Syzkaller reproducer:
# {Threaded:true Repeat:true RepeatTimes:0 Procs:8 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Repro:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}
ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x3, 0xff, 0x5, 0x80})
r0 = memfd_create(&(0x7f0000000040)='!{\x00', 0x2)
ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000080)={0x1, 0x2, [{0xffffffffffffffff, 0x0, 0x10000, 0x10000}, {r0, 0x0, 0xfffffffffffff000, 0x1000}]})
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0x400, 0x100})
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0)
ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000140)={0x1, 0x1, [{r0, 0x0, 0x4000, 0xfffff000}]})
r2 = syz_open_dev$rtc(&(0x7f0000000180), 0xbb3, 0x21c0)
ioctl$EVIOCGREP(r2, 0x80084503, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000002c0))
close$fd_v4l2_buffer(0xffffffffffffffff)
clock_gettime(0x0, &(0x7f0000000580))
write$damon_attrs(0xffffffffffffffff, &(0x7f0000001880)={{' ', 0x100000001}, {' ', 0x4}, {' ', 0xd4}, {' ', 0x6}, {' ', 0x6}}, 0x69)
openat$nci(0xffffffffffffff9c, &(0x7f0000001900), 0x2, 0x0)
unshare(0x8000000)
socketpair(0x6, 0x2, 0x8, &(0x7f0000001c40))
ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000001d00)=@userptr={0x9, 0x0, 0x4, 0x10000, 0x800, {0x77359400}, {0x3, 0x8, 0x1, 0x1, 0x80, 0x7f, "a4c098b3"}, 0x3, 0x2, {&(0x7f0000001cc0)}, 0x8})