0x1, 0x1, 0x2, "f7e0e7fe4a962cc9f9623b750d60eabefb30de4aa32ce131d58a48684c1c8959", 0x36314d59}) accept4$ax25(0xffffffffffffffff, &(0x7f00000008c0)={{}, [@remote, @null, @netrom, @rose, @bcast, @bcast, @remote, @default]}, &(0x7f0000000100)=0x48, 0x80800) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000980)={0x3, 0x1, [0x4, 0x3, 0x0, 0x8, 0x7, 0x536, 0x1000, 0x80000001]}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/mixer\x00', 0xdc400, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r3, 0x80044df9, &(0x7f0000000800)) 17:01:52 executing program 4: socket$caif_stream(0x25, 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x70000, 0x38b, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:52 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x0, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:52 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:52 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x0, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)) 17:01:52 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x3, 0x3, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000200)={0x8, 0x0, 0x4, 0x1000, 0x5, {0x0, 0xea60}, {0x5, 0x8, 0x71, 0x3, 0x9, 0x40, "3d4c18ea"}, 0x1f5, 0x4, @fd=0xffffffffffffffff, 0x1f}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000280)={0x9, 0x3, 0x4, 0x2, 0x6, {}, {0x3, 0x8, 0x7, 0x7f, 0x3f, 0xce, "f4761021"}, 0x0, 0x2, @fd=r2, 0x7}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x1}) 17:01:52 executing program 4: socket$caif_stream(0x25, 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x70000, 0x38b, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:52 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x0, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:52 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:52 executing program 5: sendmsg$alg(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)="db16569b596d8b9b6d97deaca08ef06d459ff083625481ed42e401fdc7b0a5dec7c2eb0a47f9dd319f954819a5fb7db05fac65ff0367779f3b03976555f139d468532359da30bc5aba44cca3afcc4bc5c40f54cb9e9c6b8cdbbc1e8b3bbdd4f6645f550f1abcd8372b86ad13b1", 0x6d}, {&(0x7f0000000140)="4d4d4eddb804127dbea8313bc99c2bf0c082caa68d2db3df3b", 0x19}, {&(0x7f0000000440)="4d42e25f60e251a9ea50287c4af30d8e5bd5ced1e738310a76d98eb0424c2eb81224779f230b820788f2fb0182d8f4a0132af8ae480aee17e5e2a75a73aec23381f91e1d6626674b91547388afb28f5dd02982f909a809c9891ee7e6dfe28bbb16bb3c87ea8eb3fe88870f76ecc7dceae9f69c1003b2a9a46db0564a86e858cef38e5679713a0aa241b4da701c2642eb2aa171cbc628127718780480f8a26ac5ab4a79166dbb1637cc4f6a00bb2d17fbf9ccaae1f5ba223c87b34f5b", 0xbc}, {&(0x7f0000000500)="84a5106a6b3c6d35990d0b39de12d964f81b690d9ab52c12e671ae51e27f2102c28f04cf2e3fb616fc5896afb65f371deb5fdfcb3475261fa72cd28a6ff765b68c63489ea34532ce4adad0f5f4dd3eedfe2b53b153f9c5a22f10d28530142aa72ca52db8326c4ad25db29edb3d20833a448f6bb4a1825cbc336e2a140f602dd4169395e499db339b7abc5daff199c501309723406166835d6a786a", 0x9b}, {&(0x7f00000005c0)="f871d256e88e6775f00939695c2498393aa1dfd50d44e39a91ae261419201d7229098212535d772d24797088ac365bd6492e2c4759dbd32b80838980018c6b8d51426c2d5da202267ecde1cb4ef80cedeedcff8f6cca11fe2a85a010f5d42e10ccb046e94a202e546aab51f125c1476da34d3cfd7e7e458293098f0699a7a676f18605870bd7523aa6b0743af39c94c7811ec97335e397f12bc15ef635c84f4ba850c2e7dc8f2ae0da26220fa372c573", 0xb0}], 0x5, &(0x7f0000000800)=[@iv={0xa0, 0x117, 0x2, 0x89, "06f6698ca97a972baf39aae29cca761976634d9140cc7c5f60ed33b6e2f992cb14def3893c1e1dae1396af56abaa304757ffb334d7ee79a9f2bbcbf4b49fb2290d28206bc0f5ecb7993d865a23e1fe0e190147704730c57240ca53f8f0808c364b44e009c3ccb8dcb1a6f8d79d7b4d1ec8ed3e7395363147c913ec4c515208628ead6036837c63a44a"}, @op={0x18}, @op={0x18}], 0xd0, 0x400c1}, 0x24000050) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}], 0x0, 0x0, 0x0, 0x0, 0xf}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000007c0)={0x3, 0x5, 0x1, 0x4000}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x2) 17:01:52 executing program 4: socket$caif_stream(0x25, 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x70000, 0x38b, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:52 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x0, 0x2}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000000c0)) [ 808.877859] vim2m vim2m.0: vidioc_s_fmt queue busy 17:01:53 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:53 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x0, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:53 executing program 5: sendmsg$alg(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)="db16569b596d8b9b6d97deaca08ef06d459ff083625481ed42e401fdc7b0a5dec7c2eb0a47f9dd319f954819a5fb7db05fac65ff0367779f3b03976555f139d468532359da30bc5aba44cca3afcc4bc5c40f54cb9e9c6b8cdbbc1e8b3bbdd4f6645f550f1abcd8372b86ad13b1", 0x6d}, {&(0x7f0000000140)="4d4d4eddb804127dbea8313bc99c2bf0c082caa68d2db3df3b", 0x19}, {&(0x7f0000000440)="4d42e25f60e251a9ea50287c4af30d8e5bd5ced1e738310a76d98eb0424c2eb81224779f230b820788f2fb0182d8f4a0132af8ae480aee17e5e2a75a73aec23381f91e1d6626674b91547388afb28f5dd02982f909a809c9891ee7e6dfe28bbb16bb3c87ea8eb3fe88870f76ecc7dceae9f69c1003b2a9a46db0564a86e858cef38e5679713a0aa241b4da701c2642eb2aa171cbc628127718780480f8a26ac5ab4a79166dbb1637cc4f6a00bb2d17fbf9ccaae1f5ba223c87b34f5b", 0xbc}, {&(0x7f0000000500)="84a5106a6b3c6d35990d0b39de12d964f81b690d9ab52c12e671ae51e27f2102c28f04cf2e3fb616fc5896afb65f371deb5fdfcb3475261fa72cd28a6ff765b68c63489ea34532ce4adad0f5f4dd3eedfe2b53b153f9c5a22f10d28530142aa72ca52db8326c4ad25db29edb3d20833a448f6bb4a1825cbc336e2a140f602dd4169395e499db339b7abc5daff199c501309723406166835d6a786a", 0x9b}, {&(0x7f00000005c0)="f871d256e88e6775f00939695c2498393aa1dfd50d44e39a91ae261419201d7229098212535d772d24797088ac365bd6492e2c4759dbd32b80838980018c6b8d51426c2d5da202267ecde1cb4ef80cedeedcff8f6cca11fe2a85a010f5d42e10ccb046e94a202e546aab51f125c1476da34d3cfd7e7e458293098f0699a7a676f18605870bd7523aa6b0743af39c94c7811ec97335e397f12bc15ef635c84f4ba850c2e7dc8f2ae0da26220fa372c573", 0xb0}], 0x5, &(0x7f0000000800)=[@iv={0xa0, 0x117, 0x2, 0x89, "06f6698ca97a972baf39aae29cca761976634d9140cc7c5f60ed33b6e2f992cb14def3893c1e1dae1396af56abaa304757ffb334d7ee79a9f2bbcbf4b49fb2290d28206bc0f5ecb7993d865a23e1fe0e190147704730c57240ca53f8f0808c364b44e009c3ccb8dcb1a6f8d79d7b4d1ec8ed3e7395363147c913ec4c515208628ead6036837c63a44a"}, @op={0x18}, @op={0x18}], 0xd0, 0x400c1}, 0x24000050) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}], 0x0, 0x0, 0x0, 0x0, 0xf}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000007c0)={0x3, 0x5, 0x1, 0x4000}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x2) 17:01:53 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x70000, 0x38b, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:53 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}, {}, {}, {}, {}, {}, {0x0, 0x6}]}}, 0xfffffffe}) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000100)={@rand_addr, @multicast2}, &(0x7f0000000140)=0xc) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0xc0000000, 0x2, 0x3, "bfcebbef473ffc35a1ee264fd7867caa32cd2c5f3de661fb03bdadb4ca59e74e", 0x44495658}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x2, 0xff, 0x1, {0x2, @vbi={0x5, 0x1, 0xeb6f, 0x3432564e, [0x0, 0x3ff], [0x40, 0x7], 0x13a}}, 0x6}) 17:01:53 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r4 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r4, 0xc02c5638, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000240)={0x9d0000, 0x0, 0x2, r5, 0x0, &(0x7f0000000200)={0x9a0001, 0x0, [], @value64}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)={0x7, 0x2, 0x4, 0x4000, 0xae9c, {0x77359400}, {0x4, 0x2, 0x1, 0xf9, 0x1f, 0x1f, "db14aebf"}, 0x8, 0x1, @offset=0x15a2, 0xf05, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)={0xff, 0x0, 0x4, 0x144, 0x5, {r2, r3/1000+10000}, {0x3, 0x0, 0x7b, 0x3, 0x40, 0x4, "8ecec601"}, 0x9, 0x2, @offset=0x5e5, 0x8001, 0x0, r6}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:53 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x80000001, 0x3, 0x4}) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x4, 0x9, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) r2 = socket$isdn(0x22, 0x3, 0x0) bind$isdn(r2, &(0x7f00000000c0), 0x6) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000100)={0x7, 0x3, 0x3, "a35155d91809889d2c7c2055bd19dd64631373b241ea3dc72c127a11b921621b", 0x47425247}) 17:01:53 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:53 executing program 4: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x70000, 0x38b, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) [ 809.647196] vim2m vim2m.0: vidioc_s_fmt queue busy 17:01:53 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:53 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x11) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x100, 0x101, 0x76, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x17}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x4}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x4}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x8}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x6}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20005885}, 0x50048000) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000140)) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x8811) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) 17:01:53 executing program 5: sendmsg$alg(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)="db16569b596d8b9b6d97deaca08ef06d459ff083625481ed42e401fdc7b0a5dec7c2eb0a47f9dd319f954819a5fb7db05fac65ff0367779f3b03976555f139d468532359da30bc5aba44cca3afcc4bc5c40f54cb9e9c6b8cdbbc1e8b3bbdd4f6645f550f1abcd8372b86ad13b1", 0x6d}, {&(0x7f0000000140)="4d4d4eddb804127dbea8313bc99c2bf0c082caa68d2db3df3b", 0x19}, {&(0x7f0000000440)="4d42e25f60e251a9ea50287c4af30d8e5bd5ced1e738310a76d98eb0424c2eb81224779f230b820788f2fb0182d8f4a0132af8ae480aee17e5e2a75a73aec23381f91e1d6626674b91547388afb28f5dd02982f909a809c9891ee7e6dfe28bbb16bb3c87ea8eb3fe88870f76ecc7dceae9f69c1003b2a9a46db0564a86e858cef38e5679713a0aa241b4da701c2642eb2aa171cbc628127718780480f8a26ac5ab4a79166dbb1637cc4f6a00bb2d17fbf9ccaae1f5ba223c87b34f5b", 0xbc}, {&(0x7f0000000500)="84a5106a6b3c6d35990d0b39de12d964f81b690d9ab52c12e671ae51e27f2102c28f04cf2e3fb616fc5896afb65f371deb5fdfcb3475261fa72cd28a6ff765b68c63489ea34532ce4adad0f5f4dd3eedfe2b53b153f9c5a22f10d28530142aa72ca52db8326c4ad25db29edb3d20833a448f6bb4a1825cbc336e2a140f602dd4169395e499db339b7abc5daff199c501309723406166835d6a786a", 0x9b}, {&(0x7f00000005c0)="f871d256e88e6775f00939695c2498393aa1dfd50d44e39a91ae261419201d7229098212535d772d24797088ac365bd6492e2c4759dbd32b80838980018c6b8d51426c2d5da202267ecde1cb4ef80cedeedcff8f6cca11fe2a85a010f5d42e10ccb046e94a202e546aab51f125c1476da34d3cfd7e7e458293098f0699a7a676f18605870bd7523aa6b0743af39c94c7811ec97335e397f12bc15ef635c84f4ba850c2e7dc8f2ae0da26220fa372c573", 0xb0}], 0x5, &(0x7f0000000800)=[@iv={0xa0, 0x117, 0x2, 0x89, "06f6698ca97a972baf39aae29cca761976634d9140cc7c5f60ed33b6e2f992cb14def3893c1e1dae1396af56abaa304757ffb334d7ee79a9f2bbcbf4b49fb2290d28206bc0f5ecb7993d865a23e1fe0e190147704730c57240ca53f8f0808c364b44e009c3ccb8dcb1a6f8d79d7b4d1ec8ed3e7395363147c913ec4c515208628ead6036837c63a44a"}, @op={0x18}, @op={0x18}], 0xd0, 0x400c1}, 0x24000050) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}], 0x0, 0x0, 0x0, 0x0, 0xf}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000007c0)={0x3, 0x5, 0x1, 0x4000}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x2) 17:01:53 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:53 executing program 4: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x70000, 0x38b, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:53 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0xc, [{0xffffffff}, {}, {0x2}, {}, {}, {0x0, 0x4}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) 17:01:53 executing program 4: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x70000, 0x38b, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:53 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:53 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x7ff8, 0x7, 0x1, {0x3, @raw_data="c69751f7367760699e29d35c00ea216c1ac158196187d0a2f8cb292c23b7b57af14de05480c939f48b6764a3ea02b4b9941d526c7ba0819631868a5894997f02a01325260d13614c8e91d20c1349067954fbb66b623f016072376cd462fb55bfcc121baa0490fd84eaec463eab608541f4d5d34a547779ba198cbb5fdd947378bb42de545c5c572197df8a4ea403ecd05cec125728a6f819c2957139055f2e8611a0f3770095a54a2dce6b32cbf6b30b91ae72aa21d7a112aff79bdab1809292ac914f5f632efd27"}, 0xffffffff}) 17:01:53 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x70000, 0x38b, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:53 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x81, 0x2, 0x1, "d8062bde6e46311431cefc76d96b51666c67ddffe77c44298f6a1eaa259d5182", 0x32315559}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) 17:01:53 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) [ 809.817943] vim2m vim2m.0: vidioc_s_fmt queue busy 17:01:54 executing program 5: sendmsg$alg(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)="db16569b596d8b9b6d97deaca08ef06d459ff083625481ed42e401fdc7b0a5dec7c2eb0a47f9dd319f954819a5fb7db05fac65ff0367779f3b03976555f139d468532359da30bc5aba44cca3afcc4bc5c40f54cb9e9c6b8cdbbc1e8b3bbdd4f6645f550f1abcd8372b86ad13b1", 0x6d}, {&(0x7f0000000140)="4d4d4eddb804127dbea8313bc99c2bf0c082caa68d2db3df3b", 0x19}, {&(0x7f0000000440)="4d42e25f60e251a9ea50287c4af30d8e5bd5ced1e738310a76d98eb0424c2eb81224779f230b820788f2fb0182d8f4a0132af8ae480aee17e5e2a75a73aec23381f91e1d6626674b91547388afb28f5dd02982f909a809c9891ee7e6dfe28bbb16bb3c87ea8eb3fe88870f76ecc7dceae9f69c1003b2a9a46db0564a86e858cef38e5679713a0aa241b4da701c2642eb2aa171cbc628127718780480f8a26ac5ab4a79166dbb1637cc4f6a00bb2d17fbf9ccaae1f5ba223c87b34f5b", 0xbc}, {&(0x7f0000000500)="84a5106a6b3c6d35990d0b39de12d964f81b690d9ab52c12e671ae51e27f2102c28f04cf2e3fb616fc5896afb65f371deb5fdfcb3475261fa72cd28a6ff765b68c63489ea34532ce4adad0f5f4dd3eedfe2b53b153f9c5a22f10d28530142aa72ca52db8326c4ad25db29edb3d20833a448f6bb4a1825cbc336e2a140f602dd4169395e499db339b7abc5daff199c501309723406166835d6a786a", 0x9b}, {&(0x7f00000005c0)="f871d256e88e6775f00939695c2498393aa1dfd50d44e39a91ae261419201d7229098212535d772d24797088ac365bd6492e2c4759dbd32b80838980018c6b8d51426c2d5da202267ecde1cb4ef80cedeedcff8f6cca11fe2a85a010f5d42e10ccb046e94a202e546aab51f125c1476da34d3cfd7e7e458293098f0699a7a676f18605870bd7523aa6b0743af39c94c7811ec97335e397f12bc15ef635c84f4ba850c2e7dc8f2ae0da26220fa372c573", 0xb0}], 0x5, &(0x7f0000000800)=[@iv={0xa0, 0x117, 0x2, 0x89, "06f6698ca97a972baf39aae29cca761976634d9140cc7c5f60ed33b6e2f992cb14def3893c1e1dae1396af56abaa304757ffb334d7ee79a9f2bbcbf4b49fb2290d28206bc0f5ecb7993d865a23e1fe0e190147704730c57240ca53f8f0808c364b44e009c3ccb8dcb1a6f8d79d7b4d1ec8ed3e7395363147c913ec4c515208628ead6036837c63a44a"}, @op={0x18}, @op={0x18}], 0xd0, 0x400c1}, 0x24000050) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}], 0x0, 0x0, 0x0, 0x0, 0xf}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000007c0)={0x3, 0x5, 0x1, 0x4000}) 17:01:54 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:54 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x70000, 0x38b, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:54 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:54 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:54 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) [ 809.909404] vim2m vim2m.0: vidioc_s_fmt queue busy 17:01:54 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:54 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x70000, 0x38b, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:54 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x3, 0x0, 0x4, 0x144c, 0x0, {r2, r3/1000+10000}, {0x5, 0x0, 0x3f, 0x3, 0x6, 0x7, "2ccdcc85"}, 0xfb6b, 0x1, @userptr=0x5eedaef}) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000006c0)={0x1, @win={{0x1, 0x1, 0x6, 0x7}, 0x9, 0x6d43, &(0x7f0000000500)={{0x3, 0x8, 0xffff, 0x13}, &(0x7f00000004c0)={{0xaa2, 0x9, 0x1, 0x1}, &(0x7f0000000480)={{0xfffffffa, 0xfffeffff, 0x7ff}}}}, 0x200, &(0x7f0000000540)="0f6b072c6c45a1250f4c5e786f38d7a0397059d7bc41dafe64b4da40d54d1a0a57b72c85fd041aa3b4bbeab6ccb4eff8afc2049c697e46107ff0b9e9d21c6a7400e5cb37c1f3b10ab3c885664216cd45e473aa05254ab10303ffca385adacd99f8fa13f43b8aa7feb0c2c89640d7a0", 0xad}}) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f00000000c0)={0x8001, 0x42303159, 0x1, @stepwise={0x100, 0x3, 0x3, 0x7f, 0x9, 0x2}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x2, @sdr={0x32314d54, 0x6}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x4, 0x2) 17:01:54 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:54 executing program 5: sendmsg$alg(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)="db16569b596d8b9b6d97deaca08ef06d459ff083625481ed42e401fdc7b0a5dec7c2eb0a47f9dd319f954819a5fb7db05fac65ff0367779f3b03976555f139d468532359da30bc5aba44cca3afcc4bc5c40f54cb9e9c6b8cdbbc1e8b3bbdd4f6645f550f1abcd8372b86ad13b1", 0x6d}, {&(0x7f0000000140)="4d4d4eddb804127dbea8313bc99c2bf0c082caa68d2db3df3b", 0x19}, {&(0x7f0000000440)="4d42e25f60e251a9ea50287c4af30d8e5bd5ced1e738310a76d98eb0424c2eb81224779f230b820788f2fb0182d8f4a0132af8ae480aee17e5e2a75a73aec23381f91e1d6626674b91547388afb28f5dd02982f909a809c9891ee7e6dfe28bbb16bb3c87ea8eb3fe88870f76ecc7dceae9f69c1003b2a9a46db0564a86e858cef38e5679713a0aa241b4da701c2642eb2aa171cbc628127718780480f8a26ac5ab4a79166dbb1637cc4f6a00bb2d17fbf9ccaae1f5ba223c87b34f5b", 0xbc}, {&(0x7f0000000500)="84a5106a6b3c6d35990d0b39de12d964f81b690d9ab52c12e671ae51e27f2102c28f04cf2e3fb616fc5896afb65f371deb5fdfcb3475261fa72cd28a6ff765b68c63489ea34532ce4adad0f5f4dd3eedfe2b53b153f9c5a22f10d28530142aa72ca52db8326c4ad25db29edb3d20833a448f6bb4a1825cbc336e2a140f602dd4169395e499db339b7abc5daff199c501309723406166835d6a786a", 0x9b}, {&(0x7f00000005c0)="f871d256e88e6775f00939695c2498393aa1dfd50d44e39a91ae261419201d7229098212535d772d24797088ac365bd6492e2c4759dbd32b80838980018c6b8d51426c2d5da202267ecde1cb4ef80cedeedcff8f6cca11fe2a85a010f5d42e10ccb046e94a202e546aab51f125c1476da34d3cfd7e7e458293098f0699a7a676f18605870bd7523aa6b0743af39c94c7811ec97335e397f12bc15ef635c84f4ba850c2e7dc8f2ae0da26220fa372c573", 0xb0}], 0x5, &(0x7f0000000800)=[@iv={0xa0, 0x117, 0x2, 0x89, "06f6698ca97a972baf39aae29cca761976634d9140cc7c5f60ed33b6e2f992cb14def3893c1e1dae1396af56abaa304757ffb334d7ee79a9f2bbcbf4b49fb2290d28206bc0f5ecb7993d865a23e1fe0e190147704730c57240ca53f8f0808c364b44e009c3ccb8dcb1a6f8d79d7b4d1ec8ed3e7395363147c913ec4c515208628ead6036837c63a44a"}, @op={0x18}, @op={0x18}], 0xd0, 0x400c1}, 0x24000050) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}], 0x0, 0x0, 0x0, 0x0, 0xf}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) 17:01:54 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x70000, 0x38b, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:54 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) 17:01:54 executing program 2: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000280)={0x80000000, 0x1, 0x4, 0x0, 0x2, {0x0, 0x2710}, {0x3, 0x2, 0x0, 0x0, 0x3f, 0x7, "b9372870"}, 0x1, 0x7, @offset=0x3, 0xfffffff7, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000300)={0x65, 0x0, 0x4, 0x0, 0x5, {}, {0x1, 0x2, 0x8, 0x7, 0x0, 0x1f, "a9ea9dd1"}, 0x1000, 0x3, @fd, 0x101, 0x0, r0}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x100000001, 0x2) r2 = socket(0x5, 0x3, 0x8) ioctl$SIOCAX25ADDFWD(r2, 0x89ea, &(0x7f00000000c0)={@bcast, @bcast}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x7fffffff, 0x0, 0x2, {0x1, @vbi={0xff, 0x20, 0xfffffffb, 0x51424752, [0xfff, 0x77], [0x0, 0x8], 0x13a}}, 0x5255}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) getpeername$ax25(r2, &(0x7f0000000380)={{}, [@rose, @bcast, @remote, @bcast, @default, @default, @bcast, @rose]}, &(0x7f0000000100)=0x48) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000140)) [ 810.033262] vim2m vim2m.0: vidioc_s_fmt queue busy 17:01:54 executing program 5: sendmsg$alg(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)="db16569b596d8b9b6d97deaca08ef06d459ff083625481ed42e401fdc7b0a5dec7c2eb0a47f9dd319f954819a5fb7db05fac65ff0367779f3b03976555f139d468532359da30bc5aba44cca3afcc4bc5c40f54cb9e9c6b8cdbbc1e8b3bbdd4f6645f550f1abcd8372b86ad13b1", 0x6d}, {&(0x7f0000000140)="4d4d4eddb804127dbea8313bc99c2bf0c082caa68d2db3df3b", 0x19}, {&(0x7f0000000440)="4d42e25f60e251a9ea50287c4af30d8e5bd5ced1e738310a76d98eb0424c2eb81224779f230b820788f2fb0182d8f4a0132af8ae480aee17e5e2a75a73aec23381f91e1d6626674b91547388afb28f5dd02982f909a809c9891ee7e6dfe28bbb16bb3c87ea8eb3fe88870f76ecc7dceae9f69c1003b2a9a46db0564a86e858cef38e5679713a0aa241b4da701c2642eb2aa171cbc628127718780480f8a26ac5ab4a79166dbb1637cc4f6a00bb2d17fbf9ccaae1f5ba223c87b34f5b", 0xbc}, {&(0x7f0000000500)="84a5106a6b3c6d35990d0b39de12d964f81b690d9ab52c12e671ae51e27f2102c28f04cf2e3fb616fc5896afb65f371deb5fdfcb3475261fa72cd28a6ff765b68c63489ea34532ce4adad0f5f4dd3eedfe2b53b153f9c5a22f10d28530142aa72ca52db8326c4ad25db29edb3d20833a448f6bb4a1825cbc336e2a140f602dd4169395e499db339b7abc5daff199c501309723406166835d6a786a", 0x9b}, {&(0x7f00000005c0)="f871d256e88e6775f00939695c2498393aa1dfd50d44e39a91ae261419201d7229098212535d772d24797088ac365bd6492e2c4759dbd32b80838980018c6b8d51426c2d5da202267ecde1cb4ef80cedeedcff8f6cca11fe2a85a010f5d42e10ccb046e94a202e546aab51f125c1476da34d3cfd7e7e458293098f0699a7a676f18605870bd7523aa6b0743af39c94c7811ec97335e397f12bc15ef635c84f4ba850c2e7dc8f2ae0da26220fa372c573", 0xb0}], 0x5, &(0x7f0000000800)=[@iv={0xa0, 0x117, 0x2, 0x89, "06f6698ca97a972baf39aae29cca761976634d9140cc7c5f60ed33b6e2f992cb14def3893c1e1dae1396af56abaa304757ffb334d7ee79a9f2bbcbf4b49fb2290d28206bc0f5ecb7993d865a23e1fe0e190147704730c57240ca53f8f0808c364b44e009c3ccb8dcb1a6f8d79d7b4d1ec8ed3e7395363147c913ec4c515208628ead6036837c63a44a"}, @op={0x18}, @op={0x18}], 0xd0, 0x400c1}, 0x24000050) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}], 0x0, 0x0, 0x0, 0x0, 0xf}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) 17:01:54 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) 17:01:54 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:54 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000100)=0x1) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x0, @sliced={0xffff, [0x8001, 0xfffb, 0x3f, 0x7f, 0x80, 0xef44, 0xff, 0x7f, 0x3, 0x20, 0x81, 0x9, 0x1, 0x5, 0x401, 0x9, 0xfff, 0x7fff, 0x40, 0x101, 0x101, 0x62, 0x9, 0x803, 0x6, 0x0, 0x1, 0x40, 0x8, 0xad73, 0x8, 0x0, 0x80, 0x5, 0x8000, 0x4, 0xa92, 0x9c20, 0x2, 0x7, 0x78, 0x7, 0x800, 0xfeff, 0x5, 0xd, 0x1, 0x1], 0x3}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) 17:01:54 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x70000, 0x38b, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) [ 810.108082] vim2m vim2m.0: vidioc_s_fmt queue busy 17:01:54 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) 17:01:54 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:54 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:54 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x70000, 0x38b, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:54 executing program 5: sendmsg$alg(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)="db16569b596d8b9b6d97deaca08ef06d459ff083625481ed42e401fdc7b0a5dec7c2eb0a47f9dd319f954819a5fb7db05fac65ff0367779f3b03976555f139d468532359da30bc5aba44cca3afcc4bc5c40f54cb9e9c6b8cdbbc1e8b3bbdd4f6645f550f1abcd8372b86ad13b1", 0x6d}, {&(0x7f0000000140)="4d4d4eddb804127dbea8313bc99c2bf0c082caa68d2db3df3b", 0x19}, {&(0x7f0000000440)="4d42e25f60e251a9ea50287c4af30d8e5bd5ced1e738310a76d98eb0424c2eb81224779f230b820788f2fb0182d8f4a0132af8ae480aee17e5e2a75a73aec23381f91e1d6626674b91547388afb28f5dd02982f909a809c9891ee7e6dfe28bbb16bb3c87ea8eb3fe88870f76ecc7dceae9f69c1003b2a9a46db0564a86e858cef38e5679713a0aa241b4da701c2642eb2aa171cbc628127718780480f8a26ac5ab4a79166dbb1637cc4f6a00bb2d17fbf9ccaae1f5ba223c87b34f5b", 0xbc}, {&(0x7f0000000500)="84a5106a6b3c6d35990d0b39de12d964f81b690d9ab52c12e671ae51e27f2102c28f04cf2e3fb616fc5896afb65f371deb5fdfcb3475261fa72cd28a6ff765b68c63489ea34532ce4adad0f5f4dd3eedfe2b53b153f9c5a22f10d28530142aa72ca52db8326c4ad25db29edb3d20833a448f6bb4a1825cbc336e2a140f602dd4169395e499db339b7abc5daff199c501309723406166835d6a786a", 0x9b}, {&(0x7f00000005c0)="f871d256e88e6775f00939695c2498393aa1dfd50d44e39a91ae261419201d7229098212535d772d24797088ac365bd6492e2c4759dbd32b80838980018c6b8d51426c2d5da202267ecde1cb4ef80cedeedcff8f6cca11fe2a85a010f5d42e10ccb046e94a202e546aab51f125c1476da34d3cfd7e7e458293098f0699a7a676f18605870bd7523aa6b0743af39c94c7811ec97335e397f12bc15ef635c84f4ba850c2e7dc8f2ae0da26220fa372c573", 0xb0}], 0x5, &(0x7f0000000800)=[@iv={0xa0, 0x117, 0x2, 0x89, "06f6698ca97a972baf39aae29cca761976634d9140cc7c5f60ed33b6e2f992cb14def3893c1e1dae1396af56abaa304757ffb334d7ee79a9f2bbcbf4b49fb2290d28206bc0f5ecb7993d865a23e1fe0e190147704730c57240ca53f8f0808c364b44e009c3ccb8dcb1a6f8d79d7b4d1ec8ed3e7395363147c913ec4c515208628ead6036837c63a44a"}, @op={0x18}, @op={0x18}], 0xd0, 0x400c1}, 0x24000050) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) 17:01:54 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:54 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x70000, 0x38b, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:54 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xffffffffffffffff}) 17:01:54 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:54 executing program 5: sendmsg$alg(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)="db16569b596d8b9b6d97deaca08ef06d459ff083625481ed42e401fdc7b0a5dec7c2eb0a47f9dd319f954819a5fb7db05fac65ff0367779f3b03976555f139d468532359da30bc5aba44cca3afcc4bc5c40f54cb9e9c6b8cdbbc1e8b3bbdd4f6645f550f1abcd8372b86ad13b1", 0x6d}, {&(0x7f0000000140)="4d4d4eddb804127dbea8313bc99c2bf0c082caa68d2db3df3b", 0x19}, {&(0x7f0000000440)="4d42e25f60e251a9ea50287c4af30d8e5bd5ced1e738310a76d98eb0424c2eb81224779f230b820788f2fb0182d8f4a0132af8ae480aee17e5e2a75a73aec23381f91e1d6626674b91547388afb28f5dd02982f909a809c9891ee7e6dfe28bbb16bb3c87ea8eb3fe88870f76ecc7dceae9f69c1003b2a9a46db0564a86e858cef38e5679713a0aa241b4da701c2642eb2aa171cbc628127718780480f8a26ac5ab4a79166dbb1637cc4f6a00bb2d17fbf9ccaae1f5ba223c87b34f5b", 0xbc}, {&(0x7f0000000500)="84a5106a6b3c6d35990d0b39de12d964f81b690d9ab52c12e671ae51e27f2102c28f04cf2e3fb616fc5896afb65f371deb5fdfcb3475261fa72cd28a6ff765b68c63489ea34532ce4adad0f5f4dd3eedfe2b53b153f9c5a22f10d28530142aa72ca52db8326c4ad25db29edb3d20833a448f6bb4a1825cbc336e2a140f602dd4169395e499db339b7abc5daff199c501309723406166835d6a786a", 0x9b}, {&(0x7f00000005c0)="f871d256e88e6775f00939695c2498393aa1dfd50d44e39a91ae261419201d7229098212535d772d24797088ac365bd6492e2c4759dbd32b80838980018c6b8d51426c2d5da202267ecde1cb4ef80cedeedcff8f6cca11fe2a85a010f5d42e10ccb046e94a202e546aab51f125c1476da34d3cfd7e7e458293098f0699a7a676f18605870bd7523aa6b0743af39c94c7811ec97335e397f12bc15ef635c84f4ba850c2e7dc8f2ae0da26220fa372c573", 0xb0}], 0x5, &(0x7f0000000800)=[@iv={0xa0, 0x117, 0x2, 0x89, "06f6698ca97a972baf39aae29cca761976634d9140cc7c5f60ed33b6e2f992cb14def3893c1e1dae1396af56abaa304757ffb334d7ee79a9f2bbcbf4b49fb2290d28206bc0f5ecb7993d865a23e1fe0e190147704730c57240ca53f8f0808c364b44e009c3ccb8dcb1a6f8d79d7b4d1ec8ed3e7395363147c913ec4c515208628ead6036837c63a44a"}, @op={0x18}, @op={0x18}], 0xd0, 0x400c1}, 0x24000050) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) 17:01:54 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000080)={0x3, 0x2, 0x7fffffff, 0x80000, r1}) 17:01:54 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:54 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:54 executing program 5: sendmsg$alg(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)="db16569b596d8b9b6d97deaca08ef06d459ff083625481ed42e401fdc7b0a5dec7c2eb0a47f9dd319f954819a5fb7db05fac65ff0367779f3b03976555f139d468532359da30bc5aba44cca3afcc4bc5c40f54cb9e9c6b8cdbbc1e8b3bbdd4f6645f550f1abcd8372b86ad13b1", 0x6d}, {&(0x7f0000000140)="4d4d4eddb804127dbea8313bc99c2bf0c082caa68d2db3df3b", 0x19}, {&(0x7f0000000440)="4d42e25f60e251a9ea50287c4af30d8e5bd5ced1e738310a76d98eb0424c2eb81224779f230b820788f2fb0182d8f4a0132af8ae480aee17e5e2a75a73aec23381f91e1d6626674b91547388afb28f5dd02982f909a809c9891ee7e6dfe28bbb16bb3c87ea8eb3fe88870f76ecc7dceae9f69c1003b2a9a46db0564a86e858cef38e5679713a0aa241b4da701c2642eb2aa171cbc628127718780480f8a26ac5ab4a79166dbb1637cc4f6a00bb2d17fbf9ccaae1f5ba223c87b34f5b", 0xbc}, {&(0x7f0000000500)="84a5106a6b3c6d35990d0b39de12d964f81b690d9ab52c12e671ae51e27f2102c28f04cf2e3fb616fc5896afb65f371deb5fdfcb3475261fa72cd28a6ff765b68c63489ea34532ce4adad0f5f4dd3eedfe2b53b153f9c5a22f10d28530142aa72ca52db8326c4ad25db29edb3d20833a448f6bb4a1825cbc336e2a140f602dd4169395e499db339b7abc5daff199c501309723406166835d6a786a", 0x9b}, {&(0x7f00000005c0)="f871d256e88e6775f00939695c2498393aa1dfd50d44e39a91ae261419201d7229098212535d772d24797088ac365bd6492e2c4759dbd32b80838980018c6b8d51426c2d5da202267ecde1cb4ef80cedeedcff8f6cca11fe2a85a010f5d42e10ccb046e94a202e546aab51f125c1476da34d3cfd7e7e458293098f0699a7a676f18605870bd7523aa6b0743af39c94c7811ec97335e397f12bc15ef635c84f4ba850c2e7dc8f2ae0da26220fa372c573", 0xb0}], 0x5, &(0x7f0000000800)=[@iv={0xa0, 0x117, 0x2, 0x89, "06f6698ca97a972baf39aae29cca761976634d9140cc7c5f60ed33b6e2f992cb14def3893c1e1dae1396af56abaa304757ffb334d7ee79a9f2bbcbf4b49fb2290d28206bc0f5ecb7993d865a23e1fe0e190147704730c57240ca53f8f0808c364b44e009c3ccb8dcb1a6f8d79d7b4d1ec8ed3e7395363147c913ec4c515208628ead6036837c63a44a"}, @op={0x18}, @op={0x18}], 0xd0, 0x400c1}, 0x24000050) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) 17:01:54 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x70000, 0x38b, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:54 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000100)={0xfff, 0x2, 0x2, "f8e620bf0e7507d2bc65699d6ec55cc0453b1333df2fc51051b6f1d59581373a", 0x7ab2ae1b93201edf}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000200)={0x9b0000, 0x1f616137, 0x8, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x9e0905, 0x2, [], @value=0xf83}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 17:01:54 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000080)=0x5) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:54 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, 0x0) 17:01:54 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x100, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:54 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x70000, 0x38b, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:54 executing program 5: sendmsg$alg(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)="db16569b596d8b9b6d97deaca08ef06d459ff083625481ed42e401fdc7b0a5dec7c2eb0a47f9dd319f954819a5fb7db05fac65ff0367779f3b03976555f139d468532359da30bc5aba44cca3afcc4bc5c40f54cb9e9c6b8cdbbc1e8b3bbdd4f6645f550f1abcd8372b86ad13b1", 0x6d}, {&(0x7f0000000140)="4d4d4eddb804127dbea8313bc99c2bf0c082caa68d2db3df3b", 0x19}, {&(0x7f0000000440)="4d42e25f60e251a9ea50287c4af30d8e5bd5ced1e738310a76d98eb0424c2eb81224779f230b820788f2fb0182d8f4a0132af8ae480aee17e5e2a75a73aec23381f91e1d6626674b91547388afb28f5dd02982f909a809c9891ee7e6dfe28bbb16bb3c87ea8eb3fe88870f76ecc7dceae9f69c1003b2a9a46db0564a86e858cef38e5679713a0aa241b4da701c2642eb2aa171cbc628127718780480f8a26ac5ab4a79166dbb1637cc4f6a00bb2d17fbf9ccaae1f5ba223c87b34f5b", 0xbc}, {&(0x7f0000000500)="84a5106a6b3c6d35990d0b39de12d964f81b690d9ab52c12e671ae51e27f2102c28f04cf2e3fb616fc5896afb65f371deb5fdfcb3475261fa72cd28a6ff765b68c63489ea34532ce4adad0f5f4dd3eedfe2b53b153f9c5a22f10d28530142aa72ca52db8326c4ad25db29edb3d20833a448f6bb4a1825cbc336e2a140f602dd4169395e499db339b7abc5daff199c501309723406166835d6a786a", 0x9b}, {&(0x7f00000005c0)="f871d256e88e6775f00939695c2498393aa1dfd50d44e39a91ae261419201d7229098212535d772d24797088ac365bd6492e2c4759dbd32b80838980018c6b8d51426c2d5da202267ecde1cb4ef80cedeedcff8f6cca11fe2a85a010f5d42e10ccb046e94a202e546aab51f125c1476da34d3cfd7e7e458293098f0699a7a676f18605870bd7523aa6b0743af39c94c7811ec97335e397f12bc15ef635c84f4ba850c2e7dc8f2ae0da26220fa372c573", 0xb0}], 0x5, &(0x7f0000000800)=[@iv={0xa0, 0x117, 0x2, 0x89, "06f6698ca97a972baf39aae29cca761976634d9140cc7c5f60ed33b6e2f992cb14def3893c1e1dae1396af56abaa304757ffb334d7ee79a9f2bbcbf4b49fb2290d28206bc0f5ecb7993d865a23e1fe0e190147704730c57240ca53f8f0808c364b44e009c3ccb8dcb1a6f8d79d7b4d1ec8ed3e7395363147c913ec4c515208628ead6036837c63a44a"}, @op={0x18}, @op={0x18}], 0xd0, 0x400c1}, 0x24000050) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}], 0x0, 0x0, 0x0, 0x0, 0xf}}}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) 17:01:54 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000140)={0x1f, 0x30364d54, 0x2, @stepwise={0x80000001, 0x980a, 0x3, 0x3, 0x16, 0x7}}) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000001c0)) 17:01:54 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, 0x0) 17:01:54 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x0, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x70000, 0x38b, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:54 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x6, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:54 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x0, 0x3ff}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0x3, 0x800}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x1, 0x6, 0x0, 0xc0000}) 17:01:54 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, 0x0) 17:01:54 executing program 5: sendmsg$alg(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)="db16569b596d8b9b6d97deaca08ef06d459ff083625481ed42e401fdc7b0a5dec7c2eb0a47f9dd319f954819a5fb7db05fac65ff0367779f3b03976555f139d468532359da30bc5aba44cca3afcc4bc5c40f54cb9e9c6b8cdbbc1e8b3bbdd4f6645f550f1abcd8372b86ad13b1", 0x6d}, {&(0x7f0000000140)="4d4d4eddb804127dbea8313bc99c2bf0c082caa68d2db3df3b", 0x19}, {&(0x7f0000000440)="4d42e25f60e251a9ea50287c4af30d8e5bd5ced1e738310a76d98eb0424c2eb81224779f230b820788f2fb0182d8f4a0132af8ae480aee17e5e2a75a73aec23381f91e1d6626674b91547388afb28f5dd02982f909a809c9891ee7e6dfe28bbb16bb3c87ea8eb3fe88870f76ecc7dceae9f69c1003b2a9a46db0564a86e858cef38e5679713a0aa241b4da701c2642eb2aa171cbc628127718780480f8a26ac5ab4a79166dbb1637cc4f6a00bb2d17fbf9ccaae1f5ba223c87b34f5b", 0xbc}, {&(0x7f0000000500)="84a5106a6b3c6d35990d0b39de12d964f81b690d9ab52c12e671ae51e27f2102c28f04cf2e3fb616fc5896afb65f371deb5fdfcb3475261fa72cd28a6ff765b68c63489ea34532ce4adad0f5f4dd3eedfe2b53b153f9c5a22f10d28530142aa72ca52db8326c4ad25db29edb3d20833a448f6bb4a1825cbc336e2a140f602dd4169395e499db339b7abc5daff199c501309723406166835d6a786a", 0x9b}, {&(0x7f00000005c0)="f871d256e88e6775f00939695c2498393aa1dfd50d44e39a91ae261419201d7229098212535d772d24797088ac365bd6492e2c4759dbd32b80838980018c6b8d51426c2d5da202267ecde1cb4ef80cedeedcff8f6cca11fe2a85a010f5d42e10ccb046e94a202e546aab51f125c1476da34d3cfd7e7e458293098f0699a7a676f18605870bd7523aa6b0743af39c94c7811ec97335e397f12bc15ef635c84f4ba850c2e7dc8f2ae0da26220fa372c573", 0xb0}], 0x5, &(0x7f0000000800)=[@iv={0xa0, 0x117, 0x2, 0x89, "06f6698ca97a972baf39aae29cca761976634d9140cc7c5f60ed33b6e2f992cb14def3893c1e1dae1396af56abaa304757ffb334d7ee79a9f2bbcbf4b49fb2290d28206bc0f5ecb7993d865a23e1fe0e190147704730c57240ca53f8f0808c364b44e009c3ccb8dcb1a6f8d79d7b4d1ec8ed3e7395363147c913ec4c515208628ead6036837c63a44a"}, @op={0x18}, @op={0x18}], 0xd0, 0x400c1}, 0x24000050) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}], 0x0, 0x0, 0x0, 0x0, 0xf}}}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) 17:01:54 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:54 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vim2m\x00', 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x31303553, 0x0, 0x0, [{0xffffffff}]}}}) r1 = syz_open_dev$vim2m(&(0x7f00000001c0)='/dev/video#\x00', 0x93, 0x2) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)={0xf8982e41, 0x3, 0x4, 0x4, 0x0, {0x77359400}, {0x1, 0x9, 0x2, 0x7f, 0x5, 0x0, "0c143b56"}, 0xff, 0x4, @planes=&(0x7f0000000580)={0x7f, 0x5, @fd=0xffffffffffffffff, 0x7fffffff}, 0x8}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000640)={0x9, 0x197864ef0e3373b5, 0x4, 0x2, 0x9a13, {r2, r3/1000+60000}, {0x4, 0x1, 0x81, 0x80, 0x36, 0x9, "73508fb4"}, 0x6, 0x5, @fd=r4, 0xfff}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) 17:01:54 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x0, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x70000, 0x38b, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:54 executing program 5: sendmsg$alg(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)="db16569b596d8b9b6d97deaca08ef06d459ff083625481ed42e401fdc7b0a5dec7c2eb0a47f9dd319f954819a5fb7db05fac65ff0367779f3b03976555f139d468532359da30bc5aba44cca3afcc4bc5c40f54cb9e9c6b8cdbbc1e8b3bbdd4f6645f550f1abcd8372b86ad13b1", 0x6d}, {&(0x7f0000000140)="4d4d4eddb804127dbea8313bc99c2bf0c082caa68d2db3df3b", 0x19}, {&(0x7f0000000440)="4d42e25f60e251a9ea50287c4af30d8e5bd5ced1e738310a76d98eb0424c2eb81224779f230b820788f2fb0182d8f4a0132af8ae480aee17e5e2a75a73aec23381f91e1d6626674b91547388afb28f5dd02982f909a809c9891ee7e6dfe28bbb16bb3c87ea8eb3fe88870f76ecc7dceae9f69c1003b2a9a46db0564a86e858cef38e5679713a0aa241b4da701c2642eb2aa171cbc628127718780480f8a26ac5ab4a79166dbb1637cc4f6a00bb2d17fbf9ccaae1f5ba223c87b34f5b", 0xbc}, {&(0x7f0000000500)="84a5106a6b3c6d35990d0b39de12d964f81b690d9ab52c12e671ae51e27f2102c28f04cf2e3fb616fc5896afb65f371deb5fdfcb3475261fa72cd28a6ff765b68c63489ea34532ce4adad0f5f4dd3eedfe2b53b153f9c5a22f10d28530142aa72ca52db8326c4ad25db29edb3d20833a448f6bb4a1825cbc336e2a140f602dd4169395e499db339b7abc5daff199c501309723406166835d6a786a", 0x9b}, {&(0x7f00000005c0)="f871d256e88e6775f00939695c2498393aa1dfd50d44e39a91ae261419201d7229098212535d772d24797088ac365bd6492e2c4759dbd32b80838980018c6b8d51426c2d5da202267ecde1cb4ef80cedeedcff8f6cca11fe2a85a010f5d42e10ccb046e94a202e546aab51f125c1476da34d3cfd7e7e458293098f0699a7a676f18605870bd7523aa6b0743af39c94c7811ec97335e397f12bc15ef635c84f4ba850c2e7dc8f2ae0da26220fa372c573", 0xb0}], 0x5, &(0x7f0000000800)=[@iv={0xa0, 0x117, 0x2, 0x89, "06f6698ca97a972baf39aae29cca761976634d9140cc7c5f60ed33b6e2f992cb14def3893c1e1dae1396af56abaa304757ffb334d7ee79a9f2bbcbf4b49fb2290d28206bc0f5ecb7993d865a23e1fe0e190147704730c57240ca53f8f0808c364b44e009c3ccb8dcb1a6f8d79d7b4d1ec8ed3e7395363147c913ec4c515208628ead6036837c63a44a"}, @op={0x18}, @op={0x18}], 0xd0, 0x400c1}, 0x24000050) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}], 0x0, 0x0, 0x0, 0x0, 0xf}}}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) 17:01:54 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x40, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:54 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0x0, 0x3, 0x800}) 17:01:54 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:54 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x0, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x70000, 0x38b, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:54 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0x0, 0x3, 0x800}) 17:01:54 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x4, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) 17:01:54 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x70000, 0x38b, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:54 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0xa, 0x0, 0x9, 0x4000, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x8, 0x1000000, 0x0, r1}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x6410, 0x51424752, 0x2, @discrete={0x9, 0x3}}) 17:01:54 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x8, 0x3, 0x4}) 17:01:54 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x7, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:54 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}], 0x0, 0x0, 0x0, 0x0, 0xf}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) 17:01:54 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x70000, 0x38b, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:54 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:54 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0x0, 0x3, 0x800}) 17:01:54 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2a7b9c6d8b3e6f65, {0x2, @pix_mp={0x0, 0x0, 0x30314742, 0x0, 0x6, [{0xffffffff}, {}, {0xffffff7f}], 0x0, 0x0, 0x6}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) 17:01:54 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x70000, 0x38b, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:54 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x70000, 0x38b, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:54 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) [ 810.801518] vim2m vim2m.0: vidioc_s_fmt queue busy 17:01:54 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x70000, 0x38b, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:54 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0xffff, 0x3432564e, 0x1, @stepwise={0x1, 0x3f, 0x6, 0x401, 0x1, 0x4}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:55 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}], 0x0, 0x0, 0x0, 0x0, 0xf}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) 17:01:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000001c0)={0x3, @vbi={0x3, 0xfffffffd, 0x0, 0x4f424752, [0x811, 0x7fff], [0xfffffff9, 0x3f], 0x108}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000440)={0x1, @sdr={0x38414762, 0x61}}) ioctl$SNDCTL_SEQ_GETINCOUNT(r1, 0x80045105, &(0x7f0000000080)) ioctl$SNDCTL_FM_LOAD_INSTR(r1, 0x40285107) 17:01:55 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x0, 0x800}) 17:01:55 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x401, 0x4, @userptr=0x100000001, 0x3}) 17:01:55 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x70000, 0x38b, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:55 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x0, 0x800}) 17:01:55 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}], 0x0, 0x0, 0x0, 0x0, 0xf}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) 17:01:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x7fbb, 0x1, 0x1, "8d88210b315f32372aebd7873cf5ceac51b97422b92905e76a9a2fb27882074c", 0x77640509}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x3, @sliced={0x3, [0x1, 0x20, 0x1, 0x401, 0x7ff, 0xfff7, 0x4, 0xcdee, 0x401, 0x8, 0x9, 0x9, 0xff, 0xe6e, 0x1, 0x1f, 0x9, 0xd, 0x20, 0x0, 0x0, 0x7, 0xf9f, 0x40, 0x6, 0xdf, 0x1f, 0x5, 0x0, 0x6c, 0x0, 0x991, 0x6340, 0x9, 0x2, 0x7, 0x1, 0x401, 0x5, 0x1ff, 0x6, 0x42, 0x20, 0x3ff, 0x46f6, 0x186, 0x6, 0x3], 0x4}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0x1, 0x30395056, 0x2, @discrete={0x3f, 0xfffffff7}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:55 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, 0x0) 17:01:55 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x0, 0x800}) 17:01:55 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x4, @userptr=0x100000001, 0x3}) 17:01:55 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, 0x0) 17:01:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x7, 0x4c79, 0x2, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}, {}, {}, {0x0, 0x1f}, {}, {}, {0x0, 0xc5c}]}}, 0x800000}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0xfa, 0x1}}}) 17:01:55 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}], 0x0, 0x0, 0x0, 0x0, 0xf}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) 17:01:55 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3}) 17:01:55 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr=0x100000001, 0x3}) 17:01:55 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, 0x0) 17:01:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0xf5668056254af20c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)={0x5a1, 0x0, 0x4, 0x800, 0x4, {r1, r2/1000+60000}, {0x2, 0x0, 0x1, 0x81, 0x7, 0x1, "af39916d"}, 0x8, 0x3, @fd, 0x7, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000240)={0x5, 0x3, 0x4, 0x800, 0x100, {0x77359400}, {0x4, 0x0, 0x20, 0x9, 0x7f, 0x30, "444ab6e2"}, 0x0, 0x2, @offset=0x6, 0x6, 0x0, r3}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}], 0x0, 0x0, 0x0, 0x1}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) 17:01:55 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr, 0x3}) 17:01:55 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}], 0x0, 0x0, 0x0, 0x0, 0xf}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) 17:01:55 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3}) 17:01:55 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x0, 0x4, 0x70000, 0x38b, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080)) 17:01:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @vbi={0x2, 0x0, 0x80000001, 0x32344d59, [0x9, 0x7ff], [0x2, 0xffffffff], 0x109}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0xfffffff9, 0xf9, 0x3, {0x2, @pix_mp={0x7, 0x9, 0x384c4150, 0x9, 0xf, [{0x4, 0x6}, {0x9a8, 0x5}, {0x2, 0x4}, {0xb2c, 0x7fffffff}, {0x2, 0x2}, {0x20, 0x100060a}, {0x80002, 0x100007}, {0x4, 0x9}], 0x1, 0x7d, 0x4, 0x0, 0x6}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000001c0)={0x0, 0x8, 0x9d3e4ab92e2ffa3b, {0x1, @sdr={0x32314247, 0x100}}, 0x3}) ioctl$SOUND_MIXER_READ_RECMASK(0xffffffffffffffff, 0x80044dfd, &(0x7f0000000100)) 17:01:55 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3}) 17:01:55 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) 17:01:55 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x0, 0x4, 0x70000, 0x38b, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:55 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}], 0x0, 0x0, 0x0, 0x0, 0xf}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) 17:01:55 executing program 2: ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000080)={0x97, 0x20385655, 0x2, @discrete={0x0, 0x5}}) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:55 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3}) 17:01:55 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x0, 0x4, 0x70000, 0x38b, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000100)=0x3) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) 17:01:55 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xffffffffffffffff}) 17:01:55 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x0, 0x38b, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:55 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}], 0x0, 0x0, 0x0, 0x0, 0xf}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) 17:01:55 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x70000, 0x38b, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:55 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x80000001, 0x3, 0x4}) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x4, 0x9, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) r2 = socket$isdn(0x22, 0x3, 0x0) bind$isdn(r2, &(0x7f00000000c0), 0x6) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000100)={0x7, 0x3, 0x3, "a35155d91809889d2c7c2055bd19dd64631373b241ea3dc72c127a11b921621b", 0x47425247}) 17:01:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000140)={0x1, 0x0, 0x1, 0x4000}) 17:01:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x3, 0x59555956, 0x0, 0x0, [{0xffffffff}, {}, {}, {}, {}, {}, {}, {0x80, 0xfffffffc}], 0x0, 0x0, 0x4}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) 17:01:55 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:55 executing program 1: syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r0 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:55 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) 17:01:55 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x70000, 0x38b, {}, {0x3, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000000580)) sendto$ax25(r1, &(0x7f0000000080)="ce64a3", 0x3, 0x44, &(0x7f00000000c0)={{0x3, @null, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @default]}, 0x48) 17:01:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x4, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}, {}, {0x1}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) 17:01:55 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0xc, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:55 executing program 1 (fault-call:2 fault-nth:0): r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) 17:01:55 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) 17:01:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x32525942, 0x0, 0x0, [{0xffffffff}, {0x2}, {}, {}, {0xfffffffe}], 0x40}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) 17:01:55 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x1000000, 0x0, @userptr, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)={0x80000001, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x4, 0x8, 0x4, 0x4, 0x1, 0x2, "8d0200"}, 0x100, 0x2, @planes=&(0x7f00000000c0)={0xe0, 0x0, @mem_offset=0xfffffe00, 0x100}, 0x7fffffff, 0x0, r1}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000240)={0x3, 0xb, 0x4, 0x100000, 0x6, {0x0, 0x2710}, {0x5, 0xc, 0x6, 0xcb, 0x1b, 0x7, "4a69cda2"}, 0x3f, 0x2, @planes=&(0x7f0000000080)={0x1eb, 0x0, @mem_offset=0x7, 0x80000000}, 0x555a, 0x0, r2}) 17:01:55 executing program 3 (fault-call:3 fault-nth:0): r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:55 executing program 2: getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, r0}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x80000003, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000140)) 17:01:55 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) 17:01:55 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0xa0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0xfffffffd, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7}, {0x5}, {}, {0x5, 0x2}, {0x0, 0x401}, {}, {}, {0x4000}], 0x0, 0x0, 0x2}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa}}}) r1 = syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0xffff, 0x2) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer2\x00', 0x60000, 0x0) ioctl$SNDCTL_FM_LOAD_INSTR(r2, 0x40285107) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000001c0)) r3 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000480)={0x8, 0x9, 0x18, 0x4000, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f00000004c0)={0x2, 0x1, 0x4, 0x80800, r4}) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0x15, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4880) 17:01:55 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x3, 0xffffffff, 0x3, 0x800}) 17:01:55 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0x6, 0x1, 0x1f1e0503, 0x4, 0x5, 0x4, 0xc, 0xffffffff, 0x1, 0x6e165b178885b40d, 0x0, 0x5}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x3, 0x4, 0x0, 0x2000, {}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) 17:01:55 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x0, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}], 0x0, 0x0, 0x0, 0x0, 0xf}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) 17:01:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x5, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x2, @sdr={0x32344d59, 0x2}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:55 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:55 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000180)=0x3) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x4, 0x4a4100) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x1, 0xffffffff, 0x3, 0x84000}) ioctl$SNDCTL_SYNTH_INFO(0xffffffffffffffff, 0xc08c5102, &(0x7f0000000040)={"28e0e30d03576171fc99efa10478866cac86a1f9fbdd3ef1fcb8d75dae56", 0x8000, 0x1, 0x401, 0xffff, 0x1, 0x7, 0x100, 0x4, [0x101, 0x6, 0xf9, 0x4, 0x3, 0x4, 0x5, 0x1a, 0x166c74c9, 0x64, 0x3, 0x400, 0x5a, 0x7, 0x5, 0x8001, 0xffffffc1, 0x6, 0x9]}) 17:01:55 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x0, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}], 0x0, 0x0, 0x0, 0x0, 0xf}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) 17:01:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000440)={0x8000, 0x1, 0x1, {0x2, @win={{0xffffffff, 0x2, 0x9, 0x9}, 0x5, 0x7, &(0x7f0000000100)={{0x6, 0x400, 0x3, 0xce}}, 0x61df, &(0x7f00000001c0)="067ca5e1e21e65ecd1d69833820c3ffbeb3af4575c82ef9a33fe7dd02821501212584587b72214012255cc655bdbf7761150ec63bbeed19b9625a6c0ee9f2c6d0a720dc309277f0f9dfe7f6f1398037c0e86aeab0ae421fa73e22d335f9c6276806c27cc4c1d02a2c97c692799a8cfb7471acbb528bbb968790401faa226b0c28e2c46cd5a369a93ce1dc3e62ed7ace4818eb5935d07", 0xff}}, 0xf6d9}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000140)={0xa085657eecfb0ac4, 0x0, {0xa0df, 0x74, 0x1, 0x2}}) 17:01:55 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x1, {}, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr=0x7}) 17:01:55 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0xff, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:55 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x0, 0x6, 0x8, 0x84000, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0x3, 0x20, 0x4a, 0x4000, r2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x2}) r3 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x3, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000080)={0x800, 0x2, 0x4, 0x4, 0x4, {0x0, 0xea60}, {0x4, 0x1, 0x81, 0x5, 0x2, 0x81, "6b8b6f36"}, 0x100, 0x3, @fd, 0x4}) 17:01:55 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x0, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}], 0x0, 0x0, 0x0, 0x0, 0xf}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) 17:01:55 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x9, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:55 executing program 1: ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={r0, &(0x7f0000000100)=""/29}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r2, 0x80045105, &(0x7f0000000080)) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) r3 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000300)={0xe1d, "24c3dacb44d7c5ba7c7ff192c68d3d56c3f36abe77f23482d918b27b68fe008b", 0x3}) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f00000001c0)={0x40000000, 0x6, "7e02a919c8f71604ba329e84d004a9530ea2c8ae30db7e23e66ca24c084cc3f1", 0x3f, 0x5, 0x400, 0x100000001, 0x2, 0x0, 0x80000000, 0xfff, [0x3f, 0x44, 0x9, 0x3735]}) 17:01:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000200)={0x10000, 0x9}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @win={{0x8, 0x4, 0x0, 0x9}, 0x4, 0x101, &(0x7f00000001c0)={{0x5, 0x0, 0x2, 0x401}, &(0x7f0000000140)={{0x3, 0xfffffc03, 0xb9f6, 0x7535938}, &(0x7f0000000100)={{0xef, 0x80b, 0x5, 0xecac}}}}, 0xfff, &(0x7f0000000440)="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", 0xe0}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x3, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x385c5545, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}}}) 17:01:55 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) r2 = socket$caif_stream(0x25, 0x1, 0x4) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x0, @tipc=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}, 0x1}}, @l2={0x1f, 0xd85, @any, 0x1}, @phonet={0x23, 0x1f, 0x9, 0x5f}, 0x7f, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000040)='team0\x00', 0x20, 0x8, 0x6}) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000100)="f6c73505835d8980a0d3bc3ecfaf154ca8f002e928a8fe170f5d858c6154dbb409a259851713ae410d46a6f7960e83cd74b75a303a28f01e9480bd97bcf29a4a02d520d74540ea9db2e237814bec3edba9374883636cd4c4077cc37b0e26b2d540fe4a4bfc2870338edcb6dad84b5b8e7a464c6738a341ba26e34b417191943afc8a27976e7f0a45cb4ebc01ba6bb4162734242cfbf76d282e4fbac0f63e6ebd0e0bdce4c13ac54dd8c057104d76c15e9bdb47189e31521bd38282b4d38233b498f00a28f2d59ed99f9e48ba70614cfba4acfa05d8087ad08032e1e65e5809a52140c979b04547e7d541e48111138c655252e1158780d4", 0xf7) 17:01:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000180)={0xfffffff, 0xf1b, 0x7fffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0xa30902, 0xf16e, [], @string=&(0x7f00000000c0)}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:56 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f00000000c0)={0x8, "e341215a7518dc236ae0705a1e57bcb5df8c55059f1f7b35f97e376444d925ea", 0x20, 0x1, 0x0, 0x4, 0x2}) 17:01:56 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x0, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}], 0x0, 0x0, 0x0, 0x0, 0xf}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) 17:01:56 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:56 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:56 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000240)={0x80000001, "bc069167c3a8cf25c92e2a167572a3fc58e585ef09704d206ce8b0fd1881c70b", 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) r2 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfd, 0x204880) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f00000000c0)={r3, 0x2}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000100)=""/148, 0x94, 0x1, &(0x7f00000001c0)={{0x3, @bcast, 0x4}, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @bcast, @null]}, 0x48) r4 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r4, 0xc02c5638, 0x0) ioctl$VIDIOC_S_AUDOUT(r4, 0x40345632, &(0x7f0000000280)={0x80000001, "9ba55eacfca4190274abe5691dd1fdc98c817a061719c9b793e43cbe96fa0b68"}) 17:01:56 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x0, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}], 0x0, 0x0, 0x0, 0x0, 0xf}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) 17:01:56 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000080)={0xcd, 0x1, 0x4, 0x100, 0x6, {0x77359400}, {0x1, 0xc, 0x1, 0x45, 0x20, 0x3, "e8d6dc63"}, 0x8, 0x2, @fd=0xffffffffffffffff, 0x6}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @fd=r1}) 17:01:56 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) socket(0x2b, 0x80000, 0x7840) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:56 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:56 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x400, 0x2, 0x2, {0x1, @pix={0x2, 0x8, 0x34565559, 0x8, 0xff, 0x40, 0xb, 0xc8e0, 0x1, 0x4, 0x2, 0x6}}}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r3 = getpid() getpgid(r3) getpgid(r3) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000280)={0x40, 0x1, 0x4, 0x100000, 0x1f, {}, {0x3, 0x0, 0x7, 0x4, 0x1f, 0x0, "3b298092"}, 0x10001, 0x3, @userptr=0x8000, 0x2, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000440)={0x7, 0x0, 0x4, 0x1000, 0xbc, {r1, r2/1000+60000}, {0x1, 0x1, 0x0, 0x2e, 0x9, 0x58, "c7270956"}, 0x1f, 0x4, @offset=0x5, 0x80000000, 0x0, r4}) r5 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000000)={0x4, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}, 0xfffffffe}) r6 = syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x4, 0xffffff7b, 0x2}) ioctl$vim2m_VIDIOC_QUERYBUF(r6, 0xc0585609, &(0x7f00000001c0)={0x3, 0x3, 0x4, 0x800, 0x36f1, {0x0, 0x2710}, {0x2, 0x8, 0x4f, 0x6, 0x9, 0x7, "edca90f2"}, 0x1, 0x0, @fd, 0xd3ec, 0x0, r0}) 17:01:56 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x3, @vbi={0x8001, 0x9, 0x7ff, 0x30395056, [0x7, 0x40], [0x8, 0x5], 0x13a}}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:56 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x0, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}], 0x0, 0x0, 0x0, 0x0, 0xf}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) 17:01:56 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "208de7e4"}, 0x0, 0x0, @fd, 0xfffffc01}) 17:01:56 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000001c0)) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) 17:01:56 executing program 1: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d19, &(0x7f0000000200)) r0 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000080)={0x8, 0x0, [], {0x0, @reserved}}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) r2 = syz_open_dev$vim2m(&(0x7f00000001c0)='/dev/video#\x00', 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)={0x101ff, 0x2, 0x4, 0x400, 0x1, {}, {0x5, 0x1, 0x0, 0x10, 0x0, 0x0, "f6ee20c3"}, 0xfffffffd, 0x0, @fd}) 17:01:56 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x4a9, 0x1, 0x4, 0x2000, 0x710000, {0x0, 0x2710}, {0x5, 0x8, 0x8, 0xfb, 0x6, 0x1, "9f52a83d"}, 0x7, 0x4, @userptr=0xfec1, 0x4d40, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000180)={0x2, 0x0, 0x4, 0x400, 0xd2f9, {}, {0x5, 0x2, 0x2, 0x7, 0x4, 0x40, "25a7c14d"}, 0x7, 0x2, @userptr=0x1, 0x7fff, 0x0, r2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:56 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}], 0x0, 0x0, 0x0, 0x0, 0xf}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) 17:01:56 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x6, 0x2) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)={0x5, 0x4, 0x4, 0x800, 0x1ff, {}, {0x2, 0x1, 0x80, 0x8, 0x1, 0x6, "55070ebf"}, 0x1, 0x1, @offset=0x1, 0x2, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x81, 0x3, 0x4, 0x800, 0x4, {0x77359400}, {0x4, 0x2, 0x8, 0x4, 0x7, 0x80, "79f00f3b"}, 0x4, 0x2, @fd, 0x1, 0x0, r2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x81, 0x2, 0x4, 0x40, 0x2d37, {0x77359400}, {0x1, 0x0, 0x7, 0x9, 0x7, 0x4e, "f4d37636"}, 0x3, 0x4, @planes=&(0x7f0000000040)={0x7f, 0x0, @mem_offset=0x2, 0x800}, 0xa99}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000280)=0x2) r4 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:56 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "208de7e4"}, 0x0, 0x0, @fd}) 17:01:56 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={0x3, @bcast, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x1, 0x3, 0x3, "91dfa5d81e60331ed401d523d5f3084f52bdb131e3fe36303c24240f84f1897a", 0x32314d59}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0xffffffff, 0x1, 0x3}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x30314752, 0x6, 0x0, 0x1, 0x0, 0x8000, 0x0, 0x4, 0x0, 0x1}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x100, 0x6, 0x2bdd201a47a0b62e, {0x0, @win={{0x0, 0x7f, 0x400, 0x1}, 0x6, 0x5, &(0x7f0000000200)={{0x8dc, 0x8, 0x0, 0x8bf}}, 0x8, &(0x7f0000000440)="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", 0x1}}, 0x871}) 17:01:56 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}], 0x0, 0x0, 0x0, 0x0, 0xf}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) 17:01:56 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) r2 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000040)={0x5, 0x494e4f4b, 0x3, @discrete={0x1, 0x101}}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:56 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000001c0)={0x0, @vbi={0x81, 0x6, 0x1, 0x3247504d, [0xffffffff, 0x4], [0x6, 0xffffff00], 0x1}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x2, 0x1f, 0x1, {0x1, @sliced={0x8, [0xfffc, 0x7, 0x5da, 0x400, 0x5, 0x4bf5, 0xf6de, 0x0, 0x16f, 0x5, 0x803, 0xffff, 0x7, 0x7, 0x4, 0x8, 0xd33b, 0xca, 0x3, 0x7fff, 0x9, 0x1, 0x7, 0x40, 0x1, 0x5, 0x2, 0x2, 0x5, 0x8000, 0x7, 0x6, 0xfff, 0x2, 0x3f, 0x9, 0x3c, 0x2000, 0xc2ff, 0x3, 0x1, 0x8001, 0x5, 0x4e, 0x6, 0xd3d3, 0xbdf0, 0x9], 0x1}}, 0x9}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000100)=0x3) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f00000000c0)={0x2, {0x6, 0x20, 0x6, 0xffffffff}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xa, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@alu={0x7, 0x0, 0x1, 0x5, 0x7, 0x100}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x92}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fff}]}, &(0x7f0000000480)='syzkaller\x00', 0x8000, 0x68, &(0x7f00000004c0)=""/104, 0x40f00, 0xa, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x8, 0x64, 0xd}, 0x10}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000003c0)='mm_vmscan_kswapd_wake\x00', r2}, 0x10) 17:01:56 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x0, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}], 0x0, 0x0, 0x0, 0x0, 0xf}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) 17:01:56 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x3618, 0x2, 0x4, 0x4, 0x800000b3, {r1, r2/1000+10000}, {0x5, 0x8, 0x0, 0xc1, 0x6, 0x1, "ffffffe7"}, 0x0, 0x4, @fd, 0x11cc68f0}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:56 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "208de7e4"}, 0x0, 0x2, @fd, 0xfffffc01}) 17:01:56 executing program 0: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) 17:01:56 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) r2 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000040)={0xfffff001, 0x6, 0x3, {0x2, @sliced={0xd5, [0x7f, 0xab4, 0x9, 0x6, 0x8001, 0x6631, 0x2, 0x4, 0x6, 0x7, 0x8, 0x3ff, 0x80, 0x5, 0x0, 0x2, 0xa669, 0x11d, 0x8, 0x2, 0xffff, 0x2, 0x4e, 0x12, 0x18f, 0x0, 0x20, 0x5, 0x2, 0x0, 0x0, 0x1, 0xf185, 0x5, 0x66, 0x2, 0x8000, 0x200, 0x2, 0x3, 0x5, 0x8, 0x7c3a, 0x6, 0x8, 0x94, 0x13, 0x8], 0xffffffff}}, 0xaf}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:56 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0, 0x0, 0xf}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) 17:01:56 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}, {}, {}, {0x0, 0x2000}, {0x7}, {}, {0x92}]}}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000200)=0x5, 0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x9, 0x4) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x0, 0xf9, 0x2, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xff, 0x0, 0x8, 0x0, 0x6}}}) 17:01:56 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000140)={0x3, 0x3, 0x4, 0x0, 0x80, {}, {0x1, 0x1, 0x4, 0xbc, 0x37, 0x9, "34aec48d"}, 0x8, 0x1, @offset, 0xffff}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000040)={0xffff8001, 0x2, 0x4, 0x1, 0x7ff, {0x0, 0xea60}, {0x5, 0x2, 0x7f, 0x2, 0x80, 0x53, "2fb27c95"}, 0x2, 0x1, @offset=0x1, 0x101}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000000c0)=0x1) 17:01:56 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0, 0x0, 0xf}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) 17:01:56 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)={0x7, 0x2, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x4, 0x0, 0x20, 0x3a, 0x9, 0x86, "5eda5b32"}, 0x1, 0x4, @offset=0x7, 0x7}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) 17:01:56 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x2, 0x1, 0x3, {0x1, @sdr={0x30383653, 0xffffffff}}, 0x7}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:56 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}, {}, {}, {0x0, 0x2000}, {0x7}, {}, {0x92}]}}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000200)=0x5, 0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x9, 0x4) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x0, 0xf9, 0x2, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xff, 0x0, 0x8, 0x0, 0x6}}}) 17:01:56 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000003c0)={0x765c, 0x3, 0x4, 0xe000, 0xfff, {r3, r4/1000+60000}, {0x5, 0x2, 0x5, 0x4, 0x1f, 0x6, "9db85b85"}, 0x6, 0x2, @planes=&(0x7f0000000380)={0x7c82, 0xfffffff8, @fd, 0xfffffe92}, 0x5, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000440)={0x5, 0x0, 0x4, 0x8, 0x800, {r1, r2/1000+10000}, {0x5, 0x0, 0x6, 0x4, 0x3e, 0x3f, "2fe5b0f1"}, 0x1, 0x4, @offset=0x1ff, 0x1, 0x0, r5}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000140)=0x2) r6 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x1, 0x8, 0x32315659, 0x0, 0x800, 0x4, 0x7, 0x4, 0x1, 0x1, 0x0, 0x5}}) r7 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000240)={0xfff, 0x0, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x2, 0x2, 0x70, 0x4, 0x4, 0xff, "756aea58"}, 0xffff6ecf, 0x4, @planes=&(0x7f0000000200)={0x2e, 0x0, @userptr=0x7fff, 0x7fff}, 0x80000001}) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f00000001c0)={0x40, 0x3, 0x1, "ccf43487b7b11ecac759536287e5febb2d36d3b020e0125503a09f490960dae8"}) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:56 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000100)={0x3, @default, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) 17:01:56 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0, 0x0, 0xf}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) 17:01:56 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0, 0x0, 0xf}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) 17:01:56 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x9d, 0x1, 0x1, "b57445fab27d179c01de65d6894f1c378494ec8a32a41625bf70321e4ef53f59", 0x50565559}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:56 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)={0x3, 0x2, 0x4, 0x7400a, 0x1, {}, {0x2, 0x8, 0xf9, 0x6, 0x2, 0x3f, "f2570b37"}, 0x80000000, 0x1, @planes=&(0x7f0000000100)={0x0, 0x8, @fd, 0x800}, 0x7, 0x0, r1}) 17:01:56 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) 17:01:56 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)={0x7, 0x2, 0x4, 0x1, 0x7, {0x0, 0xea60}, {0x4, 0x0, 0x20, 0x3a, 0x9, 0x86, "5eda5b32"}, 0x1, 0x4, @offset=0x7, 0x7}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) 17:01:56 executing program 3: syz_open_dev$vim2m(0x0, 0x0, 0x2) r0 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x4, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:56 executing program 1: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000003c0)={0x0, 0x7d39903c876110f8}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) r2 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000240)=0x1) r3 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)={0x0, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) r4 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000002c0)={0x5, 0x6, 0x4, 0x20, 0x82c, {0x77359400}, {0x3, 0xc, 0x0, 0x68, 0x81, 0x1, "a982124b"}, 0x7f, 0x2, @userptr=0x4b, 0x9, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000340)={0x100, 0x3, 0x4, 0x10024, 0x9, {}, {0x4, 0x2, 0x1, 0x3a, 0xaa, 0x0, "e895b984"}, 0x1f, 0x4, @fd, 0x6, 0x0, r5}) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) r6 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x5, 0x6100) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000200)={r7, 0x2}) 17:01:56 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000080)=0xf078) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x2, 0x9790, 0x401, 0x4000, r1}) [ 812.522263] vim2m vim2m.0: vidioc_s_fmt queue busy 17:01:56 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0, 0x0, 0xf}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) 17:01:56 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) 17:01:56 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000005, 0x0, 0x3}) r1 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x10001, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) r2 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x1) ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f00000000c0)) 17:01:56 executing program 0: setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f00000001c0)="ee8cccad2ea04097d5ccfc78bf845072b5e9fd07b8779b987aa79e9e5ab2c74ff725f60aa7fba7274b834cbf68cc1fa93ca9b790460316859aef545184ee11ac66a9b944ecf62a8610487c2d4db1ad4c5830e078dec32aea490c0ad440a910710992826f927cea8ad01cf46021f84156d37e87081781455def7631ff40d70c77f65f595d", 0x84) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x401, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0xc, [{0xffffffff, 0x88b}, {}, {}, {0x0, 0x20000000}, {0x0, 0x1}, {0x8}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) 17:01:56 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x40003ff, 0x2) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{}, [@default, @default, @netrom, @bcast, @netrom, @null, @null, @null]}, &(0x7f0000000040)=0x48, 0x80000) getsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000240)=0x1) 17:01:56 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0x4, 0x200, 0x4, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0x60edf7b1ba89b646, 0xeb, 0x78b86a4a, 0x800, r2}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000180)={0x3ff, 0x0, 0x3, "3e106d0babccf77a03b71a6b8acf0200bf431cfc41ab1c5f39a0c6e2e45f5078", 0x34324948}) 17:01:56 executing program 4: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000003c0)={0x0, 0x7d39903c876110f8}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) r2 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000240)=0x1) r3 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)={0x0, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) r4 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000002c0)={0x5, 0x6, 0x4, 0x20, 0x82c, {0x77359400}, {0x3, 0xc, 0x0, 0x68, 0x81, 0x1, "a982124b"}, 0x7f, 0x2, @userptr=0x4b, 0x9, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000340)={0x100, 0x3, 0x4, 0x10024, 0x9, {}, {0x4, 0x2, 0x1, 0x3a, 0xaa, 0x0, "e895b984"}, 0x1f, 0x4, @fd, 0x6, 0x0, r5}) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) r6 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x5, 0x6100) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000200)={r7, 0x2}) 17:01:56 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x1fc97b53, 0x6}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:56 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) 17:01:56 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x2, 0xfffffffb, 0x0, 0x4000, r0}) 17:01:56 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x36314d4e, 0x100}}) 17:01:56 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x6f, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000280)=0x1) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)={0x4, 0x3, 0x4, 0x4, 0xfffffffe, {0x77359400}, {0x3, 0x2, 0x5, 0x1, 0x6b, 0x62, "d9fc2bee"}, 0x6, 0x4, @planes=&(0x7f0000000040)={0x3f, 0x1f, @userptr=0xfff, 0x6}, 0x1}) r2 = syz_open_dev$vim2m(&(0x7f0000000400)='/dev/video#\x00', 0x100000000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000440)={0x9, 0x384c4150, 0x3, @discrete={0x1, 0x1}}) r3 = socket(0x0, 0x80806, 0x6) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3e77}]}, 0x24}}, 0x40000) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000240)={0x0, &(0x7f0000000300)=""/240}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:56 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000001c0)={0x4, @pix={0x0, 0xfffffffa, 0x31384142, 0x5, 0x10000, 0x7fff, 0xa, 0x6, 0x1, 0x6, 0x1, 0x6}}) 17:01:56 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vim2m\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000280)={0x529f, 0x3, 0x4, 0x10, 0x8, {r4, r5/1000+60000}, {0x2, 0xc, 0x3, 0x1f, 0x2, 0x1, "e1415cfc"}, 0x6, 0x3, @userptr=0x8, 0x9, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000300)={0x3, 0x0, 0x4, 0x4000, 0xa5, {r2, r3/1000+60000}, {0x1, 0x0, 0xbb, 0x2, 0x80, 0x4, "c1e3c844"}, 0x2, 0x4, @userptr=0x3fff80000, 0xd003, 0x0, r6}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) 17:01:56 executing program 4: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000003c0)={0x0, 0x7d39903c876110f8}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) r2 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000240)=0x1) r3 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)={0x0, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) r4 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000002c0)={0x5, 0x6, 0x4, 0x20, 0x82c, {0x77359400}, {0x3, 0xc, 0x0, 0x68, 0x81, 0x1, "a982124b"}, 0x7f, 0x2, @userptr=0x4b, 0x9, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000340)={0x100, 0x3, 0x4, 0x10024, 0x9, {}, {0x4, 0x2, 0x1, 0x3a, 0xaa, 0x0, "e895b984"}, 0x1f, 0x4, @fd, 0x6, 0x0, r5}) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) r6 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x5, 0x6100) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000200)={r7, 0x2}) 17:01:56 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 17:01:56 executing program 2: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x0, 0xaf59}) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000000c0)) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)) 17:01:56 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000100)={0x8, 0x3, 0x4, 0x0, 0x6, {0x77359400}, {0x1, 0x8, 0xff, 0x2, 0xa7, 0x7, "62bd78bb"}, 0x800000, 0x4, @userptr=0xfff, 0xfffffffe}) 17:01:57 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x0, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:57 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 17:01:57 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xce) recvfrom(r0, &(0x7f0000000100)=""/38, 0x26, 0x12000, &(0x7f00000001c0)=@generic={0x26, "cc89a1c484d00379a5d9402f32a838eee95c184246d0257fd0982c4bc1e5eb49c9a14eed21253000f7f971a3d5ddda3394cc5fd56848e21d78636bebfbb3f9f93a9931874536f3754f314f38f0f9e28f5a6c9e28efa023519eac711733193a65fab2fa5025b4c7e22e469d2a73e141cb3420b7889df899c0ec80e15806be"}, 0x80) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x7, 0x3}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000240)={0x4, 0x3, 0x4, 0x2, 0x2, {0x0, 0x2710}, {0x6, 0xc, 0x0, 0x5, 0xfb, 0x3f, "59e3d388"}, 0xc4, 0x4, @offset=0x2, 0x3, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x40cefae9, 0x2, 0x4}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000003c0)={0x9, 0x3, 0x4, 0x8, 0x2, {0x77359400}, {0x5, 0x0, 0x0, 0x1f, 0xab, 0x9, "90851d70"}, 0x0, 0x2, @userptr=0x8, 0x7, 0x0, r2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000440)={0x53c, 0x2, 0x4, 0xe000, 0x7, {0x0, 0x2710}, {0x4, 0x8, 0xff, 0x6, 0x6, 0x0, "5d8572fd"}, 0x3, 0x4, @planes=&(0x7f0000000380)={0x80000001, 0x400, @mem_offset=0x10001, 0x2}, 0x9, 0x0, r4}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000300), 0x10) openat$cgroup_netprio_ifpriomap(r5, &(0x7f00000002c0)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0xe000, 0x4, {}, {0x1, 0x0, 0x0, 0x7, 0x0, 0x0, '\t\x00'}, 0x0, 0x0, @userptr}) 17:01:57 executing program 4: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000003c0)={0x0, 0x7d39903c876110f8}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) r2 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000240)=0x1) r3 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)={0x0, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) r4 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000002c0)={0x5, 0x6, 0x4, 0x20, 0x82c, {0x77359400}, {0x3, 0xc, 0x0, 0x68, 0x81, 0x1, "a982124b"}, 0x7f, 0x2, @userptr=0x4b, 0x9, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000340)={0x100, 0x3, 0x4, 0x10024, 0x9, {}, {0x4, 0x2, 0x1, 0x3a, 0xaa, 0x0, "e895b984"}, 0x1f, 0x4, @fd, 0x6, 0x0, r5}) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) r6 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x5, 0x6100) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000200)={r7, 0x2}) 17:01:57 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000180)={0x3, @vbi={0x6, 0x7, 0x5, 0x20363159, [0x5, 0x80000000], [0x2, 0x3], 0x1}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000000c0)={0xc00, 0x32315659, 0x2, @stepwise={0x5, 0x81, 0x81, 0x101, 0x5, 0x2}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:57 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) ioctl$SOUND_MIXER_READ_RECMASK(0xffffffffffffffff, 0x80044dfd, &(0x7f0000000100)) 17:01:57 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 17:01:57 executing program 4: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000003c0)={0x0, 0x7d39903c876110f8}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) r2 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000240)=0x1) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)={0x0, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) r3 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000002c0)={0x5, 0x6, 0x4, 0x20, 0x82c, {0x77359400}, {0x3, 0xc, 0x0, 0x68, 0x81, 0x1, "a982124b"}, 0x7f, 0x2, @userptr=0x4b, 0x9, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000340)={0x100, 0x3, 0x4, 0x10024, 0x9, {}, {0x4, 0x2, 0x1, 0x3a, 0xaa, 0x0, "e895b984"}, 0x1f, 0x4, @fd, 0x6, 0x0, r4}) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) r5 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x5, 0x6100) ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, &(0x7f0000000280)) 17:01:57 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x80000000, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:57 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x0, @sdr={0x36314d4e, 0x100}}) 17:01:57 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000001c0)={0x9, 0x2, 0x4, 0x8, 0x1, {}, {0x3, 0x2, 0x4, 0x1, 0x0, 0x1, "df2fc6e6"}, 0x0, 0x3, @userptr=0x80000000, 0x9}) 17:01:57 executing program 4: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000003c0)={0x0, 0x7d39903c876110f8}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) r2 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000240)=0x1) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)={0x0, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) r3 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000002c0)={0x5, 0x6, 0x4, 0x20, 0x82c, {0x77359400}, {0x3, 0xc, 0x0, 0x68, 0x81, 0x1, "a982124b"}, 0x7f, 0x2, @userptr=0x4b, 0x9, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000340)={0x100, 0x3, 0x4, 0x10024, 0x9, {}, {0x4, 0x2, 0x1, 0x3a, 0xaa, 0x0, "e895b984"}, 0x1f, 0x4, @fd, 0x6, 0x0, r4}) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x5, 0x6100) 17:01:57 executing program 3: syz_open_dev$vim2m(0x0, 0x0, 0x2) r0 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x2}) r1 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0xffffffffffff75b7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:57 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) r1 = socket$isdn(0x22, 0x3, 0x0) bind$isdn(r1, &(0x7f00000000c0), 0x6) bind$isdn(r1, &(0x7f0000000100)={0x22, 0x80, 0x17, 0xaf, 0x9}, 0x6) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) 17:01:57 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xa0040, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) 17:01:57 executing program 4: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000003c0)={0x0, 0x7d39903c876110f8}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) r2 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000240)=0x1) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)={0x0, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) r3 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000002c0)={0x5, 0x6, 0x4, 0x20, 0x82c, {0x77359400}, {0x3, 0xc, 0x0, 0x68, 0x81, 0x1, "a982124b"}, 0x7f, 0x2, @userptr=0x4b, 0x9, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000340)={0x100, 0x3, 0x4, 0x10024, 0x9, {}, {0x4, 0x2, 0x1, 0x3a, 0xaa, 0x0, "e895b984"}, 0x1f, 0x4, @fd, 0x6, 0x0, r4}) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) 17:01:57 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x0, @sdr={0x36314d4e, 0x100}}) 17:01:57 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) r1 = syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x9, 0x2, 0x1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) 17:01:57 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=@alg={0x108, 0x10, 0x400, 0x70bd27, 0x25dfdbfe, {{'seqiv(aegis128l)\x00'}, [], [], 0x2400}, [{0x8, 0x1, 0x5}, {0x8, 0x1, 0x9}, {0x8, 0x1, 0x7a}, {0x8, 0x1, 0x5}, {0x8, 0x1, 0xfa}]}, 0x108}, 0x1, 0x0, 0x0, 0x88c0}, 0x24008844) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:57 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) syz_open_dev$vim2m(&(0x7f0000000180)='/dev/video#\x00', 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x80000000, 0x1, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000001c0)) 17:01:57 executing program 4: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000003c0)={0x0, 0x7d39903c876110f8}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) r2 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000240)=0x1) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)={0x0, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) r3 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000002c0)={0x5, 0x6, 0x4, 0x20, 0x82c, {0x77359400}, {0x3, 0xc, 0x0, 0x68, 0x81, 0x1, "a982124b"}, 0x7f, 0x2, @userptr=0x4b, 0x9, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000340)={0x100, 0x3, 0x4, 0x10024, 0x9, {}, {0x4, 0x2, 0x1, 0x3a, 0xaa, 0x0, "e895b984"}, 0x1f, 0x4, @fd, 0x6, 0x0, r4}) 17:01:57 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000240)='/dev/video#\x00', 0x20, 0x2) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000440)={0x7f, 0x3, 0x4, 0x1, 0x1, {0x0, 0x2710}, {0x3, 0xc, 0x20, 0x98, 0xa7, 0x3f, "6deb26f6"}, 0x9, 0x1, @planes=&(0x7f00000002c0)={0x1a3569b6, 0xfffffffb, @fd, 0x3}, 0x400, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000004c0)={0x1, 0x1, 0x4, 0xe000, 0x1, {0x0, 0x2710}, {0x3, 0x1, 0x4, 0x40, 0x9, 0x48, "5355298b"}, 0xc1, 0x3, @planes=&(0x7f0000000280)={0x3, 0x7, @mem_offset=0x3, 0xfffffffe}, 0x9e5, 0x0, r2}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) r3 = syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x200, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000001c0)={0x6, 0x0, 0x4, 0x1000, 0x0, {0x0, 0x2710}, {0x4, 0xc, 0x1, 0x2, 0x78, 0x0, "afe0a581"}, 0x7, 0x0, @userptr=0xfff, 0x9}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000140)={0x7fff, 0x30364d54, 0x1, @stepwise={0x6, 0x0, 0x9, 0x9, 0x401, 0x10001}}) 17:01:57 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x0, @sdr={0x36314d4e, 0x100}}) 17:01:57 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x80000001, 0x0, 0x4, 0x2000, 0xd63c, {0x77359400}, {0x1, 0x0, 0x8, 0x1, 0x8, 0x9, "71350efc"}, 0x1, 0x2, @fd, 0x7fff}) 17:01:57 executing program 4: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000003c0)={0x0, 0x7d39903c876110f8}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) r2 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000240)=0x1) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)={0x0, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) r3 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000002c0)={0x5, 0x6, 0x4, 0x20, 0x82c, {0x77359400}, {0x3, 0xc, 0x0, 0x68, 0x81, 0x1, "a982124b"}, 0x7f, 0x2, @userptr=0x4b, 0x9, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000340)={0x100, 0x3, 0x4, 0x10024, 0x9, {}, {0x4, 0x2, 0x1, 0x3a, 0xaa, 0x0, "e895b984"}, 0x1f, 0x4, @fd, 0x6, 0x0, r4}) 17:01:57 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7ff, 0x1, 0x2}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x1, 0x1, 0x3, {0x3, @sliced={0xffff, [0x3f, 0x0, 0x4, 0x8000, 0x1, 0xfff, 0x2, 0x1, 0x101, 0x2, 0x6, 0x9c65, 0x2, 0x3, 0x9, 0x7ff, 0x7, 0x100, 0x7ff, 0x1, 0x6, 0xdb, 0x65b, 0x6, 0x1, 0x7, 0x6, 0x1, 0x0, 0x9fa3, 0x6e53, 0x1, 0x9b4, 0x8, 0xb5d6, 0x8, 0x4, 0x7, 0xba2, 0x9, 0x81, 0x6, 0x2, 0xfffc, 0x0, 0xa10, 0x6, 0x8], 0x305}}, 0x80000001}) 17:01:57 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x1, 0x4, 0x4, 0x0, 0x9, {0x0, 0x2710}, {0x5, 0x2, 0x80, 0x9, 0x4, 0xff, "1d0a47a6"}, 0x2, 0x3, @userptr=0xfffffffffffffff9, 0x5}) syz_open_dev$vim2m(&(0x7f00000001c0)='/dev/video#\x00', 0x7, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) 17:01:58 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x0, 0x100}}) 17:01:58 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x3) 17:01:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x3, {0x2, @win={{0x5, 0x4fd, 0xff, 0x13}, 0x0, 0x35200ab1, &(0x7f00000001c0)={{0x0, 0x4, 0x8, 0x8}, &(0x7f0000000140)={{0x9, 0x3, 0x4, 0x7}, &(0x7f0000000100)={{0x96, 0x8, 0x1, 0x8e5}}}}, 0x0, &(0x7f0000000200)="9752223e1e1eee4ea2e16726430498190671429a2dad9c0677fca8d16902c307e42a81a87b1567e9bde1932c9e36ba46eb1777292a07eeb3881e14f121da776189b10bc509cf94606c721407b5d05b06c3aa9fd04edc8048e208c749fdb30f28b45f7ad2b8f878528cedda8d08071e2a85840109f072b2e9d3c8c7", 0x3}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) r1 = syz_open_dev$vim2m(&(0x7f0000000280)='/dev/video#\x00', 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000440)={0x2, @sliced={0x6, [0x9e2e, 0x7, 0x2, 0xfffb, 0x6, 0x5, 0xfeff, 0x4, 0x0, 0x8, 0x0, 0xfffc, 0x3, 0x3, 0x9, 0x6, 0xfff, 0x1f, 0x8000, 0x8, 0xaa0b, 0x5, 0x6, 0x4, 0xa306, 0x7, 0x9, 0x8000, 0x18, 0x7, 0x876e, 0x8, 0x1, 0x1, 0x40, 0xff, 0x9, 0x7, 0x1, 0xfffd, 0x0, 0x9, 0x3ff, 0x2, 0x73, 0x200, 0x6, 0x200], 0x4}}) 17:01:58 executing program 4: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000003c0)={0x0, 0x7d39903c876110f8}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) r2 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000240)=0x1) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)={0x0, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) r3 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000002c0)={0x5, 0x6, 0x4, 0x20, 0x82c, {0x77359400}, {0x3, 0xc, 0x0, 0x68, 0x81, 0x1, "a982124b"}, 0x7f, 0x2, @userptr=0x4b, 0x9}) 17:01:58 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x2) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x2, 0x3, 0x4, 0x1000, 0x7, {0x77359400}, {0x4, 0x8, 0x40, 0x39, 0x81, 0x8, "1ce5d839"}, 0x8001, 0x2, @planes=&(0x7f00000002c0)={0xa77, 0x4614, @fd=0xffffffffffffffff, 0xbe}, 0x5}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000380)={0x8, 0x5, 0x4, 0x0, 0x0, {}, {0x4, 0x8, 0x7f, 0x0, 0xff, 0xff, "170b146d"}, 0x3, 0x4, @fd=r1, 0x9, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vim2m\x00', 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f00000001c0)={0x1, 0x1, 0x4, 0xe000, 0x2, {0x0, 0x2710}, {0x5, 0xc, 0x0, 0x6, 0x8, 0x1, "278cc61e"}, 0x3, 0x3, @planes=&(0x7f0000000100)={0x73e14eec, 0x8, @mem_offset=0x2, 0xffffffff}, 0x6a31, 0x0, r2}) 17:01:58 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0xc61, 0x9, 0x4, 0x10, 0x7ff, {r2, r3/1000+10000}, {0x1, 0x3, 0x5, 0xff, 0xac, 0x80, "6b0f1890"}, 0x3f, 0x4, @offset=0x1f, 0x7fff, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0xd2, 0x1, 0x4, 0xe000, 0x8, {}, {0x2, 0x0, 0x81, 0xde, 0x9, 0xa1, "5f885142"}, 0x0, 0x1, @offset=0x3c8, 0x4, 0x0, r4}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) [ 813.916588] vim2m vim2m.0: vidioc_s_fmt queue busy 17:01:58 executing program 4: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000003c0)={0x0, 0x7d39903c876110f8}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) r2 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000240)=0x1) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)={0x0, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) r3 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) 17:01:58 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) 17:01:58 executing program 4: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000003c0)={0x0, 0x7d39903c876110f8}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) r2 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000240)=0x1) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)={0x0, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) 17:01:58 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x2, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:58 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr}) 17:01:58 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)={0x0, 0x3, 0x4, 0x0, 0x77e0, {r1, r2/1000+10000}, {0x3, 0x8, 0x0, 0x3f, 0x0, 0x4, "f6ee20c3"}, 0x0, 0x0, @userptr}) 17:01:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000140)={0x0, 0x1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) 17:01:58 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000140)={0x0, 0xfffffffd}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x182f, 0x2, 0x7, {0x2, @sdr={0x20363059, 0x100}}, 0x22}) [ 814.045687] vim2m vim2m.0: vidioc_s_fmt queue busy 17:01:58 executing program 4: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000003c0)={0x0, 0x7d39903c876110f8}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) r2 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000240)=0x1) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)={0x0, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) 17:01:58 executing program 5: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0xc61, 0x9, 0x4, 0x10, 0x7ff, {r2, r3/1000+10000}, {0x1, 0x3, 0x5, 0xff, 0xac, 0x80, "6b0f1890"}, 0x3f, 0x4, @offset=0x1f, 0x7fff, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0xd2, 0x1, 0x4, 0xe000, 0x8, {}, {0x2, 0x0, 0x81, 0xde, 0x9, 0xa1, "5f885142"}, 0x0, 0x1, @offset=0x3c8, 0x4, 0x0, r4}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:58 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xbc80, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:58 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x1ff, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000300)={0x5, 0x2, 0x4, 0x10020, 0x7, {}, {0x4, 0x2, 0x7f, 0x3, 0x1, 0x1f, "40761e51"}, 0x4, 0x3, @planes=&(0x7f00000002c0)={0x8001, 0xfff, @mem_offset=0x1f, 0x7}, 0x3ff}) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f00000000c0)=0x1) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x3, @sdr={0x41495043, 0x4}}) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8080000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000128bd7000fcdbdf253004000005003400c000000005003300021c0000050036000100000005003500070000000500340005000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) 17:01:58 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x7, 0x2) r2 = socket(0x11, 0x2, 0x0) ioctl$SIOCAX25CTLCON(r2, 0x89e8, 0x0) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000180)="206cbbb1bdb3b1619fc4e3b43159adced867bc813705af960d3cdf02a15da568c1db4910a408a5f0960b2f303f4f58cfb30e8896dbf096f264bb1edffe2d01f9ebc37e69f2ab1491c04b4c882e5ca3244eb463b1b931c12df8b334f7cbaaae1d9f09b2afdc8a8a9d35ffc8aec7dc2e436120682c6194260b62748c1f16ab3407df1e509cba38ded281ba1b41c31b948b9d772e62d50d62", 0x97) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f0000000080)={0x0, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:58 executing program 4: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000003c0)={0x0, 0x7d39903c876110f8}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) r2 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000240)=0x1) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)={0x0, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) 17:01:58 executing program 0: ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x2}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) accept$ax25(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @rose}, [@bcast, @rose, @remote, @default, @bcast, @bcast, @rose, @bcast]}, &(0x7f0000000140)=0x48) 17:01:58 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000140)={0x0, 0x1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) 17:01:58 executing program 2: r0 = getpid() getpgid(r0) waitid(0x1, r0, &(0x7f0000000300), 0x40000000, &(0x7f0000000380)) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x200000, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000280)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000002c0)={0x5, 0x7}) ioctl$SNDCTL_SYNTH_MEMAVL(r2, 0xc004510e, &(0x7f0000000240)=0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000140)) 17:01:58 executing program 4: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000003c0)={0x0, 0x7d39903c876110f8}) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) r1 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, 0x0) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000240)=0x1) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)={0x0, 0x4}) 17:01:58 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)={0x0, 0x2, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, "f6ee20c3"}, 0x0, 0x0, @planes=&(0x7f0000000080)={0xf06, 0x85, @userptr=0x800000000, 0xfe}}) 17:01:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x11) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, ["", ""]}, 0x2}, 0x1, 0x0, 0x0, 0x4000}, 0x844) r1 = syz_open_dev$vim2m(0x0, 0x0, 0x2) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x680700, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d0d, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x0, 0x4}) r3 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETINFOOLD(r4, 0x89e9, &(0x7f0000000580)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) 17:01:58 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x1ff, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000300)={0x5, 0x2, 0x4, 0x10020, 0x7, {}, {0x4, 0x2, 0x7f, 0x3, 0x1, 0x1f, "40761e51"}, 0x4, 0x3, @planes=&(0x7f00000002c0)={0x8001, 0xfff, @mem_offset=0x1f, 0x7}, 0x3ff}) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f00000000c0)=0x1) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x3, @sdr={0x41495043, 0x4}}) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8080000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000128bd7000fcdbdf253004000005003400c000000005003300021c0000050036000100000005003500070000000500340005000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) 17:01:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x8840, 0x0) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f00000002c0)=0x4) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0x3, 0x7, 0x1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa, 0xfffffffc}}}) r2 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x79000011}}) 17:01:58 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000180)={0x1, @raw_data="e075966c719d009c6bcb430c7b8d2656e9c48372b05504fd6d6a5f2c34c259fe0c8a906ceead56166296471f79c2de53450ee11d3d81950a81d45d4b0c30ae42abc08b2e9bc8db478cb413136f2101052fc9bdf71f85bef354e84328388f2e1f697f561b2c5299313f9b7bc6baaaf13d6d896c1c9051faa03132f1f5303792ae85b3f976ef40d51625debbdba8f9c5d9a0833d0fdf903610f520a9bae0d1f247586ddd87bf9d46a331acebc36b9d34e736ff86e9ff1493146403fb20b4d8ac9578f7c9b458fe4db9"}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:58 executing program 4: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000003c0)={0x0, 0x7d39903c876110f8}) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) r1 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, 0x0) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000240)=0x1) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) 17:01:58 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r3 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000000c0)={0x8, 0x0, 0x4, 0x0, 0x7, {0x77359400}, {0x1, 0x2, 0x1, 0x2, 0x3e, 0x0, "d5c38426"}, 0x1f, 0x2, @userptr=0x5, 0x0, 0x0, r2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) 17:01:58 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x1ff, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000300)={0x5, 0x2, 0x4, 0x10020, 0x7, {}, {0x4, 0x2, 0x7f, 0x3, 0x1, 0x1f, "40761e51"}, 0x4, 0x3, @planes=&(0x7f00000002c0)={0x8001, 0xfff, @mem_offset=0x1f, 0x7}, 0x3ff}) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f00000000c0)=0x1) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x3, @sdr={0x41495043, 0x4}}) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8080000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000128bd7000fcdbdf253004000005003400c000000005003300021c0000050036000100000005003500070000000500340005000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) 17:01:58 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000240)='/dev/video#\x00', 0x20, 0x2) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000440)={0x7f, 0x3, 0x4, 0x1, 0x1, {0x0, 0x2710}, {0x3, 0xc, 0x20, 0x98, 0xa7, 0x3f, "6deb26f6"}, 0x9, 0x1, @planes=&(0x7f00000002c0)={0x1a3569b6, 0xfffffffb, @fd, 0x3}, 0x400, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000004c0)={0x1, 0x1, 0x4, 0xe000, 0x1, {0x0, 0x2710}, {0x3, 0x1, 0x4, 0x40, 0x9, 0x48, "5355298b"}, 0xc1, 0x3, @planes=&(0x7f0000000280)={0x3, 0x7, @mem_offset=0x3, 0xfffffffe}, 0x9e5, 0x0, r2}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) r3 = syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x200, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000001c0)={0x6, 0x0, 0x4, 0x1000, 0x0, {0x0, 0x2710}, {0x4, 0xc, 0x1, 0x2, 0x78, 0x0, "afe0a581"}, 0x7, 0x0, @userptr=0xfff, 0x9}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000140)={0x7fff, 0x30364d54, 0x1, @stepwise={0x6, 0x0, 0x9, 0x9, 0x401, 0x10001}}) 17:01:58 executing program 4: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000003c0)={0x0, 0x7d39903c876110f8}) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) r1 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, 0x0) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) 17:01:58 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000201, 0x3, 0x2}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000140)={0x0, 0x5, 0x3a}) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000100)={0x9, 0x6, 0x1, 0x800, 0xffffffffffffffff}) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000180)={0x4, 0xea90, 0xffffff60, 0x100000, r2}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x3) 17:01:58 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000600)={0xfffffb28, 0x1, 0x4, 0x4, 0xa249207d, {}, {0x4, 0xc, 0x1f, 0xc4, 0x5, 0x3, "85aebb82"}, 0x6, 0x1, @planes=&(0x7f0000000540)={0xa8, 0x101, @fd=0xffffffffffffffff, 0x1000}, 0x3f}) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000680)={0x0, 0x7, 0x4, 0x40, 0x7, {r4, r5/1000+10000}, {0x1, 0x1, 0x2, 0x0, 0x20, 0x81, "713aeb8d"}, 0x80000000, 0x2, @fd, 0x3, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000700)={0x2, 0x2, 0x4, 0x100000, 0xffffffff, {0x77359400}, {0x3, 0x8, 0x3f, 0x0, 0x80, 0x1, "1ccac892"}, 0x7, 0x3, @fd=r3, 0x5, 0x0, r6}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:58 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f0000000080)) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x0, 0x2, 0x4, 0x4, 0x24d, {0x77359400}, {0x2, 0xc, 0x87, 0x3, 0x4, 0x7, "1a3f90e7"}, 0x8, 0x3, @fd, 0x80, 0x0, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000001c0)={0x79a, 0x0, 0x4, 0x1000, 0x400, {r3, r4/1000+60000}, {0x2, 0x1, 0x77, 0x8, 0xdc, 0x1f, "b9eb34a5"}, 0x1, 0x2, @userptr=0x979f, 0xffffffff, 0x0, r2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) 17:01:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @sdr={0x30323953, 0xfffffff8}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) r1 = syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000500)={0x8001, 0x30314742, 0x1, @stepwise={0x8, 0x4, 0x3, 0x40, 0xffffffc1, 0x5}}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000001c0)={0x2, 0x2, 0x4, 0x20, 0x5, {0x77359400}, {0x3, 0x2, 0x0, 0x7, 0x5, 0x2, "1e3b189b"}, 0x8, 0x3, @fd, 0x7, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$vim2m(&(0x7f0000000140)='/dev/video#\x00', 0x10001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f00000004c0)={0x0, 0x494e4f4b, 0x3, @discrete={0xff03, 0x4}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000440)={0x9, 0x2, 0x4, 0x0, 0x1, {0x0, 0x2710}, {0x5, 0xc, 0xae, 0x4, 0xb5, 0x7, 'Pdy3'}, 0xffff8000, 0x3, @fd=r2, 0xff, 0x0, r2}) 17:01:58 executing program 5: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000003c0)={0x0, 0x7d39903c876110f8}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) r2 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000240)=0x1) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)={0x0, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) r3 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000002c0)={0x5, 0x6, 0x4, 0x20, 0x82c, {0x77359400}, {0x3, 0xc, 0x0, 0x68, 0x81, 0x1, "a982124b"}, 0x7f, 0x2, @userptr=0x4b, 0x9, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000340)={0x100, 0x3, 0x4, 0x10024, 0x9, {}, {0x4, 0x2, 0x1, 0x3a, 0xaa, 0x0, "e895b984"}, 0x1f, 0x4, @fd, 0x6, 0x0, r4}) 17:01:58 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x10000007, 0x0, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:58 executing program 4: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000003c0)={0x0, 0x7d39903c876110f8}) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) syz_open_dev$video(0x0, 0x0, 0x100) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) 17:01:58 executing program 1: r0 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000080)={0x401, "320a9c331bf07b2100456783a12e7795fbf0bb0cf377dc66136dc0cc2aff9b32", 0x2, 0x400, 0x3, 0x2c9, 0x2, 0x4, 0x1db, 0xc3}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) 17:01:58 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x2, @pix={0x0, 0x11e, 0xe7fd9399, 0x3, 0x5, 0x2, 0xb, 0xfffffff2, 0x1, 0x7, 0x0, 0x5}}) r2 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETINFOOLD(r3, 0x89e9, &(0x7f0000000580)) getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) ioctl$SIOCAX25DELUID(r3, 0x89e2, &(0x7f0000000240)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r4}) r5 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000300)={0x6, 0x0, 0x4, 0x10000, 0x7b4, {0x77359400}, {0x2, 0x2, 0xdf, 0x20, 0x4, 0xdc, "d8a3590e"}, 0x1ff, 0x2, @offset=0x81, 0x6, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000380)={0x800, 0x2, 0x4, 0x10, 0x2, {0x0, 0x2710}, {0x4, 0x8, 0x69, 0x9, 0x8, 0x9, "2bd0c63f"}, 0x7, 0x4, @planes=&(0x7f0000000280)={0xc24d, 0xffffb309, @userptr=0x8, 0x3}, 0xfffffff9, 0x0, r6}) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:58 executing program 5: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000003c0)={0x0, 0x7d39903c876110f8}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) r2 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000240)=0x1) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)={0x0, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) r3 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000002c0)={0x5, 0x6, 0x4, 0x20, 0x82c, {0x77359400}, {0x3, 0xc, 0x0, 0x68, 0x81, 0x1, "a982124b"}, 0x7f, 0x2, @userptr=0x4b, 0x9, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000340)={0x100, 0x3, 0x4, 0x10024, 0x9, {}, {0x4, 0x2, 0x1, 0x3a, 0xaa, 0x0, "e895b984"}, 0x1f, 0x4, @fd, 0x6, 0x0, r4}) 17:01:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0xffffffff}, {}, {}, {}, {}, {}, {0x0, 0x9ef}], 0x0, 0x0, 0x3}}}) 17:01:58 executing program 4: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000003c0)={0x0, 0x7d39903c876110f8}) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) 17:01:58 executing program 2: socketpair(0x9, 0x80000, 0x6a3, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x220000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r1, 0x200, 0x4, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0xed5416eb3773dd3e) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x4, 0xe3c, 0x4, 0xf83, 0x1, 0x3, [], 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x40) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000480)={0x3, 0x9, 0x4, 0x2000, 0x1, {}, {0x5, 0x0, 0x2, 0x3, 0x2, 0x0, "2fada75d"}, 0x1e, 0x4, @offset=0x5, 0x9, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000500)={0x0, 0x2, 0x4, 0x400, 0x9, {0x0, 0xea60}, {0x3, 0x0, 0x4, 0xe8, 0x20, 0x2b, "51822548"}, 0x7fff, 0x4, @userptr=0x10001, 0xbf8, 0x0, r2}) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)={0x24, r1, 0x4, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x48014) recvfrom$ax25(r3, &(0x7f0000000180)=""/186, 0xba, 0xb026fc0483d050bf, &(0x7f0000000240)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x5}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)) 17:01:58 executing program 5: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000003c0)={0x0, 0x7d39903c876110f8}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) r2 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000240)=0x1) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)={0x0, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) r3 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000002c0)={0x5, 0x6, 0x4, 0x20, 0x82c, {0x77359400}, {0x3, 0xc, 0x0, 0x68, 0x81, 0x1, "a982124b"}, 0x7f, 0x2, @userptr=0x4b, 0x9, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000340)={0x100, 0x3, 0x4, 0x10024, 0x9, {}, {0x4, 0x2, 0x1, 0x3a, 0xaa, 0x0, "e895b984"}, 0x1f, 0x4, @fd, 0x6, 0x0, r4}) 17:01:58 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x3d9, 0x3, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr, 0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x7, 0x2) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000300)={0x1000, 0x1, 0x4, 0x1000, 0x6, {r3, r4/1000+10000}, {0x2, 0xc, 0x2, 0x6, 0x8, 0x1, "43e7aeb5"}, 0x1, 0x3, @planes=&(0x7f00000002c0)={0x308, 0x80000001, @userptr=0x312, 0x7}, 0x44, 0x0, r1}) r5 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$SIOCGSTAMPNS(r5, 0x8907, &(0x7f0000000380)) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000001c0)={0x0, @raw_data="6d83e795718c7383fe4017cc47c9f655b31512f4097c9f838dd9e33f3eac6334743171d9bb70f476075d7e5e75e3b6d795e616b7d7f63f5a6139bfc93ff245df1283c107f1297fae147d537a679966cedd9bf3dfb11fa239e1cb7526977d9da3beb591b220012f8000679f59d9eab47ef24141aef345187ee046ed9cc7d24c75d5ce32cd4051c1e2ddb09ec139ccdc20ff1af95b6b684de0a79b787325a68c2b9e3fdd04a47dbfba5816cdd7341793328a566bbaa09594aad629aa808471a8809e8344d06eed0d8e"}) 17:01:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000001c0)={0x1, 0x2, 0x4, 0x400, 0x400, {}, {0x3, 0x2, 0xfe, 0x7d, 0x7f, 0x3, "a8b42765"}, 0x80000000, 0x3, @offset, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000240)={0xfffff800, 0x1, 0x4, 0x70000, 0x1ff, {}, {0x3, 0x1, 0x3, 0x9, 0x3, 0x4, "c1254a6e"}, 0x4, 0x4, @offset=0xffffffa2, 0x8, 0x0, r2}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)) 17:01:58 executing program 3: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000080)={0x10001, 0x1, 0x4, 0x100, 0x9, {0x77359400}, {0x4, 0x0, 0x7, 0x0, 0x20, 0x20, "b5dc7bf6"}, 0x0, 0x2, @planes=&(0x7f0000000040)={0xba1, 0x7, @fd, 0x9}, 0xffff8675}) syz_open_dev$vim2m(0x0, 0x0, 0x2) r0 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000140)=0x3) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x11) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE, @IEEE802154_ATTR_PAN_ID, @IEEE802154_ATTR_PAN_ID, @IEEE802154_ATTR_DEV_INDEX={0x0, 0x2, r3}, @IEEE802154_ATTR_HW_ADDR={0x0, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0x0, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x0, 0x2f, 0x1}]}, 0xffffffffffffff31}, 0x1, 0x0, 0x0, 0x4004}, 0x8011) 17:01:58 executing program 4: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000003c0)={0x0, 0x7d39903c876110f8}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) 17:01:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x3) 17:01:58 executing program 5: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000003c0)={0x0, 0x7d39903c876110f8}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) r2 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000240)=0x1) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)={0x0, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) r3 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000002c0)={0x5, 0x6, 0x4, 0x20, 0x82c, {0x77359400}, {0x3, 0xc, 0x0, 0x68, 0x81, 0x1, "a982124b"}, 0x7f, 0x2, @userptr=0x4b, 0x9}) 17:01:58 executing program 4: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, 0x0) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) 17:01:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x200002, 0x2, {0x2, @pix_mp={0x800, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}], 0x0, 0x10, 0x0, 0x0, 0x4}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x8ae, 0x4, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', r1) 17:01:58 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) r1 = socket(0x1e, 0x5, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', r1) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x0, 0x2}) r2 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0xea, 0x0, 0x4, 0x0, 0x3f, {}, {0x4, 0x0, 0x41, 0x1, 0x3, 0x7, "b1379cc4"}, 0x2, 0x2, @planes=&(0x7f0000000080)={0x4c, 0xfffffffc, @userptr=0x2, 0x1f}, 0x40, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)={0x7fffffff, 0xa8a948da76a5df9a, 0x4, 0x800, 0x41, {r3, r4/1000+60000}, {0x4, 0x0, 0xc7, 0x81, 0x7, 0xe2, "062d9a7c"}, 0x7, 0x2, @fd, 0x7, 0x0, r5}) 17:01:58 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x100, 0x8, 0x4, {0x0, @pix_mp={0x8, 0x2, 0x3a44437e, 0x6, 0x7, [{0x2, 0x5}, {0x9, 0x3f}, {0x8, 0x99db}, {0x2, 0x1}, {0x8, 0x9}, {0x8, 0x3}, {0x7, 0x3}, {0x1, 0x1}], 0x3, 0x81, 0x7, 0x0, 0x1}}, 0x8000}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000003c0)={0x0, @win={{0x5, 0x7, 0x0, 0x4000400}, 0x8, 0x1, &(0x7f0000000340)={{0x1, 0x101, 0xffffffc1, 0x3b3e}, &(0x7f0000000300)={{0x8, 0x100, 0x3, 0x3f}, &(0x7f00000002c0)={{0x401, 0x4, 0xffff8000, 0x3}}}}, 0xffff, &(0x7f0000000380)="1628dec1801e", 0x1f}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)={0x5, 0x2, 0x4, 0x41, 0x738434c5, {}, {0x5, 0x8, 0x1, 0x46, 0x1, 0x20, "fe626469"}, 0x5, 0x4, @offset=0x3f, 0x9}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x2000002, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr, 0x0, 0x0, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000500)={0x5, 0x0, 0x4, 0x4, 0x3f4f, {r5, r6/1000+10000}, {0x1, 0x1, 0x31, 0x7b, 0x1, 0xb7, "b14af34c"}, 0x7445, 0x3, @fd=0xffffffffffffffff, 0x7, 0x0, r4}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000006c0)={0x6, 0x7, 0x4, 0x0, 0xd734, {}, {0x6, 0x0, 0x20, 0x7, 0x7, 0x1, "56ee463a"}, 0x80000001, 0x4, @fd=r7, 0x9105, 0x0, r3}) 17:01:59 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) r1 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x90000, 0x0) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000100)=0x9) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000080)={0xb, {0x7, 0xf5bb, 0x3, 0xcb}}) 17:01:59 executing program 4: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) 17:01:59 executing program 5: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000003c0)={0x0, 0x7d39903c876110f8}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) r2 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000240)=0x1) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)={0x0, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) r3 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) 17:01:59 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)={0x200007, 0xa, 0x4, 0x20, 0xff, {0x77359400}, {0x5, 0x1, 0x2, 0x80, 0x9, 0x2, "f53f0123"}, 0x7ff, 0x2, @offset=0x40, 0x6, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f00000004c0)={0x5, "620d568bffadbaedd89e08b69f39717b82a93991af3be4d5f8aa7ee683539aa8", 0x2}) r2 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) r3 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r6 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000280)={0x3, 0x1f757a69, 0x1, @discrete={0x0, 0x80}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@rand_addr, @multicast1}, &(0x7f0000000240)=0xc) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000003c0)={0x2, @pix_mp={0x7, 0x0, 0x34324142, 0x0, 0x6, [{0x80000000, 0x8bb}, {0x9, 0x40}, {0x6292de7a, 0x9}, {0x5, 0x9}, {0x200, 0x3}, {0x3, 0x200}, {0x4, 0x4}, {0x8, 0x3}], 0x81, 0x7f, 0x6, 0x2}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f00000002c0)={0xfff, 0x2, 0x4, 0x1000, 0x9b2, {r4, r5/1000+10000}, {0x5, 0x2, 0xd6, 0xc5, 0x80, 0x0, "a0f41e57"}, 0x8, 0x2, @fd=0xffffffffffffffff, 0x9}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000340)={0x1ff, 0x1, 0x4, 0x800, 0x6, {}, {0x4, 0x0, 0x6, 0x90, 0x2, 0x6, "9a28d943"}, 0x80, 0x4, @fd=r7, 0x3, 0x0, r1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) 17:01:59 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:59 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000001c0)={0x80, 0x10000, 0x4, {0x3, @sliced={0xff81, [0x7, 0x6, 0x2, 0x0, 0x3f, 0x800, 0x8, 0x9, 0x4, 0x10e, 0x3, 0x40, 0x560f, 0xb06, 0x400, 0xc, 0x8, 0xfffb, 0x0, 0xfc60, 0x81, 0x9, 0x8, 0x2, 0x9ce, 0xc4, 0xc24, 0x6, 0x3, 0x7, 0x3f, 0x100, 0x3f, 0xbfbb, 0x5ce4, 0x94e, 0xff81, 0x8, 0xffff, 0x0, 0x401, 0x0, 0x670, 0x7, 0x800, 0x7, 0xff, 0x3], 0xffff13ae}}, 0x3}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) 17:01:59 executing program 5: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000003c0)={0x0, 0x7d39903c876110f8}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) r2 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000240)=0x1) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)={0x0, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) 17:01:59 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x8000, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:59 executing program 4: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) 17:01:59 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:01:59 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vim2m\x00', 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000300)={0x1, @sliced={0x8, [0x2, 0x1, 0x3f, 0x0, 0xfff, 0x9, 0x1000, 0x3, 0x2, 0x8, 0x101, 0x4640, 0xff, 0x45c0, 0x4, 0x401, 0x100, 0x80, 0x66, 0x9, 0x8, 0x1, 0xffff, 0x1000, 0x0, 0xc4, 0x1, 0x40, 0x8, 0x5, 0x0, 0x81, 0x8000, 0x3, 0x9, 0x84, 0x0, 0x7ff, 0x8001, 0x6, 0x9, 0x8, 0x3, 0x4cda, 0x3, 0x5, 0x100, 0x4], 0x5}}) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000180)={0x3, @pix_mp={0x7, 0x0, 0x35315258, 0x1, 0x5, [{0x101, 0xffffffc0}, {0x2, 0x80000001}, {0x9, 0x1}, {0x5, 0x8}, {0x8001, 0x2}, {0x1, 0x20}, {0x9, 0x6}, {0x2, 0x400}], 0x4, 0x1, 0x3, 0x0, 0x6}}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="f5b304f54d7b1120beb1ac1b20ad7b8b1b729496028fb188f0f029a2cd7d58959b51d036d91eb3f43ef364a7976f8e9603c559862cfdc151edb8dcb96cd564b6909dded4ce155a4f60d55f91286e474b6505ef6a59bd841a3ef23d48ed80f8f76848898da09176b7eb874d7bd3068839a3d30d0ff7b2a3c228", 0x79}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/4168], 0x1048, 0x1}, 0x40) 17:01:59 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000100), 0x10) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) 17:01:59 executing program 5: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000003c0)={0x0, 0x7d39903c876110f8}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) r2 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000240)=0x1) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)={0x0, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) 17:01:59 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x2000000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:59 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) 17:01:59 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)={0x7, 0xb, 0x4, 0x8, 0x9, {0x77359400}, {0x2, 0x1, 0x1, 0x3, 0x3f, 0x0, "b4a6b7f3"}, 0x1be, 0x4, @offset=0xf3, 0x2, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)={0x31a, 0x0, 0x4, 0x102008, 0x5, {0x77359400}, {0xa604a408824444cc, 0x0, 0x9, 0xff, 0x7f, 0x3f, "d8c1a7da"}, 0x1ff, 0x2, @userptr, 0xa6f3, 0x0, r1}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000080)={0x80000001, 0x4, 0x4, 0x10, 0x1000, {}, {0x2, 0x1, 0x4, 0x3a, 0xfe, 0x5, "97bfdccb"}, 0x1, 0x4, @userptr=0x40}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000100)={0x5, 0xe3a}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x4, 0x2, {}, {0x0, 0x8, 0x0, 0x80, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr=0x6}) 17:01:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000480)='/dev/dri/card#\x00', 0x37, 0x1) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f00000004c0)={0x0, 0x3}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x7, 0x3, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0xffffffff, 0x97b, 0x1, {0x2, @sliced={0xbf7f, [0x0, 0x40, 0x0, 0x3f, 0x5, 0x4, 0x8000, 0x1f, 0xffc1, 0x8, 0x2, 0x20, 0x8, 0x7, 0xffff, 0x4, 0x8, 0x20, 0xe68e, 0x3ff, 0x9, 0x805, 0x1000, 0x7ff, 0x4, 0x1f, 0x3ff, 0x9f40, 0x80, 0x9, 0x4, 0x9, 0x8, 0x200, 0x0, 0x1, 0x400, 0x3ff, 0x6, 0xb94, 0xfffb, 0x20, 0xe000, 0x1ff, 0x3, 0x1200, 0x7291, 0x8], 0x400}}, 0x1}) r2 = syz_open_dev$vim2m(&(0x7f00000002c0)='/dev/video#\x00', 0xd1, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000001c0)={0x0, @win={{0x2, 0xffffffff, 0x4, 0x40}, 0x8, 0x7, &(0x7f0000000300)={{0xffffffe0, 0x9, 0x3, 0x6}}, 0x8, &(0x7f0000000440)="45fbc3a16e4b3b89ba07608fc8764ba5df2cfa371cb44d07c85c9824c28e388dfd371d0c6cee5ab02eb8f0478bfa8517b317f2", 0x4}}) 17:01:59 executing program 5: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000003c0)={0x0, 0x7d39903c876110f8}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) r2 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000240)=0x1) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)={0x0, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) 17:01:59 executing program 4: syz_open_dev$dri(0x0, 0x3f, 0x101240) 17:01:59 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x4, 0x2e8ad3f95ce4be74, 0x3}) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockname(r1, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @private1}, &(0x7f00000001c0)=0x80) r2 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:01:59 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x30000, 0x0) socketpair(0x2, 0x8080d, 0xffff09de, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$isdn(r1, &(0x7f0000000200)={0x7f, 0x20, "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"}, 0x1008, 0x4008891, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) 17:01:59 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0x8009, 0xcd}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000300)) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0x8, 0x3, 0xffffffc0, 0xc000, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, r2}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:01:59 executing program 5: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000003c0)={0x0, 0x7d39903c876110f8}) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) r1 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, 0x0) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000240)=0x1) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)={0x0, 0x4}) 17:02:00 executing program 4: syz_open_dev$dri(0x0, 0x3f, 0x101240) 17:02:00 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x3, @pix={0x80000001, 0x63f8, 0x41416770, 0x5, 0x0, 0x9, 0x1, 0x3f, 0x1, 0x3, 0x2, 0x2}}) 17:02:00 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) r1 = syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000001c0)={0x2, @vbi={0x1, 0x80000000, 0xd366, 0x3031334d, [0x0, 0x8], [0x23, 0x2], 0x2}}) 17:02:00 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) r2 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x7, 0x0, 0x4, 0x800, 0x8, {0x0, 0x2710}, {0x2, 0x0, 0xf9, 0x0, 0x4, 0xfd, "a60e3588"}, 0x1, 0x1, @userptr=0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:02:00 executing program 5: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000003c0)={0x0, 0x7d39903c876110f8}) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) r1 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, 0x0) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000240)=0x1) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) 17:02:00 executing program 4: syz_open_dev$dri(0x0, 0x3f, 0x101240) 17:02:00 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x1000, 0x2, 0x2}) r1 = syz_open_dev$vim2m(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000240)={0x7, 0x1, 0x4, 0x2, 0x7ff, {r2, r3/1000+60000}, {0x18b699ae93c792f, 0x2, 0x2, 0x5, 0x3, 0x3f, "27c4bb47"}, 0xfffffffb, 0x2, @offset, 0x3}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr, 0x0, 0x0, 0xffffffffffffffff}) r5 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x2410, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f00000000c0)={0x1bcb0cac, 0x2, 0x4, 0x1, 0x3ff, {}, {0x5, 0x1, 0x1, 0x20, 0x8, 0x0, "8d6fed63"}, 0xfff, 0x4, @fd, 0x101, 0x0, r4}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000002c0)={0x0, @pix={0xcd, 0x8a5b, 0x39555659, 0x0, 0x9148, 0x4, 0x4, 0x6, 0x0, 0x8, 0x1, 0x7}}) 17:02:00 executing program 5: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000003c0)={0x0, 0x7d39903c876110f8}) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) r1 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, 0x0) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) 17:02:00 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x101240) 17:02:00 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000500)={0x10001, 0x31435750, 0x1, @discrete={0x6, 0x7}}) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f00000005c0)={0x80, 0xa, 0x21, "e65e6bffe6ff02d3495ad402f76675f067d2f7e2d1c9cb7e885322c5c9bdd98d4bd5b270d26bfdbadbbb40fb6b75360d4f94a9661e1c22b9aa7e61c3", 0x1, "5eebd92983e9cf16a90674df19ef1840a17cb4936cd8c3c5331ca635702492b36c2824f473873e8492bb469ec7071e71a68dd20ac4912773601bfaa0", 0x10}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff, 0x3}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000540)={0x7fff, 0x0, 0x2013, 0x4, 0x0, 0x2, 0x9}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000700)={0x1, @sdr={0x34324948, 0x7}}) sendmsg$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)="8e62ebd3ae", 0x5}, {&(0x7f00000001c0)="7a70a23e3889d8fb96ff33cf04a1bc501a9a9d7e1965b974a957712f77d3d604d71af951645e2d2bfe5cac2a91f1663c86f70a4f0ae6136af054f8fcc2de545419a81ebbf9ff53466e8cb1b6d2b96aef10a25bf1d29ab7e6ab00c75db550ab436e2d0c3cacfa14a598ba9afe53c06ec285ca3dcc50c3735129b1586bb3a76b49859bdcd96d64", 0x86}, {&(0x7f0000000280)="80621a39236b718bc6153808b4c4d34b9a5e0060b61486ecd83cf08daa2f76ffb0cf3a414054b0f9259981ed558dd0c84a2fe0253eae61ee4c212862bd40c3ea336a0cf909bd2dd64e19775a5e3b50b1b9f85fad88589722afc6cc54e5485915bdb08d82faba110618c4a032d1eb221c1e1bb37623276e5012ce930c1aba4863cd68ae6cf36edf3e56893973", 0x8c}], 0x3, &(0x7f0000000480)=[@assoc={0x18, 0x117, 0x4, 0xffffffff}], 0x18, 0x40}, 0x8084) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000680)={0x6, 0x2, 0x0, "356bbc849eadb03f042c908e9755b3865b7b37411f5960e4166759fe8809f5ac", 0x20303159}) 17:02:00 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x2, 0x0, @userptr, 0x2000}) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @rose}, [@netrom, @remote, @netrom, @default, @bcast, @rose, @default, @bcast]}, &(0x7f0000000100)=0x48) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f00000001c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null}) 17:02:00 executing program 5: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000003c0)={0x0, 0x7d39903c876110f8}) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) syz_open_dev$video(0x0, 0x0, 0x100) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) 17:02:00 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x101240) 17:02:00 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0xff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x1, @sliced={0x0, [0x1, 0x7, 0x81, 0x100, 0x8, 0x780, 0x9, 0xe2, 0x3feb, 0x9, 0x0, 0x1000, 0xee5a, 0x4, 0x6, 0x71b3, 0x85, 0x78b, 0x3ff, 0x3, 0x8001, 0x1000, 0x9, 0x5, 0x7, 0x3, 0x40, 0x1, 0xffab, 0x400, 0x6, 0x2, 0x1ff, 0x7ff, 0x3, 0x0, 0xffff, 0xe448, 0x400, 0xe4, 0x1ff, 0x6, 0x8000, 0x7, 0x7, 0x9, 0x4, 0x8001], 0x1}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:02:00 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) 17:02:00 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x101240) 17:02:00 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:02:00 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0x3, @raw_data="11b2264b4067f94c34fff6ce442341083c3a680439f557560c2ed12d2663634772ab2bc7866045244137e33f439e35eab7e53efa731c63d94fd701e315b5b1818a1d78f87f344851d4949d8b502e5e9f8fc2f4552bfad6c714f66dc7bc134f6bd145ca5647cdbf8d95becaef415ddfe45d82567fffca62849df2d15ffc8341f57c0673dea6f3a75c333a45d75a65e0122323c23915eace7c3b7c559d3866958bec241cc95abd87437b6976d0246e24a245f0fc5ef89c4baa3bf7fa2aa8442cbeaa236a80506d61a7"}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000140)={0x3, 0x3, 0x5, 0x80000}) r2 = syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000001c0)={0x3, @vbi={0xff, 0x10000, 0x9, 0x32314d56, [0xbbdb, 0x5], [0x5, 0x2], 0x108}}) 17:02:00 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x8000, 0x9, 0x2, {0x1, @win={{0x4, 0x8, 0x6, 0x20}, 0x1, 0x3e4, &(0x7f0000000100)={{0x50c8, 0x40, 0x2, 0x5}, &(0x7f00000000c0)={{0x5, 0x8, 0x8}, &(0x7f0000000080)={{0xffffff5b, 0x0, 0x6, 0x9}}}}, 0x1f, &(0x7f0000000180)="0d8377c6697df7d7da79571203cfa67ecdd9c983e2cf7c241b2ca53f775ef9a20a224fb5e8189bf3b820b60f721559fe7410794230b97827eca189352047e22bdc1a09b793e20f6f8fa7a5d49d518a16fd475f7880db25fea01c955c06c8fdd3652c17862f6a09d103bacad52602c0d11e0587880d0ec1cc4ed332938a734f0ac90cdc2c899ad5b4a0b3eddb715c3c10c2e96f2a28cf00891c838e9d1096ee2ae439d75377cff15ee61e593abff2c64c5f52314b8effc0451a3965eb", 0x7}}, 0x6da5}) r1 = syz_open_dev$vim2m(&(0x7f0000000340)='/dev/video#\x00', 0x5, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000380)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:02:00 executing program 5: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000003c0)={0x0, 0x7d39903c876110f8}) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) 17:02:00 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000100)=0x3) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000080)={0xfffffe01, 0x1, 0x4, 0x2002, 0x2, {}, {0x5, 0x0, 0x80, 0x1, 0xf3, 0x9, "4b728cda"}, 0x1d8f, 0x0, @fd, 0x3, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)={0x6, 0x2, 0x4, 0x8, 0x7, {}, {0x1, 0x2, 0x40, 0x1, 0x7f, 0xf, "d7b46435"}, 0x7, 0x1, @userptr=0x391ce198, 0x200, 0x0, r2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) 17:02:00 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x0) 17:02:00 executing program 5: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000003c0)={0x0, 0x7d39903c876110f8}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) 17:02:00 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0xfff, 0x1, 0x3}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:02:00 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x0) 17:02:00 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000140)={0x200, 0x1}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000100)={0x5, 0x39565559, 0x1, @stepwise={0x800, 0x3, 0x9, 0x808, 0x858c, 0x1f}}) r2 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) syz_open_dev$vim2m(&(0x7f0000000240)='/dev/video#\x00', 0x9, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000001c0)={0xffff, 0x2, 0x4, 0x4, 0xdf, {0x0, 0x2710}, {0x5, 0x8, 0x2, 0x24, 0x0, 0x20, "62ac3210"}, 0x683, 0x4, @fd, 0xff}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) r3 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000440)={0x1, @pix={0x6, 0x20, 0x36314d59, 0x0, 0xffffa31e, 0x1, 0x4, 0x9872, 0x1, 0x3, 0x3, 0x2}}) 17:02:00 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x0, 0x1f}) 17:02:00 executing program 5: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, 0x0) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) 17:02:00 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x1000, 0x2000) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x9, 0x0, 0x3}) 17:02:00 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000380)={0x3, 0x2, 0x3}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) r2 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000280)={0x0, 0x8000}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000100)={0x8, 0x8, 0x1, {0x2, @sliced={0x1f, [0x5, 0x1, 0x313c, 0x20, 0x60, 0x9, 0x9, 0xec, 0x0, 0x9, 0x3f59, 0x7ff, 0xfffb, 0x6, 0x4, 0x20, 0x79c, 0x1, 0x6, 0x3, 0xff, 0x0, 0x0, 0x4, 0x0, 0x4, 0x6, 0x4, 0x80, 0xd64a, 0x1, 0xffff, 0x5, 0x42ae, 0xff, 0xd997, 0x37a8, 0x3, 0x7, 0x1d6, 0x4, 0x9, 0x3f, 0x5, 0x9, 0xd5b6, 0x6, 0x4], 0x8000}}, 0x3}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x5, 0x3, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0xb0, 0x3, 0x5, 0x81, "ca2d435a"}, 0x10001, 0x1, @userptr=0xce55, 0x101}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000200)={0x9, 0x1, 0x4, 0x2000, 0xcfc5, {}, {0x2, 0x1, 0x1, 0x3, 0x1, 0x8, "8e6aabf3"}, 0x1, 0x3, @fd, 0x4, 0x0, r4}) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETINFOOLD(r5, 0x89e9, &(0x7f0000000580)) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x4e00, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r6, 0xc004510e, &(0x7f00000003c0)=0x2) recvfrom$ax25(r5, &(0x7f0000000080)=""/76, 0x4c, 0x2, 0x0, 0x0) 17:02:00 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x0) 17:02:00 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0xfffffffd, 0x2, 0x6, {0x2, @pix_mp={0xfff, 0x0, 0x7f007976, 0x4, 0x5, [{0xffffffff}, {}, {}, {}, {0x9, 0xfffffffd}, {}, {0x3}, {0xcd14, 0x7f3}], 0x0, 0x0, 0x0, 0x461087924b7c7520, 0x6}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x2, 0x0, 0x1}}}) 17:02:00 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100)) r1 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x5, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f00000000c0)=0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:02:00 executing program 5: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) 17:02:00 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000002c0)={0x10000, 0x2, 0x4, 0x0, 0x91c, {r2, r3/1000+60000}, {0x3, 0x0, 0x3, 0x9, 0x20, 0x35, "9c0e62c5"}, 0x2, 0x3, @offset=0x1f, 0x2a}) r4 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0xffffffff, 0x400000) ioctl$VIDIOC_G_JPEGCOMP(r4, 0x808c563d, &(0x7f00000001c0)) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x1000000, 0x3, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0xfc, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr=0x4}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000080)={0x0, 0x6, 0x4, 0xf1170, 0x8, {0x0, 0xea60}, {0x4, 0x0, 0x7, 0x80, 0x6, 0xe0, "a23100b4"}, 0xfffffc00, 0x4, @userptr=0x3, 0x3}) 17:02:00 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x1000, 0x2, 0x2}) r1 = syz_open_dev$vim2m(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000240)={0x7, 0x1, 0x4, 0x2, 0x7ff, {r2, r3/1000+60000}, {0x18b699ae93c792f, 0x2, 0x2, 0x5, 0x3, 0x3f, "27c4bb47"}, 0xfffffffb, 0x2, @offset, 0x3}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr, 0x0, 0x0, 0xffffffffffffffff}) r5 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x2410, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f00000000c0)={0x1bcb0cac, 0x2, 0x4, 0x1, 0x3ff, {}, {0x5, 0x1, 0x1, 0x20, 0x8, 0x0, "8d6fed63"}, 0xfff, 0x4, @fd, 0x101, 0x0, r4}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000002c0)={0x0, @pix={0xcd, 0x8a5b, 0x39555659, 0x0, 0x9148, 0x4, 0x4, 0x6, 0x0, 0x8, 0x1, 0x7}}) 17:02:00 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)={0xd48, 0x1, 0x4, 0x4, 0x800, {r1, r2/1000+60000}, {0x2, 0x1, 0x5, 0x1, 0x0, 0x7, "319edb4a"}, 0x4, 0x4, @offset=0x8, 0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 17:02:00 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) 17:02:00 executing program 5: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={0x0, 0x2}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) 17:02:00 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0xfffffffd, 0x2, 0x6, {0x2, @pix_mp={0xfff, 0x0, 0x7f007976, 0x4, 0x5, [{0xffffffff}, {}, {}, {}, {0x9, 0xfffffffd}, {}, {0x3}, {0xcd14, 0x7f3}], 0x0, 0x0, 0x0, 0x461087924b7c7520, 0x6}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x2, 0x0, 0x1}}}) 17:02:00 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x0, @vbi={0x100, 0x8, 0x5, 0x6770626d, [0x2, 0x1], [0x101, 0x9], 0x2}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x4, 0x8000, 0x4000}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:02:01 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000040)={0xff, "aa807f6f956393397ca2798bb4e6fa772a850f377e4b367d06b2f3652ced1bc2", 0x0, 0x1}) r2 = syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f00000000c0)={0x6, 0x7ff, 0xfff, 0x84400}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:02:01 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x30000, 0x0) socketpair(0x2, 0x8080d, 0xffff09de, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$isdn(r1, &(0x7f0000000200)={0x7f, 0x20, "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"}, 0x1008, 0x4008891, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) 17:02:01 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)={0x6, 0x0, 0x4, 0x100, 0xfffff000, {0x0, 0xea60}, {0x1, 0x1, 0x20, 0x0, 0x2, 0xb4, "9d3451b5"}, 0x7, 0x4, @fd, 0x5}) 17:02:01 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x101240) 17:02:01 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)={0x200007, 0xa, 0x4, 0x20, 0xff, {0x77359400}, {0x5, 0x1, 0x2, 0x80, 0x9, 0x2, "f53f0123"}, 0x7ff, 0x2, @offset=0x40, 0x6, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f00000004c0)={0x5, "620d568bffadbaedd89e08b69f39717b82a93991af3be4d5f8aa7ee683539aa8", 0x2}) r2 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) r3 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r6 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000280)={0x3, 0x1f757a69, 0x1, @discrete={0x0, 0x80}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@rand_addr, @multicast1}, &(0x7f0000000240)=0xc) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000003c0)={0x2, @pix_mp={0x7, 0x0, 0x34324142, 0x0, 0x6, [{0x80000000, 0x8bb}, {0x9, 0x40}, {0x6292de7a, 0x9}, {0x5, 0x9}, {0x200, 0x3}, {0x3, 0x200}, {0x4, 0x4}, {0x8, 0x3}], 0x81, 0x7f, 0x6, 0x2}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f00000002c0)={0xfff, 0x2, 0x4, 0x1000, 0x9b2, {r4, r5/1000+10000}, {0x5, 0x2, 0xd6, 0xc5, 0x80, 0x0, "a0f41e57"}, 0x8, 0x2, @fd=0xffffffffffffffff, 0x9}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000340)={0x1ff, 0x1, 0x4, 0x800, 0x6, {}, {0x4, 0x0, 0x6, 0x90, 0x2, 0x6, "9a28d943"}, 0x80, 0x4, @fd=r7, 0x3, 0x0, r1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) 17:02:01 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000100)={0x4, 0x30314752, 0x6, 0xfff, 0x1, @discrete={0x1, 0x7f}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) 17:02:01 executing program 1: r0 = syz_open_dev$video(0x0, 0x0, 0x100) prctl$PR_SET_KEEPCAPS(0x8, 0x1) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000080)={0x3, 0x0, [0x9, 0x40, 0x9, 0x2, 0x1, 0x3ff, 0x2, 0x589]}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr=0xfffffffffffffffd}) r2 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xea0, 0x187200) ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, &(0x7f00000001c0)) 17:02:01 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)={0x200007, 0xa, 0x4, 0x20, 0xff, {0x77359400}, {0x5, 0x1, 0x2, 0x80, 0x9, 0x2, "f53f0123"}, 0x7ff, 0x2, @offset=0x40, 0x6, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f00000004c0)={0x5, "620d568bffadbaedd89e08b69f39717b82a93991af3be4d5f8aa7ee683539aa8", 0x2}) r2 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) r3 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r6 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000280)={0x3, 0x1f757a69, 0x1, @discrete={0x0, 0x80}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@rand_addr, @multicast1}, &(0x7f0000000240)=0xc) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000003c0)={0x2, @pix_mp={0x7, 0x0, 0x34324142, 0x0, 0x6, [{0x80000000, 0x8bb}, {0x9, 0x40}, {0x6292de7a, 0x9}, {0x5, 0x9}, {0x200, 0x3}, {0x3, 0x200}, {0x4, 0x4}, {0x8, 0x3}], 0x81, 0x7f, 0x6, 0x2}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f00000002c0)={0xfff, 0x2, 0x4, 0x1000, 0x9b2, {r4, r5/1000+10000}, {0x5, 0x2, 0xd6, 0xc5, 0x80, 0x0, "a0f41e57"}, 0x8, 0x2, @fd=0xffffffffffffffff, 0x9}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000340)={0x1ff, 0x1, 0x4, 0x800, 0x6, {}, {0x4, 0x0, 0x6, 0x90, 0x2, 0x6, "9a28d943"}, 0x80, 0x4, @fd=r7, 0x3, 0x0, r1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) 17:02:01 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x2) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000140)={0x1, 0x4, 0x4}) r2 = syz_open_dev$vim2m(&(0x7f00000001c0)='/dev/video#\x00', 0x6, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000200)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000240)={0x5, 0x1, 0x4, 0xe000, 0x8000, {0x0, 0x2710}, {0x1, 0x2, 0x1, 0x5, 0x9, 0x5, "92558e5c"}, 0x1000, 0x1, @offset=0x4, 0xb909, 0x0, r3}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) 17:02:01 executing program 5: syz_open_dev$dri(0x0, 0x3f, 0x101240) 17:02:01 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x0, 0xffffffff, 0x3, 0x800}) 17:02:01 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x30000, 0x0) socketpair(0x2, 0x8080d, 0xffff09de, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$isdn(r1, &(0x7f0000000200)={0x7f, 0x20, "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"}, 0x1008, 0x4008891, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) 17:02:01 executing program 5: syz_open_dev$dri(0x0, 0x3f, 0x101240) 17:02:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="20002abd7000fbdbdf250c0000000500380001000000850035001100000005003300020000000500290000000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r2 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000240)) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) r3 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000040)) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:02:01 executing program 5: syz_open_dev$dri(0x0, 0x3f, 0x101240) 17:02:01 executing program 1: ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee00}) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000002c0)) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) r2 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000001c0)={0x3, @pix={0x6, 0xfff, 0x42474752, 0x1, 0x10c0, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1}}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) 17:02:01 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0xeae, 0x455e, 0x3132564e, 0x1, 0x4, 0x3, 0x6, 0x8, 0x0, 0x7, 0x1}}) 17:02:01 executing program 3: getitimer(0x1, &(0x7f0000000040)) r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:02:01 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)={0x200007, 0xa, 0x4, 0x20, 0xff, {0x77359400}, {0x5, 0x1, 0x2, 0x80, 0x9, 0x2, "f53f0123"}, 0x7ff, 0x2, @offset=0x40, 0x6, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f00000004c0)={0x5, "620d568bffadbaedd89e08b69f39717b82a93991af3be4d5f8aa7ee683539aa8", 0x2}) r2 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) r3 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r6 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000280)={0x3, 0x1f757a69, 0x1, @discrete={0x0, 0x80}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@rand_addr, @multicast1}, &(0x7f0000000240)=0xc) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000003c0)={0x2, @pix_mp={0x7, 0x0, 0x34324142, 0x0, 0x6, [{0x80000000, 0x8bb}, {0x9, 0x40}, {0x6292de7a, 0x9}, {0x5, 0x9}, {0x200, 0x3}, {0x3, 0x200}, {0x4, 0x4}, {0x8, 0x3}], 0x81, 0x7f, 0x6, 0x2}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f00000002c0)={0xfff, 0x2, 0x4, 0x1000, 0x9b2, {r4, r5/1000+10000}, {0x5, 0x2, 0xd6, 0xc5, 0x80, 0x0, "a0f41e57"}, 0x8, 0x2, @fd=0xffffffffffffffff, 0x9}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000340)={0x1ff, 0x1, 0x4, 0x800, 0x6, {}, {0x4, 0x0, 0x6, 0x90, 0x2, 0x6, "9a28d943"}, 0x80, 0x4, @fd=r7, 0x3, 0x0, r1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) 17:02:01 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x30000, 0x0) socketpair(0x2, 0x8080d, 0xffff09de, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$isdn(r1, &(0x7f0000000200)={0x7f, 0x20, "a213a4fb509a06dd13d43e35ff3e66628e54df24e417ebab987e7c1d0bc0a89a4aca7bd8ca79ab3f3646ebe8e3a3256ef63bb18da7ec524aafe16bbb08ba460a392e3eff89fd1d5277f32f4e4b9c71aab7a275ca067cd346fe5a0c354189c29745f4b8f8e83c3e4aef783af022782fb40529cf1bbccad8696e4ef51a8f04bd7ae07e31e1b47ba14ba225707e62478d5dc464bb60521cf7b7af5cb5b42ce80b64288a87100ad76cb6f839971b8edae72202cf1852de896b9052c48638c5168ef57651167b8fbf1a9b3e6459157a471a06051093cffb5307129ad9d74d0db00bcfcdbf4a4c3656f3ccf7ee6132c41d294386afa1029e343d42760480837435f6d46f15b96f3164acecf548819b12038ab4ae8f7e9881cd9459936ef8474a47702df478b8d0956887d9e24cd56a9a2b60c7ac9f19b9d496cffb3e1c72bf7c927e533de44618ad3c505d5129cc082c9067281500bf3dad8963bbe9018168a55b5f9c03da186ec1771f424934ebf213f052c7233d8a8c8d4978d969e16dd0a66f4b2c2bf738dcdaa7dbddb048fd40939f8991c668be231465369a6c6f957c9c667bf0560250b13c6713dfd709c70391201d09081438d463ca2a9f9bd9a56e2a8d0746bb0166ea96074a0c34125d165bddfe8aaa5750643e97687dcb0d2cf0069072265ba8bc1b78958f490850973691c52f51af6cc8225448b24e8b7791db13ab29a5c0c4343030a10da92383683fad68a6240b765e77f2a89e442b5d7087cd47adace7c6480c80a2a131bb5e3687d9f7be98016354e41511a74d16b7ae39b408d42455a790be457e2875f9c8f6b85a8bcd8995cd57b2b2956e71ae02fd73359a260a3bbafb0fd7b4677690283781a70cbdeef1e2fffd85ac22b8c0c652f6b2bc8b9d929e1554053889ae1f55ca5173cbdd4267dd84e0c82cf28abe1b0305fad9aac2bf0468472131b8ad8e9bbde1190d103393cccd562e0fae1139e33f088d54b862fdc10d2110a1141918d5c9c7e75a410d708a1c23b46e70b85b2a2ded1b1957df08dc3904dfe0e30ba33b8c8e3793ed368a17080f37704c3fa6be05c41f9c2a58db377dd2f9c1ffab8723921fb6fbce2c74d81713ba9b31606da9bb2d563c5d1d7621f1ed360d43dda88572eacee74eb3bc7b95435f88b53b0a93ab4338e4c68c584cb08a3a08de9f3b78e97257de4b5ad4f6a92ef283c19e7a794c6aee505f3c9f4e3c88165f8264ba2f9e1077c04fd499b9527ddc6c0dfae5897081c8173ab267aab295650c8605049631ed221383383cab58eaebd534c8cb921447e4f21e1b27aef5311d188943b48b2430966201bfc27e4216d084eda2af0f04633c79a9130eab3a8ece4d52f74625d653f9df1cdb9f874d9b6b887a7efb86a66f3733866d04a967f6cb904b2000586ac08da4aa1d47c6ff4d6a157a4f7a39b828f5b3844439dac844774b4f23496dc297e43ca5326d140be09d23619a852c91bdadbe418a2ddbc3ad1a04a86672cbc0170a55c60875c68530859f8a0eebd475797a410ea95b79960ed9efd2be8ca2c93d09673576f8206e05d3ed566916cd54fd1e80830c1f0827d9cf002ce421e2b9fad395756bb3fdc52f30b5a3aec12ab76b57246c379ae2c6d31f7d9dc9591c10497887b03b16bb8ec7a60c5a9cbcb2d0e5f5f737d8dfcd6a9e69134a2e90c24a6fd2b17bb4e87e61a8c78b8a3746b2ff5acbbc6d3d7abe8e1aca37fb7dcae691ac6ff9679af60ea8c03bf10512be991c890f857cae7ab5dc53d4f4379ad3c5d8193a1475ed4a88892f23bd1b0a3c045e659a37676921af0d217f22c308eb381ad23505e617100731f754255c890788764feb9d9fa3f37a351b82b13d79704ef47917eecbb2154afe781c8abd0491a0b8db306234cee5aecb641068aa2e4a7763ad0d687798c16388ce7e252e787c9266e8d933bf11ad76f368c6d299dd8ca8ed0bf8edadf7e5361be27501609a8ddd0f0f3631b2ec8ca4eafc3c74924b3334158653a5d828b23026255cd4b9a85c0560482e3f130887c745c8cf85ab9615a52527c341520ccf89fc5d212bb2c4a7dd2c39bf32ee1b032507780749ef4467e4c2761a1a9007f7cd3b6b86d832e0063b675ac3a9acce45a8a30dcdc1f60aa9f0863e9c93bdb959d3a0c82809bc022ce70cbc0b592f9d9c40baa647ad01cf966135f4c89bf72ae864c5dea56cc47318f09b564bdf19f5c34a960044a61da3afdddb6f2f07783e2b4115a0a4fd30380016be2bac9d5ccf5c7c41ca0868aabd5dfb604580db7f7c95e5fc367a8bb8256703a0586091acb1738aa7ff19ce4977e63f294b247f662c26b957908b276d1e0a1d669ac93a77dad3a8e435e61e68d3654df51a64fc3928b211d5709bc7827e20a9ad90c7614f33a1493fff142e92464a264269b064b60c29f6cc18b626eec1636aa344a8474d7114f763cc5d4d10d4a661d700ce359da118c954382dabf8b16f1f50199b86522be9bda05ae924a18cfc1784e0e174e5c289d36f4a1a275eb2bd79d57b35d46c9c86c37109db73374dc47656de6e870e181cfde88232d2e5488195bb00b135d971e8767e8f16a0ea8f5aa99c0b50b27a0f036b0bd1f14ab9dc3ccb66ebf4abb6f3f40794e995db9703fed830f940218ba758e6ab64882373e7c2bc61fb7ce744a12ba3067b583e94a45d81d5d65e47a9bcb9a581fb25765850005c8e15e8c3225aa75cd4da42c9a1dd6cff967d8894ed8c25d22000c0a323fa731e29257c99cb1fd67e76e5d845f5cdf68456bbf83ffa11962a18be2543a70fd8b10e1c9d707564831c5e93eb4f047a6a50759b32553f32a730d9d9cebde89eb1b6710d318121294603c591adc0f72be585a5a4bf73ae045c0fe3fc2fa2ccfe915c60b320f47c6d89ce9c3fcfc5be7358e2a199bc87e03b26822092358e38df2bf1b016115ca2123d2475f0cc22164d2d430bd51b423dd03e24e104684981f0cac10460b5fc80bfb8a679d893e85462ccc20a037eb16410c694cfbdf252ddc3eb0b953c5270bf27e7128cf31289f20948f7b1299773112d05f181ace81db1ac95f9d820b6783c6c074fa5c6a2421a072ddbccbd1c61024e9bbdfc79d77201a1f42a2b431be5634909669c28696a6180f5d464a900fb156104d3b4f170916b5dd096ddb74ca4f06e9b3e29328c6ebb8e4e02fc339c039c9c1ddaaceaba586d0e98d0ea3ed6aa3012db8b66bff836904deca6d0d60a6aaad43b1b736158303e17d493156c060fa6504e9c0ff82bc1e91724d3c61017d701a56356e75265bd8721ddfb2749e00af9f4328a4e7ee04562df4002f17f4caefdbbdb925da39bc4d3866c7d5da65b6d6e268edf7fca2909d57d084fa2e5d49abf0a9228f19400f19b12dca23e40d7ea4eebd3379eab302aa0a23a42ea03c46188db25d094bfc5f7d1739e03f8625f70e5faa48481984cd2ac0b56310528d330883fd8122097115b1e56d394c7c069d354f75530a692546e75007a25246b64a78cbc2fb4cb244cdc51243c57cfe190459d41040a4e0d2f0436c8dfa56d3cfff661a9131d3a4fa9e5bfbbeadc17e5f7bf5d44f8f2b4efb35c36da0e2f4e73d3c33755e4fc8c26631b30046c15cc4c6fd6898053b1004ca74dfd359c2b4e0dab01203d7a665a343bd2d0c2c833ef63808d3b84c2c1e9d2a16938f17252975a9f1f3da0240c631c3bc8e31395b11022006dd743bea1230a6392efb90b11221c190a72cb3671dbae6df50866da6802c3da510749d92e67c159be65f3f57e3bfbc8b726756ef4cad4396909cb93ea58fb5f6673c6ff9bc160e1dc44feb7aad814a49c41231e8589e9e1cec377cd5a91ba2454f040e652eab37f66beea19dd974572cee31b8c25ee99e43232600b0f6177db24cf74cebca8ddae3ee6991cee816654a273a33285b6372ae1b1cbc2b7c623b43b6368f8b9e4dc91c3eced97b69a3446fa0df901f56b8c61b5fe2b0539726a58370c40bc8025f590c59c26d8d0becd4885378e5408a371de12aacecb7ae39bb19c6fbc7ba498e7a2f6601fc4c4678b671d29595f6faba42b0f78d0c25c916d04d031182c8acb5b53cb16cfba66881b8daa42125f32027b3aa2aac44c207e282cc05ac06745690770570c2d39a1781a9adbf76b9fc081cd7ee1e043ef1cc81c05c1ab58ffbc72ab199c484ace856aa5a95d224f585c3e5c25b562b07c1450338113c3cf029e50b2f3b64ccbc770406655e45e8268d7e6eaa51b789b8c571e6e2fc1b9b7522bd11ec484d56ca2f51226d863fff445637b6dd57fb2859d1450e0d73a9d1727b31e030ad7ed08fcc7df99533d7b3c7a1951f538b01abf815e7703079bf16329a887c0fad7b5785029a4d711e5f33cf488a571d2e2e9d87ea8b14f13e6c63b98a315d37614da897339b6e291124683dab6f341cc61b24bfbdca95e4bc561224c135e5f0062ea860011cf64303b261615b9b02f7684cf82e487b3f7f1172b95c4607ea9c938d747f09a2d29294cfdd426c17aa5d94119d5602904f9a7d660b92d88932336b7d352968776673c4262d06562d9ae73fcafddfcdfa86a1280a1e0f07b66a2ef156e6dc29e306a3df3defa41de4dbea8fb1d2633ca331ab75c2d37b1d09840a90a0e6d19c852e625553727ac1dff0b87cd506957fbf0728d4c2afe9006c45d491a7e692f7528f57d185dbc9db09cffd1cd4ebb638e8104ee437d628e65cdd15bf79b339d19a3ead1ebb67d8817426cf32c38c088b2a080fbe15ac1f99d6653afb97c06c7ff0e06f28689f8c14fda3fb428df9c413a5c6b1ef47b3f3cbe928505b94e49029511f05858be6317b7a0c014ff8df0bf727b289b3d7be2973aaf41f512aba852a355fb7c29a57f9d67d15cbb7406a3c1d335dfc698097979bfa91c9c3a60de99c8b56c16d12fbf28d82dbf32af8895ae27f47b376e5b8f5b31be2d7a8acc6a4384fa361555930013f3f7a14499d9bb8d40c75d2a98b44540abe5bd15b52856c7ace4cdf6aec8ccf8329d1721894efe8ae1e558a7d1ae36e41ec818a7d0171eeec1a099cfaf9b825bce63e913accbfb7d80a9aa0841e8605aed628fb51d99152ba4f4d6e84cc6e639755072ecd492288bbb88d3ac8aa209a95a3606f0c899dab59ad879e3fad69f25740a3bd3623e191b17e0e5408f9db0acdf52e417a231dc6320d4b0a99a31f6588db3cb351f79d0a77a99198c4abbe80b9e789a97c977dd1964498d0e8e7a706a3cab8224dfeb295004f368e143653e22b33a487096fe7adc78b6c7f20c1ce32f6c01757e4e865bba4326003178f37bd387382e211d3688a77e8c25b65d8470480c6035b14a0db0f2f77bec4d41eb5760919dc0da1ce0ca55bb6af0a9286cdb07ba50bffe2e8a8980cca58ba35668f5558c55d4cff5dbe4850049219b09a21399becd3c1557ad13fe972cb31a70908cfec27052fe82198d9aaeebe69ee73c293ea7ac0a8bd344ccdf5fbeac33168478b6d2b6f97dfb41acf0dea1ae29e3b24e26a866bed34132f1d6a50c65c50df966a6e9d2545552cb6e8f440d5dfe9e4b3a6149df24b2655d946ae525c2f426fcc05b265e0fc2d05216ea4b656a0442c844004e0b6cc7cf89ff8fbae4456f6850730dd18f5b3ba1e5b3295f0ae5ee6b3c268efdf3ef7050333fb438e3d5bc6d4b58a2c1f1062fcd9789f1cb347f58efdb0a3373474c2dae0df5fa23a6276331401babf74e56485df2605447f2f815f3c188be32ed5834e1bfa29e8b9a3089b3a1e69ab0d7ecfa5e0c24513639bc5cd31591ce824b8883578a890c7a7b818ff699fd"}, 0x1008, 0x4008891, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) 17:02:01 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) 17:02:01 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x3, 0x2, {0x0, @win={{0xa2, 0x1, 0x6, 0xc1b5}, 0x2, 0x7cab, &(0x7f00000001c0)={{0x5975, 0xffff, 0x5, 0x200}, &(0x7f0000000280)={{0x20, 0x10000, 0x0, 0x3}, &(0x7f0000000100)={{0xa, 0xfff, 0x6, 0x3}}}}, 0x40, &(0x7f0000000200)="cd57360672aefb80cbc997550c98a28eebd507ad9bf852c83125f5aaefeeba9e91f21d24170026480633e32d97f2f557e06e0229c1200de8b382b2bd548cab3c10e6baca0b0105f19db6aa3f1ec138da436e96cf407f375c4a69e8cd4d877403476c8202a714d9a1595b748341d1ebd6b14df1eb44338d8b35dc48f1", 0xfd}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) 17:02:01 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x101240) 17:02:01 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)={0x200007, 0xa, 0x4, 0x20, 0xff, {0x77359400}, {0x5, 0x1, 0x2, 0x80, 0x9, 0x2, "f53f0123"}, 0x7ff, 0x2, @offset=0x40, 0x6, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f00000004c0)={0x5, "620d568bffadbaedd89e08b69f39717b82a93991af3be4d5f8aa7ee683539aa8", 0x2}) r2 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) r3 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r6 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000280)={0x3, 0x1f757a69, 0x1, @discrete={0x0, 0x80}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@rand_addr, @multicast1}, &(0x7f0000000240)=0xc) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000003c0)={0x2, @pix_mp={0x7, 0x0, 0x34324142, 0x0, 0x6, [{0x80000000, 0x8bb}, {0x9, 0x40}, {0x6292de7a, 0x9}, {0x5, 0x9}, {0x200, 0x3}, {0x3, 0x200}, {0x4, 0x4}, {0x8, 0x3}], 0x81, 0x7f, 0x6, 0x2}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f00000002c0)={0xfff, 0x2, 0x4, 0x1000, 0x9b2, {r4, r5/1000+10000}, {0x5, 0x2, 0xd6, 0xc5, 0x80, 0x0, "a0f41e57"}, 0x8, 0x2, @fd=0xffffffffffffffff, 0x9}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000340)={0x1ff, 0x1, 0x4, 0x800, 0x6, {}, {0x4, 0x0, 0x6, 0x90, 0x2, 0x6, "9a28d943"}, 0x80, 0x4, @fd=r7, 0x3, 0x0, r1}) 17:02:01 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0xb, 0x10000, 0x1f, 0x4000, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x0, 0x29a, 0x3, 0x800, r2}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f00000000c0)={0x3, 0x0, 0x2001, 0x35, 0x8000, 0x5, 0x100, 0x1}) 17:02:01 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x30000, 0x0) socketpair(0x2, 0x8080d, 0xffff09de, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$isdn(r1, &(0x7f0000000200)={0x7f, 0x20, "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"}, 0x1008, 0x4008891, 0x0, 0x0) 17:02:01 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) socketpair(0x9, 0x1, 0x6c9, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000200)="d25080cdb46722b88dc7c347a07299c66bb801799ffba06a1fc373037e6723f613acc3c052c503c9949f5d7ea37887d9e976f0d2db01fb6609d7851855035b085b38574b5f6aca61d8a6bd025d371f3d0bafea3c27d2944f8f8ee5857b554a0df319dff2e7ba24a9051cc65658645f5c4e73445ae3f68a73981a0b13ac951147fe6f3bc01846e321920296458931a28a6dfe49e1135944899344a2b5f092b49d1153682ebd1716c8166ab2689d7a499cb781dc047a8375d813dd86afdc79ec4491d8c9", 0xc3) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000380)={0x0, 0x2, 0x4, 0x2, 0x81, {0x0, 0xea60}, {0x1, 0x2, 0xdd, 0x3f, 0x2, 0x8, "bc2897fe"}, 0x9, 0x3, @planes=&(0x7f0000000100)={0x1, 0x80, @fd=0xffffffffffffffff, 0x800}, 0x4, 0x0, r2}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000400)={0x3, 0x1, 0x4, 0x1, 0x5, {0x77359400}, {0x4, 0xc, 0x40, 0x7f, 0x2, 0x5, "75f0c478"}, 0x20, 0x1, @fd=r4, 0x200, 0x0, r2}) 17:02:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x20000) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000140)={0x0, 0x2}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff, 0xfffffffc}], 0x0, 0x4}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) 17:02:01 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x101240) 17:02:01 executing program 3: syz_open_dev$vim2m(0x0, 0x3ff, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x5, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:02:01 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)={0x200007, 0xa, 0x4, 0x20, 0xff, {0x77359400}, {0x5, 0x1, 0x2, 0x80, 0x9, 0x2, "f53f0123"}, 0x7ff, 0x2, @offset=0x40, 0x6}) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f00000004c0)={0x5, "620d568bffadbaedd89e08b69f39717b82a93991af3be4d5f8aa7ee683539aa8", 0x2}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) r2 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r5 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000280)={0x3, 0x1f757a69, 0x1, @discrete={0x0, 0x80}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@rand_addr, @multicast1}, &(0x7f0000000240)=0xc) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000003c0)={0x2, @pix_mp={0x7, 0x0, 0x34324142, 0x0, 0x6, [{0x80000000, 0x8bb}, {0x9, 0x40}, {0x6292de7a, 0x9}, {0x5, 0x9}, {0x200, 0x3}, {0x3, 0x200}, {0x4, 0x4}, {0x8, 0x3}], 0x81, 0x7f, 0x6, 0x2}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000002c0)={0xfff, 0x2, 0x4, 0x1000, 0x9b2, {r3, r4/1000+10000}, {0x5, 0x2, 0xd6, 0xc5, 0x80, 0x0, "a0f41e57"}, 0x8, 0x2, @fd, 0x9}) 17:02:01 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x4b, 0x3, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) 17:02:01 executing program 0: socket$isdn(0x22, 0x3, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @raw_data="4d9ced65f1e21d507e2299c9698d44d1c83108bab192a8866d46a63a2e5f82d402c584987fab30f77ecef900c4fded3ec2679e778cd78a0a683a0adafeffd5819d3ca615cf359e41a0e34f05666c63dc3da642ec76f8afa4e6c12e641b854b3aceec98cfcb4cfc438e02d97a91c7bd295c77f6273ede6713fd71a7e6d55a3ad23d579c8aff1537087a2ef3fd1fd8923102374d578f60aa07b2216d2d4a65bfc474fc534e72fa5a195a3d8020c5584171c3df417d34da3f6f5ee06361029e1e192d477caf90ec0f80"}}) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000100)={0x0, 0x0, {0xffff, 0x3, 0x200020, 0x1}}) 17:02:01 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x30000, 0x0) socketpair(0x2, 0x8080d, 0xffff09de, &(0x7f00000001c0)) 17:02:01 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x101240) 17:02:01 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x6, 0x2, 0x4, 0x0, 0x713, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr, 0x1f2}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x100000, 0x578, {}, {0x1, 0x8, 0x7, 0x7f, 0x80, 0x3f, "ed2052db"}, 0x2, 0x4, @offset=0x8, 0xaf69, 0x0, r1}) 17:02:01 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffe1, 0x0, 0x0, 0x0, 0x8}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0xc5, &(0x7f00000000c0)=""/197, 0x41100, 0x5, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0xf, 0x3, 0x87}, 0x10}, 0x78) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:02:01 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)={0x200007, 0xa, 0x4, 0x20, 0xff, {0x77359400}, {0x5, 0x1, 0x2, 0x80, 0x9, 0x2, "f53f0123"}, 0x7ff, 0x2, @offset=0x40, 0x6}) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f00000004c0)={0x5, "620d568bffadbaedd89e08b69f39717b82a93991af3be4d5f8aa7ee683539aa8", 0x2}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) r2 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r5 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000280)={0x3, 0x1f757a69, 0x1, @discrete={0x0, 0x80}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@rand_addr, @multicast1}, &(0x7f0000000240)=0xc) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000002c0)={0xfff, 0x2, 0x4, 0x1000, 0x9b2, {r3, r4/1000+10000}, {0x5, 0x2, 0xd6, 0xc5, 0x80, 0x0, "a0f41e57"}, 0x8, 0x2, @fd, 0x9}) 17:02:01 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x0) 17:02:01 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x30000, 0x0) 17:02:01 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)={0x200007, 0xa, 0x4, 0x20, 0xff, {0x77359400}, {0x5, 0x1, 0x2, 0x80, 0x9, 0x2, "f53f0123"}, 0x7ff, 0x2, @offset=0x40, 0x6}) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f00000004c0)={0x5, "620d568bffadbaedd89e08b69f39717b82a93991af3be4d5f8aa7ee683539aa8", 0x2}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) r2 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r5 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000280)={0x3, 0x1f757a69, 0x1, @discrete={0x0, 0x80}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000002c0)={0xfff, 0x2, 0x4, 0x1000, 0x9b2, {r3, r4/1000+10000}, {0x5, 0x2, 0xd6, 0xc5, 0x80, 0x0, "a0f41e57"}, 0x8, 0x2, @fd, 0x9}) 17:02:01 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7effffff, 0x1, 0x3}) r1 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x20, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000100)={0x0, 0x7fff, 0xfffffffd, 0x4000}) ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000040)) r2 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:02:01 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x30000, 0x0) 17:02:01 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x0) [ 824.513057] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 824.529679] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 824.562689] CPU: 0 PID: 7975 Comm: syz-fuzzer Not tainted 4.14.230-syzkaller #0 [ 824.570785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 824.580164] Call Trace: [ 824.582771] dump_stack+0x1b2/0x281 [ 824.586492] dump_header+0x178/0x82f [ 824.590546] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 824.595720] ? ___ratelimit+0x2cd/0x530 [ 824.599818] oom_kill_process.cold+0x10/0xa40 [ 824.604366] out_of_memory+0xe3e/0x1190 [ 824.608383] ? oom_killer_disable+0x1c0/0x1c0 [ 824.612892] ? mutex_trylock+0x152/0x1a0 [ 824.617141] __alloc_pages_nodemask+0x23e1/0x2720 [ 824.622009] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 824.626884] alloc_pages_current+0x155/0x260 [ 824.631490] filemap_fault+0x11a1/0x1ad0 [ 824.635748] ext4_filemap_fault+0x84/0xb0 [ 824.639949] __do_fault+0xfa/0x380 [ 824.644287] __handle_mm_fault+0x2497/0x4620 [ 824.649538] ? vm_insert_page+0x7c0/0x7c0 [ 824.653813] ? lock_downgrade+0x740/0x740 [ 824.659285] ? mark_held_locks+0xa6/0xf0 [ 824.663355] handle_mm_fault+0x455/0x9c0 [ 824.667442] __do_page_fault+0x549/0xad0 [ 824.671572] ? spurious_fault+0x640/0x640 [ 824.675729] ? do_page_fault+0x60/0x500 [ 824.679707] ? page_fault+0x2f/0x50 [ 824.683343] page_fault+0x45/0x50 [ 824.686799] RIP: 0000:0x940aec [ 824.689993] RSP: 2e000:000000c00003df00 EFLAGS: 0043b6a0 [ 824.694820] Mem-Info: [ 824.703384] active_anon:13296 inactive_anon:6746 isolated_anon:0 [ 824.703384] active_file:32 inactive_file:0 isolated_file:0 [ 824.703384] unevictable:0 dirty:0 writeback:0 unstable:0 [ 824.703384] slab_reclaimable:21732 slab_unreclaimable:104148 [ 824.703384] mapped:54107 shmem:6932 pagetables:722 bounce:0 [ 824.703384] free:25032 free_pcp:0 free_cma:0 [ 824.737279] Node 0 active_anon:53180kB inactive_anon:26984kB active_file:124kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216428kB dirty:0kB writeback:0kB shmem:27728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 824.765011] Node 1 active_anon:4kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 824.791612] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 824.817879] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 824.822958] Node 0 DMA32 free:35668kB min:36200kB low:45248kB high:54296kB active_anon:53180kB inactive_anon:26984kB active_file:224kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7232kB pagetables:2888kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 824.862308] lowmem_reserve[]: 0 0 0 0 0 [ 824.866334] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 824.901673] lowmem_reserve[]: 0 0 0 0 0 [ 824.905698] Node 1 Normal free:53408kB min:53696kB low:67120kB high:80544kB active_anon:4kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 824.990930] lowmem_reserve[]: 0 0 0 0 0 [ 824.995107] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 11052kB [ 825.023949] Node 0 DMA32: 1464*4kB (UME) 709*8kB (ME) 346*16kB (UM) 171*32kB (M) 93*64kB (UM) 44*128kB (M) 8*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36168kB [ 825.050600] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 825.082179] Node 1 Normal: 2*4kB (ME) 3*8kB (UME) 2*16kB (ME) 3*32kB (UME) 2*64kB (UM) 1*128kB (M) 1*256kB (M) 1*512kB (E) 3*1024kB (UME) 4*2048kB (UM) 10*4096kB (M) = 53408kB [ 825.143969] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 825.173904] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 825.190379] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 825.221731] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 825.230341] 6964 total pagecache pages [ 825.241673] 0 pages in swap cache [ 825.245141] Swap cache stats: add 0, delete 0, find 0/0 [ 825.250493] Free swap = 0kB [ 825.266727] Total swap = 0kB [ 825.269877] 2097051 pages RAM [ 825.279275] 0 pages HighMem/MovableOnly [ 825.283369] 363848 pages reserved [ 825.286826] 0 pages cma reserved [ 825.290195] Out of memory (oom_kill_allocating_task): Kill process 7975 (syz-fuzzer) score 0 or sacrifice child [ 825.312286] Killed process 7990 (syz-executor.4) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 825.340493] oom_reaper: reaped process 7990 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 825.383930] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 825.399361] systemd-journal cpuset=/ mems_allowed=0-1 [ 825.409604] CPU: 1 PID: 4621 Comm: systemd-journal Not tainted 4.14.230-syzkaller #0 [ 825.417771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 825.427348] Call Trace: [ 825.429930] dump_stack+0x1b2/0x281 [ 825.433667] dump_header+0x178/0x82f [ 825.437409] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 825.442596] ? ___ratelimit+0x2cd/0x530 [ 825.446643] oom_kill_process.cold+0x10/0xa40 [ 825.451232] out_of_memory+0xe3e/0x1190 [ 825.455214] ? oom_killer_disable+0x1c0/0x1c0 [ 825.459698] ? mutex_trylock+0x152/0x1a0 [ 825.463763] __alloc_pages_nodemask+0x23e1/0x2720 [ 825.468614] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 825.473848] alloc_pages_current+0x155/0x260 [ 825.478383] filemap_fault+0x11a1/0x1ad0 [ 825.482442] ext4_filemap_fault+0x84/0xb0 [ 825.486592] __do_fault+0xfa/0x380 [ 825.490111] __handle_mm_fault+0x2497/0x4620 [ 825.494509] ? vm_insert_page+0x7c0/0x7c0 [ 825.499087] ? mark_held_locks+0xa6/0xf0 [ 825.503389] handle_mm_fault+0x455/0x9c0 [ 825.507431] __do_page_fault+0x549/0xad0 [ 825.511473] ? spurious_fault+0x640/0x640 [ 825.515600] ? do_page_fault+0x60/0x500 [ 825.519549] ? page_fault+0x2f/0x50 [ 825.523150] page_fault+0x45/0x50 [ 825.526580] RIP: 0001:0xffffffffffffffff [ 825.530619] RSP: 69d281e0:00007ffc2fdced40 EFLAGS: 7ffc2fdceb50 [ 825.541644] Mem-Info: [ 825.550172] active_anon:13259 inactive_anon:6746 isolated_anon:0 [ 825.550172] active_file:50 inactive_file:38 isolated_file:0 [ 825.550172] unevictable:0 dirty:0 writeback:0 unstable:0 [ 825.550172] slab_reclaimable:21732 slab_unreclaimable:104148 [ 825.550172] mapped:45457 shmem:6932 pagetables:685 bounce:0 [ 825.550172] free:25339 free_pcp:223 free_cma:0 [ 825.598507] Node 0 active_anon:53032kB inactive_anon:26984kB active_file:120kB inactive_file:316kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:181728kB dirty:0kB writeback:0kB shmem:27728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 825.637751] Node 1 active_anon:4kB inactive_anon:0kB active_file:44kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 825.670512] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 825.699563] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 825.704712] Node 0 DMA32 free:36216kB min:36200kB low:45248kB high:54296kB active_anon:53032kB inactive_anon:26984kB active_file:168kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7200kB pagetables:2740kB bounce:0kB free_pcp:384kB local_pcp:0kB free_cma:0kB [ 825.745706] lowmem_reserve[]: 0 0 0 0 0 [ 825.749738] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 825.778111] lowmem_reserve[]: 0 0 0 0 0 [ 825.784354] Node 1 Normal free:53408kB min:53696kB low:67120kB high:80544kB active_anon:4kB inactive_anon:0kB active_file:44kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 825.837235] lowmem_reserve[]: 0 0 0 0 0 [ 825.850880] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 11052kB [ 825.883157] Node 0 DMA32: 1416*4kB (UMEH) 708*8kB (MEH) 353*16kB (UMH) 173*32kB (UMH) 95*64kB (UMH) 44*128kB (UM) 7*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36016kB [ 825.906314] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 825.935281] Node 1 Normal: 2*4kB (ME) 3*8kB (UME) 2*16kB (ME) 3*32kB (UME) 2*64kB (UM) 1*128kB (M) 1*256kB (M) 1*512kB (E) 3*1024kB (UME) 4*2048kB (UM) 10*4096kB (M) = 53408kB [ 825.958546] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 825.968712] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 825.979678] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 825.989517] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 825.998231] 6964 total pagecache pages [ 826.002182] 0 pages in swap cache [ 826.005635] Swap cache stats: add 0, delete 0, find 0/0 [ 826.011159] Free swap = 0kB [ 826.014242] Total swap = 0kB [ 826.017266] 2097051 pages RAM [ 826.020348] 0 pages HighMem/MovableOnly [ 826.024375] 363848 pages reserved [ 826.027804] 0 pages cma reserved [ 826.031253] Out of memory (oom_kill_allocating_task): Kill process 4621 (systemd-journal) score 0 or sacrifice child [ 826.042291] Killed process 4621 (systemd-journal) total-vm:54288kB, anon-rss:516kB, file-rss:4kB, shmem-rss:9624kB [ 826.074642] oom_reaper: reaped process 4621 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:9624kB [ 826.111704] oom_reaper: reaped process 17997 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 826.124789] syz-executor.4 invoked oom-killer: gfp_mask=0x14002c0(GFP_KERNEL|__GFP_NOWARN), nodemask=(null), order=2, oom_score_adj=0 [ 826.142522] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 826.147984] CPU: 0 PID: 7995 Comm: syz-executor.4 Not tainted 4.14.230-syzkaller #0 [ 826.155799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 826.166049] Call Trace: [ 826.168668] dump_stack+0x1b2/0x281 [ 826.172490] dump_header+0x178/0x82f [ 826.176218] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 826.181429] ? ___ratelimit+0x2cd/0x530 [ 826.185464] oom_kill_process.cold+0x10/0xa40 [ 826.189974] ? lock_downgrade+0x740/0x740 [ 826.194671] out_of_memory+0x2dc/0x1190 [ 826.198773] ? oom_killer_disable+0x1c0/0x1c0 [ 826.203286] ? mutex_trylock+0x152/0x1a0 [ 826.207647] __alloc_pages_nodemask+0x23e1/0x2720 [ 826.212514] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 826.218511] ? __save_stack_trace+0x63/0x160 [ 826.222933] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 826.227822] ? kernel_text_address+0xbd/0xf0 [ 826.232240] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 826.237267] alloc_pages_current+0x155/0x260 [ 826.241714] depot_save_stack+0x3ae/0x3f0 [ 826.245871] kasan_kmalloc+0x139/0x160 [ 826.249781] ? kasan_kmalloc+0xeb/0x160 [ 826.253761] ? __kmalloc_node_track_caller+0x4c/0x70 [ 826.259045] ? __alloc_skb+0x96/0x510 [ 826.262867] ? mpls_netconf_notify_devconf+0x41/0xf0 [ 826.267988] ? mpls_dev_notify+0x5d7/0x7d0 [ 826.272255] ? notifier_call_chain+0x108/0x1a0 [ 826.276874] ? rollback_registered_many+0x765/0xba0 [ 826.282021] ? rollback_registered+0xca/0x170 [ 826.286795] ? unregister_netdevice_queue+0x1b4/0x360 [ 826.292361] ? __tun_detach+0xca2/0xf60 [ 826.296550] ? tun_chr_close+0x41/0x60 [ 826.300448] ? __fput+0x25f/0x7a0 [ 826.303984] ? task_work_run+0x11f/0x190 [ 826.308939] ? do_exit+0xa44/0x2850 [ 826.312765] ? do_group_exit+0x100/0x2e0 [ 826.316868] ? get_signal+0x38d/0x1ca0 [ 826.320864] ? do_signal+0x7c/0x1550 [ 826.329526] ? exit_to_usermode_loop+0x160/0x200 [ 826.334407] ? do_syscall_64+0x4a3/0x640 [ 826.338557] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 826.344278] ? rollback_registered+0xca/0x170 [ 826.349166] ? unregister_netdevice_queue+0x1b4/0x360 [ 826.354601] ? __tun_detach+0xca2/0xf60 [ 826.358948] ? tun_chr_close+0x41/0x60 [ 826.363130] ? __fput+0x25f/0x7a0 [ 826.366693] ? task_work_run+0x11f/0x190 [ 826.370771] ? do_exit+0xa44/0x2850 [ 826.374505] ? do_group_exit+0x100/0x2e0 [ 826.378661] ? get_signal+0x38d/0x1ca0 [ 826.382560] ? do_signal+0x7c/0x1550 [ 826.386277] ? exit_to_usermode_loop+0x160/0x200 [ 826.391056] ? do_syscall_64+0x4a3/0x640 [ 826.395121] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 826.400500] ? fs_reclaim_release+0xd0/0x110 [ 826.404914] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 826.410364] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 826.415381] ? __kmalloc_node_track_caller+0x38/0x70 [ 826.420483] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 826.425770] __kmalloc_node_track_caller+0x4c/0x70 [ 826.430708] __alloc_skb+0x96/0x510 [ 826.434340] mpls_netconf_notify_devconf+0x41/0xf0 [ 826.439271] mpls_dev_notify+0x5d7/0x7d0 [ 826.443333] ? ovs_netdev_get_vport+0xe1/0x100 [ 826.448123] notifier_call_chain+0x108/0x1a0 [ 826.452543] rollback_registered_many+0x765/0xba0 [ 826.457406] ? netdev_state_change+0xf0/0xf0 [ 826.461822] ? queue_delayed_work_on+0x114/0x1d0 [ 826.466675] rollback_registered+0xca/0x170 [ 826.471938] ? rollback_registered_many+0xba0/0xba0 [ 826.478103] ? linkwatch_schedule_work+0xe5/0x110 [ 826.482965] unregister_netdevice_queue+0x1b4/0x360 [ 826.488261] __tun_detach+0xca2/0xf60 [ 826.492981] ? tun_recvmsg+0x3b0/0x3b0 [ 826.496904] tun_chr_close+0x41/0x60 [ 826.500639] __fput+0x25f/0x7a0 [ 826.503934] task_work_run+0x11f/0x190 [ 826.507831] do_exit+0xa44/0x2850 [ 826.511305] ? mm_update_next_owner+0x5b0/0x5b0 [ 826.515985] ? get_signal+0x323/0x1ca0 [ 826.519875] ? lock_acquire+0x170/0x3f0 [ 826.523847] ? lock_downgrade+0x740/0x740 [ 826.528002] do_group_exit+0x100/0x2e0 [ 826.531891] get_signal+0x38d/0x1ca0 [ 826.535619] do_signal+0x7c/0x1550 [ 826.539164] ? __vfs_read+0xec/0x620 [ 826.542876] ? vfs_copy_file_range+0x9b0/0x9b0 [ 826.548084] ? setup_sigcontext+0x820/0x820 [ 826.552427] ? rw_verify_area+0xe1/0x2a0 [ 826.556495] ? vfs_read+0x104/0x340 [ 826.560134] ? exit_to_usermode_loop+0x41/0x200 [ 826.564814] exit_to_usermode_loop+0x160/0x200 [ 826.569414] do_syscall_64+0x4a3/0x640 [ 826.573319] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 826.578522] RIP: 0033:0x4191dc [ 826.581740] RSP: 002b:00007ffe4b4cf960 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 826.602799] RAX: fffffffffffffe00 RBX: 00007ffe4b4cfa20 RCX: 00000000004191dc [ 826.607957] syz-executor.0: [ 826.624139] RDX: 0000000000000050 RSI: 0000000000568020 RDI: 00000000000000f9 [ 826.624180] RBP: 0000000000000003 R08: 0000000000000000 R09: 0079746972756365 [ 826.624184] R10: 00007ffe4b4cf320 R11: 0000000000000246 R12: 0000000000000032 [ 826.624188] R13: 00000000000c7ab1 R14: 0000000000000000 R15: 00007ffe4b4cfa60 [ 826.644187] Mem-Info: [ 826.656269] vmalloc: allocation failure, allocated 1531035648 of 2259202048 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 826.678709] active_anon:12596 inactive_anon:6746 isolated_anon:0 [ 826.678709] active_file:16 inactive_file:16 isolated_file:0 [ 826.678709] unevictable:0 dirty:0 writeback:0 unstable:0 [ 826.678709] slab_reclaimable:21707 slab_unreclaimable:104107 [ 826.678709] mapped:45403 shmem:6932 pagetables:677 bounce:0 [ 826.678709] free:13867 free_pcp:85 free_cma:0 [ 826.693580] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 826.737683] Node 0 active_anon:50380kB inactive_anon:26984kB active_file:60kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:181612kB dirty:0kB writeback:0kB shmem:27728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 826.737792] CPU: 1 PID: 17997 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 826.767834] Node 1 active_anon:4kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 826.792467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 826.792473] Call Trace: [ 826.792496] dump_stack+0x1b2/0x281 [ 826.792510] warn_alloc.cold+0x96/0x1cc [ 826.792526] ? zone_watermark_ok_safe+0x220/0x220 [ 826.820674] Node 0 [ 826.838366] ? retint_kernel+0x2d/0x2d [ 826.838390] __vmalloc_area_node+0x48a/0x680 [ 826.838410] ? __vmalloc_node_range+0x150/0x150 [ 826.841095] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 826.845221] ? __get_vm_area_node+0x27d/0x340 [ 826.845236] __vmalloc_node_range+0xbe/0x150 [ 826.845253] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 826.849472] lowmem_reserve[]: [ 826.854371] vmalloc_user+0x47/0xa0 [ 826.854384] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 826.854393] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 826.854408] vb2_vmalloc_alloc+0xa6/0x2d0 [ 826.854419] __vb2_queue_alloc+0x47a/0xd90 [ 826.856733] 0 [ 826.860642] vb2_core_create_bufs+0x279/0x5a0 [ 826.865106] 2717 [ 826.870551] ? __vb2_queue_free+0x7a0/0x7a0 [ 826.903430] 2718 [ 826.908349] ? perf_trace_wiphy_id_evt+0x11/0x3f0 [ 826.913207] 2718 [ 826.918670] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 826.921806] 2718 [ 826.925403] ? trace_hardirqs_on+0x10/0x10 [ 826.935342] vb2_create_bufs+0x2e1/0x5b0 [ 826.935357] ? vb2_thread_start+0x310/0x310 [ 826.935367] ? perf_trace_wiphy_id_evt+0x11/0x3f0 [ 826.935382] v4l_create_bufs+0xa4/0x150 [ 826.940553] Node 0 [ 826.945159] __video_do_ioctl+0x65b/0x6a0 [ 826.945173] ? video_ioctl2+0x30/0x30 [ 826.945182] ? __might_fault+0x177/0x1b0 [ 826.945195] ? video_ioctl2+0x30/0x30 [ 826.946996] DMA32 free:17752kB min:36200kB low:45248kB high:54296kB active_anon:50380kB inactive_anon:26984kB active_file:60kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7200kB pagetables:2708kB bounce:0kB free_pcp:220kB local_pcp:0kB free_cma:0kB [ 826.951844] video_usercopy+0xfd/0xe70 [ 826.951859] ? v4l_g_ctrl+0x390/0x390 [ 826.951867] ? lock_acquire+0x170/0x3f0 [ 826.951876] ? lock_downgrade+0x740/0x740 [ 826.951888] ? trace_hardirqs_on+0x10/0x10 [ 826.954139] lowmem_reserve[]: [ 826.958656] ? futex_exit_release+0x220/0x220 [ 826.960701] 0 [ 826.966065] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 826.966076] ? debug_check_no_obj_freed+0x2c0/0x680 [ 826.966087] v4l2_ioctl+0x1bb/0x2f0 [ 826.966095] ? v4l2_open+0x2f0/0x2f0 [ 826.966111] do_vfs_ioctl+0x75a/0xff0 [ 826.969755] 0 [ 826.995043] ? ioctl_preallocate+0x1a0/0x1a0 [ 826.995054] ? lock_downgrade+0x740/0x740 [ 826.995066] ? __fget+0x225/0x360 [ 826.995080] ? do_vfs_ioctl+0xff0/0xff0 [ 826.997315] 0 [ 827.001568] ? security_file_ioctl+0x83/0xb0 [ 827.006976] 0 [ 827.024843] SyS_ioctl+0x7f/0xb0 [ 827.024854] ? do_vfs_ioctl+0xff0/0xff0 [ 827.024865] do_syscall_64+0x1d5/0x640 [ 827.024879] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 827.029717] 0 [ 827.033797] RIP: 0033:0x466459 [ 827.033803] RSP: 002b:00007fd534b5e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 827.033812] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 827.033817] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000004 [ 827.033821] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 827.033826] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 827.033831] R13: 00007ffdc74258ff R14: 00007fd534b5e300 R15: 0000000000022000 [ 827.043024] Mem-Info: [ 827.076438] active_anon:12591 inactive_anon:6746 isolated_anon:0 [ 827.076438] active_file:16 inactive_file:16 isolated_file:0 [ 827.076438] unevictable:0 dirty:0 writeback:0 unstable:0 [ 827.076438] slab_reclaimable:21698 slab_unreclaimable:104097 [ 827.076438] mapped:45403 shmem:6932 pagetables:676 bounce:0 [ 827.076438] free:13916 free_pcp:85 free_cma:0 [ 827.128368] Node 0 [ 827.143774] Node 0 active_anon:50360kB inactive_anon:26984kB active_file:64kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:181612kB dirty:0kB writeback:0kB shmem:27728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 827.158731] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 827.167425] Node 1 active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 827.198854] lowmem_reserve[]: [ 827.210690] Node 0 [ 827.217927] 0 [ 827.221482] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 827.233786] 0 [ 827.244831] lowmem_reserve[]: [ 827.259654] 0 [ 827.267917] 0 [ 827.289502] 0 [ 827.302935] 2717 [ 827.341524] 0 [ 827.367166] 2718 [ 827.418250] 2718 [ 827.447292] Node 1 [ 827.460016] 2718 [ 827.464860] Node 0 DMA32 free:17948kB min:36200kB low:45248kB high:54296kB active_anon:50360kB inactive_anon:26984kB active_file:64kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7200kB pagetables:2704kB bounce:0kB free_pcp:220kB local_pcp:220kB free_cma:0kB [ 827.466245] Normal free:26748kB min:53696kB low:67120kB high:80544kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 827.511382] lowmem_reserve[]: [ 827.530540] lowmem_reserve[]: 0 0 0 0 0 [ 827.537716] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10968kB [ 827.538541] 0 [ 827.551249] Node 0 DMA32: 1249*4kB (UMEH) 481*8kB (MEH) 199*16kB (UMH) 79*32kB (UMH) 35*64kB (UMH) 9*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17948kB [ 827.551320] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB [ 827.569796] 0 [ 827.576757] 0*1024kB 0*2048kB 0*4096kB = 0kB [ 827.593659] Node 1 Normal: 3*4kB (UME) 2*8kB (ME) 2*16kB (ME) 2*32kB (ME) 2*64kB (UM) 1*128kB (M) 1*256kB (M) 1*512kB (E) 3*1024kB (UME) 3*2048kB (M) 4*4096kB (M) = 26748kB [ 827.597130] 0 [ 827.618434] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 827.626539] 0 0 [ 827.629123] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 827.631094] Node 0 [ 827.648752] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 827.657513] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 827.659942] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 827.702870] 6964 total pagecache pages [ 827.706938] 0 pages in swap cache [ 827.708927] lowmem_reserve[]: [ 827.710399] Swap cache stats: add 0, delete 0, find 0/0 [ 827.710408] 0 [ 827.720401] Free swap = 0kB [ 827.728135] Total swap = 0kB [ 827.731369] 2097051 pages RAM [ 827.736095] 0 0 0 0 [ 827.738470] Node 1 Normal free:26748kB min:53696kB low:67120kB high:80544kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 827.741290] 0 pages HighMem/MovableOnly [ 827.780993] 363848 pages reserved [ 827.784534] 0 pages cma reserved [ 827.787220] lowmem_reserve[]: [ 827.804568] Out of memory: Kill process 7974 (syz-fuzzer) score 5 or sacrifice child [ 827.816781] 0 0 0 0 0 [ 827.820520] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10968kB [ 827.822497] Killed process 7985 (syz-executor.0) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 827.877259] Node 0 DMA32: 1249*4kB (UMEH) 481*8kB (MEH) 199*16kB (UMH) 79*32kB (UMH) 35*64kB (UMH) 9*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17948kB [ 827.932135] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 827.941634] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 827.967773] syz-fuzzer cpuset= [ 827.986932] Node 1 Normal: 3*4kB (UME) 2*8kB (ME) 2*16kB (ME) 2*32kB (ME) 2*64kB (UM) 1*128kB (M) 1*256kB (M) 1*512kB (E) 3*1024kB (UME) 3*2048kB (M) 4*4096kB (M) = 26748kB [ 827.991426] / [ 828.022074] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 828.024698] mems_allowed=0-1 [ 828.033124] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 828.033133] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 828.033138] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 828.033142] 6964 total pagecache pages [ 828.033151] 0 pages in swap cache [ 828.033156] Swap cache stats: add 0, delete 0, find 0/0 [ 828.033160] Free swap = 0kB [ 828.033163] Total swap = 0kB [ 828.033170] 2097051 pages RAM [ 828.033173] 0 pages HighMem/MovableOnly [ 828.033176] 363848 pages reserved [ 828.033180] 0 pages cma reserved [ 828.132087] CPU: 1 PID: 11853 Comm: syz-fuzzer Not tainted 4.14.230-syzkaller #0 [ 828.141025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 828.154575] Call Trace: [ 828.157314] dump_stack+0x1b2/0x281 [ 828.160950] dump_header+0x178/0x82f [ 828.164680] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 828.175687] ? ___ratelimit+0x2cd/0x530 [ 828.185177] oom_kill_process.cold+0x10/0xa40 [ 828.189694] out_of_memory+0xe3e/0x1190 [ 828.193801] ? oom_killer_disable+0x1c0/0x1c0 [ 828.198424] ? mutex_trylock+0x152/0x1a0 [ 828.202662] __alloc_pages_nodemask+0x23e1/0x2720 [ 828.207535] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 828.212607] alloc_pages_current+0x155/0x260 [ 828.217226] filemap_fault+0x11a1/0x1ad0 [ 828.221426] ext4_filemap_fault+0x84/0xb0 [ 828.225686] __do_fault+0xfa/0x380 [ 828.229405] __handle_mm_fault+0x2497/0x4620 [ 828.235428] ? vm_insert_page+0x7c0/0x7c0 [ 828.259681] ? __fsnotify_inode_delete+0x20/0x20 [ 828.264563] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 828.271454] ? mark_held_locks+0xa6/0xf0 [ 828.278315] handle_mm_fault+0x455/0x9c0 [ 828.295446] __do_page_fault+0x549/0xad0 [ 828.299626] ? spurious_fault+0x640/0x640 [ 828.303791] ? do_page_fault+0x60/0x500 [ 828.308140] ? page_fault+0x2f/0x50 [ 828.311764] page_fault+0x45/0x50 [ 828.315687] RIP: 634cd80:0xc051f19ece [ 828.319674] RSP: 1e800:000000c0006edf28 EFLAGS: 00000003 [ 828.321322] Mem-Info: [ 828.329376] active_anon:12591 inactive_anon:6746 isolated_anon:0 [ 828.329376] active_file:11 inactive_file:17 isolated_file:4 [ 828.329376] unevictable:0 dirty:0 writeback:0 unstable:0 [ 828.329376] slab_reclaimable:21698 slab_unreclaimable:104097 [ 828.329376] mapped:45403 shmem:6932 pagetables:676 bounce:0 [ 828.329376] free:13916 free_pcp:93 free_cma:0 [ 828.369862] Node 0 active_anon:50360kB inactive_anon:26984kB active_file:44kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):16kB mapped:181612kB dirty:0kB writeback:0kB shmem:27728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 828.406548] Node 1 active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 828.434127] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 828.475743] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 828.480819] Node 0 DMA32 free:17832kB min:36200kB low:45248kB high:54296kB active_anon:50360kB inactive_anon:26984kB active_file:44kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7200kB pagetables:2704kB bounce:0kB free_pcp:248kB local_pcp:232kB free_cma:0kB [ 828.517278] lowmem_reserve[]: 0 0 0 0 0 [ 828.521298] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 828.557225] lowmem_reserve[]: 0 0 0 0 0 [ 828.561421] Node 1 Normal free:77448kB min:53696kB low:67120kB high:80544kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:864kB local_pcp:120kB free_cma:0kB [ 828.590057] lowmem_reserve[]: 0 0 0 0 0 [ 828.594151] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10968kB [ 828.608024] Node 0 DMA32: 1249*4kB (UMEH) 482*8kB (UMEH) 198*16kB (MH) 75*32kB (MH) 34*64kB (UMH) 9*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17748kB [ 828.623041] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 828.633834] Node 1 Normal: 5*4kB (UME) 3*8kB (UME) 5*16kB (UME) 4*32kB (UME) 3*64kB (UM) 5*128kB (UM) 2*256kB (UM) 3*512kB (UE) 5*1024kB (UME) 4*2048kB (UM) 34*4096kB (UM) = 155708kB [ 828.650454] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 828.659430] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 828.668080] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 828.678398] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 828.687084] 6964 total pagecache pages [ 828.690991] 0 pages in swap cache [ 828.694679] Swap cache stats: add 0, delete 0, find 0/0 [ 828.700139] Free swap = 0kB [ 828.703472] Total swap = 0kB [ 828.712465] 2097051 pages RAM [ 828.715679] 0 pages HighMem/MovableOnly [ 828.719734] 363848 pages reserved [ 828.734758] 0 pages cma reserved [ 828.740198] Out of memory (oom_kill_allocating_task): Kill process 11853 (syz-fuzzer) score 0 or sacrifice child [ 828.751768] Killed process 7986 (syz-executor.1) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 828.772704] oom_reaper: reaped process 7985 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 828.811721] oom_reaper: reaped process 7986 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 828.855229] syz-executor.4 (7995) used greatest stack depth: 24840 bytes left [ 829.015182] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 829.060177] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 829.089271] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 829.106059] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 829.115266] systemd[1]: Stopped Journal Service. [ 829.131424] systemd[1]: Starting Journal Service... [ 829.167151] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 829.355210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 829.398275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 829.424835] systemd[1]: Started Load/Save RF Kill Switch Status. [ 829.433515] systemd-journald[18047]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 829.450793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 829.462649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 829.476039] device bridge_slave_1 left promiscuous mode [ 829.482196] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.500483] device bridge_slave_0 left promiscuous mode [ 829.521877] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.554087] device veth1_macvtap left promiscuous mode [ 829.559894] device veth0_macvtap left promiscuous mode [ 829.571759] device veth1_vlan left promiscuous mode [ 829.577375] device veth0_vlan left promiscuous mode [ 829.781649] device hsr_slave_1 left promiscuous mode [ 829.790067] device hsr_slave_0 left promiscuous mode [ 829.816451] team0 (unregistering): Port device team_slave_1 removed [ 829.829740] team0 (unregistering): Port device team_slave_0 removed [ 829.846499] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 829.876664] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 829.946831] bond0 (unregistering): Released all slaves [ 829.970500] systemd[1]: Started Journal Service. [ 831.464082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 831.470996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 831.483862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 831.490786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 831.506395] device bridge_slave_1 left promiscuous mode [ 831.514842] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.524397] device bridge_slave_0 left promiscuous mode [ 831.529933] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.556520] device veth1_macvtap left promiscuous mode [ 831.562791] device veth0_macvtap left promiscuous mode [ 831.568140] device veth1_vlan left promiscuous mode [ 831.577478] device veth0_vlan left promiscuous mode [ 831.695912] device hsr_slave_1 left promiscuous mode [ 831.708083] device hsr_slave_0 left promiscuous mode [ 831.729621] team0 (unregistering): Port device team_slave_1 removed [ 831.746799] team0 (unregistering): Port device team_slave_0 removed [ 831.759641] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 831.777271] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 831.818923] bond0 (unregistering): Released all slaves 17:02:17 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)={0x200007, 0xa, 0x4, 0x20, 0xff, {0x77359400}, {0x5, 0x1, 0x2, 0x80, 0x9, 0x2, "f53f0123"}, 0x7ff, 0x2, @offset=0x40, 0x6}) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f00000004c0)={0x5, "620d568bffadbaedd89e08b69f39717b82a93991af3be4d5f8aa7ee683539aa8", 0x2}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) r2 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r5 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000002c0)={0xfff, 0x2, 0x4, 0x1000, 0x9b2, {r3, r4/1000+10000}, {0x5, 0x2, 0xd6, 0xc5, 0x80, 0x0, "a0f41e57"}, 0x8, 0x2, @fd, 0x9}) 17:02:17 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x10000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x30364d54, 0x1, @stepwise={0x10001, 0x9, 0x6, 0x22a2, 0x3, 0x469}}) 17:02:17 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3f, 0x0) 17:02:17 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:02:17 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x1, 0x10b5c0) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000140)={0x2, {0x8, 0x7, 0x1, 0x6}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) 17:02:17 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) getitimer(0x0, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0x259, 0x3, 0x4000}) 17:02:17 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)={0x200007, 0xa, 0x4, 0x20, 0xff, {0x77359400}, {0x5, 0x1, 0x2, 0x80, 0x9, 0x2, "f53f0123"}, 0x7ff, 0x2, @offset=0x40, 0x6}) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f00000004c0)={0x5, "620d568bffadbaedd89e08b69f39717b82a93991af3be4d5f8aa7ee683539aa8", 0x2}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) r2 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000002c0)={0xfff, 0x2, 0x4, 0x1000, 0x9b2, {r3, r4/1000+10000}, {0x5, 0x2, 0xd6, 0xc5, 0x80, 0x0, "a0f41e57"}, 0x8, 0x2, @fd, 0x9}) 17:02:17 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x2, 0x9, 0x4, 0x1000, 0xffffffff, {0x0, 0xea60}, {0x4, 0x1, 0x0, 0x3, 0x3f, 0x3f, "8903be30"}, 0x6, 0x3, @userptr=0x9, 0x80000000, 0x0, r0}) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000180)={0xff, 0x3, 0x8001}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x4, 0x1, 0x4, 0x10, 0x82f, {0x0, 0xea60}, {0x4, 0x2, 0x4, 0x8, 0xf8, 0x18, "5df8aab3"}, 0x8000, 0x4, @planes=&(0x7f0000000040)={0x0, 0x10000, @fd, 0xe6b0}, 0x0, 0x0, r1}) r2 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:02:17 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)={0x200007, 0xa, 0x4, 0x20, 0xff, {0x77359400}, {0x5, 0x1, 0x2, 0x80, 0x9, 0x2, "f53f0123"}, 0x7ff, 0x2, @offset=0x40, 0x6}) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f00000004c0)={0x5, "620d568bffadbaedd89e08b69f39717b82a93991af3be4d5f8aa7ee683539aa8", 0x2}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) r2 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000002c0)={0xfff, 0x2, 0x4, 0x1000, 0x9b2, {r3, r4/1000+10000}, {0x5, 0x2, 0xd6, 0xc5, 0x80, 0x0, "a0f41e57"}, 0x8, 0x2, @fd, 0x9}) 17:02:17 executing program 5: socket$isdn(0x22, 0x3, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @raw_data="4d9ced65f1e21d507e2299c9698d44d1c83108bab192a8866d46a63a2e5f82d402c584987fab30f77ecef900c4fded3ec2679e778cd78a0a683a0adafeffd5819d3ca615cf359e41a0e34f05666c63dc3da642ec76f8afa4e6c12e641b854b3aceec98cfcb4cfc438e02d97a91c7bd295c77f6273ede6713fd71a7e6d55a3ad23d579c8aff1537087a2ef3fd1fd8923102374d578f60aa07b2216d2d4a65bfc474fc534e72fa5a195a3d8020c5584171c3df417d34da3f6f5ee06361029e1e192d477caf90ec0f80"}}) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000100)={0x0, 0x0, {0xffff, 0x3, 0x200020, 0x1}}) 17:02:17 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x9, 0xfffffffa, 0x1, 0x800, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x3, 0x5, 0x3, 0x0, r2}) 17:02:17 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)={0x200007, 0xa, 0x4, 0x20, 0xff, {0x77359400}, {0x5, 0x1, 0x2, 0x80, 0x9, 0x2, "f53f0123"}, 0x7ff, 0x2, @offset=0x40, 0x6}) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f00000004c0)={0x5, "620d568bffadbaedd89e08b69f39717b82a93991af3be4d5f8aa7ee683539aa8", 0x2}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) r2 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000002c0)={0xfff, 0x2, 0x4, 0x1000, 0x9b2, {}, {0x5, 0x2, 0xd6, 0xc5, 0x80, 0x0, "a0f41e57"}, 0x8, 0x2, @fd, 0x9}) 17:02:17 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @bcast}, [@bcast, @remote, @netrom, @bcast, @null, @netrom, @null, @bcast]}, &(0x7f0000000180)=0x48, 0x800) r2 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000200)={0x200, 0x1, 0x4, 0x4000, 0x3, {0x0, 0x2710}, {0x2, 0x8, 0x7, 0x7f, 0x40, 0x1, "b52a24c8"}, 0x1, 0x4, @offset=0x8, 0xb8fa}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf299, 0x3}) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f00000001c0)={0x3, @null}) syz_genetlink_get_family_id$batadv(&(0x7f0000000280)='batadv\x00', 0xffffffffffffffff) r4 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) [ 833.446803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 833.470093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 833.488326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 833.496263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 833.511411] device bridge_slave_1 left promiscuous mode [ 833.518090] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.529369] device bridge_slave_0 left promiscuous mode [ 833.535872] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.550268] device veth1_macvtap left promiscuous mode [ 833.557525] device veth0_macvtap left promiscuous mode [ 833.567984] device veth1_vlan left promiscuous mode [ 833.574905] device veth0_vlan left promiscuous mode [ 833.703829] device hsr_slave_1 left promiscuous mode [ 833.717765] device hsr_slave_0 left promiscuous mode [ 833.739494] team0 (unregistering): Port device team_slave_1 removed [ 833.750327] team0 (unregistering): Port device team_slave_0 removed [ 833.767229] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 833.795965] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 833.842586] bond0 (unregistering): Released all slaves [ 835.644997] IPVS: ftp: loaded support on port[0] = 21 [ 835.737517] IPVS: ftp: loaded support on port[0] = 21 [ 835.914274] chnl_net:caif_netlink_parms(): no params data found [ 835.945545] IPVS: ftp: loaded support on port[0] = 21 [ 836.150555] chnl_net:caif_netlink_parms(): no params data found [ 836.358026] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.366617] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.376617] device bridge_slave_0 entered promiscuous mode [ 836.392254] chnl_net:caif_netlink_parms(): no params data found [ 836.408809] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.420038] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.432866] device bridge_slave_1 entered promiscuous mode [ 836.518524] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 836.540283] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.547850] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.556638] device bridge_slave_0 entered promiscuous mode [ 836.565495] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 836.574826] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.581463] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.595840] device bridge_slave_1 entered promiscuous mode [ 836.646951] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 836.654907] team0: Port device team_slave_0 added [ 836.680368] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 836.689919] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 836.698998] team0: Port device team_slave_1 added [ 836.705245] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.712876] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.720256] device bridge_slave_0 entered promiscuous mode [ 836.729804] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 836.746920] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.754063] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.761440] device bridge_slave_1 entered promiscuous mode [ 836.806958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 836.817175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.847709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 836.873738] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 836.887431] team0: Port device team_slave_0 added [ 836.895173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 836.901444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.933109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.948920] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 836.959514] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 836.975603] team0: Port device team_slave_1 added [ 836.984883] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 836.996245] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 837.022022] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 837.083162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 837.089543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 837.122008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 837.146887] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 837.158896] team0: Port device team_slave_0 added [ 837.166361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 837.177994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 837.209816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 837.225974] device hsr_slave_0 entered promiscuous mode [ 837.236960] device hsr_slave_1 entered promiscuous mode [ 837.243061] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 837.257325] team0: Port device team_slave_1 added [ 837.264047] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 837.271804] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 837.279801] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 837.301483] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 837.347473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 837.363989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 837.395527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 837.425653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 837.436249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 837.466141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 837.485740] device hsr_slave_0 entered promiscuous mode [ 837.492548] device hsr_slave_1 entered promiscuous mode [ 837.508726] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 837.527683] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 837.535396] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 837.552299] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 837.641448] device hsr_slave_0 entered promiscuous mode [ 837.648514] device hsr_slave_1 entered promiscuous mode [ 837.661927] Bluetooth: hci2 command 0x0409 tx timeout [ 837.663068] Bluetooth: hci1 command 0x0409 tx timeout [ 837.690111] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 837.697976] Bluetooth: hci0 command 0x0409 tx timeout [ 837.728124] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 837.780743] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 837.919319] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 837.952729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 837.974066] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 838.002792] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 838.009463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 838.018558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 838.044071] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 838.051346] 8021q: adding VLAN 0 to HW filter on device team0 [ 838.069832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 838.080937] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 838.102533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 838.110519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 838.120449] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.128215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 838.141817] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 838.154087] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 838.167754] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 838.175711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 838.184339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 838.237847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 838.246628] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.253067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 838.263916] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 838.308967] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 838.326105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 838.337140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 838.348622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 838.360206] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 838.366783] 8021q: adding VLAN 0 to HW filter on device team0 [ 838.384843] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 838.399256] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 838.427823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 838.440541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 838.449192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 838.461378] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.467940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 838.485269] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 838.495895] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 838.575066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 838.584212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 838.592735] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 838.602211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 838.610279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 838.618820] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.625270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 838.639214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 838.648895] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 838.659245] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 838.667329] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 838.675164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 838.683631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 838.692971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 838.703876] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 838.714122] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 838.725160] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 838.732767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 838.740456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 838.748803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 838.758466] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 838.767130] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 838.778544] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 838.786607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 838.794179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 838.803409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 838.811057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 838.820138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 838.831477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 838.847039] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 838.854832] 8021q: adding VLAN 0 to HW filter on device team0 [ 838.863416] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 838.869995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 838.886395] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 838.897956] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 838.906618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 838.919554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 838.930474] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 838.950992] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 838.965697] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 838.977150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 838.987436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 838.999897] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.006826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 839.020164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 839.029671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 839.044745] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 839.056599] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 839.067311] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 839.076488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 839.101006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 839.111168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 839.126725] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.143723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 839.160467] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 839.168295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 839.179754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 839.188322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 839.204510] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 839.218000] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 839.227086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 839.236850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 839.248880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 839.259755] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 839.272321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 839.291456] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 839.300809] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 839.317436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 839.331538] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 839.348699] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 839.358604] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 839.368974] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 839.378139] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 839.386517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 839.394340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 839.403505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 839.416125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 839.426729] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 839.435365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 839.444147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 839.464768] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 839.472803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 839.500358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 839.539984] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 839.550891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 839.620562] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 839.742354] Bluetooth: hci0 command 0x041b tx timeout [ 839.747990] Bluetooth: hci1 command 0x041b tx timeout [ 839.757955] Bluetooth: hci2 command 0x041b tx timeout [ 839.806924] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 839.829182] systemd-journal cpuset=/ mems_allowed=0-1 [ 839.834969] CPU: 0 PID: 18047 Comm: systemd-journal Not tainted 4.14.230-syzkaller #0 [ 839.843060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 839.852556] Call Trace: [ 839.855149] dump_stack+0x1b2/0x281 [ 839.858770] dump_header+0x178/0x82f [ 839.862470] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 839.867574] ? ___ratelimit+0x2cd/0x530 [ 839.874014] oom_kill_process.cold+0x10/0xa40 [ 839.878520] out_of_memory+0xe3e/0x1190 [ 839.882502] ? oom_killer_disable+0x1c0/0x1c0 [ 839.887179] ? mutex_trylock+0x152/0x1a0 [ 839.891233] __alloc_pages_nodemask+0x23e1/0x2720 [ 839.896087] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 839.900931] ? __put_seccomp_filter+0x90/0x90 [ 839.905421] ? __seccomp_filter+0xbd/0xd60 [ 839.909739] ? cache_grow_begin+0x3f/0x700 [ 839.913982] cache_grow_begin+0x91/0x700 [ 839.918120] fallback_alloc+0x207/0x2c0 [ 839.922132] kmem_cache_alloc+0x1e5/0x3c0 [ 839.926393] getname_flags+0xc8/0x550 [ 839.930188] SyS_mkdirat+0x83/0x270 [ 839.933822] ? SyS_mknod+0x30/0x30 [ 839.937375] ? do_syscall_64+0x4c/0x640 [ 839.941336] ? SyS_mkdirat+0x270/0x270 [ 839.945209] do_syscall_64+0x1d5/0x640 [ 839.949151] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 839.954409] RIP: 0033:0x7fae7f6e4687 [ 839.958168] RSP: 002b:00007ffceeb31aa8 EFLAGS: 00000293 ORIG_RAX: 0000000000000053 [ 839.965951] RAX: ffffffffffffffda RBX: 00007ffceeb34b10 RCX: 00007fae7f6e4687 [ 839.973209] RDX: 0000000000000000 RSI: 00000000000001ed RDI: 000055bbefb93d60 [ 839.980471] RBP: 00007ffceeb31ae0 R08: 000055bbef6a73e5 R09: 0000000000000018 [ 839.987817] R10: 0000000000000069 R11: 0000000000000293 R12: 0000000000000000 [ 839.995104] R13: 0000000000000001 R14: 000055bbefb93d60 R15: 00007ffceeb32120 [ 840.007398] Mem-Info: [ 840.010048] active_anon:13560 inactive_anon:8230 isolated_anon:0 [ 840.010048] active_file:16 inactive_file:15 isolated_file:0 [ 840.010048] unevictable:0 dirty:0 writeback:0 unstable:0 [ 840.010048] slab_reclaimable:20776 slab_unreclaimable:101610 [ 840.010048] mapped:52619 shmem:8981 pagetables:752 bounce:0 [ 840.010048] free:25291 free_pcp:0 free_cma:0 [ 840.051091] Node 0 active_anon:53992kB inactive_anon:32892kB active_file:64kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210516kB dirty:0kB writeback:0kB shmem:35876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 840.083893] Node 1 active_anon:248kB inactive_anon:28kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 840.110459] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 840.137015] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 840.142193] Node 0 DMA32 free:36004kB min:36200kB low:45248kB high:54296kB active_anon:53992kB inactive_anon:32892kB active_file:52kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7200kB pagetables:3008kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 840.171413] lowmem_reserve[]: 0 0 0 0 0 [ 840.175425] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 840.201027] lowmem_reserve[]: 0 0 0 0 0 [ 840.205080] Node 1 Normal free:53644kB min:53696kB low:67120kB high:80544kB active_anon:248kB inactive_anon:28kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 840.233474] lowmem_reserve[]: 0 0 0 0 0 [ 840.237484] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 11060kB [ 840.251084] Node 0 DMA32: 1953*4kB (UME) 678*8kB (ME) 142*16kB (UME) 40*32kB (M) 29*64kB (M) 20*128kB (UM) 14*256kB (M) 10*512kB (M) 6*1024kB (M) 0*2048kB 0*4096kB = 36052kB [ 840.267007] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 840.277812] Node 1 Normal: 23*4kB (UM) 14*8kB (UME) 10*16kB (UME) 5*32kB (UME) 4*64kB (UM) 1*128kB (M) 2*256kB (M) 4*512kB (UME) 5*1024kB (UME) 2*2048kB (UM) 10*4096kB (UM) = 53644kB [ 840.294360] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 840.303326] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 840.312513] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 840.321394] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 840.330052] 9012 total pagecache pages [ 840.334069] 0 pages in swap cache [ 840.337520] Swap cache stats: add 0, delete 0, find 0/0 [ 840.350322] Free swap = 0kB [ 840.355844] Total swap = 0kB [ 840.358869] 2097051 pages RAM [ 840.366393] 0 pages HighMem/MovableOnly [ 840.370399] 363848 pages reserved [ 840.376189] 0 pages cma reserved [ 840.380098] Out of memory (oom_kill_allocating_task): Kill process 18047 (systemd-journal) score 0 or sacrifice child [ 840.395615] Killed process 18047 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:1548kB [ 840.408119] oom_reaper: reaped process 18047 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1580kB [ 840.428473] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 840.453320] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 840.458212] CPU: 0 PID: 7975 Comm: syz-fuzzer Not tainted 4.14.230-syzkaller #0 [ 840.465655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 840.476032] Call Trace: [ 840.478657] dump_stack+0x1b2/0x281 [ 840.482528] dump_header+0x178/0x82f [ 840.486238] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 840.491328] ? ___ratelimit+0x2cd/0x530 [ 840.495284] oom_kill_process.cold+0x10/0xa40 [ 840.499887] out_of_memory+0xe3e/0x1190 [ 840.503861] ? oom_killer_disable+0x1c0/0x1c0 [ 840.508353] ? mutex_trylock+0x152/0x1a0 [ 840.512422] __alloc_pages_nodemask+0x23e1/0x2720 [ 840.517263] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 840.522542] alloc_pages_current+0x155/0x260 [ 840.526955] filemap_fault+0x11a1/0x1ad0 [ 840.531098] ext4_filemap_fault+0x84/0xb0 [ 840.535336] __do_fault+0xfa/0x380 [ 840.538887] __handle_mm_fault+0x2497/0x4620 [ 840.543297] ? vm_insert_page+0x7c0/0x7c0 [ 840.547493] ? lock_downgrade+0x740/0x740 [ 840.551661] ? mark_held_locks+0xa6/0xf0 [ 840.555715] handle_mm_fault+0x455/0x9c0 [ 840.559773] __do_page_fault+0x549/0xad0 [ 840.563822] ? spurious_fault+0x640/0x640 [ 840.567964] ? do_page_fault+0x60/0x500 [ 840.571925] ? page_fault+0x2f/0x50 [ 840.575533] page_fault+0x45/0x50 [ 840.578963] RIP: 0000:0x940aec [ 840.582131] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 840.586527] Mem-Info: [ 840.600826] active_anon:13444 inactive_anon:8228 isolated_anon:0 [ 840.600826] active_file:15 inactive_file:15 isolated_file:0 [ 840.600826] unevictable:0 dirty:0 writeback:0 unstable:0 [ 840.600826] slab_reclaimable:20776 slab_unreclaimable:101642 [ 840.600826] mapped:52225 shmem:8981 pagetables:728 bounce:0 [ 840.600826] free:25247 free_pcp:28 free_cma:0 [ 840.638961] Node 0 active_anon:53528kB inactive_anon:32884kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208900kB dirty:0kB writeback:0kB shmem:35876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 840.674597] Node 1 active_anon:248kB inactive_anon:28kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 840.707550] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 840.738978] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 840.750634] Node 0 DMA32 free:36092kB min:36200kB low:45248kB high:54296kB active_anon:53528kB inactive_anon:32884kB active_file:80kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7168kB pagetables:2912kB bounce:0kB free_pcp:240kB local_pcp:240kB free_cma:0kB [ 840.793451] lowmem_reserve[]: 0 0 0 0 0 [ 840.797477] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 840.827677] lowmem_reserve[]: 0 0 0 0 0 [ 840.831732] Node 1 Normal free:53644kB min:53696kB low:67120kB high:80544kB active_anon:248kB inactive_anon:28kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 840.862843] lowmem_reserve[]: 0 0 0 0 0 [ 840.866859] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 11060kB [ 840.881525] Node 0 DMA32: 1952*4kB (UME) 698*8kB (ME) 158*16kB (UME) 40*32kB (M) 29*64kB (UM) 19*128kB (UM) 13*256kB (M) 10*512kB (UM) 6*1024kB (UM) 0*2048kB 0*4096kB = 36080kB [ 840.899849] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 840.912125] Node 1 Normal: 23*4kB (UM) 14*8kB (UME) 10*16kB (UME) 5*32kB (UME) 4*64kB (UM) 1*128kB (M) 2*256kB (M) 4*512kB (UME) 5*1024kB (UME) 2*2048kB (UM) 10*4096kB (UM) = 53644kB [ 840.928690] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 840.937599] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 840.946243] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 840.959537] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 840.968154] 9010 total pagecache pages [ 840.976464] 0 pages in swap cache [ 840.979986] Swap cache stats: add 0, delete 0, find 0/0 [ 840.985399] Free swap = 0kB [ 840.988414] Total swap = 0kB [ 840.991478] 2097051 pages RAM [ 840.997460] 0 pages HighMem/MovableOnly [ 841.001585] 363848 pages reserved [ 841.005041] 0 pages cma reserved [ 841.008428] Out of memory (oom_kill_allocating_task): Kill process 7975 (syz-fuzzer) score 0 or sacrifice child [ 841.020696] Killed process 18094 (syz-executor.4) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 841.047312] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 841.071379] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 841.076221] CPU: 0 PID: 7975 Comm: syz-fuzzer Not tainted 4.14.230-syzkaller #0 [ 841.083650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 841.093238] Call Trace: [ 841.095844] dump_stack+0x1b2/0x281 [ 841.099488] dump_header+0x178/0x82f [ 841.103197] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 841.108761] ? ___ratelimit+0x2cd/0x530 [ 841.113254] oom_kill_process.cold+0x10/0xa40 [ 841.118386] out_of_memory+0xe3e/0x1190 [ 841.122466] ? oom_killer_disable+0x1c0/0x1c0 [ 841.126968] ? mutex_trylock+0x152/0x1a0 [ 841.134252] __alloc_pages_nodemask+0x23e1/0x2720 [ 841.139087] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 841.143920] alloc_pages_current+0x155/0x260 [ 841.148327] filemap_fault+0x11a1/0x1ad0 [ 841.152471] ext4_filemap_fault+0x84/0xb0 [ 841.156628] __do_fault+0xfa/0x380 [ 841.160158] __handle_mm_fault+0x2497/0x4620 [ 841.165000] ? vm_insert_page+0x7c0/0x7c0 [ 841.169245] ? lock_downgrade+0x740/0x740 [ 841.173394] ? mark_held_locks+0xa6/0xf0 [ 841.177451] handle_mm_fault+0x455/0x9c0 [ 841.181507] __do_page_fault+0x549/0xad0 [ 841.185549] ? spurious_fault+0x640/0x640 [ 841.189673] ? do_page_fault+0x60/0x500 [ 841.193636] ? page_fault+0x2f/0x50 [ 841.197254] page_fault+0x45/0x50 [ 841.200687] RIP: 0000:0x940aec [ 841.203852] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 841.211214] Mem-Info: [ 841.219177] active_anon:13444 inactive_anon:8228 isolated_anon:0 [ 841.219177] active_file:13 inactive_file:17 isolated_file:0 [ 841.219177] unevictable:0 dirty:0 writeback:0 unstable:0 [ 841.219177] slab_reclaimable:20776 slab_unreclaimable:101650 [ 841.219177] mapped:52225 shmem:8981 pagetables:728 bounce:0 [ 841.219177] free:25194 free_pcp:29 free_cma:0 [ 841.254498] Node 0 active_anon:53528kB inactive_anon:32884kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208900kB dirty:0kB writeback:0kB shmem:35876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 841.293512] Node 1 active_anon:248kB inactive_anon:28kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 841.329248] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 841.362721] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 841.376131] Node 0 DMA32 free:36064kB min:36200kB low:45248kB high:54296kB active_anon:53528kB inactive_anon:32884kB active_file:72kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7168kB pagetables:2912kB bounce:0kB free_pcp:108kB local_pcp:0kB free_cma:0kB [ 841.411243] lowmem_reserve[]: 0 0 0 0 0 [ 841.418155] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 841.500588] lowmem_reserve[]: 0 0 0 0 0 [ 841.504692] Node 1 Normal free:53644kB min:53696kB low:67120kB high:80544kB active_anon:248kB inactive_anon:28kB active_file:0kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 841.564419] lowmem_reserve[]: 0 0 0 0 0 [ 841.568413] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 11060kB [ 841.589383] Node 0 DMA32: 1952*4kB (UME) 698*8kB (ME) 157*16kB (ME) 40*32kB (M) 29*64kB (UM) 19*128kB (UM) 13*256kB (M) 10*512kB (UM) 6*1024kB (UM) 0*2048kB 0*4096kB = 36064kB [ 841.612092] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 841.629435] Node 1 Normal: 23*4kB (UM) 14*8kB (UME) 10*16kB (UME) 5*32kB (UME) 4*64kB (UM) 1*128kB (M) 2*256kB (M) 4*512kB (UME) 5*1024kB (UME) 2*2048kB (UM) 10*4096kB (UM) = 53644kB [ 841.648432] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 841.671448] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 841.680299] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 841.693790] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 841.702792] 9011 total pagecache pages [ 841.707554] 0 pages in swap cache [ 841.711000] Swap cache stats: add 0, delete 0, find 0/0 [ 841.721323] Free swap = 0kB [ 841.724603] Total swap = 0kB [ 841.727628] 2097051 pages RAM [ 841.731095] 0 pages HighMem/MovableOnly [ 841.739561] 363848 pages reserved [ 841.743531] 0 pages cma reserved [ 841.746916] Out of memory (oom_kill_allocating_task): Kill process 7975 (syz-fuzzer) score 0 or sacrifice child [ 841.761666] Killed process 7988 (syz-executor.2) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 841.799369] oom_reaper: reaped process 7988 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 841.821826] Bluetooth: hci2 command 0x040f tx timeout [ 841.827152] Bluetooth: hci1 command 0x040f tx timeout [ 841.834882] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 841.854572] Bluetooth: hci0 command 0x040f tx timeout [ 841.860000] in:imklog cpuset=/ mems_allowed=0-1 [ 841.867150] CPU: 0 PID: 7747 Comm: in:imklog Not tainted 4.14.230-syzkaller #0 [ 841.876282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 841.886015] Call Trace: [ 841.888600] dump_stack+0x1b2/0x281 [ 841.892227] dump_header+0x178/0x82f [ 841.895935] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 841.901608] ? ___ratelimit+0x2cd/0x530 [ 841.905599] oom_kill_process.cold+0x10/0xa40 [ 841.910101] out_of_memory+0xe3e/0x1190 [ 841.914226] ? oom_killer_disable+0x1c0/0x1c0 [ 841.918731] ? mutex_trylock+0x152/0x1a0 [ 841.923056] __alloc_pages_nodemask+0x23e1/0x2720 [ 841.929050] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 841.934153] alloc_pages_current+0x155/0x260 [ 841.938571] filemap_fault+0x11a1/0x1ad0 [ 841.942660] ext4_filemap_fault+0x84/0xb0 [ 841.946797] __do_fault+0xfa/0x380 [ 841.950339] __handle_mm_fault+0x2497/0x4620 [ 841.955631] ? vm_insert_page+0x7c0/0x7c0 [ 841.959792] ? lock_downgrade+0x740/0x740 [ 841.964025] ? mark_held_locks+0xa6/0xf0 [ 841.968075] handle_mm_fault+0x455/0x9c0 [ 841.972177] __do_page_fault+0x549/0xad0 [ 841.976231] ? spurious_fault+0x640/0x640 [ 841.980465] ? do_page_fault+0x60/0x500 [ 841.984446] ? page_fault+0x2f/0x50 [ 841.988804] page_fault+0x45/0x50 [ 841.992358] RIP: ffffffff:0x1f9f [ 841.995722] RSP: ca29d78b:0000000000000000 EFLAGS: 7fcfefb46308 [ 842.000070] Mem-Info: [ 842.008923] active_anon:13394 inactive_anon:8228 isolated_anon:0 [ 842.008923] active_file:15 inactive_file:15 isolated_file:0 [ 842.008923] unevictable:0 dirty:0 writeback:0 unstable:0 [ 842.008923] slab_reclaimable:20751 slab_unreclaimable:101635 [ 842.008923] mapped:43521 shmem:8981 pagetables:661 bounce:0 [ 842.008923] free:25173 free_pcp:233 free_cma:0 [ 842.042927] Node 0 active_anon:53328kB inactive_anon:32884kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:35876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 842.070907] Node 1 active_anon:248kB inactive_anon:28kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 842.097302] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 842.123901] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 842.128919] Node 0 DMA32 free:36092kB min:36200kB low:45248kB high:54296kB active_anon:53328kB inactive_anon:32884kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7104kB pagetables:2644kB bounce:0kB free_pcp:932kB local_pcp:324kB free_cma:0kB [ 842.159262] lowmem_reserve[]: 0 0 0 0 0 [ 842.163436] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 842.191969] lowmem_reserve[]: 0 0 0 0 0 [ 842.195966] Node 1 Normal free:53644kB min:53696kB low:67120kB high:80544kB active_anon:248kB inactive_anon:28kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 842.224226] lowmem_reserve[]: 0 0 0 0 0 [ 842.228221] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 11060kB [ 842.241642] Node 0 DMA32: 1951*4kB (ME) 706*8kB (UME) 160*16kB (UME) 41*32kB (UM) 29*64kB (UM) 18*128kB (M) 13*256kB (M) 10*512kB (UM) 6*1024kB (UM) 0*2048kB 0*4096kB = 36076kB [ 842.260503] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 842.271330] Node 1 Normal: 23*4kB (UM) 14*8kB (UME) 10*16kB (UME) 5*32kB (UME) 4*64kB (UM) 1*128kB (M) 2*256kB (M) 4*512kB (UME) 5*1024kB (UME) 2*2048kB (UM) 10*4096kB (UM) = 53644kB [ 842.289500] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 842.299190] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 842.310997] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 842.320868] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 842.341201] 9011 total pagecache pages [ 842.346916] 0 pages in swap cache [ 842.350390] Swap cache stats: add 0, delete 0, find 0/0 [ 842.366112] Free swap = 0kB [ 842.369477] Total swap = 0kB [ 842.377075] 2097051 pages RAM [ 842.380325] 0 pages HighMem/MovableOnly [ 842.389518] 363848 pages reserved [ 842.400504] 0 pages cma reserved [ 842.406278] Out of memory (oom_kill_allocating_task): Kill process 7747 (in:imklog) score 0 or sacrifice child [ 842.426764] Killed process 7691 (rsyslogd) total-vm:254332kB, anon-rss:952kB, file-rss:0kB, shmem-rss:0kB [ 842.442672] oom_reaper: reaped process 7691 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 842.530294] oom_reaper: reaped process 18078 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 842.583966] kthreadd invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 842.613799] kthreadd cpuset=/ mems_allowed=0-1 [ 842.618427] CPU: 0 PID: 2 Comm: kthreadd Not tainted 4.14.230-syzkaller #0 [ 842.625462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 842.634824] Call Trace: [ 842.637446] dump_stack+0x1b2/0x281 [ 842.641101] dump_header+0x178/0x82f [ 842.644855] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 842.649965] ? ___ratelimit+0x2cd/0x530 [ 842.653949] oom_kill_process.cold+0x10/0xa40 [ 842.658523] ? lock_downgrade+0x740/0x740 [ 842.662685] out_of_memory+0x2dc/0x1190 [ 842.666655] ? oom_killer_disable+0x1c0/0x1c0 [ 842.671154] ? mutex_trylock+0x152/0x1a0 [ 842.675213] __alloc_pages_nodemask+0x23e1/0x2720 [ 842.680068] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 842.685310] ? fs_reclaim_release+0xd0/0x110 [ 842.699059] ? kmem_cache_alloc_node+0x38b/0x410 [ 842.705034] copy_process.part.0+0x265/0x71c0 [ 842.709659] ? trace_hardirqs_on+0x10/0x10 [ 842.714174] ? __lock_acquire+0x5fc/0x3f20 [ 842.718440] ? kthread_create_on_node+0xd0/0xd0 [ 842.723114] ? __cleanup_sighand+0x40/0x40 [ 842.727878] ? lock_downgrade+0x740/0x740 [ 842.732656] ? trace_hardirqs_on+0x10/0x10 [ 842.736964] ? _raw_spin_unlock_irq+0x24/0x80 [ 842.741446] ? kthread_create_on_node+0xd0/0xd0 [ 842.746104] _do_fork+0x184/0xc80 [ 842.749537] ? fork_idle+0x270/0x270 [ 842.753262] ? __schedule+0x893/0x1de0 [ 842.757142] ? kthreadd+0x4c1/0x770 [ 842.760749] ? lock_acquire+0x170/0x3f0 [ 842.765366] ? lock_downgrade+0x740/0x740 [ 842.769509] ? kthread_create_on_node+0xd0/0xd0 [ 842.774170] kernel_thread+0x2f/0x40 [ 842.778092] kthreadd+0x51a/0x770 [ 842.781647] ? kthread_is_per_cpu+0xd0/0xd0 [ 842.786103] ? kthread_is_per_cpu+0xd0/0xd0 [ 842.790518] ? schedule_tail+0x50/0x1e0 [ 842.794496] ? kthread_is_per_cpu+0xd0/0xd0 [ 842.798835] ret_from_fork+0x24/0x30 [ 842.806130] Mem-Info: [ 842.808561] active_anon:12579 inactive_anon:8228 isolated_anon:0 [ 842.808561] active_file:35 inactive_file:4 isolated_file:0 [ 842.808561] unevictable:0 dirty:0 writeback:0 unstable:0 [ 842.808561] slab_reclaimable:20741 slab_unreclaimable:101632 [ 842.808561] mapped:43524 shmem:8981 pagetables:660 bounce:0 [ 842.808561] free:13884 free_pcp:114 free_cma:0 [ 842.814296] syz-executor.5: [ 842.846096] Node 0 active_anon:50072kB inactive_anon:32884kB active_file:32kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174096kB dirty:0kB writeback:0kB shmem:35876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 842.858500] vmalloc: allocation failure, allocated 1526149120 of 2259202048 bytes [ 842.881485] Node 1 active_anon:244kB inactive_anon:28kB active_file:8kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 842.895300] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 842.919967] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 842.932206] (null) [ 842.964635] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 842.966224] syz-executor.5 cpuset= [ 842.969698] Node 0 [ 842.969701] / [ 842.979767] DMA32 free:17720kB min:36200kB low:45248kB high:54296kB active_anon:50072kB inactive_anon:32884kB active_file:48kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7008kB pagetables:2640kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 842.980321] mems_allowed=0-1 [ 842.981491] lowmem_reserve[]: [ 843.020644] CPU: 1 PID: 18078 Comm: syz-executor.5 Not tainted 4.14.230-syzkaller #0 [ 843.023540] 0 [ 843.023778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 843.039882] 0 [ 843.042808] Call Trace: [ 843.042831] dump_stack+0x1b2/0x281 [ 843.042844] warn_alloc.cold+0x96/0x1cc [ 843.042856] ? zone_watermark_ok_safe+0x220/0x220 [ 843.042882] __vmalloc_area_node+0x48a/0x680 [ 843.042896] ? __vmalloc_node_range+0x150/0x150 [ 843.042907] ? __get_vm_area_node+0x27d/0x340 [ 843.046762] 0 [ 843.047310] __vmalloc_node_range+0xbe/0x150 [ 843.050923] 0 [ 843.054892] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 843.054901] vmalloc_user+0x47/0xa0 [ 843.054910] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 843.054918] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 843.054926] vb2_vmalloc_alloc+0xa6/0x2d0 [ 843.054935] __vb2_queue_alloc+0x47a/0xd90 [ 843.054955] vb2_core_create_bufs+0x279/0x5a0 [ 843.054965] ? __vb2_queue_free+0x7a0/0x7a0 [ 843.054979] ? perf_trace_wiphy_id_evt+0x11/0x3f0 [ 843.054990] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 843.069785] 0 [ 843.073358] ? trace_hardirqs_on+0x10/0x10 [ 843.073372] vb2_create_bufs+0x2e1/0x5b0 [ 843.073395] ? vb2_thread_start+0x310/0x310 [ 843.079604] ? perf_trace_wiphy_id_evt+0x11/0x3f0 [ 843.081383] Node 0 [ 843.086739] v4l_create_bufs+0xa4/0x150 [ 843.086755] __video_do_ioctl+0x65b/0x6a0 [ 843.086769] ? video_ioctl2+0x30/0x30 [ 843.086779] ? __might_fault+0x177/0x1b0 [ 843.086787] ? video_ioctl2+0x30/0x30 [ 843.086796] video_usercopy+0xfd/0xe70 [ 843.086810] ? v4l_g_ctrl+0x390/0x390 [ 843.086819] ? lock_acquire+0x170/0x3f0 [ 843.086827] ? lock_downgrade+0x740/0x740 [ 843.086842] ? trace_hardirqs_on+0x10/0x10 [ 843.086854] ? futex_exit_release+0x220/0x220 [ 843.099580] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 843.100127] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 843.104303] lowmem_reserve[]: [ 843.108475] ? debug_check_no_obj_freed+0x2c0/0x680 [ 843.123245] 0 [ 843.127439] v4l2_ioctl+0x1bb/0x2f0 [ 843.129216] 0 [ 843.133527] ? v4l2_open+0x2f0/0x2f0 [ 843.133538] do_vfs_ioctl+0x75a/0xff0 [ 843.133548] ? ioctl_preallocate+0x1a0/0x1a0 [ 843.133557] ? lock_downgrade+0x740/0x740 [ 843.133573] ? __fget+0x225/0x360 [ 843.133582] ? do_vfs_ioctl+0xff0/0xff0 [ 843.133592] ? security_file_ioctl+0x83/0xb0 [ 843.133601] SyS_ioctl+0x7f/0xb0 [ 843.133609] ? do_vfs_ioctl+0xff0/0xff0 [ 843.133620] do_syscall_64+0x1d5/0x640 [ 843.133635] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 843.133643] RIP: 0033:0x466459 [ 843.133648] RSP: 002b:00007f764b7c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 843.133661] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 843.147915] 0 [ 843.149177] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000004 [ 843.155266] 0 [ 843.157306] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 843.161096] 0 [ 843.165142] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 843.165147] R13: 00007ffcd77a4a7f R14: 00007f764b7c4300 R15: 0000000000022000 [ 843.180970] Mem-Info: [ 843.208008] active_anon:12579 inactive_anon:8228 isolated_anon:0 [ 843.208008] active_file:13 inactive_file:14 isolated_file:0 [ 843.208008] unevictable:0 dirty:0 writeback:0 unstable:0 [ 843.208008] slab_reclaimable:20742 slab_unreclaimable:101639 [ 843.208008] mapped:43521 shmem:8981 pagetables:629 bounce:0 [ 843.208008] free:14015 free_pcp:0 free_cma:0 [ 843.225457] Node 1 [ 843.241758] Node 0 active_anon:50072kB inactive_anon:32884kB active_file:40kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:35876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 843.249317] Normal free:26860kB min:53696kB low:67120kB high:80544kB active_anon:244kB inactive_anon:28kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 843.251486] Node 1 active_anon:244kB inactive_anon:28kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 843.255790] lowmem_reserve[]: 0 0 0 0 0 [ 843.255812] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10976kB [ 843.255871] Node 0 DMA32: 1950*4kB (UME) 691*8kB (UME) 166*16kB (ME) 22*32kB (M) 12*64kB (UM) 6*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB [ 843.278954] Node 0 [ 843.285729] = 18224kB [ 843.298190] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 843.309425] Node 0 [ 843.326266] lowmem_reserve[]: [ 843.335549] Normal: [ 843.346124] 0 [ 843.380159] 0*4kB [ 843.420138] 2717 [ 843.437794] 0*8kB [ 843.473719] 2718 [ 843.482110] 0*16kB [ 843.503742] 2718 [ 843.526769] 0*32kB [ 843.541715] 2718 [ 843.546646] Node 0 DMA32 free:17976kB min:36200kB low:45248kB high:54296kB active_anon:50072kB inactive_anon:32884kB active_file:40kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:6976kB pagetables:2516kB bounce:0kB free_pcp:236kB local_pcp:116kB free_cma:0kB [ 843.548339] 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 843.590307] Node 1 Normal: 21*4kB (M) 12*8kB (ME) 10*16kB (ME) 4*32kB (ME) 4*64kB (UM) 2*128kB (UM) 3*256kB (UM) 3*512kB (ME) 5*1024kB (UME) 1*2048kB (M) 4*4096kB (M) = 26836kB [ 843.590488] lowmem_reserve[]: [ 843.614168] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 843.622320] 0 0 0 0 0 [ 843.628291] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 843.628642] Node 0 [ 843.644533] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 843.652628] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 843.658182] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 843.700165] lowmem_reserve[]: 0 0 0 0 0 [ 843.700221] 9008 total pagecache pages [ 843.706276] Node 1 Normal free:26860kB min:53696kB low:67120kB high:80544kB active_anon:244kB inactive_anon:28kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 843.708176] 0 pages in swap cache [ 843.708184] Swap cache stats: add 0, delete 0, find 0/0 [ 843.746830] lowmem_reserve[]: 0 0 0 0 0 [ 843.750841] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10976kB [ 843.755915] Free swap = 0kB [ 843.771232] Total swap = 0kB [ 843.774532] Node 0 DMA32: 1926*4kB (UME) 684*8kB (ME) 166*16kB (ME) 23*32kB (UM) 12*64kB (UM) 5*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17976kB [ 843.780487] 2097051 pages RAM [ 843.799437] 0 pages HighMem/MovableOnly [ 843.803483] 363848 pages reserved [ 843.803576] Node 0 [ 843.806932] 0 pages cma reserved [ 843.806942] Out of memory: Kill process 7974 (syz-fuzzer) score 5 or sacrifice child [ 843.809167] Normal: 0*4kB [ 843.819348] Killed process 7989 (syz-executor.3) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 843.829755] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 843.865078] Node 1 Normal: 22*4kB (UM) 13*8kB (UME) 11*16kB (UME) 5*32kB (UME) 3*64kB (M) 1*128kB (M) 3*256kB (UM) 3*512kB (ME) 5*1024kB (UME) 1*2048kB (M) 4*4096kB (M) = 26704kB [ 843.868951] oom_reaper: reaped process 7989 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 843.893989] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 843.902567] Bluetooth: hci0 command 0x0419 tx timeout [ 843.907018] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 843.917571] Bluetooth: hci1 command 0x0419 tx timeout [ 843.923062] Bluetooth: hci2 command 0x0419 tx timeout [ 843.926398] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 843.954573] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 843.966139] systemd-rfkill invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 843.986195] 9008 total pagecache pages [ 843.990101] 0 pages in swap cache [ 843.995688] Swap cache stats: add 0, delete 0, find 0/0 [ 844.001057] Free swap = 0kB [ 844.008387] systemd-rfkill cpuset=/ mems_allowed=0-1 [ 844.015839] CPU: 1 PID: 18048 Comm: systemd-rfkill Not tainted 4.14.230-syzkaller #0 [ 844.023744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 844.034849] Call Trace: [ 844.037450] dump_stack+0x1b2/0x281 [ 844.041079] dump_header+0x178/0x82f [ 844.044794] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 844.049890] ? ___ratelimit+0x2cd/0x530 [ 844.053861] oom_kill_process.cold+0x10/0xa40 [ 844.058366] out_of_memory+0xe3e/0x1190 [ 844.062423] ? oom_killer_disable+0x1c0/0x1c0 [ 844.067377] ? mutex_trylock+0x152/0x1a0 [ 844.071625] __alloc_pages_nodemask+0x23e1/0x2720 [ 844.076486] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 844.081361] alloc_pages_current+0x155/0x260 [ 844.086573] filemap_fault+0x11a1/0x1ad0 [ 844.090655] ext4_filemap_fault+0x84/0xb0 [ 844.095610] __do_fault+0xfa/0x380 [ 844.099169] __handle_mm_fault+0x2497/0x4620 [ 844.103593] ? vm_insert_page+0x7c0/0x7c0 [ 844.107744] ? compat_poll_select_copy_remaining+0x2c0/0x2c0 [ 844.113659] ? ktime_get_ts64+0x261/0x3a0 [ 844.117840] ? mark_held_locks+0xa6/0xf0 [ 844.121907] handle_mm_fault+0x455/0x9c0 [ 844.126026] __do_page_fault+0x549/0xad0 [ 844.130103] ? spurious_fault+0x640/0x640 [ 844.134251] ? do_page_fault+0x60/0x500 [ 844.138227] ? page_fault+0x2f/0x50 [ 844.141849] page_fault+0x45/0x50 [ 844.145294] RIP: 6d3fb240: (null) [ 844.149512] RSP: cc6d4040:00007ffd6d3fb248 EFLAGS: 0000000b [ 844.160670] Total swap = 0kB [ 844.164167] Mem-Info: [ 844.166451] 2097051 pages RAM [ 844.169424] active_anon:12543 inactive_anon:8228 isolated_anon:0 [ 844.169424] active_file:33 inactive_file:0 isolated_file:0 [ 844.169424] unevictable:0 dirty:0 writeback:0 unstable:0 [ 844.169424] slab_reclaimable:20742 slab_unreclaimable:101644 [ 844.169424] mapped:34817 shmem:8981 pagetables:606 bounce:0 [ 844.169424] free:13928 free_pcp:191 free_cma:0 [ 844.182102] 0 pages HighMem/MovableOnly [ 844.216717] Node 0 active_anon:49928kB inactive_anon:32884kB active_file:88kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139268kB dirty:0kB writeback:0kB shmem:35876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 844.226911] 363848 pages reserved [ 844.255425] Node 1 active_anon:244kB inactive_anon:28kB active_file:44kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 844.259877] 0 pages cma reserved [ 844.293777] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 844.330632] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 844.335790] Node 0 DMA32 free:18008kB min:36200kB low:45248kB high:54296kB active_anon:49928kB inactive_anon:32884kB active_file:88kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:6944kB pagetables:2424kB bounce:0kB free_pcp:636kB local_pcp:524kB free_cma:0kB [ 844.380939] lowmem_reserve[]: 0 0 0 0 0 [ 844.389028] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 844.423588] lowmem_reserve[]: 0 0 0 0 0 [ 844.427607] Node 1 Normal free:26728kB min:53696kB low:67120kB high:80544kB active_anon:244kB inactive_anon:28kB active_file:44kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:0kB bounce:0kB free_pcp:124kB local_pcp:124kB free_cma:0kB [ 844.468402] lowmem_reserve[]: 0 0 0 0 0 [ 844.478046] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10976kB [ 844.499766] Node 0 DMA32: 1926*4kB (UME) 686*8kB (UME) 166*16kB (ME) 24*32kB (UM) 12*64kB (UM) 5*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18024kB [ 844.518792] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 844.529669] Node 1 Normal: 22*4kB (UM) 13*8kB (UME) 11*16kB (UME) 5*32kB (UME) 3*64kB (M) 1*128kB (M) 3*256kB (UM) 3*512kB (ME) 5*1024kB (UME) 1*2048kB (M) 4*4096kB (M) = 26704kB [ 844.550179] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 844.559834] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 844.577212] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 844.588578] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 844.599943] 9008 total pagecache pages [ 844.607635] 0 pages in swap cache [ 844.611150] Swap cache stats: add 0, delete 0, find 0/0 [ 844.618719] Free swap = 0kB [ 844.623987] Total swap = 0kB [ 844.627010] 2097051 pages RAM [ 844.630205] 0 pages HighMem/MovableOnly [ 844.636367] 363848 pages reserved [ 844.639821] 0 pages cma reserved [ 844.645384] Out of memory (oom_kill_allocating_task): Kill process 18048 (systemd-rfkill) score 0 or sacrifice child [ 844.665719] Killed process 18048 (systemd-rfkill) total-vm:37800kB, anon-rss:376kB, file-rss:0kB, shmem-rss:0kB [ 844.680943] oom_reaper: reaped process 18048 (systemd-rfkill), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 844.702365] kthreadd invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 844.723384] kthreadd cpuset=/ mems_allowed=0-1 [ 844.738513] CPU: 1 PID: 2 Comm: kthreadd Not tainted 4.14.230-syzkaller #0 [ 844.745540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 844.755044] Call Trace: [ 844.757638] dump_stack+0x1b2/0x281 [ 844.761270] dump_header+0x178/0x82f [ 844.764983] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 844.770111] ? ___ratelimit+0x2cd/0x530 [ 844.774086] oom_kill_process.cold+0x10/0xa40 [ 844.778591] ? lock_downgrade+0x740/0x740 [ 844.782749] out_of_memory+0x2dc/0x1190 [ 844.786731] ? oom_killer_disable+0x1c0/0x1c0 [ 844.791228] ? mutex_trylock+0x152/0x1a0 [ 844.795291] __alloc_pages_nodemask+0x23e1/0x2720 [ 844.800163] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 844.805005] ? fs_reclaim_release+0xd0/0x110 [ 844.809430] ? kmem_cache_alloc_node+0x38b/0x410 [ 844.814187] copy_process.part.0+0x265/0x71c0 [ 844.818689] ? trace_hardirqs_on+0x10/0x10 [ 844.822924] ? __lock_acquire+0x5fc/0x3f20 [ 844.827158] ? kthread_create_on_node+0xd0/0xd0 [ 844.831849] ? __cleanup_sighand+0x40/0x40 [ 844.836095] ? lock_downgrade+0x740/0x740 [ 844.840329] ? trace_hardirqs_on+0x10/0x10 [ 844.844590] ? _raw_spin_unlock_irq+0x24/0x80 [ 844.849099] ? kthread_create_on_node+0xd0/0xd0 [ 844.853776] _do_fork+0x184/0xc80 [ 844.857239] ? fork_idle+0x270/0x270 [ 844.860960] ? __schedule+0x893/0x1de0 [ 844.864851] ? kthreadd+0x4c1/0x770 [ 844.868498] ? lock_acquire+0x170/0x3f0 [ 844.874235] ? lock_downgrade+0x740/0x740 [ 844.878386] ? kthread_create_on_node+0xd0/0xd0 [ 844.883063] kernel_thread+0x2f/0x40 [ 844.886780] kthreadd+0x51a/0x770 [ 844.890232] ? kthread_is_per_cpu+0xd0/0xd0 [ 844.894545] ? kthread_is_per_cpu+0xd0/0xd0 [ 844.898885] ? schedule_tail+0x50/0x1e0 [ 844.902853] ? kthread_is_per_cpu+0xd0/0xd0 [ 844.907169] ret_from_fork+0x24/0x30 [ 844.931177] Mem-Info: [ 844.940163] active_anon:12443 inactive_anon:8228 isolated_anon:0 [ 844.940163] active_file:26 inactive_file:0 isolated_file:0 [ 844.940163] unevictable:0 dirty:0 writeback:0 unstable:0 [ 844.940163] slab_reclaimable:20742 slab_unreclaimable:101386 [ 844.940163] mapped:34817 shmem:8981 pagetables:569 bounce:0 [ 844.940163] free:14439 free_pcp:29 free_cma:0 [ 844.982329] Node 0 active_anon:49528kB inactive_anon:32884kB active_file:60kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139268kB dirty:0kB writeback:0kB shmem:35876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 845.015981] Node 1 active_anon:244kB inactive_anon:28kB active_file:20kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:48kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 845.042236] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 845.068558] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 845.073636] Node 0 DMA32 free:20120kB min:36200kB low:45248kB high:54296kB active_anon:49508kB inactive_anon:32884kB active_file:40kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:6912kB pagetables:2244kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB [ 845.102437] lowmem_reserve[]: 0 0 0 0 0 [ 845.106433] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 845.132867] lowmem_reserve[]: 0 0 0 0 0 [ 845.136888] Node 1 Normal free:27964kB min:53696kB low:67120kB high:80544kB active_anon:208kB inactive_anon:28kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:0kB bounce:0kB free_pcp:708kB local_pcp:0kB free_cma:0kB [ 845.165006] lowmem_reserve[]: 0 0 0 0 0 [ 845.169007] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10976kB [ 845.185854] Node 0 DMA32: 1970*4kB (UME) 834*8kB (UME) 186*16kB (UME) 29*32kB (UM) 14*64kB (UM) 6*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20120kB [ 845.200568] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 845.211368] Node 1 Normal: 27*4kB (UM) 37*8kB (UME) 39*16kB (UME) 41*32kB (UME) 33*64kB (UM) 29*128kB (UM) 24*256kB (UM) 14*512kB (UME) 8*1024kB (UME) 7*2048kB (UM) 24*4096kB (UM) = 142308kB [ 845.228636] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 845.237514] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 845.246144] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 845.256141] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 845.265289] 9045 total pagecache pages [ 845.269721] 0 pages in swap cache [ 845.273640] Swap cache stats: add 0, delete 0, find 0/0 [ 845.279079] Free swap = 0kB [ 845.282147] Total swap = 0kB [ 845.285164] 2097051 pages RAM [ 845.288256] 0 pages HighMem/MovableOnly [ 845.292245] 363848 pages reserved [ 845.295687] 0 pages cma reserved [ 845.299044] Out of memory: Kill process 7974 (syz-fuzzer) score 5 or sacrifice child [ 845.307063] Killed process 18093 (syz-executor.1) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 845.339975] oom_reaper: reaped process 18093 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 845.382276] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 845.402047] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 845.408819] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 845.591010] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 845.626771] systemd[1]: systemd-rfkill.service: Main process exited, code=killed, status=9/KILL [ 845.628595] syz-executor.4 (18096) used greatest stack depth: 22792 bytes left [ 845.665980] systemd[1]: systemd-rfkill.service: Unit entered failed state. [ 845.679810] systemd[1]: systemd-rfkill.service: Failed with result 'signal'. [ 845.692553] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 845.722102] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 845.777071] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 845.799174] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 845.807450] systemd[1]: Stopped System Logging Service. [ 845.817955] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 845.840974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 845.864986] systemd[1]: Starting System Logging Service... [ 845.882595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 845.903354] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 846.030273] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 846.046619] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 846.062464] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 846.075128] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 846.087664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 846.096718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 846.111134] device veth0_vlan entered promiscuous mode [ 846.118196] systemd-journald[18746]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 846.123034] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 846.152315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 846.163850] device veth1_vlan entered promiscuous mode [ 846.166547] systemd-journald[18746]: /dev/kmsg buffer overrun, some messages lost. [ 846.170314] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 846.189641] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 846.197871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 846.214334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 846.221095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 846.243343] device bridge_slave_1 left promiscuous mode [ 846.261748] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.269098] device bridge_slave_0 left promiscuous mode [ 846.295735] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.305291] device veth1_macvtap left promiscuous mode [ 846.310610] device veth0_macvtap left promiscuous mode [ 846.335567] device veth1_vlan left promiscuous mode [ 846.355518] device veth0_vlan left promiscuous mode [ 846.597022] device hsr_slave_1 left promiscuous mode [ 846.620232] device hsr_slave_0 left promiscuous mode [ 846.664898] team0 (unregistering): Port device team_slave_1 removed [ 846.686284] team0 (unregistering): Port device team_slave_0 removed [ 846.715821] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 846.751615] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 846.822647] bond0 (unregistering): Released all slaves [ 846.858989] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 846.872150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 846.892370] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 846.985783] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 847.135805] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 847.151969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 847.159727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 847.184528] device veth0_macvtap entered promiscuous mode [ 847.220215] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 847.251074] device veth1_macvtap entered promiscuous mode [ 847.266088] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 847.305185] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 847.316242] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 847.340910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 847.362162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.373819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 847.386425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.397624] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 847.409300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 847.416824] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 847.429719] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 847.438112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 847.450481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 847.461115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 847.473964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.483461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 847.502008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.523629] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 847.530669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 847.552045] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 847.602164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 848.527370] IPVS: ftp: loaded support on port[0] = 21 [ 848.606794] IPVS: ftp: loaded support on port[0] = 21 [ 848.824404] chnl_net:caif_netlink_parms(): no params data found [ 849.111165] chnl_net:caif_netlink_parms(): no params data found [ 849.189525] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.227950] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.236904] device bridge_slave_0 entered promiscuous mode [ 849.254711] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.261112] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.272821] device bridge_slave_1 entered promiscuous mode [ 849.321130] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 849.331266] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 849.388474] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 849.397511] team0: Port device team_slave_0 added [ 849.404204] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.415499] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.424675] device bridge_slave_0 entered promiscuous mode [ 849.439681] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 849.447166] team0: Port device team_slave_1 added [ 849.454955] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.461458] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.470962] device bridge_slave_1 entered promiscuous mode [ 849.520090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 849.528424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 849.557521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 849.571443] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 849.585672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 849.593671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 849.627575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 849.640480] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 849.666561] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 849.674504] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 849.723716] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 849.764141] team0: Port device team_slave_0 added [ 849.776192] device hsr_slave_0 entered promiscuous mode [ 849.793650] device hsr_slave_1 entered promiscuous mode [ 849.806535] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 849.815482] team0: Port device team_slave_1 added [ 849.820777] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 849.830068] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 849.875609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 849.885428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 849.917942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 849.949081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 849.956259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 849.982043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.012394] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 850.019958] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 850.084844] device hsr_slave_0 entered promiscuous mode [ 850.091141] device hsr_slave_1 entered promiscuous mode [ 850.114114] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 850.121294] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 850.201592] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 850.301783] Bluetooth: hci1 command 0x0409 tx timeout [ 850.331023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.365264] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 850.382647] Bluetooth: hci2 command 0x0409 tx timeout [ 850.390790] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 850.408291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 850.420333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 850.439680] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 850.452787] 8021q: adding VLAN 0 to HW filter on device team0 [ 850.472484] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 850.481831] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 850.490920] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 850.504286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 850.515561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 850.525775] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.532192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 850.546137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 850.555449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 850.568374] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.574784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 850.602449] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 850.618334] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 850.627853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 850.642629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 850.650644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 850.679319] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 850.691954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 850.700067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 850.716154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 850.730774] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 850.745813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 850.758035] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 850.773984] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 850.792410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 850.800090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 850.816447] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 850.830385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 850.844973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 850.858561] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 850.870173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 850.890735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.915389] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 850.934934] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 850.954007] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 850.960828] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 850.976411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 850.984441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 850.991505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 851.004503] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 851.014491] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 851.020568] 8021q: adding VLAN 0 to HW filter on device team0 [ 851.035739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 851.046506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 851.063610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 851.076158] device bridge_slave_1 left promiscuous mode [ 851.083182] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.096418] device bridge_slave_0 left promiscuous mode [ 851.103758] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.119419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 851.129006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 851.141334] device bridge_slave_1 left promiscuous mode [ 851.148909] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.164443] device bridge_slave_0 left promiscuous mode [ 851.170286] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.187536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 851.197693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 851.208301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 851.219036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 851.229661] device bridge_slave_1 left promiscuous mode [ 851.239195] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.250376] device bridge_slave_0 left promiscuous mode [ 851.256095] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.268051] device veth1_macvtap left promiscuous mode [ 851.273793] device veth0_macvtap left promiscuous mode [ 851.279120] device veth1_vlan left promiscuous mode [ 851.284964] device veth0_vlan left promiscuous mode [ 851.411675] device hsr_slave_1 left promiscuous mode [ 851.418961] device hsr_slave_0 left promiscuous mode [ 851.434713] team0 (unregistering): Port device team_slave_1 removed [ 851.445201] team0 (unregistering): Port device team_slave_0 removed [ 851.455092] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 851.466879] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 851.492281] bond0 (unregistering): Released all slaves [ 851.523292] device hsr_slave_1 left promiscuous mode [ 851.530833] device hsr_slave_0 left promiscuous mode [ 851.547221] team0 (unregistering): Port device team_slave_1 removed [ 851.557663] team0 (unregistering): Port device team_slave_0 removed [ 851.568342] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 851.579622] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 851.606143] bond0 (unregistering): Released all slaves [ 851.639419] device hsr_slave_1 left promiscuous mode [ 851.647304] device hsr_slave_0 left promiscuous mode [ 851.661023] team0 (unregistering): Port device team_slave_1 removed [ 851.672001] team0 (unregistering): Port device team_slave_0 removed [ 851.680761] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 851.692265] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 851.717618] bond0 (unregistering): Released all slaves [ 851.730736] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 851.743008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 851.753123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 851.760799] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.767232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 851.778623] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 851.787849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 851.796458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 851.805343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 851.813980] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.820699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.831691] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 851.844851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 851.856807] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 851.869015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 851.886065] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 851.893815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 851.905400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 851.914448] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 851.928137] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 851.937213] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 851.947663] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 851.955921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 851.963978] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 851.972500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 851.982859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 851.994073] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 852.001964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 852.009558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 852.023845] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 852.034953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 852.042570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 852.059807] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 852.066053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 852.083896] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 852.092568] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 852.099395] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 852.110548] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 852.120500] device veth0_vlan entered promiscuous mode [ 852.127900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 852.137286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 852.148320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 852.156345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 852.167917] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 852.183917] device veth1_vlan entered promiscuous mode [ 852.190048] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 852.245571] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 852.255003] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 852.263274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 852.270235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 852.284586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 852.293303] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 852.312105] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 852.323049] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 852.330829] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 852.340236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 852.348515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 852.361006] device veth0_macvtap entered promiscuous mode [ 852.368964] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 852.391744] Bluetooth: hci1 command 0x041b tx timeout [ 852.398193] device veth1_macvtap entered promiscuous mode [ 852.413872] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 852.423917] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 852.437677] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 852.447922] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 852.470230] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 852.491623] Bluetooth: hci2 command 0x041b tx timeout [ 852.496083] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 852.509762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 852.520404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 852.531394] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 852.545642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 852.561102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 852.570874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 852.588344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 852.599250] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 852.606815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 852.617923] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 852.626826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 852.636769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 852.653554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 852.668781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 852.679967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 852.694015] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 852.700900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 852.717836] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 852.725773] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 852.737342] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 852.745348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 852.757393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 852.780714] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 852.789223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 852.799072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 852.815626] device veth0_vlan entered promiscuous mode [ 852.823374] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 852.835315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 852.849176] device veth1_vlan entered promiscuous mode [ 852.883949] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 852.902944] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 852.909858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 852.931114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 852.949086] device veth0_macvtap entered promiscuous mode [ 852.957136] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 852.974330] device veth1_macvtap entered promiscuous mode [ 852.980943] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 852.995215] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 853.006851] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 853.018187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 853.034960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.044377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 853.056133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.066600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 853.078891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.090511] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 853.104292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 853.167118] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 853.176510] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 853.241674] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 853.249524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 853.275530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 853.286490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.307597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 853.317857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.328804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 853.370029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.393188] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 853.400302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 853.410265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 853.427354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 17:02:37 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x3, 0x0, 0x0, "05994f343b2c1e949228d6a93a08896f4bd066cfa3af30a203b653a5fa8aeeec"}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4, 0xa040) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f00000000c0)={0x0, 0x2b4afaeb, 0x6, 0x1, 0x2, @stepwise={{0x1ff, 0xff}, {0x5, 0x9}, {0x1, 0x5}}}) 17:02:37 executing program 5: socket$isdn(0x22, 0x3, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @raw_data="4d9ced65f1e21d507e2299c9698d44d1c83108bab192a8866d46a63a2e5f82d402c584987fab30f77ecef900c4fded3ec2679e778cd78a0a683a0adafeffd5819d3ca615cf359e41a0e34f05666c63dc3da642ec76f8afa4e6c12e641b854b3aceec98cfcb4cfc438e02d97a91c7bd295c77f6273ede6713fd71a7e6d55a3ad23d579c8aff1537087a2ef3fd1fd8923102374d578f60aa07b2216d2d4a65bfc474fc534e72fa5a195a3d8020c5584171c3df417d34da3f6f5ee06361029e1e192d477caf90ec0f80"}}) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000100)={0x0, 0x0, {0xffff, 0x3, 0x200020, 0x1}}) 17:02:37 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:02:37 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)={0x200007, 0xa, 0x4, 0x20, 0xff, {0x77359400}, {0x5, 0x1, 0x2, 0x80, 0x9, 0x2, "f53f0123"}, 0x7ff, 0x2, @offset=0x40, 0x6}) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f00000004c0)={0x5, "620d568bffadbaedd89e08b69f39717b82a93991af3be4d5f8aa7ee683539aa8", 0x2}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000002c0)={0xfff, 0x2, 0x4, 0x1000, 0x9b2, {}, {0x5, 0x2, 0xd6, 0xc5, 0x80, 0x0, "a0f41e57"}, 0x8, 0x2, @fd, 0x9}) 17:02:37 executing program 0: recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/102, 0x66, 0x40000040, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0x2711, @my=0x0}, 0x80) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) r1 = socket(0x3, 0x6, 0xa590) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000240)=0x1, 0x4) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) 17:02:37 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080)='net_prio.ifpriomap\x00', 0x2, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f00000000c0)={'vlan0', 0x32, 0x34}, 0x8) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) 17:02:38 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:02:38 executing program 1: ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000080)) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000100)={0x2, 0x3831354f, 0x3, @discrete={0x3}}) r2 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000340)={0x3, @win={{0xc0000000, 0x620b65de, 0x2f99, 0x7}, 0x9, 0x3f60, &(0x7f0000000240)={{0x859, 0x2, 0x0, 0x7}, &(0x7f0000000200)={{0x0, 0x9, 0x7, 0xbd8e7b04}, &(0x7f00000001c0)={{0x4, 0xffff7fff, 0x101, 0x8}}}}, 0x5, &(0x7f0000000280)="1c17921a7b04681c479a19c5e57eec6bcef1097fcf49cd925135941b86a0427793cf166b17844f3a6c8718a7fb47b2be91c0eeff7658213b57a3f8da6d372630323cbe5ced411efc4544460f5a41547d3c59d4cf77f7fed83e595ebb22ee31d8ad5488f015a7fba747b37d404f7c1110e267166f20bfbf9f6165bdd57dd354b478a29cee27d8e794392e53455e806e1a01a0a884c14059a55448c6b404a3aa22916e565698aea48a", 0xaa}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) 17:02:38 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:02:38 executing program 4: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2) 17:02:38 executing program 4: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2) 17:02:38 executing program 4: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2) [ 854.461962] Bluetooth: hci1 command 0x040f tx timeout [ 854.542041] Bluetooth: hci2 command 0x040f tx timeout [ 855.856324] IPVS: ftp: loaded support on port[0] = 21 [ 856.059829] chnl_net:caif_netlink_parms(): no params data found [ 856.181336] IPVS: ftp: loaded support on port[0] = 21 [ 856.394988] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.470996] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.488664] device bridge_slave_0 entered promiscuous mode [ 856.506927] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.607227] Bluetooth: hci1 command 0x0419 tx timeout [ 856.615965] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.624570] Bluetooth: hci2 command 0x0419 tx timeout [ 856.631450] device bridge_slave_1 entered promiscuous mode [ 856.639305] chnl_net:caif_netlink_parms(): no params data found [ 856.688709] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 856.704879] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 856.749315] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 856.757129] team0: Port device team_slave_0 added [ 856.764817] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 856.774401] team0: Port device team_slave_1 added [ 856.808748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 856.822718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 856.851743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 856.865587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 856.878793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 856.909188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 856.929720] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 856.940025] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 857.003749] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.013504] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.023747] device bridge_slave_0 entered promiscuous mode [ 857.035319] device hsr_slave_0 entered promiscuous mode [ 857.042803] device hsr_slave_1 entered promiscuous mode [ 857.048881] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.056954] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.065055] device bridge_slave_1 entered promiscuous mode [ 857.077023] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 857.097152] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 857.129175] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 857.141079] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 857.187960] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 857.197764] team0: Port device team_slave_0 added [ 857.219699] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 857.233313] team0: Port device team_slave_1 added [ 857.311358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 857.327803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 857.367409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 857.406979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 857.460680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 857.548169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 857.586811] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 857.598702] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 857.630982] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 857.692823] device hsr_slave_0 entered promiscuous mode [ 857.700579] device hsr_slave_1 entered promiscuous mode [ 857.728345] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 857.753645] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 857.777268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 857.809163] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 857.820211] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 857.839540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 857.854199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 857.879434] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 857.893623] 8021q: adding VLAN 0 to HW filter on device team0 [ 857.917973] Bluetooth: hci3 command 0x0409 tx timeout [ 857.928844] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 857.943394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 857.954051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 857.968355] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.978657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 857.998278] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 858.018089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 858.036946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 858.049622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 858.066096] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.077355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 858.099872] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 858.120086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 858.150437] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 858.160356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 858.187089] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 858.204343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 858.216258] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 858.240193] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 858.249813] Bluetooth: hci4 command 0x0409 tx timeout [ 858.265314] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 858.280758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 858.291461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 858.313424] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 858.323761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 858.333256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 858.350054] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 858.373687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 858.391207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 858.409773] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 858.417787] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 858.436823] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 858.455044] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 858.482978] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 858.497562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 858.506196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 858.538626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 858.560197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 858.576830] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 858.594008] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 858.607142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 858.619397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 858.639371] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 858.650651] 8021q: adding VLAN 0 to HW filter on device team0 [ 858.664587] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 858.680250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 858.696942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 858.707782] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.716220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 858.732282] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 858.742365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 858.752432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 858.766152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 858.780356] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.787711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 858.803055] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 858.817284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 858.840134] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 858.849114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 858.877093] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 858.889298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 858.898507] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 858.916148] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 858.929489] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 858.940086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 858.956309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 858.970528] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 858.999663] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 859.010952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 859.030504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 859.050515] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 859.069407] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 859.079789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 859.093443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 859.106784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 859.118316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 859.136873] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 859.149025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 859.194658] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 859.223207] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 859.237792] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 859.248173] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 859.265478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 859.280944] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 859.290751] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 859.298783] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 859.317086] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 859.324931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 859.339321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 859.355820] device veth0_vlan entered promiscuous mode [ 859.369983] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 859.387129] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 859.404839] device veth1_vlan entered promiscuous mode [ 859.416737] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 859.447343] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 859.723085] oom_reaper: reaped process 19253 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 859.746200] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 859.778640] systemd-journal cpuset=/ mems_allowed=0-1 [ 859.784555] CPU: 1 PID: 18746 Comm: systemd-journal Not tainted 4.14.230-syzkaller #0 [ 859.793171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 859.803298] Call Trace: [ 859.806264] dump_stack+0x1b2/0x281 [ 859.810744] dump_header+0x178/0x82f [ 859.814612] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 859.819358] syz-executor.5: vmalloc: allocation failure, allocated 1504067584 of 2259202048 bytes [ 859.820529] ? ___ratelimit+0x2cd/0x530 [ 859.820542] oom_kill_process.cold+0x10/0xa40 [ 859.831479] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 859.834009] out_of_memory+0xe3e/0x1190 [ 859.834022] ? oom_killer_disable+0x1c0/0x1c0 [ 859.834031] ? mutex_trylock+0x152/0x1a0 [ 859.834041] __alloc_pages_nodemask+0x23e1/0x2720 [ 859.834062] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 859.834087] alloc_pages_current+0x155/0x260 [ 859.834097] filemap_fault+0x11a1/0x1ad0 [ 859.834115] ext4_filemap_fault+0x84/0xb0 [ 859.834124] __do_fault+0xfa/0x380 [ 859.834133] __handle_mm_fault+0x2497/0x4620 [ 859.834144] ? vm_insert_page+0x7c0/0x7c0 [ 859.834162] ? mark_held_locks+0xa6/0xf0 [ 859.834173] handle_mm_fault+0x455/0x9c0 [ 859.834187] __do_page_fault+0x549/0xad0 [ 859.845827] (null) [ 859.846477] ? spurious_fault+0x640/0x640 [ 859.856134] syz-executor.5 cpuset= [ 859.857368] ? do_page_fault+0x60/0x500 [ 859.866644] / [ 859.868425] ? page_fault+0x2f/0x50 [ 859.880658] mems_allowed=0-1 [ 859.882595] page_fault+0x45/0x50 [ 859.882605] RIP: 0001:0xffffffffffffffff [ 859.882609] RSP: 264371e0:00007fff6d1c1740 EFLAGS: 7fff6d1c1550 [ 859.885114] Mem-Info: [ 859.890975] CPU: 0 PID: 19253 Comm: syz-executor.5 Not tainted 4.14.230-syzkaller #0 [ 859.892071] active_anon:13406 inactive_anon:10261 isolated_anon:0 [ 859.892071] active_file:14 inactive_file:0 isolated_file:0 [ 859.892071] unevictable:0 dirty:34 writeback:0 unstable:0 [ 859.892071] slab_reclaimable:13923 slab_unreclaimable:110801 [ 859.892071] mapped:52682 shmem:11029 pagetables:746 bounce:0 [ 859.892071] free:13872 free_pcp:60 free_cma:0 [ 859.896263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 859.901911] Node 0 active_anon:52732kB inactive_anon:41012kB active_file:20kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210728kB dirty:64kB writeback:0kB shmem:44064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 859.906539] Call Trace: [ 859.911970] Node 1 active_anon:892kB inactive_anon:32kB active_file:36kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:72kB writeback:0kB shmem:52kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 859.917663] dump_stack+0x1b2/0x281 [ 859.922232] Node 0 [ 859.924867] warn_alloc.cold+0x96/0x1cc [ 859.929199] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 859.935139] ? zone_watermark_ok_safe+0x220/0x220 [ 859.935162] __vmalloc_area_node+0x48a/0x680 [ 859.935176] ? __vmalloc_node_range+0x150/0x150 [ 859.935183] ? __get_vm_area_node+0x27d/0x340 [ 859.935196] __vmalloc_node_range+0xbe/0x150 [ 859.940460] lowmem_reserve[]: [ 859.942295] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 859.942305] vmalloc_user+0x47/0xa0 [ 859.942315] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 859.942324] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 859.942335] vb2_vmalloc_alloc+0xa6/0x2d0 [ 859.946580] 0 [ 859.951013] __vb2_queue_alloc+0x47a/0xd90 [ 859.956505] 2717 [ 859.961545] vb2_core_create_bufs+0x279/0x5a0 [ 859.961556] ? __vb2_queue_free+0x7a0/0x7a0 [ 859.961568] ? perf_trace_wiphy_id_evt+0x11/0x3f0 [ 859.961585] ? futex_wait+0x42f/0x5a0 [ 859.961599] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 859.969214] 2718 [ 859.971645] ? trace_hardirqs_on+0x10/0x10 [ 859.971659] vb2_create_bufs+0x2e1/0x5b0 [ 859.971674] ? vb2_thread_start+0x310/0x310 [ 859.971684] ? perf_trace_wiphy_id_evt+0x11/0x3f0 [ 859.971698] ? futex_wait+0x42f/0x5a0 [ 859.981831] 2718 [ 860.025386] v4l_create_bufs+0xa4/0x150 [ 860.025401] __video_do_ioctl+0x65b/0x6a0 [ 860.025414] ? video_ioctl2+0x30/0x30 [ 860.025424] ? __might_fault+0x177/0x1b0 [ 860.025434] ? video_ioctl2+0x30/0x30 [ 860.025447] video_usercopy+0xfd/0xe70 [ 860.035564] 2718 [ 860.064609] ? v4l_g_ctrl+0x390/0x390 [ 860.064621] ? lock_acquire+0x170/0x3f0 [ 860.064629] ? lock_downgrade+0x740/0x740 [ 860.064639] ? trace_hardirqs_on+0x10/0x10 [ 860.064655] ? futex_exit_release+0x220/0x220 [ 860.101786] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 860.101798] ? debug_check_no_obj_freed+0x2c0/0x680 [ 860.101809] v4l2_ioctl+0x1bb/0x2f0 [ 860.101818] ? v4l2_open+0x2f0/0x2f0 [ 860.101830] do_vfs_ioctl+0x75a/0xff0 [ 860.101842] ? ioctl_preallocate+0x1a0/0x1a0 [ 860.106764] Node 0 [ 860.110714] ? lock_downgrade+0x740/0x740 [ 860.117366] DMA32 free:17760kB min:36200kB low:45248kB high:54296kB active_anon:52732kB inactive_anon:41012kB active_file:320kB inactive_file:260kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7200kB pagetables:2896kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 860.225323] ? __fget+0x225/0x360 [ 860.225335] ? do_vfs_ioctl+0xff0/0xff0 [ 860.225347] ? security_file_ioctl+0x83/0xb0 [ 860.225356] SyS_ioctl+0x7f/0xb0 [ 860.225367] ? do_vfs_ioctl+0xff0/0xff0 [ 860.234551] lowmem_reserve[]: [ 860.239378] do_syscall_64+0x1d5/0x640 [ 860.245017] 0 [ 860.250203] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 860.257707] 0 [ 860.261722] RIP: 0033:0x466459 [ 860.261728] RSP: 002b:00007f764b7c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 860.261737] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 860.261742] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000004 [ 860.261746] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 860.261751] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 860.261760] R13: 00007ffcd77a4a7f R14: 00007f764b7c4300 R15: 0000000000022000 [ 860.268664] 0 [ 860.275820] Bluetooth: hci3 command 0x041b tx timeout [ 860.296975] 0 [ 860.310366] Bluetooth: hci4 command 0x041b tx timeout [ 860.322522] 0 [ 860.325612] Mem-Info: [ 860.334004] active_anon:13403 inactive_anon:10261 isolated_anon:0 [ 860.334004] active_file:16 inactive_file:16 isolated_file:0 [ 860.334004] unevictable:0 dirty:0 writeback:0 unstable:0 [ 860.334004] slab_reclaimable:13898 slab_unreclaimable:110809 [ 860.334004] mapped:52665 shmem:11029 pagetables:745 bounce:0 [ 860.334004] free:13897 free_pcp:116 free_cma:0 [ 860.353596] Node 0 [ 860.361376] Node 0 active_anon:52724kB inactive_anon:41012kB active_file:60kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210660kB dirty:0kB writeback:0kB shmem:44064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 860.374485] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 860.379255] Node 1 active_anon:888kB inactive_anon:32kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:52kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 860.380970] lowmem_reserve[]: [ 860.383802] Node 0 [ 860.400236] 0 [ 860.401618] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 860.407778] 0 [ 860.409607] lowmem_reserve[]: [ 860.419878] 0 [ 860.426655] 0 [ 860.433101] 0 [ 860.434733] 2717 [ 860.439592] 0 [ 860.447028] 2718 [ 860.464278] 2718 [ 860.466571] Node 1 [ 860.469158] 2718 [ 860.518893] Normal free:26816kB min:53696kB low:67120kB high:80544kB active_anon:888kB inactive_anon:32kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:88kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 860.535177] lowmem_reserve[]: [ 860.553285] Node 0 [ 860.564150] 0 [ 860.570915] DMA32 free:17820kB min:36200kB low:45248kB high:54296kB active_anon:52724kB inactive_anon:41012kB active_file:60kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7200kB pagetables:2892kB bounce:0kB free_pcp:336kB local_pcp:144kB free_cma:0kB [ 860.583201] 0 [ 860.592963] lowmem_reserve[]: [ 860.607009] 0 [ 860.621237] 0 [ 860.630616] 0 [ 860.638248] 0 [ 860.640003] 0 [ 860.645875] 0 0 0 [ 860.645889] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 860.645911] lowmem_reserve[]: 0 0 0 0 0 [ 860.645931] Node 1 Normal free:26816kB min:53696kB low:67120kB high:80544kB active_anon:888kB inactive_anon:32kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:88kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 860.645956] lowmem_reserve[]: [ 860.693007] 0 [ 860.756930] Node 0 [ 860.804697] 0 [ 860.822140] DMA: [ 860.836479] 0 [ 860.867608] 0*4kB [ 860.881216] 0 [ 860.886311] 1*8kB [ 860.887671] 0 [ 860.889542] (U) [ 860.938920] 0*16kB [ 860.946465] Node 0 [ 860.985991] 0*32kB [ 860.992296] DMA: [ 860.998186] 1*64kB [ 861.064360] 0*4kB [ 861.076582] (U) [ 861.139724] 1*8kB [ 861.148155] 1*128kB [ 861.149984] (U) [ 861.152123] (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10952kB [ 861.152157] Node 0 DMA32: 1791*4kB [ 861.163002] 0*16kB [ 861.186478] (ME) 855*8kB (UMEH) 207*16kB (MEH) 16*32kB (MH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17828kB [ 861.186532] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 861.186580] Node 1 Normal: 38*4kB (M) 17*8kB (UME) 14*16kB (ME) 4*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 3*512kB (ME) 4*1024kB (ME) 2*2048kB (UM) 4*4096kB (M) = 26816kB [ 861.186661] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 861.186667] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 861.186673] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 861.186679] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 861.186683] 11061 total pagecache pages [ 861.186692] 0 pages in swap cache [ 861.186697] Swap cache stats: add 0, delete 0, find 0/0 [ 861.186700] Free swap = 0kB [ 861.186703] Total swap = 0kB [ 861.186708] 2097051 pages RAM [ 861.186711] 0 pages HighMem/MovableOnly [ 861.186713] 363848 pages reserved [ 861.186717] 0 pages cma reserved [ 861.186724] Out of memory (oom_kill_allocating_task): Kill process 18746 (systemd-journal) score 0 or sacrifice child [ 861.186757] Killed process 18746 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:0kB, shmem-rss:1552kB [ 861.190761] systemd-journal: [ 861.193581] modprobe invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask= [ 861.217176] page allocation failure: order:0 [ 861.221789] 0*32kB [ 861.238294] , mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 861.256522] (null) [ 861.280183] (null) [ 861.288123] 1*64kB [ 861.311129] systemd-journal cpuset= [ 861.314107] , order=1, oom_score_adj=0 [ 861.339567] / [ 861.345497] (U) [ 861.360660] mems_allowed=0-1 [ 861.364862] modprobe cpuset= [ 861.372716] CPU: 1 PID: 18746 Comm: systemd-journal Not tainted 4.14.230-syzkaller #0 [ 861.378345] 1*128kB [ 861.382390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 861.382395] Call Trace: [ 861.382417] dump_stack+0x1b2/0x281 [ 861.382429] warn_alloc.cold+0x96/0x1cc [ 861.382439] ? zone_watermark_ok_safe+0x220/0x220 [ 861.382454] ? wait_for_completion_io+0x10/0x10 [ 861.382465] __alloc_pages_nodemask+0x2127/0x2720 [ 861.382485] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 861.382508] alloc_pages_current+0x155/0x260 [ 861.382523] filemap_fault+0x11a1/0x1ad0 [ 861.391232] (U) [ 861.402666] ext4_filemap_fault+0x84/0xb0 [ 861.402677] __do_fault+0xfa/0x380 [ 861.402686] __handle_mm_fault+0x2497/0x4620 [ 861.402695] ? vm_insert_page+0x7c0/0x7c0 [ 861.402711] ? mark_held_locks+0xa6/0xf0 [ 861.402720] handle_mm_fault+0x455/0x9c0 [ 861.402733] __do_page_fault+0x549/0xad0 [ 861.402744] ? spurious_fault+0x640/0x640 [ 861.402752] ? do_page_fault+0x60/0x500 [ 861.402760] ? page_fault+0x2f/0x50 [ 861.402767] page_fault+0x45/0x50 [ 861.402775] RIP: 0001:0xffffffffffffffff [ 861.402785] RSP: 264371e0:00007fff6d1c1740 EFLAGS: 7fff6d1c1550 [ 861.417903] / [ 861.430918] Mem-Info: [ 861.437793] mems_allowed=0-1 [ 861.450740] active_anon:13403 inactive_anon:10261 isolated_anon:0 [ 861.450740] active_file:16 inactive_file:16 isolated_file:0 [ 861.450740] unevictable:0 dirty:0 writeback:0 unstable:0 [ 861.450740] slab_reclaimable:13898 slab_unreclaimable:110809 [ 861.450740] mapped:52665 shmem:11029 pagetables:745 bounce:0 [ 861.450740] free:13897 free_pcp:111 free_cma:0 [ 861.450755] Node 0 active_anon:52724kB inactive_anon:41012kB active_file:60kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210660kB dirty:0kB writeback:0kB shmem:44064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 861.450767] Node 1 active_anon:888kB inactive_anon:32kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:52kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 861.450771] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 861.450785] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 861.450802] Node 0 DMA32 free:17820kB min:36200kB low:45248kB high:54296kB active_anon:52724kB inactive_anon:41012kB active_file:60kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7200kB pagetables:2892kB bounce:0kB free_pcp:324kB local_pcp:192kB free_cma:0kB [ 861.450818] lowmem_reserve[]: 0 0 0 0 0 [ 861.455666] 0*256kB [ 861.468566] Node 0 [ 861.469004] 1*512kB [ 861.476030] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 861.482512] CPU: 0 PID: 19711 Comm: modprobe Not tainted 4.14.230-syzkaller #0 [ 861.505854] lowmem_reserve[]: [ 861.517490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 861.517496] Call Trace: [ 861.517518] dump_stack+0x1b2/0x281 [ 861.517529] dump_header+0x178/0x82f [ 861.517540] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 861.517552] ? ___ratelimit+0x2cd/0x530 [ 861.521018] 0 [ 861.525137] oom_kill_process.cold+0x10/0xa40 [ 861.525157] out_of_memory+0xe3e/0x1190 [ 861.525170] ? oom_killer_disable+0x1c0/0x1c0 [ 861.525181] ? mutex_trylock+0x152/0x1a0 [ 861.529414] 0 [ 861.535190] __alloc_pages_nodemask+0x23e1/0x2720 [ 861.535211] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 861.535222] ? trace_hardirqs_on+0x10/0x10 [ 861.535240] ? cache_grow_begin+0x3f/0x700 [ 861.540794] 0 [ 861.546620] cache_grow_begin+0x91/0x700 [ 861.546634] fallback_alloc+0x207/0x2c0 [ 861.546645] kmem_cache_alloc+0x1e5/0x3c0 [ 861.546660] getname_flags+0xc8/0x550 [ 861.553012] 0 [ 861.557655] user_path_at_empty+0x2a/0x50 [ 861.562078] 0 [ 861.564108] vfs_statx+0xd1/0x180 [ 861.573124] ? cp_compat_stat+0x890/0x890 [ 861.573131] ? __might_fault+0x104/0x1b0 [ 861.573141] SyS_newfstatat+0x8b/0xf0 [ 861.573148] ? SyS_newlstat+0xe0/0xe0 [ 861.573167] ? do_syscall_64+0x4c/0x640 [ 861.578533] Node 1 [ 861.583195] ? SyS_newlstat+0xe0/0xe0 [ 861.583205] do_syscall_64+0x1d5/0x640 [ 861.583218] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 861.583226] RIP: 0033:0x7f5e166c544b [ 861.583230] RSP: 002b:00007ffdadcec438 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 861.587661] Normal free:26816kB min:53696kB low:67120kB high:80544kB active_anon:888kB inactive_anon:32kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:88kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 861.591805] RAX: ffffffffffffffda RBX: 000055b1af82a263 RCX: 00007f5e166c544b [ 861.591811] RDX: 00007ffdadcec590 RSI: 000055b1af82a263 RDI: 0000000000000000 [ 861.591814] RBP: 000055b1aea0deb9 R08: 0000000000000000 R09: 0000000000000020 [ 861.591818] R10: 0000000000000000 R11: 0000000000000246 R12: 000055b1af82a200 [ 861.591822] R13: 000055b1af82a250 R14: 000055b1aec15078 R15: 0005ba58f8bfe057 [ 861.595173] (U) [ 861.596098] lowmem_reserve[]: [ 861.600540] 0*1024kB [ 861.620169] 0 [ 861.629837] 1*2048kB [ 861.656071] 0 [ 861.703716] (M) [ 861.735240] Mem-Info: [ 861.776940] 2*4096kB [ 861.811763] 0 [ 861.821692] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 861.853439] 0 [ 861.870723] (M) [ 861.957166] active_anon:13403 inactive_anon:10261 isolated_anon:0 [ 861.957166] active_file:16 inactive_file:16 isolated_file:0 [ 861.957166] unevictable:0 dirty:0 writeback:0 unstable:0 [ 861.957166] slab_reclaimable:13898 slab_unreclaimable:110809 [ 861.957166] mapped:52665 shmem:11029 pagetables:745 bounce:0 [ 861.957166] free:13897 free_pcp:109 free_cma:0 [ 861.993095] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 862.009629] = 10952kB [ 862.020817] Node 0 active_anon:52724kB inactive_anon:41012kB active_file:60kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210660kB dirty:0kB writeback:0kB shmem:44064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 862.038860] Node 0 [ 862.039215] 0 [ 862.041144] DMA32: 1791*4kB [ 862.046453] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 0*32kB [ 862.064962] (ME) [ 862.068749] Node 1 active_anon:888kB inactive_anon:32kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:52kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 862.088601] 852*8kB [ 862.091478] 1*64kB [ 862.097233] (UMEH) [ 862.099565] (U) [ 862.114008] 207*16kB [ 862.118913] Node 0 [ 862.121373] (MEH) [ 862.128506] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 862.141207] 16*32kB [ 862.141550] lowmem_reserve[]: [ 862.146259] (MH) [ 862.151201] 0 [ 862.174137] 0*64kB [ 862.179839] 1*128kB [ 862.276525] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 862.290373] 2717 [ 862.316822] 0*128kB [ 862.319952] 2718 [ 862.345723] 0*256kB [ 862.347108] 2718 [ 862.350850] 0*512kB [ 862.353733] 2718 [ 862.353743] Node 0 DMA32 free:17804kB min:36200kB low:45248kB high:54296kB active_anon:52724kB inactive_anon:41012kB active_file:60kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7200kB pagetables:2892kB bounce:0kB free_pcp:316kB local_pcp:192kB free_cma:0kB [ 862.353761] lowmem_reserve[]: 0 0 0 0 0 [ 862.374167] 0*1024kB [ 862.379232] (U) [ 862.434485] Bluetooth: hci4 command 0x040f tx timeout [ 862.482815] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 862.491250] Node 0 [ 862.493562] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 862.499313] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 862.501863] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 862.502704] Bluetooth: hci3 command 0x040f tx timeout [ 862.552098] 0*256kB [ 862.553308] 0*2048kB [ 862.555547] 1*512kB [ 862.590744] 0*4096kB [ 862.602523] lowmem_reserve[]: [ 862.615566] = 17804kB [ 862.624573] 0 [ 862.626748] Node 0 [ 862.628750] 0 [ 862.671352] Normal: [ 862.680017] (U) [ 862.692191] 0*4kB [ 862.723463] 0*1024kB [ 862.735999] 0*8kB [ 862.742719] 0 [ 862.747758] 0*16kB [ 862.748893] 0 [ 862.775805] 0*32kB [ 862.781163] 1*2048kB [ 862.786649] 0*64kB [ 862.797804] (M) [ 862.850050] 0*128kB [ 862.852953] 2*4096kB [ 862.853587] 0 [ 862.855381] (M) [ 862.874740] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 862.878468] = 10952kB [ 862.898769] 0*256kB [ 862.906543] Node 0 [ 862.908478] 0*512kB [ 862.938682] DMA32: 1791*4kB (ME) 854*8kB (UMEH) 209*16kB (UMEH) 18*32kB (UMH) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17980kB [ 862.959042] Node 1 Normal free:26816kB min:53696kB low:67120kB high:80544kB active_anon:888kB inactive_anon:32kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:88kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 862.968616] Node 0 [ 863.069109] 0*1024kB 0*2048kB 0*4096kB = 0kB [ 863.076040] Node 1 Normal: 38*4kB (M) 17*8kB (UME) 14*16kB (ME) 4*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 3*512kB (ME) 4*1024kB (ME) 2*2048kB (UM) 4*4096kB (M) = 26816kB [ 863.084959] Normal: [ 863.106476] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 863.106530] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 863.125465] 0*4kB [ 863.134218] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 863.134659] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 863.146531] 0*8kB [ 863.154968] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 863.154976] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 863.154983] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 863.154987] 11061 total pagecache pages [ 863.154997] 0 pages in swap cache [ 863.155003] Swap cache stats: add 0, delete 0, find 0/0 [ 863.155006] Free swap = 0kB [ 863.155009] Total swap = 0kB [ 863.155017] 2097051 pages RAM [ 863.155020] 0 pages HighMem/MovableOnly [ 863.155030] 363848 pages reserved [ 863.155033] 0 pages cma reserved [ 863.219997] lowmem_reserve[]: 0 0 0 0 0 [ 863.222958] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 863.228260] Node 0 [ 863.236879] Node 1 Normal: 38*4kB (M) 17*8kB (UME) 14*16kB (ME) 4*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 3*512kB (ME) 4*1024kB (ME) 2*2048kB (UM) 4*4096kB (M) = 26816kB [ 863.259861] DMA: 0*4kB 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10952kB [ 863.260929] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 863.285707] Node 0 DMA32: 1791*4kB (ME) 853*8kB (UMEH) 209*16kB (UMEH) 18*32kB (UMH) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17972kB [ 863.321213] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 863.331557] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 863.349188] Node 1 Normal: 38*4kB (M) 17*8kB (UME) 14*16kB (ME) 4*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 3*512kB (ME) 4*1024kB (ME) 2*2048kB (UM) 4*4096kB (M) = 26816kB [ 863.349399] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 863.377218] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 863.413054] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 863.421559] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 863.433979] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 863.465920] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 863.488126] 11061 total pagecache pages [ 863.489738] 11061 total pagecache pages [ 863.494328] 0 pages in swap cache [ 863.494334] Swap cache stats: add 0, delete 0, find 0/0 [ 863.494337] Free swap = 0kB [ 863.494340] Total swap = 0kB [ 863.494388] 2097051 pages RAM [ 863.510153] 0 pages in swap cache [ 863.532969] 0 pages HighMem/MovableOnly [ 863.537151] 363848 pages reserved [ 863.540862] 0 pages cma reserved [ 863.555155] Swap cache stats: add 0, delete 0, find 0/0 [ 863.560836] Free swap = 0kB [ 863.576311] Total swap = 0kB [ 863.579564] 2097051 pages RAM [ 863.586941] 0 pages HighMem/MovableOnly [ 863.600238] 363848 pages reserved [ 863.610054] 0 pages cma reserved [ 863.620258] Out of memory (oom_kill_allocating_task): Kill process 19711 (modprobe) score 0 or sacrifice child [ 863.637246] Killed process 19711 (modprobe) total-vm:4304kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 863.650099] oom_reaper: reaped process 18746 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1764kB [ 863.696319] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 863.761094] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 863.789949] CPU: 1 PID: 7980 Comm: syz-fuzzer Not tainted 4.14.230-syzkaller #0 [ 863.856313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 863.885935] Call Trace: [ 863.888572] dump_stack+0x1b2/0x281 [ 863.897101] dump_header+0x178/0x82f [ 863.900916] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 863.906098] ? ___ratelimit+0x2cd/0x530 [ 863.910068] oom_kill_process.cold+0x10/0xa40 [ 863.914565] out_of_memory+0xe3e/0x1190 [ 863.918609] ? oom_killer_disable+0x1c0/0x1c0 [ 863.923351] ? mutex_trylock+0x152/0x1a0 [ 863.932336] __alloc_pages_nodemask+0x23e1/0x2720 [ 863.938242] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 863.943094] alloc_pages_current+0x155/0x260 [ 863.948811] filemap_fault+0x11a1/0x1ad0 [ 863.953692] ext4_filemap_fault+0x84/0xb0 [ 863.958010] __do_fault+0xfa/0x380 [ 863.961634] __handle_mm_fault+0x2497/0x4620 [ 863.966143] ? vm_insert_page+0x7c0/0x7c0 [ 863.970669] ? mark_held_locks+0xa6/0xf0 [ 863.974754] handle_mm_fault+0x455/0x9c0 [ 863.979954] __do_page_fault+0x549/0xad0 [ 863.985784] ? spurious_fault+0x640/0x640 [ 863.990008] ? do_page_fault+0x60/0x500 [ 864.016473] ? page_fault+0x2f/0x50 [ 864.020106] page_fault+0x45/0x50 [ 864.023572] RIP: 1800:0xc8b3b606ce [ 864.027101] RSP: 03dc:000000c00003be40 EFLAGS: 00000003 [ 864.047622] Mem-Info: [ 864.079681] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 864.088356] active_anon:13264 inactive_anon:10260 isolated_anon:0 [ 864.088356] active_file:16 inactive_file:418 isolated_file:0 [ 864.088356] unevictable:0 dirty:0 writeback:0 unstable:0 [ 864.088356] slab_reclaimable:13847 slab_unreclaimable:110714 [ 864.088356] mapped:52425 shmem:11029 pagetables:712 bounce:0 [ 864.088356] free:33970 free_pcp:185 free_cma:0 [ 864.089113] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 864.153850] Node 0 active_anon:52168kB inactive_anon:41008kB active_file:60kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208900kB dirty:0kB writeback:0kB shmem:44064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 864.198486] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 864.279188] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 864.297428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 864.307780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 864.320484] Node 1 active_anon:888kB inactive_anon:32kB active_file:304kB inactive_file:6308kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4800kB dirty:100kB writeback:0kB shmem:52kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 864.338725] device veth0_macvtap entered promiscuous mode [ 864.400824] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 864.411775] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 864.418756] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 864.437566] device veth1_macvtap entered promiscuous mode [ 864.450386] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 864.450761] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 864.469461] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 864.489543] systemd[1]: Stopped Journal Service. [ 864.491142] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 864.515350] systemd[1]: Starting Journal Service... [ 864.532131] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 864.536043] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 864.574112] Bluetooth: hci4 command 0x0419 tx timeout [ 864.608718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 864.621432] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 864.629439] Bluetooth: hci3 command 0x0419 tx timeout [ 864.637157] Node 0 DMA32 free:22940kB min:36200kB low:45248kB high:54296kB active_anon:52168kB inactive_anon:41008kB active_file:60kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7136kB pagetables:2760kB bounce:0kB free_pcp:96kB local_pcp:48kB free_cma:0kB [ 864.651652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.691153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 864.709229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.718804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 864.729120] lowmem_reserve[]: 0 0 0 0 0 [ 864.729146] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 864.729166] lowmem_reserve[]: 0 0 0 0 0 [ 864.729186] Node 1 Normal free:405652kB min:53696kB low:67120kB high:80544kB active_anon:888kB inactive_anon:32kB active_file:4104kB inactive_file:6408kB unevictable:0kB writepending:148kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:88kB bounce:0kB free_pcp:1508kB local_pcp:820kB free_cma:0kB [ 864.729205] lowmem_reserve[]: 0 0 0 0 0 [ 864.729224] Node 0 DMA: [ 864.755849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.759529] 0*4kB [ 864.776361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 864.793776] 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10952kB [ 864.821953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.832932] Node 0 DMA32: 1939*4kB (UMEH) 1357*8kB (UMEH) 222*16kB (UME) 25*32kB (UM) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 23028kB [ 864.862678] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 864.875126] Node 1 Normal: 35*4kB (UM) 13*8kB (UME) 20*16kB (UME) 93*32kB (UME) 133*64kB (UM) 111*128kB (UM) 91*256kB (UM) 67*512kB (UE) 50*1024kB (UE) 34*2048kB (U) 76*4096kB (UM) = 515988kB [ 864.886885] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 864.894490] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 864.900564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 864.912589] systemd-journald[19716]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 864.935854] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 864.942518] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 864.952046] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 864.955642] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 864.959622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 864.991599] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 865.000342] 15749 total pagecache pages [ 865.002272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 865.024821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 865.026784] 0 pages in swap cache [ 865.036073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.055473] Swap cache stats: add 0, delete 0, find 0/0 [ 865.060866] Free swap = 0kB [ 865.062153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 865.071619] Total swap = 0kB [ 865.076635] 2097051 pages RAM [ 865.079994] 0 pages HighMem/MovableOnly [ 865.081619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.106913] 363848 pages reserved [ 865.110393] 0 pages cma reserved [ 865.111603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 865.121551] Out of memory (oom_kill_allocating_task): Kill process 7980 (syz-fuzzer) score 0 or sacrifice child [ 865.131628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.155598] Killed process 19291 (syz-executor.2) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 865.165960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 865.182479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.193266] oom_reaper: reaped process 19291 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 865.226762] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 865.246072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 865.266733] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 865.275327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 865.347909] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 865.478905] systemd[1]: Started Load/Save RF Kill Switch Status. [ 865.816918] systemd[1]: Started Journal Service. [ 865.914242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 865.932956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 865.948149] device bridge_slave_1 left promiscuous mode [ 865.954246] bridge0: port 2(bridge_slave_1) entered disabled state 17:02:50 executing program 4: r0 = syz_open_dev$vim2m(0x0, 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) [ 865.987152] device bridge_slave_0 left promiscuous mode [ 866.006467] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.130322] device hsr_slave_1 left promiscuous mode [ 866.138822] device hsr_slave_0 left promiscuous mode [ 866.160457] team0 (unregistering): Port device team_slave_1 removed [ 866.180274] team0 (unregistering): Port device team_slave_0 removed [ 866.196102] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 866.211354] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 866.266214] bond0 (unregistering): Released all slaves [ 867.869304] IPVS: ftp: loaded support on port[0] = 21 [ 868.059278] chnl_net:caif_netlink_parms(): no params data found [ 868.156629] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.167439] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.176761] device bridge_slave_0 entered promiscuous mode [ 868.189362] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.197160] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.208657] device bridge_slave_1 entered promiscuous mode [ 868.245775] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 868.259581] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 868.292119] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 868.299710] team0: Port device team_slave_0 added [ 868.311156] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 868.319371] team0: Port device team_slave_1 added [ 868.355901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 868.367317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 868.401380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 868.419274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 868.426130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 868.456951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 868.470321] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 868.483361] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 868.521133] device hsr_slave_0 entered promiscuous mode [ 868.528154] device hsr_slave_1 entered promiscuous mode [ 868.538772] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 868.548460] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 868.691247] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.697873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 868.704872] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.711270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 868.768123] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 868.776608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 868.795648] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 868.807954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 868.817934] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.827979] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.841206] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 868.853172] 8021q: adding VLAN 0 to HW filter on device team0 [ 868.884912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 868.898435] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.905222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 868.928432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 868.940779] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.947818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 868.977096] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 868.986231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 869.001149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 869.015148] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 869.033822] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 869.040282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 869.053230] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 869.066757] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 869.075208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 869.095527] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 869.113505] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 869.126560] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 869.146584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 869.158346] 8021q: adding VLAN 0 to HW filter on device batadv0 17:02:53 executing program 5: socket$isdn(0x22, 0x3, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @raw_data="4d9ced65f1e21d507e2299c9698d44d1c83108bab192a8866d46a63a2e5f82d402c584987fab30f77ecef900c4fded3ec2679e778cd78a0a683a0adafeffd5819d3ca615cf359e41a0e34f05666c63dc3da642ec76f8afa4e6c12e641b854b3aceec98cfcb4cfc438e02d97a91c7bd295c77f6273ede6713fd71a7e6d55a3ad23d579c8aff1537087a2ef3fd1fd8923102374d578f60aa07b2216d2d4a65bfc474fc534e72fa5a195a3d8020c5584171c3df417d34da3f6f5ee06361029e1e192d477caf90ec0f80"}}) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000100)={0x0, 0x0, {0xffff, 0x3, 0x200020, 0x1}}) 17:02:53 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)={0xfff, 0x1, 0x4, 0x2000, 0x3, {}, {0x4, 0x8, 0x3d, 0x2, 0x6, 0x5, "68a13ca2"}, 0x4, 0x0, @offset=0x9d15, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x3, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x44, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr=0x8000, 0x0, 0x0, r1}) r2 = syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x6db4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0x3, 0x40, 0x0, 0x1, 0x6, 0x1, 0x8, 0x1, 0x1, 0x7, 0x2}}) [ 869.258616] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 869.276874] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 869.287090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 869.297747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 869.337135] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 869.345168] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 869.353250] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 869.364021] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 869.370884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 869.381433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 869.392082] device veth0_vlan entered promiscuous mode [ 869.402676] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 869.409557] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 869.418779] device veth1_vlan entered promiscuous mode [ 869.429563] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 869.442223] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 869.461034] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 869.473366] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 869.481439] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 869.494551] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 869.507585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 869.517645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 869.531073] device veth0_macvtap entered promiscuous mode [ 869.540790] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 869.554123] device veth1_macvtap entered promiscuous mode [ 869.560723] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 869.578500] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 869.595558] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 869.607927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 869.620952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.633909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 869.645252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.658722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 869.671884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.681371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 869.695874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.706425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 869.720861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.736656] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 869.746167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 869.758790] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 869.768586] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 869.781162] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 869.791603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 869.802213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 869.817657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.831073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 869.846176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.855418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 869.870343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.880502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 869.895076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.904735] Bluetooth: hci4 command 0x0409 tx timeout [ 869.910267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 869.926603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.937411] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 869.950149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 869.958466] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 869.972881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 17:02:54 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)={0x200007, 0xa, 0x4, 0x20, 0xff, {0x77359400}, {0x5, 0x1, 0x2, 0x80, 0x9, 0x2, "f53f0123"}, 0x7ff, 0x2, @offset=0x40, 0x6}) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f00000004c0)={0x5, "620d568bffadbaedd89e08b69f39717b82a93991af3be4d5f8aa7ee683539aa8", 0x2}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000002c0)={0xfff, 0x2, 0x4, 0x1000, 0x9b2, {}, {0x5, 0x2, 0xd6, 0xc5, 0x80, 0x0, "a0f41e57"}, 0x8, 0x2, @fd, 0x9}) 17:02:54 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000040)={0x0, 0x2, 0x4, 0x400, 0x6, {}, {0x3, 0x2, 0x9, 0x3, 0x52, 0x8, "bbe0c0d2"}, 0x200, 0x1, @offset=0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0xc950, 0x0, 0x4, 0x2, 0x4, {0x0, 0xea60}, {0x2, 0x8, 0x1, 0x81, 0xff, 0x40, "52ca4fc8"}, 0x4, 0x2, @userptr=0x1ff, 0x8, 0x0, r1}) r2 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:02:54 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0x80000000}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x3, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) r2 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000140)) 17:02:54 executing program 4: r0 = syz_open_dev$vim2m(0x0, 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:02:54 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000001c0)={0x5, 0x7, 0x3, {0x1, @pix_mp={0x3, 0x10, 0x4f424752, 0x0, 0x1, [{0xcc, 0x4}, {0x2, 0x52}, {0x0, 0x4}, {0x2, 0x6}, {0x2, 0x5}, {0x7, 0x7fffffff}, {0x8027, 0x1}, {0x4, 0x24}], 0x0, 0x5, 0x0, 0x0, 0x2}}, 0x83}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000080)={0x3, 0x1, 0x4}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000002c0)={0xca5, 0x1, 0x4, 0x8, 0x7, {}, {0x2, 0x1, 0x81, 0x8, 0x81, 0x3, "338cd731"}, 0x9, 0x1, @offset=0x101, 0x0, 0x0, r1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x36314d59, 0x3, @discrete={0x2, 0x3}}) 17:02:54 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000040)) 17:02:54 executing program 4: r0 = syz_open_dev$vim2m(0x0, 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:02:54 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)={0x200007, 0xa, 0x4, 0x20, 0xff, {0x77359400}, {0x5, 0x1, 0x2, 0x80, 0x9, 0x2, "f53f0123"}, 0x7ff, 0x2, @offset=0x40, 0x6}) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f00000004c0)={0x5, "620d568bffadbaedd89e08b69f39717b82a93991af3be4d5f8aa7ee683539aa8", 0x2}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000002c0)={0xfff, 0x2, 0x4, 0x1000, 0x9b2, {}, {0x5, 0x2, 0xd6, 0xc5, 0x80, 0x0, "a0f41e57"}, 0x8, 0x2, @fd, 0x9}) 17:02:54 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) r2 = syz_open_dev$video(0x0, 0x0, 0x100) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x50004, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000200)={0x9c0000, 0x0, 0x3, r3, 0x0, &(0x7f00000001c0)={0x9a091c, 0x8, [], @p_u32=&(0x7f0000000280)=0x1}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) r4 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) r5 = syz_open_dev$vim2m(&(0x7f0000000240)='/dev/video#\x00', 0x7, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000080)=0x3) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0xfffffffe, 0x2, 0x4, 0x0, 0x2, {}, {0x0, 0xc, 0x0, 0x0, 0x20, 0x3, "f6ee20c3"}, 0x0, 0x3}) 17:02:54 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) [ 871.982039] Bluetooth: hci4 command 0x041b tx timeout [ 874.061849] Bluetooth: hci4 command 0x040f tx timeout [ 874.158456] oom_reaper: reaped process 19982 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 874.209955] syz-executor.5 invoked oom-killer: gfp_mask=0x14082c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 874.224936] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 874.230213] CPU: 1 PID: 19982 Comm: syz-executor.5 Not tainted 4.14.230-syzkaller #0 [ 874.238076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 874.247414] Call Trace: [ 874.249987] dump_stack+0x1b2/0x281 [ 874.253610] dump_header+0x178/0x82f [ 874.257315] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 874.262408] ? ___ratelimit+0x2cd/0x530 [ 874.266410] oom_kill_process.cold+0x10/0xa40 [ 874.270918] out_of_memory+0xe3e/0x1190 [ 874.275032] ? oom_killer_disable+0x1c0/0x1c0 [ 874.279616] ? mutex_trylock+0x152/0x1a0 [ 874.283680] __alloc_pages_nodemask+0x23e1/0x2720 [ 874.288584] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 874.293525] alloc_pages_current+0x155/0x260 [ 874.298077] __vmalloc_area_node+0x40a/0x680 [ 874.302489] ? __vmalloc_node_range+0x150/0x150 [ 874.307161] ? __get_vm_area_node+0x27d/0x340 [ 874.312204] __vmalloc_node_range+0xbe/0x150 [ 874.316633] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 874.321993] vmalloc_user+0x47/0xa0 [ 874.326408] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 874.330726] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 874.336074] vb2_vmalloc_alloc+0xa6/0x2d0 [ 874.340270] __vb2_queue_alloc+0x47a/0xd90 [ 874.344569] vb2_core_create_bufs+0x279/0x5a0 [ 874.349161] ? __vb2_queue_free+0x7a0/0x7a0 [ 874.353652] ? perf_trace_wiphy_id_evt+0x11/0x3f0 [ 874.358487] ? futex_wait+0x42f/0x5a0 [ 874.362369] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 874.367732] ? trace_hardirqs_on+0x10/0x10 [ 874.371992] vb2_create_bufs+0x2e1/0x5b0 [ 874.376073] ? vb2_thread_start+0x310/0x310 [ 874.380406] ? perf_trace_wiphy_id_evt+0x11/0x3f0 [ 874.385274] ? futex_wait+0x42f/0x5a0 [ 874.389153] v4l_create_bufs+0xa4/0x150 [ 874.393582] __video_do_ioctl+0x65b/0x6a0 [ 874.397742] ? video_ioctl2+0x30/0x30 [ 874.401585] ? __might_fault+0x177/0x1b0 [ 874.406857] ? video_ioctl2+0x30/0x30 [ 874.437859] video_usercopy+0xfd/0xe70 [ 874.441852] ? v4l_g_ctrl+0x390/0x390 [ 874.445652] ? lock_acquire+0x170/0x3f0 [ 874.449614] ? lock_downgrade+0x740/0x740 [ 874.453755] ? trace_hardirqs_on+0x10/0x10 [ 874.457997] ? futex_exit_release+0x220/0x220 [ 874.463813] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 874.469137] ? debug_check_no_obj_freed+0x2c0/0x680 [ 874.474772] v4l2_ioctl+0x1bb/0x2f0 [ 874.497725] ? v4l2_open+0x2f0/0x2f0 [ 874.501449] do_vfs_ioctl+0x75a/0xff0 [ 874.533926] ? ioctl_preallocate+0x1a0/0x1a0 [ 874.538333] ? lock_downgrade+0x740/0x740 [ 874.542604] ? __fget+0x225/0x360 [ 874.546083] ? do_vfs_ioctl+0xff0/0xff0 [ 874.550054] ? security_file_ioctl+0x83/0xb0 [ 874.556234] SyS_ioctl+0x7f/0xb0 [ 874.560200] ? do_vfs_ioctl+0xff0/0xff0 [ 874.564811] do_syscall_64+0x1d5/0x640 [ 874.569062] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 874.574267] RIP: 0033:0x466459 [ 874.577568] RSP: 002b:00007f764b7c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 874.585417] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 874.593861] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000004 [ 874.603063] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 874.610424] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 874.617977] R13: 00007ffcd77a4a7f R14: 00007f764b7c4300 R15: 0000000000022000 [ 874.670782] Mem-Info: [ 874.673321] active_anon:13349 inactive_anon:12292 isolated_anon:0 [ 874.673321] active_file:27 inactive_file:26 isolated_file:0 [ 874.673321] unevictable:0 dirty:0 writeback:0 unstable:0 [ 874.673321] slab_reclaimable:13768 slab_unreclaimable:113075 [ 874.673321] mapped:52627 shmem:13076 pagetables:717 bounce:0 [ 874.673321] free:14051 free_pcp:0 free_cma:0 [ 874.715340] Node 0 active_anon:52760kB inactive_anon:40960kB active_file:92kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208892kB dirty:0kB writeback:0kB shmem:44080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 874.744621] Node 1 active_anon:636kB inactive_anon:8208kB active_file:16kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1616kB dirty:0kB writeback:0kB shmem:8224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 874.772228] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 874.798762] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 874.803856] Node 0 DMA32 free:18488kB min:36200kB low:45248kB high:54296kB active_anon:52760kB inactive_anon:40960kB active_file:36kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7168kB pagetables:2772kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 874.833195] lowmem_reserve[]: 0 0 0 0 0 [ 874.837231] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 874.862806] lowmem_reserve[]: 0 0 0 0 0 [ 874.866816] Node 1 Normal free:26756kB min:53696kB low:67120kB high:80544kB active_anon:636kB inactive_anon:8208kB active_file:16kB inactive_file:84kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:96kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 874.896227] lowmem_reserve[]: 0 0 0 0 0 [ 874.900229] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10960kB [ 874.913183] Node 0 DMA32: 1771*4kB (UME) 906*8kB (UMEH) 208*16kB (UMEH) 22*32kB (UMH) 1*64kB (H) 1*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18556kB [ 874.927949] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 874.938922] Node 1 Normal: 61*4kB (M) 53*8kB (ME) 40*16kB (UME) 26*32kB (UME) 15*64kB (UM) 13*128kB (UM) 8*256kB (M) 9*512kB (UME) 5*1024kB (UME) 1*2048kB (M) 2*4096kB (U) = 26780kB [ 874.956244] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 874.968687] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 874.977421] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 874.986371] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 874.995037] 13130 total pagecache pages [ 874.999025] 0 pages in swap cache [ 875.002523] Swap cache stats: add 0, delete 0, find 0/0 [ 875.008178] Free swap = 0kB [ 875.011185] Total swap = 0kB [ 875.015166] 2097051 pages RAM [ 875.018459] 0 pages HighMem/MovableOnly [ 875.022835] 363848 pages reserved [ 875.026303] 0 pages cma reserved [ 875.030211] Out of memory (oom_kill_allocating_task): Kill process 19982 (syz-executor.5) score 0 or sacrifice child [ 875.041257] Killed process 19982 (syz-executor.5) total-vm:93384kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 875.051803] syz-executor.5: vmalloc: allocation failure, allocated 1487069184 of 2259202048 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 875.053811] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 875.065793] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 875.065820] CPU: 1 PID: 19982 Comm: syz-executor.5 Not tainted 4.14.230-syzkaller #0 [ 875.065826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 875.065829] Call Trace: [ 875.065851] dump_stack+0x1b2/0x281 [ 875.065868] warn_alloc.cold+0x96/0x1cc [ 875.086050] (null) [ 875.088757] ? zone_watermark_ok_safe+0x220/0x220 [ 875.108393] , order=0, oom_score_adj=0 [ 875.108718] __vmalloc_area_node+0x48a/0x680 [ 875.110942] in:imklog cpuset= [ 875.116491] ? __vmalloc_node_range+0x150/0x150 [ 875.116500] ? __get_vm_area_node+0x27d/0x340 [ 875.116510] __vmalloc_node_range+0xbe/0x150 [ 875.116525] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 875.116532] vmalloc_user+0x47/0xa0 [ 875.116540] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 875.116548] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 875.116556] vb2_vmalloc_alloc+0xa6/0x2d0 [ 875.116567] __vb2_queue_alloc+0x47a/0xd90 [ 875.116587] vb2_core_create_bufs+0x279/0x5a0 [ 875.116597] ? __vb2_queue_free+0x7a0/0x7a0 [ 875.116610] ? perf_trace_wiphy_id_evt+0x11/0x3f0 [ 875.131245] / [ 875.132827] ? futex_wait+0x42f/0x5a0 [ 875.132840] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 875.132849] ? trace_hardirqs_on+0x10/0x10 [ 875.132863] vb2_create_bufs+0x2e1/0x5b0 [ 875.137638] mems_allowed=0-1 [ 875.141927] ? vb2_thread_start+0x310/0x310 [ 875.141938] ? perf_trace_wiphy_id_evt+0x11/0x3f0 [ 875.141948] ? futex_wait+0x42f/0x5a0 [ 875.141963] v4l_create_bufs+0xa4/0x150 [ 875.141973] __video_do_ioctl+0x65b/0x6a0 [ 875.141985] ? video_ioctl2+0x30/0x30 [ 875.141995] ? __might_fault+0x177/0x1b0 [ 875.142005] ? video_ioctl2+0x30/0x30 [ 875.142014] video_usercopy+0xfd/0xe70 [ 875.142027] ? v4l_g_ctrl+0x390/0x390 [ 875.142037] ? lock_acquire+0x170/0x3f0 [ 875.142046] ? lock_downgrade+0x740/0x740 [ 875.142056] ? trace_hardirqs_on+0x10/0x10 [ 875.142070] ? futex_exit_release+0x220/0x220 [ 875.263204] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 875.268321] ? debug_check_no_obj_freed+0x2c0/0x680 [ 875.273346] v4l2_ioctl+0x1bb/0x2f0 [ 875.276984] ? v4l2_open+0x2f0/0x2f0 [ 875.280724] do_vfs_ioctl+0x75a/0xff0 [ 875.284535] ? ioctl_preallocate+0x1a0/0x1a0 [ 875.288950] ? lock_downgrade+0x740/0x740 [ 875.293106] ? __fget+0x225/0x360 [ 875.296567] ? do_vfs_ioctl+0xff0/0xff0 [ 875.300550] ? security_file_ioctl+0x83/0xb0 [ 875.304965] SyS_ioctl+0x7f/0xb0 [ 875.308512] ? do_vfs_ioctl+0xff0/0xff0 [ 875.313144] do_syscall_64+0x1d5/0x640 [ 875.319192] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 875.324996] RIP: 0033:0x466459 [ 875.328184] RSP: 002b:00007f764b7c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 875.335983] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 875.343385] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000004 [ 875.352947] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 875.361161] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 875.368587] R13: 00007ffcd77a4a7f R14: 00007f764b7c4300 R15: 0000000000022000 [ 875.384978] CPU: 0 PID: 18750 Comm: in:imklog Not tainted 4.14.230-syzkaller #0 [ 875.385291] Mem-Info: [ 875.394120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 875.394125] Call Trace: [ 875.394146] dump_stack+0x1b2/0x281 [ 875.394169] dump_header+0x178/0x82f [ 875.394201] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 875.394218] ? ___ratelimit+0x2cd/0x530 [ 875.397158] active_anon:13345 inactive_anon:12292 isolated_anon:0 [ 875.397158] active_file:11 inactive_file:12 isolated_file:0 [ 875.397158] unevictable:0 dirty:0 writeback:0 unstable:0 [ 875.397158] slab_reclaimable:13764 slab_unreclaimable:112914 [ 875.397158] mapped:52615 shmem:13076 pagetables:716 bounce:0 [ 875.397158] free:14212 free_pcp:39 free_cma:0 [ 875.407403] oom_kill_process.cold+0x10/0xa40 [ 875.407424] out_of_memory+0xe3e/0x1190 [ 875.407446] ? oom_killer_disable+0x1c0/0x1c0 [ 875.410380] Node 0 active_anon:52748kB inactive_anon:40960kB active_file:40kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:44080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 875.414004] ? mutex_trylock+0x152/0x1a0 [ 875.414017] __alloc_pages_nodemask+0x23e1/0x2720 [ 875.414037] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 875.414061] alloc_pages_current+0x155/0x260 [ 875.417760] Node 1 active_anon:632kB inactive_anon:8208kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1556kB dirty:0kB writeback:0kB shmem:8224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 875.422870] filemap_fault+0x11a1/0x1ad0 [ 875.422889] ext4_filemap_fault+0x84/0xb0 [ 875.422898] __do_fault+0xfa/0x380 [ 875.422908] __handle_mm_fault+0x2497/0x4620 [ 875.426920] Node 0 [ 875.460064] ? vm_insert_page+0x7c0/0x7c0 [ 875.460074] ? lock_downgrade+0x740/0x740 [ 875.460087] ? mark_held_locks+0xa6/0xf0 [ 875.460100] handle_mm_fault+0x455/0x9c0 [ 875.464624] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 875.468556] __do_page_fault+0x549/0xad0 [ 875.473063] lowmem_reserve[]: [ 875.500977] ? spurious_fault+0x640/0x640 [ 875.500985] ? do_page_fault+0x60/0x500 [ 875.500993] ? page_fault+0x2f/0x50 [ 875.501000] page_fault+0x45/0x50 [ 875.501011] RIP: 13de3da3:0x1f9f [ 875.505103] 0 [ 875.509898] RSP: 13de34b8:00007f5213de34b8 EFLAGS: 7f5213de3da0 [ 875.515923] Mem-Info: [ 875.526757] 2717 [ 875.552196] active_anon:13345 inactive_anon:12292 isolated_anon:0 [ 875.552196] active_file:11 inactive_file:12 isolated_file:0 [ 875.552196] unevictable:0 dirty:0 writeback:0 unstable:0 [ 875.552196] slab_reclaimable:13764 slab_unreclaimable:112914 [ 875.552196] mapped:52615 shmem:13076 pagetables:716 bounce:0 [ 875.552196] free:14212 free_pcp:39 free_cma:0 [ 875.560780] 2718 [ 875.564357] Node 0 active_anon:52748kB inactive_anon:40960kB active_file:40kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:44080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 875.566614] 2718 [ 875.568857] Node 1 active_anon:632kB inactive_anon:8208kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1556kB dirty:0kB writeback:0kB shmem:8224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 875.579979] 2718 [ 875.587051] Node 0 [ 875.622605] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 875.623926] Node 0 [ 875.627853] lowmem_reserve[]: [ 875.637459] DMA32 free:19076kB min:36200kB low:45248kB high:54296kB active_anon:52748kB inactive_anon:40960kB active_file:40kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7168kB pagetables:2768kB bounce:0kB free_pcp:156kB local_pcp:108kB free_cma:0kB [ 875.639402] 0 [ 875.640202] lowmem_reserve[]: [ 875.649106] 2717 [ 875.650769] 0 [ 875.686440] 2718 [ 875.723536] 0 [ 875.746680] 2718 [ 875.757224] 0 [ 875.780734] 2718 [ 875.810438] 0 [ 875.820749] 0 [ 875.822858] Node 0 DMA32 free:19076kB min:36200kB low:45248kB high:54296kB active_anon:52748kB inactive_anon:40960kB active_file:40kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7168kB pagetables:2768kB bounce:0kB free_pcp:156kB local_pcp:48kB free_cma:0kB [ 875.822879] lowmem_reserve[]: 0 0 0 0 0 [ 875.822897] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 875.822918] lowmem_reserve[]: [ 875.830376] 0 [ 875.861595] Node 0 [ 875.871420] 0 [ 875.892424] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 875.901242] 0 [ 875.927353] lowmem_reserve[]: 0 0 0 0 0 [ 875.933298] Node 1 Normal free:26812kB min:53696kB low:67120kB high:80544kB active_anon:632kB inactive_anon:8208kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:96kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 875.936010] 0 [ 875.963697] lowmem_reserve[]: 0 0 0 0 0 [ 875.969624] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) [ 875.969691] 0 [ 875.978770] 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10960kB [ 875.978791] Node 0 DMA32: 1771*4kB (UME) 915*8kB (UMEH) 210*16kB (UMEH) 24*32kB (UMH) 3*64kB (UH) 3*128kB (UH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19108kB [ 875.978860] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 875.978911] Node 1 Normal: 61*4kB (M) 57*8kB (UME) 40*16kB (UME) 26*32kB (UME) 15*64kB (UM) 13*128kB (UM) 8*256kB (M) 9*512kB (UME) 5*1024kB (UME) 1*2048kB (M) 2*4096kB (U) = 26812kB [ 875.980804] Node 1 [ 875.988590] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 876.009694] Normal free:26812kB min:53696kB low:67120kB high:80544kB active_anon:632kB inactive_anon:8208kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:96kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 876.014613] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 876.038243] lowmem_reserve[]: [ 876.043875] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 876.082630] 0 [ 876.084860] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 876.099439] 0 0 0 0 [ 876.104397] 13099 total pagecache pages [ 876.105414] Node 0 DMA: [ 876.109382] 0 pages in swap cache [ 876.109390] Swap cache stats: add 0, delete 0, find 0/0 [ 876.119664] 0*4kB [ 876.120955] Free swap = 0kB [ 876.120963] Total swap = 0kB [ 876.123872] 0*8kB [ 876.128478] 2097051 pages RAM [ 876.129241] 1*16kB [ 876.131403] 0 pages HighMem/MovableOnly [ 876.140736] 363848 pages reserved [ 876.142833] (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10960kB [ 876.144449] Bluetooth: hci4 command 0x0419 tx timeout [ 876.161350] Node 0 DMA32: 1771*4kB (UME) 915*8kB (UMEH) 210*16kB (UMEH) 24*32kB (UMH) 3*64kB (UH) 3*128kB (UH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19108kB [ 876.161839] 0 pages cma reserved [ 876.184701] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 876.200181] Node 1 Normal: 61*4kB (M) 57*8kB (UME) 40*16kB (UME) 26*32kB (UME) 15*64kB (UM) 13*128kB (UM) 8*256kB (M) 9*512kB (UME) 5*1024kB (UME) 1*2048kB (M) 2*4096kB (U) = 26812kB [ 876.226445] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 876.247306] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 876.257925] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 876.280925] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 876.291076] 13099 total pagecache pages [ 876.305345] 0 pages in swap cache [ 876.308913] Swap cache stats: add 0, delete 0, find 0/0 [ 876.319261] Free swap = 0kB [ 876.323860] Total swap = 0kB [ 876.327286] 2097051 pages RAM [ 876.337292] 0 pages HighMem/MovableOnly [ 876.343467] 363848 pages reserved [ 876.347541] 0 pages cma reserved [ 876.357334] Out of memory (oom_kill_allocating_task): Kill process 18750 (in:imklog) score 0 or sacrifice child [ 876.369629] Killed process 18742 (rsyslogd) total-vm:254332kB, anon-rss:2888kB, file-rss:0kB, shmem-rss:0kB [ 876.389825] oom_reaper: reaped process 18742 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 876.415960] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 876.436933] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 876.450223] CPU: 0 PID: 7980 Comm: syz-fuzzer Not tainted 4.14.230-syzkaller #0 [ 876.457939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 876.467296] Call Trace: [ 876.469890] dump_stack+0x1b2/0x281 [ 876.473515] dump_header+0x178/0x82f [ 876.477267] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 876.482371] ? ___ratelimit+0x2cd/0x530 [ 876.487856] oom_kill_process.cold+0x10/0xa40 [ 876.492367] out_of_memory+0xe3e/0x1190 [ 876.496371] ? oom_killer_disable+0x1c0/0x1c0 [ 876.500883] ? mutex_trylock+0x152/0x1a0 [ 876.504951] __alloc_pages_nodemask+0x23e1/0x2720 [ 876.509835] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 876.514798] alloc_pages_current+0x155/0x260 [ 876.519392] filemap_fault+0x11a1/0x1ad0 [ 876.523677] ext4_filemap_fault+0x84/0xb0 [ 876.527836] __do_fault+0xfa/0x380 [ 876.531470] __handle_mm_fault+0x2497/0x4620 [ 876.535884] ? vm_insert_page+0x7c0/0x7c0 [ 876.540070] ? mark_held_locks+0xa6/0xf0 [ 876.544229] handle_mm_fault+0x455/0x9c0 [ 876.549568] __do_page_fault+0x549/0xad0 [ 876.553993] ? spurious_fault+0x640/0x640 [ 876.558193] ? do_page_fault+0x60/0x500 [ 876.562288] ? page_fault+0x2f/0x50 [ 876.566572] page_fault+0x45/0x50 [ 876.570030] RIP: 1800:0xcb7ef77ece [ 876.573573] RSP: 0155:000000c00003be40 EFLAGS: 00000003 [ 876.588569] Mem-Info: [ 876.605857] active_anon:12624 inactive_anon:12292 isolated_anon:0 [ 876.605857] active_file:11 inactive_file:12 isolated_file:0 [ 876.605857] unevictable:0 dirty:0 writeback:0 unstable:0 [ 876.605857] slab_reclaimable:13759 slab_unreclaimable:112899 [ 876.605857] mapped:52615 shmem:13076 pagetables:679 bounce:0 [ 876.605857] free:14973 free_pcp:37 free_cma:0 [ 876.672590] Node 0 active_anon:49864kB inactive_anon:40960kB active_file:40kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:44080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 876.706322] Node 1 active_anon:632kB inactive_anon:8208kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1556kB dirty:0kB writeback:0kB shmem:8224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 876.750862] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 876.783790] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 876.789398] Node 0 DMA32 free:22584kB min:36200kB low:45248kB high:54296kB active_anon:49864kB inactive_anon:40960kB active_file:40kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7072kB pagetables:2620kB bounce:0kB free_pcp:848kB local_pcp:148kB free_cma:0kB [ 876.845718] lowmem_reserve[]: 0 0 0 0 0 [ 876.908714] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 876.962016] lowmem_reserve[]: 0 0 0 0 0 [ 877.003231] Node 1 Normal free:555176kB min:53696kB low:67120kB high:80544kB active_anon:632kB inactive_anon:8208kB active_file:204kB inactive_file:3804kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:96kB bounce:0kB free_pcp:868kB local_pcp:140kB free_cma:0kB [ 877.041777] lowmem_reserve[]: 0 0 0 0 0 [ 877.049652] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10960kB [ 877.092635] Node 0 DMA32: 1888*4kB (UME) 1067*8kB (UMEH) 235*16kB (UMEH) 36*32kB (UMEH) 4*64kB (UH) 3*128kB (UH) 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 23688kB [ 877.132507] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 877.144746] Node 1 Normal: 4*4kB (U) 2*8kB (UE) 1*16kB (E) 2*32kB (ME) 4*64kB (UM) 5*128kB (UM) 22*256kB (UM) 28*512kB (UME) 20*1024kB (UME) 10*2048kB (UM) 143*4096kB (U) = 647664kB [ 877.168913] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 877.192935] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 877.216388] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 877.245967] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 877.266319] 14889 total pagecache pages [ 877.270357] 0 pages in swap cache [ 877.285967] Swap cache stats: add 0, delete 0, find 0/0 [ 877.291370] Free swap = 0kB [ 877.300590] Total swap = 0kB [ 877.308267] 2097051 pages RAM [ 877.311404] 0 pages HighMem/MovableOnly [ 877.325432] 363848 pages reserved [ 877.328898] 0 pages cma reserved [ 877.334274] Out of memory (oom_kill_allocating_task): Kill process 7980 (syz-fuzzer) score 0 or sacrifice child [ 877.349250] Killed process 19285 (syz-executor.3) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 877.368551] oom_reaper: reaped process 19285 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 877.924051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 877.930794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 877.940057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 877.948082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 877.957011] device bridge_slave_1 left promiscuous mode [ 877.963413] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.970868] device bridge_slave_0 left promiscuous mode [ 877.977411] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.987459] device veth1_macvtap left promiscuous mode [ 877.993703] device veth0_macvtap left promiscuous mode [ 877.999038] device veth1_vlan left promiscuous mode [ 878.005176] device veth0_vlan left promiscuous mode [ 878.105145] device hsr_slave_1 left promiscuous mode [ 878.114252] device hsr_slave_0 left promiscuous mode [ 878.131928] team0 (unregistering): Port device team_slave_1 removed [ 878.144261] team0 (unregistering): Port device team_slave_0 removed [ 878.155538] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 878.175782] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 878.219300] bond0 (unregistering): Released all slaves 17:03:04 executing program 5: socket$isdn(0x22, 0x3, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @raw_data="4d9ced65f1e21d507e2299c9698d44d1c83108bab192a8866d46a63a2e5f82d402c584987fab30f77ecef900c4fded3ec2679e778cd78a0a683a0adafeffd5819d3ca615cf359e41a0e34f05666c63dc3da642ec76f8afa4e6c12e641b854b3aceec98cfcb4cfc438e02d97a91c7bd295c77f6273ede6713fd71a7e6d55a3ad23d579c8aff1537087a2ef3fd1fd8923102374d578f60aa07b2216d2d4a65bfc474fc534e72fa5a195a3d8020c5584171c3df417d34da3f6f5ee06361029e1e192d477caf90ec0f80"}}) 17:03:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000001c0)={0x2, @raw_data="9b9b9c24e1801e06eea940984413cd96e065bdf6970c7688929c5cc4b8754c87a7aa0b223b6476937085666ff7d75f428903eed32419748cbf752a50bb8c38a037ea4ac1e1f462a7270eb20dbdab5f6c8c276cc6f96227a71e1abfe8ecf1bf03ed98895fd7ce5365804b7fd8ec854fc64bf7fe00d36a0f5a222dd07f823e84e24409aca749884a7643d8aa2003662cccf5dae209d2bf53655d92cc0eeb6a0a1a3e4a530eb06d073107dc679b71bb7f159f1b99520e534e1e8b87ba36a6d94e477530224af30f054b"}) 17:03:04 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)={0x200007, 0xa, 0x4, 0x20, 0xff, {0x77359400}, {0x5, 0x1, 0x2, 0x80, 0x9, 0x2, "f53f0123"}, 0x7ff, 0x2, @offset=0x40, 0x6}) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f00000004c0)={0x5, "620d568bffadbaedd89e08b69f39717b82a93991af3be4d5f8aa7ee683539aa8", 0x2}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000002c0)={0xfff, 0x2, 0x4, 0x1000, 0x9b2, {}, {0x5, 0x2, 0xd6, 0xc5, 0x80, 0x0, "a0f41e57"}, 0x8, 0x2, @fd, 0x9}) 17:03:04 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) r1 = socket(0x11, 0x2, 0x0) ioctl$SIOCAX25CTLCON(r1, 0x89e8, 0x0) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000080)="633c9f34211db35f7f852a22f41ed550e6cca0914ef81d12f7e6e388c701fcd1276811b64485e690bff3c10f43b7aa44c5f23c39", 0x34) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r2 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x9, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) ioctl$SNDCTL_FM_LOAD_INSTR(0xffffffffffffffff, 0x40285107) 17:03:04 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:03:04 executing program 1: getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000001c0)={@loopback, @multicast1}, &(0x7f0000000200)=0xc) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) getsockname(0xffffffffffffffff, &(0x7f0000000480)=@can, &(0x7f0000000440)=0x80) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x2, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr, 0xfffffffe}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x4, 0x0, 0x4, 0x1, 0xfffffffa, {0x77359400}, {0x1, 0xc, 0x20, 0x6, 0xe6, 0x1, "e2d46223"}, 0x2c, 0x1, @planes=&(0x7f0000000080)={0x10001, 0x3, @mem_offset=0x6, 0xe9d9}, 0x4, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$vim2m(&(0x7f0000000400)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000006c0)={0xefec, 0x1f, 0x2, {0x1, @sliced={0x8, [0x1ff, 0x9, 0x6, 0x0, 0x3, 0x4, 0x3d7a, 0x5f, 0x5, 0x8000, 0xfff, 0x80, 0xfc01, 0x14, 0x9, 0x1f, 0x5, 0x4, 0x4, 0x1, 0x89, 0x80, 0x100, 0xfffc, 0x0, 0x9, 0x7, 0x8001, 0x9, 0x6, 0x3, 0x8, 0x7, 0x7a1, 0x8, 0x371f, 0x9, 0x8, 0x2, 0x8, 0x3f, 0x7fc3, 0xffff, 0xfff, 0x4, 0x3, 0xfff, 0x9], 0x3}}, 0x8}) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video2\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f00000002c0)={0x4, 0x0, 0x4, 0x100, 0x7, {}, {0x6, 0x9, 0x1, 0x9, 0x20, 0x6, "cc392128"}, 0x995c, 0x4, @userptr=0xff, 0x7fff, 0x0, r1}) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000340)={0x6, 0x2, 0x4, 0x800, 0x10001, {0x0, 0x2710}, {0x4, 0x1, 0x81, 0x6, 0x5, 0x80, "59b41f2f"}, 0xcd79, 0x1, @offset=0x9, 0x7fffffff, 0x0, r4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) r5 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000240)={0x25, 0x80000003}) r6 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000500)={0x3ff, 0x2, 0x4, 0x10000, 0x0, {0x77359400}, {0x1, 0x8, 0x3, 0x3f, 0x82, 0x7f, "7c7dbe9b"}, 0x1, 0x1, @userptr=0x5, 0x6, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000580)={0x6, 0x2, 0x4, 0x4000, 0x0, {r7, r8/1000+10000}, {0x2, 0x1, 0x8, 0x0, 0x3, 0x3f, "52065dcf"}, 0x7, 0x3, @offset=0x5c7, 0x6, 0x0, r9}) 17:03:04 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:03:04 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x4, @userptr, 0xfffffffd}) r1 = socket(0x2, 0x1, 0x3feb) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETINFOOLD(r3, 0x89e9, &(0x7f0000000580)) r4 = socket$caif_stream(0x25, 0x1, 0x1) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f00000002c0)={r3, r4, 0x4bf, 0x50, &(0x7f00000001c0)="0da8a4bbe65c4cc444a08cccf7978bbef50cb6ca16aaceae488a63850125bea2de79e3d747a10d27922ac8abedcaa69249127210a21f672a539601be83d5eb7f4b77e991b1b5b20f290062cbbc48522e", 0x9, 0x0, 0x20, 0xde9, 0x1, 0x1, 0x7f, 'syz0\x00'}) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000280)=0x1, 0x4) 17:03:04 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)={0x200007, 0xa, 0x4, 0x20, 0xff, {0x77359400}, {0x5, 0x1, 0x2, 0x80, 0x9, 0x2, "f53f0123"}, 0x7ff, 0x2, @offset=0x40, 0x6}) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f00000004c0)={0x5, "620d568bffadbaedd89e08b69f39717b82a93991af3be4d5f8aa7ee683539aa8", 0x2}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000002c0)={0xfff, 0x2, 0x4, 0x1000, 0x9b2, {}, {0x5, 0x2, 0xd6, 0xc5, 0x80, 0x0, "a0f41e57"}, 0x8, 0x2, @fd, 0x9}) 17:03:04 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x1, 0x5, 0x9, 0x84000}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) 17:03:04 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:03:04 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)={0x200007, 0xa, 0x4, 0x20, 0xff, {0x77359400}, {0x5, 0x1, 0x2, 0x80, 0x9, 0x2, "f53f0123"}, 0x7ff, 0x2, @offset=0x40, 0x6}) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f00000004c0)={0x5, "620d568bffadbaedd89e08b69f39717b82a93991af3be4d5f8aa7ee683539aa8", 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xfff, 0x2, 0x4, 0x1000, 0x9b2, {}, {0x5, 0x2, 0xd6, 0xc5, 0x80, 0x0, "a0f41e57"}, 0x8, 0x2, @fd, 0x9}) 17:03:04 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) [ 883.017739] IPVS: ftp: loaded support on port[0] = 21 [ 883.241153] chnl_net:caif_netlink_parms(): no params data found [ 883.384086] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.391095] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.402467] device bridge_slave_0 entered promiscuous mode [ 883.411146] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.418734] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.429131] device bridge_slave_1 entered promiscuous mode [ 883.475212] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 883.485714] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 883.519900] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 883.534500] team0: Port device team_slave_0 added [ 883.549284] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 883.590750] team0: Port device team_slave_1 added [ 883.626338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 883.637317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 883.688440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 883.701220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 883.708444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 883.735585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 883.747430] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 883.755997] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 883.786741] device hsr_slave_0 entered promiscuous mode [ 883.793143] device hsr_slave_1 entered promiscuous mode [ 883.799526] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 883.808299] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 883.949543] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.956036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 883.962791] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.969191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 884.017272] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 884.024595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 884.035446] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 884.045491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 884.055335] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.063261] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.075555] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 884.082610] 8021q: adding VLAN 0 to HW filter on device team0 [ 884.097799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 884.106347] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.112967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 884.136267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 884.148415] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.178986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 884.204348] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 884.219768] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 884.235812] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 884.250996] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 884.260391] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 884.269215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 884.278805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 884.295892] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 884.307515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 884.317245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 884.331291] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 884.340363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 884.367101] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 884.376476] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 884.390091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 884.400002] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 884.416007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 884.522298] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 884.538602] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 884.546301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 884.561125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 884.621841] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 884.634017] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 884.641235] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 884.657080] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 884.666376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 884.679714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 884.696285] device veth0_vlan entered promiscuous mode [ 884.707395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 884.718166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 884.735352] device veth1_vlan entered promiscuous mode [ 884.742665] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 884.758251] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 884.773683] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 884.790502] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 884.814677] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 884.823547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 884.830928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 884.875512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 884.893149] device veth0_macvtap entered promiscuous mode [ 884.899818] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 884.916381] device veth1_macvtap entered promiscuous mode [ 884.926719] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 884.937105] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 884.956597] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 884.983138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 884.999922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.010485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 885.021603] Bluetooth: hci3 command 0x0409 tx timeout [ 885.082112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.096814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 885.109724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.123176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 885.146824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.204445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 885.217013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.230957] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 885.306730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 885.333531] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 885.346810] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 885.355272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 885.368078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 885.385461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 885.397308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.412712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 885.428005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.438853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 885.453004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.464225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 885.476222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.487800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 885.499821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.513719] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 885.520662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 885.531436] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 885.539491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 886.089543] oom_reaper: reaped process 20058 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 886.120895] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 886.133915] in:imklog cpuset=/ mems_allowed=0-1 [ 886.138643] CPU: 1 PID: 20053 Comm: in:imklog Not tainted 4.14.230-syzkaller #0 [ 886.143407] syz-executor.5: [ 886.146279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 886.146292] vmalloc: allocation failure, allocated 1493319680 of 2259202048 bytes [ 886.149301] Call Trace: [ 886.165204] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 886.166292] dump_stack+0x1b2/0x281 [ 886.169311] (null) [ 886.175718] dump_header+0x178/0x82f [ 886.175730] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 886.175737] ? ___ratelimit+0x2cd/0x530 [ 886.175747] oom_kill_process.cold+0x10/0xa40 [ 886.175763] out_of_memory+0xe3e/0x1190 [ 886.175775] ? oom_killer_disable+0x1c0/0x1c0 [ 886.175781] ? mutex_trylock+0x152/0x1a0 [ 886.175792] __alloc_pages_nodemask+0x23e1/0x2720 [ 886.175812] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 886.175834] alloc_pages_current+0x155/0x260 [ 886.175844] filemap_fault+0x11a1/0x1ad0 [ 886.175864] ext4_filemap_fault+0x84/0xb0 [ 886.175874] __do_fault+0xfa/0x380 [ 886.175883] __handle_mm_fault+0x2497/0x4620 [ 886.175893] ? vm_insert_page+0x7c0/0x7c0 [ 886.175902] ? lock_downgrade+0x740/0x740 [ 886.175916] ? mark_held_locks+0xa6/0xf0 [ 886.175926] handle_mm_fault+0x455/0x9c0 [ 886.175940] __do_page_fault+0x549/0xad0 [ 886.175951] ? spurious_fault+0x640/0x640 [ 886.175958] ? do_page_fault+0x60/0x500 [ 886.175965] ? page_fault+0x2f/0x50 [ 886.175971] page_fault+0x45/0x50 [ 886.175978] RIP: 1fa0:0x1f9f [ 886.175982] RSP: 0000:000055c20f33c9d0 EFLAGS: 7f6cde8cfda0 [ 886.176598] Mem-Info: [ 886.186363] syz-executor.5 cpuset= [ 886.190677] active_anon:13428 inactive_anon:12293 isolated_anon:0 [ 886.190677] active_file:20 inactive_file:19 isolated_file:0 [ 886.190677] unevictable:0 dirty:0 writeback:0 unstable:0 [ 886.190677] slab_reclaimable:13646 slab_unreclaimable:111504 [ 886.190677] mapped:52695 shmem:13077 pagetables:765 bounce:0 [ 886.190677] free:13898 free_pcp:187 free_cma:0 [ 886.196001] / [ 886.199183] Node 0 active_anon:52104kB inactive_anon:40960kB active_file:72kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208992kB dirty:0kB writeback:0kB shmem:44080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 886.208285] mems_allowed=0-1 [ 886.211898] Node 1 active_anon:1608kB inactive_anon:8212kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1788kB dirty:0kB writeback:0kB shmem:8228kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 886.211903] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 886.211926] lowmem_reserve[]: [ 886.218065] CPU: 0 PID: 20058 Comm: syz-executor.5 Not tainted 4.14.230-syzkaller #0 [ 886.221681] 0 [ 886.226048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 886.230099] 2717 [ 886.234226] Call Trace: [ 886.234250] dump_stack+0x1b2/0x281 [ 886.234263] warn_alloc.cold+0x96/0x1cc [ 886.234275] ? zone_watermark_ok_safe+0x220/0x220 [ 886.234286] ? retint_kernel+0x2d/0x2d [ 886.237807] 2718 [ 886.242219] __vmalloc_area_node+0x48a/0x680 [ 886.242234] ? __vmalloc_node_range+0x150/0x150 [ 886.242243] ? __get_vm_area_node+0x27d/0x340 [ 886.242255] __vmalloc_node_range+0xbe/0x150 [ 886.246381] 2718 [ 886.250540] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 886.254628] 2718 [ 886.258638] vmalloc_user+0x47/0xa0 [ 886.266815] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 886.270770] Node 0 [ 886.274571] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 886.274581] vb2_vmalloc_alloc+0xa6/0x2d0 [ 886.274592] __vb2_queue_alloc+0x47a/0xd90 [ 886.274612] vb2_core_create_bufs+0x279/0x5a0 [ 886.278054] DMA32 free:17884kB min:36200kB low:45248kB high:54296kB active_anon:52104kB inactive_anon:40960kB active_file:484kB inactive_file:408kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7168kB pagetables:2816kB bounce:0kB free_pcp:624kB local_pcp:504kB free_cma:0kB [ 886.281055] ? __vb2_queue_free+0x7a0/0x7a0 [ 886.286783] lowmem_reserve[]: [ 886.289141] ? perf_trace_wiphy_id_evt+0x11/0x3f0 [ 886.292683] 0 [ 886.331886] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 886.331898] ? trace_hardirqs_on+0x10/0x10 [ 886.331910] vb2_create_bufs+0x2e1/0x5b0 [ 886.331924] ? vb2_thread_start+0x310/0x310 [ 886.333621] 0 [ 886.361642] ? perf_trace_wiphy_id_evt+0x11/0x3f0 [ 886.361657] v4l_create_bufs+0xa4/0x150 [ 886.361670] __video_do_ioctl+0x65b/0x6a0 [ 886.361683] ? video_ioctl2+0x30/0x30 [ 886.361692] ? __might_fault+0x177/0x1b0 [ 886.361701] ? video_ioctl2+0x30/0x30 [ 886.361709] video_usercopy+0xfd/0xe70 [ 886.361722] ? v4l_g_ctrl+0x390/0x390 [ 886.372454] 0 [ 886.391860] ? lock_acquire+0x170/0x3f0 [ 886.391874] ? lock_downgrade+0x740/0x740 [ 886.391883] ? trace_hardirqs_on+0x10/0x10 [ 886.391894] ? futex_exit_release+0x220/0x220 [ 886.391904] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 886.391915] ? debug_check_no_obj_freed+0x2c0/0x680 [ 886.391928] v4l2_ioctl+0x1bb/0x2f0 [ 886.419075] 0 [ 886.421168] ? v4l2_open+0x2f0/0x2f0 [ 886.429070] 0 [ 886.430824] do_vfs_ioctl+0x75a/0xff0 [ 886.442223] ? ioctl_preallocate+0x1a0/0x1a0 [ 886.442235] ? lock_downgrade+0x740/0x740 [ 886.444792] Node 0 [ 886.448408] ? __fget+0x225/0x360 [ 886.452403] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 886.457189] ? do_vfs_ioctl+0xff0/0xff0 [ 886.461048] lowmem_reserve[]: [ 886.463098] ? security_file_ioctl+0x83/0xb0 [ 886.463108] SyS_ioctl+0x7f/0xb0 [ 886.463116] ? do_vfs_ioctl+0xff0/0xff0 [ 886.463128] do_syscall_64+0x1d5/0x640 [ 886.463143] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 886.467524] 0 [ 886.472183] RIP: 0033:0x466459 [ 886.472188] RSP: 002b:00007f764b7c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 886.472197] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 886.472202] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000004 [ 886.472207] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 886.472211] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 886.472220] R13: 00007ffcd77a4a7f R14: 00007f764b7c4300 R15: 0000000000022000 [ 886.476696] 0 [ 886.493739] Mem-Info: [ 886.498583] 0 0 0 [ 886.500899] active_anon:13428 inactive_anon:12293 isolated_anon:0 [ 886.500899] active_file:20 inactive_file:19 isolated_file:0 [ 886.500899] unevictable:0 dirty:0 writeback:0 unstable:0 [ 886.500899] slab_reclaimable:13646 slab_unreclaimable:111504 [ 886.500899] mapped:52695 shmem:13077 pagetables:765 bounce:0 [ 886.500899] free:13898 free_pcp:187 free_cma:0 [ 886.506257] Node 1 Normal free:26748kB min:53696kB low:67120kB high:80544kB active_anon:1608kB inactive_anon:8212kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:244kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB [ 886.506279] lowmem_reserve[]: 0 0 0 0 0 [ 886.506298] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10960kB [ 886.506357] Node 0 DMA32: 1653*4kB (UME) 894*8kB (UMEH) 209*16kB (UMEH) 20*32kB (UMEH) 0*64kB 1*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17876kB [ 886.506416] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 886.506459] Node 1 Normal: 105*4kB (UM) 97*8kB (UME) 61*16kB (ME) 48*32kB (UME) 24*64kB (M) 18*128kB (UM) 7*256kB (M) 2*512kB (UE) 4*1024kB (ME) 2*2048kB (UM) 2*4096kB (U) = 26748kB [ 886.506545] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 886.506551] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 886.506557] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 886.506563] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 886.506566] 13127 total pagecache pages [ 886.506576] 0 pages in swap cache [ 886.506582] Swap cache stats: add 0, delete 0, find 0/0 [ 886.506585] Free swap = 0kB [ 886.506589] Total swap = 0kB [ 886.506595] 2097051 pages RAM [ 886.506598] 0 pages HighMem/MovableOnly [ 886.506601] 363848 pages reserved [ 886.506604] 0 pages cma reserved [ 886.506615] Out of memory (oom_kill_allocating_task): Kill process 20053 (in:imklog) score 0 or sacrifice child [ 886.516956] Node 0 active_anon:52104kB inactive_anon:40960kB active_file:72kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208992kB dirty:0kB writeback:0kB shmem:44080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 886.523334] Killed process 20041 (rsyslogd) total-vm:254332kB, anon-rss:668kB, file-rss:0kB, shmem-rss:0kB [ 886.555349] Node 1 active_anon:1608kB inactive_anon:8212kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1788kB dirty:0kB writeback:0kB shmem:8228kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 886.561152] in:imklog: [ 886.582427] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 886.591606] page allocation failure: order:0 [ 886.633887] lowmem_reserve[]: [ 886.640008] , mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 886.640837] 0 [ 886.646123] (null) [ 886.675209] 2717 [ 886.680622] in:imklog cpuset= [ 886.788123] 2718 [ 886.793377] / mems_allowed=0-1 [ 887.117023] CPU: 1 PID: 20053 Comm: in:imklog Not tainted 4.14.230-syzkaller #0 [ 887.124503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 887.133959] Call Trace: [ 887.136572] dump_stack+0x1b2/0x281 [ 887.140310] warn_alloc.cold+0x96/0x1cc [ 887.144307] ? zone_watermark_ok_safe+0x220/0x220 [ 887.149167] ? wait_for_completion_io+0x10/0x10 [ 887.153843] __alloc_pages_nodemask+0x2127/0x2720 [ 887.158793] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 887.163654] alloc_pages_current+0x155/0x260 [ 887.168097] filemap_fault+0x11a1/0x1ad0 [ 887.172281] ext4_filemap_fault+0x84/0xb0 [ 887.176703] __do_fault+0xfa/0x380 [ 887.180251] __handle_mm_fault+0x2497/0x4620 [ 887.184669] ? vm_insert_page+0x7c0/0x7c0 [ 887.188822] ? lock_downgrade+0x740/0x740 [ 887.193080] ? mark_held_locks+0xa6/0xf0 [ 887.197149] handle_mm_fault+0x455/0x9c0 [ 887.201223] __do_page_fault+0x549/0xad0 [ 887.205296] ? spurious_fault+0x640/0x640 [ 887.209460] ? do_page_fault+0x60/0x500 [ 887.213433] ? page_fault+0x2f/0x50 [ 887.217071] page_fault+0x45/0x50 [ 887.220513] RIP: 1fa0:0x1f9f [ 887.223514] RSP: 0000:000055c20f33c9d0 EFLAGS: 7f6cde8cfda0 [ 887.228105] Bluetooth: hci3 command 0x041b tx timeout [ 887.230048] oom_reaper: reaped process 20041 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 887.236103] 2718 [ 887.239274] in:imklog invoked oom-killer: gfp_mask=0x0(), nodemask= [ 887.255231] 2718 [ 887.255804] (null) [ 887.264169] , order=0, oom_score_adj=0 [ 887.266303] Node 0 DMA32 free:18140kB min:36200kB low:45248kB high:54296kB active_anon:51304kB inactive_anon:40960kB active_file:40kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7104kB pagetables:2812kB bounce:0kB free_pcp:1208kB local_pcp:532kB free_cma:0kB [ 887.270280] in:imklog cpuset=/ mems_allowed=0-1 [ 887.306428] lowmem_reserve[]: 0 0 0 0 0 [ 887.309404] CPU: 0 PID: 20053 Comm: in:imklog Not tainted 4.14.230-syzkaller #0 [ 887.313443] Node 0 [ 887.320815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 887.320823] Call Trace: [ 887.323139] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 887.332427] dump_stack+0x1b2/0x281 [ 887.332439] dump_header+0x178/0x82f [ 887.332450] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 887.332467] ? ___ratelimit+0x2cd/0x530 [ 887.335033] lowmem_reserve[]: [ 887.359932] oom_kill_process.cold+0x10/0xa40 [ 887.359952] out_of_memory+0xe3e/0x1190 [ 887.359972] ? pagefault_out_of_memory+0xaa/0xd0 [ 887.363719] 0 [ 887.367617] ? oom_killer_disable+0x1c0/0x1c0 [ 887.373247] 0 [ 887.378912] ? mutex_trylock+0x152/0x1a0 [ 887.382157] 0 [ 887.386694] ? pagefault_out_of_memory+0xaa/0xd0 [ 887.386708] pagefault_out_of_memory+0xbb/0xd0 [ 887.390701] 0 [ 887.395722] ? out_of_memory+0x1190/0x1190 [ 887.395734] ? lock_downgrade+0x740/0x740 [ 887.395745] mm_fault_error+0xad/0x2c0 [ 887.395754] __do_page_fault+0x93c/0xad0 [ 887.395768] ? spurious_fault+0x640/0x640 [ 887.397652] 0 [ 887.402352] ? do_page_fault+0x60/0x500 [ 887.402362] ? page_fault+0x2f/0x50 [ 887.402369] page_fault+0x45/0x50 [ 887.402377] RIP: 1fa0:0x1f9f [ 887.402381] RSP: 0000:000055c20f33c9d0 EFLAGS: 7f6cde8cfda0 [ 887.407326] Mem-Info: [ 887.410085] active_anon:13187 inactive_anon:12293 isolated_anon:0 [ 887.410085] active_file:12 inactive_file:11 isolated_file:0 [ 887.410085] unevictable:0 dirty:0 writeback:0 unstable:0 [ 887.410085] slab_reclaimable:13646 slab_unreclaimable:111511 [ 887.410085] mapped:52673 shmem:13077 pagetables:764 bounce:0 [ 887.410085] free:13970 free_pcp:380 free_cma:0 [ 887.421175] Node 1 [ 887.421384] Node 0 active_anon:51304kB inactive_anon:40960kB active_file:40kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:44080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 887.425722] Normal free:26780kB min:53696kB low:67120kB high:80544kB active_anon:1444kB inactive_anon:8212kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:244kB bounce:0kB free_pcp:312kB local_pcp:4kB free_cma:0kB [ 887.425726] lowmem_reserve[]: 0 0 0 0 0 [ 887.425745] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10960kB [ 887.425804] Node 0 DMA32: 1713*4kB (UME) 900*8kB (UME) 210*16kB (UME) 21*32kB (UME) 0*64kB 1*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18212kB [ 887.425867] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 887.425916] Node 1 Normal: 105*4kB (UM) 97*8kB (UME) 61*16kB (ME) 49*32kB (UME) 24*64kB (M) 18*128kB (UM) 7*256kB (M) 2*512kB (UE) 4*1024kB (ME) 2*2048kB (UM) 2*4096kB (U) = 26780kB [ 887.426014] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 887.426020] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 887.426027] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 887.426033] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 887.426037] 13100 total pagecache pages [ 887.426046] 0 pages in swap cache [ 887.426051] Swap cache stats: add 0, delete 0, find 0/0 [ 887.426055] Free swap = 0kB [ 887.426058] Total swap = 0kB [ 887.426064] 2097051 pages RAM [ 887.426067] 0 pages HighMem/MovableOnly [ 887.426071] 363848 pages reserved [ 887.426074] 0 pages cma reserved [ 887.687788] Node 1 active_anon:1444kB inactive_anon:8212kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1788kB dirty:0kB writeback:0kB shmem:8228kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 887.714638] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 887.740880] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 887.746228] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 887.753742] Node 0 DMA32 free:18140kB min:36200kB low:45248kB high:54296kB active_anon:51304kB inactive_anon:40960kB active_file:40kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7104kB pagetables:2812kB bounce:0kB free_pcp:1208kB local_pcp:676kB free_cma:0kB [ 887.782805] lowmem_reserve[]: 0 0 0 0 0 [ 887.786829] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 887.813125] lowmem_reserve[]: 0 0 0 0 0 [ 887.817126] Node 1 Normal free:26780kB min:53696kB low:67120kB high:80544kB active_anon:1444kB inactive_anon:8212kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:244kB bounce:0kB free_pcp:312kB local_pcp:308kB free_cma:0kB [ 887.845951] lowmem_reserve[]: 0 0 0 0 0 [ 887.849955] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10960kB [ 887.862912] Node 0 DMA32: 1713*4kB (UME) 900*8kB (UME) 210*16kB (UME) 21*32kB (UME) 0*64kB 1*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18212kB [ 887.878719] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 887.889526] Node 1 Normal: 105*4kB (UM) 97*8kB (UME) 61*16kB (ME) 49*32kB (UME) 24*64kB (M) 18*128kB (UM) 7*256kB (M) 2*512kB (UE) 4*1024kB (ME) 2*2048kB (UM) 2*4096kB (U) = 26780kB [ 887.906079] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 887.912644] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 887.921516] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 887.930094] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 887.938965] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 887.948207] 13100 total pagecache pages [ 887.952250] 0 pages in swap cache [ 887.955693] Swap cache stats: add 0, delete 0, find 0/0 [ 887.961040] Free swap = 0kB [ 887.964199] Total swap = 0kB [ 887.967215] 2097051 pages RAM [ 887.970306] 0 pages HighMem/MovableOnly [ 887.974321] 363848 pages reserved [ 887.977783] 0 pages cma reserved [ 887.981332] Out of memory (oom_kill_allocating_task): Kill process 20053 (in:imklog) score 0 or sacrifice child [ 887.992105] Killed process 20053 (in:imklog) total-vm:254332kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 889.261580] Bluetooth: hci3 command 0x040f tx timeout 17:03:15 executing program 5: socket$isdn(0x22, 0x3, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @raw_data="4d9ced65f1e21d507e2299c9698d44d1c83108bab192a8866d46a63a2e5f82d402c584987fab30f77ecef900c4fded3ec2679e778cd78a0a683a0adafeffd5819d3ca615cf359e41a0e34f05666c63dc3da642ec76f8afa4e6c12e641b854b3aceec98cfcb4cfc438e02d97a91c7bd295c77f6273ede6713fd71a7e6d55a3ad23d579c8aff1537087a2ef3fd1fd8923102374d578f60aa07b2216d2d4a65bfc474fc534e72fa5a195a3d8020c5584171c3df417d34da3f6f5ee06361029e1e192d477caf90ec0f80"}}) 17:03:15 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:03:15 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)={0x200007, 0xa, 0x4, 0x20, 0xff, {0x77359400}, {0x5, 0x1, 0x2, 0x80, 0x9, 0x2, "f53f0123"}, 0x7ff, 0x2, @offset=0x40, 0x6}) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f00000004c0)={0x5, "620d568bffadbaedd89e08b69f39717b82a93991af3be4d5f8aa7ee683539aa8", 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xfff, 0x2, 0x4, 0x1000, 0x9b2, {}, {0x5, 0x2, 0xd6, 0xc5, 0x80, 0x0, "a0f41e57"}, 0x8, 0x2, @fd, 0x9}) 17:03:15 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000002c0)={0x2aeb, 0x2, 0x4, 0x70000, 0x10001, {0x0, 0xea60}, {0x1, 0xc, 0xd7, 0x1f, 0x80, 0xfc, "aef0c1ed"}, 0x3, 0x1, @userptr=0x6, 0x80000001, 0x0, r1}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x20, 0xfffffc00, {0x0, 0xea60}, {0x4, 0x8, 0x81, 0xee, 0x5, 0x20, "1d082e6e"}, 0x180, 0x3, @userptr=0x7f, 0x40, 0x0, r1}) r2 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000003c0)) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000340)={0xae8, 0x2, 0x4, 0x10, 0xbba3, {0x0, 0xea60}, {0x4, 0xc, 0x3, 0x1, 0x3, 0x20, "ae925ea3"}, 0xa339, 0x2, @userptr=0x9, 0x4, 0x0, r1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x9, 0x8, 0x3, {0x2, @sdr={0x7aae9975, 0x3}}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) 17:03:15 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x39, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000080)={{0x0, 0x4, 0x0, 0x80000000}}, 0x2c, 0x0}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}, {0x0, 0x1}]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) 17:03:15 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:03:15 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x100, 0x1, 0x2, "3b4ed00c830b9469dcf807acc9daa8f570224ef66ce8e116a27c82fcafe11d6a", 0x55595659}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x0, 0x1, 0x80, 0x800}) 17:03:15 executing program 5: socket$isdn(0x22, 0x3, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @raw_data="4d9ced65f1e21d507e2299c9698d44d1c83108bab192a8866d46a63a2e5f82d402c584987fab30f77ecef900c4fded3ec2679e778cd78a0a683a0adafeffd5819d3ca615cf359e41a0e34f05666c63dc3da642ec76f8afa4e6c12e641b854b3aceec98cfcb4cfc438e02d97a91c7bd295c77f6273ede6713fd71a7e6d55a3ad23d579c8aff1537087a2ef3fd1fd8923102374d578f60aa07b2216d2d4a65bfc474fc534e72fa5a195a3d8020c5584171c3df417d34da3f6f5ee06361029e1e192d477caf90ec0f80"}}) 17:03:15 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:03:15 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:03:15 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)={0x200007, 0xa, 0x4, 0x20, 0xff, {0x77359400}, {0x5, 0x1, 0x2, 0x80, 0x9, 0x2, "f53f0123"}, 0x7ff, 0x2, @offset=0x40, 0x6}) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f00000004c0)={0x5, "620d568bffadbaedd89e08b69f39717b82a93991af3be4d5f8aa7ee683539aa8", 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xfff, 0x2, 0x4, 0x1000, 0x9b2, {}, {0x5, 0x2, 0xd6, 0xc5, 0x80, 0x0, "a0f41e57"}, 0x8, 0x2, @fd, 0x9}) 17:03:15 executing program 5: socket$isdn(0x22, 0x3, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @raw_data="4d9ced65f1e21d507e2299c9698d44d1c83108bab192a8866d46a63a2e5f82d402c584987fab30f77ecef900c4fded3ec2679e778cd78a0a683a0adafeffd5819d3ca615cf359e41a0e34f05666c63dc3da642ec76f8afa4e6c12e641b854b3aceec98cfcb4cfc438e02d97a91c7bd295c77f6273ede6713fd71a7e6d55a3ad23d579c8aff1537087a2ef3fd1fd8923102374d578f60aa07b2216d2d4a65bfc474fc534e72fa5a195a3d8020c5584171c3df417d34da3f6f5ee06361029e1e192d477caf90ec0f80"}}) 17:03:15 executing program 3: ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'veth1_to_bridge\x00'}) r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:03:15 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0xa, 0x3, 0x4}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f00000000c0)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) 17:03:15 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x0, @pix_mp={0x0, 0x0, 0x0, 0x4, 0x3, [{0xffffffff}, {}, {}, {}, {}, {}, {}, {0x8000000}]}}, 0x80}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x80000001, 0x0, 0x2}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0x1) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x1, 0xae0, 0x401}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @sdr={0x38415261, 0xe2}}}) 17:03:15 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:03:15 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @raw_data="4d9ced65f1e21d507e2299c9698d44d1c83108bab192a8866d46a63a2e5f82d402c584987fab30f77ecef900c4fded3ec2679e778cd78a0a683a0adafeffd5819d3ca615cf359e41a0e34f05666c63dc3da642ec76f8afa4e6c12e641b854b3aceec98cfcb4cfc438e02d97a91c7bd295c77f6273ede6713fd71a7e6d55a3ad23d579c8aff1537087a2ef3fd1fd8923102374d578f60aa07b2216d2d4a65bfc474fc534e72fa5a195a3d8020c5584171c3df417d34da3f6f5ee06361029e1e192d477caf90ec0f80"}}) 17:03:15 executing program 3: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x5, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x10000000, 0x1, 0x2}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000000c0)={0x1, @sdr={0x3234564e, 0x3ff}}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0x1, @pix_mp={0x6, 0x81, 0x20385655, 0x0, 0x8, [{0x7e0, 0x80}, {0x0, 0x4}, {0xffffffff, 0x904}, {0x1, 0x4}, {0x0, 0x4}, {0xee78, 0xef}, {0x1000, 0x5}, {0x100, 0xd553}], 0xff, 0x1, 0x0, 0x1, 0x1}}) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000080)={0x6, 0x5, 0x7}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:03:15 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)={0x200007, 0xa, 0x4, 0x20, 0xff, {0x77359400}, {0x5, 0x1, 0x2, 0x80, 0x9, 0x2, "f53f0123"}, 0x7ff, 0x2, @offset=0x40, 0x6}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000002c0)={0xfff, 0x2, 0x4, 0x1000, 0x9b2, {}, {0x5, 0x2, 0xd6, 0xc5, 0x80, 0x0, "a0f41e57"}, 0x8, 0x2, @fd, 0x9}) 17:03:15 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:03:15 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000001c0)={0x1, @sdr={0x6c629a9c, 0xb5}}) 17:03:15 executing program 1: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0xfff, 0x3, 0x2, "088048c279dd888a24ba9f08e6ec400c168505cdcf0f6ab957af0a42de196f8d", 0x34343459}) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x3, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x12, 0x0, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x400, {}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x3, @userptr, 0x1}) [ 891.345431] Bluetooth: hci3 command 0x0419 tx timeout 17:03:15 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:03:15 executing program 2: syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000002c0)={0xfff, 0x2, 0x4, 0x1000, 0x9b2, {}, {0x5, 0x2, 0xd6, 0xc5, 0x80, 0x0, "a0f41e57"}, 0x8, 0x2, @fd, 0x9}) 17:03:15 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:03:15 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x7fffffff, 0x2, 0x3}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x1ff, {}, {}, 0xffffffff, 0x0, @userptr=0x7, 0x20000000}) 17:03:15 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x0, 0x4}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:03:15 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000002c0)={0xfff, 0x2, 0x4, 0x1000, 0x9b2, {}, {0x5, 0x2, 0xd6, 0xc5, 0x80, 0x0, "a0f41e57"}, 0x8, 0x2, @fd, 0x9}) [ 895.687384] oom_reaper: reaped process 20382 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 895.709767] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 895.724680] in:imklog cpuset=/ mems_allowed=0-1 [ 895.729445] CPU: 0 PID: 20338 Comm: in:imklog Not tainted 4.14.230-syzkaller #0 [ 895.736896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 895.746355] Call Trace: [ 895.748967] dump_stack+0x1b2/0x281 [ 895.752616] dump_header+0x178/0x82f [ 895.756442] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 895.761564] ? ___ratelimit+0x2cd/0x530 [ 895.765552] oom_kill_process.cold+0x10/0xa40 [ 895.770046] out_of_memory+0xe3e/0x1190 [ 895.771579] syz-executor.5: vmalloc: allocation failure, allocated 1485651968 of 2259202048 bytes [ 895.774294] ? oom_killer_disable+0x1c0/0x1c0 [ 895.774307] ? mutex_trylock+0x152/0x1a0 [ 895.787245] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 895.787836] __alloc_pages_nodemask+0x23e1/0x2720 [ 895.791921] (null) [ 895.797849] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 895.806545] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 895.809687] alloc_pages_current+0x155/0x260 [ 895.809701] filemap_fault+0x11a1/0x1ad0 [ 895.823719] ext4_filemap_fault+0x84/0xb0 [ 895.827868] __do_fault+0xfa/0x380 [ 895.831403] __handle_mm_fault+0x2497/0x4620 [ 895.835805] ? vm_insert_page+0x7c0/0x7c0 [ 895.839946] ? lock_downgrade+0x740/0x740 [ 895.844096] ? mark_held_locks+0xa6/0xf0 [ 895.848170] handle_mm_fault+0x455/0x9c0 [ 895.852253] __do_page_fault+0x549/0xad0 [ 895.856330] ? spurious_fault+0x640/0x640 [ 895.860502] ? do_page_fault+0x60/0x500 [ 895.864495] ? page_fault+0x2f/0x50 [ 895.868149] page_fault+0x45/0x50 [ 895.879097] RIP: 1fa0:0x1f9f [ 895.883712] RSP: 0000:000056354b0449d0 EFLAGS: 7ff74e2f9da0 [ 895.885841] CPU: 1 PID: 20382 Comm: syz-executor.5 Not tainted 4.14.230-syzkaller #0 [ 895.887261] Mem-Info: [ 895.891770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 895.891775] Call Trace: [ 895.891796] dump_stack+0x1b2/0x281 [ 895.891809] warn_alloc.cold+0x96/0x1cc [ 895.891821] ? zone_watermark_ok_safe+0x220/0x220 [ 895.891830] ? retint_kernel+0x2d/0x2d [ 895.891851] __vmalloc_area_node+0x48a/0x680 [ 895.903357] active_anon:13008 inactive_anon:12292 isolated_anon:0 [ 895.903357] active_file:12 inactive_file:12 isolated_file:0 [ 895.903357] unevictable:0 dirty:0 writeback:0 unstable:0 [ 895.903357] slab_reclaimable:13831 slab_unreclaimable:113464 [ 895.903357] mapped:52704 shmem:13076 pagetables:717 bounce:0 [ 895.903357] free:13898 free_pcp:416 free_cma:0 [ 895.905760] ? __vmalloc_node_range+0x150/0x150 [ 895.918831] Node 0 active_anon:50216kB inactive_anon:40956kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:44076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 895.921437] ? __get_vm_area_node+0x27d/0x340 [ 895.925415] Node 1 active_anon:1816kB inactive_anon:8212kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1912kB dirty:0kB writeback:0kB shmem:8228kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 895.932048] __vmalloc_node_range+0xbe/0x150 [ 895.932068] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 895.936978] Node 0 [ 895.940864] vmalloc_user+0x47/0xa0 [ 895.945347] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 895.983399] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 895.983410] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 895.983418] vb2_vmalloc_alloc+0xa6/0x2d0 [ 895.983429] __vb2_queue_alloc+0x47a/0xd90 [ 895.983449] vb2_core_create_bufs+0x279/0x5a0 [ 895.988116] lowmem_reserve[]: [ 896.016232] ? __vb2_queue_free+0x7a0/0x7a0 [ 896.016245] ? perf_trace_wiphy_id_evt+0x11/0x3f0 [ 896.016254] ? futex_wait+0x42f/0x5a0 [ 896.016265] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 896.016279] ? trace_hardirqs_on+0x10/0x10 [ 896.020769] 0 [ 896.047490] vb2_create_bufs+0x2e1/0x5b0 [ 896.047504] ? vb2_thread_start+0x310/0x310 [ 896.047514] ? perf_trace_wiphy_id_evt+0x11/0x3f0 [ 896.047524] ? futex_wait+0x42f/0x5a0 [ 896.047538] v4l_create_bufs+0xa4/0x150 [ 896.051963] 2717 [ 896.057322] __video_do_ioctl+0x65b/0x6a0 [ 896.059529] 2718 [ 896.063146] ? video_ioctl2+0x30/0x30 [ 896.063156] ? __might_fault+0x177/0x1b0 [ 896.063164] ? video_ioctl2+0x30/0x30 [ 896.063173] video_usercopy+0xfd/0xe70 [ 896.063186] ? v4l_g_ctrl+0x390/0x390 [ 896.088898] 2718 [ 896.093002] ? lock_acquire+0x170/0x3f0 [ 896.093013] ? lock_downgrade+0x740/0x740 [ 896.093029] ? trace_hardirqs_on+0x10/0x10 [ 896.098373] 2718 [ 896.102516] ? futex_exit_release+0x220/0x220 [ 896.102526] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 896.102537] ? debug_check_no_obj_freed+0x2c0/0x680 [ 896.102550] v4l2_ioctl+0x1bb/0x2f0 [ 896.111259] ? v4l2_open+0x2f0/0x2f0 [ 896.114378] Node 0 [ 896.118665] do_vfs_ioctl+0x75a/0xff0 [ 896.123534] DMA32 free:17808kB min:36200kB low:45248kB high:54296kB active_anon:50216kB inactive_anon:40956kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7040kB pagetables:2644kB bounce:0kB free_pcp:816kB local_pcp:696kB free_cma:0kB [ 896.127289] ? ioctl_preallocate+0x1a0/0x1a0 [ 896.132645] lowmem_reserve[]: [ 896.136862] ? lock_downgrade+0x740/0x740 [ 896.138632] 0 [ 896.142682] ? __fget+0x225/0x360 [ 896.142692] ? do_vfs_ioctl+0xff0/0xff0 [ 896.142707] ? security_file_ioctl+0x83/0xb0 [ 896.146998] 0 [ 896.151824] SyS_ioctl+0x7f/0xb0 [ 896.151833] ? do_vfs_ioctl+0xff0/0xff0 [ 896.151846] do_syscall_64+0x1d5/0x640 [ 896.155620] 0 [ 896.159588] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 896.161639] 0 [ 896.165770] RIP: 0033:0x466459 [ 896.167808] 0 [ 896.172700] RSP: 002b:00007f764b7c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 896.172710] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 896.172715] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000003 [ 896.172719] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 896.172724] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 896.172729] R13: 00007ffcd77a4a7f R14: 00007f764b7c4300 R15: 0000000000022000 [ 896.177073] warn_alloc_show_mem: 1 callbacks suppressed [ 896.177077] Mem-Info: [ 896.184720] active_anon:13008 inactive_anon:12292 isolated_anon:0 [ 896.184720] active_file:12 inactive_file:12 isolated_file:0 [ 896.184720] unevictable:0 dirty:0 writeback:0 unstable:0 [ 896.184720] slab_reclaimable:13831 slab_unreclaimable:113464 [ 896.184720] mapped:52704 shmem:13076 pagetables:717 bounce:0 [ 896.184720] free:13898 free_pcp:416 free_cma:0 [ 896.184738] Node 0 active_anon:50216kB inactive_anon:40956kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:44076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 896.191842] Node 0 [ 896.195061] Node 1 active_anon:1812kB inactive_anon:8212kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1912kB dirty:0kB writeback:0kB shmem:8228kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 896.201490] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 896.203434] Node 0 [ 896.206861] lowmem_reserve[]: [ 896.210034] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 896.219361] 0 [ 896.220218] lowmem_reserve[]: [ 896.225792] 0 [ 896.227596] 0 [ 896.229812] 0 [ 896.233649] 2717 2718 2718 2718 [ 896.233674] Node 0 DMA32 free:17808kB min:36200kB low:45248kB high:54296kB active_anon:50208kB inactive_anon:40956kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7040kB pagetables:2640kB bounce:0kB free_pcp:816kB local_pcp:120kB free_cma:0kB [ 896.233701] lowmem_reserve[]: [ 896.267996] 0 [ 896.269698] 0 [ 896.272886] 0 [ 896.277121] 0 [ 896.282702] 0 0 0 [ 896.282716] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 896.282738] lowmem_reserve[]: 0 0 0 0 0 [ 896.282758] Node 1 Normal free:26824kB min:53696kB low:67120kB high:80544kB active_anon:1812kB inactive_anon:8212kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:224kB bounce:0kB free_pcp:848kB local_pcp:756kB free_cma:0kB [ 896.292912] Node 1 [ 896.294119] lowmem_reserve[]: [ 896.300958] Normal free:26824kB min:53696kB low:67120kB high:80544kB active_anon:1812kB inactive_anon:8212kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:224kB bounce:0kB free_pcp:848kB local_pcp:92kB free_cma:0kB [ 896.300964] lowmem_reserve[]: [ 896.308991] 0 0 0 0 0 [ 896.309011] Node 0 DMA: 0*4kB [ 896.318520] 0 [ 896.320262] 0*8kB [ 896.322111] 0 0 0 0 [ 896.322133] Node 0 [ 896.329014] 1*16kB [ 896.330843] DMA: [ 896.341391] (U) [ 896.364004] 0*4kB [ 896.368240] 0*32kB [ 896.395349] 0*8kB [ 896.405059] 1*64kB [ 896.413590] 1*16kB [ 896.462199] (U) [ 896.524677] (U) [ 896.561370] 1*128kB [ 896.585447] 0*32kB [ 896.614450] (U) [ 896.619136] 1*64kB [ 896.624108] 0*256kB [ 896.659762] (U) [ 896.663592] 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10960kB [ 896.663621] Node 0 DMA32: 1804*4kB [ 896.700817] 1*128kB [ 896.740264] (ME) [ 896.748677] (U) [ 896.791857] 756*8kB [ 896.811712] 0*256kB [ 896.830018] (UMEH) [ 896.840796] 1*512kB [ 896.844562] 190*16kB [ 896.846609] (U) [ 896.848922] (UMEH) [ 896.851141] 0*1024kB [ 896.853444] 29*32kB (UMEH) 1*64kB (H) 2*128kB (H) 1*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17808kB [ 896.853487] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB [ 896.863857] 1*2048kB [ 896.867872] 0*1024kB [ 896.870672] (M) [ 896.873164] 0*2048kB 0*4096kB = 0kB [ 896.873177] Node 1 Normal: 136*4kB (UM) 117*8kB (UM) 82*16kB (UME) 57*32kB (UM) 23*64kB (M) 14*128kB (ME) 4*256kB (UME) 1*512kB (U) 5*1024kB (UME) 2*2048kB [ 896.879923] 2*4096kB [ 896.886028] (UM) [ 896.942470] (M) [ 896.954927] 2*4096kB [ 896.982864] = 10960kB [ 896.989634] (U) [ 896.991161] Node 0 [ 896.994795] = 26824kB [ 896.994806] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 896.994813] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 896.994820] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 896.994826] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 896.994830] 13100 total pagecache pages [ 896.994840] 0 pages in swap cache [ 896.994845] Swap cache stats: add 0, delete 0, find 0/0 [ 896.994852] Free swap = 0kB [ 897.018898] DMA32: [ 897.029454] Total swap = 0kB [ 897.031969] 1804*4kB [ 897.034753] 2097051 pages RAM [ 897.052933] (ME) [ 897.059451] 0 pages HighMem/MovableOnly [ 897.060013] 772*8kB [ 897.062071] 363848 pages reserved [ 897.062076] 0 pages cma reserved [ 897.145127] (UMEH) 192*16kB (UMEH) 29*32kB (UMEH) 4*64kB (UH) 4*128kB (UH) 1*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18416kB [ 897.157206] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 897.167968] Node 1 Normal: 136*4kB (UM) 117*8kB (UM) 82*16kB (UME) 57*32kB (UM) 23*64kB (M) 14*128kB (ME) 4*256kB (UME) 1*512kB (U) 5*1024kB (UME) 2*2048kB (UM) 2*4096kB (U) = 26824kB [ 897.185474] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 897.194364] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 897.203024] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 897.211936] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 897.220525] 13100 total pagecache pages [ 897.224643] 0 pages in swap cache [ 897.228093] Swap cache stats: add 0, delete 0, find 0/0 [ 897.233513] Free swap = 0kB [ 897.236543] Total swap = 0kB [ 897.239571] 2097051 pages RAM [ 897.242714] 0 pages HighMem/MovableOnly [ 897.246685] 363848 pages reserved [ 897.250126] 0 pages cma reserved [ 897.253544] Out of memory (oom_kill_allocating_task): Kill process 20338 (in:imklog) score 0 or sacrifice child [ 897.264525] Killed process 20336 (rsyslogd) total-vm:254332kB, anon-rss:412kB, file-rss:0kB, shmem-rss:0kB [ 897.278568] oom_reaper: reaped process 20336 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 897.295946] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 897.333740] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 897.338563] CPU: 0 PID: 7980 Comm: syz-fuzzer Not tainted 4.14.230-syzkaller #0 [ 897.346086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 897.355433] Call Trace: [ 897.358024] dump_stack+0x1b2/0x281 [ 897.361699] dump_header+0x178/0x82f [ 897.365431] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 897.370593] ? ___ratelimit+0x2cd/0x530 [ 897.374586] oom_kill_process.cold+0x10/0xa40 [ 897.379306] out_of_memory+0xe3e/0x1190 [ 897.383296] ? oom_killer_disable+0x1c0/0x1c0 [ 897.387798] ? mutex_trylock+0x152/0x1a0 [ 897.392043] __alloc_pages_nodemask+0x23e1/0x2720 [ 897.396920] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 897.401811] alloc_pages_current+0x155/0x260 [ 897.406235] filemap_fault+0x11a1/0x1ad0 [ 897.410301] ext4_filemap_fault+0x84/0xb0 [ 897.414445] __do_fault+0xfa/0x380 [ 897.418003] __handle_mm_fault+0x2497/0x4620 [ 897.422405] ? vm_insert_page+0x7c0/0x7c0 [ 897.426563] ? mark_held_locks+0xa6/0xf0 [ 897.430641] handle_mm_fault+0x455/0x9c0 [ 897.434723] __do_page_fault+0x549/0xad0 [ 897.438801] ? spurious_fault+0x640/0x640 [ 897.442955] ? do_page_fault+0x60/0x500 [ 897.446929] ? page_fault+0x2f/0x50 [ 897.450559] page_fault+0x45/0x50 [ 897.454008] RIP: 1800:0xd062aa10ce [ 897.457536] RSP: 03e7:000000c00003be40 EFLAGS: 00000003 [ 897.465351] Mem-Info: [ 897.475838] active_anon:12780 inactive_anon:12292 isolated_anon:0 [ 897.475838] active_file:6 inactive_file:10 isolated_file:0 [ 897.475838] unevictable:0 dirty:0 writeback:0 unstable:0 [ 897.475838] slab_reclaimable:13822 slab_unreclaimable:113315 [ 897.475838] mapped:52704 shmem:13076 pagetables:679 bounce:0 [ 897.475838] free:14695 free_pcp:38 free_cma:0 [ 897.511900] Node 0 active_anon:50208kB inactive_anon:40956kB active_file:120kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:44076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 897.542168] Node 1 active_anon:912kB inactive_anon:8212kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1912kB dirty:0kB writeback:0kB shmem:8228kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 897.571011] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 897.600328] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 897.605469] Node 0 DMA32 free:19192kB min:36200kB low:45248kB high:54296kB active_anon:50208kB inactive_anon:40956kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7040kB pagetables:2640kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 897.636315] lowmem_reserve[]: 0 0 0 0 0 [ 897.640346] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 897.670461] lowmem_reserve[]: 0 0 0 0 0 [ 897.674603] Node 1 Normal free:28628kB min:53696kB low:67120kB high:80544kB active_anon:912kB inactive_anon:8212kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:76kB bounce:0kB free_pcp:144kB local_pcp:144kB free_cma:0kB [ 897.705936] lowmem_reserve[]: 0 0 0 0 0 [ 897.710086] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10960kB [ 897.727008] Node 0 DMA32: 1825*4kB (UME) 863*8kB (UMEH) 196*16kB (UMEH) 29*32kB (UMEH) 4*64kB (UH) 4*128kB (UH) 1*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19292kB [ 897.744601] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 897.755378] Node 1 Normal: 95*4kB (UM) 84*8kB (M) 71*16kB (UME) 57*32kB (UM) 20*64kB (M) 21*128kB (UME) 9*256kB (UME) 2*512kB (UM) 5*1024kB (UME) 2*2048kB (UM) 2*4096kB (U) = 28716kB [ 897.774285] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 897.783199] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 897.798113] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 897.807029] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 897.822112] 13100 total pagecache pages [ 897.826191] 0 pages in swap cache [ 897.829658] Swap cache stats: add 0, delete 0, find 0/0 [ 897.839410] Free swap = 0kB [ 897.844733] Total swap = 0kB [ 897.847754] 2097051 pages RAM [ 897.850846] 0 pages HighMem/MovableOnly [ 897.859655] 363848 pages reserved [ 897.863531] 0 pages cma reserved [ 897.866897] Out of memory (oom_kill_allocating_task): Kill process 7980 (syz-fuzzer) score 0 or sacrifice child [ 897.878981] Killed process 20091 (syz-executor.3) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 897.911164] oom_reaper: reaped process 20091 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 898.565400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 898.576527] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 898.586120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 898.598393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 898.608127] device bridge_slave_1 left promiscuous mode [ 898.618508] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.629239] device bridge_slave_0 left promiscuous mode [ 898.640112] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.650693] device veth1_macvtap left promiscuous mode [ 898.660966] device veth0_macvtap left promiscuous mode [ 898.667547] device veth1_vlan left promiscuous mode [ 898.677726] device veth0_vlan left promiscuous mode [ 898.798123] device hsr_slave_1 left promiscuous mode [ 898.809169] device hsr_slave_0 left promiscuous mode [ 898.827405] team0 (unregistering): Port device team_slave_1 removed [ 898.837678] team0 (unregistering): Port device team_slave_0 removed [ 898.850215] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 898.864390] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 898.902540] bond0 (unregistering): Released all slaves 17:03:25 executing program 2: r0 = syz_open_dev$vim2m(0x0, 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000002c0)={0xfff, 0x2, 0x4, 0x1000, 0x9b2, {}, {0x5, 0x2, 0xd6, 0xc5, 0x80, 0x0, "a0f41e57"}, 0x8, 0x2, @fd, 0x9}) 17:03:25 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @raw_data="4d9ced65f1e21d507e2299c9698d44d1c83108bab192a8866d46a63a2e5f82d402c584987fab30f77ecef900c4fded3ec2679e778cd78a0a683a0adafeffd5819d3ca615cf359e41a0e34f05666c63dc3da642ec76f8afa4e6c12e641b854b3aceec98cfcb4cfc438e02d97a91c7bd295c77f6273ede6713fd71a7e6d55a3ad23d579c8aff1537087a2ef3fd1fd8923102374d578f60aa07b2216d2d4a65bfc474fc534e72fa5a195a3d8020c5584171c3df417d34da3f6f5ee06361029e1e192d477caf90ec0f80"}}) 17:03:25 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)={0x4d, 0x1, 0x4, 0xe000, 0x9, {}, {0x2, 0x2, 0x0, 0x9, 0x7, 0x8, "9e93e5d7"}, 0xfffffcfb, 0x1, @fd=0xffffffffffffffff, 0x28}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000002c0)={0x2, 0x4, 0x4, 0xe000, 0x5, {0x0, 0xea60}, {0x1, 0x8, 0xac, 0x4, 0x9, 0x4, "5f10d31f"}, 0x5751, 0x3, @fd, 0xe8, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0x80, 0x101081) ioctl$VIDIOC_SUBDEV_G_CROP(r3, 0xc038563b, &(0x7f0000000200)={0x1, 0x0, {0x8, 0xd1d, 0x9, 0x1}}) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, 0x0) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000140)={0x0, 0x1}) syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000440)={0x1, 0x1, 0x4, 0x4, 0x3, {}, {0x0, 0x1, 0x2, 0xca, 0x6, 0x0, "30a36c19"}, 0xfffffffa, 0x4, @fd=r1, 0x7, 0x0, r2}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) 17:03:25 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000100)={0x6, 0x5, 0x4, 0x40, 0xffffffc0, {0x0, 0x2710}, {0x5, 0x8, 0x3, 0x3, 0x2, 0x0, "5b4c8320"}, 0x4, 0x2, @fd}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x0, 0x2, 0x4, 0x0, 0x69a, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\"n ?'}, 0x2, 0x0, @userptr=0x20, 0x10000}) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) 17:03:25 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000080)={0x737, 0x3, 0x4, 0x0, 0x0, {}, {0x5, 0xc, 0x0, 0x3, 0x1, 0x4e, "15b3ff99"}, 0x29, 0x1, @userptr=0x4, 0x2}) r2 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:03:25 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x0, 0x4}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:03:25 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @raw_data="4d9ced65f1e21d507e2299c9698d44d1c83108bab192a8866d46a63a2e5f82d402c584987fab30f77ecef900c4fded3ec2679e778cd78a0a683a0adafeffd5819d3ca615cf359e41a0e34f05666c63dc3da642ec76f8afa4e6c12e641b854b3aceec98cfcb4cfc438e02d97a91c7bd295c77f6273ede6713fd71a7e6d55a3ad23d579c8aff1537087a2ef3fd1fd8923102374d578f60aa07b2216d2d4a65bfc474fc534e72fa5a195a3d8020c5584171c3df417d34da3f6f5ee06361029e1e192d477caf90ec0f80"}}) 17:03:25 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x3, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) 17:03:25 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @raw_data="4d9ced65f1e21d507e2299c9698d44d1c83108bab192a8866d46a63a2e5f82d402c584987fab30f77ecef900c4fded3ec2679e778cd78a0a683a0adafeffd5819d3ca615cf359e41a0e34f05666c63dc3da642ec76f8afa4e6c12e641b854b3aceec98cfcb4cfc438e02d97a91c7bd295c77f6273ede6713fd71a7e6d55a3ad23d579c8aff1537087a2ef3fd1fd8923102374d578f60aa07b2216d2d4a65bfc474fc534e72fa5a195a3d8020c5584171c3df417d34da3f6f5ee06361029e1e192d477caf90ec0f80"}}) 17:03:25 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x0, 0x4}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:03:25 executing program 2: r0 = syz_open_dev$vim2m(0x0, 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000002c0)={0xfff, 0x2, 0x4, 0x1000, 0x9b2, {}, {0x5, 0x2, 0xd6, 0xc5, 0x80, 0x0, "a0f41e57"}, 0x8, 0x2, @fd, 0x9}) 17:03:25 executing program 0: sendmsg$alg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="2e6c97266491e5c8167ab5036118d2e3bb09e4df5ba44aadd3c8defa3ef106cdc58699a99381b4036f66f31df0d49348b191ba705ea8f31c4279f64939d867bc7f79d5f55f8d034f91a280462d416af6c09f4d2382e1cd0428df8d1df394f47351787b4182832fd668ac4696738a691e0c67cb94eb2712f1adb01ed42b91bd78f345c57f6b71a9af3d79bfa90b5c1151b7305ff99a221cb818498eefe6a32e71118fb7c36719cfbcc0d17e1afd281d99d095ac868e82ddb0c4d681a93802600946c8e6ed4b7ddabfb536061e", 0xcc}, {&(0x7f0000000440)="6f937bd5974da8ac8ccaabfdadf839a32711d6d2ee6b104ee5c09bf4e4d2c9fec5dc2387e3dbaf84241e270831908b488cb9e175f6baf185e284babb6898f4b5ddd6d6687225e77ad21de25e7b7cdcc143a78e8b9f864bd066e3c2e43952b1ae01f180a18d4eb16b0855435facd48b12d8ee22790f4408419d39e16caf0c3898b1f9b3eeb862bf9985a54c22812e46abc12c48024c9d7ad3b67f9d0ab719b101f0d514958a2a2446ffe31bd2dc1c42e9ccc70df645627fa078611c107810974aac69495a8ee97e756ed83281427491b976c086584f52c69d3c50cf52b80fa59c32a21ba637e6f76777c6ea8553", 0xed}, {&(0x7f0000000100)="cab8184501dc141a3fe2fbd068673303211966963bbe491bf7685002103ee6163456be281a9f8ce29f4b2747c9770f42be0afdaa125883aa9cd668492c6067baf94af3999c836fc4af66d5c3931986390fa1c53a17b3a53a72e97983ee52ab2ec3e9055afdc35dcade1e2818c19a77349d2d6c3b71ebfe5ebf76", 0x7a}], 0x3, &(0x7f0000000540)=[@op={0x18}, @op={0x18}, @iv={0x80, 0x117, 0x2, 0x6c, "9b5b9a4bc52780e9e451b36057a1b801d6ce6d487267dc04c71e90d953494787afff5b4f8399002967cb11285df0e727a67f5e9749a91f7ec7776fbd290bde28b666d739c3b1b08b9a5d827e54ee559be2f158664a507754c9253f3eba1cedce06115978ae83de877a150ea9"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x100, 0x117, 0x2, 0xec, "464d0419edab1d5d29bb16cecf240d80f9dd7149863183ac3029ee06c7ef00cffbfa25acf767dfe501ad67f9597028f90e6d4f38ce65b6b8c23dbc45fae8da172e6da581544dc1c1122b283f6a6e548346547d008a8ef77a281f60208986e77ffb9579907fd787b386948d65efa8f097f9c6401ac13ebe9da7a670ea94891bd511fa3e9e4673005ba6813ae31e5b6bf9e2bf1f86251e5f575b5ba42f8ac363cbdb51700ca3c5c6a91a48279a859189d6e0671db9db9e8603ff3ac41aa5925ed7cb605b43d1f557b0aea8c04d0a696498e9fa5821704719fd0cdb77e77df9c6830d4ec48879bdd791c25d2ff3"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x9}], 0x1f8, 0x4000}, 0x40) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000740)={0x1, @raw_data="d6d18cf26a6e9f26c6f954bd050b89dbf895ca3b9326d309d72370f4f8a80a939f0654f3a78b71cf47b8a2d3f8563c3aa003845750e62e999ba9e66ec371cfb085cd3fab00d6e0dd75718066d93d33880f36bcd0e54c203cfca8431e12b42a2bd6b987a49759497919d119b8fbdacb2054956086f6e5618a7fae6900de5cc0839984fe1478288c95e0a3e0f884c65d05a238cdaa1f714295f9703e30c99bac077fc41e795ab9ab4353f9e3c8c51c1747124217448bab8e38a8da2c1d2e337a5e06c1410ccf6f4e87"}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}) 17:03:25 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:03:25 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000280)={0x0, @win={{0x7, 0x7fff, 0x101, 0x2}, 0x7, 0x8001, &(0x7f0000000100)={{0x8, 0x4, 0xc5, 0x1b7}, &(0x7f00000000c0)={{0x0, 0x1000, 0x9}, &(0x7f0000000080)={{0x6, 0xff6, 0x18f, 0x9}}}}, 0x19, &(0x7f00000001c0)="aca61d59ef03cdec88a1de86eff3ad6a3f2fa3879d3bce8887fa5b345dbb799375e505c28a7f692a668370c8baa45d83054b85ada5068410bad20e715cf4dd8e5c02c6f72d5f988b9c85a5108765b803d061e7607184f304cb479c524825ace2ca6ed4d31eff27b0010a4825eb91092eded804301b0684e442020a9fe6a9d5aeb23dce7994b0ac6757c00482c3d997e299ad6cfde18efc29574074472f0e1501bd", 0x64}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr=0xfffffffffffffffc}) 17:03:25 executing program 2: r0 = syz_open_dev$vim2m(0x0, 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000002c0)={0xfff, 0x2, 0x4, 0x1000, 0x9b2, {}, {0x5, 0x2, 0xd6, 0xc5, 0x80, 0x0, "a0f41e57"}, 0x8, 0x2, @fd, 0x9}) 17:03:25 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @raw_data="4d9ced65f1e21d507e2299c9698d44d1c83108bab192a8866d46a63a2e5f82d402c584987fab30f77ecef900c4fded3ec2679e778cd78a0a683a0adafeffd5819d3ca615cf359e41a0e34f05666c63dc3da642ec76f8afa4e6c12e641b854b3aceec98cfcb4cfc438e02d97a91c7bd295c77f6273ede6713fd71a7e6d55a3ad23d579c8aff1537087a2ef3fd1fd8923102374d578f60aa07b2216d2d4a65bfc474fc534e72fa5a195a3d8020c5584171c3df417d34da3f6f5ee06361029e1e192d477caf90ec0f80"}}) 17:03:25 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) [ 903.917874] IPVS: ftp: loaded support on port[0] = 21 [ 904.066778] chnl_net:caif_netlink_parms(): no params data found [ 904.189153] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.196389] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.206872] device bridge_slave_0 entered promiscuous mode [ 904.214332] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.220719] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.228174] device bridge_slave_1 entered promiscuous mode [ 904.247994] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 904.257131] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 904.278690] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 904.286008] team0: Port device team_slave_0 added [ 904.291601] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 904.299998] team0: Port device team_slave_1 added [ 904.318352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 904.324898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 904.350787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 904.362284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 904.368640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 904.394206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 904.405445] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 904.413075] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 904.436562] device hsr_slave_0 entered promiscuous mode [ 904.442455] device hsr_slave_1 entered promiscuous mode [ 904.448466] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 904.456021] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 904.531268] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.538007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 904.544775] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.551159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 904.585798] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 904.593334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 904.603151] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 904.612961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 904.620222] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.627245] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.638080] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 904.644591] 8021q: adding VLAN 0 to HW filter on device team0 [ 904.654032] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 904.662452] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.668857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 904.691034] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 904.702499] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 904.713043] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 904.720382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 904.729131] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.735860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 904.743398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 904.751545] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 904.759651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 904.770588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 904.778390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 904.785782] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 904.799563] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 904.808250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 904.815230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 904.827648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 904.886134] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 904.896455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 904.929301] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 904.936756] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 904.943665] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 904.953413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 904.961032] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 904.968324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 904.977374] device veth0_vlan entered promiscuous mode [ 904.988835] device veth1_vlan entered promiscuous mode [ 904.995231] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 905.005618] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 905.017518] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 905.027877] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 905.037525] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 905.045500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 905.054209] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 905.064746] device veth0_macvtap entered promiscuous mode [ 905.073904] device veth1_macvtap entered promiscuous mode [ 905.085413] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 905.095984] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 905.106201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 905.116344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.125529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 905.135308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.144789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 905.154741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.163933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 905.173768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.183853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 905.194357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.204879] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 905.214004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 905.222379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 905.231668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 905.241136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 905.252161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.272973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 905.283439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.309129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 905.322106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.331580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 905.341303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.351168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 905.369562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.380442] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 905.387814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 905.414735] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 905.428189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 17:03:29 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000001, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000100)={0x20, 0x2, 0x4, 0x10, 0x0, {0x0, 0x2710}, {0x2, 0x2, 0x81, 0x0, 0x7, 0x4, "be806882"}, 0xc6bd60c8, 0x3, @planes=&(0x7f00000000c0)={0x2, 0xffffffff, @fd=0xffffffffffffffff, 0x80000000}, 0x2}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000180)={0x7f, 0x2, 0x4, 0x100, 0x5f, {}, {0x2, 0x0, 0x1, 0x80, 0x4, 0x1, "fe90e381"}, 0xac, 0x4, @fd=r2, 0x7}) r3 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:03:29 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000002c0)={0xfff, 0x2, 0x4, 0x1000, 0x9b2, {}, {0x5, 0x2, 0xd6, 0xc5, 0x80, 0x0, "a0f41e57"}, 0x8, 0x2, @fd, 0x9}) 17:03:29 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x1000, 0x0, {}, {0x0, 0x8, 0x3, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x1, 0x0, @planes=&(0x7f0000000080)={0x1004, 0x1ff, @fd, 0x1}}) 17:03:29 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:03:29 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @raw_data="4d9ced65f1e21d507e2299c9698d44d1c83108bab192a8866d46a63a2e5f82d402c584987fab30f77ecef900c4fded3ec2679e778cd78a0a683a0adafeffd5819d3ca615cf359e41a0e34f05666c63dc3da642ec76f8afa4e6c12e641b854b3aceec98cfcb4cfc438e02d97a91c7bd295c77f6273ede6713fd71a7e6d55a3ad23d579c8aff1537087a2ef3fd1fd8923102374d578f60aa07b2216d2d4a65bfc474fc534e72fa5a195a3d8020c5584171c3df417d34da3f6f5ee06361029e1e192d477caf90ec0f80"}}) 17:03:29 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000100)={0xd770, 0x0, 0x4, 0x0, 0x4, {}, {0x3, 0x8, 0xc0, 0x7c, 0x4, 0x3f, "4d3bcae9"}, 0xfffffff9, 0x1, @userptr=0x4, 0xfffffff9}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}]}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x3, @vbi={0xffffffff, 0x5, 0x5, 0x31324d59, [0x7fff, 0x8], [0x6, 0xe91c], 0x1}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @sliced={0x6, [0xa, 0x1, 0x0, 0x6, 0x3f, 0xad, 0x40, 0x7, 0x3, 0x8, 0xbf1, 0x3, 0xfff, 0x31, 0x7, 0x20, 0x7fff, 0x5, 0x1, 0x5, 0x5, 0x1000, 0x5, 0x40, 0x11f, 0x0, 0x8, 0x59c4, 0x8, 0x1, 0xba, 0x180, 0x1, 0x1, 0x6, 0x200, 0x6, 0x7000, 0x8001, 0x2, 0x8001, 0x9, 0xfff, 0x61d, 0x2, 0x20, 0xf4e, 0x6], 0x1169}}, 0x4}) 17:03:29 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000002c0)={0xfff, 0x2, 0x4, 0x1000, 0x9b2, {}, {0x5, 0x2, 0xd6, 0xc5, 0x80, 0x0, "a0f41e57"}, 0x8, 0x2, @fd, 0x9}) 17:03:29 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x0, 0xf9, 0x1, {0x2, @raw_data="4d9ced65f1e21d507e2299c9698d44d1c83108bab192a8866d46a63a2e5f82d402c584987fab30f77ecef900c4fded3ec2679e778cd78a0a683a0adafeffd5819d3ca615cf359e41a0e34f05666c63dc3da642ec76f8afa4e6c12e641b854b3aceec98cfcb4cfc438e02d97a91c7bd295c77f6273ede6713fd71a7e6d55a3ad23d579c8aff1537087a2ef3fd1fd8923102374d578f60aa07b2216d2d4a65bfc474fc534e72fa5a195a3d8020c5584171c3df417d34da3f6f5ee06361029e1e192d477caf90ec0f80"}}) 17:03:29 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000002c0)={0xfff, 0x2, 0x4, 0x1000, 0x9b2, {}, {0x5, 0x2, 0xd6, 0xc5, 0x80, 0x0, "a0f41e57"}, 0x8, 0x2, @fd, 0x9}) 17:03:29 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000002, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:03:29 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) 17:03:29 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000001c0)={0x7, 0x4d0b862e, 0x2, {0x3, @sliced={0x3, [0x6, 0x3, 0x1ff, 0x8000, 0x3, 0x7, 0xf6, 0x2, 0x1, 0x0, 0xccd8, 0x1ff, 0x20a, 0x0, 0x1400, 0xb6c, 0x1, 0x7, 0x1f, 0x3, 0x94, 0x8, 0x0, 0x1000, 0x3, 0x101, 0x9, 0x67f6, 0x3, 0x1, 0x9, 0x100, 0x8, 0x8, 0x5, 0x35, 0x1, 0x2, 0xd55b, 0x2, 0x0, 0xfff7, 0x4, 0x101, 0x3f, 0x7, 0x100, 0x8000], 0x40}}, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, "f6ee20c3"}, 0x0, 0x0, @userptr}) 17:03:29 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000002c0)={0xfff, 0x2, 0x4, 0x1000, 0x9b2, {}, {0x5, 0x2, 0xd6, 0xc5, 0x80, 0x0, "a0f41e57"}, 0x8, 0x2, @fd, 0x9}) 17:03:29 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2) 17:03:29 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000002c0)={0xfff, 0x2, 0x4, 0x1000, 0x9b2, {}, {0x5, 0x2, 0xd6, 0xc5, 0x80, 0x0, "a0f41e57"}, 0x8, 0x2, @fd, 0x9}) 17:03:29 executing program 3: syz_open_dev$vim2m(0x0, 0x1, 0x2) r0 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "951094b9"}, 0x0, 0x0, @planes=0x0}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x240000, 0x1, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f00000005c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000002c0)={0x0, 0xffffffff, 0x3, 0x800}) 17:03:29 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2) [ 905.982168] Bluetooth: hci3 command 0x0409 tx timeout [ 908.065866] Bluetooth: hci3 command 0x041b tx timeout [ 910.141801] Bluetooth: hci3 command 0x040f tx timeout [ 910.591303] kasan: CONFIG_KASAN_INLINE enabled [ 910.596242] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 910.603720] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 910.609958] Modules linked in: [ 910.613149] CPU: 0 PID: 20733 Comm: syz-executor.0 Not tainted 4.14.230-syzkaller #0 [ 910.621017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 910.630597] task: ffff88801011a3c0 task.stack: ffff888010420000 [ 910.636664] RIP: 0010:vb2_vmalloc_put_userptr+0x6a/0x210 [ 910.642122] RSP: 0018:ffff888010427a48 EFLAGS: 00010202 [ 910.647508] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000d819000 [ 910.655176] RDX: 0000000000000001 RSI: ffffffff84c14092 RDI: 0000000000000009 [ 910.662999] RBP: ffff8880a9761080 R08: 0000000000000000 R09: 0000000000040552 [ 910.670356] R10: ffff88801011ac70 R11: ffff88801011a3c0 R12: 0000000000000000 [ 910.677629] R13: ffff8880a9761088 R14: ffffc900152f8000 R15: ffff8880a9761080 [ 910.684892] FS: 00007f905493d700(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000 [ 910.693150] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 910.699051] CR2: 0000000000543038 CR3: 00000000639c8000 CR4: 00000000001406f0 [ 910.706313] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 910.713568] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 910.720837] Call Trace: [ 910.723414] __vb2_queue_free+0x394/0x7a0 [ 910.727544] ? vb2_vmalloc_detach_dmabuf+0x80/0x80 [ 910.732460] ? vidioc_querycap+0xd0/0xd0 [ 910.736506] ? dev_debug_store+0xe0/0xe0 [ 910.740637] vb2_core_queue_release+0x5b/0x70 [ 910.745115] v4l2_m2m_ctx_release+0x26/0x30 [ 910.749426] vim2m_release+0xd4/0x120 [ 910.753251] v4l2_release+0xf4/0x190 [ 910.757010] __fput+0x25f/0x7a0 [ 910.760270] task_work_run+0x11f/0x190 [ 910.764139] get_signal+0x18a3/0x1ca0 [ 910.768802] ? lock_acquire+0x170/0x3f0 [ 910.772760] ? do_raw_spin_unlock+0x164/0x220 [ 910.777252] do_signal+0x7c/0x1550 [ 910.780778] ? wait_for_completion_io+0x10/0x10 [ 910.785447] ? setup_sigcontext+0x820/0x820 [ 910.789809] ? v4l2_ioctl+0x1d0/0x2f0 [ 910.793600] ? v4l2_open+0x2f0/0x2f0 [ 910.797295] ? do_vfs_ioctl+0xe2/0xff0 [ 910.801167] ? ioctl_preallocate+0x1a0/0x1a0 [ 910.805570] ? lock_downgrade+0x740/0x740 [ 910.809704] ? __fget+0x225/0x360 [ 910.813228] ? task_work_add+0x87/0xe0 [ 910.818071] ? exit_to_usermode_loop+0x41/0x200 [ 910.822739] exit_to_usermode_loop+0x160/0x200 [ 910.827326] ? SyS_ioctl+0x5c/0xb0 [ 910.830865] do_syscall_64+0x4a3/0x640 [ 910.834739] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 910.840017] RIP: 0033:0x466459 [ 910.843396] RSP: 002b:00007f905493d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 910.851192] RAX: 0000000000000000 RBX: 000000000056bf60 RCX: 0000000000466459 [ 910.859465] RDX: 0000000020000000 RSI: 00000000c100565c RDI: 0000000000000003 [ 910.867083] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 910.875927] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 910.883328] R13: 00007ffc2e6097df R14: 00007f905493d300 R15: 0000000000022000 [ 910.890591] Code: 4c 89 ea 48 c1 ea 03 80 3c 02 00 0f 85 91 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 65 08 49 8d 7c 24 09 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 40 01 00 [ 910.909698] RIP: vb2_vmalloc_put_userptr+0x6a/0x210 RSP: ffff888010427a48 [ 910.917361] ---[ end trace b77b50baad4b8bd0 ]--- [ 910.922158] Kernel panic - not syncing: Fatal exception [ 910.928021] Kernel Offset: disabled [ 910.931634] Rebooting in 86400 seconds..