0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}}) 11:41:59 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000000)={0xb, {0x8, 0x4, 0x1, 0x9}, {0x800, 0x4, 0x8000, 0x1ff}, {0x200, 0x20}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000000)={0xb, {0x8, 0x4, 0x1, 0x9}, {0x800, 0x4, 0x8000, 0x1ff}, {0x200, 0x20}}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}}) (async) 11:41:59 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x6, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f0d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x200]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x6, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f0d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x200]}}}) (async) 11:41:59 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async, rerun: 64) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000000)={0x5, "424e76157121412c3ff4aa7fc9515b8274708c2125ab90241096b8f09b710db5", 0x3, 0x1}) (async, rerun: 64) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000080)) 11:41:59 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40]}}}) 11:41:59 executing program 4: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 11:41:59 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}}) 11:41:59 executing program 4: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) 11:41:59 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000080)={0xfffb, [0x7, 0x13dc, 0x3, 0x81, 0xd5, 0x8001, 0xffc1, 0x1, 0x67, 0x100, 0x8, 0x8, 0x8, 0x400, 0x7f, 0x8001, 0x6, 0x7, 0x3, 0x8, 0x81, 0x7, 0x3b6a, 0x1000, 0xfffc, 0x5, 0x100, 0xf290, 0x486, 0x0, 0x3, 0x7, 0x5, 0xbe38, 0x7, 0x7, 0x1ff, 0x7f, 0x75, 0x6, 0x7, 0x5, 0xb2e, 0x80, 0xff, 0x7fff, 0xa5, 0x7f], 0x7}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r1) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f0000000000)={0x412f, 0x10001, @name="432074d88c41bc7aadc1d5868f070787476f1d7531478a3bdce3bdc04586b6d0"}) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/68}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:41:59 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}}}) 11:41:59 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000080)={0xbba, 0xb558}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x20) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) 11:41:59 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000000)={0xb, {0x8, 0x4, 0x1, 0x9}, {0x800, 0x4, 0x8000, 0x1ff}, {0x200, 0x20}}) (async, rerun: 64) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}}) (rerun: 64) 11:41:59 executing program 4: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 11:41:59 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) 11:41:59 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000080)={0x1000, "038b354d82b885c629cf041942a8b8cd203796c39c92452fc63f9af7f2cd32e5", 0x1, 0x1}) 11:41:59 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000080)={0xfffb, [0x7, 0x13dc, 0x3, 0x81, 0xd5, 0x8001, 0xffc1, 0x1, 0x67, 0x100, 0x8, 0x8, 0x8, 0x400, 0x7f, 0x8001, 0x6, 0x7, 0x3, 0x8, 0x81, 0x7, 0x3b6a, 0x1000, 0xfffc, 0x5, 0x100, 0xf290, 0x486, 0x0, 0x3, 0x7, 0x5, 0xbe38, 0x7, 0x7, 0x1ff, 0x7f, 0x75, 0x6, 0x7, 0x5, 0xb2e, 0x80, 0xff, 0x7fff, 0xa5, 0x7f], 0x7}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r1) (async) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f0000000000)={0x412f, 0x10001, @name="432074d88c41bc7aadc1d5868f070787476f1d7531478a3bdce3bdc04586b6d0"}) (async) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/68}) (async, rerun: 32) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (rerun: 32) 11:41:59 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 11:41:59 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 11:41:59 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000080)={0xbba, 0xb558}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x20) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000080)={0xbba, 0xb558}) (async) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x20) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (async) 11:41:59 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000080)={0x1000, "038b354d82b885c629cf041942a8b8cd203796c39c92452fc63f9af7f2cd32e5", 0x1, 0x1}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) (async) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000080)={0x1000, "038b354d82b885c629cf041942a8b8cd203796c39c92452fc63f9af7f2cd32e5", 0x1, 0x1}) (async) 11:41:59 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) (async) 11:41:59 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}}) 11:41:59 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}}) 11:42:00 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xe, &(0x7f0000000080)='9', 0x1) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x800, 0x4, 0x1, {0x0, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000000)={0x7, 0x32315258, 0x4, 0x4, 0x3, @discrete={0x5, 0xfff}}) 11:42:00 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) (async) 11:42:00 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}}}) 11:42:00 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000080)={0xbba, 0xb558}) (async) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x20) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) 11:42:00 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000080)={0xfffb, [0x7, 0x13dc, 0x3, 0x81, 0xd5, 0x8001, 0xffc1, 0x1, 0x67, 0x100, 0x8, 0x8, 0x8, 0x400, 0x7f, 0x8001, 0x6, 0x7, 0x3, 0x8, 0x81, 0x7, 0x3b6a, 0x1000, 0xfffc, 0x5, 0x100, 0xf290, 0x486, 0x0, 0x3, 0x7, 0x5, 0xbe38, 0x7, 0x7, 0x1ff, 0x7f, 0x75, 0x6, 0x7, 0x5, 0xb2e, 0x80, 0xff, 0x7fff, 0xa5, 0x7f], 0x7}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r1) (async) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f0000000000)={0x412f, 0x10001, @name="432074d88c41bc7aadc1d5868f070787476f1d7531478a3bdce3bdc04586b6d0"}) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/68}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:00 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) (async) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000080)={0x1000, "038b354d82b885c629cf041942a8b8cd203796c39c92452fc63f9af7f2cd32e5", 0x1, 0x1}) 11:42:00 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) 11:42:00 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000006c0)) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000000)={0x2, 0x9, @name="bbbcbcf63f24f540a59fa2f6815264dd2b2934576b6b6635454d94b86bfe1706"}) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000140)={0x4, "e098e4ec7f041fd2fdd9c72f786b47da2029eba0b948ff1e801440ea6418eddf", 0x0, 0xfff, 0x1, 0xf900, 0x2}) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000080)) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:00 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 11:42:00 executing program 2: setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x1, "5e0ca35155c1223ee6c3193d636d4ffe4b60ce9a96005c62dd94a2762a3775d1", 0xfffffffa, 0x9, 0x1, 0x20}, 0x3c) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f], 0x1}}, 0x4}) r1 = syz_open_dev$video(&(0x7f00000000c0), 0x400, 0x40001) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000100)={0x1, {0x3f, 0x4, 0x9, 0xfffffff8}, {0x2040000, 0xbc7, 0x7dbf, 0x80000001}, {0x3184, 0x9}}) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={@broadcast, @private=0xa010100}) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000140)={0x4, {0x9, 0x8, 0x7fffffff, 0x2}, {0x782ef4e7, 0x1000, 0x40, 0x3}, {0x400, 0x3ff}}) 11:42:00 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0xbffffffe, 0x4, 0x1, {0x2, @sliced={0x0, [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x200], 0x1}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000000)=0x4000) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x3, "bf0e7a8773125917c3d8b041b81689c589fff5adc81baee7ad72f9854e87ff71", 0x10001, 0x0, 0x2, 0x1, 0x6, 0x8000, 0x0, 0x6000, [0xfffffffa, 0xffff, 0x1, 0x6]}) 11:42:00 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xe, &(0x7f0000000080)='9', 0x1) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x800, 0x4, 0x1, {0x0, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000000)={0x7, 0x32315258, 0x4, 0x4, 0x3, @discrete={0x5, 0xfff}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xe, &(0x7f0000000080)='9', 0x1) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x800, 0x4, 0x1, {0x0, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000000)={0x7, 0x32315258, 0x4, 0x4, 0x3, @discrete={0x5, 0xfff}}) (async) 11:42:00 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}}) 11:42:00 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}}) 11:42:00 executing program 2: setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x1, "5e0ca35155c1223ee6c3193d636d4ffe4b60ce9a96005c62dd94a2762a3775d1", 0xfffffffa, 0x9, 0x1, 0x20}, 0x3c) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f], 0x1}}, 0x4}) r1 = syz_open_dev$video(&(0x7f00000000c0), 0x400, 0x40001) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000100)={0x1, {0x3f, 0x4, 0x9, 0xfffffff8}, {0x2040000, 0xbc7, 0x7dbf, 0x80000001}, {0x3184, 0x9}}) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={@broadcast, @private=0xa010100}) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000140)={0x4, {0x9, 0x8, 0x7fffffff, 0x2}, {0x782ef4e7, 0x1000, 0x40, 0x3}, {0x400, 0x3ff}}) setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x1, "5e0ca35155c1223ee6c3193d636d4ffe4b60ce9a96005c62dd94a2762a3775d1", 0xfffffffa, 0x9, 0x1, 0x20}, 0x3c) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f], 0x1}}, 0x4}) (async) syz_open_dev$video(&(0x7f00000000c0), 0x400, 0x40001) (async) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000100)={0x1, {0x3f, 0x4, 0x9, 0xfffffff8}, {0x2040000, 0xbc7, 0x7dbf, 0x80000001}, {0x3184, 0x9}}) (async) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={@broadcast, @private=0xa010100}) (async) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000140)={0x4, {0x9, 0x8, 0x7fffffff, 0x2}, {0x782ef4e7, 0x1000, 0x40, 0x3}, {0x400, 0x3ff}}) (async) 11:42:00 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0xbffffffe, 0x4, 0x1, {0x2, @sliced={0x0, [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x200], 0x1}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000000)=0x4000) (async) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x3, "bf0e7a8773125917c3d8b041b81689c589fff5adc81baee7ad72f9854e87ff71", 0x10001, 0x0, 0x2, 0x1, 0x6, 0x8000, 0x0, 0x6000, [0xfffffffa, 0xffff, 0x1, 0x6]}) 11:42:00 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}}) 11:42:00 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}}) (async) 11:42:00 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xe, &(0x7f0000000080)='9', 0x1) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x800, 0x4, 0x1, {0x0, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000000)={0x7, 0x32315258, 0x4, 0x4, 0x3, @discrete={0x5, 0xfff}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xe, &(0x7f0000000080)='9', 0x1) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x800, 0x4, 0x1, {0x0, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000000)={0x7, 0x32315258, 0x4, 0x4, 0x3, @discrete={0x5, 0xfff}}) (async) 11:42:00 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000006c0)) (async, rerun: 64) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (rerun: 64) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000000)={0x2, 0x9, @name="bbbcbcf63f24f540a59fa2f6815264dd2b2934576b6b6635454d94b86bfe1706"}) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000140)={0x4, "e098e4ec7f041fd2fdd9c72f786b47da2029eba0b948ff1e801440ea6418eddf", 0x0, 0xfff, 0x1, 0xf900, 0x2}) (async) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000080)) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:00 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0xbffffffe, 0x4, 0x1, {0x2, @sliced={0x0, [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x200], 0x1}}}) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000000)=0x4000) (async) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x3, "bf0e7a8773125917c3d8b041b81689c589fff5adc81baee7ad72f9854e87ff71", 0x10001, 0x0, 0x2, 0x1, 0x6, 0x8000, 0x0, 0x6000, [0xfffffffa, 0xffff, 0x1, 0x6]}) 11:42:00 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}}}) 11:42:00 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x8, 0x1, {0x2, @pix={0xffffffff, 0x80, 0x77005c3e, 0x6, 0x8e32, 0x1, 0xc, 0x101, 0x0, 0x1, 0x0, 0x6}}, 0x40000}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x2, 0x0, {0x200, 0x100, 0x167, 0x10000}}) 11:42:00 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) 11:42:00 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}}) (async) 11:42:00 executing program 2: setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x1, "5e0ca35155c1223ee6c3193d636d4ffe4b60ce9a96005c62dd94a2762a3775d1", 0xfffffffa, 0x9, 0x1, 0x20}, 0x3c) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f], 0x1}}, 0x4}) r1 = syz_open_dev$video(&(0x7f00000000c0), 0x400, 0x40001) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000100)={0x1, {0x3f, 0x4, 0x9, 0xfffffff8}, {0x2040000, 0xbc7, 0x7dbf, 0x80000001}, {0x3184, 0x9}}) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={@broadcast, @private=0xa010100}) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000140)={0x4, {0x9, 0x8, 0x7fffffff, 0x2}, {0x782ef4e7, 0x1000, 0x40, 0x3}, {0x400, 0x3ff}}) setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x1, "5e0ca35155c1223ee6c3193d636d4ffe4b60ce9a96005c62dd94a2762a3775d1", 0xfffffffa, 0x9, 0x1, 0x20}, 0x3c) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f], 0x1}}, 0x4}) (async) syz_open_dev$video(&(0x7f00000000c0), 0x400, 0x40001) (async) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000100)={0x1, {0x3f, 0x4, 0x9, 0xfffffff8}, {0x2040000, 0xbc7, 0x7dbf, 0x80000001}, {0x3184, 0x9}}) (async) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={@broadcast, @private=0xa010100}) (async) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000140)={0x4, {0x9, 0x8, 0x7fffffff, 0x2}, {0x782ef4e7, 0x1000, 0x40, 0x3}, {0x400, 0x3ff}}) (async) 11:42:00 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000080)={0x800, [0x3, 0x4, 0x7fff, 0x3, 0xe1, 0x12, 0x47, 0x6, 0xffff, 0x8001, 0x1, 0x2, 0x2, 0x9, 0x4, 0x1000, 0x101, 0x5, 0x40, 0x1, 0x7fff, 0x0, 0x9, 0x7, 0x80, 0x9, 0x4, 0x8, 0x101, 0x2, 0x6, 0x3, 0x250, 0x8, 0x3eb, 0xff, 0x5, 0x4, 0x6, 0x7f, 0x7f, 0x26f8, 0x9, 0x4, 0x2, 0x5, 0x3f], 0x5}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:00 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000006c0)) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x0) (async) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000000)={0x2, 0x9, @name="bbbcbcf63f24f540a59fa2f6815264dd2b2934576b6b6635454d94b86bfe1706"}) (async) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000140)={0x4, "e098e4ec7f041fd2fdd9c72f786b47da2029eba0b948ff1e801440ea6418eddf", 0x0, 0xfff, 0x1, 0xf900, 0x2}) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000080)) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:00 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x8, 0x1, {0x2, @pix={0xffffffff, 0x80, 0x77005c3e, 0x6, 0x8e32, 0x1, 0xc, 0x101, 0x0, 0x1, 0x0, 0x6}}, 0x40000}) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async, rerun: 64) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x2, 0x0, {0x200, 0x100, 0x167, 0x10000}}) (rerun: 64) 11:42:00 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 11:42:00 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x8, 0x1, {0x2, @pix={0xffffffff, 0x80, 0x77005c3e, 0x6, 0x8e32, 0x1, 0xc, 0x101, 0x0, 0x1, 0x0, 0x6}}, 0x40000}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x2, 0x0, {0x200, 0x100, 0x167, 0x10000}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x8, 0x1, {0x2, @pix={0xffffffff, 0x80, 0x77005c3e, 0x6, 0x8e32, 0x1, 0xc, 0x101, 0x0, 0x1, 0x0, 0x6}}, 0x40000}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x2, 0x0, {0x200, 0x100, 0x167, 0x10000}}) (async) 11:42:01 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000080)={0x800, [0x3, 0x4, 0x7fff, 0x3, 0xe1, 0x12, 0x47, 0x6, 0xffff, 0x8001, 0x1, 0x2, 0x2, 0x9, 0x4, 0x1000, 0x101, 0x5, 0x40, 0x1, 0x7fff, 0x0, 0x9, 0x7, 0x80, 0x9, 0x4, 0x8, 0x101, 0x2, 0x6, 0x3, 0x250, 0x8, 0x3eb, 0xff, 0x5, 0x4, 0x6, 0x7f, 0x7f, 0x26f8, 0x9, 0x4, 0x2, 0x5, 0x3f], 0x5}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:01 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}}) 11:42:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x6, 0x1, {0x2, @sliced={0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], 0x2}}}) r2 = syz_open_dev$vivid(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f00000000c0)={0x9, {0xb63, 0x1, 0x4, 0x7}}) 11:42:01 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}}) 11:42:01 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 11:42:01 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000000)={0x0, {0x8, 0x4}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8922, &(0x7f00000001c0)={'macvlan1\x00'}) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000100)=0xffffff) r3 = syz_open_dev$video(&(0x7f0000000180), 0xffffffffffff0001, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, '\x00', @bt={0x7, 0x1b5d0000, 0x4, 0x5, 0x9, 0x1000000000000800, 0xb, 0x4}}) r4 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f0000000140)={0x1, 0x9}) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000080)={0x993, 0x3, 0x1, "54dc2d754de64671b65bceda03d2857b007923999f8257af64006c5a29100132", 0x33205454}) 11:42:01 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x9, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100]}}}) 11:42:01 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000080)={0x800, [0x3, 0x4, 0x7fff, 0x3, 0xe1, 0x12, 0x47, 0x6, 0xffff, 0x8001, 0x1, 0x2, 0x2, 0x9, 0x4, 0x1000, 0x101, 0x5, 0x40, 0x1, 0x7fff, 0x0, 0x9, 0x7, 0x80, 0x9, 0x4, 0x8, 0x101, 0x2, 0x6, 0x3, 0x250, 0x8, 0x3eb, 0xff, 0x5, 0x4, 0x6, 0x7f, 0x7f, 0x26f8, 0x9, 0x4, 0x2, 0x5, 0x3f], 0x5}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:01 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}}}) 11:42:01 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 11:42:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x6, 0x1, {0x2, @sliced={0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], 0x2}}}) (async) r2 = syz_open_dev$vivid(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f00000000c0)={0x9, {0xb63, 0x1, 0x4, 0x7}}) 11:42:01 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) [ 2132.125102] macvlan1: mtu less than device minimum 11:42:01 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000000)={0x0, {0x8, 0x4}}) (async, rerun: 32) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async, rerun: 32) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8922, &(0x7f00000001c0)={'macvlan1\x00'}) (async, rerun: 64) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000100)=0xffffff) (rerun: 64) r3 = syz_open_dev$video(&(0x7f0000000180), 0xffffffffffff0001, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, '\x00', @bt={0x7, 0x1b5d0000, 0x4, 0x5, 0x9, 0x1000000000000800, 0xb, 0x4}}) r4 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f0000000140)={0x1, 0x9}) (async) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000080)={0x993, 0x3, 0x1, "54dc2d754de64671b65bceda03d2857b007923999f8257af64006c5a29100132", 0x33205454}) 11:42:01 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x9, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100]}}}) 11:42:01 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x4]}}}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x3000000) 11:42:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x6, 0x1, {0x2, @sliced={0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], 0x2}}}) r2 = syz_open_dev$vivid(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f00000000c0)={0x9, {0xb63, 0x1, 0x4, 0x7}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x6, 0x1, {0x2, @sliced={0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], 0x2}}}) (async) syz_open_dev$vivid(&(0x7f0000000080), 0x2, 0x2) (async) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f00000000c0)={0x9, {0xb63, 0x1, 0x4, 0x7}}) (async) 11:42:01 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) 11:42:01 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) [ 2132.304095] macvlan1: mtu less than device minimum [ 2132.310198] macvlan1: mtu less than device minimum 11:42:01 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 11:42:01 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x9, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x9, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100]}}}) (async) 11:42:01 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:01 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}}) 11:42:01 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x4]}}}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x3000000) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x4]}}}) (async) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x3000000) (async) 11:42:01 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:02 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000000)={0x0, {0x8, 0x4}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8922, &(0x7f00000001c0)={'macvlan1\x00'}) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000100)=0xffffff) (async, rerun: 32) r3 = syz_open_dev$video(&(0x7f0000000180), 0xffffffffffff0001, 0x0) (rerun: 32) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, '\x00', @bt={0x7, 0x1b5d0000, 0x4, 0x5, 0x9, 0x1000000000000800, 0xb, 0x4}}) r4 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f0000000140)={0x1, 0x9}) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000080)={0x993, 0x3, 0x1, "54dc2d754de64671b65bceda03d2857b007923999f8257af64006c5a29100132", 0x33205454}) 11:42:02 executing program 4: r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x9c0000, 0x9, 0x5, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x990968, 0x1062a, '\x00', @value64=0x5}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f00000001c0)={0xa20000, 0x8, 0x200, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x990a94, 0x3, '\x00', @p_u8=&(0x7f00000000c0)=0xf9}}) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000200)={0x5, 0x2, 0x40}) r3 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000280)={0x452, 0x0, 0x300f, 0x8, 0x9, 0x81, 0x400, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000240)={0x7fff, "f3e0f9fd3d12eabb2d30a5a7c7ff3d5856f71cadd1483e82e71d4c202e525d62"}) 11:42:02 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000180)={0x8, "57ec0fe4b8ee98d5a072648561cc91bb6ac8a479f7836105cb78b423ad7ae5a4", 0x4, 0x1, 0xce3, 0x100, 0x4, 0x3, 0x54c83963, 0x6}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, '\x00', @raw_data=[0x3, 0x8001, 0x6, 0x52, 0x27834aad, 0x0, 0x0, 0x100, 0x2, 0x6, 0x3ff, 0x2, 0x8, 0x0, 0x80000001, 0x400, 0x8fd, 0x20, 0x6, 0x5, 0x10000, 0xfa4, 0x7, 0x8, 0x7, 0x6, 0x9, 0x7ff, 0x9, 0x1f, 0x1, 0x101]}) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x1fc, 0x80, '\x00', &(0x7f0000000000)=0x81}) 11:42:02 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}}) 11:42:02 executing program 1: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x16, 0x1, {0x2, @sliced={0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x2, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x200]}}}) 11:42:02 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x4]}}}) (async) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x3000000) 11:42:02 executing program 1: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x16, 0x1, {0x2, @sliced={0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x2, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x200]}}}) 11:42:02 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}}}) 11:42:02 executing program 1: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x16, 0x1, {0x2, @sliced={0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x2, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x200]}}}) 11:42:02 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x1, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 11:42:02 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) 11:42:02 executing program 4: r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x9c0000, 0x9, 0x5, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x990968, 0x1062a, '\x00', @value64=0x5}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f00000001c0)={0xa20000, 0x8, 0x200, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x990a94, 0x3, '\x00', @p_u8=&(0x7f00000000c0)=0xf9}}) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000200)={0x5, 0x2, 0x40}) r3 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000280)={0x452, 0x0, 0x300f, 0x8, 0x9, 0x81, 0x400, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000240)={0x7fff, "f3e0f9fd3d12eabb2d30a5a7c7ff3d5856f71cadd1483e82e71d4c202e525d62"}) syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x9c0000, 0x9, 0x5, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x990968, 0x1062a, '\x00', @value64=0x5}}) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f00000001c0)={0xa20000, 0x8, 0x200, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x990a94, 0x3, '\x00', @p_u8=&(0x7f00000000c0)=0xf9}}) (async) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000200)={0x5, 0x2, 0x40}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000280)={0x452, 0x0, 0x300f, 0x8, 0x9, 0x81, 0x400, 0x1}) (async) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000240)={0x7fff, "f3e0f9fd3d12eabb2d30a5a7c7ff3d5856f71cadd1483e82e71d4c202e525d62"}) (async) [ 2133.279910] macvlan1: mtu less than device minimum 11:42:02 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f0000000080)={0x0, 0x9, 0x5, '\x00', &(0x7f0000000000)=0x4}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x4, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff]}}}) 11:42:02 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x100, 0x1, {0x2, @sliced={0x8b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f, 0xfffd]}}}) 11:42:02 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000180)={0x8, "57ec0fe4b8ee98d5a072648561cc91bb6ac8a479f7836105cb78b423ad7ae5a4", 0x4, 0x1, 0xce3, 0x100, 0x4, 0x3, 0x54c83963, 0x6}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, '\x00', @raw_data=[0x3, 0x8001, 0x6, 0x52, 0x27834aad, 0x0, 0x0, 0x100, 0x2, 0x6, 0x3ff, 0x2, 0x8, 0x0, 0x80000001, 0x400, 0x8fd, 0x20, 0x6, 0x5, 0x10000, 0xfa4, 0x7, 0x8, 0x7, 0x6, 0x9, 0x7ff, 0x9, 0x1f, 0x1, 0x101]}) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x1fc, 0x80, '\x00', &(0x7f0000000000)=0x81}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000180)={0x8, "57ec0fe4b8ee98d5a072648561cc91bb6ac8a479f7836105cb78b423ad7ae5a4", 0x4, 0x1, 0xce3, 0x100, 0x4, 0x3, 0x54c83963, 0x6}) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, '\x00', @raw_data=[0x3, 0x8001, 0x6, 0x52, 0x27834aad, 0x0, 0x0, 0x100, 0x2, 0x6, 0x3ff, 0x2, 0x8, 0x0, 0x80000001, 0x400, 0x8fd, 0x20, 0x6, 0x5, 0x10000, 0xfa4, 0x7, 0x8, 0x7, 0x6, 0x9, 0x7ff, 0x9, 0x1f, 0x1, 0x101]}) (async) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x1fc, 0x80, '\x00', &(0x7f0000000000)=0x81}) (async) 11:42:02 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [], 0x2}}}) 11:42:02 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x1, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 11:42:02 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x100, 0x1, {0x2, @sliced={0x8b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f, 0xfffd]}}}) 11:42:02 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f0000000080)={0x0, 0x9, 0x5, '\x00', &(0x7f0000000000)=0x4}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x4, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff]}}}) 11:42:02 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [], 0x7}}}) 11:42:02 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f0000000080)={0x0, 0x9, 0x5, '\x00', &(0x7f0000000000)=0x4}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x4, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f0000000080)={0x0, 0x9, 0x5, '\x00', &(0x7f0000000000)=0x4}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x4, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff]}}}) (async) 11:42:02 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000180)={0x8, "57ec0fe4b8ee98d5a072648561cc91bb6ac8a479f7836105cb78b423ad7ae5a4", 0x4, 0x1, 0xce3, 0x100, 0x4, 0x3, 0x54c83963, 0x6}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, '\x00', @raw_data=[0x3, 0x8001, 0x6, 0x52, 0x27834aad, 0x0, 0x0, 0x100, 0x2, 0x6, 0x3ff, 0x2, 0x8, 0x0, 0x80000001, 0x400, 0x8fd, 0x20, 0x6, 0x5, 0x10000, 0xfa4, 0x7, 0x8, 0x7, 0x6, 0x9, 0x7ff, 0x9, 0x1f, 0x1, 0x101]}) (async) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x1fc, 0x80, '\x00', &(0x7f0000000000)=0x81}) 11:42:02 executing program 4: r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x9c0000, 0x9, 0x5, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x990968, 0x1062a, '\x00', @value64=0x5}}) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f00000001c0)={0xa20000, 0x8, 0x200, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x990a94, 0x3, '\x00', @p_u8=&(0x7f00000000c0)=0xf9}}) (async) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000200)={0x5, 0x2, 0x40}) (async) r3 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000280)={0x452, 0x0, 0x300f, 0x8, 0x9, 0x81, 0x400, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000240)={0x7fff, "f3e0f9fd3d12eabb2d30a5a7c7ff3d5856f71cadd1483e82e71d4c202e525d62"}) 11:42:02 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x100, 0x1, {0x2, @sliced={0x8b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f, 0xfffd]}}}) 11:42:02 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [], 0x8}}}) 11:42:02 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x1, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x1, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) (async) 11:42:02 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @pix={0x23, 0x4, 0x41495043, 0x2, 0x9, 0x3, 0x4, 0x3, 0x0, 0x2, 0x3, 0x4}}}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000080)={0x6, 0x0, '\x00', {0x0, @bt={0x6f2, 0x80, 0x1, 0x2, 0x3, 0x4, 0xc4d, 0x6, 0xfffffff8, 0x4, 0x577, 0x1, 0xc9, 0xe000, 0x0, 0x20, {0x428}, 0xce, 0x3}}}) 11:42:02 executing program 0: ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x103000, 0x0) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f00000000c0)=0xffffff78) 11:42:02 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000180)={0x47, "8868f783eda1fb629cb2b480481ff4d26bd71de20e4029d407a9282f94035757", 0x2}) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f0000000080)={0x5, "2695b9ba52ca08bd22595e531a07631f0742453c01d23f3d6d59782833254bbd", 0x3, 0x40, 0x7, 0xffffffe0, 0x10, 0x2, 0x3ff, 0x2}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f00000001c0)={0x4, 0x0, 0x100b, 0x3a1c, 0x1, 0x4, 0x9}) 11:42:02 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [], 0x700}}}) 11:42:03 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @pix={0x23, 0x4, 0x41495043, 0x2, 0x9, 0x3, 0x4, 0x3, 0x0, 0x2, 0x3, 0x4}}}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000080)={0x6, 0x0, '\x00', {0x0, @bt={0x6f2, 0x80, 0x1, 0x2, 0x3, 0x4, 0xc4d, 0x6, 0xfffffff8, 0x4, 0x577, 0x1, 0xc9, 0xe000, 0x0, 0x20, {0x428}, 0xce, 0x3}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @pix={0x23, 0x4, 0x41495043, 0x2, 0x9, 0x3, 0x4, 0x3, 0x0, 0x2, 0x3, 0x4}}}) (async) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000080)={0x6, 0x0, '\x00', {0x0, @bt={0x6f2, 0x80, 0x1, 0x2, 0x3, 0x4, 0xc4d, 0x6, 0xfffffff8, 0x4, 0x577, 0x1, 0xc9, 0xe000, 0x0, 0x20, {0x428}, 0xce, 0x3}}}) (async) 11:42:03 executing program 0: ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) (async) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x103000, 0x0) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f00000000c0)=0xffffff78) 11:42:03 executing program 4: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29e]}}}) 11:42:03 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [], 0x1000000}}}) 11:42:03 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f00000000c0)={0x2, 0x1, [0x6, 0x5, 0x2, 0x6, 0x8, 0x1, 0x7, 0x38000]}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)={0x3}) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000080)={0x0, 0x4, 0x8, '\x00', &(0x7f0000000000)=0x45}) 11:42:03 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @pix={0x23, 0x4, 0x41495043, 0x2, 0x9, 0x3, 0x4, 0x3, 0x0, 0x2, 0x3, 0x4}}}) (async) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000080)={0x6, 0x0, '\x00', {0x0, @bt={0x6f2, 0x80, 0x1, 0x2, 0x3, 0x4, 0xc4d, 0x6, 0xfffffff8, 0x4, 0x577, 0x1, 0xc9, 0xe000, 0x0, 0x20, {0x428}, 0xce, 0x3}}}) 11:42:03 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000180)={0x47, "8868f783eda1fb629cb2b480481ff4d26bd71de20e4029d407a9282f94035757", 0x2}) (async) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f0000000080)={0x5, "2695b9ba52ca08bd22595e531a07631f0742453c01d23f3d6d59782833254bbd", 0x3, 0x40, 0x7, 0xffffffe0, 0x10, 0x2, 0x3ff, 0x2}) (async, rerun: 32) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f00000001c0)={0x4, 0x0, 0x100b, 0x3a1c, 0x1, 0x4, 0x9}) (rerun: 32) 11:42:03 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [], 0x2000000}}}) 11:42:03 executing program 0: ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x103000, 0x0) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f00000000c0)=0xffffff78) 11:42:03 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [], 0x7000000}}}) 11:42:03 executing program 4: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29e]}}}) 11:42:03 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000100)={0x5, {0x40, 0x2, 0x7c473d32}}) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x58402, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000180)=""/222) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000080)={0x800, "285d94e8b9d5458de2b377373e59e548466443f9f6e061c28bed7a18d1b12eaf", 0x940, 0x0, 0x1, 0x1, 0x4}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) 11:42:03 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f00000000c0)={0x2, 0x1, [0x6, 0x5, 0x2, 0x6, 0x8, 0x1, 0x7, 0x38000]}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)={0x3}) (async) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000080)={0x0, 0x4, 0x8, '\x00', &(0x7f0000000000)=0x45}) 11:42:03 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [], 0x8000000}}}) 11:42:03 executing program 4: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29e]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29e]}}}) (async) 11:42:03 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) 11:42:03 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000140)={0x0, 0x0, 0x9, '\x00', &(0x7f0000000080)=0x7}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000100)={0x0, 0x8001, 0x2023}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x9}}}) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f00000000c0)=0x1) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 11:42:03 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}}) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000180)={0x47, "8868f783eda1fb629cb2b480481ff4d26bd71de20e4029d407a9282f94035757", 0x2}) (async) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f0000000080)={0x5, "2695b9ba52ca08bd22595e531a07631f0742453c01d23f3d6d59782833254bbd", 0x3, 0x40, 0x7, 0xffffffe0, 0x10, 0x2, 0x3ff, 0x2}) (async) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f00000001c0)={0x4, 0x0, 0x100b, 0x3a1c, 0x1, 0x4, 0x9}) 11:42:03 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000100)={0x5, {0x40, 0x2, 0x7c473d32}}) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x58402, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000180)=""/222) (async) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000080)={0x800, "285d94e8b9d5458de2b377373e59e548466443f9f6e061c28bed7a18d1b12eaf", 0x940, 0x0, 0x1, 0x1, 0x4}) (async, rerun: 32) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (rerun: 32) 11:42:03 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f00000000c0)={0x2, 0x1, [0x6, 0x5, 0x2, 0x6, 0x8, 0x1, 0x7, 0x38000]}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)={0x3}) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000080)={0x0, 0x4, 0x8, '\x00', &(0x7f0000000000)=0x45}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f00000000c0)={0x2, 0x1, [0x6, 0x5, 0x2, 0x6, 0x8, 0x1, 0x7, 0x38000]}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)={0x3}) (async) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000080)={0x0, 0x4, 0x8, '\x00', &(0x7f0000000000)=0x45}) (async) 11:42:03 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}, 0x2}) 11:42:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, '\x00', @bt={0x8001, 0xf91, 0xffff, 0x401, 0x2c5, 0x7, 0x8, 0x6}}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) 11:42:03 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}, 0x7}) 11:42:03 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:03 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000140)={0x0, 0x0, 0x9, '\x00', &(0x7f0000000080)=0x7}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000100)={0x0, 0x8001, 0x2023}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x9}}}) (async) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f00000000c0)=0x1) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 11:42:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, '\x00', @bt={0x8001, 0xf91, 0xffff, 0x401, 0x2c5, 0x7, 0x8, 0x6}}) (async) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) 11:42:03 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}, 0x8}) 11:42:03 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x9, @sliced={0x0, [0x8, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x1, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000000)={0xd4f, "eed597fb89341c0f7de30a1f5e9aa272ac1270de0998bef96d672acbea2e99c6", 0x1, 0x1}) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f0000000100)={0x5, "634bef7fa821510622b8014ae2bfe6d106a6738499364cec6457f01dfb4b9d36", 0x2}) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x3, {0x9, 0x7fffffff, 0x400, 0xffffffda}}) 11:42:03 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}, 0x700}) 11:42:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async, rerun: 32) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 32) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, '\x00', @bt={0x8001, 0xf91, 0xffff, 0x401, 0x2c5, 0x7, 0x8, 0x6}}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) 11:42:04 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000100)={0x5, {0x40, 0x2, 0x7c473d32}}) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x58402, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000180)=""/222) (async) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000080)={0x800, "285d94e8b9d5458de2b377373e59e548466443f9f6e061c28bed7a18d1b12eaf", 0x940, 0x0, 0x1, 0x1, 0x4}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) 11:42:04 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x9, @sliced={0x0, [0x8, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x1, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100]}}}) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000000)={0xd4f, "eed597fb89341c0f7de30a1f5e9aa272ac1270de0998bef96d672acbea2e99c6", 0x1, 0x1}) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f0000000100)={0x5, "634bef7fa821510622b8014ae2bfe6d106a6738499364cec6457f01dfb4b9d36", 0x2}) (async) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x3, {0x9, 0x7fffffff, 0x400, 0xffffffda}}) 11:42:04 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000140)={0x0, 0x0, 0x9, '\x00', &(0x7f0000000080)=0x7}) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000100)={0x0, 0x8001, 0x2023}) (async, rerun: 64) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x9}}}) (rerun: 64) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f00000000c0)=0x1) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 11:42:04 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}, 0x1000000}) 11:42:04 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:04 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000080)={0x6, "1fdec760ba9f93ce998bd871cf0bb1de75286bd7495031dc24f0ff459f54ea38", 0x2, 0x3, 0x3, 0x4, 0x2}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:04 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}, 0x2000000}) 11:42:04 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000080)) 11:42:04 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x9, @sliced={0x0, [0x8, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x1, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000000)={0xd4f, "eed597fb89341c0f7de30a1f5e9aa272ac1270de0998bef96d672acbea2e99c6", 0x1, 0x1}) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f0000000100)={0x5, "634bef7fa821510622b8014ae2bfe6d106a6738499364cec6457f01dfb4b9d36", 0x2}) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x3, {0x9, 0x7fffffff, 0x400, 0xffffffda}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x9, @sliced={0x0, [0x8, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x1, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100]}}}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000000)={0xd4f, "eed597fb89341c0f7de30a1f5e9aa272ac1270de0998bef96d672acbea2e99c6", 0x1, 0x1}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f0000000100)={0x5, "634bef7fa821510622b8014ae2bfe6d106a6738499364cec6457f01dfb4b9d36", 0x2}) (async) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x3, {0x9, 0x7fffffff, 0x400, 0xffffffda}}) (async) 11:42:04 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}, 0x7000000}) 11:42:04 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000080)={0x6, "1fdec760ba9f93ce998bd871cf0bb1de75286bd7495031dc24f0ff459f54ea38", 0x2, 0x3, 0x3, 0x4, 0x2}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000080)={0x6, "1fdec760ba9f93ce998bd871cf0bb1de75286bd7495031dc24f0ff459f54ea38", 0x2, 0x3, 0x3, 0x4, 0x2}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) 11:42:04 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000080)) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (async) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000080)) (async) 11:42:04 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}, 0x8000000}) 11:42:04 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (async, rerun: 32) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (rerun: 32) 11:42:04 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x4]}}}) 11:42:04 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:04 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000480)) 11:42:04 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000080)) 11:42:04 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000080)={0x6, "1fdec760ba9f93ce998bd871cf0bb1de75286bd7495031dc24f0ff459f54ea38", 0x2, 0x3, 0x3, 0x4, 0x2}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:04 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) (async) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000480)) 11:42:04 executing program 2: ioctl$VIDIOC_G_ENC_INDEX(0xffffffffffffffff, 0x8818564c, &(0x7f0000000480)) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000000)=0x8d2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) 11:42:04 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x4]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x4]}}}) (async) 11:42:04 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}}) 11:42:04 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:04 executing program 2: ioctl$VIDIOC_G_ENC_INDEX(0xffffffffffffffff, 0x8818564c, &(0x7f0000000480)) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000000)=0x8d2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$VIDIOC_G_ENC_INDEX(0xffffffffffffffff, 0x8818564c, &(0x7f0000000480)) (async) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000000)=0x8d2) (async) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (async) 11:42:05 executing program 5: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x7, &(0x7f0000000000)=[{0x9, 0x3582}, {0x9, 0xfd43}, {0x1f}, {0x7, 0x274}, {0x8, 0x7fff}, {0x8}, {0xffff, 0x6}]}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:05 executing program 2: ioctl$VIDIOC_G_ENC_INDEX(0xffffffffffffffff, 0x8818564c, &(0x7f0000000480)) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000000)=0x8d2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$VIDIOC_G_ENC_INDEX(0xffffffffffffffff, 0x8818564c, &(0x7f0000000480)) (async) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000000)=0x8d2) (async) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (async) 11:42:05 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) 11:42:05 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) (async) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000480)) 11:42:05 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}}) 11:42:05 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x4]}}}) 11:42:05 executing program 2: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x3, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0xf008, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebe5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1f]}}}) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080)) 11:42:05 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}}) (async) 11:42:05 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @raw_data=[0x1, 0x9, 0xffffffb1, 0x6, 0x101, 0x89d, 0x2, 0xdea0, 0x1, 0x7, 0x1, 0x7ff, 0x70dbc38b, 0x0, 0x8, 0x1, 0x8000, 0x101, 0x1000, 0xba, 0x51719546, 0x9, 0xfffffffb, 0x8000, 0x6, 0x8001, 0x4, 0x5, 0xffffffff, 0x8, 0x7, 0x8000]}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:05 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14d0]}}}) 11:42:05 executing program 2: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x3, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0xf008, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebe5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1f]}}}) (async) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080)) 11:42:05 executing program 5: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x7, &(0x7f0000000000)=[{0x9, 0x3582}, {0x9, 0xfd43}, {0x1f}, {0x7, 0x274}, {0x8, 0x7fff}, {0x8}, {0xffff, 0x6}]}) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:05 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x3}}}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0x1855, 0x1014, 0x1}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000100)={0xf000000, 0x0, 0x401, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9c090b, 0x8, '\x00', @string=&(0x7f0000000080)=0x1}}) 11:42:05 executing program 2: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x3, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0xf008, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebe5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1f]}}}) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080)) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x3, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0xf008, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebe5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1f]}}}) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080)) (async) 11:42:05 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000000)=0x7) 11:42:05 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14d0]}}}) 11:42:05 executing program 5: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x7, &(0x7f0000000000)=[{0x9, 0x3582}, {0x9, 0xfd43}, {0x1f}, {0x7, 0x274}, {0x8, 0x7fff}, {0x8}, {0xffff, 0x6}]}) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:05 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @raw_data=[0x1, 0x9, 0xffffffb1, 0x6, 0x101, 0x89d, 0x2, 0xdea0, 0x1, 0x7, 0x1, 0x7ff, 0x70dbc38b, 0x0, 0x8, 0x1, 0x8000, 0x101, 0x1000, 0xba, 0x51719546, 0x9, 0xfffffffb, 0x8000, 0x6, 0x8001, 0x4, 0x5, 0xffffffff, 0x8, 0x7, 0x8000]}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:05 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14d0]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14d0]}}}) (async) 11:42:05 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @raw_data=[0x1, 0x9, 0xffffffb1, 0x6, 0x101, 0x89d, 0x2, 0xdea0, 0x1, 0x7, 0x1, 0x7ff, 0x70dbc38b, 0x0, 0x8, 0x1, 0x8000, 0x101, 0x1000, 0xba, 0x51719546, 0x9, 0xfffffffb, 0x8000, 0x6, 0x8001, 0x4, 0x5, 0xffffffff, 0x8, 0x7, 0x8000]}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:05 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000001c0)={@multicast2, @multicast1, 0x0, "6556ecb290a77fc888b31df26e0bb2d58c1e0ee90e84c8a9c0bfa14be72a4e53"}, 0x3c) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x1, 0x8, 0x41d6, @vifc_lcl_addr=@empty, @multicast1}, 0x10) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x5) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x3, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r2) r3 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r1, &(0x7f0000000140)="5eddbbfef883c660b4467d791d3b6c6e73af75ea24c1fe6ed3506ed83f071c4c7d6021d718b26a403414141f5b93aa281ed7991ce6e105ea51505bb73e287ca3b2e69ab3d35225c7a641737596cf4c69fb8da232414e1587e3deb086a2f00a3042f7fe74ad73554fe9a8c72f74ee8f0c729335826b063fe7a3ac1065b2c617", 0x7f, 0x3, 0x0, 0x2, r2}, &(0x7f0000000200)) ioctl$VIDIOC_G_TUNER(r3, 0xc054561d, &(0x7f0000000080)={0x40, "bbc47688c123910bb1e47e98ad5d862a8411dfbb32bb88e668eb7c14ef1600e2", 0x5, 0x402, 0x80, 0x3, 0x4, 0x4, 0xa, 0x101}) r4 = syz_open_dev$video(&(0x7f0000000240), 0x9, 0x8000) ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f0000000280)=0x100408) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000000)) ioctl$mixer_OSS_GETVERSION(r2, 0x80044d76, &(0x7f0000000100)) 11:42:05 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000000)=0x7) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000000)=0x7) (async) 11:42:05 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x2, 0x4, 0x1, "535479df024c38482a31d8f5d0024071d2e3baf2fb5e1fc1d3b8012cabb067f8", 0x32314d56}) 11:42:05 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000001c0)={@multicast2, @multicast1, 0x0, "6556ecb290a77fc888b31df26e0bb2d58c1e0ee90e84c8a9c0bfa14be72a4e53"}, 0x3c) (async) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x1, 0x8, 0x41d6, @vifc_lcl_addr=@empty, @multicast1}, 0x10) (async) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x5) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x3, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r2) r3 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) (async) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r1, &(0x7f0000000140)="5eddbbfef883c660b4467d791d3b6c6e73af75ea24c1fe6ed3506ed83f071c4c7d6021d718b26a403414141f5b93aa281ed7991ce6e105ea51505bb73e287ca3b2e69ab3d35225c7a641737596cf4c69fb8da232414e1587e3deb086a2f00a3042f7fe74ad73554fe9a8c72f74ee8f0c729335826b063fe7a3ac1065b2c617", 0x7f, 0x3, 0x0, 0x2, r2}, &(0x7f0000000200)) ioctl$VIDIOC_G_TUNER(r3, 0xc054561d, &(0x7f0000000080)={0x40, "bbc47688c123910bb1e47e98ad5d862a8411dfbb32bb88e668eb7c14ef1600e2", 0x5, 0x402, 0x80, 0x3, 0x4, 0x4, 0xa, 0x101}) r4 = syz_open_dev$video(&(0x7f0000000240), 0x9, 0x8000) ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f0000000280)=0x100408) (async) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000000)) ioctl$mixer_OSS_GETVERSION(r2, 0x80044d76, &(0x7f0000000100)) 11:42:05 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x3}}}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0x1855, 0x1014, 0x1}) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000100)={0xf000000, 0x0, 0x401, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9c090b, 0x8, '\x00', @string=&(0x7f0000000080)=0x1}}) 11:42:05 executing program 5: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pselect6(0x40, &(0x7f0000000000)={0x7, 0x3f, 0x8, 0x724, 0x3, 0x5, 0xffffffffffffffff, 0x80}, &(0x7f0000000080)={0xffff, 0x8000000000000001, 0x4, 0x668, 0x2, 0x9e3, 0x6, 0x1}, &(0x7f00000000c0)={0x9, 0xffffffffffffffe0, 0x10001, 0x101, 0x3, 0x7, 0x0, 0x3}, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)={&(0x7f0000000140)={[0x1f]}, 0x8}) 11:42:05 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14}, 0x48) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0x2, 0x2024}) 11:42:05 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14}, 0x48) (async, rerun: 32) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) (rerun: 32) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0x2, 0x2024}) 11:42:05 executing program 5: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pselect6(0x40, &(0x7f0000000000)={0x7, 0x3f, 0x8, 0x724, 0x3, 0x5, 0xffffffffffffffff, 0x80}, &(0x7f0000000080)={0xffff, 0x8000000000000001, 0x4, 0x668, 0x2, 0x9e3, 0x6, 0x1}, &(0x7f00000000c0)={0x9, 0xffffffffffffffe0, 0x10001, 0x101, 0x3, 0x7, 0x0, 0x3}, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)={&(0x7f0000000140)={[0x1f]}, 0x8}) 11:42:05 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000001c0)={@multicast2, @multicast1, 0x0, "6556ecb290a77fc888b31df26e0bb2d58c1e0ee90e84c8a9c0bfa14be72a4e53"}, 0x3c) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x1, 0x8, 0x41d6, @vifc_lcl_addr=@empty, @multicast1}, 0x10) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x5) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x3, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r2) r3 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r1, &(0x7f0000000140)="5eddbbfef883c660b4467d791d3b6c6e73af75ea24c1fe6ed3506ed83f071c4c7d6021d718b26a403414141f5b93aa281ed7991ce6e105ea51505bb73e287ca3b2e69ab3d35225c7a641737596cf4c69fb8da232414e1587e3deb086a2f00a3042f7fe74ad73554fe9a8c72f74ee8f0c729335826b063fe7a3ac1065b2c617", 0x7f, 0x3, 0x0, 0x2, r2}, &(0x7f0000000200)) ioctl$VIDIOC_G_TUNER(r3, 0xc054561d, &(0x7f0000000080)={0x40, "bbc47688c123910bb1e47e98ad5d862a8411dfbb32bb88e668eb7c14ef1600e2", 0x5, 0x402, 0x80, 0x3, 0x4, 0x4, 0xa, 0x101}) r4 = syz_open_dev$video(&(0x7f0000000240), 0x9, 0x8000) ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f0000000280)=0x100408) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000000)) ioctl$mixer_OSS_GETVERSION(r2, 0x80044d76, &(0x7f0000000100)) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000001c0)={@multicast2, @multicast1, 0x0, "6556ecb290a77fc888b31df26e0bb2d58c1e0ee90e84c8a9c0bfa14be72a4e53"}, 0x3c) (async) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x1, 0x8, 0x41d6, @vifc_lcl_addr=@empty, @multicast1}, 0x10) (async) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x5) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x3, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r2) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) (async) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r1, &(0x7f0000000140)="5eddbbfef883c660b4467d791d3b6c6e73af75ea24c1fe6ed3506ed83f071c4c7d6021d718b26a403414141f5b93aa281ed7991ce6e105ea51505bb73e287ca3b2e69ab3d35225c7a641737596cf4c69fb8da232414e1587e3deb086a2f00a3042f7fe74ad73554fe9a8c72f74ee8f0c729335826b063fe7a3ac1065b2c617", 0x7f, 0x3, 0x0, 0x2, r2}, &(0x7f0000000200)) (async) ioctl$VIDIOC_G_TUNER(r3, 0xc054561d, &(0x7f0000000080)={0x40, "bbc47688c123910bb1e47e98ad5d862a8411dfbb32bb88e668eb7c14ef1600e2", 0x5, 0x402, 0x80, 0x3, 0x4, 0x4, 0xa, 0x101}) (async) syz_open_dev$video(&(0x7f0000000240), 0x9, 0x8000) (async) ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f0000000280)=0x100408) (async) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000000)) (async) ioctl$mixer_OSS_GETVERSION(r2, 0x80044d76, &(0x7f0000000100)) (async) 11:42:05 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000000)=0x7) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000000)=0x7) (async) 11:42:05 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async, rerun: 64) r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) (rerun: 64) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x2, 0x4, 0x1, "535479df024c38482a31d8f5d0024071d2e3baf2fb5e1fc1d3b8012cabb067f8", 0x32314d56}) 11:42:05 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x3}}}) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0x1855, 0x1014, 0x1}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000100)={0xf000000, 0x0, 0x401, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9c090b, 0x8, '\x00', @string=&(0x7f0000000080)=0x1}}) 11:42:05 executing program 5: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) pselect6(0x40, &(0x7f0000000000)={0x7, 0x3f, 0x8, 0x724, 0x3, 0x5, 0xffffffffffffffff, 0x80}, &(0x7f0000000080)={0xffff, 0x8000000000000001, 0x4, 0x668, 0x2, 0x9e3, 0x6, 0x1}, &(0x7f00000000c0)={0x9, 0xffffffffffffffe0, 0x10001, 0x101, 0x3, 0x7, 0x0, 0x3}, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)={&(0x7f0000000140)={[0x1f]}, 0x8}) 11:42:05 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14}, 0x48) (rerun: 64) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0x2, 0x2024}) 11:42:05 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0xfffffeff, 0x1005}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x7, 0x80000001, 0x4, {0x5, @raw_data="a487e57b8ad37cd65d59e93b57d9d9a639e5d1ac5b28ed54cdf6360b64eaee6fee1c281befd450e81dd31721cd145221d4444b15eef2856d3d604445b2241f02b590d5aa2c99a60a2f78106fc79efa80656a23dc02ec2439ce27e78e7935b685356162ac73e4851bb22b1d60b1f792b73692497efcd2fb71ccfe794a34268e9c9b018e42e6f329202d472609287b7c068cd619260fd285a3e716f972c0d1b0eaa525b8c66b49606058b38b8fb0a616d03378944c2f3adcd7836ff15f57b65d950c22e524e927cf13"}, 0x10001}) 11:42:06 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r1, &(0x7f00000001c0)="3eadc4406852d137159e6b1b78413c4d"}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000080)="445c55d59a3e73c438d0f2111f222a09414d2a0032f062fb0cea4bd969f5eb01b72e45ce541d4fe85410ebab4989218ef117fae34c44c9da87c624052f21c95d147b858f99daf188f72087045939cbdd98e0104e7942211835f326aa6f6b881368facb318d6109b0b744998e056dbba927ca360902d878c51e63673da4bc7a60b2dc655ea794ac31", &(0x7f0000000000)=""/49, 0x4}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x58, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1f}]}, 0x58}, 0x1, 0x0, 0x0, 0x8}, 0x40000) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @pix={0x7ff, 0x55, 0x35315241, 0xe, 0x5, 0x35, 0x1, 0x80000000, 0x1, 0x4, 0x3, 0x6}}, 0x50}) 11:42:06 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x41, 0x2, 0x3ff, 0x20, 0x5, 0x7fffffff, 0xc}) 11:42:06 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0xfffffeff, 0x1005}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x7, 0x80000001, 0x4, {0x5, @raw_data="a487e57b8ad37cd65d59e93b57d9d9a639e5d1ac5b28ed54cdf6360b64eaee6fee1c281befd450e81dd31721cd145221d4444b15eef2856d3d604445b2241f02b590d5aa2c99a60a2f78106fc79efa80656a23dc02ec2439ce27e78e7935b685356162ac73e4851bb22b1d60b1f792b73692497efcd2fb71ccfe794a34268e9c9b018e42e6f329202d472609287b7c068cd619260fd285a3e716f972c0d1b0eaa525b8c66b49606058b38b8fb0a616d03378944c2f3adcd7836ff15f57b65d950c22e524e927cf13"}, 0x10001}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0xfffffeff, 0x1005}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (async) syz_open_dev$vivid(&(0x7f0000000080), 0x1, 0x2) (async) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x7, 0x80000001, 0x4, {0x5, @raw_data="a487e57b8ad37cd65d59e93b57d9d9a639e5d1ac5b28ed54cdf6360b64eaee6fee1c281befd450e81dd31721cd145221d4444b15eef2856d3d604445b2241f02b590d5aa2c99a60a2f78106fc79efa80656a23dc02ec2439ce27e78e7935b685356162ac73e4851bb22b1d60b1f792b73692497efcd2fb71ccfe794a34268e9c9b018e42e6f329202d472609287b7c068cd619260fd285a3e716f972c0d1b0eaa525b8c66b49606058b38b8fb0a616d03378944c2f3adcd7836ff15f57b65d950c22e524e927cf13"}, 0x10001}) (async) 11:42:06 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r1, &(0x7f00000001c0)="3eadc4406852d137159e6b1b78413c4d"}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000080)="445c55d59a3e73c438d0f2111f222a09414d2a0032f062fb0cea4bd969f5eb01b72e45ce541d4fe85410ebab4989218ef117fae34c44c9da87c624052f21c95d147b858f99daf188f72087045939cbdd98e0104e7942211835f326aa6f6b881368facb318d6109b0b744998e056dbba927ca360902d878c51e63673da4bc7a60b2dc655ea794ac31", &(0x7f0000000000)=""/49, 0x4}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x58, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1f}]}, 0x58}, 0x1, 0x0, 0x0, 0x8}, 0x40000) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @pix={0x7ff, 0x55, 0x35315241, 0xe, 0x5, 0x35, 0x1, 0x80000000, 0x1, 0x4, 0x3, 0x6}}, 0x50}) openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r1) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r1, &(0x7f00000001c0)="3eadc4406852d137159e6b1b78413c4d"}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000080)="445c55d59a3e73c438d0f2111f222a09414d2a0032f062fb0cea4bd969f5eb01b72e45ce541d4fe85410ebab4989218ef117fae34c44c9da87c624052f21c95d147b858f99daf188f72087045939cbdd98e0104e7942211835f326aa6f6b881368facb318d6109b0b744998e056dbba927ca360902d878c51e63673da4bc7a60b2dc655ea794ac31", &(0x7f0000000000)=""/49, 0x4}, 0x20) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x58, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1f}]}, 0x58}, 0x1, 0x0, 0x0, 0x8}, 0x40000) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @pix={0x7ff, 0x55, 0x35315241, 0xe, 0x5, 0x35, 0x1, 0x80000000, 0x1, 0x4, 0x3, 0x6}}, 0x50}) (async) 11:42:06 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:06 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x9, 0x7, '\x00', &(0x7f0000000000)=0xaf}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc]}}}) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f00000000c0)) 11:42:06 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x2, 0x4, 0x1, "535479df024c38482a31d8f5d0024071d2e3baf2fb5e1fc1d3b8012cabb067f8", 0x32314d56}) 11:42:06 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:06 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x41, 0x2, 0x3ff, 0x20, 0x5, 0x7fffffff, 0xc}) 11:42:06 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r1) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r1, &(0x7f00000001c0)="3eadc4406852d137159e6b1b78413c4d"}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000080)="445c55d59a3e73c438d0f2111f222a09414d2a0032f062fb0cea4bd969f5eb01b72e45ce541d4fe85410ebab4989218ef117fae34c44c9da87c624052f21c95d147b858f99daf188f72087045939cbdd98e0104e7942211835f326aa6f6b881368facb318d6109b0b744998e056dbba927ca360902d878c51e63673da4bc7a60b2dc655ea794ac31", &(0x7f0000000000)=""/49, 0x4}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x58, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1f}]}, 0x58}, 0x1, 0x0, 0x0, 0x8}, 0x40000) (async) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @pix={0x7ff, 0x55, 0x35315241, 0xe, 0x5, 0x35, 0x1, 0x80000000, 0x1, 0x4, 0x3, 0x6}}, 0x50}) 11:42:06 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x9, 0x7, '\x00', &(0x7f0000000000)=0xaf}) (async, rerun: 64) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc]}}}) (rerun: 64) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f00000000c0)) 11:42:06 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x41, 0x2, 0x3ff, 0x20, 0x5, 0x7fffffff, 0xc}) 11:42:06 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000100)={0xe45, [0x4, 0x9, 0x100, 0x1, 0xbb, 0x5, 0xa2e, 0x9, 0x0, 0x100, 0x2, 0x40, 0x4, 0x7, 0x401, 0x8, 0xfffe, 0xfff, 0x1000, 0x7, 0x3ff, 0x2, 0x2, 0x1, 0xffff, 0x8, 0x0, 0x3, 0x800, 0x0, 0xffff, 0x3, 0x59, 0x9, 0x3, 0x800, 0x73, 0xff, 0x9, 0x9, 0x2, 0x2, 0xf5, 0x912, 0x40, 0x5, 0xfff, 0x8], 0x3}) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x7fffffff, 0x8, '\x00', &(0x7f0000000000)=0x14}) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000000c0)={0x101, 0xfffffffa}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:06 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0xfffffeff, 0x1005}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x7, 0x80000001, 0x4, {0x5, @raw_data="a487e57b8ad37cd65d59e93b57d9d9a639e5d1ac5b28ed54cdf6360b64eaee6fee1c281befd450e81dd31721cd145221d4444b15eef2856d3d604445b2241f02b590d5aa2c99a60a2f78106fc79efa80656a23dc02ec2439ce27e78e7935b685356162ac73e4851bb22b1d60b1f792b73692497efcd2fb71ccfe794a34268e9c9b018e42e6f329202d472609287b7c068cd619260fd285a3e716f972c0d1b0eaa525b8c66b49606058b38b8fb0a616d03378944c2f3adcd7836ff15f57b65d950c22e524e927cf13"}, 0x10001}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0xfffffeff, 0x1005}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (async) syz_open_dev$vivid(&(0x7f0000000080), 0x1, 0x2) (async) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x7, 0x80000001, 0x4, {0x5, @raw_data="a487e57b8ad37cd65d59e93b57d9d9a639e5d1ac5b28ed54cdf6360b64eaee6fee1c281befd450e81dd31721cd145221d4444b15eef2856d3d604445b2241f02b590d5aa2c99a60a2f78106fc79efa80656a23dc02ec2439ce27e78e7935b685356162ac73e4851bb22b1d60b1f792b73692497efcd2fb71ccfe794a34268e9c9b018e42e6f329202d472609287b7c068cd619260fd285a3e716f972c0d1b0eaa525b8c66b49606058b38b8fb0a616d03378944c2f3adcd7836ff15f57b65d950c22e524e927cf13"}, 0x10001}) (async) 11:42:06 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000080)={0x5c62e59f, "ab061ee86fa2fa6dd99de8c1af3f485bda0c820a5d95da1e394f3cf9cfb07c58", 0x1, 0x0, 0x6, 0x4, 0x8}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) 11:42:06 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:06 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x400, 0x0, 0x2b, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 11:42:06 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000100)={0xe45, [0x4, 0x9, 0x100, 0x1, 0xbb, 0x5, 0xa2e, 0x9, 0x0, 0x100, 0x2, 0x40, 0x4, 0x7, 0x401, 0x8, 0xfffe, 0xfff, 0x1000, 0x7, 0x3ff, 0x2, 0x2, 0x1, 0xffff, 0x8, 0x0, 0x3, 0x800, 0x0, 0xffff, 0x3, 0x59, 0x9, 0x3, 0x800, 0x73, 0xff, 0x9, 0x9, 0x2, 0x2, 0xf5, 0x912, 0x40, 0x5, 0xfff, 0x8], 0x3}) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x7fffffff, 0x8, '\x00', &(0x7f0000000000)=0x14}) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000000c0)={0x101, 0xfffffffa}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000100)={0xe45, [0x4, 0x9, 0x100, 0x1, 0xbb, 0x5, 0xa2e, 0x9, 0x0, 0x100, 0x2, 0x40, 0x4, 0x7, 0x401, 0x8, 0xfffe, 0xfff, 0x1000, 0x7, 0x3ff, 0x2, 0x2, 0x1, 0xffff, 0x8, 0x0, 0x3, 0x800, 0x0, 0xffff, 0x3, 0x59, 0x9, 0x3, 0x800, 0x73, 0xff, 0x9, 0x9, 0x2, 0x2, 0xf5, 0x912, 0x40, 0x5, 0xfff, 0x8], 0x3}) (async) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x7fffffff, 0x8, '\x00', &(0x7f0000000000)=0x14}) (async) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000000c0)={0x101, 0xfffffffa}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) 11:42:06 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 64) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000080)={0x5c62e59f, "ab061ee86fa2fa6dd99de8c1af3f485bda0c820a5d95da1e394f3cf9cfb07c58", 0x1, 0x0, 0x6, 0x4, 0x8}) (async, rerun: 64) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) (rerun: 64) 11:42:06 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x2f, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x4364, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000000)={0x5, "e8f6339d106c2c853a38dce364242054076a536e2c43db115424f2e95a14ce92", 0x1}) r2 = syz_open_dev$vivid(&(0x7f0000000180), 0x1, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x121400, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r3, &(0x7f0000000200)="3070a9d209c7ed2b679e00b892249d"}, 0x20) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000080)={0x40000000, 0x8, "a5c9a26ee63b3a8f4ce40238d76faf47740d6357fc7c99b68594c7c0836b5e86", 0x7, 0x2, 0x9, 0x80, 0x301, 0x9, 0x6, 0x8, [0xf8, 0x1, 0x3ff, 0x2cc2]}) 11:42:06 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) 11:42:06 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x400, 0x0, 0x2b, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 11:42:07 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x9, 0x7, '\x00', &(0x7f0000000000)=0xaf}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc]}}}) (async) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f00000000c0)) 11:42:07 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x2f, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x4364, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000000)={0x5, "e8f6339d106c2c853a38dce364242054076a536e2c43db115424f2e95a14ce92", 0x1}) (async) r2 = syz_open_dev$vivid(&(0x7f0000000180), 0x1, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x121400, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r3, &(0x7f0000000200)="3070a9d209c7ed2b679e00b892249d"}, 0x20) (async) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000080)={0x40000000, 0x8, "a5c9a26ee63b3a8f4ce40238d76faf47740d6357fc7c99b68594c7c0836b5e86", 0x7, 0x2, 0x9, 0x80, 0x301, 0x9, 0x6, 0x8, [0xf8, 0x1, 0x3ff, 0x2cc2]}) 11:42:07 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x400, 0x0, 0x2b, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 11:42:07 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) 11:42:07 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000100)={0xe45, [0x4, 0x9, 0x100, 0x1, 0xbb, 0x5, 0xa2e, 0x9, 0x0, 0x100, 0x2, 0x40, 0x4, 0x7, 0x401, 0x8, 0xfffe, 0xfff, 0x1000, 0x7, 0x3ff, 0x2, 0x2, 0x1, 0xffff, 0x8, 0x0, 0x3, 0x800, 0x0, 0xffff, 0x3, 0x59, 0x9, 0x3, 0x800, 0x73, 0xff, 0x9, 0x9, 0x2, 0x2, 0xf5, 0x912, 0x40, 0x5, 0xfff, 0x8], 0x3}) (async) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x7fffffff, 0x8, '\x00', &(0x7f0000000000)=0x14}) (async, rerun: 32) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000000c0)={0x101, 0xfffffffa}) (async, rerun: 32) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:07 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000080)={0x5c62e59f, "ab061ee86fa2fa6dd99de8c1af3f485bda0c820a5d95da1e394f3cf9cfb07c58", 0x1, 0x0, 0x6, 0x4, 0x8}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) 11:42:07 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r1 = syz_open_dev$video(&(0x7f0000000000), 0x4, 0x8100) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000000c0)={0x9, "1b1918263c1eebcddb51d7a978d4f19742b15f92c2ee443ea68deb9aa8d241d8", 0x1, 0x10001, 0x4, 0x0, 0x2}) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000080)={0x1, 0x0, {0x7, 0x6, 0x8, 0x2}}) 11:42:07 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (async) 11:42:07 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x2f, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x4364, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async, rerun: 64) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000000)={0x5, "e8f6339d106c2c853a38dce364242054076a536e2c43db115424f2e95a14ce92", 0x1}) (async, rerun: 64) r2 = syz_open_dev$vivid(&(0x7f0000000180), 0x1, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x121400, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r3, &(0x7f0000000200)="3070a9d209c7ed2b679e00b892249d"}, 0x20) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000080)={0x40000000, 0x8, "a5c9a26ee63b3a8f4ce40238d76faf47740d6357fc7c99b68594c7c0836b5e86", 0x7, 0x2, 0x9, 0x80, 0x301, 0x9, 0x6, 0x8, [0xf8, 0x1, 0x3ff, 0x2cc2]}) 11:42:07 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x102) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000080)=0x3) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4bfa, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r1) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x20001, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0xc, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:07 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000100)={0x20, "c8abb8da288b902a126f7d7c50bf33f572dda7df3f26fa762f98225e225a908c", 0x1, 0x2, 0x98, 0x8, 0x4, 0x2, 0x3f, 0x7}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000080)={0x315d, "70c4eeb76de5a201c6ff2985d0a7854a3fc53af546a97105ac302275d42a28df", 0x2, 0x400, 0x39, 0x0, 0x4, 0x1, 0x80000000, 0x6}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f]}}}) 11:42:07 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xd22, 0x7f, 0x1, {0x3, @pix={0x7f, 0x1, 0x504060c, 0x8, 0x80, 0x6, 0xa, 0x1000, 0x0, 0x7, 0x1, 0x4}}}) 11:42:07 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x102) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000080)=0x3) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4bfa, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r1) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x20001, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0xc, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) (async) syz_open_dev$video(&(0x7f0000000000), 0x75, 0x102) (async) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000080)=0x3) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$GIO_UNIMAP(r3, 0x4bfa, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r1) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x20001, 0x0) (async) ioctl$TCFLSH(r1, 0x540b, 0x2) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0xc, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) 11:42:07 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async, rerun: 64) r1 = syz_open_dev$video(&(0x7f0000000000), 0x4, 0x8100) (async, rerun: 64) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) (async) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000000c0)={0x9, "1b1918263c1eebcddb51d7a978d4f19742b15f92c2ee443ea68deb9aa8d241d8", 0x1, 0x10001, 0x4, 0x0, 0x2}) (async) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000080)={0x1, 0x0, {0x7, 0x6, 0x8, 0x2}}) 11:42:07 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000080)={0x0, @bt={0xfffffab5, 0x9, 0x1, 0x2, 0x7, 0x800, 0x1, 0x3, 0x0, 0x10000, 0xf02a, 0x400, 0x2, 0xff, 0x16, 0x3b, {0xf19, 0x8}, 0x7, 0x20}}) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000000)={0x1, "1dde806e9e63ea7102aa9e901f6960503d539144551d0886c1119678a9e22e1a", 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0xffffbfff, 0xfffffffc, 0x1, {0x9, @sdr={0x56595559, 0x8}}}) 11:42:07 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000100)={0x20, "c8abb8da288b902a126f7d7c50bf33f572dda7df3f26fa762f98225e225a908c", 0x1, 0x2, 0x98, 0x8, 0x4, 0x2, 0x3f, 0x7}) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000080)={0x315d, "70c4eeb76de5a201c6ff2985d0a7854a3fc53af546a97105ac302275d42a28df", 0x2, 0x400, 0x39, 0x0, 0x4, 0x1, 0x80000000, 0x6}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f]}}}) 11:42:07 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000200)={0x8, {0x6, 0xfff, 0x1309, 0x9}}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000100)={0xf31, 0xfffffffe, 0x4, {0x4, @pix_mp={0xffffff9c, 0x3ff, 0x36314d4e, 0x1, 0x2, [{0x3, 0xa1f5}, {0x800, 0x5b}, {0x53, 0x400}, {0x1000, 0x80000000}, {0x1edd, 0x7f}, {0x7, 0x9}, {0xa8ac, 0x3}, {0xfff, 0xffffffff}], 0x9, 0x7f, 0x1, 0x1, 0x4}}, 0x3}) r3 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080)) 11:42:07 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000080)={0x0, @bt={0xfffffab5, 0x9, 0x1, 0x2, 0x7, 0x800, 0x1, 0x3, 0x0, 0x10000, 0xf02a, 0x400, 0x2, 0xff, 0x16, 0x3b, {0xf19, 0x8}, 0x7, 0x20}}) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000000)={0x1, "1dde806e9e63ea7102aa9e901f6960503d539144551d0886c1119678a9e22e1a", 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0xffffbfff, 0xfffffffc, 0x1, {0x9, @sdr={0x56595559, 0x8}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000080)={0x0, @bt={0xfffffab5, 0x9, 0x1, 0x2, 0x7, 0x800, 0x1, 0x3, 0x0, 0x10000, 0xf02a, 0x400, 0x2, 0xff, 0x16, 0x3b, {0xf19, 0x8}, 0x7, 0x20}}) (async) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000000)={0x1, "1dde806e9e63ea7102aa9e901f6960503d539144551d0886c1119678a9e22e1a", 0x1}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0xffffbfff, 0xfffffffc, 0x1, {0x9, @sdr={0x56595559, 0x8}}}) (async) 11:42:07 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xd22, 0x7f, 0x1, {0x3, @pix={0x7f, 0x1, 0x504060c, 0x8, 0x80, 0x6, 0xa, 0x1000, 0x0, 0x7, 0x1, 0x4}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xd22, 0x7f, 0x1, {0x3, @pix={0x7f, 0x1, 0x504060c, 0x8, 0x80, 0x6, 0xa, 0x1000, 0x0, 0x7, 0x1, 0x4}}}) (async) 11:42:07 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000100)={0x20, "c8abb8da288b902a126f7d7c50bf33f572dda7df3f26fa762f98225e225a908c", 0x1, 0x2, 0x98, 0x8, 0x4, 0x2, 0x3f, 0x7}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000080)={0x315d, "70c4eeb76de5a201c6ff2985d0a7854a3fc53af546a97105ac302275d42a28df", 0x2, 0x400, 0x39, 0x0, 0x4, 0x1, 0x80000000, 0x6}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f]}}}) 11:42:07 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x102) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000080)=0x3) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4bfa, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r1) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x20001, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0xc, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) (async) syz_open_dev$video(&(0x7f0000000000), 0x75, 0x102) (async) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000080)=0x3) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$GIO_UNIMAP(r3, 0x4bfa, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r1) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x20001, 0x0) (async) ioctl$TCFLSH(r1, 0x540b, 0x2) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0xc, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) 11:42:07 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000200)={0x8, {0x6, 0xfff, 0x1309, 0x9}}) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000100)={0xf31, 0xfffffffe, 0x4, {0x4, @pix_mp={0xffffff9c, 0x3ff, 0x36314d4e, 0x1, 0x2, [{0x3, 0xa1f5}, {0x800, 0x5b}, {0x53, 0x400}, {0x1000, 0x80000000}, {0x1edd, 0x7f}, {0x7, 0x9}, {0xa8ac, 0x3}, {0xfff, 0xffffffff}], 0x9, 0x7f, 0x1, 0x1, 0x4}}, 0x3}) (async) r3 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080)) 11:42:07 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000080)={0x0, @bt={0xfffffab5, 0x9, 0x1, 0x2, 0x7, 0x800, 0x1, 0x3, 0x0, 0x10000, 0xf02a, 0x400, 0x2, 0xff, 0x16, 0x3b, {0xf19, 0x8}, 0x7, 0x20}}) (async) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000000)={0x1, "1dde806e9e63ea7102aa9e901f6960503d539144551d0886c1119678a9e22e1a", 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0xffffbfff, 0xfffffffc, 0x1, {0x9, @sdr={0x56595559, 0x8}}}) 11:42:07 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x522}}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000080)={0x8, [0x7ff, 0x0, 0xca29, 0x4, 0x7ff, 0x1, 0x5, 0x1, 0x0, 0x4, 0xef4, 0xc6, 0x9d, 0x8, 0x1000, 0x0, 0x0, 0xfde, 0x8, 0x1, 0x8, 0x3, 0x7, 0x1, 0x1, 0x9d8, 0x7fff, 0x8001, 0x7, 0x81, 0x5, 0x92, 0xfff7, 0x8, 0xfff9, 0x80, 0x2, 0x40, 0x3, 0xff, 0x5a63, 0x2, 0x20, 0xffff, 0x69, 0x2ef, 0xf000, 0x4d], 0x9}) 11:42:07 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000140)={0x6, "79de205eabcc08e7ac1c291f2829c17602d7296dd5956fe214c7f952bd58caea", 0x5, 0x1020, 0x7fffffff, 0x21, 0x10, 0x2, 0x4, 0xa1}) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f00000001c0)={0x0, 0x3}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}, 0x8000000}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000080)={0xd1ce, 0x0, '\x00', {0x0, @bt={0x8, 0x77, 0x1, 0x3, 0x9, 0x2, 0x1, 0x24, 0x4, 0xfff, 0x80, 0x101, 0x101, 0x6, 0x0, 0xc, {0xf9}, 0x14, 0x7f}}}) 11:42:07 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r1 = syz_open_dev$video(&(0x7f0000000000), 0x4, 0x8100) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000000c0)={0x9, "1b1918263c1eebcddb51d7a978d4f19742b15f92c2ee443ea68deb9aa8d241d8", 0x1, 0x10001, 0x4, 0x0, 0x2}) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000080)={0x1, 0x0, {0x7, 0x6, 0x8, 0x2}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) syz_open_dev$video(&(0x7f0000000000), 0x4, 0x8100) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) (async) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) (async) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000000c0)={0x9, "1b1918263c1eebcddb51d7a978d4f19742b15f92c2ee443ea68deb9aa8d241d8", 0x1, 0x10001, 0x4, 0x0, 0x2}) (async) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000080)={0x1, 0x0, {0x7, 0x6, 0x8, 0x2}}) (async) 11:42:07 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000200)={0x8, {0x6, 0xfff, 0x1309, 0x9}}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000100)={0xf31, 0xfffffffe, 0x4, {0x4, @pix_mp={0xffffff9c, 0x3ff, 0x36314d4e, 0x1, 0x2, [{0x3, 0xa1f5}, {0x800, 0x5b}, {0x53, 0x400}, {0x1000, 0x80000000}, {0x1edd, 0x7f}, {0x7, 0x9}, {0xa8ac, 0x3}, {0xfff, 0xffffffff}], 0x9, 0x7f, 0x1, 0x1, 0x4}}, 0x3}) r3 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080)) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000200)={0x8, {0x6, 0xfff, 0x1309, 0x9}}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000100)={0xf31, 0xfffffffe, 0x4, {0x4, @pix_mp={0xffffff9c, 0x3ff, 0x36314d4e, 0x1, 0x2, [{0x3, 0xa1f5}, {0x800, 0x5b}, {0x53, 0x400}, {0x1000, 0x80000000}, {0x1edd, 0x7f}, {0x7, 0x9}, {0xa8ac, 0x3}, {0xfff, 0xffffffff}], 0x9, 0x7f, 0x1, 0x1, 0x4}}, 0x3}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080)) (async) 11:42:07 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x100000001, 0x204800) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000080)={0x3, "415720e625e6c8538a8d195b6a6886a71c614389e304e19f1fb28f64e8e87827", 0x2, 0x10, 0x9, 0x8, 0x8, 0x2, 0x9, 0x767d23d9}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94d9, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8008, 0x0, 0x0, 0xfffc]}}, 0x2}) 11:42:07 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000140)={0x6, "79de205eabcc08e7ac1c291f2829c17602d7296dd5956fe214c7f952bd58caea", 0x5, 0x1020, 0x7fffffff, 0x21, 0x10, 0x2, 0x4, 0xa1}) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f00000001c0)={0x0, 0x3}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}, 0x8000000}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000080)={0xd1ce, 0x0, '\x00', {0x0, @bt={0x8, 0x77, 0x1, 0x3, 0x9, 0x2, 0x1, 0x24, 0x4, 0xfff, 0x80, 0x101, 0x101, 0x6, 0x0, 0xc, {0xf9}, 0x14, 0x7f}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000140)={0x6, "79de205eabcc08e7ac1c291f2829c17602d7296dd5956fe214c7f952bd58caea", 0x5, 0x1020, 0x7fffffff, 0x21, 0x10, 0x2, 0x4, 0xa1}) (async) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f00000001c0)={0x0, 0x3}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}, 0x8000000}) (async) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000080)={0xd1ce, 0x0, '\x00', {0x0, @bt={0x8, 0x77, 0x1, 0x3, 0x9, 0x2, 0x1, 0x24, 0x4, 0xfff, 0x80, 0x101, 0x101, 0x6, 0x0, 0xc, {0xf9}, 0x14, 0x7f}}}) (async) 11:42:07 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xd22, 0x7f, 0x1, {0x3, @pix={0x7f, 0x1, 0x504060c, 0x8, 0x80, 0x6, 0xa, 0x1000, 0x0, 0x7, 0x1, 0x4}}}) 11:42:07 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x522}}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000080)={0x8, [0x7ff, 0x0, 0xca29, 0x4, 0x7ff, 0x1, 0x5, 0x1, 0x0, 0x4, 0xef4, 0xc6, 0x9d, 0x8, 0x1000, 0x0, 0x0, 0xfde, 0x8, 0x1, 0x8, 0x3, 0x7, 0x1, 0x1, 0x9d8, 0x7fff, 0x8001, 0x7, 0x81, 0x5, 0x92, 0xfff7, 0x8, 0xfff9, 0x80, 0x2, 0x40, 0x3, 0xff, 0x5a63, 0x2, 0x20, 0xffff, 0x69, 0x2ef, 0xf000, 0x4d], 0x9}) 11:42:08 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000180)={0x0, 0x3, 0x201b}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000001c0)={0x1, 0x0, 0x2}) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000080)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x1f]}}}) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000000)=0xb700) 11:42:08 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = syz_open_dev$video(&(0x7f0000000000), 0x100000001, 0x204800) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000080)={0x3, "415720e625e6c8538a8d195b6a6886a71c614389e304e19f1fb28f64e8e87827", 0x2, 0x10, 0x9, 0x8, 0x8, 0x2, 0x9, 0x767d23d9}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94d9, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8008, 0x0, 0x0, 0xfffc]}}, 0x2}) 11:42:08 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000000)=0x1f) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:08 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x522}}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000080)={0x8, [0x7ff, 0x0, 0xca29, 0x4, 0x7ff, 0x1, 0x5, 0x1, 0x0, 0x4, 0xef4, 0xc6, 0x9d, 0x8, 0x1000, 0x0, 0x0, 0xfde, 0x8, 0x1, 0x8, 0x3, 0x7, 0x1, 0x1, 0x9d8, 0x7fff, 0x8001, 0x7, 0x81, 0x5, 0x92, 0xfff7, 0x8, 0xfff9, 0x80, 0x2, 0x40, 0x3, 0xff, 0x5a63, 0x2, 0x20, 0xffff, 0x69, 0x2ef, 0xf000, 0x4d], 0x9}) 11:42:08 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000140), 0x2, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000000)={0x9, 0x5, 0x1, 0x20, 0xbf, 0xfffffb6c}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_EDID(r2, 0xc0285629, &(0x7f0000000100)={0x0, 0x6, 0x7fff, '\x00', &(0x7f00000000c0)=0x1}) 11:42:08 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x100000001, 0x204800) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000080)={0x3, "415720e625e6c8538a8d195b6a6886a71c614389e304e19f1fb28f64e8e87827", 0x2, 0x10, 0x9, 0x8, 0x8, 0x2, 0x9, 0x767d23d9}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94d9, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8008, 0x0, 0x0, 0xfffc]}}, 0x2}) 11:42:08 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000140)={0x6, "79de205eabcc08e7ac1c291f2829c17602d7296dd5956fe214c7f952bd58caea", 0x5, 0x1020, 0x7fffffff, 0x21, 0x10, 0x2, 0x4, 0xa1}) (async) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f00000001c0)={0x0, 0x3}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}, 0x8000000}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000080)={0xd1ce, 0x0, '\x00', {0x0, @bt={0x8, 0x77, 0x1, 0x3, 0x9, 0x2, 0x1, 0x24, 0x4, 0xfff, 0x80, 0x101, 0x101, 0x6, 0x0, 0xc, {0xf9}, 0x14, 0x7f}}}) 11:42:08 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}) 11:42:08 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000180)={0x0, 0x3, 0x201b}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000001c0)={0x1, 0x0, 0x2}) (async, rerun: 64) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 64) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000080)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x1f]}}}) (async) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000000)=0xb700) 11:42:08 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000000)=0x1f) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:08 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000140), 0x2, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000000)={0x9, 0x5, 0x1, 0x20, 0xbf, 0xfffffb6c}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_EDID(r2, 0xc0285629, &(0x7f0000000100)={0x0, 0x6, 0x7fff, '\x00', &(0x7f00000000c0)=0x1}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000140), 0x2, 0x2) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000000)={0x9, 0x5, 0x1, 0x20, 0xbf, 0xfffffb6c}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$VIDIOC_S_EDID(r2, 0xc0285629, &(0x7f0000000100)={0x0, 0x6, 0x7fff, '\x00', &(0x7f00000000c0)=0x1}) (async) 11:42:08 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0xc, @sliced={0x0, [0x7b, 0x0, 0x92db, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x2, 0xfffd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}}}) 11:42:08 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000000)=0x1f) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000000)=0x1f) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) 11:42:08 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}) (async) 11:42:08 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x3, 0x3432564e, 0x2, @stepwise={0x9, 0xbce, 0x1, 0x0, 0x1, 0x1}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_S_EDID(r2, 0xc0285629, &(0x7f00000000c0)={0x0, 0x80000001, 0x0, '\x00', &(0x7f0000000080)}) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000180)={0xfffffff, 0x101, 0xfffffffa, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x457556bb99c3a5ac, 0x100, '\x00', @p_u16=&(0x7f0000000100)}}) 11:42:08 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0xc, @sliced={0x0, [0x7b, 0x0, 0x92db, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x2, 0xfffd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}}}) 11:42:08 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}) (async) 11:42:08 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000180)={0x0, 0x3, 0x201b}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000001c0)={0x1, 0x0, 0x2}) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000080)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x1f]}}}) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000000)=0xb700) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000180)={0x0, 0x3, 0x201b}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000001c0)={0x1, 0x0, 0x2}) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000080)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x1f]}}}) (async) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000000)=0xb700) (async) 11:42:08 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0xc, @sliced={0x0, [0x7b, 0x0, 0x92db, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x2, 0xfffd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}}}) 11:42:08 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000140), 0x2, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000000)={0x9, 0x5, 0x1, 0x20, 0xbf, 0xfffffb6c}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_EDID(r2, 0xc0285629, &(0x7f0000000100)={0x0, 0x6, 0x7fff, '\x00', &(0x7f00000000c0)=0x1}) 11:42:08 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x3, 0x3432564e, 0x2, @stepwise={0x9, 0xbce, 0x1, 0x0, 0x1, 0x1}}) (async, rerun: 64) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (rerun: 64) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_S_EDID(r2, 0xc0285629, &(0x7f00000000c0)={0x0, 0x80000001, 0x0, '\x00', &(0x7f0000000080)}) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000180)={0xfffffff, 0x101, 0xfffffffa, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x457556bb99c3a5ac, 0x100, '\x00', @p_u16=&(0x7f0000000100)}}) 11:42:08 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000080)='syz0\x00') r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000100)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r2) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x4) ioctl$VIDIOC_G_AUDIO(0xffffffffffffffff, 0x80345621, &(0x7f00000000c0)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5]}}}) 11:42:08 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x8, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x2, 0x4, {0x3, 0x3, 0x7, 0x4}}) 11:42:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20004090) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:08 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x250, 0x9, 0x3, {0xa, @pix={0x9, 0x4, 0x584e4f53, 0x4, 0x3, 0xc9, 0x5, 0x2, 0x0, 0x8, 0x2, 0x6}}, 0x8}) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f0000000180)={{0x1, @addr=0x49}, "a6dc025a985fb12e10b533af977f182b25c275eaa8ca320fe069832fb01133ce"}) 11:42:08 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000080)='syz0\x00') r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000100)) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r2) (async) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x4) (async) ioctl$VIDIOC_G_AUDIO(0xffffffffffffffff, 0x80345621, &(0x7f00000000c0)) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5]}}}) 11:42:08 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x3, 0x3432564e, 0x2, @stepwise={0x9, 0xbce, 0x1, 0x0, 0x1, 0x1}}) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_S_EDID(r2, 0xc0285629, &(0x7f00000000c0)={0x0, 0x80000001, 0x0, '\x00', &(0x7f0000000080)}) (async) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000180)={0xfffffff, 0x101, 0xfffffffa, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x457556bb99c3a5ac, 0x100, '\x00', @p_u16=&(0x7f0000000100)}}) 11:42:08 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000000)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:08 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 32) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (rerun: 32) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000080)='syz0\x00') r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000100)) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r2) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x4) (async) ioctl$VIDIOC_G_AUDIO(0xffffffffffffffff, 0x80345621, &(0x7f00000000c0)) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5]}}}) 11:42:08 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x8, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x2, 0x4, {0x3, 0x3, 0x7, 0x4}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x8, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x2, 0x4, {0x3, 0x3, 0x7, 0x4}}) (async) 11:42:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20004090) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:09 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x250, 0x9, 0x3, {0xa, @pix={0x9, 0x4, 0x584e4f53, 0x4, 0x3, 0xc9, 0x5, 0x2, 0x0, 0x8, 0x2, 0x6}}, 0x8}) (async) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f0000000180)={{0x1, @addr=0x49}, "a6dc025a985fb12e10b533af977f182b25c275eaa8ca320fe069832fb01133ce"}) 11:42:09 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000000)={0x9, 0x5, 0x80}) 11:42:09 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x7) 11:42:09 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000000)) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:09 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20004090) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:09 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000000)) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:09 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000000)={0x9, 0x5, 0x80}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000000)={0x9, 0x5, 0x80}) (async) 11:42:09 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x250, 0x9, 0x3, {0xa, @pix={0x9, 0x4, 0x584e4f53, 0x4, 0x3, 0xc9, 0x5, 0x2, 0x0, 0x8, 0x2, 0x6}}, 0x8}) (async) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f0000000180)={{0x1, @addr=0x49}, "a6dc025a985fb12e10b533af977f182b25c275eaa8ca320fe069832fb01133ce"}) 11:42:09 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x8, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x2, 0x4, {0x3, 0x3, 0x7, 0x4}}) 11:42:09 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x7) 11:42:09 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2800, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000180)={0x9b0000, 0x9, 0x7, r2, 0x0, &(0x7f0000000140)={0x990a7e, 0x200, '\x00', @string=&(0x7f0000000100)}}) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000000)={0x71b6, "95864ab2fedcc4c125c074bf1db3397448666d23169d2b18e8c7ce313ac8c267", 0x1, 0x1}) r3 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000080)={0x1, "4982cf75b85cb90da1cbe31495bccadc5b1e66cac8b0d190a26ae3e50e758faa", 0x1}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1ff, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}}}) 11:42:09 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}}) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000000)={0x9, 0x5, 0x80}) 11:42:09 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f00000000c0)={0x0, 0x0, {0x1f, 0x912, 0x6, 0x7}}) r3 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_AUDIO(r3, 0x80345621, &(0x7f0000000080)) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0xb0400, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000180)={0xa20000, 0x6, 0x4, r4, 0x0, &(0x7f0000000140)={0x9a0920, 0x5, '\x00', @ptr=0x8f85}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x2, 0x0, 0x0, 0xff, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) 11:42:09 executing program 1: ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000000)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0xc0081, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x8) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @vbi={0x8, 0x100, 0x2, 0x34424752, [0x86a, 0x80000000], [0x87, 0x3], 0x1}}}) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @bt={0xab5, 0x1000, 0x401, 0x0, 0x6, 0x9, 0x16, 0xf}}) 11:42:09 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x7) 11:42:10 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x80000000, 0x4, 0x3a57fd1646bbceb0, {0xc, @pix_mp={0x7, 0x1, 0x30385056, 0x1, 0x0, [{0xe4e, 0x8}, {0x1000}, {0x72d85626, 0x81}, {0xffffffff, 0x4}, {0x8, 0xfffffffc}, {0x2, 0x49}, {0x1, 0x6}, {0x5, 0x10000}], 0x3f, 0x2, 0x8, 0x1, 0x2}}}) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000000)={0x2, 0x7}) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000200)={0x0, 0xffff, 0x8, '\x00', &(0x7f00000001c0)=0x4}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x3) r2 = syz_open_dev$vivid(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000240)={0x9, @raw_data="2e283029c49b713fdd3751a083b29ed90bb2e86b7da79d8b66469cbd98e9e57bc054dcb06c1ec61b73d3a91acc60d41766aa0c8e368c9d93d77c74dbc2612ce4c1ec99f0674e8f475345b0df9015fbfd515c3ee255f2c3961c6028085c938dfdffffffffffffff692e0b5dbded406b3867687028895fb96bf0ca978d6ad3257f4438af9a016ef29cfc701ad5d41e6c4502d07027defbc6979a09b4c5554423a3be130400000000000000a71865281180136876000000000000000020000000f2c800"}) 11:42:11 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x80000000, 0x4, 0x3a57fd1646bbceb0, {0xc, @pix_mp={0x7, 0x1, 0x30385056, 0x1, 0x0, [{0xe4e, 0x8}, {0x1000}, {0x72d85626, 0x81}, {0xffffffff, 0x4}, {0x8, 0xfffffffc}, {0x2, 0x49}, {0x1, 0x6}, {0x5, 0x10000}], 0x3f, 0x2, 0x8, 0x1, 0x2}}}) (async) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000000)={0x2, 0x7}) (async) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000200)={0x0, 0xffff, 0x8, '\x00', &(0x7f00000001c0)=0x4}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x3) (async) r2 = syz_open_dev$vivid(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000240)={0x9, @raw_data="2e283029c49b713fdd3751a083b29ed90bb2e86b7da79d8b66469cbd98e9e57bc054dcb06c1ec61b73d3a91acc60d41766aa0c8e368c9d93d77c74dbc2612ce4c1ec99f0674e8f475345b0df9015fbfd515c3ee255f2c3961c6028085c938dfdffffffffffffff692e0b5dbded406b3867687028895fb96bf0ca978d6ad3257f4438af9a016ef29cfc701ad5d41e6c4502d07027defbc6979a09b4c5554423a3be130400000000000000a71865281180136876000000000000000020000000f2c800"}) 11:42:12 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x80000000, 0x4, 0x3a57fd1646bbceb0, {0xc, @pix_mp={0x7, 0x1, 0x30385056, 0x1, 0x0, [{0xe4e, 0x8}, {0x1000}, {0x72d85626, 0x81}, {0xffffffff, 0x4}, {0x8, 0xfffffffc}, {0x2, 0x49}, {0x1, 0x6}, {0x5, 0x10000}], 0x3f, 0x2, 0x8, 0x1, 0x2}}}) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000000)={0x2, 0x7}) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000200)={0x0, 0xffff, 0x8, '\x00', &(0x7f00000001c0)=0x4}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x3) r2 = syz_open_dev$vivid(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000240)={0x9, @raw_data="2e283029c49b713fdd3751a083b29ed90bb2e86b7da79d8b66469cbd98e9e57bc054dcb06c1ec61b73d3a91acc60d41766aa0c8e368c9d93d77c74dbc2612ce4c1ec99f0674e8f475345b0df9015fbfd515c3ee255f2c3961c6028085c938dfdffffffffffffff692e0b5dbded406b3867687028895fb96bf0ca978d6ad3257f4438af9a016ef29cfc701ad5d41e6c4502d07027defbc6979a09b4c5554423a3be130400000000000000a71865281180136876000000000000000020000000f2c800"}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x80000000, 0x4, 0x3a57fd1646bbceb0, {0xc, @pix_mp={0x7, 0x1, 0x30385056, 0x1, 0x0, [{0xe4e, 0x8}, {0x1000}, {0x72d85626, 0x81}, {0xffffffff, 0x4}, {0x8, 0xfffffffc}, {0x2, 0x49}, {0x1, 0x6}, {0x5, 0x10000}], 0x3f, 0x2, 0x8, 0x1, 0x2}}}) (async) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000000)={0x2, 0x7}) (async) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000200)={0x0, 0xffff, 0x8, '\x00', &(0x7f00000001c0)=0x4}) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x3) (async) syz_open_dev$vivid(&(0x7f00000000c0), 0x0, 0x2) (async) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000240)={0x9, @raw_data="2e283029c49b713fdd3751a083b29ed90bb2e86b7da79d8b66469cbd98e9e57bc054dcb06c1ec61b73d3a91acc60d41766aa0c8e368c9d93d77c74dbc2612ce4c1ec99f0674e8f475345b0df9015fbfd515c3ee255f2c3961c6028085c938dfdffffffffffffff692e0b5dbded406b3867687028895fb96bf0ca978d6ad3257f4438af9a016ef29cfc701ad5d41e6c4502d07027defbc6979a09b4c5554423a3be130400000000000000a71865281180136876000000000000000020000000f2c800"}) (async) 11:42:12 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}}) 11:42:13 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}}) (async) [ 2145.475844] oom_reaper: reaped process 991 (syz-executor.1), now anon-rss:0kB, file-rss:14336kB, shmem-rss:8kB [ 2145.514138] syz-executor.4 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000 [ 2145.531716] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2145.537350] CPU: 1 PID: 1034 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 2145.545150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2145.554499] Call Trace: [ 2145.557093] dump_stack+0x1fc/0x2ef [ 2145.560725] dump_header+0x15d/0xc3f [ 2145.564439] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2145.569539] ? ___ratelimit+0x319/0x590 [ 2145.573514] oom_kill_process.cold+0x10/0x692 [ 2145.578013] ? check_preemption_disabled+0x41/0x280 [ 2145.583041] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2145.588402] out_of_memory+0x1072/0x1390 [ 2145.592466] ? oom_killer_disable+0x270/0x270 [ 2145.596963] ? mutex_trylock+0x15f/0x1a0 [ 2145.601025] __alloc_pages_nodemask+0x23a2/0x2890 [ 2145.605873] ? find_get_entry+0x4cd/0x8a0 [ 2145.610029] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2145.614899] alloc_pages_current+0x193/0x2a0 [ 2145.619302] filemap_fault+0x146e/0x2180 [ 2145.623373] ext4_filemap_fault+0x84/0xb0 [ 2145.627520] __do_fault+0x10b/0x4b0 [ 2145.631142] ? do_raw_spin_unlock+0x171/0x230 [ 2145.635635] __handle_mm_fault+0x273b/0x41c0 [ 2145.640041] ? debug_object_free+0x1cc/0x380 [ 2145.644440] ? vm_insert_page+0x9c0/0x9c0 [ 2145.648576] ? check_preemption_disabled+0x41/0x280 [ 2145.653577] handle_mm_fault+0x436/0xb10 [ 2145.657633] __do_page_fault+0x68e/0xd60 [ 2145.661685] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2145.666679] ? spurious_fault+0x840/0x840 [ 2145.670808] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2145.675632] ? page_fault+0x8/0x30 [ 2145.679149] page_fault+0x1e/0x30 [ 2145.682580] RIP: 0033:0x7fcde0084361 [ 2145.686273] Code: Bad RIP value. [ 2145.689614] RSP: 002b:00007ffce1c346f0 EFLAGS: 00010293 [ 2145.694954] RAX: 0000000000000000 RBX: 00007fcde017ff80 RCX: 00007fcde0084361 [ 2145.702202] RDX: 00007ffce1c34730 RSI: 0000000000000000 RDI: 0000000000000000 [ 2145.709448] RBP: 00007fcde0181980 R08: 0000000000000000 R09: 000002266645731e [ 2145.716700] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000020bda8 [ 2145.723948] R13: 00007fcddfbd5480 R14: 00007fcde0180120 R15: 0000000000000002 [ 2145.735161] Mem-Info: [ 2145.737733] active_anon:18261 inactive_anon:12939 isolated_anon:0 [ 2145.737733] active_file:52 inactive_file:13 isolated_file:0 [ 2145.737733] unevictable:0 dirty:16 writeback:0 unstable:0 [ 2145.737733] slab_reclaimable:15350 slab_unreclaimable:124561 [ 2145.737733] mapped:22220 shmem:13432 pagetables:650 bounce:0 [ 2145.737733] free:13856 free_pcp:157 free_cma:0 [ 2145.741558] syz-executor.1: vmalloc: allocation failure, allocated 1709924352 of 2147487744 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2145.776064] Node 0 active_anon:71208kB inactive_anon:43548kB active_file:108kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87196kB dirty:48kB writeback:0kB shmem:45512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 24576kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2145.796853] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2145.825038] CPU: 0 PID: 991 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2145.832768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2145.840902] Node 1 active_anon:1836kB inactive_anon:8208kB active_file:100kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1684kB dirty:16kB writeback:0kB shmem:8216kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2145.842115] Call Trace: [ 2145.871742] dump_stack+0x1fc/0x2ef [ 2145.875379] warn_alloc.cold+0x7b/0x18f [ 2145.879364] ? zone_watermark_ok_safe+0x260/0x260 [ 2145.884213] ? policy_node+0x14/0x140 [ 2145.888017] ? __sanitizer_cov_trace_pc+0x27/0x50 [ 2145.889111] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2145.892862] __vmalloc_area_node+0x4fd/0x780 [ 2145.923350] ? __vmalloc_node_range+0x180/0x180 [ 2145.928017] ? _raw_spin_unlock+0x29/0x40 [ 2145.932163] ? __get_vm_area_node+0x2e2/0x3a0 [ 2145.933039] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2145.936656] __vmalloc_node_range+0xed/0x180 [ 2145.936673] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2145.936687] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2145.936699] vmalloc_user+0x70/0xe0 [ 2145.936714] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2145.936728] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2145.936747] __vb2_queue_alloc+0x472/0xe60 [ 2145.944894] Node 0 DMA32 free:17704kB min:35996kB low:44992kB high:53988kB active_anon:71208kB inactive_anon:43548kB active_file:68kB inactive_file:48kB unevictable:0kB writepending:48kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7744kB pagetables:2308kB bounce:0kB free_pcp:376kB local_pcp:96kB free_cma:0kB [ 2145.946146] vb2_core_create_bufs+0x273/0x7e0 [ 2145.946162] ? __vb2_queue_free+0x870/0x870 [ 2145.946180] ? pi_state_update_owner+0x450/0x450 [ 2145.946196] ? _raw_spin_unlock+0x29/0x40 [ 2145.946208] ? __mutex_lock+0x368/0x1190 [ 2145.946226] vb2_create_bufs+0x332/0x620 [ 2145.946243] ? mark_held_locks+0xf0/0xf0 [ 2145.946255] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2145.946271] ? futex_wait_queue_me+0x404/0x5e0 [ 2145.960543] lowmem_reserve[]: 0 0 1 1 1 [ 2145.963828] ? pi_state_update_owner+0x450/0x450 [ 2145.963844] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2145.963860] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2145.963879] v4l_create_bufs+0xb2/0x160 [ 2145.963897] __video_do_ioctl+0x49a/0xcd0 [ 2145.963919] ? v4l_querycap+0x340/0x340 [ 2145.963935] ? __might_fault+0x192/0x1d0 [ 2145.963953] ? v4l_querycap+0x340/0x340 [ 2145.963969] video_usercopy+0x13f/0xfa0 [ 2145.963989] ? v4l_enumstd+0x60/0x60 [ 2145.964003] ? do_futex+0x171/0x1880 [ 2145.964019] ? mark_held_locks+0xf0/0xf0 [ 2145.964038] ? debug_check_no_obj_freed+0x201/0x490 [ 2145.964061] ? video_usercopy+0xfa0/0xfa0 [ 2145.964073] v4l2_ioctl+0x147/0x1a0 [ 2145.964086] ? video_devdata+0xa0/0xa0 [ 2145.964102] do_vfs_ioctl+0xcdb/0x12e0 [ 2145.964116] ? lock_downgrade+0x720/0x720 [ 2145.964133] ? check_preemption_disabled+0x41/0x280 [ 2145.964148] ? ioctl_preallocate+0x200/0x200 [ 2145.964166] ? __fget+0x356/0x510 [ 2145.964183] ? do_dup2+0x450/0x450 [ 2145.964198] ? __se_sys_futex+0x298/0x3b0 [ 2145.964220] ksys_ioctl+0x9b/0xc0 [ 2145.964237] __x64_sys_ioctl+0x6f/0xb0 [ 2145.964251] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2145.964265] do_syscall_64+0xf9/0x620 [ 2145.964284] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2145.964296] RIP: 0033:0x7fa651442639 [ 2145.964310] Code: Bad RIP value. [ 2145.964318] RSP: 002b:00007fa64f9b5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2145.964331] RAX: ffffffffffffffda RBX: 00007fa651562f80 RCX: 00007fa651442639 [ 2145.964339] RDX: 0000000020000380 RSI: 00000000c100565c RDI: 0000000000000004 [ 2145.964353] RBP: 00007fa65149dae9 R08: 0000000000000000 R09: 0000000000000000 [ 2145.964361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2145.964369] R13: 00007ffdac6e7cbf R14: 00007fa64f9b5300 R15: 0000000000022000 [ 2145.971024] Mem-Info: [ 2145.981380] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2146.014277] active_anon:18261 inactive_anon:12939 isolated_anon:0 [ 2146.014277] active_file:25 inactive_file:33 isolated_file:0 [ 2146.014277] unevictable:0 dirty:3 writeback:0 unstable:0 [ 2146.014277] slab_reclaimable:15350 slab_unreclaimable:124561 [ 2146.014277] mapped:22175 shmem:13432 pagetables:650 bounce:0 [ 2146.014277] free:13856 free_pcp:157 free_cma:0 [ 2146.024802] lowmem_reserve[]: 0 0 0 0 0 [ 2146.039761] Node 0 active_anon:71116kB inactive_anon:43548kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87060kB dirty:0kB writeback:0kB shmem:45512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 22528kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2146.055151] Node 1 Normal free:27148kB min:53876kB low:67344kB high:80812kB active_anon:1832kB inactive_anon:8208kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:288kB pagetables:292kB bounce:0kB free_pcp:252kB local_pcp:4kB free_cma:0kB [ 2146.064260] Node 1 active_anon:1832kB inactive_anon:8208kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1544kB dirty:0kB writeback:0kB shmem:8216kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2146.088735] lowmem_reserve[]: 0 0 0 0 0 [ 2146.099128] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2146.108564] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 2146.112645] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2146.120996] Node 0 DMA32: 1876*4kB (UME) 805*8kB (UME) 163*16kB (UME) 36*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17704kB [ 2146.134611] Node 0 DMA32 free:17704kB min:35996kB low:44992kB high:53988kB active_anon:71116kB inactive_anon:43548kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7744kB pagetables:2304kB bounce:0kB free_pcp:376kB local_pcp:280kB free_cma:0kB [ 2146.143602] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2146.149651] lowmem_reserve[]: 0 0 1 1 1 [ 2146.152509] Node 1 Normal: 121*4kB (UME) 99*8kB (UM) 77*16kB (UME) 52*32kB (UME) 37*64kB (UME) 17*128kB (UME) 10*256kB (ME) 1*512kB (M) 1*1024kB (M) 1*2048kB (M) 3*4096kB (U) = 27148kB [ 2146.170013] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2146.170045] lowmem_reserve[]: 0 0 0 0 0 [ 2146.170064] Node 1 Normal free:27148kB min:53876kB low:67344kB high:80812kB active_anon:1832kB inactive_anon:8208kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:288kB pagetables:292kB bounce:0kB free_pcp:252kB local_pcp:248kB free_cma:0kB [ 2146.170097] lowmem_reserve[]: 0 0 0 0 0 [ 2146.170118] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 2146.170184] Node 0 DMA32: 1876*4kB (UME) 805*8kB (UME) 163*16kB (UME) 36*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17704kB [ 2146.170247] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2146.170300] Node 1 Normal: 121*4kB (UME) 99*8kB (UM) 77*16kB (UME) 52*32kB (UME) 37*64kB (UME) 17*128kB (UME) 10*256kB (ME) 1*512kB (M) 1*1024kB (M) 1*2048kB (M) 3*4096kB (U) = 27148kB [ 2146.170398] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2146.170409] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2146.170420] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2146.170430] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2146.170436] 13463 total pagecache pages [ 2146.170449] 0 pages in swap cache [ 2146.170458] Swap cache stats: add 0, delete 0, find 0/0 [ 2146.170464] Free swap = 0kB [ 2146.170468] Total swap = 0kB [ 2146.170476] 2097051 pages RAM [ 2146.170482] 0 pages HighMem/MovableOnly [ 2146.170487] 369649 pages reserved [ 2146.170492] 0 pages cma reserved [ 2146.683542] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2146.692467] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2146.701567] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2146.710486] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2146.719124] 13463 total pagecache pages [ 2146.723099] 0 pages in swap cache [ 2146.726603] Swap cache stats: add 0, delete 0, find 0/0 [ 2146.731958] Free swap = 0kB [ 2146.734964] Total swap = 0kB [ 2146.738103] 2097051 pages RAM [ 2146.741200] 0 pages HighMem/MovableOnly [ 2146.745220] 369649 pages reserved [ 2146.748660] 0 pages cma reserved [ 2146.752014] Unreclaimable slab info: [ 2146.755792] Name Used Total [ 2146.761328] pid_2 126KB 220KB [ 2146.766894] batadv_tl_cache 4KB 12KB [ 2146.772273] TIPC 10KB 22KB [ 2146.777787] SCTPv6 14KB 24KB [ 2146.784923] DCCPv6 17KB 22KB [ 2146.790352] DCCP 16KB 21KB [ 2146.795953] RXRPC 11KB 13KB [ 2146.801315] rxrpc_call_jar 78KB 86KB [ 2146.813773] bridge_fdb_cache 10KB 11KB [ 2146.819223] fib6_nodes 155KB 184KB [ 2146.824589] ip6_dst_cache 87KB 318KB [ 2146.836580] RAWv6 70KB 81KB [ 2146.841965] UDPv6 26KB 30KB [ 2146.850893] TCPv6 33KB 36KB [ 2146.859877] nf_conntrack 7KB 7KB [ 2146.868925] t10_alua_lu_gp_cache 0KB 3KB [ 2146.874558] sd_ext_cdb 0KB 7KB [ 2146.883503] scsi_sense_cache 1056KB 1060KB [ 2146.893820] virtio_scsi_cmd 16KB 16KB [ 2146.902690] sgpool-128 8KB 8KB [ 2146.911487] sgpool-64 4KB 12KB [ 2146.920424] sgpool-32 2KB 15KB [ 2146.929411] sgpool-16 1KB 7KB [ 2146.934785] sgpool-8 0KB 7KB [ 2146.943707] mqueue_inode_cache 10KB 15KB [ 2146.952462] bio_post_read_ctx 14KB 15KB [ 2146.961388] bio-2 14KB 15KB [ 2146.970327] jfs_mp 7KB 7KB [ 2146.979081] cifs_small_rq 15KB 16KB [ 2146.984458] cifs_request 67KB 67KB [ 2146.994996] cifs_mpx_ids 0KB 7KB [ 2147.003842] nfs_commit_data 3KB 14KB [ 2147.012627] nfs_write_data 34KB 44KB [ 2147.021668] ext4_system_zone 1KB 7KB [ 2147.030725] bio-1 1KB 7KB [ 2147.039506] pid_namespace 2KB 7KB [ 2147.044894] rpc_buffers 17KB 25KB [ 2147.053814] rpc_tasks 2KB 7KB [ 2147.062875] UNIX 95KB 127KB [ 2147.071707] ip_mrt_cache 15KB 24KB [ 2147.083757] tcp_bind_bucket 1KB 4KB [ 2147.094294] ip_fib_trie 23KB 27KB [ 2147.110035] ip_fib_alias 111KB 130KB [ 2147.118838] ip_dst_cache 4KB 16KB [ 2147.124222] RAW 61KB 97KB [ 2147.140021] UDP 25KB 47KB [ 2147.148819] TCP 14KB 22KB [ 2147.154373] hugetlbfs_inode_cache 3KB 15KB [ 2147.170679] fscache_cookie_jar 1KB 7KB [ 2147.176220] eventpoll_pwq 30KB 51KB [ 2147.181593] eventpoll_epi 62KB 66KB [ 2147.207230] inotify_inode_mark 42KB 70KB [ 2147.217186] request_queue 199KB 199KB [ 2147.222786] blkdev_requests 1KB 3KB [ 2147.228838] blkdev_ioc 14KB 19KB [ 2147.234315] bio-0 154KB 210KB [ 2147.239932] biovec-max 1270KB 1336KB [ 2147.245450] biovec-64 139KB 181KB [ 2147.251226] biovec-16 16KB 18KB [ 2147.256767] bio_integrity_payload 1KB 8KB [ 2147.262689] khugepaged_mm_slot 19KB 34KB [ 2147.268849] uid_cache 0KB 4KB [ 2147.274327] dmaengine-unmap-2 0KB 3KB [ 2147.279861] skbuff_fclone_cache 165KB 243KB [ 2147.285519] skbuff_head_cache 1573KB 3045KB [ 2147.290989] configfs_dir_cache 3KB 7KB [ 2147.298963] file_lock_cache 186KB 293KB [ 2147.304461] file_lock_ctx 9KB 11KB [ 2147.309977] fsnotify_mark_connector 25KB 47KB [ 2147.316031] net_namespace 52KB 52KB [ 2147.321502] shmem_inode_cache 8663KB 8711KB [ 2147.327047] task_delay_info 283KB 450KB [ 2147.333017] taskstats 124KB 202KB [ 2147.339894] proc_dir_entry 698KB 731KB [ 2147.345398] pde_opener 17KB 38KB [ 2147.350868] seq_file 300KB 492KB [ 2147.356398] sigqueue 56KB 63KB [ 2147.361878] kernfs_node_cache 18493KB 18510KB [ 2147.367488] mnt_cache 173KB 184KB [ 2147.372967] filp 5841KB 7297KB [ 2147.378502] names_cache 158078KB 158078KB [ 2147.383973] iint_cache 20KB 43KB [ 2147.390122] key_jar 4KB 7KB [ 2147.396083] uts_namespace 2KB 7KB [ 2147.403798] nsproxy 3KB 7KB [ 2147.409752] vm_area_struct 4683KB 4795KB [ 2147.418823] mm_struct 768KB 923KB [ 2147.425452] fs_cache 170KB 360KB [ 2147.430907] files_cache 621KB 723KB [ 2147.436528] signal_cache 1206KB 1516KB [ 2147.443031] sighand_cache 575KB 617KB [ 2147.449561] task_struct 8989KB 9045KB [ 2147.456024] cred_jar 1103KB 1920KB [ 2147.462766] anon_vma_chain 1609KB 1673KB [ 2147.468577] anon_vma 185KB 281KB [ 2147.474086] pid 77KB 232KB [ 2147.479888] Acpi-Operand 156KB 202KB [ 2147.485594] Acpi-ParseExt 9KB 11KB [ 2147.491027] Acpi-Parse 41KB 47KB [ 2147.496832] Acpi-State 52KB 63KB [ 2147.503974] Acpi-Namespace 21KB 27KB [ 2147.509830] numa_policy 0KB 3KB [ 2147.515547] debug_objects_cache 1219KB 1603KB [ 2147.521189] trace_event_file 297KB 298KB [ 2147.526938] ftrace_event_field 398KB 405KB [ 2147.532494] pool_workqueue 121KB 128KB [ 2147.538337] page->ptl 835KB 992KB [ 2147.543851] kmalloc-2097152 2050KB 2050KB [ 2147.552650] kmalloc-524288 2056KB 2056KB [ 2147.563685] kmalloc-262144 1290KB 1290KB [ 2147.574716] kmalloc-131072 650KB 650KB [ 2147.587038] kmalloc-65536 1848KB 1914KB [ 2147.599914] kmalloc-32768 1650KB 1815KB [ 2147.612834] kmalloc-16384 990KB 990KB [ 2147.624018] kmalloc-8192 4042KB 4108KB [ 2147.630012] kmalloc-4096 20128KB 20187KB [ 2147.641460] kmalloc-2048 11955KB 12813KB [ 2147.647416] kmalloc-1024 5739KB 7953KB [ 2147.652788] kmalloc-512 6525KB 8895KB [ 2147.666397] kmalloc-256 4360KB 4781KB [ 2147.671787] kmalloc-128 938KB 1382KB [ 2147.681407] kmalloc-96 2871KB 4000KB [ 2147.688939] kmalloc-64 2826KB 3748KB [ 2147.694313] kmalloc-32 1804KB 2445KB [ 2147.704079] kmalloc-192 1554KB 2304KB [ 2147.712353] kmem_cache 177KB 180KB [ 2147.721602] Out of memory (oom_kill_allocating_task): Kill process 1034 (syz-executor.4) score 0 or sacrifice child [ 2147.734540] Killed process 1034 (syz-executor.4) total-vm:57100kB, anon-rss:2508kB, file-rss:13188kB, shmem-rss:0kB [ 2147.751307] oom_reaper: reaped process 1034 (syz-executor.4), now anon-rss:0kB, file-rss:14336kB, shmem-rss:4kB 11:42:20 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2800, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000180)={0x9b0000, 0x9, 0x7, r2, 0x0, &(0x7f0000000140)={0x990a7e, 0x200, '\x00', @string=&(0x7f0000000100)}}) (async) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000000)={0x71b6, "95864ab2fedcc4c125c074bf1db3397448666d23169d2b18e8c7ce313ac8c267", 0x1, 0x1}) r3 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000080)={0x1, "4982cf75b85cb90da1cbe31495bccadc5b1e66cac8b0d190a26ae3e50e758faa", 0x1}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1ff, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}}}) 11:42:20 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}}) 11:42:20 executing program 4: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x2b]}}}) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0x58, &(0x7f00000001c0)}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000080)="f4ae4115f12b244bb3478d23588d1926a1b204e25aee68450b671ab52a0fef6c29c9a51bd8480839632fb3d066f7f14cf3aec27a16ecafdb600343037244ffc7f690f3a83e0ad92b4c271df79da0f1700668d58080c482004a4ee9614a6bbcbb882af4d6344dec9bac75801567c9c99ccca79c0b615c8c96", &(0x7f0000000100)=""/81}, 0x20) 11:42:20 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000080)={0x0, 0x3, 0x6, '\x00', &(0x7f0000000000)=0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) 11:42:20 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f00000000c0)={0x0, 0x0, {0x1f, 0x912, 0x6, 0x7}}) (async) r3 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_G_AUDIO(r3, 0x80345621, &(0x7f0000000080)) (async) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0xb0400, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000180)={0xa20000, 0x6, 0x4, r4, 0x0, &(0x7f0000000140)={0x9a0920, 0x5, '\x00', @ptr=0x8f85}}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x2, 0x0, 0x0, 0xff, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) 11:42:20 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2800, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000180)={0x9b0000, 0x9, 0x7, r2, 0x0, &(0x7f0000000140)={0x990a7e, 0x200, '\x00', @string=&(0x7f0000000100)}}) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000000)={0x71b6, "95864ab2fedcc4c125c074bf1db3397448666d23169d2b18e8c7ce313ac8c267", 0x1, 0x1}) r3 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000080)={0x1, "4982cf75b85cb90da1cbe31495bccadc5b1e66cac8b0d190a26ae3e50e758faa", 0x1}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1ff, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}}}) 11:42:20 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x4, {0xc, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x5]}}}) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000100)={0x8c14, 0x1a, @value=0x1f}) r1 = syz_open_dev$video(&(0x7f0000000000), 0xfffffffffffffffe, 0x0) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000080)={0xbed, "3b24211115ab1bfcbf9987f65b146b345ac58700a8e0c01288e8b8b7ea446943", 0x1, 0x486, 0x2, 0x2a, 0x10, 0x1, 0x6, 0xfffffffe}) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000140)={0x80000000, 0x2, "d87a2adbc1eb5c8d65aec8bd7e45a59132e7b3c6f158acca4f99b25a94d6ca3d", 0x9, 0x401, 0x1, 0x101, 0x9, 0x9bd, 0x0, 0x7ff, [0xa0, 0x40, 0x20, 0x2]}) 11:42:20 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f00000000c0)={0x0, 0x0, {0x1f, 0x912, 0x6, 0x7}}) (async) r3 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_G_AUDIO(r3, 0x80345621, &(0x7f0000000080)) (async) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0xb0400, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000180)={0xa20000, 0x6, 0x4, r4, 0x0, &(0x7f0000000140)={0x9a0920, 0x5, '\x00', @ptr=0x8f85}}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x2, 0x0, 0x0, 0xff, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) 11:42:20 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x4, {0xc, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x5]}}}) (async) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000100)={0x8c14, 0x1a, @value=0x1f}) (async) r1 = syz_open_dev$video(&(0x7f0000000000), 0xfffffffffffffffe, 0x0) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000080)={0xbed, "3b24211115ab1bfcbf9987f65b146b345ac58700a8e0c01288e8b8b7ea446943", 0x1, 0x486, 0x2, 0x2a, 0x10, 0x1, 0x6, 0xfffffffe}) (async) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000140)={0x80000000, 0x2, "d87a2adbc1eb5c8d65aec8bd7e45a59132e7b3c6f158acca4f99b25a94d6ca3d", 0x9, 0x401, 0x1, 0x101, 0x9, 0x9bd, 0x0, 0x7ff, [0xa0, 0x40, 0x20, 0x2]}) 11:42:20 executing program 4: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x2b]}}}) (async, rerun: 32) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) (rerun: 32) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0x58, &(0x7f00000001c0)}, 0x10) (async, rerun: 64) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000080)="f4ae4115f12b244bb3478d23588d1926a1b204e25aee68450b671ab52a0fef6c29c9a51bd8480839632fb3d066f7f14cf3aec27a16ecafdb600343037244ffc7f690f3a83e0ad92b4c271df79da0f1700668d58080c482004a4ee9614a6bbcbb882af4d6344dec9bac75801567c9c99ccca79c0b615c8c96", &(0x7f0000000100)=""/81}, 0x20) (rerun: 64) 11:42:20 executing program 1: ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000000)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0xc0081, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x8) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @vbi={0x8, 0x100, 0x2, 0x34424752, [0x86a, 0x80000000], [0x87, 0x3], 0x1}}}) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @bt={0xab5, 0x1000, 0x401, 0x0, 0x6, 0x9, 0x16, 0xf}}) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000000)) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0xc0081, 0x0) (async) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x8) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @vbi={0x8, 0x100, 0x2, 0x34424752, [0x86a, 0x80000000], [0x87, 0x3], 0x1}}}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @bt={0xab5, 0x1000, 0x401, 0x0, 0x6, 0x9, 0x16, 0xf}}) (async) 11:42:20 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000080)={0x0, 0x3, 0x6, '\x00', &(0x7f0000000000)=0x1}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) 11:42:20 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x102, 0x6, {0x4, 0x0, 0x100000, 0x4}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000080)=0x8) 11:42:20 executing program 4: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x2b]}}}) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0x58, &(0x7f00000001c0)}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000080)="f4ae4115f12b244bb3478d23588d1926a1b204e25aee68450b671ab52a0fef6c29c9a51bd8480839632fb3d066f7f14cf3aec27a16ecafdb600343037244ffc7f690f3a83e0ad92b4c271df79da0f1700668d58080c482004a4ee9614a6bbcbb882af4d6344dec9bac75801567c9c99ccca79c0b615c8c96", &(0x7f0000000100)=""/81}, 0x20) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x2b]}}}) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r1) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0x58, &(0x7f00000001c0)}, 0x10) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000080)="f4ae4115f12b244bb3478d23588d1926a1b204e25aee68450b671ab52a0fef6c29c9a51bd8480839632fb3d066f7f14cf3aec27a16ecafdb600343037244ffc7f690f3a83e0ad92b4c271df79da0f1700668d58080c482004a4ee9614a6bbcbb882af4d6344dec9bac75801567c9c99ccca79c0b615c8c96", &(0x7f0000000100)=""/81}, 0x20) (async) 11:42:20 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x12200, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x1, r0, &(0x7f0000000080)="d686680c2e710ea874cb971888aeb63e980046de190abf28cabf70ba88eead7882919b203bb282f0db135338539047de65de288b1a678c5b2282e0b7c957a3dceac7b474176218bfd55c4b82e457da0ec4e7efd69bbeef9cceefb97352470f5bf57b9df4f4bcf7f053755185f963b992239fd8fec60283bcea758118caf647ca8b953500af980d3f4f69ede3362f49492a13d4626c61", 0x96, 0x3, 0x0, 0x2, r1}, &(0x7f00000001c0)) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000000)=0x850) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:21 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000080)={0x0, 0x3, 0x6, '\x00', &(0x7f0000000000)=0x1}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) 11:42:21 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x102, 0x6, {0x4, 0x0, 0x100000, 0x4}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) (async) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000080)=0x8) 11:42:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x12200, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x1, r0, &(0x7f0000000080)="d686680c2e710ea874cb971888aeb63e980046de190abf28cabf70ba88eead7882919b203bb282f0db135338539047de65de288b1a678c5b2282e0b7c957a3dceac7b474176218bfd55c4b82e457da0ec4e7efd69bbeef9cceefb97352470f5bf57b9df4f4bcf7f053755185f963b992239fd8fec60283bcea758118caf647ca8b953500af980d3f4f69ede3362f49492a13d4626c61", 0x96, 0x3, 0x0, 0x2, r1}, &(0x7f00000001c0)) (async) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000000)=0x850) (async) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) [ 2156.159569] oom_reaper: reaped process 1088 (syz-executor.1), now anon-rss:0kB, file-rss:14336kB, shmem-rss:4kB [ 2156.194451] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2156.206911] systemd-journal cpuset=/ mems_allowed=0-1 [ 2156.212127] CPU: 1 PID: 29562 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 2156.220086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2156.229519] Call Trace: [ 2156.232132] dump_stack+0x1fc/0x2ef [ 2156.235759] dump_header+0x15d/0xc3f [ 2156.239464] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2156.244550] ? ___ratelimit+0x319/0x590 [ 2156.248507] oom_kill_process.cold+0x10/0x692 [ 2156.252984] ? check_preemption_disabled+0x41/0x280 [ 2156.257983] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2156.263236] out_of_memory+0x1072/0x1390 [ 2156.267278] ? oom_killer_disable+0x270/0x270 [ 2156.271757] ? mutex_trylock+0x15f/0x1a0 [ 2156.275797] __alloc_pages_nodemask+0x23a2/0x2890 [ 2156.280675] ? find_get_entry+0x4cd/0x8a0 [ 2156.284812] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2156.289645] alloc_pages_current+0x193/0x2a0 [ 2156.294041] filemap_fault+0x146e/0x2180 [ 2156.298184] ext4_filemap_fault+0x84/0xb0 [ 2156.302311] __do_fault+0x10b/0x4b0 [ 2156.305934] __handle_mm_fault+0x273b/0x41c0 [ 2156.310332] ? vm_insert_page+0x9c0/0x9c0 [ 2156.314469] ? check_preemption_disabled+0x41/0x280 [ 2156.319467] handle_mm_fault+0x436/0xb10 [ 2156.323511] __do_page_fault+0x68e/0xd60 [ 2156.327555] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2156.332548] ? spurious_fault+0x840/0x840 [ 2156.336701] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2156.341523] ? page_fault+0x8/0x30 [ 2156.345055] page_fault+0x1e/0x30 [ 2156.348491] RIP: 0033:0x7f6074d252e3 [ 2156.352193] Code: Bad RIP value. [ 2156.355539] RSP: 002b:00007ffdfe4f2488 EFLAGS: 00010246 [ 2156.360884] RAX: 0000000000000001 RBX: 000055651ec8e1e0 RCX: 00007f6074d252e3 [ 2156.368133] RDX: 0000000000000013 RSI: 00007ffdfe4f2490 RDI: 000000000000000c [ 2156.375381] RBP: 00007ffdfe4f2680 R08: 00007ffdfe571000 R09: 0000022708c24498 [ 2156.382626] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdfe4f2490 [ 2156.389871] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005ede56e494a2d [ 2156.400011] Mem-Info: [ 2156.402444] active_anon:16645 inactive_anon:12939 isolated_anon:0 [ 2156.402444] active_file:16 inactive_file:10 isolated_file:0 [ 2156.402444] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2156.402444] slab_reclaimable:15214 slab_unreclaimable:124140 [ 2156.402444] mapped:22182 shmem:13432 pagetables:602 bounce:0 [ 2156.402444] free:13856 free_pcp:909 free_cma:0 [ 2156.436063] syz-executor.1: vmalloc: allocation failure, allocated 1735852032 of 2147487744 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2156.442154] Node 0 active_anon:64816kB inactive_anon:43544kB active_file:48kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87060kB dirty:0kB writeback:0kB shmem:45508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2156.449937] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2156.482920] CPU: 0 PID: 1088 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2156.485574] Node 1 active_anon:1764kB inactive_anon:8212kB active_file:16kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1668kB dirty:0kB writeback:0kB shmem:8220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2156.490735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2156.525441] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2156.526851] Call Trace: [ 2156.555524] dump_stack+0x1fc/0x2ef [ 2156.559156] warn_alloc.cold+0x7b/0x18f [ 2156.560858] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2156.563127] ? zone_watermark_ok_safe+0x260/0x260 [ 2156.568956] Node 0 DMA32 free:17892kB min:35996kB low:44992kB high:53988kB active_anon:64816kB inactive_anon:43544kB active_file:48kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7648kB pagetables:2180kB bounce:0kB free_pcp:1728kB local_pcp:1480kB free_cma:0kB [ 2156.572944] ? rcu_nmi_exit+0xb3/0x180 [ 2156.605874] __vmalloc_area_node+0x4fd/0x780 [ 2156.609797] lowmem_reserve[]: 0 0 1 1 1 [ 2156.610280] ? __vmalloc_node_range+0x180/0x180 [ 2156.614280] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2156.618875] ? _raw_spin_unlock+0x29/0x40 [ 2156.648838] ? __get_vm_area_node+0x2e2/0x3a0 [ 2156.652878] lowmem_reserve[]: 0 0 0 0 0 [ 2156.653329] __vmalloc_node_range+0xed/0x180 [ 2156.657317] Node 1 Normal free:26656kB min:53876kB low:67344kB high:80812kB active_anon:1764kB inactive_anon:8212kB active_file:16kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:228kB bounce:0kB free_pcp:1908kB local_pcp:400kB free_cma:0kB [ 2156.661669] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2156.694571] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2156.698002] lowmem_reserve[]: 0 0 0 0 0 [ 2156.699929] vmalloc_user+0x70/0xe0 [ 2156.703870] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 2156.707489] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2156.724945] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2156.728466] Node 0 DMA32: 1801*4kB (UME) 796*8kB (UME) 192*16kB (UME) 39*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17892kB [ 2156.729085] __vb2_queue_alloc+0x472/0xe60 [ 2156.743570] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2156.746992] vb2_core_create_bufs+0x273/0x7e0 [ 2156.747007] ? __vb2_queue_free+0x870/0x870 [ 2156.747026] ? pi_state_update_owner+0x450/0x450 [ 2156.747041] ? __mutex_lock+0x368/0x1190 [ 2156.747057] vb2_create_bufs+0x332/0x620 [ 2156.747078] ? mark_held_locks+0xf0/0xf0 [ 2156.765873] Node 1 Normal: 116*4kB (ME) 118*8kB (M) 84*16kB (ME) 61*32kB (UME) 45*64kB (UME) 27*128kB (ME) 3*256kB (ME) 1*512kB (M) 2*1024kB (UM) 0*2048kB 3*4096kB (U) = 26656kB [ 2156.766850] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2156.771577] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2156.775617] ? futex_wait_queue_me+0x404/0x5e0 [ 2156.775630] ? pi_state_update_owner+0x450/0x450 [ 2156.775643] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2156.775658] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2156.775679] v4l_create_bufs+0xb2/0x160 [ 2156.775695] __video_do_ioctl+0x49a/0xcd0 [ 2156.775715] ? v4l_querycap+0x340/0x340 [ 2156.783420] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2156.783793] ? __might_fault+0x192/0x1d0 [ 2156.813854] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2156.818182] ? v4l_querycap+0x340/0x340 [ 2156.818196] video_usercopy+0x13f/0xfa0 [ 2156.818216] ? v4l_enumstd+0x60/0x60 [ 2156.818230] ? do_futex+0x171/0x1880 [ 2156.818245] ? mark_held_locks+0xf0/0xf0 [ 2156.818261] ? debug_check_no_obj_freed+0x201/0x490 [ 2156.818281] ? video_usercopy+0xfa0/0xfa0 [ 2156.833892] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2156.837214] v4l2_ioctl+0x147/0x1a0 [ 2156.837227] ? video_devdata+0xa0/0xa0 [ 2156.837242] do_vfs_ioctl+0xcdb/0x12e0 [ 2156.837258] ? lock_downgrade+0x720/0x720 [ 2156.837273] ? check_preemption_disabled+0x41/0x280 [ 2156.837286] ? ioctl_preallocate+0x200/0x200 [ 2156.841409] 13458 total pagecache pages [ 2156.845369] ? __fget+0x356/0x510 [ 2156.845384] ? do_dup2+0x450/0x450 [ 2156.845399] ? __se_sys_futex+0x298/0x3b0 [ 2156.845419] ksys_ioctl+0x9b/0xc0 [ 2156.845434] __x64_sys_ioctl+0x6f/0xb0 [ 2156.845447] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2156.845462] do_syscall_64+0xf9/0x620 [ 2156.865435] 0 pages in swap cache [ 2156.866871] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2156.870816] Swap cache stats: add 0, delete 0, find 0/0 [ 2156.874771] RIP: 0033:0x7fa651442639 [ 2156.874786] Code: Bad RIP value. [ 2156.874792] RSP: 002b:00007fa64f9b5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2156.874811] RAX: ffffffffffffffda RBX: 00007fa651562f80 RCX: 00007fa651442639 [ 2156.874819] RDX: 0000000020000380 RSI: 00000000c100565c RDI: 0000000000000004 [ 2156.874826] RBP: 00007fa65149dae9 R08: 0000000000000000 R09: 0000000000000000 [ 2156.874833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2156.874841] R13: 00007ffdac6e7cbf R14: 00007fa64f9b5300 R15: 0000000000022000 [ 2156.886762] Mem-Info: [ 2156.904381] Free swap = 0kB [ 2156.911137] active_anon:16645 inactive_anon:12939 isolated_anon:0 [ 2156.911137] active_file:16 inactive_file:10 isolated_file:0 [ 2156.911137] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2156.911137] slab_reclaimable:15214 slab_unreclaimable:124140 [ 2156.911137] mapped:22182 shmem:13432 pagetables:602 bounce:0 [ 2156.911137] free:13856 free_pcp:909 free_cma:0 [ 2156.911681] Total swap = 0kB [ 2156.921087] Node 0 active_anon:64816kB inactive_anon:43544kB active_file:48kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87060kB dirty:0kB writeback:0kB shmem:45508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2156.932025] 2097051 pages RAM [ 2156.934006] Node 1 active_anon:1764kB inactive_anon:8212kB active_file:16kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1668kB dirty:0kB writeback:0kB shmem:8220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2156.950568] 0 pages HighMem/MovableOnly [ 2156.959462] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2156.960158] 369649 pages reserved [ 2156.963590] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2156.975769] 0 pages cma reserved [ 2156.986000] Node 0 DMA32 free:18028kB min:35996kB low:44992kB high:53988kB active_anon:64816kB inactive_anon:43544kB active_file:44kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7648kB pagetables:2180kB bounce:0kB free_pcp:1796kB local_pcp:312kB free_cma:0kB [ 2156.997222] Unreclaimable slab info: [ 2157.011696] lowmem_reserve[]: 0 0 1 1 1 [ 2157.025134] Name Used Total [ 2157.037286] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2157.075903] pid_2 111KB 220KB [ 2157.103263] lowmem_reserve[]: 0 0 0 0 0 [ 2157.136597] batadv_tl_cache 4KB 12KB [ 2157.160994] Node 1 Normal free:26656kB min:53876kB low:67344kB high:80812kB active_anon:1764kB inactive_anon:8212kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:228kB bounce:0kB free_pcp:1908kB local_pcp:1508kB free_cma:0kB [ 2157.177673] TIPC 10KB 22KB [ 2157.207676] lowmem_reserve[]: 0 0 0 0 0 [ 2157.218062] SCTPv6 14KB 24KB [ 2157.242602] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 2157.254512] DCCPv6 17KB 22KB [ 2157.289192] Node 0 DMA32: 1801*4kB (UME) 813*8kB (UME) 192*16kB (UME) 40*32kB (UME) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18124kB [ 2157.301559] DCCP 16KB 21KB [ 2157.312776] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2157.325849] RXRPC 11KB 13KB [ 2157.333844] Node 1 Normal: 116*4kB (ME) 118*8kB (M) 84*16kB (ME) 61*32kB (UME) 45*64kB (UME) 27*128kB (ME) 3*256kB (ME) 1*512kB (M) 2*1024kB (UM) 0*2048kB 3*4096kB (U) = 26656kB [ 2157.342593] rxrpc_call_jar 78KB 86KB [ 2157.345269] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2157.345284] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2157.359154] bridge_fdb_cache 7KB 11KB [ 2157.371234] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2157.372929] fib6_nodes 155KB 184KB [ 2157.380894] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2157.396421] ip6_dst_cache 84KB 318KB [ 2157.408258] 13458 total pagecache pages [ 2157.412375] RAWv6 70KB 81KB [ 2157.424648] 0 pages in swap cache [ 2157.436938] UDPv6 30KB 33KB [ 2157.442956] Swap cache stats: add 0, delete 0, find 0/0 [ 2157.443009] TCPv6 27KB 30KB [ 2157.448412] Free swap = 0kB [ 2157.448419] Total swap = 0kB [ 2157.459886] 2097051 pages RAM [ 2157.462976] 0 pages HighMem/MovableOnly [ 2157.466773] nf_conntrack 5KB 7KB [ 2157.467049] 369649 pages reserved [ 2157.472385] t10_alua_lu_gp_cache 0KB 3KB [ 2157.475924] 0 pages cma reserved [ 2157.496518] sd_ext_cdb 0KB 7KB [ 2157.501907] scsi_sense_cache 1056KB 1060KB [ 2157.522261] virtio_scsi_cmd 16KB 16KB [ 2157.529285] sgpool-128 8KB 8KB [ 2157.546898] sgpool-64 4KB 12KB [ 2157.552289] sgpool-32 2KB 15KB [ 2157.561262] sgpool-16 1KB 7KB [ 2157.581377] sgpool-8 0KB 7KB [ 2157.591524] mqueue_inode_cache 10KB 15KB [ 2157.611621] bio_post_read_ctx 14KB 15KB [ 2157.620540] bio-2 14KB 15KB [ 2157.640519] jfs_mp 7KB 7KB [ 2157.653232] cifs_small_rq 15KB 16KB [ 2157.673260] cifs_request 67KB 67KB [ 2157.682925] cifs_mpx_ids 0KB 7KB [ 2157.702881] nfs_commit_data 3KB 14KB [ 2157.712428] nfs_write_data 34KB 44KB [ 2157.732522] ext4_system_zone 1KB 7KB [ 2157.738850] bio-1 1KB 7KB [ 2157.754969] pid_namespace 2KB 7KB [ 2157.760370] rpc_buffers 17KB 25KB [ 2157.769208] rpc_tasks 2KB 7KB [ 2157.781532] UNIX 93KB 123KB [ 2157.790381] ip_mrt_cache 15KB 24KB [ 2157.802387] tcp_bind_bucket 1KB 4KB [ 2157.811200] ip_fib_trie 23KB 27KB [ 2157.823185] ip_fib_alias 111KB 130KB [ 2157.831933] ip_dst_cache 4KB 16KB [ 2157.847699] RAW 49KB 82KB [ 2157.853089] UDP 25KB 47KB [ 2157.861903] TCP 11KB 16KB [ 2157.877580] hugetlbfs_inode_cache 3KB 15KB [ 2157.883302] fscache_cookie_jar 1KB 7KB [ 2157.898418] eventpoll_pwq 27KB 51KB [ 2157.903872] eventpoll_epi 52KB 66KB [ 2157.909238] inotify_inode_mark 36KB 70KB [ 2157.918463] request_queue 199KB 199KB [ 2157.923890] blkdev_requests 1KB 3KB [ 2157.929252] blkdev_ioc 11KB 19KB [ 2157.934683] bio-0 293KB 296KB [ 2157.940046] biovec-max 1320KB 1344KB [ 2157.945494] biovec-64 349KB 362KB [ 2157.950859] biovec-16 23KB 26KB [ 2157.956281] bio_integrity_payload 1KB 8KB [ 2157.961989] khugepaged_mm_slot 16KB 34KB [ 2157.967496] uid_cache 0KB 4KB [ 2157.972855] dmaengine-unmap-2 0KB 3KB [ 2157.978404] skbuff_fclone_cache 129KB 232KB [ 2157.983993] skbuff_head_cache 2366KB 3045KB [ 2157.989372] configfs_dir_cache 3KB 7KB [ 2157.994903] file_lock_cache 178KB 293KB [ 2158.000265] file_lock_ctx 9KB 11KB [ 2158.005684] fsnotify_mark_connector 21KB 47KB [ 2158.011571] net_namespace 52KB 52KB [ 2158.017634] shmem_inode_cache 8607KB 8703KB [ 2158.023005] task_delay_info 265KB 450KB [ 2158.028480] taskstats 109KB 202KB [ 2158.034559] proc_dir_entry 698KB 731KB [ 2158.039922] pde_opener 13KB 38KB [ 2158.045326] seq_file 274KB 492KB [ 2158.050685] sigqueue 55KB 63KB [ 2158.056117] kernfs_node_cache 18493KB 18510KB [ 2158.061499] mnt_cache 173KB 184KB [ 2158.066935] filp 5558KB 7293KB [ 2158.072298] names_cache 158958KB 158996KB [ 2158.077888] iint_cache 20KB 43KB [ 2158.083248] key_jar 4KB 7KB [ 2158.088685] uts_namespace 2KB 7KB [ 2158.094107] nsproxy 2KB 7KB [ 2158.099464] vm_area_struct 4141KB 4795KB [ 2158.104865] mm_struct 676KB 897KB [ 2158.110227] fs_cache 152KB 360KB [ 2158.115650] files_cache 549KB 720KB [ 2158.121010] signal_cache 1098KB 1516KB [ 2158.126417] sighand_cache 561KB 610KB [ 2158.131778] task_struct 8502KB 8559KB [ 2158.137652] cred_jar 1157KB 1920KB [ 2158.143021] anon_vma_chain 1509KB 1673KB [ 2158.148431] anon_vma 144KB 281KB [ 2158.154497] pid 67KB 232KB [ 2158.159859] Acpi-Operand 156KB 202KB [ 2158.165283] Acpi-ParseExt 9KB 11KB [ 2158.170645] Acpi-Parse 41KB 47KB [ 2158.176097] Acpi-State 52KB 63KB [ 2158.181459] Acpi-Namespace 21KB 27KB [ 2158.186883] numa_policy 0KB 3KB [ 2158.192243] debug_objects_cache 1218KB 1603KB [ 2158.197884] trace_event_file 297KB 298KB [ 2158.203249] ftrace_event_field 398KB 405KB [ 2158.208762] pool_workqueue 121KB 128KB [ 2158.214271] page->ptl 722KB 992KB [ 2158.219668] kmalloc-2097152 2050KB 2050KB [ 2158.225078] kmalloc-524288 2056KB 2056KB [ 2158.230438] kmalloc-262144 1290KB 1290KB [ 2158.235881] kmalloc-131072 650KB 650KB [ 2158.241241] kmalloc-65536 1848KB 1914KB [ 2158.246645] kmalloc-32768 1650KB 1650KB [ 2158.252011] kmalloc-16384 973KB 973KB [ 2158.259220] kmalloc-8192 4042KB 4083KB [ 2158.265223] kmalloc-4096 20187KB 20247KB [ 2158.271143] kmalloc-2048 12044KB 12813KB [ 2158.278472] kmalloc-1024 5882KB 7953KB [ 2158.284513] kmalloc-512 7960KB 8895KB [ 2158.290434] kmalloc-256 4361KB 4781KB [ 2158.295876] kmalloc-128 925KB 1382KB [ 2158.301237] kmalloc-96 2923KB 4000KB [ 2158.306665] kmalloc-64 2763KB 3748KB [ 2158.312026] kmalloc-32 1806KB 2445KB [ 2158.318035] kmalloc-192 1526KB 2304KB [ 2158.323401] kmem_cache 177KB 180KB [ 2158.328816] Out of memory (oom_kill_allocating_task): Kill process 29562 (systemd-journal) score 0 or sacrifice child [ 2158.340374] Killed process 29562 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:0kB, shmem-rss:1552kB [ 2158.352611] oom_reaper: reaped process 29562 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1552kB [ 2158.526031] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2158.540986] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2158.570331] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2158.583464] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2158.590526] systemd[1]: Stopped Journal Service. [ 2158.621251] systemd[1]: Starting Journal Service... [ 2158.980663] systemd-journald[1143]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2159.429184] systemd[1]: Started Journal Service. [ 2161.415285] ieee802154 phy0 wpan0: encryption failed: -22 [ 2161.420930] ieee802154 phy1 wpan1: encryption failed: -22 11:42:30 executing program 1: ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000000)) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0xc0081, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x8) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @vbi={0x8, 0x100, 0x2, 0x34424752, [0x86a, 0x80000000], [0x87, 0x3], 0x1}}}) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @bt={0xab5, 0x1000, 0x401, 0x0, 0x6, 0x9, 0x16, 0xf}}) 11:42:30 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) 11:42:30 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x102, 0x6, {0x4, 0x0, 0x100000, 0x4}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000080)=0x8) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x102, 0x6, {0x4, 0x0, 0x100000, 0x4}}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) (async) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000080)=0x8) (async) 11:42:30 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000080)={'binder0\x00'}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0xf49c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}}}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={&(0x7f00000001c0)="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", &(0x7f00000002c0)=""/112, &(0x7f0000000480)="affd54f09a1826993bdf857db0ea28be573776b548c4cbd3e2bd46eb1e70b02c9e175affbc44cd49595c59accf814261efa4cc6a6facc58d1f43c2644c5f494aafb25e0912739289725a105c457145f5e6b15dd3fb8b23bf7e5db7dbe80917bb2cb9d57ad7495c42eafad56b312f031d68077e82cecc12b9947c0b6bd1361dd407bb4aaa23cbce12f03d39b15f10f37e514379f53e8096b59978741fe5cb8c63af872273ddaa67b469baf8795c5bac539cc116d47ddec39b07d12efcb7b4767535884b7f77c8835a8d68c93d9f27b8f223a55dc7af03793566f9533f70b9fe7849a5d2e9a0b2cc45794d46cf0a1427801f6025cb", &(0x7f00000005c0)="d270531c066827b8866574a22530dcb6173dc62fb71c5b27fedd283e89f67ef081ca67af09b420027f2755d9758140a32e714ae9f97a1953e1cdea6d3cd68e981b9a9aa7d16fef6c5dbea963a77f45da526fc22600765414b01b0b521e7a8381f34c3aed0d09f60c6fd1a3028244f6960e2190b19c852f59c6e9cb5cbdbb16f9da4e28cfcc", 0x1, r2}, 0x38) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x7c, r3, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x97d}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x44) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000680)={0x5, 0x0, 0x3}) 11:42:30 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x12200, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x1, r0, &(0x7f0000000080)="d686680c2e710ea874cb971888aeb63e980046de190abf28cabf70ba88eead7882919b203bb282f0db135338539047de65de288b1a678c5b2282e0b7c957a3dceac7b474176218bfd55c4b82e457da0ec4e7efd69bbeef9cceefb97352470f5bf57b9df4f4bcf7f053755185f963b992239fd8fec60283bcea758118caf647ca8b953500af980d3f4f69ede3362f49492a13d4626c61", 0x96, 0x3, 0x0, 0x2, r1}, &(0x7f00000001c0)) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000000)=0x850) (async, rerun: 64) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (rerun: 64) 11:42:30 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x4, {0xc, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x5]}}}) (async) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000100)={0x8c14, 0x1a, @value=0x1f}) r1 = syz_open_dev$video(&(0x7f0000000000), 0xfffffffffffffffe, 0x0) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000080)={0xbed, "3b24211115ab1bfcbf9987f65b146b345ac58700a8e0c01288e8b8b7ea446943", 0x1, 0x486, 0x2, 0x2a, 0x10, 0x1, 0x6, 0xfffffffe}) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000140)={0x80000000, 0x2, "d87a2adbc1eb5c8d65aec8bd7e45a59132e7b3c6f158acca4f99b25a94d6ca3d", 0x9, 0x401, 0x1, 0x101, 0x9, 0x9bd, 0x0, 0x7ff, [0xa0, 0x40, 0x20, 0x2]}) [ 2166.619592] oom_reaper: reaped process 1162 (syz-executor.1), now anon-rss:0kB, file-rss:14332kB, shmem-rss:4kB [ 2166.663425] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2166.681812] systemd-journal cpuset=/ mems_allowed=0-1 [ 2166.687127] CPU: 1 PID: 1143 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 2166.695104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2166.704538] Call Trace: [ 2166.707127] dump_stack+0x1fc/0x2ef [ 2166.710753] dump_header+0x15d/0xc3f [ 2166.714471] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2166.719569] ? ___ratelimit+0x319/0x590 [ 2166.723545] oom_kill_process.cold+0x10/0x692 [ 2166.728039] ? check_preemption_disabled+0x41/0x280 [ 2166.733057] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2166.738320] out_of_memory+0x1072/0x1390 [ 2166.742371] ? oom_killer_disable+0x270/0x270 [ 2166.746852] ? mutex_trylock+0x15f/0x1a0 [ 2166.750900] __alloc_pages_nodemask+0x23a2/0x2890 [ 2166.755728] ? find_get_entry+0x4cd/0x8a0 [ 2166.759864] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2166.764700] alloc_pages_current+0x193/0x2a0 [ 2166.769090] filemap_fault+0x146e/0x2180 [ 2166.773139] ext4_filemap_fault+0x84/0xb0 [ 2166.777355] __do_fault+0x10b/0x4b0 [ 2166.780963] __handle_mm_fault+0x273b/0x41c0 [ 2166.785350] ? vm_insert_page+0x9c0/0x9c0 [ 2166.789483] ? check_preemption_disabled+0x41/0x280 [ 2166.794478] handle_mm_fault+0x436/0xb10 [ 2166.798522] __do_page_fault+0x68e/0xd60 [ 2166.802576] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2166.807597] ? spurious_fault+0x840/0x840 [ 2166.811753] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2166.816591] ? page_fault+0x8/0x30 [ 2166.820116] page_fault+0x1e/0x30 [ 2166.823549] RIP: 0033:0x7f364579b2e3 [ 2166.827245] Code: Bad RIP value. [ 2166.830588] RSP: 002b:00007ffe19f913a8 EFLAGS: 00010246 [ 2166.835928] RAX: 0000000000000001 RBX: 0000563c83fc31e0 RCX: 00007f364579b2e3 [ 2166.843179] RDX: 0000000000000013 RSI: 00007ffe19f913b0 RDI: 000000000000000c [ 2166.850528] RBP: 00007ffe19f915a0 R08: 00007ffe19fd7000 R09: 0000022a8e43ee39 [ 2166.857788] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe19f913b0 [ 2166.865041] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005ede56f1b197a [ 2166.873000] syz-executor.1: vmalloc: allocation failure, allocated 1718644736 of 2147487744 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2166.886061] Mem-Info: [ 2166.889217] active_anon:18270 inactive_anon:14971 isolated_anon:0 [ 2166.889217] active_file:51 inactive_file:11 isolated_file:0 [ 2166.889217] unevictable:0 dirty:39 writeback:0 unstable:0 [ 2166.889217] slab_reclaimable:15190 slab_unreclaimable:122510 [ 2166.889217] mapped:22138 shmem:15480 pagetables:650 bounce:0 [ 2166.889217] free:13897 free_pcp:141 free_cma:0 [ 2166.893297] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2166.930953] Node 0 active_anon:71512kB inactive_anon:51736kB active_file:88kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88476kB dirty:144kB writeback:0kB shmem:53700kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 24576kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2166.934592] CPU: 0 PID: 1162 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2166.966492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2166.969749] Node 1 active_anon:1564kB inactive_anon:8148kB active_file:20kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68kB dirty:12kB writeback:0kB shmem:8220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2166.975834] Call Trace: [ 2166.975854] dump_stack+0x1fc/0x2ef [ 2166.975871] warn_alloc.cold+0x7b/0x18f [ 2166.975886] ? zone_watermark_ok_safe+0x260/0x260 [ 2166.975899] ? rcu_nmi_exit+0xb3/0x180 [ 2166.975930] __vmalloc_area_node+0x4fd/0x780 [ 2166.975947] ? __vmalloc_node_range+0x180/0x180 [ 2166.975963] ? _raw_spin_unlock+0x29/0x40 [ 2167.010768] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2167.012793] ? __get_vm_area_node+0x2e2/0x3a0 [ 2167.012811] __vmalloc_node_range+0xed/0x180 [ 2167.012827] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2167.012840] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2167.012854] vmalloc_user+0x70/0xe0 [ 2167.017667] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2167.021544] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2167.033725] Node 0 DMA32 free:17984kB min:35996kB low:44992kB high:53988kB active_anon:71452kB inactive_anon:51736kB active_file:108kB inactive_file:68kB unevictable:0kB writepending:144kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7744kB pagetables:2376kB bounce:0kB free_pcp:436kB local_pcp:188kB free_cma:0kB [ 2167.034704] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2167.071052] lowmem_reserve[]: 0 0 1 1 1 [ 2167.073950] __vb2_queue_alloc+0x472/0xe60 [ 2167.073975] vb2_core_create_bufs+0x273/0x7e0 [ 2167.073988] ? __vb2_queue_free+0x870/0x870 [ 2167.074001] ? __video_do_ioctl+0x632/0xcd0 [ 2167.074017] ? pi_state_update_owner+0x450/0x450 [ 2167.079357] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2167.082965] ? __mutex_lock+0x368/0x1190 [ 2167.082982] vb2_create_bufs+0x332/0x620 [ 2167.082998] ? mark_held_locks+0xf0/0xf0 [ 2167.083011] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2167.083023] ? futex_wait_queue_me+0x404/0x5e0 [ 2167.083037] ? pi_state_update_owner+0x450/0x450 [ 2167.083053] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2167.083072] v4l_create_bufs+0xb2/0x160 [ 2167.083088] __video_do_ioctl+0x49a/0xcd0 [ 2167.096031] lowmem_reserve[]: 0 0 0 0 0 [ 2167.121523] ? v4l_querycap+0x340/0x340 [ 2167.121540] ? __might_fault+0x192/0x1d0 [ 2167.121554] ? v4l_querycap+0x340/0x340 [ 2167.121567] video_usercopy+0x13f/0xfa0 [ 2167.121584] ? v4l_enumstd+0x60/0x60 [ 2167.121598] ? do_futex+0x171/0x1880 [ 2167.121614] ? mark_held_locks+0xf0/0xf0 [ 2167.121628] ? __lock_acquire+0x6de/0x3ff0 [ 2167.121641] ? mark_held_locks+0xf0/0xf0 [ 2167.121658] ? do_raw_spin_unlock+0x171/0x230 [ 2167.121676] ? video_usercopy+0xfa0/0xfa0 [ 2167.121687] v4l2_ioctl+0x147/0x1a0 [ 2167.121702] ? video_devdata+0xa0/0xa0 [ 2167.133700] Node 1 Normal free:26952kB min:53876kB low:67344kB high:80812kB active_anon:1564kB inactive_anon:8148kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:112kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:220kB bounce:0kB free_pcp:488kB local_pcp:240kB free_cma:0kB [ 2167.134007] do_vfs_ioctl+0xcdb/0x12e0 [ 2167.138557] lowmem_reserve[]: 0 0 0 0 0 [ 2167.142864] ? lock_downgrade+0x720/0x720 [ 2167.142879] ? check_preemption_disabled+0x41/0x280 [ 2167.142892] ? ioctl_preallocate+0x200/0x200 [ 2167.142908] ? __fget+0x356/0x510 [ 2167.142924] ? do_dup2+0x450/0x450 [ 2167.142938] ? __se_sys_futex+0x298/0x3b0 [ 2167.142962] ksys_ioctl+0x9b/0xc0 [ 2167.151743] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 2167.151996] __x64_sys_ioctl+0x6f/0xb0 [ 2167.188048] Node 0 DMA32: 1298*4kB (ME) 770*8kB (UME) 160*16kB (ME) 24*32kB (UME) 20*64kB (UME) 8*128kB (UME) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18008kB [ 2167.189945] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2167.198382] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2167.199581] do_syscall_64+0xf9/0x620 [ 2167.208834] Node 1 Normal: 116*4kB (UME) 97*8kB (UM) 81*16kB (ME) 63*32kB (ME) 44*64kB (ME) 27*128kB (ME) 13*256kB (UME) 3*512kB (UM) 1*1024kB (U) 1*2048kB (U) 2*4096kB (U) = 26952kB [ 2167.209485] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2167.216678] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2167.217554] RIP: 0033:0x7fa651442639 [ 2167.221505] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2167.225453] Code: Bad RIP value. [ 2167.225460] RSP: 002b:00007fa64f9b5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2167.225471] RAX: ffffffffffffffda RBX: 00007fa651562f80 RCX: 00007fa651442639 [ 2167.225478] RDX: 0000000020000380 RSI: 00000000c100565c RDI: 0000000000000004 [ 2167.225485] RBP: 00007fa65149dae9 R08: 0000000000000000 R09: 0000000000000000 [ 2167.225492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2167.225498] R13: 00007ffdac6e7cbf R14: 00007fa64f9b5300 R15: 0000000000022000 [ 2167.237130] Mem-Info: [ 2167.239967] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2167.241330] active_anon:18265 inactive_anon:14971 isolated_anon:0 [ 2167.241330] active_file:13 inactive_file:12 isolated_file:0 [ 2167.241330] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2167.241330] slab_reclaimable:15165 slab_unreclaimable:122462 [ 2167.241330] mapped:22109 shmem:15480 pagetables:649 bounce:0 [ 2167.241330] free:13959 free_pcp:228 free_cma:0 [ 2167.245200] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2167.256334] Node 0 active_anon:71472kB inactive_anon:51736kB active_file:48kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88436kB dirty:0kB writeback:0kB shmem:53700kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 22528kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2167.258447] 15505 total pagecache pages [ 2167.261996] Node 1 active_anon:1588kB inactive_anon:8148kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2167.262001] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2167.262027] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2167.262045] Node 0 DMA32 free:17992kB min:35996kB low:44992kB high:53988kB active_anon:71472kB inactive_anon:51736kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7744kB pagetables:2376kB bounce:0kB free_pcp:440kB local_pcp:252kB free_cma:0kB [ 2167.262071] lowmem_reserve[]: 0 0 1 1 1 [ 2167.262089] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2167.262117] lowmem_reserve[]: 0 0 0 0 0 [ 2167.262133] Node 1 Normal free:26952kB min:53876kB low:67344kB high:80812kB active_anon:1588kB inactive_anon:8148kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:220kB bounce:0kB free_pcp:468kB local_pcp:248kB free_cma:0kB [ 2167.262161] lowmem_reserve[]: 0 0 0 0 0 [ 2167.262179] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 2167.262240] Node 0 DMA32: 1298*4kB (ME) 771*8kB (UME) 160*16kB (ME) 24*32kB (UME) 20*64kB (UME) 8*128kB (UME) 2*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18016kB [ 2167.262308] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2167.262359] Node 1 Normal: 116*4kB (UME) 97*8kB (UM) 81*16kB (ME) 63*32kB (ME) 44*64kB (ME) 27*128kB (ME) 13*256kB (UME) 3*512kB (UM) 1*1024kB (U) 1*2048kB (U) 2*4096kB (U) = 26952kB [ 2167.262441] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2167.262451] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2167.262460] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2167.262469] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2167.262474] 15505 total pagecache pages [ 2167.262487] 0 pages in swap cache [ 2167.262495] Swap cache stats: add 0, delete 0, find 0/0 [ 2167.262499] Free swap = 0kB [ 2167.262504] Total swap = 0kB [ 2167.262511] 2097051 pages RAM [ 2167.262516] 0 pages HighMem/MovableOnly [ 2167.262521] 369649 pages reserved [ 2167.262525] 0 pages cma reserved [ 2167.853581] 0 pages in swap cache [ 2167.857029] Swap cache stats: add 0, delete 0, find 0/0 [ 2167.862384] Free swap = 0kB [ 2167.865453] Total swap = 0kB [ 2167.868465] 2097051 pages RAM [ 2167.871557] 0 pages HighMem/MovableOnly [ 2167.877347] 369649 pages reserved [ 2167.880797] 0 pages cma reserved [ 2167.884199] Unreclaimable slab info: [ 2167.887905] Name Used Total [ 2167.893781] pid_2 103KB 220KB [ 2167.899211] batadv_tl_cache 4KB 12KB [ 2167.904636] TIPC 10KB 22KB [ 2167.910009] SCTPv6 14KB 24KB [ 2167.915439] DCCPv6 17KB 22KB [ 2167.920800] DCCP 16KB 21KB [ 2167.926262] RXRPC 11KB 13KB [ 2167.931616] rxrpc_call_jar 78KB 86KB [ 2167.937050] bridge_fdb_cache 7KB 11KB [ 2167.942416] fib6_nodes 155KB 184KB [ 2167.947836] ip6_dst_cache 83KB 318KB [ 2167.953257] RAWv6 70KB 81KB [ 2167.958613] UDPv6 31KB 33KB [ 2167.964010] TCPv6 24KB 30KB [ 2167.969377] nf_conntrack 5KB 7KB [ 2167.974857] t10_alua_lu_gp_cache 0KB 3KB [ 2167.982212] sd_ext_cdb 0KB 7KB [ 2167.991259] scsi_sense_cache 1056KB 1060KB [ 2167.996690] virtio_scsi_cmd 16KB 16KB [ 2168.002065] sgpool-128 8KB 8KB [ 2168.010918] sgpool-64 4KB 12KB [ 2168.016392] sgpool-32 2KB 15KB [ 2168.021757] sgpool-16 1KB 7KB [ 2168.030508] sgpool-8 0KB 7KB [ 2168.035986] mqueue_inode_cache 10KB 15KB [ 2168.041440] bio_post_read_ctx 14KB 15KB [ 2168.050568] bio-2 14KB 15KB [ 2168.056035] jfs_mp 7KB 7KB [ 2168.061430] cifs_small_rq 15KB 16KB [ 2168.067172] cifs_request 67KB 67KB [ 2168.073170] cifs_mpx_ids 0KB 7KB [ 2168.078553] nfs_commit_data 3KB 14KB [ 2168.085991] nfs_write_data 34KB 44KB [ 2168.091908] ext4_system_zone 1KB 7KB [ 2168.097386] bio-1 1KB 7KB [ 2168.102932] pid_namespace 2KB 7KB [ 2168.108298] rpc_buffers 17KB 25KB [ 2168.113836] rpc_tasks 2KB 7KB [ 2168.119206] UNIX 118KB 135KB [ 2168.125104] ip_mrt_cache 15KB 24KB [ 2168.130473] tcp_bind_bucket 1KB 4KB [ 2168.135938] ip_fib_trie 23KB 27KB [ 2168.141295] ip_fib_alias 111KB 130KB [ 2168.146719] ip_dst_cache 4KB 16KB [ 2168.152091] RAW 48KB 82KB [ 2168.157544] UDP 25KB 47KB [ 2168.163617] TCP 11KB 16KB [ 2168.169071] hugetlbfs_inode_cache 3KB 15KB [ 2168.174851] fscache_cookie_jar 1KB 7KB [ 2168.180386] eventpoll_pwq 30KB 51KB [ 2168.187836] eventpoll_epi 56KB 66KB [ 2168.193333] inotify_inode_mark 31KB 70KB [ 2168.198786] request_queue 199KB 199KB [ 2168.204222] blkdev_requests 1KB 3KB [ 2168.209589] blkdev_ioc 14KB 19KB [ 2168.215068] bio-0 480KB 483KB [ 2168.220437] biovec-max 1377KB 1402KB [ 2168.225870] biovec-64 535KB 535KB [ 2168.231279] biovec-16 35KB 41KB [ 2168.236750] bio_integrity_payload 1KB 8KB [ 2168.242466] khugepaged_mm_slot 13KB 34KB [ 2168.247992] uid_cache 0KB 4KB [ 2168.253432] dmaengine-unmap-2 0KB 3KB [ 2168.258801] skbuff_fclone_cache 115KB 228KB [ 2168.264412] skbuff_head_cache 3070KB 3071KB [ 2168.269778] configfs_dir_cache 3KB 7KB [ 2168.275322] file_lock_cache 165KB 293KB [ 2168.280684] file_lock_ctx 9KB 11KB [ 2168.287875] fsnotify_mark_connector 17KB 47KB [ 2168.293871] net_namespace 52KB 52KB [ 2168.299232] shmem_inode_cache 8568KB 8695KB [ 2168.304659] task_delay_info 240KB 450KB [ 2168.310107] taskstats 99KB 202KB [ 2168.315719] proc_dir_entry 698KB 731KB [ 2168.321080] pde_opener 8KB 38KB [ 2168.326541] seq_file 274KB 492KB [ 2168.331901] sigqueue 57KB 63KB [ 2168.337356] kernfs_node_cache 18497KB 18510KB [ 2168.342768] mnt_cache 173KB 184KB [ 2168.348126] filp 5651KB 7290KB [ 2168.353580] names_cache 155924KB 155962KB [ 2168.358939] iint_cache 24KB 43KB [ 2168.364376] key_jar 4KB 7KB [ 2168.369731] uts_namespace 2KB 7KB [ 2168.375185] nsproxy 2KB 7KB [ 2168.380546] vm_area_struct 4007KB 4795KB [ 2168.387752] mm_struct 607KB 897KB [ 2168.393249] fs_cache 134KB 356KB [ 2168.398613] files_cache 492KB 712KB [ 2168.404041] signal_cache 1019KB 1495KB [ 2168.409401] sighand_cache 534KB 603KB [ 2168.414876] task_struct 7909KB 7922KB [ 2168.420365] cred_jar 1199KB 1920KB [ 2168.425794] anon_vma_chain 1445KB 1673KB [ 2168.431623] anon_vma 141KB 281KB [ 2168.437155] pid 59KB 232KB [ 2168.442510] Acpi-Operand 156KB 202KB [ 2168.447944] Acpi-ParseExt 9KB 11KB [ 2168.453380] Acpi-Parse 41KB 47KB [ 2168.458740] Acpi-State 52KB 63KB [ 2168.464165] Acpi-Namespace 21KB 27KB [ 2168.469526] numa_policy 0KB 3KB [ 2168.474971] debug_objects_cache 1218KB 1603KB [ 2168.480505] trace_event_file 297KB 298KB [ 2168.485929] ftrace_event_field 398KB 405KB [ 2168.493242] pool_workqueue 121KB 128KB [ 2168.498618] page->ptl 687KB 992KB [ 2168.504099] kmalloc-2097152 2050KB 2050KB [ 2168.509460] kmalloc-524288 2056KB 2056KB [ 2168.514900] kmalloc-262144 1290KB 1290KB [ 2168.520259] kmalloc-131072 650KB 650KB [ 2168.525840] kmalloc-65536 1848KB 1914KB [ 2168.531198] kmalloc-32768 1650KB 1650KB [ 2168.536643] kmalloc-16384 973KB 973KB [ 2168.542007] kmalloc-8192 4042KB 4083KB [ 2168.547466] kmalloc-4096 19936KB 19975KB [ 2168.552903] kmalloc-2048 11970KB 12807KB [ 2168.558259] kmalloc-1024 5992KB 7953KB [ 2168.563670] kmalloc-512 9294KB 9296KB [ 2168.569033] kmalloc-256 4337KB 4781KB [ 2168.574507] kmalloc-128 903KB 1382KB [ 2168.579866] kmalloc-96 3036KB 4000KB [ 2168.585307] kmalloc-64 2683KB 3748KB [ 2168.590665] kmalloc-32 1810KB 2445KB [ 2168.597854] kmalloc-192 1516KB 2304KB [ 2168.603315] kmem_cache 177KB 180KB [ 2168.608682] Out of memory (oom_kill_allocating_task): Kill process 1143 (systemd-journal) score 0 or sacrifice child [ 2168.619498] Killed process 1143 (systemd-journal) total-vm:46096kB, anon-rss:460kB, file-rss:0kB, shmem-rss:1296kB [ 2168.631115] oom_reaper: reaped process 1143 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1296kB [ 2168.767365] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2168.778957] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2168.798734] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2168.810067] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2168.819831] systemd[1]: Stopped Journal Service. [ 2168.851176] systemd[1]: Starting Journal Service... [ 2169.118240] systemd-journald[1173]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. 11:42:38 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000080)={0x8, {0x2, 0xfffffeff, 0x101, 0x1}}) [ 2169.737259] systemd[1]: Started Journal Service. 11:42:39 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000080)={0x8, {0x2, 0xfffffeff, 0x101, 0x1}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) (async) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000080)={0x8, {0x2, 0xfffffeff, 0x101, 0x1}}) (async) 11:42:40 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000080)={0x8, {0x2, 0xfffffeff, 0x101, 0x1}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) (async) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000080)={0x8, {0x2, 0xfffffeff, 0x101, 0x1}}) (async) 11:42:41 executing program 5: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 11:42:41 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000080)={0x1, 0x0, {0x8, 0x8185, 0x80000000, 0x6f}}) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x1, 0x1, 0x1, "c8616029269da3f026b2144e58482dbab0ff7b149712fb17c5f342b612250497", 0x47314356}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) syz_open_dev$video(&(0x7f0000000000), 0xe4f6, 0x60000) 11:42:41 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x8000, 0x5, 0x2, 0x40, 0x2, 0x5, 0x6}) 11:42:41 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000080)={'binder0\x00'}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0xf49c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}}}) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={&(0x7f00000001c0)="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", &(0x7f00000002c0)=""/112, &(0x7f0000000480)="affd54f09a1826993bdf857db0ea28be573776b548c4cbd3e2bd46eb1e70b02c9e175affbc44cd49595c59accf814261efa4cc6a6facc58d1f43c2644c5f494aafb25e0912739289725a105c457145f5e6b15dd3fb8b23bf7e5db7dbe80917bb2cb9d57ad7495c42eafad56b312f031d68077e82cecc12b9947c0b6bd1361dd407bb4aaa23cbce12f03d39b15f10f37e514379f53e8096b59978741fe5cb8c63af872273ddaa67b469baf8795c5bac539cc116d47ddec39b07d12efcb7b4767535884b7f77c8835a8d68c93d9f27b8f223a55dc7af03793566f9533f70b9fe7849a5d2e9a0b2cc45794d46cf0a1427801f6025cb", &(0x7f00000005c0)="d270531c066827b8866574a22530dcb6173dc62fb71c5b27fedd283e89f67ef081ca67af09b420027f2755d9758140a32e714ae9f97a1953e1cdea6d3cd68e981b9a9aa7d16fef6c5dbea963a77f45da526fc22600765414b01b0b521e7a8381f34c3aed0d09f60c6fd1a3028244f6960e2190b19c852f59c6e9cb5cbdbb16f9da4e28cfcc", 0x1, r2}, 0x38) (async) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x7c, r3, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x97d}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x44) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000680)={0x5, 0x0, 0x3}) 11:42:41 executing program 5: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 11:42:41 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) (async) 11:42:41 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000000)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000080)={0x0, 0x0, 0x101, 0x6, {0x40, 0x4, 0x0, 0x800}}) 11:42:41 executing program 5: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) 11:42:41 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) (async, rerun: 64) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000080)={'binder0\x00'}) (async, rerun: 64) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0xf49c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}}}) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={&(0x7f00000001c0)="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", &(0x7f00000002c0)=""/112, &(0x7f0000000480)="affd54f09a1826993bdf857db0ea28be573776b548c4cbd3e2bd46eb1e70b02c9e175affbc44cd49595c59accf814261efa4cc6a6facc58d1f43c2644c5f494aafb25e0912739289725a105c457145f5e6b15dd3fb8b23bf7e5db7dbe80917bb2cb9d57ad7495c42eafad56b312f031d68077e82cecc12b9947c0b6bd1361dd407bb4aaa23cbce12f03d39b15f10f37e514379f53e8096b59978741fe5cb8c63af872273ddaa67b469baf8795c5bac539cc116d47ddec39b07d12efcb7b4767535884b7f77c8835a8d68c93d9f27b8f223a55dc7af03793566f9533f70b9fe7849a5d2e9a0b2cc45794d46cf0a1427801f6025cb", &(0x7f00000005c0)="d270531c066827b8866574a22530dcb6173dc62fb71c5b27fedd283e89f67ef081ca67af09b420027f2755d9758140a32e714ae9f97a1953e1cdea6d3cd68e981b9a9aa7d16fef6c5dbea963a77f45da526fc22600765414b01b0b521e7a8381f34c3aed0d09f60c6fd1a3028244f6960e2190b19c852f59c6e9cb5cbdbb16f9da4e28cfcc", 0x1, r2}, 0x38) (async) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x7c, r3, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x97d}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x44) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000680)={0x5, 0x0, 0x3}) 11:42:41 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000080)={0x1, 0x0, {0x8, 0x8185, 0x80000000, 0x6f}}) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x1, 0x1, 0x1, "c8616029269da3f026b2144e58482dbab0ff7b149712fb17c5f342b612250497", 0x47314356}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) syz_open_dev$video(&(0x7f0000000000), 0xe4f6, 0x60000) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000080)={0x1, 0x0, {0x8, 0x8185, 0x80000000, 0x6f}}) (async) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x1, 0x1, 0x1, "c8616029269da3f026b2144e58482dbab0ff7b149712fb17c5f342b612250497", 0x47314356}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) (async) syz_open_dev$video(&(0x7f0000000000), 0xe4f6, 0x60000) (async) 11:42:41 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x8000, 0x5, 0x2, 0x40, 0x2, 0x5, 0x6}) 11:42:41 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x8, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x3f0acc, 0x4a4, '\x00', @ptr=0x8000}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000140)={0x5, 0x0, '\x00', {0x0, @reserved}}) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f0000000700)) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000100)=0x2) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0x80000000}) 11:42:41 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (async) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) 11:42:41 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x20, 0x0, 0x0, {0xd, @sliced={0x0, [0xfffd, 0x0, 0x40, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 11:42:41 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) (async, rerun: 64) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async, rerun: 64) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000000)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000080)={0x0, 0x0, 0x101, 0x6, {0x40, 0x4, 0x0, 0x800}}) 11:42:41 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000080)={0x1, 0x0, {0x8, 0x8185, 0x80000000, 0x6f}}) (async) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x1, 0x1, 0x1, "c8616029269da3f026b2144e58482dbab0ff7b149712fb17c5f342b612250497", 0x47314356}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) (async) syz_open_dev$video(&(0x7f0000000000), 0xe4f6, 0x60000) 11:42:41 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x8000, 0x5, 0x2, 0x40, 0x2, 0x5, 0x6}) 11:42:41 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x20, 0x0, 0x0, {0xd, @sliced={0x0, [0xfffd, 0x0, 0x40, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 11:42:41 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000240)={0x0, 0x4, 0x7, 0x100, 0x3, 0x6, 0x2}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0xffffff29, 0x4, 0x1, {0x2, @vbi={0xfff, 0x3300, 0x3ff, 0x42474752, [0x7, 0x8], [0xef, 0x80], 0x1}}}) r2 = syz_open_dev$video(&(0x7f0000000280), 0x0, 0x400400) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_S_PRIORITY(r3, 0x40045644, 0x2) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc02c5625, &(0x7f0000000540)={0x0, 0x800, @value=0x8}) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f00000002c0)={0x9, {0x200, 0x7, 0x8000, 0x100}, {0x8001, 0x648f, 0x2, 0x4}, {0x3f, 0x1}}) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000000)={0x6, {0x81, 0x3, 0x3ff, 0x3}, {0x5, 0x3, 0x8, 0x1}, {0x3, 0x7fffffff}}) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f0000000140)={{0x1, @name="3029a2fb0352ad4826742ff5da357702a9417600"}, "85b91bc200571154d4d5c377510400070000ef6e4165b200"}) ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, &(0x7f0000000480)) ioctl$VIDIOC_G_TUNER(r5, 0xc054561d, &(0x7f00000000c0)={0x9, "c4cbe6044fc839e04761f7785fc5b2b37812aabd7e736198df1e6265719654fa", 0x3, 0x8, 0xfffffffe, 0x1, 0x4, 0x2, 0x800, 0x7fffffff}) 11:42:41 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000000)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000080)={0x0, 0x0, 0x101, 0x6, {0x40, 0x4, 0x0, 0x800}}) 11:42:41 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x20, 0x0, 0x0, {0xd, @sliced={0x0, [0xfffd, 0x0, 0x40, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x20, 0x0, 0x0, {0xd, @sliced={0x0, [0xfffd, 0x0, 0x40, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) (async) 11:42:41 executing program 2: ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x81) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x346) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x7fffffffffffffff, 0x90200) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x220e) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) 11:42:41 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x8, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x3f0acc, 0x4a4, '\x00', @ptr=0x8000}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000140)={0x5, 0x0, '\x00', {0x0, @reserved}}) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f0000000700)) (async) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000100)=0x2) (async) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0x80000000}) 11:42:41 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000240)={0x0, 0x4, 0x7, 0x100, 0x3, 0x6, 0x2}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0xffffff29, 0x4, 0x1, {0x2, @vbi={0xfff, 0x3300, 0x3ff, 0x42474752, [0x7, 0x8], [0xef, 0x80], 0x1}}}) r2 = syz_open_dev$video(&(0x7f0000000280), 0x0, 0x400400) (async) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_S_PRIORITY(r3, 0x40045644, 0x2) (async) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc02c5625, &(0x7f0000000540)={0x0, 0x800, @value=0x8}) (async, rerun: 32) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f00000002c0)={0x9, {0x200, 0x7, 0x8000, 0x100}, {0x8001, 0x648f, 0x2, 0x4}, {0x3f, 0x1}}) (rerun: 32) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000000)={0x6, {0x81, 0x3, 0x3ff, 0x3}, {0x5, 0x3, 0x8, 0x1}, {0x3, 0x7fffffff}}) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f0000000140)={{0x1, @name="3029a2fb0352ad4826742ff5da357702a9417600"}, "85b91bc200571154d4d5c377510400070000ef6e4165b200"}) (async, rerun: 32) ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, &(0x7f0000000480)) (async, rerun: 32) ioctl$VIDIOC_G_TUNER(r5, 0xc054561d, &(0x7f00000000c0)={0x9, "c4cbe6044fc839e04761f7785fc5b2b37812aabd7e736198df1e6265719654fa", 0x3, 0x8, 0xfffffffe, 0x1, 0x4, 0x2, 0x800, 0x7fffffff}) 11:42:41 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40]}}}) 11:42:41 executing program 0: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}}) 11:42:41 executing program 0: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}}) (async) 11:42:41 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000080)={0x0, 0x9, 0x300b, 0x1}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000100)={0xc, {0x8, 0xfffff551, 0x20, 0x8}, {0x869, 0x5, 0x4}, {0x9, 0x1}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x800000) 11:42:41 executing program 2: ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x81) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x346) (async) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x7fffffffffffffff, 0x90200) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x220e) (async) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) 11:42:41 executing program 0: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}}) 11:42:41 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) 11:42:41 executing program 2: ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x81) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x346) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x7fffffffffffffff, 0x90200) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x220e) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x81) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) (async) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x346) (async) syz_open_dev$loop(&(0x7f0000000000), 0x7fffffffffffffff, 0x90200) (async) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x220e) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (async) 11:42:41 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x8, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x3f0acc, 0x4a4, '\x00', @ptr=0x8000}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000140)={0x5, 0x0, '\x00', {0x0, @reserved}}) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f0000000700)) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000100)=0x2) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0x80000000}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x8, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x3f0acc, 0x4a4, '\x00', @ptr=0x8000}}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000140)={0x5, 0x0, '\x00', {0x0, @reserved}}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f0000000700)) (async) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000100)=0x2) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0x80000000}) (async) 11:42:41 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40]}}}) 11:42:41 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) 11:42:42 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000240)={0x0, 0x4, 0x7, 0x100, 0x3, 0x6, 0x2}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0xffffff29, 0x4, 0x1, {0x2, @vbi={0xfff, 0x3300, 0x3ff, 0x42474752, [0x7, 0x8], [0xef, 0x80], 0x1}}}) (async) r2 = syz_open_dev$video(&(0x7f0000000280), 0x0, 0x400400) (async) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_S_PRIORITY(r3, 0x40045644, 0x2) (async) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc02c5625, &(0x7f0000000540)={0x0, 0x800, @value=0x8}) (async) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f00000002c0)={0x9, {0x200, 0x7, 0x8000, 0x100}, {0x8001, 0x648f, 0x2, 0x4}, {0x3f, 0x1}}) (async) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000000)={0x6, {0x81, 0x3, 0x3ff, 0x3}, {0x5, 0x3, 0x8, 0x1}, {0x3, 0x7fffffff}}) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f0000000140)={{0x1, @name="3029a2fb0352ad4826742ff5da357702a9417600"}, "85b91bc200571154d4d5c377510400070000ef6e4165b200"}) (async, rerun: 64) ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, &(0x7f0000000480)) (async, rerun: 64) ioctl$VIDIOC_G_TUNER(r5, 0xc054561d, &(0x7f00000000c0)={0x9, "c4cbe6044fc839e04761f7785fc5b2b37812aabd7e736198df1e6265719654fa", 0x3, 0x8, 0xfffffffe, 0x1, 0x4, 0x2, 0x800, 0x7fffffff}) 11:42:42 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000080)={0x0, 0x9, 0x300b, 0x1}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000100)={0xc, {0x8, 0xfffff551, 0x20, 0x8}, {0x869, 0x5, 0x4}, {0x9, 0x1}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x800000) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000080)={0x0, 0x9, 0x300b, 0x1}) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000100)={0xc, {0x8, 0xfffff551, 0x20, 0x8}, {0x869, 0x5, 0x4}, {0x9, 0x1}}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) (async) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x800000) (async) 11:42:42 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000000)={0x8, 0x34343452, 0x8, 0x200, 0x2, @stepwise={{0x7, 0x9}, {0xffffff7f, 0x47}, {0x2, 0x80}}}) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000080)={0x8, {0x8, 0xffffffff, 0x9741, 0x80}, {0x4, 0xa, 0x800, 0x4}, {0x10000, 0x10001}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:42 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000080)={0x0, 0x9, 0x300b, 0x1}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000100)={0xc, {0x8, 0xfffff551, 0x20, 0x8}, {0x869, 0x5, 0x4}, {0x9, 0x1}}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) (async) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x800000) 11:42:42 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) (async) 11:42:42 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40]}}}) 11:42:42 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r2) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000100)) r3 = socket(0x18, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r3) setsockopt$MRT_ASSERT(r3, 0x0, 0xcf, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)={0x16c, r1, 0x8, 0x70bd28, 0x2, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xed}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ea70fda}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfa9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x118, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'pimreg\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x41}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3d5}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40010}, 0x4001) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @win={{0x3a, 0xffff7a61, 0xcf2b, 0x4}, 0xb, 0x35ac, &(0x7f0000000300)={{0xd7, 0x101, 0x76419d3f}, &(0x7f0000000180)={{0x76a, 0xffffffff, 0x5, 0x1ff}, &(0x7f00000001c0)={{0x7, 0x5, 0x80000001, 0x3f}}}}, 0x1f, &(0x7f0000000200)="4692a06fa7545aa974a5f8a7a622054ee0aaf2e30b954a8c1999fb5d5dc4b2ba6471e0b59c516ae84ff5eb006012ad341cf1f0cec2ec6a238ed3b1e452ba4b255910058d06dba212adf5284cce04dddd909db599d0f5a52b1a032a8c9ca0039d048dd497724548d983dbd42267252d1a301c33a899767bb35270c7682974933a92232dec8fbdfb7e7421ce0bd83d00983490b39abd790b93b9e0a35d9eeec8abfc079bbfaa9a85347a779a04d382f962a20bb582d66f01edb9a8864825fbb1e3db4662e0e3f52a0ea31e70994eb396fafb03a4679955cddb4fca07f1aeffa36a61b2eeaebd255af8927548dbf065ff33ad7386", 0x62}}}) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000080)={0x3ff, 0x0, 0x1004, 0xffe5, 0x7, 0x8001, 0x5}) 11:42:42 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}}) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x1, 0x34d, '\x00', &(0x7f0000000000)=0x5}) 11:42:42 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r2) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000100)) (async, rerun: 32) r3 = socket(0x18, 0x0, 0x0) (rerun: 32) syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r3) (async) setsockopt$MRT_ASSERT(r3, 0x0, 0xcf, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)={0x16c, r1, 0x8, 0x70bd28, 0x2, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xed}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ea70fda}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfa9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x118, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'pimreg\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x41}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3d5}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40010}, 0x4001) (async, rerun: 32) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @win={{0x3a, 0xffff7a61, 0xcf2b, 0x4}, 0xb, 0x35ac, &(0x7f0000000300)={{0xd7, 0x101, 0x76419d3f}, &(0x7f0000000180)={{0x76a, 0xffffffff, 0x5, 0x1ff}, &(0x7f00000001c0)={{0x7, 0x5, 0x80000001, 0x3f}}}}, 0x1f, &(0x7f0000000200)="4692a06fa7545aa974a5f8a7a622054ee0aaf2e30b954a8c1999fb5d5dc4b2ba6471e0b59c516ae84ff5eb006012ad341cf1f0cec2ec6a238ed3b1e452ba4b255910058d06dba212adf5284cce04dddd909db599d0f5a52b1a032a8c9ca0039d048dd497724548d983dbd42267252d1a301c33a899767bb35270c7682974933a92232dec8fbdfb7e7421ce0bd83d00983490b39abd790b93b9e0a35d9eeec8abfc079bbfaa9a85347a779a04d382f962a20bb582d66f01edb9a8864825fbb1e3db4662e0e3f52a0ea31e70994eb396fafb03a4679955cddb4fca07f1aeffa36a61b2eeaebd255af8927548dbf065ff33ad7386", 0x62}}}) (async, rerun: 32) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000080)={0x3ff, 0x0, 0x1004, 0xffe5, 0x7, 0x8001, 0x5}) 11:42:42 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1]}}}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000080)={0x4, 0x0, '\x00', {0x0, @bt={0x6, 0xf16, 0x0, 0x1, 0x1f800000000000, 0x7, 0x7, 0xfa, 0x4, 0x1, 0x6, 0x3, 0xfffeffff, 0x5, 0x3, 0x28, {0xa67b, 0x9}, 0x5, 0x2}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, '\x00', @bt={0x1, 0xee, 0x80, 0x7ff, 0x169, 0x101, 0x11, 0x1}}) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000140)) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)=0x5) 11:42:42 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000000)={0x8, 0x34343452, 0x8, 0x200, 0x2, @stepwise={{0x7, 0x9}, {0xffffff7f, 0x47}, {0x2, 0x80}}}) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000080)={0x8, {0x8, 0xffffffff, 0x9741, 0x80}, {0x4, 0xa, 0x800, 0x4}, {0x10000, 0x10001}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000000)={0x8, 0x34343452, 0x8, 0x200, 0x2, @stepwise={{0x7, 0x9}, {0xffffff7f, 0x47}, {0x2, 0x80}}}) (async) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000080)={0x8, {0x8, 0xffffffff, 0x9741, 0x80}, {0x4, 0xa, 0x800, 0x4}, {0x10000, 0x10001}}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) 11:42:42 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}}) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x1, 0x34d, '\x00', &(0x7f0000000000)=0x5}) 11:42:42 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r2) (async, rerun: 32) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000100)) (rerun: 32) r3 = socket(0x18, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r3) (async, rerun: 32) setsockopt$MRT_ASSERT(r3, 0x0, 0xcf, 0x0, 0x0) (rerun: 32) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)={0x16c, r1, 0x8, 0x70bd28, 0x2, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xed}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ea70fda}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfa9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x118, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'pimreg\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x41}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3d5}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40010}, 0x4001) (async) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @win={{0x3a, 0xffff7a61, 0xcf2b, 0x4}, 0xb, 0x35ac, &(0x7f0000000300)={{0xd7, 0x101, 0x76419d3f}, &(0x7f0000000180)={{0x76a, 0xffffffff, 0x5, 0x1ff}, &(0x7f00000001c0)={{0x7, 0x5, 0x80000001, 0x3f}}}}, 0x1f, &(0x7f0000000200)="4692a06fa7545aa974a5f8a7a622054ee0aaf2e30b954a8c1999fb5d5dc4b2ba6471e0b59c516ae84ff5eb006012ad341cf1f0cec2ec6a238ed3b1e452ba4b255910058d06dba212adf5284cce04dddd909db599d0f5a52b1a032a8c9ca0039d048dd497724548d983dbd42267252d1a301c33a899767bb35270c7682974933a92232dec8fbdfb7e7421ce0bd83d00983490b39abd790b93b9e0a35d9eeec8abfc079bbfaa9a85347a779a04d382f962a20bb582d66f01edb9a8864825fbb1e3db4662e0e3f52a0ea31e70994eb396fafb03a4679955cddb4fca07f1aeffa36a61b2eeaebd255af8927548dbf065ff33ad7386", 0x62}}}) (async) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000080)={0x3ff, 0x0, 0x1004, 0xffe5, 0x7, 0x8001, 0x5}) 11:42:42 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000000)={0x0, 0x3, 0x33e, 0x400, 0xd93, 0x2, 0x4}) 11:42:42 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000140)={0x1, 0x0, 0x100, 0x0, {0x9, 0x5, 0x3, 0x80000001}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x400000, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xe73a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x57]}}}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r3 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f00000000c0)={0x7, 0x38414261, 0x5, 0xf0bc, 0x3, @stepwise={{0x80000000, 0x10001}, {0x2, 0x6}, {0xffffffff}}}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000180)={0x80000001, 0x0, 0x100e, 0x0, 0x8, 0xfffffc0c, 0x0, 0x1}) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000080)={0x1, 0x200}) 11:42:42 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000000)={0x0, 0x3, 0x33e, 0x400, 0xd93, 0x2, 0x4}) 11:42:42 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000000)={0x8, 0x34343452, 0x8, 0x200, 0x2, @stepwise={{0x7, 0x9}, {0xffffff7f, 0x47}, {0x2, 0x80}}}) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000080)={0x8, {0x8, 0xffffffff, 0x9741, 0x80}, {0x4, 0xa, 0x800, 0x4}, {0x10000, 0x10001}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000000)={0x8, 0x34343452, 0x8, 0x200, 0x2, @stepwise={{0x7, 0x9}, {0xffffff7f, 0x47}, {0x2, 0x80}}}) (async) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000080)={0x8, {0x8, 0xffffffff, 0x9741, 0x80}, {0x4, 0xa, 0x800, 0x4}, {0x10000, 0x10001}}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) 11:42:42 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000100)={0x0, 0x4fe0, 0x8001, '\x00', &(0x7f00000000c0)=0x81}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @pix={0x4, 0x2, 0x4f565559, 0x0, 0x5, 0x5, 0x0, 0x10000, 0x0, 0x6, 0x2, 0x1}}, 0x8}) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000000)={0x7, 0x80, @value=0x3}) 11:42:42 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1]}}}) (async) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000080)={0x4, 0x0, '\x00', {0x0, @bt={0x6, 0xf16, 0x0, 0x1, 0x1f800000000000, 0x7, 0x7, 0xfa, 0x4, 0x1, 0x6, 0x3, 0xfffeffff, 0x5, 0x3, 0x28, {0xa67b, 0x9}, 0x5, 0x2}}}) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, '\x00', @bt={0x1, 0xee, 0x80, 0x7ff, 0x169, 0x101, 0x11, 0x1}}) (async) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000140)) (async) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)=0x5) 11:42:42 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}}) (async) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x1, 0x34d, '\x00', &(0x7f0000000000)=0x5}) 11:42:42 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000000)={0x0, 0x3, 0x33e, 0x400, 0xd93, 0x2, 0x4}) 11:42:42 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000100)={0x0, 0x4fe0, 0x8001, '\x00', &(0x7f00000000c0)=0x81}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @pix={0x4, 0x2, 0x4f565559, 0x0, 0x5, 0x5, 0x0, 0x10000, 0x0, 0x6, 0x2, 0x1}}, 0x8}) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000000)={0x7, 0x80, @value=0x3}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000100)={0x0, 0x4fe0, 0x8001, '\x00', &(0x7f00000000c0)=0x81}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @pix={0x4, 0x2, 0x4f565559, 0x0, 0x5, 0x5, 0x0, 0x10000, 0x0, 0x6, 0x2, 0x1}}, 0x8}) (async) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) (async) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000000)={0x7, 0x80, @value=0x3}) (async) 11:42:42 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000140)={0x1, 0x0, 0x100, 0x0, {0x9, 0x5, 0x3, 0x80000001}}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x400000, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xe73a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x57]}}}) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) r3 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f00000000c0)={0x7, 0x38414261, 0x5, 0xf0bc, 0x3, @stepwise={{0x80000000, 0x10001}, {0x2, 0x6}, {0xffffffff}}}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000180)={0x80000001, 0x0, 0x100e, 0x0, 0x8, 0xfffffc0c, 0x0, 0x1}) (async) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000080)={0x1, 0x200}) 11:42:42 executing program 5: syz_open_dev$ptys(0xc, 0x3, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r1) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000100)) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r3) ioctl$TIOCL_SELLOADLUT(r3, 0x541c, &(0x7f0000000140)={0x5, 0x1, 0x6, 0x43, 0x6}) ioctl$TIOCSIG(r3, 0x40045436, 0x39) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r4, 0x4b36) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8000, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1]}}}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x109500, 0x0) 11:42:42 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1]}}}) (async) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000080)={0x4, 0x0, '\x00', {0x0, @bt={0x6, 0xf16, 0x0, 0x1, 0x1f800000000000, 0x7, 0x7, 0xfa, 0x4, 0x1, 0x6, 0x3, 0xfffeffff, 0x5, 0x3, 0x28, {0xa67b, 0x9}, 0x5, 0x2}}}) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, '\x00', @bt={0x1, 0xee, 0x80, 0x7ff, 0x169, 0x101, 0x11, 0x1}}) (async) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000140)) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)=0x5) 11:42:42 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000100)={0x0, 0x4fe0, 0x8001, '\x00', &(0x7f00000000c0)=0x81}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @pix={0x4, 0x2, 0x4f565559, 0x0, 0x5, 0x5, 0x0, 0x10000, 0x0, 0x6, 0x2, 0x1}}, 0x8}) (async, rerun: 64) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) (async, rerun: 64) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000000)={0x7, 0x80, @value=0x3}) 11:42:42 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000080)={0xdf, 0x3, 0x1, 0x0, 0x5, 0x7, 0x6}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000100)={0xa, @output={0x0, 0x1, {0x8, 0x8000}, 0xd6c, 0x6}}) openat$vimc1(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, &(0x7f0000000280)={0x7, 0x7, 0x35fc}) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000200)={0x9, 0x80000001, @name="c8f67ff0636c132dc552bae4879c5c734cd94e97a522a26722f67db428f8ffcb"}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x2]}}, 0xffffffff}) 11:42:42 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000140)={0x1, 0x0, 0x100, 0x0, {0x9, 0x5, 0x3, 0x80000001}}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x400000, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xe73a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x57]}}}) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r3 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f00000000c0)={0x7, 0x38414261, 0x5, 0xf0bc, 0x3, @stepwise={{0x80000000, 0x10001}, {0x2, 0x6}, {0xffffffff}}}) (async) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000180)={0x80000001, 0x0, 0x100e, 0x0, 0x8, 0xfffffc0c, 0x0, 0x1}) (async) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000080)={0x1, 0x200}) 11:42:42 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}}) 11:42:42 executing program 5: syz_open_dev$ptys(0xc, 0x3, 0x0) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r1) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000100)) (async) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r3) (async) ioctl$TIOCL_SELLOADLUT(r3, 0x541c, &(0x7f0000000140)={0x5, 0x1, 0x6, 0x43, 0x6}) (async) ioctl$TIOCSIG(r3, 0x40045436, 0x39) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r4, 0x4b36) (async) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8000, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1]}}}) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x109500, 0x0) 11:42:42 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x6, 0x0, 0x1, {0xc, @sliced={0x6, [0x3a, 0x1, 0x2, 0x3, 0x7b2, 0x9, 0x1ff, 0x3, 0x464, 0x401, 0x9, 0x9, 0x5, 0x1000, 0xff, 0xfff, 0x7fff, 0xdc, 0x95cd, 0x5, 0xd32c, 0x9, 0x9, 0x1f, 0x7, 0xff01, 0x0, 0x8001, 0x2, 0x200, 0x6, 0x2, 0x1000, 0x8, 0x3, 0x20, 0x1, 0x9, 0x8000, 0x9, 0x7fff, 0x2, 0x1, 0xdb28, 0x4, 0xd106, 0x24e, 0xe000], 0x8007}}, 0x1}) 11:42:42 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0x1, &(0x7f0000000080)="bb6b4b53f3c7817b68c59a279424b3105b024234132539646f0677d0936bf39e5ccda5af43953dc0564cecb7b27dda1958c0719ff2352ab22fd6dcd0340001ae99f578cf", &(0x7f0000000000)=""/13}, 0x20) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:43 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}}) 11:42:43 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000080)={0xdf, 0x3, 0x1, 0x0, 0x5, 0x7, 0x6}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000100)={0xa, @output={0x0, 0x1, {0x8, 0x8000}, 0xd6c, 0x6}}) openat$vimc1(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, &(0x7f0000000280)={0x7, 0x7, 0x35fc}) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000200)={0x9, 0x80000001, @name="c8f67ff0636c132dc552bae4879c5c734cd94e97a522a26722f67db428f8ffcb"}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x2]}}, 0xffffffff}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000080)={0xdf, 0x3, 0x1, 0x0, 0x5, 0x7, 0x6}) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000100)={0xa, @output={0x0, 0x1, {0x8, 0x8000}, 0xd6c, 0x6}}) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) (async) ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, &(0x7f0000000280)={0x7, 0x7, 0x35fc}) (async) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000200)={0x9, 0x80000001, @name="c8f67ff0636c132dc552bae4879c5c734cd94e97a522a26722f67db428f8ffcb"}) (async) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x2]}}, 0xffffffff}) (async) 11:42:43 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}) 11:42:43 executing program 5: syz_open_dev$ptys(0xc, 0x3, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r1) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000100)) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r3) ioctl$TIOCL_SELLOADLUT(r3, 0x541c, &(0x7f0000000140)={0x5, 0x1, 0x6, 0x43, 0x6}) ioctl$TIOCSIG(r3, 0x40045436, 0x39) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r4, 0x4b36) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8000, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1]}}}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x109500, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) (async) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r1) (async) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000100)) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r3) (async) ioctl$TIOCL_SELLOADLUT(r3, 0x541c, &(0x7f0000000140)={0x5, 0x1, 0x6, 0x43, 0x6}) (async) ioctl$TIOCSIG(r3, 0x40045436, 0x39) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDENABIO(r4, 0x4b36) (async) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8000, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1]}}}) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x109500, 0x0) (async) 11:42:43 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0x1, &(0x7f0000000080)="bb6b4b53f3c7817b68c59a279424b3105b024234132539646f0677d0936bf39e5ccda5af43953dc0564cecb7b27dda1958c0719ff2352ab22fd6dcd0340001ae99f578cf", &(0x7f0000000000)=""/13}, 0x20) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0x1, &(0x7f0000000080)="bb6b4b53f3c7817b68c59a279424b3105b024234132539646f0677d0936bf39e5ccda5af43953dc0564cecb7b27dda1958c0719ff2352ab22fd6dcd0340001ae99f578cf", &(0x7f0000000000)=""/13}, 0x20) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) 11:42:43 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}}) 11:42:43 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (async, rerun: 64) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x6, 0x0, 0x1, {0xc, @sliced={0x6, [0x3a, 0x1, 0x2, 0x3, 0x7b2, 0x9, 0x1ff, 0x3, 0x464, 0x401, 0x9, 0x9, 0x5, 0x1000, 0xff, 0xfff, 0x7fff, 0xdc, 0x95cd, 0x5, 0xd32c, 0x9, 0x9, 0x1f, 0x7, 0xff01, 0x0, 0x8001, 0x2, 0x200, 0x6, 0x2, 0x1000, 0x8, 0x3, 0x20, 0x1, 0x9, 0x8000, 0x9, 0x7fff, 0x2, 0x1, 0xdb28, 0x4, 0xd106, 0x24e, 0xe000], 0x8007}}, 0x1}) (rerun: 64) 11:42:43 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000080)={0xdf, 0x3, 0x1, 0x0, 0x5, 0x7, 0x6}) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000100)={0xa, @output={0x0, 0x1, {0x8, 0x8000}, 0xd6c, 0x6}}) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, &(0x7f0000000280)={0x7, 0x7, 0x35fc}) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000200)={0x9, 0x80000001, @name="c8f67ff0636c132dc552bae4879c5c734cd94e97a522a26722f67db428f8ffcb"}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x2]}}, 0xffffffff}) 11:42:43 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}) (async) 11:42:43 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0x3, 0xc7, 0xfffffffc, 0x9}) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) r3 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000000100)={0xa, {0xfffffe00, 0x6, 0x10001, 0x7fff}}) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f00000001c0)) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000080)={0xcf, 0x1, 0x6, 0x180, 0x6, 0x8e5, 0x2}) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f0000000000)={0x0, {0xce7, 0xfffffffe}}) 11:42:43 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) r3 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f00000000c0)={0x0, {0x2, 0x3}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) 11:42:43 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) (async) r3 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f00000000c0)={0x0, {0x2, 0x3}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) 11:42:43 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0x1, &(0x7f0000000080)="bb6b4b53f3c7817b68c59a279424b3105b024234132539646f0677d0936bf39e5ccda5af43953dc0564cecb7b27dda1958c0719ff2352ab22fd6dcd0340001ae99f578cf", &(0x7f0000000000)=""/13}, 0x20) (async) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:43 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0x3, 0xc7, 0xfffffffc, 0x9}) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) r3 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000000100)={0xa, {0xfffffe00, 0x6, 0x10001, 0x7fff}}) (async, rerun: 32) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 32) ioctl$VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f00000001c0)) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000080)={0xcf, 0x1, 0x6, 0x180, 0x6, 0x8e5, 0x2}) (async) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f0000000000)={0x0, {0xce7, 0xfffffffe}}) 11:42:43 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000080)='GPL\x00', 0x6, 0xe4, &(0x7f00000000c0)=""/228, 0x41100, 0x3, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x0, 0x998, 0x1f}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[r1, r2, 0x1]}, 0x80) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0xfffe]}}}) 11:42:43 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}) (async) 11:42:43 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async, rerun: 64) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (rerun: 64) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0x3, 0xc7, 0xfffffffc, 0x9}) (async) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) r3 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000000100)={0xa, {0xfffffe00, 0x6, 0x10001, 0x7fff}}) (async) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f00000001c0)) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000080)={0xcf, 0x1, 0x6, 0x180, 0x6, 0x8e5, 0x2}) (async) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f0000000000)={0x0, {0xce7, 0xfffffffe}}) 11:42:43 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 32) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) (async, rerun: 32) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) r3 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f00000000c0)={0x0, {0x2, 0x3}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) 11:42:43 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000001c0)={@multicast2, @multicast1, 0x0, "6556ecb290a77fc888b31df26e0bb2d58c1e0ee90e84c8a9c0bfa14be72a4e53"}, 0x3c) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000040)={@broadcast, @dev={0xac, 0x14, 0x14, 0x31}}) 11:42:43 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x6, 0x0, 0x1, {0xc, @sliced={0x6, [0x3a, 0x1, 0x2, 0x3, 0x7b2, 0x9, 0x1ff, 0x3, 0x464, 0x401, 0x9, 0x9, 0x5, 0x1000, 0xff, 0xfff, 0x7fff, 0xdc, 0x95cd, 0x5, 0xd32c, 0x9, 0x9, 0x1f, 0x7, 0xff01, 0x0, 0x8001, 0x2, 0x200, 0x6, 0x2, 0x1000, 0x8, 0x3, 0x20, 0x1, 0x9, 0x8000, 0x9, 0x7fff, 0x2, 0x1, 0xdb28, 0x4, 0xd106, 0x24e, 0xe000], 0x8007}}, 0x1}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x6, 0x0, 0x1, {0xc, @sliced={0x6, [0x3a, 0x1, 0x2, 0x3, 0x7b2, 0x9, 0x1ff, 0x3, 0x464, 0x401, 0x9, 0x9, 0x5, 0x1000, 0xff, 0xfff, 0x7fff, 0xdc, 0x95cd, 0x5, 0xd32c, 0x9, 0x9, 0x1f, 0x7, 0xff01, 0x0, 0x8001, 0x2, 0x200, 0x6, 0x2, 0x1000, 0x8, 0x3, 0x20, 0x1, 0x9, 0x8000, 0x9, 0x7fff, 0x2, 0x1, 0xdb28, 0x4, 0xd106, 0x24e, 0xe000], 0x8007}}, 0x1}) (async) 11:42:43 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000080)='GPL\x00', 0x6, 0xe4, &(0x7f00000000c0)=""/228, 0x41100, 0x3, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x0, 0x998, 0x1f}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[r1, r2, 0x1]}, 0x80) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0xfffe]}}}) 11:42:43 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000001c0)={@multicast2, @multicast1, 0x0, "6556ecb290a77fc888b31df26e0bb2d58c1e0ee90e84c8a9c0bfa14be72a4e53"}, 0x3c) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000040)={@broadcast, @dev={0xac, 0x14, 0x14, 0x31}}) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000001c0)={@multicast2, @multicast1, 0x0, "6556ecb290a77fc888b31df26e0bb2d58c1e0ee90e84c8a9c0bfa14be72a4e53"}, 0x3c) (async) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000040)={@broadcast, @dev={0xac, 0x14, 0x14, 0x31}}) (async) 11:42:43 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r2) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f00000000c0)) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000080)={0x0, 0x3f, 0x0, '\x00', &(0x7f0000000000)=0x4}) 11:42:43 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x6, 0x3, 0x6, 0x80, 0x3ca4, 0x8001, 0x4}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f00000000c0)={0x0, 0x1ff, 0x6c, '\x00', &(0x7f0000000080)=0x20}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:43 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000080)='GPL\x00', 0x6, 0xe4, &(0x7f00000000c0)=""/228, 0x41100, 0x3, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x0, 0x998, 0x1f}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[r1, r2, 0x1]}, 0x80) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0xfffe]}}}) 11:42:43 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000001c0)={@multicast2, @multicast1, 0x0, "6556ecb290a77fc888b31df26e0bb2d58c1e0ee90e84c8a9c0bfa14be72a4e53"}, 0x3c) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000040)={@broadcast, @dev={0xac, 0x14, 0x14, 0x31}}) 11:42:43 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000000)={0x80000000, 0x0, 0x201b, 0x200, 0x8, 0xfa, 0x8000, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:44 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000000)={0x0, 0x0, {0xc9a7, 0x3f, 0x4, 0x4}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x46, 0x0, 0x0, 0x0, 0x2]}}}) 11:42:44 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x40, 0x0) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000080)={0x9, "388bf97b7a691a8c45961b40f4a459adc2ea446c37c488ad7b1f31f11c065c95", 0x4c, 0x4, 0x7fffffff, 0x8, 0x2}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:44 executing program 2: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffffffffffffffff) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/4096}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) 11:42:44 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000000)={0x0, 0x0, {0xc9a7, 0x3f, 0x4, 0x4}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x46, 0x0, 0x0, 0x0, 0x2]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000000)={0x0, 0x0, {0xc9a7, 0x3f, 0x4, 0x4}}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x46, 0x0, 0x0, 0x0, 0x2]}}}) (async) 11:42:44 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async, rerun: 32) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (rerun: 32) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r2) (async) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f00000000c0)) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000080)={0x0, 0x3f, 0x0, '\x00', &(0x7f0000000000)=0x4}) 11:42:44 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x6, 0x3, 0x6, 0x80, 0x3ca4, 0x8001, 0x4}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f00000000c0)={0x0, 0x1ff, 0x6c, '\x00', &(0x7f0000000080)=0x20}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x6, 0x3, 0x6, 0x80, 0x3ca4, 0x8001, 0x4}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f00000000c0)={0x0, 0x1ff, 0x6c, '\x00', &(0x7f0000000080)=0x20}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) 11:42:44 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x40, 0x0) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000080)={0x9, "388bf97b7a691a8c45961b40f4a459adc2ea446c37c488ad7b1f31f11c065c95", 0x4c, 0x4, 0x7fffffff, 0x8, 0x2}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$video(&(0x7f0000000000), 0x40, 0x0) (async) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000080)={0x9, "388bf97b7a691a8c45961b40f4a459adc2ea446c37c488ad7b1f31f11c065c95", 0x4c, 0x4, 0x7fffffff, 0x8, 0x2}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) 11:42:44 executing program 2: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffffffffffffffff) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/4096}) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) 11:42:44 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000000)={0x80000000, 0x0, 0x201b, 0x200, 0x8, 0xfa, 0x8000, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:44 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000000)={0x0, 0x0, {0xc9a7, 0x3f, 0x4, 0x4}}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x46, 0x0, 0x0, 0x0, 0x2]}}}) 11:42:44 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x40, 0x0) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000080)={0x9, "388bf97b7a691a8c45961b40f4a459adc2ea446c37c488ad7b1f31f11c065c95", 0x4c, 0x4, 0x7fffffff, 0x8, 0x2}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:44 executing program 2: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffffffffffffffff) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/4096}) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) 11:42:44 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000000)={0x80000000, 0x0, 0x201b, 0x200, 0x8, 0xfa, 0x8000, 0x1}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:44 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x6, 0x3, 0x6, 0x80, 0x3ca4, 0x8001, 0x4}) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f00000000c0)={0x0, 0x1ff, 0x6c, '\x00', &(0x7f0000000080)=0x20}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:44 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={@multicast2, @local}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) 11:42:44 executing program 2: ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000000)={0xe, 0x81, 0x2}) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7, 0x1, {0xc, @raw_data="ecb003440c9eee3d2140beea8c3b2fbb55000c9d495e230d882f27091056aa0b4ad8ae1429aead40d9ea344c9dc93c26930331630ba04d4c348d5e0b9cd1c5c3d5f84d42a09c5182d13ed062e0b6eaf9c697da76bd5f3eaccfa65a21ae0397ebab602b6370cad7ade4aa3a75fd65de8cb7a07bdd0714c6eb860ff7d38152ee526a02ab1eb6886680321c6c5fb301d5f76296ec837ab79fa34fa7ff97d6503744892854dbd7c4e7e2f61137d7f6feabe989b5ea7c0985600008b200db222959299a457e36a8123e61"}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 11:42:44 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r2) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f00000000c0)) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000080)={0x0, 0x3f, 0x0, '\x00', &(0x7f0000000000)=0x4}) 11:42:44 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:44 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={@multicast2, @local}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={@multicast2, @local}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) (async) 11:42:44 executing program 4: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f00000001c0)={0x0, 0x5, 0x14, '\x00', &(0x7f0000000180)=0x1}) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x4, 0xe239, 0x2, {0x6, @sliced={0x3, [0xfff7, 0x6e04, 0x8, 0x6c14, 0xfea6, 0x9f90, 0x7, 0x400, 0x0, 0x4, 0x37, 0x20, 0x8000, 0xff, 0x5, 0x2, 0x9, 0x81, 0x2d3, 0x3f, 0x2, 0x9, 0xbcd, 0x8, 0x0, 0x8, 0x3ff, 0x1, 0x401, 0x4, 0x6, 0x9, 0xff, 0x4, 0x1000, 0x9ac, 0xdd, 0xe6, 0xfff8, 0x200, 0x8380, 0x1, 0x4, 0x7, 0x7fff, 0x4, 0x20, 0x2], 0x8}}, 0x6}) 11:42:44 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={@multicast2, @local}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) 11:42:44 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}}) 11:42:44 executing program 2: ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000000)={0xe, 0x81, 0x2}) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7, 0x1, {0xc, @raw_data="ecb003440c9eee3d2140beea8c3b2fbb55000c9d495e230d882f27091056aa0b4ad8ae1429aead40d9ea344c9dc93c26930331630ba04d4c348d5e0b9cd1c5c3d5f84d42a09c5182d13ed062e0b6eaf9c697da76bd5f3eaccfa65a21ae0397ebab602b6370cad7ade4aa3a75fd65de8cb7a07bdd0714c6eb860ff7d38152ee526a02ab1eb6886680321c6c5fb301d5f76296ec837ab79fa34fa7ff97d6503744892854dbd7c4e7e2f61137d7f6feabe989b5ea7c0985600008b200db222959299a457e36a8123e61"}}) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 11:42:44 executing program 4: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f00000001c0)={0x0, 0x5, 0x14, '\x00', &(0x7f0000000180)=0x1}) (async) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x4, 0xe239, 0x2, {0x6, @sliced={0x3, [0xfff7, 0x6e04, 0x8, 0x6c14, 0xfea6, 0x9f90, 0x7, 0x400, 0x0, 0x4, 0x37, 0x20, 0x8000, 0xff, 0x5, 0x2, 0x9, 0x81, 0x2d3, 0x3f, 0x2, 0x9, 0xbcd, 0x8, 0x0, 0x8, 0x3ff, 0x1, 0x401, 0x4, 0x6, 0x9, 0xff, 0x4, 0x1000, 0x9ac, 0xdd, 0xe6, 0xfff8, 0x200, 0x8380, 0x1, 0x4, 0x7, 0x7fff, 0x4, 0x20, 0x2], 0x8}}, 0x6}) 11:42:44 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x9, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0xfffd, 0xdac5, 0x0, 0x0, 0x0, 0x1000, 0x6]}}}) 11:42:44 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) 11:42:44 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x0, {0xd, @sliced={0x200, [0x0, 0x0, 0x0, 0x0, 0xe952, 0x0, 0x200, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x2000, 0x0, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f]}}}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x4882, 0x0) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000340)={0x3, "723e48862af2142a796a2b2b31503aaf55d183d18d06dead7e73cdd289ea76b6", 0x0, 0x1}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000100)) ioctl$VIDIOC_S_MODULATOR(r3, 0x40445637, &(0x7f0000000180)={0xffffffc1, "a743b3328432bb6abb5aa019b55c90040fb1149e0b4b84c698dc59d7a3d9517d", 0x400, 0x1, 0x2d, 0x1, 0x5}) 11:42:44 executing program 2: ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000000)={0xe, 0x81, 0x2}) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7, 0x1, {0xc, @raw_data="ecb003440c9eee3d2140beea8c3b2fbb55000c9d495e230d882f27091056aa0b4ad8ae1429aead40d9ea344c9dc93c26930331630ba04d4c348d5e0b9cd1c5c3d5f84d42a09c5182d13ed062e0b6eaf9c697da76bd5f3eaccfa65a21ae0397ebab602b6370cad7ade4aa3a75fd65de8cb7a07bdd0714c6eb860ff7d38152ee526a02ab1eb6886680321c6c5fb301d5f76296ec837ab79fa34fa7ff97d6503744892854dbd7c4e7e2f61137d7f6feabe989b5ea7c0985600008b200db222959299a457e36a8123e61"}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000000)={0xe, 0x81, 0x2}) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7, 0x1, {0xc, @raw_data="ecb003440c9eee3d2140beea8c3b2fbb55000c9d495e230d882f27091056aa0b4ad8ae1429aead40d9ea344c9dc93c26930331630ba04d4c348d5e0b9cd1c5c3d5f84d42a09c5182d13ed062e0b6eaf9c697da76bd5f3eaccfa65a21ae0397ebab602b6370cad7ade4aa3a75fd65de8cb7a07bdd0714c6eb860ff7d38152ee526a02ab1eb6886680321c6c5fb301d5f76296ec837ab79fa34fa7ff97d6503744892854dbd7c4e7e2f61137d7f6feabe989b5ea7c0985600008b200db222959299a457e36a8123e61"}}) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) 11:42:44 executing program 4: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f00000001c0)={0x0, 0x5, 0x14, '\x00', &(0x7f0000000180)=0x1}) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x4, 0xe239, 0x2, {0x6, @sliced={0x3, [0xfff7, 0x6e04, 0x8, 0x6c14, 0xfea6, 0x9f90, 0x7, 0x400, 0x0, 0x4, 0x37, 0x20, 0x8000, 0xff, 0x5, 0x2, 0x9, 0x81, 0x2d3, 0x3f, 0x2, 0x9, 0xbcd, 0x8, 0x0, 0x8, 0x3ff, 0x1, 0x401, 0x4, 0x6, 0x9, 0xff, 0x4, 0x1000, 0x9ac, 0xdd, 0xe6, 0xfff8, 0x200, 0x8380, 0x1, 0x4, 0x7, 0x7fff, 0x4, 0x20, 0x2], 0x8}}, 0x6}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f00000001c0)={0x0, 0x5, 0x14, '\x00', &(0x7f0000000180)=0x1}) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x4, 0xe239, 0x2, {0x6, @sliced={0x3, [0xfff7, 0x6e04, 0x8, 0x6c14, 0xfea6, 0x9f90, 0x7, 0x400, 0x0, 0x4, 0x37, 0x20, 0x8000, 0xff, 0x5, 0x2, 0x9, 0x81, 0x2d3, 0x3f, 0x2, 0x9, 0xbcd, 0x8, 0x0, 0x8, 0x3ff, 0x1, 0x401, 0x4, 0x6, 0x9, 0xff, 0x4, 0x1000, 0x9ac, 0xdd, 0xe6, 0xfff8, 0x200, 0x8380, 0x1, 0x4, 0x7, 0x7fff, 0x4, 0x20, 0x2], 0x8}}, 0x6}) (async) 11:42:44 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}}) 11:42:45 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x0, {0xd, @sliced={0x200, [0x0, 0x0, 0x0, 0x0, 0xe952, 0x0, 0x200, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x2000, 0x0, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f]}}}) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x4882, 0x0) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000340)={0x3, "723e48862af2142a796a2b2b31503aaf55d183d18d06dead7e73cdd289ea76b6", 0x0, 0x1}) (async, rerun: 64) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 64) ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000100)) (async) ioctl$VIDIOC_S_MODULATOR(r3, 0x40445637, &(0x7f0000000180)={0xffffffc1, "a743b3328432bb6abb5aa019b55c90040fb1149e0b4b84c698dc59d7a3d9517d", 0x400, 0x1, 0x2d, 0x1, 0x5}) 11:42:45 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000180)={0x5, "977fc85e4374b1c626b5db522fb6d0a73a933aa7e3f8ad9abeea0a3c8f5e7eae", 0x2, 0x10, 0x1, 0x7ff, 0x4, 0x2, 0x8, 0x8}) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000140)={0x60000, 0x8001, 0x407f, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0xa30001, 0x0, '\x00', @p_u16=&(0x7f0000000200)=0x40}}) 11:42:45 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x9, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0xfffd, 0xdac5, 0x0, 0x0, 0x0, 0x1000, 0x6]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x9, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0xfffd, 0xdac5, 0x0, 0x0, 0x0, 0x1000, 0x6]}}}) (async) 11:42:45 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}}) 11:42:45 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x0, {0xd, @sliced={0x200, [0x0, 0x0, 0x0, 0x0, 0xe952, 0x0, 0x200, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x2000, 0x0, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f]}}}) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x4882, 0x0) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000340)={0x3, "723e48862af2142a796a2b2b31503aaf55d183d18d06dead7e73cdd289ea76b6", 0x0, 0x1}) (async) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000100)) (async) ioctl$VIDIOC_S_MODULATOR(r3, 0x40445637, &(0x7f0000000180)={0xffffffc1, "a743b3328432bb6abb5aa019b55c90040fb1149e0b4b84c698dc59d7a3d9517d", 0x400, 0x1, 0x2d, 0x1, 0x5}) 11:42:45 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:45 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000001c0)={@multicast2, @multicast1, 0x0, "6556ecb290a77fc888b31df26e0bb2d58c1e0ee90e84c8a9c0bfa14be72a4e53"}, 0x3c) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000000)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) 11:42:45 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000180)={0x5, "977fc85e4374b1c626b5db522fb6d0a73a933aa7e3f8ad9abeea0a3c8f5e7eae", 0x2, 0x10, 0x1, 0x7ff, 0x4, 0x2, 0x8, 0x8}) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) (async) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000140)={0x60000, 0x8001, 0x407f, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0xa30001, 0x0, '\x00', @p_u16=&(0x7f0000000200)=0x40}}) 11:42:45 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x9, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0xfffd, 0xdac5, 0x0, 0x0, 0x0, 0x1000, 0x6]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x9, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0xfffd, 0xdac5, 0x0, 0x0, 0x0, 0x1000, 0x6]}}}) (async) 11:42:45 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:45 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000), 0x86, 0x109702) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000080)={0x8000, "24f0ef5ee96972b3467201e2d82cafb906796072cbe38b94e72999e0fc92432d", 0x5, 0x1, 0x9, 0xfff, 0x10, 0x4, 0x10000, 0x4}) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000300)=0x2) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @win={{0x0, 0x7, 0x7, 0xfff}, 0x7, 0xfffff001, &(0x7f0000000180)={{0x0, 0x7f, 0x6, 0x10000}, &(0x7f0000000140)={{0x6, 0x5, 0x7fff, 0x9}, &(0x7f0000000100)={{0x1000, 0x3, 0xc9, 0x4b}}}}, 0x8001, &(0x7f00000001c0)="66b7b69fce1fb4c875451ceb252a3eb4cae2ebac5cb1787355975a38b8ec6382d1a4f3054730b06a44e7a95889be392eb3705af262493e77dd9eeee9778d8e425f7b48a25682f84e9141225806b664d4da8530f1e88adbb04ac8c7b0c99bbc44a09d048630872402b4006316a4edae170262cb546003fc5fcae174573920efea3d5879f83958f96c84b038a0d0c5fc63566c5e7f5e833433d5ef65bd073d7d45555cbb13c652e8307576567c4fa59e7d43f7da070186e8ef768a1d57e4be729c052a12b008d7d1868faf1112690938cde4dc1a2bd97b", 0x3}}}) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f00000002c0)=0x2) 11:42:45 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)=0x101) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f00000000c0)={0x0, 0x2, 0x800, '\x00', &(0x7f0000000080)=0x80}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:45 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000), 0x86, 0x109702) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000080)={0x8000, "24f0ef5ee96972b3467201e2d82cafb906796072cbe38b94e72999e0fc92432d", 0x5, 0x1, 0x9, 0xfff, 0x10, 0x4, 0x10000, 0x4}) (async) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000300)=0x2) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @win={{0x0, 0x7, 0x7, 0xfff}, 0x7, 0xfffff001, &(0x7f0000000180)={{0x0, 0x7f, 0x6, 0x10000}, &(0x7f0000000140)={{0x6, 0x5, 0x7fff, 0x9}, &(0x7f0000000100)={{0x1000, 0x3, 0xc9, 0x4b}}}}, 0x8001, &(0x7f00000001c0)="66b7b69fce1fb4c875451ceb252a3eb4cae2ebac5cb1787355975a38b8ec6382d1a4f3054730b06a44e7a95889be392eb3705af262493e77dd9eeee9778d8e425f7b48a25682f84e9141225806b664d4da8530f1e88adbb04ac8c7b0c99bbc44a09d048630872402b4006316a4edae170262cb546003fc5fcae174573920efea3d5879f83958f96c84b038a0d0c5fc63566c5e7f5e833433d5ef65bd073d7d45555cbb13c652e8307576567c4fa59e7d43f7da070186e8ef768a1d57e4be729c052a12b008d7d1868faf1112690938cde4dc1a2bd97b", 0x3}}}) (async) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f00000002c0)=0x2) 11:42:45 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000001c0)={@multicast2, @multicast1, 0x0, "6556ecb290a77fc888b31df26e0bb2d58c1e0ee90e84c8a9c0bfa14be72a4e53"}, 0x3c) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000000)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000001c0)={@multicast2, @multicast1, 0x0, "6556ecb290a77fc888b31df26e0bb2d58c1e0ee90e84c8a9c0bfa14be72a4e53"}, 0x3c) (async) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000000)) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (async) 11:42:45 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000180)={0x5, "977fc85e4374b1c626b5db522fb6d0a73a933aa7e3f8ad9abeea0a3c8f5e7eae", 0x2, 0x10, 0x1, 0x7ff, 0x4, 0x2, 0x8, 0x8}) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000140)={0x60000, 0x8001, 0x407f, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0xa30001, 0x0, '\x00', @p_u16=&(0x7f0000000200)=0x40}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000180)={0x5, "977fc85e4374b1c626b5db522fb6d0a73a933aa7e3f8ad9abeea0a3c8f5e7eae", 0x2, 0x10, 0x1, 0x7ff, 0x4, 0x2, 0x8, 0x8}) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) (async) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000140)={0x60000, 0x8001, 0x407f, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0xa30001, 0x0, '\x00', @p_u16=&(0x7f0000000200)=0x40}}) (async) 11:42:45 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:45 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000), 0x86, 0x109702) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000080)={0x8000, "24f0ef5ee96972b3467201e2d82cafb906796072cbe38b94e72999e0fc92432d", 0x5, 0x1, 0x9, 0xfff, 0x10, 0x4, 0x10000, 0x4}) (async) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000300)=0x2) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @win={{0x0, 0x7, 0x7, 0xfff}, 0x7, 0xfffff001, &(0x7f0000000180)={{0x0, 0x7f, 0x6, 0x10000}, &(0x7f0000000140)={{0x6, 0x5, 0x7fff, 0x9}, &(0x7f0000000100)={{0x1000, 0x3, 0xc9, 0x4b}}}}, 0x8001, &(0x7f00000001c0)="66b7b69fce1fb4c875451ceb252a3eb4cae2ebac5cb1787355975a38b8ec6382d1a4f3054730b06a44e7a95889be392eb3705af262493e77dd9eeee9778d8e425f7b48a25682f84e9141225806b664d4da8530f1e88adbb04ac8c7b0c99bbc44a09d048630872402b4006316a4edae170262cb546003fc5fcae174573920efea3d5879f83958f96c84b038a0d0c5fc63566c5e7f5e833433d5ef65bd073d7d45555cbb13c652e8307576567c4fa59e7d43f7da070186e8ef768a1d57e4be729c052a12b008d7d1868faf1112690938cde4dc1a2bd97b", 0x3}}}) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f00000002c0)=0x2) 11:42:45 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)=0x101) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f00000000c0)={0x0, 0x2, 0x800, '\x00', &(0x7f0000000080)=0x80}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:45 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f00000000c0)={0x0, 0x1, 0x5fc, '\x00', &(0x7f0000000080)}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:45 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) 11:42:45 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x0, 0x4, 0x7ff, '\x00', &(0x7f0000000000)=0x2}) 11:42:45 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000001c0)={@multicast2, @multicast1, 0x0, "6556ecb290a77fc888b31df26e0bb2d58c1e0ee90e84c8a9c0bfa14be72a4e53"}, 0x3c) (async) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000000)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) 11:42:45 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x0, 0x4, 0x7ff, '\x00', &(0x7f0000000000)=0x2}) 11:42:45 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f0000000280)={0x0, 0x1, 0x1c0000, '\x00', &(0x7f0000000240)=0x9}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000080)={0xffffffff, 0x3, 0x1f, 0x10, 0x5, 0x9}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x5, 0x0, {0x0, @win={{0x9, 0x7, 0x2e, 0x30413200}, 0x7, 0x4, &(0x7f00000000c0)={{0x808, 0x75, 0x400, 0x5}, &(0x7f0000000200)={{0x6, 0x6, 0x1, 0x9}, &(0x7f0000000000)={{0x4, 0x0, 0xfff, 0x9}}}}, 0x6, &(0x7f0000000100)="dc7970f9df8843808ee9333ae31ccc6cd45f391eadd35126a1ab1c859df3675c26e3df09905e74478f8b55a69d7befc094dc9322dcc20ebcfd70dbecbfe7b2d313f2a729b0989a27d0daeaa6d2c0b3b647fd0368e7dbbc56e68f19bccfd2dda544c2ca2e98856d7e4f519ba28a655fbfdcc7a09289c5d1da62ebbd3c1c810167eee045890000e458c3be0cd1a422ba39aa7724bd4bf7ba957116fefd76d4e75a1b93f1cb9997eb4ca30dfb024c3131567447138d113f28e19e74a6a84b81e48d0d8d181d7d04827fb5147bae03022a283082", 0x9}}}) 11:42:45 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)=0x101) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f00000000c0)={0x0, 0x2, 0x800, '\x00', &(0x7f0000000080)=0x80}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)=0x101) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f00000000c0)={0x0, 0x2, 0x800, '\x00', &(0x7f0000000080)=0x80}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) 11:42:45 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f00000000c0)={0x0, 0x1, 0x5fc, '\x00', &(0x7f0000000080)}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f00000000c0)={0x0, 0x1, 0x5fc, '\x00', &(0x7f0000000080)}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) 11:42:45 executing program 1: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x7}, {0xb0c, 0x7fff}]}) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x80000000, 0x4, "7d2a721cbda5003f5bf44a290bf6900ff6c6c328ad88f39894957a8985148bba", 0x3, 0x1, 0x5787cdec, 0x1, 0x1f, 0xffffff80, 0x9, 0x860, [0x4, 0xfffffffc, 0x101, 0x8]}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x2, 0x0, 0x0, 0xfffd, 0x0, 0x2]}}}) syz_open_dev$video(&(0x7f0000000000), 0x1, 0x101000) r1 = syz_open_dev$vivid(&(0x7f0000000240), 0x3, 0x2) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000080)=0x400000) 11:42:45 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 11:42:45 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x0, 0x4, 0x7ff, '\x00', &(0x7f0000000000)=0x2}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x0, 0x4, 0x7ff, '\x00', &(0x7f0000000000)=0x2}) (async) 11:42:46 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f0000000280)={0x0, 0x1, 0x1c0000, '\x00', &(0x7f0000000240)=0x9}) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000080)={0xffffffff, 0x3, 0x1f, 0x10, 0x5, 0x9}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x5, 0x0, {0x0, @win={{0x9, 0x7, 0x2e, 0x30413200}, 0x7, 0x4, &(0x7f00000000c0)={{0x808, 0x75, 0x400, 0x5}, &(0x7f0000000200)={{0x6, 0x6, 0x1, 0x9}, &(0x7f0000000000)={{0x4, 0x0, 0xfff, 0x9}}}}, 0x6, &(0x7f0000000100)="dc7970f9df8843808ee9333ae31ccc6cd45f391eadd35126a1ab1c859df3675c26e3df09905e74478f8b55a69d7befc094dc9322dcc20ebcfd70dbecbfe7b2d313f2a729b0989a27d0daeaa6d2c0b3b647fd0368e7dbbc56e68f19bccfd2dda544c2ca2e98856d7e4f519ba28a655fbfdcc7a09289c5d1da62ebbd3c1c810167eee045890000e458c3be0cd1a422ba39aa7724bd4bf7ba957116fefd76d4e75a1b93f1cb9997eb4ca30dfb024c3131567447138d113f28e19e74a6a84b81e48d0d8d181d7d04827fb5147bae03022a283082", 0x9}}}) 11:42:46 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 11:42:46 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2b, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0xfffffffc}}}) 11:42:46 executing program 1: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x7}, {0xb0c, 0x7fff}]}) (async) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x80000000, 0x4, "7d2a721cbda5003f5bf44a290bf6900ff6c6c328ad88f39894957a8985148bba", 0x3, 0x1, 0x5787cdec, 0x1, 0x1f, 0xffffff80, 0x9, 0x860, [0x4, 0xfffffffc, 0x101, 0x8]}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x2, 0x0, 0x0, 0xfffd, 0x0, 0x2]}}}) (async) syz_open_dev$video(&(0x7f0000000000), 0x1, 0x101000) (async, rerun: 64) r1 = syz_open_dev$vivid(&(0x7f0000000240), 0x3, 0x2) (rerun: 64) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000080)=0x400000) 11:42:46 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) 11:42:46 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f0000000280)={0x0, 0x1, 0x1c0000, '\x00', &(0x7f0000000240)=0x9}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000080)={0xffffffff, 0x3, 0x1f, 0x10, 0x5, 0x9}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x5, 0x0, {0x0, @win={{0x9, 0x7, 0x2e, 0x30413200}, 0x7, 0x4, &(0x7f00000000c0)={{0x808, 0x75, 0x400, 0x5}, &(0x7f0000000200)={{0x6, 0x6, 0x1, 0x9}, &(0x7f0000000000)={{0x4, 0x0, 0xfff, 0x9}}}}, 0x6, &(0x7f0000000100)="dc7970f9df8843808ee9333ae31ccc6cd45f391eadd35126a1ab1c859df3675c26e3df09905e74478f8b55a69d7befc094dc9322dcc20ebcfd70dbecbfe7b2d313f2a729b0989a27d0daeaa6d2c0b3b647fd0368e7dbbc56e68f19bccfd2dda544c2ca2e98856d7e4f519ba28a655fbfdcc7a09289c5d1da62ebbd3c1c810167eee045890000e458c3be0cd1a422ba39aa7724bd4bf7ba957116fefd76d4e75a1b93f1cb9997eb4ca30dfb024c3131567447138d113f28e19e74a6a84b81e48d0d8d181d7d04827fb5147bae03022a283082", 0x9}}}) 11:42:46 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2b, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0xfffffffc}}}) 11:42:46 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x2, "c7a2f5d59452f1e1655bb334c994903d478d8f02299c178d3287c53adb3945a2", 0x32314142}) 11:42:46 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f00000000c0)={0x0, 0x1, 0x5fc, '\x00', &(0x7f0000000080)}) (async, rerun: 64) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (rerun: 64) 11:42:46 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) 11:42:46 executing program 1: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x7}, {0xb0c, 0x7fff}]}) (async) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x80000000, 0x4, "7d2a721cbda5003f5bf44a290bf6900ff6c6c328ad88f39894957a8985148bba", 0x3, 0x1, 0x5787cdec, 0x1, 0x1f, 0xffffff80, 0x9, 0x860, [0x4, 0xfffffffc, 0x101, 0x8]}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x2, 0x0, 0x0, 0xfffd, 0x0, 0x2]}}}) (async) syz_open_dev$video(&(0x7f0000000000), 0x1, 0x101000) (async) r1 = syz_open_dev$vivid(&(0x7f0000000240), 0x3, 0x2) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000080)=0x400000) 11:42:46 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff7f]}}}) 11:42:46 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2b, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0xfffffffc}}}) 11:42:46 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (async) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x2, "c7a2f5d59452f1e1655bb334c994903d478d8f02299c178d3287c53adb3945a2", 0x32314142}) 11:42:46 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}}}) 11:42:46 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) (async) 11:42:46 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff7f]}}}) 11:42:46 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x3, 0x5, {0x10000, 0x0, 0x21f5fa02, 0x7}}) 11:42:46 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (async) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x2, "c7a2f5d59452f1e1655bb334c994903d478d8f02299c178d3287c53adb3945a2", 0x32314142}) 11:42:46 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) 11:42:46 executing program 5: ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000000)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x4b4b, &(0x7f0000000100)={0x6, 0x0, 0x0, 0x0, 0x0, "79c853ca491fb961"}) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x10000) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x4, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x40}) 11:42:46 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}}}) 11:42:46 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff7f]}}}) 11:42:46 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x3, 0x5, {0x10000, 0x0, 0x21f5fa02, 0x7}}) 11:42:46 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000080)) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x80000001) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000000)={0x0, {0x6, 0x1800}}) 11:42:46 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f00000002c0)={0x20, 0x0, 0x300c, 0x20, 0xffff, 0x7, 0x4, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000340)={0x1fffc0, "423db5598a1a5b0dff292ed4b5796e3090e863721fe4d7dba94c322d23c52cf2", 0x1, 0x1}) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100500}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002bbd7000fbdbdf250500000008000100000000000c000200b9b10000000000000c00060000000000000000000c0003002d2e877d00000000"], 0x40}}, 0xc0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000280)={@multicast2, @empty, 0x1, "4e35e0ab2654a8552d2583f8be0e55f41675a3de034c9b1622fdcad4a2cd0d36", 0x1, 0x80000001, 0x9, 0x40}, 0x3c) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f00000004c0)={0x0, {0x3f, 0x2c}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x10002, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, '\x00', @bt={0x9, 0x4, 0x56eb, 0x8000, 0x7, 0x40, 0x2, 0x3}}) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000300)={@remote, @rand_addr=0x64010101, 0xffffffffffffffff, "36f76bd109681d3b5b96aacb4c9aa7d969eb95c45b328488fb02130e39737b04", 0x0, 0xe05, 0x9, 0x9}, 0x3c) 11:42:46 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}}}) (async) 11:42:46 executing program 5: ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000000)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x4b4b, &(0x7f0000000100)={0x6, 0x0, 0x0, 0x0, 0x0, "79c853ca491fb961"}) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x10000) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x4, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x40}) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000000)) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETAW(r0, 0x4b4b, &(0x7f0000000100)={0x6, 0x0, 0x0, 0x0, 0x0, "79c853ca491fb961"}) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x10000) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x4, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x40}) (async) 11:42:47 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000)="af709c5e3e942b2f75e030f967582ff356a37597c3dc28b01e807ba31e08e675f3fac3e90b78bd120eec"}, 0x20) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:47 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x3, 0x5, {0x10000, 0x0, 0x21f5fa02, 0x7}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x3, 0x5, {0x10000, 0x0, 0x21f5fa02, 0x7}}) (async) 11:42:47 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000080)) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x80000001) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000000)={0x0, {0x6, 0x1800}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000100), 0x1, 0x2) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000080)) (async) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x80000001) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) (async) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000000)={0x0, {0x6, 0x1800}}) (async) 11:42:47 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f00000002c0)={0x20, 0x0, 0x300c, 0x20, 0xffff, 0x7, 0x4, 0x1}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (async) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000340)={0x1fffc0, "423db5598a1a5b0dff292ed4b5796e3090e863721fe4d7dba94c322d23c52cf2", 0x1, 0x1}) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100500}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002bbd7000fbdbdf250500000008000100000000000c000200b9b10000000000000c00060000000000000000000c0003002d2e877d00000000"], 0x40}}, 0xc0) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000280)={@multicast2, @empty, 0x1, "4e35e0ab2654a8552d2583f8be0e55f41675a3de034c9b1622fdcad4a2cd0d36", 0x1, 0x80000001, 0x9, 0x40}, 0x3c) (async) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f00000004c0)={0x0, {0x3f, 0x2c}}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x10002, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, '\x00', @bt={0x9, 0x4, 0x56eb, 0x8000, 0x7, 0x40, 0x2, 0x3}}) (async, rerun: 64) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000300)={@remote, @rand_addr=0x64010101, 0xffffffffffffffff, "36f76bd109681d3b5b96aacb4c9aa7d969eb95c45b328488fb02130e39737b04", 0x0, 0xe05, 0x9, 0x9}, 0x3c) (rerun: 64) 11:42:47 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0xffff]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x8, 0x7, 0x1, "3f78f50850846957f1f7944d774c29094014b251a69feb759bbdc103e1c246a9", 0x32344d59}) 11:42:47 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000280)={0x5, 0x6, 0x5, 0x0, 0x1ff}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_open_dev$vivid(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000100)={0x59f0, 0x0, 0x3007, 0x400, 0x7, 0x0, 0x80, 0x1}) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000080)={0x5, "1a0b7f1db79e8b08e37f0790d885858f08d71107ad2345a1a070131184b2df5e", 0x2, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @vbi={0x3, 0x5, 0x1, 0x43564548, [0x5, 0x4], [0x4, 0x6], 0x13a}}}) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f0000000000)={0x80, 0x7fffffff}) r3 = syz_open_dev$vivid(&(0x7f0000000140), 0x3, 0x2) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4c340, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000240)={0x9b0000, 0x3, 0x6, r4, 0x0, &(0x7f0000000200)={0xa30901, 0x7f, '\x00', @p_u8=&(0x7f00000001c0)=0x2a}}) 11:42:47 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = syz_open_dev$vivid(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000080)) (async) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000000c0)=0x80000001) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000000)={0x0, {0x6, 0x1800}}) 11:42:47 executing program 5: ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000000)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x4b4b, &(0x7f0000000100)={0x6, 0x0, 0x0, 0x0, 0x0, "79c853ca491fb961"}) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x10000) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x4, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x40}) 11:42:47 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000)="af709c5e3e942b2f75e030f967582ff356a37597c3dc28b01e807ba31e08e675f3fac3e90b78bd120eec"}, 0x20) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000)="af709c5e3e942b2f75e030f967582ff356a37597c3dc28b01e807ba31e08e675f3fac3e90b78bd120eec"}, 0x20) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) 11:42:47 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000280)={0x5, 0x6, 0x5, 0x0, 0x1ff}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_open_dev$vivid(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000100)={0x59f0, 0x0, 0x3007, 0x400, 0x7, 0x0, 0x80, 0x1}) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000080)={0x5, "1a0b7f1db79e8b08e37f0790d885858f08d71107ad2345a1a070131184b2df5e", 0x2, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @vbi={0x3, 0x5, 0x1, 0x43564548, [0x5, 0x4], [0x4, 0x6], 0x13a}}}) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f0000000000)={0x80, 0x7fffffff}) r3 = syz_open_dev$vivid(&(0x7f0000000140), 0x3, 0x2) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4c340, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000240)={0x9b0000, 0x3, 0x6, r4, 0x0, &(0x7f0000000200)={0xa30901, 0x7f, '\x00', @p_u8=&(0x7f00000001c0)=0x2a}}) openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) (async) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000280)={0x5, 0x6, 0x5, 0x0, 0x1ff}) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$vivid(&(0x7f00000000c0), 0x2, 0x2) (async) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000100)={0x59f0, 0x0, 0x3007, 0x400, 0x7, 0x0, 0x80, 0x1}) (async) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000080)={0x5, "1a0b7f1db79e8b08e37f0790d885858f08d71107ad2345a1a070131184b2df5e", 0x2, 0x1}) (async) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @vbi={0x3, 0x5, 0x1, 0x43564548, [0x5, 0x4], [0x4, 0x6], 0x13a}}}) (async) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f0000000000)={0x80, 0x7fffffff}) (async) syz_open_dev$vivid(&(0x7f0000000140), 0x3, 0x2) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4c340, 0x0) (async) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000240)={0x9b0000, 0x3, 0x6, r4, 0x0, &(0x7f0000000200)={0xa30901, 0x7f, '\x00', @p_u8=&(0x7f00000001c0)=0x2a}}) (async) 11:42:47 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '@^\'(\'$'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, '/dev/video37\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004084) 11:42:47 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000000080)={0x1, 0x1, [0x3, 0x3, 0xffffff7f, 0xfff, 0x2, 0x2, 0x8, 0x401]}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 11:42:47 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f00000002c0)={0x20, 0x0, 0x300c, 0x20, 0xffff, 0x7, 0x4, 0x1}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (async) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000340)={0x1fffc0, "423db5598a1a5b0dff292ed4b5796e3090e863721fe4d7dba94c322d23c52cf2", 0x1, 0x1}) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100500}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002bbd7000fbdbdf250500000008000100000000000c000200b9b10000000000000c00060000000000000000000c0003002d2e877d00000000"], 0x40}}, 0xc0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000280)={@multicast2, @empty, 0x1, "4e35e0ab2654a8552d2583f8be0e55f41675a3de034c9b1622fdcad4a2cd0d36", 0x1, 0x80000001, 0x9, 0x40}, 0x3c) (async) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f00000004c0)={0x0, {0x3f, 0x2c}}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x10002, 0x0) (async, rerun: 64) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, '\x00', @bt={0x9, 0x4, 0x56eb, 0x8000, 0x7, 0x40, 0x2, 0x3}}) (async, rerun: 64) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000300)={@remote, @rand_addr=0x64010101, 0xffffffffffffffff, "36f76bd109681d3b5b96aacb4c9aa7d969eb95c45b328488fb02130e39737b04", 0x0, 0xe05, 0x9, 0x9}, 0x3c) 11:42:47 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0xffff]}}}) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x8, 0x7, 0x1, "3f78f50850846957f1f7944d774c29094014b251a69feb759bbdc103e1c246a9", 0x32344d59}) 11:42:47 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000000080)={0x1, 0x1, [0x3, 0x3, 0xffffff7f, 0xfff, 0x2, 0x2, 0x8, 0x401]}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 11:42:47 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '@^\'(\'$'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, '/dev/video37\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004084) 11:42:47 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000280)={0x5, 0x6, 0x5, 0x0, 0x1ff}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_open_dev$vivid(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000100)={0x59f0, 0x0, 0x3007, 0x400, 0x7, 0x0, 0x80, 0x1}) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000080)={0x5, "1a0b7f1db79e8b08e37f0790d885858f08d71107ad2345a1a070131184b2df5e", 0x2, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @vbi={0x3, 0x5, 0x1, 0x43564548, [0x5, 0x4], [0x4, 0x6], 0x13a}}}) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f0000000000)={0x80, 0x7fffffff}) r3 = syz_open_dev$vivid(&(0x7f0000000140), 0x3, 0x2) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4c340, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000240)={0x9b0000, 0x3, 0x6, r4, 0x0, &(0x7f0000000200)={0xa30901, 0x7f, '\x00', @p_u8=&(0x7f00000001c0)=0x2a}}) openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) (async) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000280)={0x5, 0x6, 0x5, 0x0, 0x1ff}) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$vivid(&(0x7f00000000c0), 0x2, 0x2) (async) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000100)={0x59f0, 0x0, 0x3007, 0x400, 0x7, 0x0, 0x80, 0x1}) (async) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000080)={0x5, "1a0b7f1db79e8b08e37f0790d885858f08d71107ad2345a1a070131184b2df5e", 0x2, 0x1}) (async) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @vbi={0x3, 0x5, 0x1, 0x43564548, [0x5, 0x4], [0x4, 0x6], 0x13a}}}) (async) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f0000000000)={0x80, 0x7fffffff}) (async) syz_open_dev$vivid(&(0x7f0000000140), 0x3, 0x2) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4c340, 0x0) (async) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000240)={0x9b0000, 0x3, 0x6, r4, 0x0, &(0x7f0000000200)={0xa30901, 0x7f, '\x00', @p_u8=&(0x7f00000001c0)=0x2a}}) (async) 11:42:47 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) 11:42:47 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0xffff]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x8, 0x7, 0x1, "3f78f50850846957f1f7944d774c29094014b251a69feb759bbdc103e1c246a9", 0x32344d59}) 11:42:47 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000)="af709c5e3e942b2f75e030f967582ff356a37597c3dc28b01e807ba31e08e675f3fac3e90b78bd120eec"}, 0x20) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:47 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000000)={0x993, 0x635, @value=0xffffffff7fffffff}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0xa30000, 0x8000, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x980901, 0x6, '\x00', @value=0x800}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12b, 0x8000, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}}) 11:42:47 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000000080)={0x1, 0x1, [0x3, 0x3, 0xffffff7f, 0xfff, 0x2, 0x2, 0x8, 0x401]}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000000080)={0x1, 0x1, [0x3, 0x3, 0xffffff7f, 0xfff, 0x2, 0x2, 0x8, 0x401]}) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) 11:42:47 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '@^\'(\'$'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, '/dev/video37\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004084) 11:42:47 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000080)={0x7f, "d96ceb1ee23795b348ab7657b9920ad7d1c74e355851b3d5ee742964b493fc68", 0x2, 0xb37ace32831ba7f0, 0xe6e, 0x2, 0x8, 0x0, 0x2, 0x56d}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x4, 0x1, {0x2, @vbi={0x0, 0x1000, 0x6, 0x41414770, [0x6, 0xffffffff], [0x0, 0x1]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) r2 = syz_open_dev$video(&(0x7f0000000100), 0x8, 0x401) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x84201, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000200)={0x980000, 0x0, 0x7, r3, 0x0, &(0x7f00000001c0)={0x1ae1b1e, 0x0, '\x00', @string=&(0x7f0000000180)=0x4}}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x7f, 0x4, 0x100, 0x81, 0x20, 0x5, 0x9}) 11:42:47 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (async) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) 11:42:47 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) 11:42:47 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0xb37, 0x59565955, 0x0, @stepwise={0x80000001, 0x6, 0x5, 0xc969, 0x6, 0x3}}) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x1, "654ab64b797a63d8534ff87889683fcd5e08d5df769821077582b60496165955", 0x3, 0x1}) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f00000000c0)={0x81, 0x4, 0x200, 0xd2, 0x64, 0xe80, 0xfffffff7}) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f0000000100)={0x0, {0x7fff}}) 11:42:47 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @vbi={0xfff, 0x3f, 0xfffffff8, 0x38414761, [0x6, 0x8000], [0x7, 0x6], 0x2}}}) 11:42:47 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}}) (async) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) 11:42:47 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000080)={0x7f, "d96ceb1ee23795b348ab7657b9920ad7d1c74e355851b3d5ee742964b493fc68", 0x2, 0xb37ace32831ba7f0, 0xe6e, 0x2, 0x8, 0x0, 0x2, 0x56d}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x4, 0x1, {0x2, @vbi={0x0, 0x1000, 0x6, 0x41414770, [0x6, 0xffffffff], [0x0, 0x1]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) r2 = syz_open_dev$video(&(0x7f0000000100), 0x8, 0x401) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x84201, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000200)={0x980000, 0x0, 0x7, r3, 0x0, &(0x7f00000001c0)={0x1ae1b1e, 0x0, '\x00', @string=&(0x7f0000000180)=0x4}}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x7f, 0x4, 0x100, 0x81, 0x20, 0x5, 0x9}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000080)={0x7f, "d96ceb1ee23795b348ab7657b9920ad7d1c74e355851b3d5ee742964b493fc68", 0x2, 0xb37ace32831ba7f0, 0xe6e, 0x2, 0x8, 0x0, 0x2, 0x56d}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x4, 0x1, {0x2, @vbi={0x0, 0x1000, 0x6, 0x41414770, [0x6, 0xffffffff], [0x0, 0x1]}}}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) syz_open_dev$video(&(0x7f0000000100), 0x8, 0x401) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x84201, 0x0) (async) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000200)={0x980000, 0x0, 0x7, r3, 0x0, &(0x7f00000001c0)={0x1ae1b1e, 0x0, '\x00', @string=&(0x7f0000000180)=0x4}}) (async) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x7f, 0x4, 0x100, 0x81, 0x20, 0x5, 0x9}) (async) 11:42:47 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) 11:42:47 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000080)={0x7f, "d96ceb1ee23795b348ab7657b9920ad7d1c74e355851b3d5ee742964b493fc68", 0x2, 0xb37ace32831ba7f0, 0xe6e, 0x2, 0x8, 0x0, 0x2, 0x56d}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x4, 0x1, {0x2, @vbi={0x0, 0x1000, 0x6, 0x41414770, [0x6, 0xffffffff], [0x0, 0x1]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) r2 = syz_open_dev$video(&(0x7f0000000100), 0x8, 0x401) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x84201, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000200)={0x980000, 0x0, 0x7, r3, 0x0, &(0x7f00000001c0)={0x1ae1b1e, 0x0, '\x00', @string=&(0x7f0000000180)=0x4}}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x7f, 0x4, 0x100, 0x81, 0x20, 0x5, 0x9}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000080)={0x7f, "d96ceb1ee23795b348ab7657b9920ad7d1c74e355851b3d5ee742964b493fc68", 0x2, 0xb37ace32831ba7f0, 0xe6e, 0x2, 0x8, 0x0, 0x2, 0x56d}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x4, 0x1, {0x2, @vbi={0x0, 0x1000, 0x6, 0x41414770, [0x6, 0xffffffff], [0x0, 0x1]}}}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) syz_open_dev$video(&(0x7f0000000100), 0x8, 0x401) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x84201, 0x0) (async) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000200)={0x980000, 0x0, 0x7, r3, 0x0, &(0x7f00000001c0)={0x1ae1b1e, 0x0, '\x00', @string=&(0x7f0000000180)=0x4}}) (async) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x7f, 0x4, 0x100, 0x81, 0x20, 0x5, 0x9}) (async) 11:42:47 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000000)={0x993, 0x635, @value=0xffffffff7fffffff}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0xa30000, 0x8000, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x980901, 0x6, '\x00', @value=0x800}}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12b, 0x8000, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}}) 11:42:47 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}}) (async) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) (async) 11:42:48 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0xb37, 0x59565955, 0x0, @stepwise={0x80000001, 0x6, 0x5, 0xc969, 0x6, 0x3}}) (async) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x1, "654ab64b797a63d8534ff87889683fcd5e08d5df769821077582b60496165955", 0x3, 0x1}) (async) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f00000000c0)={0x81, 0x4, 0x200, 0xd2, 0x64, 0xe80, 0xfffffff7}) (async) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f0000000100)={0x0, {0x7fff}}) 11:42:48 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @vbi={0xfff, 0x3f, 0xfffffff8, 0x38414761, [0x6, 0x8000], [0x7, 0x6], 0x2}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @vbi={0xfff, 0x3f, 0xfffffff8, 0x38414761, [0x6, 0x8000], [0x7, 0x6], 0x2}}}) (async) 11:42:48 executing program 2: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) r0 = syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f00000001c0)) ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f0000000000)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x101200, 0x0) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000140)) 11:42:48 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @dev={0xac, 0x14, 0x14, 0x1f}, 0xffffffffffffffff, "612743c82ea0498ce0190eabb71165e4a78e6d3292d0d9201ca9f00f6cf300b6", 0xfffffffe, 0x0, 0x1, 0x4}, 0x3c) 11:42:48 executing program 2: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (async) r0 = syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f00000001c0)) (async) ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f0000000000)) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x101200, 0x0) (async) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000140)) 11:42:48 executing program 2: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (async) r0 = syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f00000001c0)) ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f0000000000)) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x101200, 0x0) (async) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000140)) 11:42:48 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @vbi={0xfff, 0x3f, 0xfffffff8, 0x38414761, [0x6, 0x8000], [0x7, 0x6], 0x2}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @vbi={0xfff, 0x3f, 0xfffffff8, 0x38414761, [0x6, 0x8000], [0x7, 0x6], 0x2}}}) (async) 11:42:48 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @dev={0xac, 0x14, 0x14, 0x1f}, 0xffffffffffffffff, "612743c82ea0498ce0190eabb71165e4a78e6d3292d0d9201ca9f00f6cf300b6", 0xfffffffe, 0x0, 0x1, 0x4}, 0x3c) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @dev={0xac, 0x14, 0x14, 0x1f}, 0xffffffffffffffff, "612743c82ea0498ce0190eabb71165e4a78e6d3292d0d9201ca9f00f6cf300b6", 0xfffffffe, 0x0, 0x1, 0x4}, 0x3c) (async) 11:42:48 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000)="f0c30576e5b67149bfcaa08e5f11a399004cae83df19878ce0f0df6257b0dc0d57b3e161e7cc87aa96d911cd77f3d96e1e14a486e9d3e1", &(0x7f0000000480)=@buf="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", 0x2}, 0x20) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000140)={0x0, 0x2, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x9b0909, 0x6, '\x00', @ptr=0x8}}) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000180)={0x1, "96af261b09b8c6f25ec0c7853c052e558b4e78a81d6595b0762b8cb6fc1f4034", 0x100, 0xd53, 0x5, 0x10, 0x4}) 11:42:48 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0xb37, 0x59565955, 0x0, @stepwise={0x80000001, 0x6, 0x5, 0xc969, 0x6, 0x3}}) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x1, "654ab64b797a63d8534ff87889683fcd5e08d5df769821077582b60496165955", 0x3, 0x1}) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f00000000c0)={0x81, 0x4, 0x200, 0xd2, 0x64, 0xe80, 0xfffffff7}) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f0000000100)={0x0, {0x7fff}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0xb37, 0x59565955, 0x0, @stepwise={0x80000001, 0x6, 0x5, 0xc969, 0x6, 0x3}}) (async) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x1, "654ab64b797a63d8534ff87889683fcd5e08d5df769821077582b60496165955", 0x3, 0x1}) (async) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f00000000c0)={0x81, 0x4, 0x200, 0xd2, 0x64, 0xe80, 0xfffffff7}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f0000000100)={0x0, {0x7fff}}) (async) 11:42:48 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000000)={0x993, 0x635, @value=0xffffffff7fffffff}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0xa30000, 0x8000, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x980901, 0x6, '\x00', @value=0x800}}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12b, 0x8000, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}}) 11:42:48 executing program 4: socketpair(0xa, 0xa, 0xfffffffa, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00'}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f00000001c0)={@multicast2, @multicast1, 0x0, "6556ecb290a77fc888b31df26e0bb2d58c1e0ee90e84c8a9c0bfa14be72a4e53"}, 0x3c) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x61c200, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:48 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x200080, 0x0) 11:42:48 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000)="f0c30576e5b67149bfcaa08e5f11a399004cae83df19878ce0f0df6257b0dc0d57b3e161e7cc87aa96d911cd77f3d96e1e14a486e9d3e1", &(0x7f0000000480)=@buf="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", 0x2}, 0x20) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000140)={0x0, 0x2, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x9b0909, 0x6, '\x00', @ptr=0x8}}) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000180)={0x1, "96af261b09b8c6f25ec0c7853c052e558b4e78a81d6595b0762b8cb6fc1f4034", 0x100, 0xd53, 0x5, 0x10, 0x4}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000)="f0c30576e5b67149bfcaa08e5f11a399004cae83df19878ce0f0df6257b0dc0d57b3e161e7cc87aa96d911cd77f3d96e1e14a486e9d3e1", &(0x7f0000000480)=@buf="59b646a25b2569708e5188d39ece16db649f9fbf7db065929ffd6d0856fe12c751a8905ff7aa11d6b1b4dd3feeda54f7542554b86d2452fd2587daa7f2f08a8d2e2ae0dfed47eeb2f69a89199bcfb385bfe3170cc0f7c87acd18a7bc1641ca5ff0ec3bb0904fec0db336d5662b31737c709d5773657f3635c663dc150d6e157e39f40a8b1445dff43cb3dfa6f70b449395c1ff2942a790e7f0ef7f262e709edd72bc5113f17cabee804e713ced6a00c285fabff3c640ff3dfa4af75aece31bb3b590d9ea415d1b0e8f2218c76afb250c8bfe1baae6bb79bf078af3efe4c5c4952ef8254c86e5fef96bda309c90bea28c3e6e076e6572f656e69fc87013139543fbff7ffd60d4d32fcac927893a0900323558e07577109fd7a11f3aec45bdb3edb60decd2eda1769285676a04a40e0e61fa4b21dc1436c09b648adac9bc25353a26cff0c2db4e5c06f05ae06cd5c51c1a50d8c8f7f269c0cb97ea350b946111565aabbefb641cd415badd3b8127a465343a0d2a6316b6e13af88e2a9734b16ef2c8c7315202638780c39e497cf4ac7bdad7aaf6a40fb276e8650b550253e541763fdb34c4d94d1d23a6a3b9426008e7efc2b72ed089610d5dc074e5bf73b57cb4f11ece278f44bce572b9ca7fade583ce1b4bac8759c497f7b3c69e11ab2106320ac48ec0b6e39cfd67f11dc55ec2bd40d2043bfc1676db71da0de22814aefbdcf2a0d5eaffbd5b5160b3973c3390d1bb4cdcd8bfdd13ce4b7c45997bd5ddaa6989830d17653b1516bd579084ab105d424dc8b186d2394ffa729eeef7e595ed71b8ab282e34c71821833111845f963702b219a95ee0f0f3e3f0c43b5f52aded76d0977a231c5bda4e1d1fbed3daab3c76f6fa6b3cabcaaf741328e5917f396bb6dccb6d210d278c92efd5ce197289a8c3181c809f765560ad079e453c6c7e39a904b789e3ebfd656c83ef24f0d1076b005957e8f4bca1c7eb3c4d60d0832a67d8dbfe67bf1f766fc19496da11f0e732ec51499134a6c67a83484eced7edc364bcc226d7c1cd38b8d4aa926c951defb59bf40aedd16847ca8cece7174b36fc9f2ffd24182d78c2645cc04c4ad092157181d7b2939b2bfefa559b570e831f4f43874b25c71a1df8215e6d940c0377fae93667a52ef3d2defa1da0b04674496fa68c3a7215376cd033bad4a23b7fb587222cdfc0198da02a1efec04ba22598f5d9330232160933b420bead184d766953e022ceb00cf134bb337b6e570b04908e99f384e2cc58dd215c34db7e2c8aa08e9a6502fea78158cdc2f01dc99f8a3fa7c4cf9308df5beed35c5007e80a1b0189988a81ccae7b4dacc9fc57b8fbb951e25dc5ac17534c1190b682c877cf8774e95ea2e605617d7501b16750bf2e0fc25fd9fab4839b94972e463e2192cac283689d3c66b8cae67343201edf0094c07b5e65f57729cec71e856a7030a62977541dec62e62bf4a28e862025d0a50cbd860ec962a0a6d922e0e7e36c0e66d6bc69a31d5fd3f8ad21dfb5f0d4240ca6b7257d2df4faf665e5d76fdb620ebe76a53707b07891756e2bae48420ec8b7cb4f2db16415ccb5ab194bfc7b7eb15888d5b66ab02510dbf2f41c01ff9c044793225413bd69a6dcc8712c4ad2f0d2fedcb714eed0e6bc35699f922d1cced3c975121f8dff53102a2cdc4970ef45222f4eff2076a976e83c67c04ce1b74c1542475dc8eeff6921fcf0cbd727fae61c158bd5648e5854bf1754fe16c005c9aaae094fc0dfa03b6d53276fa40194a03d1ed8a0986b22f117342212eaf7db4ddc66ce3740bd12a2f3ef9cb6e4d8afa30d04f066c7e65fbe4d5f1d8a68e570a6be9076ada2bcf6c8604deb1318fd48b4bbabb6fda4b8fb1bac32da7fe85b6a2cbbdc3dc37fce5fe085aab97b5998899b6791a1c3a6db1922fee7c7cd2ca1fcc849250aaca1d636ad9caaa3e7ee12a4025b12875d659e323bc75f51d617455117d5c0dba825f9f2fc4bd8f60fec3e606d31104b0a1c3d49250fd4cf9a50276772a119732627ba7b0a58d26dd570c5e7f0710e482a9941b9df132ab8cd06676eaf91c454e7f5faaaaca8ff469b746ca0656462b8b0b1a810ce1a2dee24870aa3693e28191c63fe82dc378c6f322073f5e047d738a9dd5b45a23915d57f3d67f2b16adca918475c3ab6faf78f10e54648e235e782d0c1d948936fa26be962add5065b08be424924ac0bd6a0ac2f1b1e68391e8e18ea96005edccec1cb6015c9659873e9bb795c7eb3af9f48c671ad2e9a8cbf869fc12c1d0ac59950912dbf79b6699bfc511d210cd1904bcdafe65297122c6e729d5eca8e381dd9904c316e0e3775a867d00d6c2e01d3e2a08132befbb2607dac7c454b4359c5f4f9f9d5c5dd128479d7c871884a32431c74baa70a2c89753118beaa2dd8330c80c6fe1b1db2d4b0a83c5e76dbfd578594be4303c982e52007199a0b52a520ba879af3629d7308a4acf8850cc46e12b7aae29f1a6e59fb75671adf2e0b33e43f12a02b015f3c42c8aabce95836dcae56cd65f11eef2cad14e0b9dcca8ef1d323f262b7dbf29c925d257d454abec04369905f6d43115d94f11ce7de22d0a2796b222a9fc3f021e812e727ddd8ca363bcc2ff5307062a96aa2b74c8a53e57f6fcbe3c15ab069897c77f38ebedf7e3ebffdb5350676056f1dc36e8b62180480ca1ff0695817ccc33dd1bde4203f1ac056996bc4a4642fb6c2f3205f6474c6684aae05bc1f6a8e29286d3cbb70fb13aa23de6fae74526d4f787a151b9b6f4ca16c312be442e64806f4d39b3bc460816485cfb623aeec2ec1b52fc22f9ac3150e391ee4e5955b491a99bbe1e3c2bf0444a26b927daae0a0fde03ab5f702a24a0e93218c7a7def42d6cc9d8fdb4107e9863e3d117f759bc7462db3d7f3e7839af0bbc2818533f8865edc3ed935a1d1c4389d7b2238fd2b489302f7c0dd2ef6f2cf8f5d977e84f44eb4c6d21935044121527eb0f8915cc036e50130e920d0ba3410d974e105756ed7555ad57f6064d2b020356ac373d240f6b16bb25e755e7fb9c6d22ea0211f6824db7678cc2cceac3db08ca1bf9c98743634fc5c5fd5cfb640799c245a3625ba2e944e36dddbd9c1f37a17e9f6cb2ecd9828b5e7f3db7c9c191d70bd2e01db33cc24b814766739bd7b1e32b7ffdaca957d5b33624639998feeba815f6002541cfa66365d96933d06f217e11bbe66185356fb7a17675d290d025e0997658b536fbdb3815a117d698aec7d51b0964621881ccb4bfdb54d866edf1c92be040f9b934e9bf6d5f0356ac381f1765081c489fc7a6c7fe4587340f377e5f32416169b9a9f5037aeef45eaf265048639403798f34e492a2eedf9640f75059291502393bbfd79aeacecd3790797e366a6dad324659a84693b8f5b2af3c3834327cc7a4fc5dd890f9030a4bf1d40fc30628e0d6531c6b8cc9260aa4f9e4eb61caecc5f5f88951e46e4833cae99ed7b45cc1a8ba7876399370583672fbe406346fbab507c9856159fa976b1bbfbdbd81b26f23577e1a2e9e827a0d97f3d3e453d232057f29658bb2cf0466679b44f4453ed23056784d2bd5957bdfb07046f3cc5e6d8ded0a67c7f69b7d2d7593db8263d7945d9ddc1be362e9775adecb52c58ae7d94d82c6a8e109fe73879ad08d365ec49e1b2fbca5503cab9058af97fd1ba0f5a361620d217142761c81a324537195185a2c0f73b98808beca6f1e73500f92612b4be27dbc91ae7ba0a2e004d95b343a311c6bf5a022a2d86a0d45614f753a5e72c0dcbaac477c34370302cef2c61ff6660caa69758df81cf6e5e9ab2eccf59c7e01302b3e68d8ae6c864ec70f1cd661440281f966e974e300454f7e2aac6f026d28ff97edcbd6fb666e839e0df75cd096e7e90724ac2c8fe1ed43174c1ad07bc48129e9bbc1962b4536e85bdeecae6fdbfb8cb28ca54178cc6151db92dec69ae2449bf961921f4363396bcfa7e8625bbb207ab69ce32675d934f74725b29e36b7a210da9e5774aa4feaf6a67d45e10ad585e6daac5c272e520d2089cc254c44d4c36cef6308b61604c4391eb97b3d6cec14e6a76ce922c8ebef12835a341b0b611f530b5ef1ada9c6a0f7cd4b252a9bc59d54643a715189c07909de069287147b3ac590df5f9001dbb0a97d7056da327acb50a4516445b1bb6b124a3d41f86157dfb6546e8908d7015595100b773099afe790650fd11bb77df2c736176835eb738d3e41c0f1c433b037d5b8ec6106dcbf9f6f5940346f9ff1190dcfd63239d9a83be436dfc5953f8a2def27170f21095c9ad43645389abc25fa30cd3730b78b25c1f41614611399bc874af0a3572b98439cbd1232f5026789e6254fc5dc582d10c2e9f027e6edbdd0f4e4a4f4b764fd6a1f102b093cd9eea7e7eeca8ad118130054af4c665f2b3b94b998658e11542e752b4baa0b489e31e5c544700275c9aafac91f4e6f6374aff66182ee05ce0baf68fefb6efeb1db1504a56c5a82c61d03d958540d55346fc5016b5997045557253f9af76ae11c0b206a8b48a699215c8da3dcc88225a3ea52336e9f75bbd26a528d57437fdc6737d3462fc8f52f9dd86bd582654d06be4cbc6a6e0790915b9276f7ef72ee7473da3e30f5a9253e26bf899d9c4a0b90bc7896a2f3e80085e6389fe642a559c4c7d29c2563d90de40cabaf0a8cc602af1dd6f73264b14fea0da20b8db7bb5aff895423defbf5759d126998b14334aade19f078d60d84234722bcef14f9da1e9c5476cf9b240c30cfc523297e93f8cbfc9f582f258043bdb72940f41e9d172bf1b7d7e79cf6852b3454bc36631124ad4c1a8c016b4184fc6874d184cb658fac3185d94dd4eda8b89093f4c34179d989c6636c2b0ffb4be99063d0f289b02300697c62b1c231f525bc509a2be89c7a5a73a7221fe49399f211d69e38928a74356b486cd64155e1e9a9c6ddcb61e052a2617a110e743ded141a4a39adf939e69fce58380d25644c0e2318700da1cd70424e0475a5eeea73297c08692a54fe40ab7fe67e2401b54e25528e47807f9c9703d2cdaee3e1ba83d48524964b96aaf1d5d3bad554f9f9aac8a81ff92588cc098c5cc3bd045bb4a4e1d6a3ef1928109c84ef4da9e191e3cd5a65710c551af920a9d43183f0ed8a4b134fe0de8fc442ca3df4974b7e19665d8afe6eb476b612b32b9d1541847ee7f738826fecffd3102357a25e8205e780915ad8b091e247a565a7931f33aa32c9829d6005916ed251a4d2b690521402eec5d6cab886e147290c995f84a7f77b6a977337107f1f57244675a301d917d53903ac77db718901b1d8e398efe85337c443e7b7b56646ca5d5f41644c9f25a3e0987fea374e02f65d373bc42e2d49688f0b40637a3daf989938615e4924d02137811c4ad8960d071d70665f6a38a182912af9f7bce0d4e7c30c736b1a90e503baafa3726d907bddfbf7f88410673fb3019a3c144a86f104fbaa7df026f1fe0a04d9d318963d8cb5722c3d3157e44ce579e453409e10e2a7c052e571b6cda964b6983f2feb8fe91c9a45695bdb8e8de2caa63798a06a322e716db2a4e1391070746d845aebf89e4317bb016192c758137bb3d87d859fb6dc11c401fc19dedece4efa4262933f0ff2db1da1720ecf87a4469c8cf00baca58e6e550e41277c34ee0085dbc7e356d2208bd192903f1344595a257c1149603cfe816e0a69623dcd30d08cd48bbc88a7b093e715b4c0679f20ffca38e3bb39d7c3295d90a826dfff7b5da4b7a0fda6264c12f3ac1880591973cb3992e2e911389", 0x2}, 0x20) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000140)={0x0, 0x2, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x9b0909, 0x6, '\x00', @ptr=0x8}}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000180)={0x1, "96af261b09b8c6f25ec0c7853c052e558b4e78a81d6595b0762b8cb6fc1f4034", 0x100, 0xd53, 0x5, 0x10, 0x4}) (async) 11:42:48 executing program 5: setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000000)={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, "ce7577ac648ab902d0aca4e50a57d7d256c6818dfde985970d348fbc2db7406b", 0x8001, 0x5, 0x80000000, 0x1}, 0x3c) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:48 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@local, @dev={0xac, 0x14, 0x14, 0x1f}, 0xffffffffffffffff, "612743c82ea0498ce0190eabb71165e4a78e6d3292d0d9201ca9f00f6cf300b6", 0xfffffffe, 0x0, 0x1, 0x4}, 0x3c) 11:42:48 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:48 executing program 5: setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000000)={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, "ce7577ac648ab902d0aca4e50a57d7d256c6818dfde985970d348fbc2db7406b", 0x8001, 0x5, 0x80000000, 0x1}, 0x3c) (async) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:48 executing program 4: socketpair(0xa, 0xa, 0xfffffffa, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00'}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f00000001c0)={@multicast2, @multicast1, 0x0, "6556ecb290a77fc888b31df26e0bb2d58c1e0ee90e84c8a9c0bfa14be72a4e53"}, 0x3c) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x61c200, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) socketpair(0xa, 0xa, 0xfffffffa, &(0x7f0000000000)) (async) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00'}) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f00000001c0)={@multicast2, @multicast1, 0x0, "6556ecb290a77fc888b31df26e0bb2d58c1e0ee90e84c8a9c0bfa14be72a4e53"}, 0x3c) (async) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x61c200, 0x0) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) 11:42:48 executing program 4: socketpair(0xa, 0xa, 0xfffffffa, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00'}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f00000001c0)={@multicast2, @multicast1, 0x0, "6556ecb290a77fc888b31df26e0bb2d58c1e0ee90e84c8a9c0bfa14be72a4e53"}, 0x3c) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x61c200, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) socketpair(0xa, 0xa, 0xfffffffa, &(0x7f0000000000)) (async) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00'}) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f00000001c0)={@multicast2, @multicast1, 0x0, "6556ecb290a77fc888b31df26e0bb2d58c1e0ee90e84c8a9c0bfa14be72a4e53"}, 0x3c) (async) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x61c200, 0x0) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) 11:42:48 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000)="f0c30576e5b67149bfcaa08e5f11a399004cae83df19878ce0f0df6257b0dc0d57b3e161e7cc87aa96d911cd77f3d96e1e14a486e9d3e1", &(0x7f0000000480)=@buf="59b646a25b2569708e5188d39ece16db649f9fbf7db065929ffd6d0856fe12c751a8905ff7aa11d6b1b4dd3feeda54f7542554b86d2452fd2587daa7f2f08a8d2e2ae0dfed47eeb2f69a89199bcfb385bfe3170cc0f7c87acd18a7bc1641ca5ff0ec3bb0904fec0db336d5662b31737c709d5773657f3635c663dc150d6e157e39f40a8b1445dff43cb3dfa6f70b449395c1ff2942a790e7f0ef7f262e709edd72bc5113f17cabee804e713ced6a00c285fabff3c640ff3dfa4af75aece31bb3b590d9ea415d1b0e8f2218c76afb250c8bfe1baae6bb79bf078af3efe4c5c4952ef8254c86e5fef96bda309c90bea28c3e6e076e6572f656e69fc87013139543fbff7ffd60d4d32fcac927893a0900323558e07577109fd7a11f3aec45bdb3edb60decd2eda1769285676a04a40e0e61fa4b21dc1436c09b648adac9bc25353a26cff0c2db4e5c06f05ae06cd5c51c1a50d8c8f7f269c0cb97ea350b946111565aabbefb641cd415badd3b8127a465343a0d2a6316b6e13af88e2a9734b16ef2c8c7315202638780c39e497cf4ac7bdad7aaf6a40fb276e8650b550253e541763fdb34c4d94d1d23a6a3b9426008e7efc2b72ed089610d5dc074e5bf73b57cb4f11ece278f44bce572b9ca7fade583ce1b4bac8759c497f7b3c69e11ab2106320ac48ec0b6e39cfd67f11dc55ec2bd40d2043bfc1676db71da0de22814aefbdcf2a0d5eaffbd5b5160b3973c3390d1bb4cdcd8bfdd13ce4b7c45997bd5ddaa6989830d17653b1516bd579084ab105d424dc8b186d2394ffa729eeef7e595ed71b8ab282e34c71821833111845f963702b219a95ee0f0f3e3f0c43b5f52aded76d0977a231c5bda4e1d1fbed3daab3c76f6fa6b3cabcaaf741328e5917f396bb6dccb6d210d278c92efd5ce197289a8c3181c809f765560ad079e453c6c7e39a904b789e3ebfd656c83ef24f0d1076b005957e8f4bca1c7eb3c4d60d0832a67d8dbfe67bf1f766fc19496da11f0e732ec51499134a6c67a83484eced7edc364bcc226d7c1cd38b8d4aa926c951defb59bf40aedd16847ca8cece7174b36fc9f2ffd24182d78c2645cc04c4ad092157181d7b2939b2bfefa559b570e831f4f43874b25c71a1df8215e6d940c0377fae93667a52ef3d2defa1da0b04674496fa68c3a7215376cd033bad4a23b7fb587222cdfc0198da02a1efec04ba22598f5d9330232160933b420bead184d766953e022ceb00cf134bb337b6e570b04908e99f384e2cc58dd215c34db7e2c8aa08e9a6502fea78158cdc2f01dc99f8a3fa7c4cf9308df5beed35c5007e80a1b0189988a81ccae7b4dacc9fc57b8fbb951e25dc5ac17534c1190b682c877cf8774e95ea2e605617d7501b16750bf2e0fc25fd9fab4839b94972e463e2192cac283689d3c66b8cae67343201edf0094c07b5e65f57729cec71e856a7030a62977541dec62e62bf4a28e862025d0a50cbd860ec962a0a6d922e0e7e36c0e66d6bc69a31d5fd3f8ad21dfb5f0d4240ca6b7257d2df4faf665e5d76fdb620ebe76a53707b07891756e2bae48420ec8b7cb4f2db16415ccb5ab194bfc7b7eb15888d5b66ab02510dbf2f41c01ff9c044793225413bd69a6dcc8712c4ad2f0d2fedcb714eed0e6bc35699f922d1cced3c975121f8dff53102a2cdc4970ef45222f4eff2076a976e83c67c04ce1b74c1542475dc8eeff6921fcf0cbd727fae61c158bd5648e5854bf1754fe16c005c9aaae094fc0dfa03b6d53276fa40194a03d1ed8a0986b22f117342212eaf7db4ddc66ce3740bd12a2f3ef9cb6e4d8afa30d04f066c7e65fbe4d5f1d8a68e570a6be9076ada2bcf6c8604deb1318fd48b4bbabb6fda4b8fb1bac32da7fe85b6a2cbbdc3dc37fce5fe085aab97b5998899b6791a1c3a6db1922fee7c7cd2ca1fcc849250aaca1d636ad9caaa3e7ee12a4025b12875d659e323bc75f51d617455117d5c0dba825f9f2fc4bd8f60fec3e606d31104b0a1c3d49250fd4cf9a50276772a119732627ba7b0a58d26dd570c5e7f0710e482a9941b9df132ab8cd06676eaf91c454e7f5faaaaca8ff469b746ca0656462b8b0b1a810ce1a2dee24870aa3693e28191c63fe82dc378c6f322073f5e047d738a9dd5b45a23915d57f3d67f2b16adca918475c3ab6faf78f10e54648e235e782d0c1d948936fa26be962add5065b08be424924ac0bd6a0ac2f1b1e68391e8e18ea96005edccec1cb6015c9659873e9bb795c7eb3af9f48c671ad2e9a8cbf869fc12c1d0ac59950912dbf79b6699bfc511d210cd1904bcdafe65297122c6e729d5eca8e381dd9904c316e0e3775a867d00d6c2e01d3e2a08132befbb2607dac7c454b4359c5f4f9f9d5c5dd128479d7c871884a32431c74baa70a2c89753118beaa2dd8330c80c6fe1b1db2d4b0a83c5e76dbfd578594be4303c982e52007199a0b52a520ba879af3629d7308a4acf8850cc46e12b7aae29f1a6e59fb75671adf2e0b33e43f12a02b015f3c42c8aabce95836dcae56cd65f11eef2cad14e0b9dcca8ef1d323f262b7dbf29c925d257d454abec04369905f6d43115d94f11ce7de22d0a2796b222a9fc3f021e812e727ddd8ca363bcc2ff5307062a96aa2b74c8a53e57f6fcbe3c15ab069897c77f38ebedf7e3ebffdb5350676056f1dc36e8b62180480ca1ff0695817ccc33dd1bde4203f1ac056996bc4a4642fb6c2f3205f6474c6684aae05bc1f6a8e29286d3cbb70fb13aa23de6fae74526d4f787a151b9b6f4ca16c312be442e64806f4d39b3bc460816485cfb623aeec2ec1b52fc22f9ac3150e391ee4e5955b491a99bbe1e3c2bf0444a26b927daae0a0fde03ab5f702a24a0e93218c7a7def42d6cc9d8fdb4107e9863e3d117f759bc7462db3d7f3e7839af0bbc2818533f8865edc3ed935a1d1c4389d7b2238fd2b489302f7c0dd2ef6f2cf8f5d977e84f44eb4c6d21935044121527eb0f8915cc036e50130e920d0ba3410d974e105756ed7555ad57f6064d2b020356ac373d240f6b16bb25e755e7fb9c6d22ea0211f6824db7678cc2cceac3db08ca1bf9c98743634fc5c5fd5cfb640799c245a3625ba2e944e36dddbd9c1f37a17e9f6cb2ecd9828b5e7f3db7c9c191d70bd2e01db33cc24b814766739bd7b1e32b7ffdaca957d5b33624639998feeba815f6002541cfa66365d96933d06f217e11bbe66185356fb7a17675d290d025e0997658b536fbdb3815a117d698aec7d51b0964621881ccb4bfdb54d866edf1c92be040f9b934e9bf6d5f0356ac381f1765081c489fc7a6c7fe4587340f377e5f32416169b9a9f5037aeef45eaf265048639403798f34e492a2eedf9640f75059291502393bbfd79aeacecd3790797e366a6dad324659a84693b8f5b2af3c3834327cc7a4fc5dd890f9030a4bf1d40fc30628e0d6531c6b8cc9260aa4f9e4eb61caecc5f5f88951e46e4833cae99ed7b45cc1a8ba7876399370583672fbe406346fbab507c9856159fa976b1bbfbdbd81b26f23577e1a2e9e827a0d97f3d3e453d232057f29658bb2cf0466679b44f4453ed23056784d2bd5957bdfb07046f3cc5e6d8ded0a67c7f69b7d2d7593db8263d7945d9ddc1be362e9775adecb52c58ae7d94d82c6a8e109fe73879ad08d365ec49e1b2fbca5503cab9058af97fd1ba0f5a361620d217142761c81a324537195185a2c0f73b98808beca6f1e73500f92612b4be27dbc91ae7ba0a2e004d95b343a311c6bf5a022a2d86a0d45614f753a5e72c0dcbaac477c34370302cef2c61ff6660caa69758df81cf6e5e9ab2eccf59c7e01302b3e68d8ae6c864ec70f1cd661440281f966e974e300454f7e2aac6f026d28ff97edcbd6fb666e839e0df75cd096e7e90724ac2c8fe1ed43174c1ad07bc48129e9bbc1962b4536e85bdeecae6fdbfb8cb28ca54178cc6151db92dec69ae2449bf961921f4363396bcfa7e8625bbb207ab69ce32675d934f74725b29e36b7a210da9e5774aa4feaf6a67d45e10ad585e6daac5c272e520d2089cc254c44d4c36cef6308b61604c4391eb97b3d6cec14e6a76ce922c8ebef12835a341b0b611f530b5ef1ada9c6a0f7cd4b252a9bc59d54643a715189c07909de069287147b3ac590df5f9001dbb0a97d7056da327acb50a4516445b1bb6b124a3d41f86157dfb6546e8908d7015595100b773099afe790650fd11bb77df2c736176835eb738d3e41c0f1c433b037d5b8ec6106dcbf9f6f5940346f9ff1190dcfd63239d9a83be436dfc5953f8a2def27170f21095c9ad43645389abc25fa30cd3730b78b25c1f41614611399bc874af0a3572b98439cbd1232f5026789e6254fc5dc582d10c2e9f027e6edbdd0f4e4a4f4b764fd6a1f102b093cd9eea7e7eeca8ad118130054af4c665f2b3b94b998658e11542e752b4baa0b489e31e5c544700275c9aafac91f4e6f6374aff66182ee05ce0baf68fefb6efeb1db1504a56c5a82c61d03d958540d55346fc5016b5997045557253f9af76ae11c0b206a8b48a699215c8da3dcc88225a3ea52336e9f75bbd26a528d57437fdc6737d3462fc8f52f9dd86bd582654d06be4cbc6a6e0790915b9276f7ef72ee7473da3e30f5a9253e26bf899d9c4a0b90bc7896a2f3e80085e6389fe642a559c4c7d29c2563d90de40cabaf0a8cc602af1dd6f73264b14fea0da20b8db7bb5aff895423defbf5759d126998b14334aade19f078d60d84234722bcef14f9da1e9c5476cf9b240c30cfc523297e93f8cbfc9f582f258043bdb72940f41e9d172bf1b7d7e79cf6852b3454bc36631124ad4c1a8c016b4184fc6874d184cb658fac3185d94dd4eda8b89093f4c34179d989c6636c2b0ffb4be99063d0f289b02300697c62b1c231f525bc509a2be89c7a5a73a7221fe49399f211d69e38928a74356b486cd64155e1e9a9c6ddcb61e052a2617a110e743ded141a4a39adf939e69fce58380d25644c0e2318700da1cd70424e0475a5eeea73297c08692a54fe40ab7fe67e2401b54e25528e47807f9c9703d2cdaee3e1ba83d48524964b96aaf1d5d3bad554f9f9aac8a81ff92588cc098c5cc3bd045bb4a4e1d6a3ef1928109c84ef4da9e191e3cd5a65710c551af920a9d43183f0ed8a4b134fe0de8fc442ca3df4974b7e19665d8afe6eb476b612b32b9d1541847ee7f738826fecffd3102357a25e8205e780915ad8b091e247a565a7931f33aa32c9829d6005916ed251a4d2b690521402eec5d6cab886e147290c995f84a7f77b6a977337107f1f57244675a301d917d53903ac77db718901b1d8e398efe85337c443e7b7b56646ca5d5f41644c9f25a3e0987fea374e02f65d373bc42e2d49688f0b40637a3daf989938615e4924d02137811c4ad8960d071d70665f6a38a182912af9f7bce0d4e7c30c736b1a90e503baafa3726d907bddfbf7f88410673fb3019a3c144a86f104fbaa7df026f1fe0a04d9d318963d8cb5722c3d3157e44ce579e453409e10e2a7c052e571b6cda964b6983f2feb8fe91c9a45695bdb8e8de2caa63798a06a322e716db2a4e1391070746d845aebf89e4317bb016192c758137bb3d87d859fb6dc11c401fc19dedece4efa4262933f0ff2db1da1720ecf87a4469c8cf00baca58e6e550e41277c34ee0085dbc7e356d2208bd192903f1344595a257c1149603cfe816e0a69623dcd30d08cd48bbc88a7b093e715b4c0679f20ffca38e3bb39d7c3295d90a826dfff7b5da4b7a0fda6264c12f3ac1880591973cb3992e2e911389", 0x2}, 0x20) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000140)={0x0, 0x2, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x9b0909, 0x6, '\x00', @ptr=0x8}}) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000180)={0x1, "96af261b09b8c6f25ec0c7853c052e558b4e78a81d6595b0762b8cb6fc1f4034", 0x100, 0xd53, 0x5, 0x10, 0x4}) 11:42:48 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x200080, 0x0) 11:42:48 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x4, 0x1000, '\x00', &(0x7f0000000000)=0x1f}) 11:42:48 executing program 5: setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000000)={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, "ce7577ac648ab902d0aca4e50a57d7d256c6818dfde985970d348fbc2db7406b", 0x8001, 0x5, 0x80000000, 0x1}, 0x3c) (async) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:48 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:48 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffb, 0x0, 0x800]}}}) 11:42:48 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x2b, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4000, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6]}}}) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f0000000000)={0x9, 0x5}) 11:42:49 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) (async) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x400) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x200080, 0x0) 11:42:49 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffb, 0x0, 0x800]}}}) 11:42:49 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffffffffffff, "33d886316e5986372386ef1d03670baa59a3e2fc8534cd1b6fd7cddbb9b947f6", 0x619d, 0xfffffff9, 0x81, 0x1}, 0x3c) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x101902, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x6, 0x4, {0xb, @win={{0xa, 0x3d, 0x3, 0x1f}, 0x0, 0x0, &(0x7f0000000100)={{0x200, 0x20, 0x300, 0x4}, &(0x7f00000000c0)={{0x40, 0x0, 0x2, 0x7ff}}}, 0x80, &(0x7f0000000140)="6b2a9af86aa965c306d186041cdd872f52a1fbcb2b942146399afb01c166b55c99846220f23226f46db2051af1ec4baa26e55278e30fc6fcb6dcb93954cd5f538c9fe45d4c875da3fbffffff0d06b24542a450d0c3", 0xff}}}) 11:42:49 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x4, 0x1000, '\x00', &(0x7f0000000000)=0x1f}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}) (async) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x4, 0x1000, '\x00', &(0x7f0000000000)=0x1f}) (async) 11:42:49 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x2b, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4000, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6]}}}) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f0000000000)={0x9, 0x5}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x2b, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4000, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6]}}}) (async) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f0000000000)={0x9, 0x5}) (async) 11:42:49 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000080)={0x0, 0x13, 0x100b, 0x1}) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000000)={0x2, 0x0, [0x1ff, 0x8, 0x6, 0x2, 0x4530, 0x0, 0x10001, 0x7fffffff]}) 11:42:49 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffb, 0x0, 0x800]}}}) 11:42:49 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) 11:42:49 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffffffffffff, "33d886316e5986372386ef1d03670baa59a3e2fc8534cd1b6fd7cddbb9b947f6", 0x619d, 0xfffffff9, 0x81, 0x1}, 0x3c) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x101902, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x6, 0x4, {0xb, @win={{0xa, 0x3d, 0x3, 0x1f}, 0x0, 0x0, &(0x7f0000000100)={{0x200, 0x20, 0x300, 0x4}, &(0x7f00000000c0)={{0x40, 0x0, 0x2, 0x7ff}}}, 0x80, &(0x7f0000000140)="6b2a9af86aa965c306d186041cdd872f52a1fbcb2b942146399afb01c166b55c99846220f23226f46db2051af1ec4baa26e55278e30fc6fcb6dcb93954cd5f538c9fe45d4c875da3fbffffff0d06b24542a450d0c3", 0xff}}}) 11:42:49 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000000)={0x0, 0x7380, 0x2013, 0x1}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000080)="a8f03c37939d4e50cef5423ac76502b123da6ee5c7ec653d486c258ad84ae84699a2795b73db5bc454d4bd03ef7f747b105e62b077351d7a8801304e1224d6d3cfbb724de2ed778eed616f9cc88062b8f43ed3e1706de0a53730c76ae424d954420cb67bb41792c6893da4e8e1334f00949b206df9490580d65cffe3c1a13ca708b2a6976ae314b6dd6057a7d6dcfbd157199aa1945649113b5d6cd53ce90f396c6e140ab267b35e85752e16800f8065be4221246dc625dcc9ea706f176a23ef78168e547d702f9b60ee977c8fb19ae12112999c6de3bd32ef6cf718c9a1cd6ae074dabcbcc0668ae222", &(0x7f0000000180)=@tcp6, 0x1}, 0x20) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:49 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000080)={0x0, 0x13, 0x100b, 0x1}) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000000)={0x2, 0x0, [0x1ff, 0x8, 0x6, 0x2, 0x4530, 0x0, 0x10001, 0x7fffffff]}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000080)={0x0, 0x13, 0x100b, 0x1}) (async) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000000)={0x2, 0x0, [0x1ff, 0x8, 0x6, 0x2, 0x4530, 0x0, 0x10001, 0x7fffffff]}) (async) 11:42:49 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffffffffffff, "33d886316e5986372386ef1d03670baa59a3e2fc8534cd1b6fd7cddbb9b947f6", 0x619d, 0xfffffff9, 0x81, 0x1}, 0x3c) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x101902, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x6, 0x4, {0xb, @win={{0xa, 0x3d, 0x3, 0x1f}, 0x0, 0x0, &(0x7f0000000100)={{0x200, 0x20, 0x300, 0x4}, &(0x7f00000000c0)={{0x40, 0x0, 0x2, 0x7ff}}}, 0x80, &(0x7f0000000140)="6b2a9af86aa965c306d186041cdd872f52a1fbcb2b942146399afb01c166b55c99846220f23226f46db2051af1ec4baa26e55278e30fc6fcb6dcb93954cd5f538c9fe45d4c875da3fbffffff0d06b24542a450d0c3", 0xff}}}) 11:42:49 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000000)={0x0, 0x7380, 0x2013, 0x1}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000080)="a8f03c37939d4e50cef5423ac76502b123da6ee5c7ec653d486c258ad84ae84699a2795b73db5bc454d4bd03ef7f747b105e62b077351d7a8801304e1224d6d3cfbb724de2ed778eed616f9cc88062b8f43ed3e1706de0a53730c76ae424d954420cb67bb41792c6893da4e8e1334f00949b206df9490580d65cffe3c1a13ca708b2a6976ae314b6dd6057a7d6dcfbd157199aa1945649113b5d6cd53ce90f396c6e140ab267b35e85752e16800f8065be4221246dc625dcc9ea706f176a23ef78168e547d702f9b60ee977c8fb19ae12112999c6de3bd32ef6cf718c9a1cd6ae074dabcbcc0668ae222", &(0x7f0000000180)=@tcp6, 0x1}, 0x20) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:49 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x4, 0x1000, '\x00', &(0x7f0000000000)=0x1f}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}) (async) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x4, 0x1000, '\x00', &(0x7f0000000000)=0x1f}) (async) 11:42:49 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r0, r0}, 0xc) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f00000005c0)={0xd, 0x1e279aa3, 0x401}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={&(0x7f00000000c0)="de22499e98541a1cdbf282254032713e7049bd4ce4504ec27db9da3f6e9981d744802b3745dc3a7a03f672285281f2b286e06d30c4c6d55ee9340804f72b2c1abcf4104eb63cb60748d72252026a4d8bf3eaabc502176f0bf462a8d70b8c474ca122efcf9617182264567f32115ba4f7b7c27decd4b9f53018235271122f0c30438478bb2301b3b6f689e7d398367638673c6dd4571141075d316e4779e239cf6176538dd1d7b10e348a740ac8ae65dd8a93ad146da070ba4f0bc587f311ea2178e4e637d0f596398ca14eb66daef5c8a494a98dc696b4a37b4d4ff78e409f81700a779a94446c5320c5a4ebfccfbfcbdb", &(0x7f00000001c0)=""/145, &(0x7f0000000280)="be713e2c5780e26462073b27a80e785472f97f19954cb93e4fe2fcfa9754c5379af66df5513a96a66048563045dedd23578b487c8899a5520eb711f490fcf4b07afbc1aa4693f35026798bb7a237d04abf0ce41e1208d58e5dfd1243dbf723aad3f1cc13889d2095c88b887e205b08c22ae7decfe7fb158199ca3b4fb96a8ea76b314c11ebcfd5ff5f63ea2a0e8a29dbbeb2d30d49dc242fbf8df31be3999ef4c3fd0f0062e14e8876da7151f88eb6c0c706f49410d9f5ba03973cab1e1306f1dd10dff9cc60af4eaa1b0a72eb7764d7316fca113963e1b26af895befb9cdc941f36d31fbd97eb9bf506315ab43546fe3e4d9b1cb6c29791d1b8a8e0f62349", &(0x7f0000000480)="ce4e9bab839c2374529d3dd9985439443e2d99a3f98c69c1ca225db0f6e2fa7d9a127b4c569f8d001d3ed7ad8eed998267e591359e03b1be2e8709fbbd4b3f31a46d3bf45f5fbbfe40fc10af79d449e9ed4a0d762c1024dead50f002344c49d0efa5a7d063c66c8047b0dc2f123f86c674f153bb0e5f051149d46370aacb40e4c21e3d807cecc519f6739595a408aa62a474636cc1878540d01aefd56087c5f3bbd8047509", 0x3ff, r0, 0x4}, 0x38) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @pix_mp={0x9, 0x1, 0x41415270, 0x0, 0x7, [{0x7, 0x9}, {0xfffffff7, 0x100}, {0x1, 0xff}, {0x1, 0x200b8d3}, {0x80000001, 0x80}, {0x100, 0x8}, {0x3, 0x8}, {0x2, 0x18}], 0x6, 0x81, 0x0, 0x0, 0x2}}}) 11:42:49 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x2b, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4000, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6]}}}) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f0000000000)={0x9, 0x5}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x2b, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4000, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6]}}}) (async) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f0000000000)={0x9, 0x5}) (async) 11:42:49 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000080)={0x0, 0x13, 0x100b, 0x1}) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000000)={0x2, 0x0, [0x1ff, 0x8, 0x6, 0x2, 0x4530, 0x0, 0x10001, 0x7fffffff]}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000080)={0x0, 0x13, 0x100b, 0x1}) (async) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000000)={0x2, 0x0, [0x1ff, 0x8, 0x6, 0x2, 0x4530, 0x0, 0x10001, 0x7fffffff]}) (async) 11:42:49 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r1 = syz_open_dev$video(&(0x7f0000000000), 0x80000001, 0x521000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000100)={0xf1273feddca7e3d6, 0x8001, 0x2}) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000080)={0x0, "0cb271fcb903f3aed200602ee795b9c43fd7480c16300c161f46d4d641b7f37d", 0x3, 0x9, 0x3, 0x40004, 0x2}) 11:42:49 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r0, r0}, 0xc) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f00000005c0)={0xd, 0x1e279aa3, 0x401}) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={&(0x7f00000000c0)="de22499e98541a1cdbf282254032713e7049bd4ce4504ec27db9da3f6e9981d744802b3745dc3a7a03f672285281f2b286e06d30c4c6d55ee9340804f72b2c1abcf4104eb63cb60748d72252026a4d8bf3eaabc502176f0bf462a8d70b8c474ca122efcf9617182264567f32115ba4f7b7c27decd4b9f53018235271122f0c30438478bb2301b3b6f689e7d398367638673c6dd4571141075d316e4779e239cf6176538dd1d7b10e348a740ac8ae65dd8a93ad146da070ba4f0bc587f311ea2178e4e637d0f596398ca14eb66daef5c8a494a98dc696b4a37b4d4ff78e409f81700a779a94446c5320c5a4ebfccfbfcbdb", &(0x7f00000001c0)=""/145, &(0x7f0000000280)="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", &(0x7f0000000480)="ce4e9bab839c2374529d3dd9985439443e2d99a3f98c69c1ca225db0f6e2fa7d9a127b4c569f8d001d3ed7ad8eed998267e591359e03b1be2e8709fbbd4b3f31a46d3bf45f5fbbfe40fc10af79d449e9ed4a0d762c1024dead50f002344c49d0efa5a7d063c66c8047b0dc2f123f86c674f153bb0e5f051149d46370aacb40e4c21e3d807cecc519f6739595a408aa62a474636cc1878540d01aefd56087c5f3bbd8047509", 0x3ff, r0, 0x4}, 0x38) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @pix_mp={0x9, 0x1, 0x41415270, 0x0, 0x7, [{0x7, 0x9}, {0xfffffff7, 0x100}, {0x1, 0xff}, {0x1, 0x200b8d3}, {0x80000001, 0x80}, {0x100, 0x8}, {0x3, 0x8}, {0x2, 0x18}], 0x6, 0x81, 0x0, 0x0, 0x2}}}) 11:42:49 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000000)={0x0, 0x7380, 0x2013, 0x1}) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000080)="a8f03c37939d4e50cef5423ac76502b123da6ee5c7ec653d486c258ad84ae84699a2795b73db5bc454d4bd03ef7f747b105e62b077351d7a8801304e1224d6d3cfbb724de2ed778eed616f9cc88062b8f43ed3e1706de0a53730c76ae424d954420cb67bb41792c6893da4e8e1334f00949b206df9490580d65cffe3c1a13ca708b2a6976ae314b6dd6057a7d6dcfbd157199aa1945649113b5d6cd53ce90f396c6e140ab267b35e85752e16800f8065be4221246dc625dcc9ea706f176a23ef78168e547d702f9b60ee977c8fb19ae12112999c6de3bd32ef6cf718c9a1cd6ae074dabcbcc0668ae222", &(0x7f0000000180)=@tcp6, 0x1}, 0x20) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:49 executing program 5: ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x5, 0x1, 0x0, 0x9, 0x8}) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:49 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}}}) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000000)={0x1, 0x4345e65f, @name="6afbec78d617a703a4c89d86963a748f0a399a7d54badceedc5262357e532f11"}) 11:42:49 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}) 11:42:49 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r0, r0}, 0xc) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f00000005c0)={0xd, 0x1e279aa3, 0x401}) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={&(0x7f00000000c0)="de22499e98541a1cdbf282254032713e7049bd4ce4504ec27db9da3f6e9981d744802b3745dc3a7a03f672285281f2b286e06d30c4c6d55ee9340804f72b2c1abcf4104eb63cb60748d72252026a4d8bf3eaabc502176f0bf462a8d70b8c474ca122efcf9617182264567f32115ba4f7b7c27decd4b9f53018235271122f0c30438478bb2301b3b6f689e7d398367638673c6dd4571141075d316e4779e239cf6176538dd1d7b10e348a740ac8ae65dd8a93ad146da070ba4f0bc587f311ea2178e4e637d0f596398ca14eb66daef5c8a494a98dc696b4a37b4d4ff78e409f81700a779a94446c5320c5a4ebfccfbfcbdb", &(0x7f00000001c0)=""/145, &(0x7f0000000280)="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", &(0x7f0000000480)="ce4e9bab839c2374529d3dd9985439443e2d99a3f98c69c1ca225db0f6e2fa7d9a127b4c569f8d001d3ed7ad8eed998267e591359e03b1be2e8709fbbd4b3f31a46d3bf45f5fbbfe40fc10af79d449e9ed4a0d762c1024dead50f002344c49d0efa5a7d063c66c8047b0dc2f123f86c674f153bb0e5f051149d46370aacb40e4c21e3d807cecc519f6739595a408aa62a474636cc1878540d01aefd56087c5f3bbd8047509", 0x3ff, r0, 0x4}, 0x38) (async, rerun: 64) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @pix_mp={0x9, 0x1, 0x41415270, 0x0, 0x7, [{0x7, 0x9}, {0xfffffff7, 0x100}, {0x1, 0xff}, {0x1, 0x200b8d3}, {0x80000001, 0x80}, {0x100, 0x8}, {0x3, 0x8}, {0x2, 0x18}], 0x6, 0x81, 0x0, 0x0, 0x2}}}) (rerun: 64) 11:42:49 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r1 = syz_open_dev$video(&(0x7f0000000000), 0x80000001, 0x521000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000100)={0xf1273feddca7e3d6, 0x8001, 0x2}) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000080)={0x0, "0cb271fcb903f3aed200602ee795b9c43fd7480c16300c161f46d4d641b7f37d", 0x3, 0x9, 0x3, 0x40004, 0x2}) 11:42:49 executing program 4: ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f0000000180)=0x8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x27b}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0x64}, 0x1, 0x0, 0x0, 0x91}, 0x840) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:49 executing program 5: ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x5, 0x1, 0x0, 0x9, 0x8}) (async) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:49 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x2, 0x4, 0x3, {0x2, @vbi={0x5, 0x5, 0x8, 0x32314752, [0x7819, 0x5], [0x80000001, 0x4], 0x108}}, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r2) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f00000001c0)={0x9a0000, 0x7, 0x6, r2, 0x0, &(0x7f0000000180)={0xa10001, 0x990, '\x00', @value64=0x3}}) 11:42:49 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}) (async) 11:42:49 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}}}) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000000)={0x1, 0x4345e65f, @name="6afbec78d617a703a4c89d86963a748f0a399a7d54badceedc5262357e532f11"}) 11:42:49 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async, rerun: 32) r1 = syz_open_dev$video(&(0x7f0000000000), 0x80000001, 0x521000) (rerun: 32) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000100)={0xf1273feddca7e3d6, 0x8001, 0x2}) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000080)={0x0, "0cb271fcb903f3aed200602ee795b9c43fd7480c16300c161f46d4d641b7f37d", 0x3, 0x9, 0x3, 0x40004, 0x2}) 11:42:49 executing program 4: ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f0000000180)=0x8) (async, rerun: 32) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x27b}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0x64}, 0x1, 0x0, 0x0, 0x91}, 0x840) (async, rerun: 64) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 64) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:49 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}) (async) 11:42:49 executing program 5: ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x5, 0x1, 0x0, 0x9, 0x8}) (async) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:49 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}}}) (async) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000000)={0x1, 0x4345e65f, @name="6afbec78d617a703a4c89d86963a748f0a399a7d54badceedc5262357e532f11"}) 11:42:50 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x2, 0x4, 0x3, {0x2, @vbi={0x5, 0x5, 0x8, 0x32314752, [0x7819, 0x5], [0x80000001, 0x4], 0x108}}, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r2) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f00000001c0)={0x9a0000, 0x7, 0x6, r2, 0x0, &(0x7f0000000180)={0xa10001, 0x990, '\x00', @value64=0x3}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x2, 0x4, 0x3, {0x2, @vbi={0x5, 0x5, 0x8, 0x32314752, [0x7819, 0x5], [0x80000001, 0x4], 0x108}}, 0x1}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r2) (async) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f00000001c0)={0x9a0000, 0x7, 0x6, r2, 0x0, &(0x7f0000000180)={0xa10001, 0x990, '\x00', @value64=0x3}}) (async) 11:42:50 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000080)={0x4, 0x0, '\x00', {0x0, @reserved}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @vbi={0xa01, 0x80000000, 0xfc, 0x0, [0x2268, 0x6], [0x6, 0x3], 0x108}}}) 11:42:50 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x2, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000000)=0x80) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x0, 0x0, {0x2, @pix={0x8001, 0x1, 0x3432564e, 0x4, 0x80, 0xa53, 0x2, 0xffffffff, 0x1, 0x8, 0x0, 0x6}}}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000200)={0x0, 0x0, 0x27, 0x5a, 0x0, 0x100, 0x4}) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000001c0)=0x101) 11:42:50 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc]}}}) 11:42:50 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000080)={0x4, 0x0, '\x00', {0x0, @reserved}}) (async, rerun: 32) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @vbi={0xa01, 0x80000000, 0xfc, 0x0, [0x2268, 0x6], [0x6, 0x3], 0x108}}}) (rerun: 32) 11:42:50 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x2, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000000)=0x80) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x0, 0x0, {0x2, @pix={0x8001, 0x1, 0x3432564e, 0x4, 0x80, 0xa53, 0x2, 0xffffffff, 0x1, 0x8, 0x0, 0x6}}}) (async) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000200)={0x0, 0x0, 0x27, 0x5a, 0x0, 0x100, 0x4}) (async) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000001c0)=0x101) 11:42:50 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc]}}}) 11:42:50 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:50 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x2, 0x4, 0x3, {0x2, @vbi={0x5, 0x5, 0x8, 0x32314752, [0x7819, 0x5], [0x80000001, 0x4], 0x108}}, 0x1}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r2) (async) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f00000001c0)={0x9a0000, 0x7, 0x6, r2, 0x0, &(0x7f0000000180)={0xa10001, 0x990, '\x00', @value64=0x3}}) 11:42:50 executing program 4: ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f0000000180)=0x8) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x27b}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0x64}, 0x1, 0x0, 0x0, 0x91}, 0x840) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:50 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000080)={0x4, 0x0, '\x00', {0x0, @reserved}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @vbi={0xa01, 0x80000000, 0xfc, 0x0, [0x2268, 0x6], [0x6, 0x3], 0x108}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000080)={0x4, 0x0, '\x00', {0x0, @reserved}}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @vbi={0xa01, 0x80000000, 0xfc, 0x0, [0x2268, 0x6], [0x6, 0x3], 0x108}}}) (async) 11:42:50 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc]}}}) 11:42:50 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x2, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000000)=0x80) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x0, 0x0, {0x2, @pix={0x8001, 0x1, 0x3432564e, 0x4, 0x80, 0xa53, 0x2, 0xffffffff, 0x1, 0x8, 0x0, 0x6}}}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000200)={0x0, 0x0, 0x27, 0x5a, 0x0, 0x100, 0x4}) (async) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000001c0)=0x101) 11:42:50 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x8000) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) 11:42:50 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x3, {0x2, @sliced={0x0, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffcc, 0x2b, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}}}) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x2) 11:42:50 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f00000000c0)={0x0, 0x44, 0xfffffffe, '\x00', &(0x7f0000000080)=0x9}) 11:42:50 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0xdcfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}}) 11:42:50 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x8000) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) 11:42:50 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) syz_open_dev$vivid(&(0x7f00000000c0), 0x2, 0x2) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f0000001500)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r3 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000000)={0x0, {0x5, 0x7001}}) 11:42:50 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080)) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) 11:42:50 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x3, {0x2, @sliced={0x0, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffcc, 0x2b, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}}}) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x2) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x3, {0x2, @sliced={0x0, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffcc, 0x2b, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}}}) (async) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x2) (async) 11:42:50 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0xdcfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0xdcfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}}) (async) 11:42:50 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x8000) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) 11:42:50 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) syz_open_dev$vivid(&(0x7f00000000c0), 0x2, 0x2) (async) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f0000001500)) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) r3 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000000)={0x0, {0x5, 0x7001}}) 11:42:50 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (async) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f00000000c0)={0x0, 0x44, 0xfffffffe, '\x00', &(0x7f0000000080)=0x9}) 11:42:50 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x3, {0x2, @sliced={0x0, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffcc, 0x2b, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}}}) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x2) 11:42:50 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000080)={0x8001, 0x2, @name="f163e4006d129c51405a8c2c3dd461b7c64d82b19144ef68623815d589044e96"}) 11:42:50 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) syz_open_dev$vivid(&(0x7f00000000c0), 0x2, 0x2) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f0000001500)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r3 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000000)={0x0, {0x5, 0x7001}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) (async) syz_open_dev$vivid(&(0x7f00000000c0), 0x2, 0x2) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f0000001500)) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000000)={0x0, {0x5, 0x7001}}) (async) 11:42:51 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) (async, rerun: 32) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000080)={0x8001, 0x2, @name="f163e4006d129c51405a8c2c3dd461b7c64d82b19144ef68623815d589044e96"}) 11:42:51 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000000)) 11:42:51 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0xdcfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}}) 11:42:51 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080)) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:51 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f00000000c0)={0x0, 0x44, 0xfffffffe, '\x00', &(0x7f0000000080)=0x9}) 11:42:51 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0xc, @sliced={0xfffd, [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xff, 0x0, 0x3, 0x2b, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000080)=0x2a) 11:42:51 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000080)={0x3dd1, [0xfff, 0xf801, 0x0, 0xefc, 0x6, 0x4, 0x3, 0x3, 0x15d4, 0x6, 0x4aae, 0xfff, 0x9, 0x3f, 0xfff, 0x6, 0x6, 0x6, 0x7, 0x1000, 0x461, 0x7, 0x8, 0x1, 0x1, 0xde, 0xfa7a, 0xfff7, 0x1ff, 0x4, 0xeeb, 0x5f72, 0x800, 0x81, 0x400, 0x7, 0x59a, 0x6, 0x400, 0x2a, 0x0, 0x2, 0x7ff, 0x2, 0xbc2e, 0x2, 0xf7, 0x101], 0xb}) 11:42:51 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000000)) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000000)) (async) 11:42:51 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}) 11:42:51 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0xc, @sliced={0xfffd, [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xff, 0x0, 0x3, 0x2b, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000080)=0x2a) 11:42:51 executing program 1: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2b, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}}) 11:42:51 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) (async, rerun: 32) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000080)={0x8001, 0x2, @name="f163e4006d129c51405a8c2c3dd461b7c64d82b19144ef68623815d589044e96"}) 11:42:51 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000080)={0x3dd1, [0xfff, 0xf801, 0x0, 0xefc, 0x6, 0x4, 0x3, 0x3, 0x15d4, 0x6, 0x4aae, 0xfff, 0x9, 0x3f, 0xfff, 0x6, 0x6, 0x6, 0x7, 0x1000, 0x461, 0x7, 0x8, 0x1, 0x1, 0xde, 0xfa7a, 0xfff7, 0x1ff, 0x4, 0xeeb, 0x5f72, 0x800, 0x81, 0x400, 0x7, 0x59a, 0x6, 0x400, 0x2a, 0x0, 0x2, 0x7ff, 0x2, 0xbc2e, 0x2, 0xf7, 0x101], 0xb}) 11:42:51 executing program 1: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2b, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}}) 11:42:51 executing program 1: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2b, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2b, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}}) (async) 11:42:51 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}) 11:42:51 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x4]}}, 0xffffffff}) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x9, 0x3}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f00000000c0)={0x0, {0x8, 0xea}}) 11:42:51 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0xc, @sliced={0xfffd, [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xff, 0x0, 0x3, 0x2b, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000080)=0x2a) 11:42:51 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000000)) 11:42:51 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000080)={0x3dd1, [0xfff, 0xf801, 0x0, 0xefc, 0x6, 0x4, 0x3, 0x3, 0x15d4, 0x6, 0x4aae, 0xfff, 0x9, 0x3f, 0xfff, 0x6, 0x6, 0x6, 0x7, 0x1000, 0x461, 0x7, 0x8, 0x1, 0x1, 0xde, 0xfa7a, 0xfff7, 0x1ff, 0x4, 0xeeb, 0x5f72, 0x800, 0x81, 0x400, 0x7, 0x59a, 0x6, 0x400, 0x2a, 0x0, 0x2, 0x7ff, 0x2, 0xbc2e, 0x2, 0xf7, 0x101], 0xb}) 11:42:51 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x4c70, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) 11:42:51 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x4]}}, 0xffffffff}) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x9, 0x3}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f00000000c0)={0x0, {0x8, 0xea}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x4]}}, 0xffffffff}) (async) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x9, 0x3}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f00000000c0)={0x0, {0x8, 0xea}}) (async) 11:42:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDENABIO(r0, 0x4b36) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}}) syz_open_dev$loop(&(0x7f00000000c0), 0x100000001, 0x761c40) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x111241, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d07, &(0x7f0000000080)) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) ioctl$TIOCSCTTY(r3, 0x540e, 0x65) 11:42:51 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}) 11:42:51 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x15, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}, 0x8000}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) r2 = syz_open_dev$video(&(0x7f0000000200), 0xffffffff, 0x405) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000240)={0x9, [0x1, 0x8, 0x6, 0x4, 0x1, 0x1f, 0x8, 0x36, 0xff, 0x1, 0x7, 0xfffb, 0x1f, 0x101, 0x6, 0xfff, 0x9, 0x0, 0x4, 0x327, 0x0, 0x5, 0x1ff, 0x4, 0x6, 0x7, 0x0, 0x5, 0x2, 0x8e, 0x0, 0x26f8, 0xff67, 0xa6e, 0xffff, 0xfff8, 0xffda, 0x5, 0x5, 0xffff, 0x6, 0x6, 0x0, 0x5, 0xb6, 0x3ff, 0x81, 0x577c], 0xc}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000001c0)={0x90a}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x8001, 0xde9, 0x5, {0x7, @raw_data="d2f1a246685d0978d8b7f7c02451bbd153ba8ce04461dafd6231c41842560ec23dcc0526d3e224a95715f8ee4d473637dd36f9e6bca771f146821f1f390f872eb62f3c73e93bd86f48c83b568cef1fe63d42f8d8d40c071b2c38b49f85045487c121c0f21fdb79663f8ab0a01d12a7ee41be72feee9b6097656fbef888ce3c690e1187dee5e5b38837889ef7a1f35035d36eef0849775a6b89ccd686aa8400030ceecc90a4ed0e01f8b82196ff9b570f973c1737780e997fbe91ef1a58bea9c7b656de4e1df7c491"}, 0x1}) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000000)={0x1, 0x5, 0xcf2}) 11:42:51 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x4c70, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x4c70, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) (async) 11:42:51 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f0000000100)={0x0, 0xfffff001, 0x1, '\x00', &(0x7f00000000c0)=0x25}) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:51 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000000)) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000080)={0x3, 0x1, [0x0, 0x3, 0x7, 0xff, 0x6, 0x0, 0xc75, 0x800]}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r1 = syz_open_dev$video(&(0x7f00000000c0), 0x4, 0x100) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000100)={0x7, "4de0e57273eb183a96f19501cb0bb020e00f33a6ca8b8034b0086e802c9e9c9f", 0x3, 0x1}) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000280)={0x0, 0x5, 0x2, '\x00', &(0x7f0000000240)=0x20}) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000480)) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000200)={0xa00000, 0x1000000, 0x9, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x980905, 0x8d2d, '\x00', @p_u16=&(0x7f0000000180)=0x1000}}) 11:42:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDENABIO(r0, 0x4b36) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}}) syz_open_dev$loop(&(0x7f00000000c0), 0x100000001, 0x761c40) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x111241, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d07, &(0x7f0000000080)) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) ioctl$TIOCSCTTY(r3, 0x540e, 0x65) 11:42:51 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x15, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}, 0x8000}) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) r2 = syz_open_dev$video(&(0x7f0000000200), 0xffffffff, 0x405) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000240)={0x9, [0x1, 0x8, 0x6, 0x4, 0x1, 0x1f, 0x8, 0x36, 0xff, 0x1, 0x7, 0xfffb, 0x1f, 0x101, 0x6, 0xfff, 0x9, 0x0, 0x4, 0x327, 0x0, 0x5, 0x1ff, 0x4, 0x6, 0x7, 0x0, 0x5, 0x2, 0x8e, 0x0, 0x26f8, 0xff67, 0xa6e, 0xffff, 0xfff8, 0xffda, 0x5, 0x5, 0xffff, 0x6, 0x6, 0x0, 0x5, 0xb6, 0x3ff, 0x81, 0x577c], 0xc}) (async) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000001c0)={0x90a}) (async, rerun: 32) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x8001, 0xde9, 0x5, {0x7, @raw_data="d2f1a246685d0978d8b7f7c02451bbd153ba8ce04461dafd6231c41842560ec23dcc0526d3e224a95715f8ee4d473637dd36f9e6bca771f146821f1f390f872eb62f3c73e93bd86f48c83b568cef1fe63d42f8d8d40c071b2c38b49f85045487c121c0f21fdb79663f8ab0a01d12a7ee41be72feee9b6097656fbef888ce3c690e1187dee5e5b38837889ef7a1f35035d36eef0849775a6b89ccd686aa8400030ceecc90a4ed0e01f8b82196ff9b570f973c1737780e997fbe91ef1a58bea9c7b656de4e1df7c491"}, 0x1}) (async, rerun: 32) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000000)={0x1, 0x5, 0xcf2}) 11:42:51 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x4c70, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) 11:42:51 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f0000000100)={0x0, 0xfffff001, 0x1, '\x00', &(0x7f00000000c0)=0x25}) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:52 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000000)) (async) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000080)={0x3, 0x1, [0x0, 0x3, 0x7, 0xff, 0x6, 0x0, 0xc75, 0x800]}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) r1 = syz_open_dev$video(&(0x7f00000000c0), 0x4, 0x100) (async) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000100)={0x7, "4de0e57273eb183a96f19501cb0bb020e00f33a6ca8b8034b0086e802c9e9c9f", 0x3, 0x1}) (async, rerun: 64) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000280)={0x0, 0x5, 0x2, '\x00', &(0x7f0000000240)=0x20}) (async, rerun: 64) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000480)) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000200)={0xa00000, 0x1000000, 0x9, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x980905, 0x8d2d, '\x00', @p_u16=&(0x7f0000000180)=0x1000}}) 11:42:52 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x4]}}, 0xffffffff}) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x9, 0x3}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f00000000c0)={0x0, {0x8, 0xea}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x4]}}, 0xffffffff}) (async) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x9, 0x3}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f00000000c0)={0x0, {0x8, 0xea}}) (async) 11:42:52 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4, 0x6, 0x8, 0x1, 0x4}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f00000000c0)={0xc, {0x3, 0x8, 0x6, 0x5}}) 11:42:52 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDENABIO(r0, 0x4b36) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}}) syz_open_dev$loop(&(0x7f00000000c0), 0x100000001, 0x761c40) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x111241, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d07, &(0x7f0000000080)) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) ioctl$TIOCSCTTY(r3, 0x540e, 0x65) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$KDENABIO(r0, 0x4b36) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}}) (async) syz_open_dev$loop(&(0x7f00000000c0), 0x100000001, 0x761c40) (async) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x111241, 0x0) (async) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d07, &(0x7f0000000080)) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) (async) ioctl$TIOCSCTTY(r3, 0x540e, 0x65) (async) 11:42:52 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x15, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}, 0x8000}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) r2 = syz_open_dev$video(&(0x7f0000000200), 0xffffffff, 0x405) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000240)={0x9, [0x1, 0x8, 0x6, 0x4, 0x1, 0x1f, 0x8, 0x36, 0xff, 0x1, 0x7, 0xfffb, 0x1f, 0x101, 0x6, 0xfff, 0x9, 0x0, 0x4, 0x327, 0x0, 0x5, 0x1ff, 0x4, 0x6, 0x7, 0x0, 0x5, 0x2, 0x8e, 0x0, 0x26f8, 0xff67, 0xa6e, 0xffff, 0xfff8, 0xffda, 0x5, 0x5, 0xffff, 0x6, 0x6, 0x0, 0x5, 0xb6, 0x3ff, 0x81, 0x577c], 0xc}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000001c0)={0x90a}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x8001, 0xde9, 0x5, {0x7, @raw_data="d2f1a246685d0978d8b7f7c02451bbd153ba8ce04461dafd6231c41842560ec23dcc0526d3e224a95715f8ee4d473637dd36f9e6bca771f146821f1f390f872eb62f3c73e93bd86f48c83b568cef1fe63d42f8d8d40c071b2c38b49f85045487c121c0f21fdb79663f8ab0a01d12a7ee41be72feee9b6097656fbef888ce3c690e1187dee5e5b38837889ef7a1f35035d36eef0849775a6b89ccd686aa8400030ceecc90a4ed0e01f8b82196ff9b570f973c1737780e997fbe91ef1a58bea9c7b656de4e1df7c491"}, 0x1}) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000000)={0x1, 0x5, 0xcf2}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x15, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}, 0x8000}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) syz_open_dev$video(&(0x7f0000000200), 0xffffffff, 0x405) (async) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000240)={0x9, [0x1, 0x8, 0x6, 0x4, 0x1, 0x1f, 0x8, 0x36, 0xff, 0x1, 0x7, 0xfffb, 0x1f, 0x101, 0x6, 0xfff, 0x9, 0x0, 0x4, 0x327, 0x0, 0x5, 0x1ff, 0x4, 0x6, 0x7, 0x0, 0x5, 0x2, 0x8e, 0x0, 0x26f8, 0xff67, 0xa6e, 0xffff, 0xfff8, 0xffda, 0x5, 0x5, 0xffff, 0x6, 0x6, 0x0, 0x5, 0xb6, 0x3ff, 0x81, 0x577c], 0xc}) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000001c0)={0x90a}) (async) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x8001, 0xde9, 0x5, {0x7, @raw_data="d2f1a246685d0978d8b7f7c02451bbd153ba8ce04461dafd6231c41842560ec23dcc0526d3e224a95715f8ee4d473637dd36f9e6bca771f146821f1f390f872eb62f3c73e93bd86f48c83b568cef1fe63d42f8d8d40c071b2c38b49f85045487c121c0f21fdb79663f8ab0a01d12a7ee41be72feee9b6097656fbef888ce3c690e1187dee5e5b38837889ef7a1f35035d36eef0849775a6b89ccd686aa8400030ceecc90a4ed0e01f8b82196ff9b570f973c1737780e997fbe91ef1a58bea9c7b656de4e1df7c491"}, 0x1}) (async) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000000)={0x1, 0x5, 0xcf2}) (async) 11:42:52 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000000)) (async) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000080)={0x3, 0x1, [0x0, 0x3, 0x7, 0xff, 0x6, 0x0, 0xc75, 0x800]}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) r1 = syz_open_dev$video(&(0x7f00000000c0), 0x4, 0x100) (async) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000100)={0x7, "4de0e57273eb183a96f19501cb0bb020e00f33a6ca8b8034b0086e802c9e9c9f", 0x3, 0x1}) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000280)={0x0, 0x5, 0x2, '\x00', &(0x7f0000000240)=0x20}) (async) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000480)) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000200)={0xa00000, 0x1000000, 0x9, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x980905, 0x8d2d, '\x00', @p_u16=&(0x7f0000000180)=0x1000}}) 11:42:52 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f0000000100)={0x0, 0xfffff001, 0x1, '\x00', &(0x7f00000000c0)=0x25}) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f0000000100)={0x0, 0xfffff001, 0x1, '\x00', &(0x7f00000000c0)=0x25}) (async) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) 11:42:52 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x2000) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000080)={0x6, "5509530ecd437b94e9bd12d29be614d3748c4403e5f715503438736089cf211f"}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) 11:42:52 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4, 0x6, 0x8, 0x1, 0x4}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f00000000c0)={0xc, {0x3, 0x8, 0x6, 0x5}}) 11:42:52 executing program 0: ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000200)={0x3, 0x200, {0x52, 0xde, 0x401, {0x6, 0x8}, {0x3}, @period={0x5a, 0x6, 0xd808, 0x5, 0xfc70, {0x7ff, 0x8, 0xad, 0x1000}, 0x6, &(0x7f00000001c0)=[0xfff, 0x800, 0x6, 0x0, 0x72ce, 0x6]}}, {0x57, 0x40, 0x9a0, {0xf1af}, {0x81a, 0x9}, @cond=[{0x9, 0x4, 0x9, 0x0, 0x9, 0xb0b}, {0x6, 0xa8, 0x4, 0x401, 0x0, 0xd9d9}]}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x2, "808a119a1f5329de6061144929a25aee514e8700f2ce03377285a39e9cf4bd45", 0x1, 0x8, 0x200, 0xb000, 0x8}) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @win={{0x2, 0x7, 0xffffffff, 0x5}, 0x7, 0xffffff04, &(0x7f0000000140)={{0x0, 0x5, 0x4, 0x6}, &(0x7f0000000100)={{0x42, 0x101, 0x250e}}}, 0x1, &(0x7f0000000180)="22133412e966d52f", 0x9}}}) r3 = syz_open_dev$video(&(0x7f0000000000), 0xab41, 0xa00) r4 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f00000006c0)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540), 0x802, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000580)={{0x8000, 0x4, 0x100, 0x3ff}, 'syz1\x00', 0x45}) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x4) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000300)={0xa00000, 0x7, 0x5, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x9b0971, 0x3, '\x00', @p_u32=&(0x7f0000000280)=0x2}}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000080)={0x6, 0x5, 0x0, 0x1000, 0x40f2, 0x8, 0x8}) 11:42:52 executing program 1: ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)=0xff) r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f00000006c0)={0x0, 0x5, 0xffff, '\x00', &(0x7f0000000680)=0x65}) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000600)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000000c0)={0x1000, 0x4, 0x1, {0x2, @sliced={0x0, [0xe49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x2, 0x0, 0x200], 0x4}}, 0x80000}) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000005c0)={0x1, 0x1, 0x1c, 0xa, 0x59, &(0x7f00000001c0)}) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000640)=0x20000) ioctl$VT_WAITACTIVE(r1, 0x5607) 11:42:52 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0xfb78, 0x800, '\x00', &(0x7f0000000000)=0x2}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80]}}}) 11:42:52 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4, 0x6, 0x8, 0x1, 0x4}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f00000000c0)={0xc, {0x3, 0x8, 0x6, 0x5}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x4, 0x6, 0x8, 0x1, 0x4}) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f00000000c0)={0xc, {0x3, 0x8, 0x6, 0x5}}) (async) 11:42:52 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x2000) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000080)={0x6, "5509530ecd437b94e9bd12d29be614d3748c4403e5f715503438736089cf211f"}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) 11:42:52 executing program 1: ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)=0xff) r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000006c0)) (async, rerun: 64) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f00000006c0)={0x0, 0x5, 0xffff, '\x00', &(0x7f0000000680)=0x65}) (async, rerun: 64) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000600)) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) (async) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000000c0)={0x1000, 0x4, 0x1, {0x2, @sliced={0x0, [0xe49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x2, 0x0, 0x200], 0x4}}, 0x80000}) (async) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000005c0)={0x1, 0x1, 0x1c, 0xa, 0x59, &(0x7f00000001c0)}) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000640)=0x20000) (async) ioctl$VT_WAITACTIVE(r1, 0x5607) 11:42:52 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0xfb78, 0x800, '\x00', &(0x7f0000000000)=0x2}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80]}}}) 11:42:52 executing program 0: ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000200)={0x3, 0x200, {0x52, 0xde, 0x401, {0x6, 0x8}, {0x3}, @period={0x5a, 0x6, 0xd808, 0x5, 0xfc70, {0x7ff, 0x8, 0xad, 0x1000}, 0x6, &(0x7f00000001c0)=[0xfff, 0x800, 0x6, 0x0, 0x72ce, 0x6]}}, {0x57, 0x40, 0x9a0, {0xf1af}, {0x81a, 0x9}, @cond=[{0x9, 0x4, 0x9, 0x0, 0x9, 0xb0b}, {0x6, 0xa8, 0x4, 0x401, 0x0, 0xd9d9}]}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x2, "808a119a1f5329de6061144929a25aee514e8700f2ce03377285a39e9cf4bd45", 0x1, 0x8, 0x200, 0xb000, 0x8}) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @win={{0x2, 0x7, 0xffffffff, 0x5}, 0x7, 0xffffff04, &(0x7f0000000140)={{0x0, 0x5, 0x4, 0x6}, &(0x7f0000000100)={{0x42, 0x101, 0x250e}}}, 0x1, &(0x7f0000000180)="22133412e966d52f", 0x9}}}) r3 = syz_open_dev$video(&(0x7f0000000000), 0xab41, 0xa00) r4 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f00000006c0)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540), 0x802, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000580)={{0x8000, 0x4, 0x100, 0x3ff}, 'syz1\x00', 0x45}) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x4) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000300)={0xa00000, 0x7, 0x5, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x9b0971, 0x3, '\x00', @p_u32=&(0x7f0000000280)=0x2}}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000080)={0x6, 0x5, 0x0, 0x1000, 0x40f2, 0x8, 0x8}) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000200)={0x3, 0x200, {0x52, 0xde, 0x401, {0x6, 0x8}, {0x3}, @period={0x5a, 0x6, 0xd808, 0x5, 0xfc70, {0x7ff, 0x8, 0xad, 0x1000}, 0x6, &(0x7f00000001c0)=[0xfff, 0x800, 0x6, 0x0, 0x72ce, 0x6]}}, {0x57, 0x40, 0x9a0, {0xf1af}, {0x81a, 0x9}, @cond=[{0x9, 0x4, 0x9, 0x0, 0x9, 0xb0b}, {0x6, 0xa8, 0x4, 0x401, 0x0, 0xd9d9}]}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) (async) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x2, "808a119a1f5329de6061144929a25aee514e8700f2ce03377285a39e9cf4bd45", 0x1, 0x8, 0x200, 0xb000, 0x8}) (async) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x2) (async) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @win={{0x2, 0x7, 0xffffffff, 0x5}, 0x7, 0xffffff04, &(0x7f0000000140)={{0x0, 0x5, 0x4, 0x6}, &(0x7f0000000100)={{0x42, 0x101, 0x250e}}}, 0x1, &(0x7f0000000180)="22133412e966d52f", 0x9}}}) (async) syz_open_dev$video(&(0x7f0000000000), 0xab41, 0xa00) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f00000006c0)) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000540), 0x802, 0x0) (async) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000580)={{0x8000, 0x4, 0x100, 0x3ff}, 'syz1\x00', 0x45}) (async) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x4) (async) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000300)={0xa00000, 0x7, 0x5, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x9b0971, 0x3, '\x00', @p_u32=&(0x7f0000000280)=0x2}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000080)={0x6, 0x5, 0x0, 0x1000, 0x40f2, 0x8, 0x8}) (async) 11:42:52 executing program 4: socketpair(0x1a, 0x3, 0x5, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f00000000c0)={@mcast2, @private0}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0xbd9, 0xa, 0x1, "d43bade0be35400302240c26e6541bb1ef4e30027010dd6363145b0ee55e5d83", 0x55595659}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2b, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f0000000100)={0x1ff, "e8141acb159704fffc0ee4c7550b1b39665a6070d188dcbbb1c4bdd88fe258cd", 0x5, 0x4, 0x5, 0x8001, 0x2, 0x0, 0x3, 0x4}) 11:42:52 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000001c0)={@multicast2, @multicast1, 0x0, "6556ecb290a77fc888b31df26e0bb2d58c1e0ee90e84c8a9c0bfa14be72a4e53"}, 0x3c) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000180)={0xffffffffffffffff}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x311000, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000140)={0x9f0000, 0x1f, 0x9, r2, 0x0, &(0x7f0000000100)={0x980912, 0x81, '\x00', @p_u32=&(0x7f00000000c0)=0x7c35}}) 11:42:52 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x2000) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000080)={0x6, "5509530ecd437b94e9bd12d29be614d3748c4403e5f715503438736089cf211f"}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) 11:42:52 executing program 1: ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)=0xff) r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f00000006c0)={0x0, 0x5, 0xffff, '\x00', &(0x7f0000000680)=0x65}) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000600)) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) (async) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000000c0)={0x1000, 0x4, 0x1, {0x2, @sliced={0x0, [0xe49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x2, 0x0, 0x200], 0x4}}, 0x80000}) (async) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000005c0)={0x1, 0x1, 0x1c, 0xa, 0x59, &(0x7f00000001c0)}) (async) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000640)=0x20000) (async) ioctl$VT_WAITACTIVE(r1, 0x5607) 11:42:52 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000001c0)={@multicast2, @multicast1, 0x0, "6556ecb290a77fc888b31df26e0bb2d58c1e0ee90e84c8a9c0bfa14be72a4e53"}, 0x3c) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000180)={0xffffffffffffffff}) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x311000, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000140)={0x9f0000, 0x1f, 0x9, r2, 0x0, &(0x7f0000000100)={0x980912, 0x81, '\x00', @p_u32=&(0x7f00000000c0)=0x7c35}}) 11:42:52 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0xfb78, 0x800, '\x00', &(0x7f0000000000)=0x2}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0xfb78, 0x800, '\x00', &(0x7f0000000000)=0x2}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80]}}}) (async) 11:42:52 executing program 0: ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000200)={0x3, 0x200, {0x52, 0xde, 0x401, {0x6, 0x8}, {0x3}, @period={0x5a, 0x6, 0xd808, 0x5, 0xfc70, {0x7ff, 0x8, 0xad, 0x1000}, 0x6, &(0x7f00000001c0)=[0xfff, 0x800, 0x6, 0x0, 0x72ce, 0x6]}}, {0x57, 0x40, 0x9a0, {0xf1af}, {0x81a, 0x9}, @cond=[{0x9, 0x4, 0x9, 0x0, 0x9, 0xb0b}, {0x6, 0xa8, 0x4, 0x401, 0x0, 0xd9d9}]}}) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x2, "808a119a1f5329de6061144929a25aee514e8700f2ce03377285a39e9cf4bd45", 0x1, 0x8, 0x200, 0xb000, 0x8}) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @win={{0x2, 0x7, 0xffffffff, 0x5}, 0x7, 0xffffff04, &(0x7f0000000140)={{0x0, 0x5, 0x4, 0x6}, &(0x7f0000000100)={{0x42, 0x101, 0x250e}}}, 0x1, &(0x7f0000000180)="22133412e966d52f", 0x9}}}) r3 = syz_open_dev$video(&(0x7f0000000000), 0xab41, 0xa00) (async) r4 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f00000006c0)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540), 0x802, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000580)={{0x8000, 0x4, 0x100, 0x3ff}, 'syz1\x00', 0x45}) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x4) (async, rerun: 64) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000300)={0xa00000, 0x7, 0x5, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x9b0971, 0x3, '\x00', @p_u32=&(0x7f0000000280)=0x2}}) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000080)={0x6, 0x5, 0x0, 0x1000, 0x40f2, 0x8, 0x8}) 11:42:52 executing program 4: socketpair(0x1a, 0x3, 0x5, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f00000000c0)={@mcast2, @private0}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0xbd9, 0xa, 0x1, "d43bade0be35400302240c26e6541bb1ef4e30027010dd6363145b0ee55e5d83", 0x55595659}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2b, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) (async) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f0000000100)={0x1ff, "e8141acb159704fffc0ee4c7550b1b39665a6070d188dcbbb1c4bdd88fe258cd", 0x5, 0x4, 0x5, 0x8001, 0x2, 0x0, 0x3, 0x4}) 11:42:52 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f00000000c0)={0x0, 0x7fffffff, 0x6, '\x00', &(0x7f0000000080)=0x80}) 11:42:52 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000001c0)={@multicast2, @multicast1, 0x0, "6556ecb290a77fc888b31df26e0bb2d58c1e0ee90e84c8a9c0bfa14be72a4e53"}, 0x3c) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x8, 0x1, {0x2, @sliced={0x0, [0x0, 0xbfbb, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1f, 0x0, 0x0, 0xf1]}}}) 11:42:52 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000001c0)={@multicast2, @multicast1, 0x0, "6556ecb290a77fc888b31df26e0bb2d58c1e0ee90e84c8a9c0bfa14be72a4e53"}, 0x3c) (async) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000180)={0xffffffffffffffff}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x311000, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000140)={0x9f0000, 0x1f, 0x9, r2, 0x0, &(0x7f0000000100)={0x980912, 0x81, '\x00', @p_u32=&(0x7f00000000c0)=0x7c35}}) 11:42:52 executing program 4: socketpair(0x1a, 0x3, 0x5, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f00000000c0)={@mcast2, @private0}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0xbd9, 0xa, 0x1, "d43bade0be35400302240c26e6541bb1ef4e30027010dd6363145b0ee55e5d83", 0x55595659}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2b, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f0000000100)={0x1ff, "e8141acb159704fffc0ee4c7550b1b39665a6070d188dcbbb1c4bdd88fe258cd", 0x5, 0x4, 0x5, 0x8001, 0x2, 0x0, 0x3, 0x4}) socketpair(0x1a, 0x3, 0x5, &(0x7f0000000080)) (async) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f00000000c0)={@mcast2, @private0}) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0xbd9, 0xa, 0x1, "d43bade0be35400302240c26e6541bb1ef4e30027010dd6363145b0ee55e5d83", 0x55595659}) (async) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2b, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f0000000100)={0x1ff, "e8141acb159704fffc0ee4c7550b1b39665a6070d188dcbbb1c4bdd88fe258cd", 0x5, 0x4, 0x5, 0x8001, 0x2, 0x0, 0x3, 0x4}) (async) 11:42:53 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000080)={0x8e10, 0x0, '\x00', {0x0, @bt={0x4, 0x80000000, 0x1, 0x1, 0x3, 0x10001, 0x2, 0x2, 0x41b319e, 0x6, 0x6, 0x7, 0xffffff01, 0x6, 0x8, 0x24, {0x4008, 0x1}, 0x0, 0x3}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) 11:42:53 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f00000000c0)={0x0, 0x7fffffff, 0x6, '\x00', &(0x7f0000000080)=0x80}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f00000000c0)={0x0, 0x7fffffff, 0x6, '\x00', &(0x7f0000000080)=0x80}) (async) 11:42:53 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) ioctl$TCSBRKP(r0, 0x5425, 0x4) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:53 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000080)={0x8e10, 0x0, '\x00', {0x0, @bt={0x4, 0x80000000, 0x1, 0x1, 0x3, 0x10001, 0x2, 0x2, 0x41b319e, 0x6, 0x6, 0x7, 0xffffff01, 0x6, 0x8, 0x24, {0x4008, 0x1}, 0x0, 0x3}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000080)={0x8e10, 0x0, '\x00', {0x0, @bt={0x4, 0x80000000, 0x1, 0x1, 0x3, 0x10001, 0x2, 0x2, 0x41b319e, 0x6, 0x6, 0x7, 0xffffff01, 0x6, 0x8, 0x24, {0x4008, 0x1}, 0x0, 0x3}}}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) (async) 11:42:53 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:53 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000000)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:53 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) ioctl$TCSBRKP(r0, 0x5425, 0x4) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) (async) ioctl$TCSBRKP(r0, 0x5425, 0x4) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) 11:42:53 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000001c0)={@multicast2, @multicast1, 0x0, "6556ecb290a77fc888b31df26e0bb2d58c1e0ee90e84c8a9c0bfa14be72a4e53"}, 0x3c) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x8, 0x1, {0x2, @sliced={0x0, [0x0, 0xbfbb, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1f, 0x0, 0x0, 0xf1]}}}) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000001c0)={@multicast2, @multicast1, 0x0, "6556ecb290a77fc888b31df26e0bb2d58c1e0ee90e84c8a9c0bfa14be72a4e53"}, 0x3c) (async) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x8, 0x1, {0x2, @sliced={0x0, [0x0, 0xbfbb, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1f, 0x0, 0x0, 0xf1]}}}) (async) 11:42:53 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000080)={0x8e10, 0x0, '\x00', {0x0, @bt={0x4, 0x80000000, 0x1, 0x1, 0x3, 0x10001, 0x2, 0x2, 0x41b319e, 0x6, 0x6, 0x7, 0xffffff01, 0x6, 0x8, 0x24, {0x4008, 0x1}, 0x0, 0x3}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000080)={0x8e10, 0x0, '\x00', {0x0, @bt={0x4, 0x80000000, 0x1, 0x1, 0x3, 0x10001, 0x2, 0x2, 0x41b319e, 0x6, 0x6, 0x7, 0xffffff01, 0x6, 0x8, 0x24, {0x4008, 0x1}, 0x0, 0x3}}}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) (async) 11:42:53 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) 11:42:53 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000000)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000000)) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) 11:42:53 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f00000000c0)={0x0, 0x7fffffff, 0x6, '\x00', &(0x7f0000000080)=0x80}) 11:42:53 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000001c0)={@multicast2, @multicast1, 0x0, "6556ecb290a77fc888b31df26e0bb2d58c1e0ee90e84c8a9c0bfa14be72a4e53"}, 0x3c) (async) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) (async, rerun: 32) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 32) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async, rerun: 64) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x8, 0x1, {0x2, @sliced={0x0, [0x0, 0xbfbb, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1f, 0x0, 0x0, 0xf1]}}}) (rerun: 64) 11:42:53 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000000)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000000)) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) 11:42:53 executing program 3: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000040)=0x80008) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000080)={0x1, 0x0, {0x1000, 0x1ff, 0xcf, 0x2}}) 11:42:53 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:53 executing program 1: ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x5, 0x3, 0x1, 0x6dad, 0x100000001}) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:53 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) ioctl$TCSBRKP(r0, 0x5425, 0x4) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:53 executing program 3: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000040)=0x80008) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000080)={0x1, 0x0, {0x1000, 0x1ff, 0xcf, 0x2}}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000040)=0x80008) (async) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000080)={0x1, 0x0, {0x1000, 0x1ff, 0xcf, 0x2}}) (async) 11:42:53 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x4, 0x1, {0x7, @pix_mp={0x3, 0x1, 0x494e4f4b, 0x8, 0xc, [{0x2, 0x3}, {0x1000, 0xfffffff7}, {0x3, 0xfffffffd}, {0x9, 0x5}, {0x7a, 0x7ff}, {0x7, 0x13b9}, {0x6, 0xffffffff}, {0x2, 0x200}], 0x8, 0xd3, 0x4, 0x1, 0x2}}}) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000000)={0x1, 0x3, 0x7, 0x20, 0x9, 0x400, 0x4}) 11:42:53 executing program 3: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) (async) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000040)=0x80008) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000080)={0x1, 0x0, {0x1000, 0x1ff, 0xcf, 0x2}}) 11:42:53 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f00000000c0)={0x0, 0xff, 0x8, '\x00', &(0x7f0000000080)=0x31}) 11:42:53 executing program 1: ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x5, 0x3, 0x1, 0x6dad, 0x100000001}) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x5, 0x3, 0x1, 0x6dad, 0x100000001}) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) 11:42:53 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x4, 0x1, {0x7, @pix_mp={0x3, 0x1, 0x494e4f4b, 0x8, 0xc, [{0x2, 0x3}, {0x1000, 0xfffffff7}, {0x3, 0xfffffffd}, {0x9, 0x5}, {0x7a, 0x7ff}, {0x7, 0x13b9}, {0x6, 0xffffffff}, {0x2, 0x200}], 0x8, 0xd3, 0x4, 0x1, 0x2}}}) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000000)={0x1, 0x3, 0x7, 0x20, 0x9, 0x400, 0x4}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x4, 0x1, {0x7, @pix_mp={0x3, 0x1, 0x494e4f4b, 0x8, 0xc, [{0x2, 0x3}, {0x1000, 0xfffffff7}, {0x3, 0xfffffffd}, {0x9, 0x5}, {0x7a, 0x7ff}, {0x7, 0x13b9}, {0x6, 0xffffffff}, {0x2, 0x200}], 0x8, 0xd3, 0x4, 0x1, 0x2}}}) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000000)={0x1, 0x3, 0x7, 0x20, 0x9, 0x400, 0x4}) (async) 11:42:54 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x4, 0x8, 0x2, "02ad1cad2d4b9ed1f8ebafe60202cdea30dab3244bf2380b2eb7d5b061b69081", 0x4f565559}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) 11:42:54 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x2}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:54 executing program 4: r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) r1 = syz_open_dev$video(&(0x7f00000000c0), 0x5, 0x2) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000100)=0xf900) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0xfffffff, 0x4, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x980908, 0x7fff, '\x00', @value=0x3}}) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:54 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) (async) r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f00000000c0)={0x0, 0xff, 0x8, '\x00', &(0x7f0000000080)=0x31}) 11:42:54 executing program 1: ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x5, 0x3, 0x1, 0x6dad, 0x100000001}) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:54 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x4, 0x1, {0x7, @pix_mp={0x3, 0x1, 0x494e4f4b, 0x8, 0xc, [{0x2, 0x3}, {0x1000, 0xfffffff7}, {0x3, 0xfffffffd}, {0x9, 0x5}, {0x7a, 0x7ff}, {0x7, 0x13b9}, {0x6, 0xffffffff}, {0x2, 0x200}], 0x8, 0xd3, 0x4, 0x1, 0x2}}}) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000000)={0x1, 0x3, 0x7, 0x20, 0x9, 0x400, 0x4}) 11:42:54 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff9]}}}) 11:42:54 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) (async) r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f00000000c0)={0x0, 0xff, 0x8, '\x00', &(0x7f0000000080)=0x31}) 11:42:54 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x1, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x6]}}, 0x7fff}) 11:42:54 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x4, 0x8, 0x2, "02ad1cad2d4b9ed1f8ebafe60202cdea30dab3244bf2380b2eb7d5b061b69081", 0x4f565559}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) (async) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x4, 0x8, 0x2, "02ad1cad2d4b9ed1f8ebafe60202cdea30dab3244bf2380b2eb7d5b061b69081", 0x4f565559}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (async) 11:42:54 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff9]}}}) 11:42:54 executing program 4: r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) r1 = syz_open_dev$video(&(0x7f00000000c0), 0x5, 0x2) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000100)=0xf900) (async) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0xfffffff, 0x4, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x980908, 0x7fff, '\x00', @value=0x3}}) (async) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:54 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000080)={0x0, 0x4, 0x3015, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) 11:42:54 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x2}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:54 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x1, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x6]}}, 0x7fff}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x1, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x6]}}, 0x7fff}) (async) 11:42:54 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff9]}}}) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff9]}}}) (async) 11:42:54 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x4, 0x8, 0x2, "02ad1cad2d4b9ed1f8ebafe60202cdea30dab3244bf2380b2eb7d5b061b69081", 0x4f565559}) (async, rerun: 32) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (rerun: 32) 11:42:54 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000080)={0x0, 0x4, 0x3015, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000080)={0x0, 0x4, 0x3015, 0x1}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) (async) 11:42:54 executing program 4: r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) r1 = syz_open_dev$video(&(0x7f00000000c0), 0x5, 0x2) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000100)=0xf900) (async, rerun: 32) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000006c0)) (async, rerun: 32) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0xfffffff, 0x4, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x980908, 0x7fff, '\x00', @value=0x3}}) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:54 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x2}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x2}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) 11:42:54 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x1, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x6]}}, 0x7fff}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x1, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x6]}}, 0x7fff}) (async) 11:42:54 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000000)={0x5, {0xffffffff, 0x800, 0x5, 0x8}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_open_dev$vivid(&(0x7f0000000200), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000240)={0x4, 0x4, 0x6d2, 0x7, 0x8b35, 0x200, 0x5}) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f00000001c0)={0x3, {0x0, 0x5, 0xe5, 0x4}, {0x80000001, 0x1000, 0x0, 0xc4c1}, {0x3, 0x1}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @win={{0x2, 0x3f, 0xfc, 0x9}, 0x3, 0x400, &(0x7f0000000100)={{0x4, 0x4, 0x9, 0xfffffff7}, &(0x7f00000000c0)={{0xffffffff, 0x7d6b7514, 0x2, 0x81}, &(0x7f0000000180)={{0x7, 0x479, 0x8c, 0xe2}}}}, 0x2, &(0x7f0000000140)="997d344b9edcff1f80848843b3fda64876f34a41019f32", 0x4}}}) 11:42:54 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000000)={0x69, "b82fd92de8d33d58a55414109bb50a82f11ec4c4a3a391f1a728d8cc886d428e"}) 11:42:54 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000180)=0x5) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @win={{0x8, 0x7000, 0x5, 0x4}, 0x7, 0x8, &(0x7f00000000c0)={{0x3, 0x5, 0x7, 0x20000000}, &(0x7f0000000080)={{0x8, 0x9, 0x7, 0x20}, &(0x7f0000000000)={{0x0, 0x6ca, 0x7fffffff, 0xfffffff8}}}}, 0x100, &(0x7f0000000100)="42619fd87d8cc8ddfb6bfba3ea84f70b48f138779ce5cc692c8daf9568572b8b202d1ada13c1d8f72524e4444f2ccd476bfeef6417cfff342d4db031b06b1882ad20318b630ffbf5cf1dbc7e5cdb737c", 0x20}}}) 11:42:54 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000080)={0x0, 0x4, 0x3015, 0x1}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) 11:42:54 executing program 5: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00', 0x0, 0x10}, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x404100, 0x0) io_cancel(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x62, r0, &(0x7f00000002c0)="3193b1e5049c8eba59b7b04f67af8310be24da11ee6bc78db72cb4d4fad924a55a56", 0x22, 0x2d, 0x0, 0x0, r1}, &(0x7f0000000480)) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0xffffffff, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe00, 0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0x7], 0xd19}}}) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000040)={0x6, @output={0x1000, 0x1, {0x28800, 0x4}, 0x5, 0x7}}) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f00000001c0)={0x0, 0x36, 0xebc2, '\x00', &(0x7f0000000180)=0xe0}) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000140)) r3 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000200)={0x8, 0x2, 0x7, 0x3, 0x9, 0x5ad0, 0x6}) r4 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_FREQUENCY(r4, 0xc02c5638, &(0x7f00000004c0)={0x7ff, 0x6, 0x6}) 11:42:54 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000000)={0x5, {0xffffffff, 0x800, 0x5, 0x8}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_open_dev$vivid(&(0x7f0000000200), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000240)={0x4, 0x4, 0x6d2, 0x7, 0x8b35, 0x200, 0x5}) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f00000001c0)={0x3, {0x0, 0x5, 0xe5, 0x4}, {0x80000001, 0x1000, 0x0, 0xc4c1}, {0x3, 0x1}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @win={{0x2, 0x3f, 0xfc, 0x9}, 0x3, 0x400, &(0x7f0000000100)={{0x4, 0x4, 0x9, 0xfffffff7}, &(0x7f00000000c0)={{0xffffffff, 0x7d6b7514, 0x2, 0x81}, &(0x7f0000000180)={{0x7, 0x479, 0x8c, 0xe2}}}}, 0x2, &(0x7f0000000140)="997d344b9edcff1f80848843b3fda64876f34a41019f32", 0x4}}}) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000000)={0x5, {0xffffffff, 0x800, 0x5, 0x8}}) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000200), 0x2, 0x2) (async) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000240)={0x4, 0x4, 0x6d2, 0x7, 0x8b35, 0x200, 0x5}) (async) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f00000001c0)={0x3, {0x0, 0x5, 0xe5, 0x4}, {0x80000001, 0x1000, 0x0, 0xc4c1}, {0x3, 0x1}}) (async) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @win={{0x2, 0x3f, 0xfc, 0x9}, 0x3, 0x400, &(0x7f0000000100)={{0x4, 0x4, 0x9, 0xfffffff7}, &(0x7f00000000c0)={{0xffffffff, 0x7d6b7514, 0x2, 0x81}, &(0x7f0000000180)={{0x7, 0x479, 0x8c, 0xe2}}}}, 0x2, &(0x7f0000000140)="997d344b9edcff1f80848843b3fda64876f34a41019f32", 0x4}}}) (async) 11:42:54 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000180)=0x5) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @win={{0x8, 0x7000, 0x5, 0x4}, 0x7, 0x8, &(0x7f00000000c0)={{0x3, 0x5, 0x7, 0x20000000}, &(0x7f0000000080)={{0x8, 0x9, 0x7, 0x20}, &(0x7f0000000000)={{0x0, 0x6ca, 0x7fffffff, 0xfffffff8}}}}, 0x100, &(0x7f0000000100)="42619fd87d8cc8ddfb6bfba3ea84f70b48f138779ce5cc692c8daf9568572b8b202d1ada13c1d8f72524e4444f2ccd476bfeef6417cfff342d4db031b06b1882ad20318b630ffbf5cf1dbc7e5cdb737c", 0x20}}}) 11:42:54 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}}) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000000)=0x8) 11:42:54 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000000)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) 11:42:54 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000000)={0x69, "b82fd92de8d33d58a55414109bb50a82f11ec4c4a3a391f1a728d8cc886d428e"}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000000)={0x69, "b82fd92de8d33d58a55414109bb50a82f11ec4c4a3a391f1a728d8cc886d428e"}) (async) 11:42:54 executing program 5: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00', 0x0, 0x10}, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x404100, 0x0) io_cancel(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x62, r0, &(0x7f00000002c0)="3193b1e5049c8eba59b7b04f67af8310be24da11ee6bc78db72cb4d4fad924a55a56", 0x22, 0x2d, 0x0, 0x0, r1}, &(0x7f0000000480)) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0xffffffff, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe00, 0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0x7], 0xd19}}}) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000040)={0x6, @output={0x1000, 0x1, {0x28800, 0x4}, 0x5, 0x7}}) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f00000001c0)={0x0, 0x36, 0xebc2, '\x00', &(0x7f0000000180)=0xe0}) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000140)) r3 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000200)={0x8, 0x2, 0x7, 0x3, 0x9, 0x5ad0, 0x6}) r4 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_FREQUENCY(r4, 0xc02c5638, &(0x7f00000004c0)={0x7ff, 0x6, 0x6}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00', 0x0, 0x10}, 0x10) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x404100, 0x0) (async) io_cancel(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x62, r0, &(0x7f00000002c0)="3193b1e5049c8eba59b7b04f67af8310be24da11ee6bc78db72cb4d4fad924a55a56", 0x22, 0x2d, 0x0, 0x0, r1}, &(0x7f0000000480)) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0xffffffff, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe00, 0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0x7], 0xd19}}}) (async) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000040)={0x6, @output={0x1000, 0x1, {0x28800, 0x4}, 0x5, 0x7}}) (async) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f00000001c0)={0x0, 0x36, 0xebc2, '\x00', &(0x7f0000000180)=0xe0}) (async) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000140)) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000200)={0x8, 0x2, 0x7, 0x3, 0x9, 0x5ad0, 0x6}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_G_FREQUENCY(r4, 0xc02c5638, &(0x7f00000004c0)={0x7ff, 0x6, 0x6}) (async) 11:42:54 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000000)={0x5, {0xffffffff, 0x800, 0x5, 0x8}}) (async, rerun: 64) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r3 = syz_open_dev$vivid(&(0x7f0000000200), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000240)={0x4, 0x4, 0x6d2, 0x7, 0x8b35, 0x200, 0x5}) (async) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f00000001c0)={0x3, {0x0, 0x5, 0xe5, 0x4}, {0x80000001, 0x1000, 0x0, 0xc4c1}, {0x3, 0x1}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @win={{0x2, 0x3f, 0xfc, 0x9}, 0x3, 0x400, &(0x7f0000000100)={{0x4, 0x4, 0x9, 0xfffffff7}, &(0x7f00000000c0)={{0xffffffff, 0x7d6b7514, 0x2, 0x81}, &(0x7f0000000180)={{0x7, 0x479, 0x8c, 0xe2}}}}, 0x2, &(0x7f0000000140)="997d344b9edcff1f80848843b3fda64876f34a41019f32", 0x4}}}) 11:42:54 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}}) (async) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000000)=0x8) 11:42:55 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000180)=0x5) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @win={{0x8, 0x7000, 0x5, 0x4}, 0x7, 0x8, &(0x7f00000000c0)={{0x3, 0x5, 0x7, 0x20000000}, &(0x7f0000000080)={{0x8, 0x9, 0x7, 0x20}, &(0x7f0000000000)={{0x0, 0x6ca, 0x7fffffff, 0xfffffff8}}}}, 0x100, &(0x7f0000000100)="42619fd87d8cc8ddfb6bfba3ea84f70b48f138779ce5cc692c8daf9568572b8b202d1ada13c1d8f72524e4444f2ccd476bfeef6417cfff342d4db031b06b1882ad20318b630ffbf5cf1dbc7e5cdb737c", 0x20}}}) 11:42:55 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000000)) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) 11:42:55 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000000)={0x69, "b82fd92de8d33d58a55414109bb50a82f11ec4c4a3a391f1a728d8cc886d428e"}) 11:42:55 executing program 5: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00', 0x0, 0x10}, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x404100, 0x0) io_cancel(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x62, r0, &(0x7f00000002c0)="3193b1e5049c8eba59b7b04f67af8310be24da11ee6bc78db72cb4d4fad924a55a56", 0x22, 0x2d, 0x0, 0x0, r1}, &(0x7f0000000480)) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0xffffffff, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe00, 0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0x7], 0xd19}}}) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000040)={0x6, @output={0x1000, 0x1, {0x28800, 0x4}, 0x5, 0x7}}) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f00000001c0)={0x0, 0x36, 0xebc2, '\x00', &(0x7f0000000180)=0xe0}) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000140)) r3 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000200)={0x8, 0x2, 0x7, 0x3, 0x9, 0x5ad0, 0x6}) r4 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_FREQUENCY(r4, 0xc02c5638, &(0x7f00000004c0)={0x7ff, 0x6, 0x6}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00', 0x0, 0x10}, 0x10) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x404100, 0x0) (async) io_cancel(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x62, r0, &(0x7f00000002c0)="3193b1e5049c8eba59b7b04f67af8310be24da11ee6bc78db72cb4d4fad924a55a56", 0x22, 0x2d, 0x0, 0x0, r1}, &(0x7f0000000480)) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0xffffffff, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe00, 0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0x7], 0xd19}}}) (async) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000040)={0x6, @output={0x1000, 0x1, {0x28800, 0x4}, 0x5, 0x7}}) (async) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f00000001c0)={0x0, 0x36, 0xebc2, '\x00', &(0x7f0000000180)=0xe0}) (async) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000140)) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000200)={0x8, 0x2, 0x7, 0x3, 0x9, 0x5ad0, 0x6}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_G_FREQUENCY(r4, 0xc02c5638, &(0x7f00000004c0)={0x7ff, 0x6, 0x6}) (async) 11:42:55 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000000)) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) 11:42:55 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}}) (async) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000000)=0x8) 11:42:55 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000000)={0x81, 0x7e, @name="f92838b17620ec11860d5fd119ac5a2c147aed7223b56eab5422619bfa0d4843"}) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f0000000080)={0x3, 0x0, [0x8, 0x1, 0x2, 0xfffffffa, 0x503, 0x81, 0x4, 0x4]}) 11:42:55 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket(0x18, 0x0, 0x0) setsockopt$MRT_ASSERT(r2, 0x0, 0xcf, 0x0, 0x0) r3 = socket(0x18, 0x0, 0x0) setsockopt$MRT_ASSERT(r3, 0x0, 0xcf, 0x0, 0x0) socketpair(0x6, 0x3, 0xff6b, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x80602, 0x0) r6 = socket(0x18, 0x0, 0x0) setsockopt$MRT_ASSERT(r6, 0x0, 0xcf, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r8 = socket(0x18, 0x0, 0x0) setsockopt$MRT_ASSERT(r8, 0x0, 0xcf, 0x0, 0x0) r9 = socket(0x18, 0x0, 0x0) setsockopt$MRT_ASSERT(r9, 0x0, 0xcf, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xcc, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xea}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x20008050) r10 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r10, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) 11:42:55 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:55 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) r2 = syz_open_dev$video(&(0x7f0000000000), 0x5ebd, 0x4a0a43) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000080)={0x0, 0x1, 0x7}) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x2) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 11:42:55 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10001, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000080)={0x0, {0x0, 0x4}}) 11:42:55 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x5e) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000000)={0x9, "e8298ad0c88dd089156b8736fcf5e57b9518505a30d373226d3c4247b3a7944f", 0x2}) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) 11:42:55 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000000)={0x81, 0x7e, @name="f92838b17620ec11860d5fd119ac5a2c147aed7223b56eab5422619bfa0d4843"}) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f0000000080)={0x3, 0x0, [0x8, 0x1, 0x2, 0xfffffffa, 0x503, 0x81, 0x4, 0x4]}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}}}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000000)={0x81, 0x7e, @name="f92838b17620ec11860d5fd119ac5a2c147aed7223b56eab5422619bfa0d4843"}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f0000000080)={0x3, 0x0, [0x8, 0x1, 0x2, 0xfffffffa, 0x503, 0x81, 0x4, 0x4]}) (async) 11:42:55 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10001, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000080)={0x0, {0x0, 0x4}}) 11:42:55 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) r2 = socket(0x18, 0x0, 0x0) setsockopt$MRT_ASSERT(r2, 0x0, 0xcf, 0x0, 0x0) (async) r3 = socket(0x18, 0x0, 0x0) setsockopt$MRT_ASSERT(r3, 0x0, 0xcf, 0x0, 0x0) (async) socketpair(0x6, 0x3, 0xff6b, &(0x7f00000000c0)={0xffffffffffffffff}) (async) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x80602, 0x0) r6 = socket(0x18, 0x0, 0x0) setsockopt$MRT_ASSERT(r6, 0x0, 0xcf, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) (async) r8 = socket(0x18, 0x0, 0x0) setsockopt$MRT_ASSERT(r8, 0x0, 0xcf, 0x0, 0x0) (async) r9 = socket(0x18, 0x0, 0x0) setsockopt$MRT_ASSERT(r9, 0x0, 0xcf, 0x0, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xcc, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xea}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x20008050) (async) r10 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r10, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) 11:42:55 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:55 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) r2 = syz_open_dev$video(&(0x7f0000000000), 0x5ebd, 0x4a0a43) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000080)={0x0, 0x1, 0x7}) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x2) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80]}}}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) syz_open_dev$video(&(0x7f0000000000), 0x5ebd, 0x4a0a43) (async) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000080)={0x0, 0x1, 0x7}) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x2) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) 11:42:55 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) (async) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x5e) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000000)={0x9, "e8298ad0c88dd089156b8736fcf5e57b9518505a30d373226d3c4247b3a7944f", 0x2}) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) 11:42:55 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10001, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000080)={0x0, {0x0, 0x4}}) 11:42:55 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}}}) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000000)={0x81, 0x7e, @name="f92838b17620ec11860d5fd119ac5a2c147aed7223b56eab5422619bfa0d4843"}) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f0000000080)={0x3, 0x0, [0x8, 0x1, 0x2, 0xfffffffa, 0x503, 0x81, 0x4, 0x4]}) 11:42:55 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) r2 = syz_open_dev$video(&(0x7f0000000000), 0x5ebd, 0x4a0a43) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000080)={0x0, 0x1, 0x7}) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x2) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 11:42:55 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:55 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket(0x18, 0x0, 0x0) setsockopt$MRT_ASSERT(r2, 0x0, 0xcf, 0x0, 0x0) r3 = socket(0x18, 0x0, 0x0) setsockopt$MRT_ASSERT(r3, 0x0, 0xcf, 0x0, 0x0) socketpair(0x6, 0x3, 0xff6b, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x80602, 0x0) r6 = socket(0x18, 0x0, 0x0) setsockopt$MRT_ASSERT(r6, 0x0, 0xcf, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r8 = socket(0x18, 0x0, 0x0) setsockopt$MRT_ASSERT(r8, 0x0, 0xcf, 0x0, 0x0) r9 = socket(0x18, 0x0, 0x0) setsockopt$MRT_ASSERT(r9, 0x0, 0xcf, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xcc, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xea}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x20008050) r10 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r10, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socket(0x18, 0x0, 0x0) (async) setsockopt$MRT_ASSERT(r2, 0x0, 0xcf, 0x0, 0x0) (async) socket(0x18, 0x0, 0x0) (async) setsockopt$MRT_ASSERT(r3, 0x0, 0xcf, 0x0, 0x0) (async) socketpair(0x6, 0x3, 0xff6b, &(0x7f00000000c0)) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x80602, 0x0) (async) socket(0x18, 0x0, 0x0) (async) setsockopt$MRT_ASSERT(r6, 0x0, 0xcf, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) socket(0x18, 0x0, 0x0) (async) setsockopt$MRT_ASSERT(r8, 0x0, 0xcf, 0x0, 0x0) (async) socket(0x18, 0x0, 0x0) (async) setsockopt$MRT_ASSERT(r9, 0x0, 0xcf, 0x0, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xcc, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xea}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x20008050) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r10, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (async) 11:42:55 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f00000000c0)={0x0, {0x2, 0x4}}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r3) ioctl$VT_DISALLOCATE(r3, 0x5608) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, 0xfffffffffffffffe) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r4, 0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000000e80)=[&(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_getevents(r4, 0x20, 0x2, &(0x7f0000000180)=[{}, {}], &(0x7f00000001c0)={0x77359400}) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_S_STD(r5, 0x40085618, &(0x7f0000000140)=0x100000) 11:42:55 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) (async) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x5e) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000000)={0x9, "e8298ad0c88dd089156b8736fcf5e57b9518505a30d373226d3c4247b3a7944f", 0x2}) (async, rerun: 64) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) (rerun: 64) 11:42:55 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) 11:42:55 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffe1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}}}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f00000001c0)={@multicast2, @multicast1, 0x0, "6556ecb290a77fc888b31df26e0bb2d58c1e0ee90e84c8a9c0bfa14be72a4e53"}, 0x3c) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f00000001c0)={@multicast2, @multicast1, 0x0, "6556ecb290a77fc888b31df26e0bb2d58c1e0ee90e84c8a9c0bfa14be72a4e53"}, 0x3c) io_submit(0x0, 0x2, &(0x7f0000000280)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x2, r1, &(0x7f0000000080)="132876b99ece681d22d8414292b96deefe5ffe26c8c709a50378758bc7070b1d45b4b492464ae1f57de95fe8072b8e7fcf207da6b48ac8ae1b7ee82ab27bdf3e42aa0ebff8988db9edbfa80cbe37475b7763a1f83b63ae7ec69f87aeccbeeb296080c10f2a65121af06572de3adb23562553459c0baceed2622258ce10aff234ddc6217b0e7ee183784b10c38daaedcd213c910a3a0c7b6ae38b7750", 0x9c, 0xde, 0x0, 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x1, r2, &(0x7f0000000140)="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", 0xfa, 0xfffffffffffffffa, 0x0, 0x2}]) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000ac0)={0x1}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000900)="62d731095d84c5fb7b01dff499bf2b1797d9ee84a38a480550d9dbd796aca4f08defa335b0163a4e69e1c95d3f39e969d821a3c3890941ee598e708a7a671f217ff151171125e94bca072cb81e384ae8ccf4106f18f1db392e037d44a4d4d126c3a38cdd29c155830922259cdc3e6e76e15a24c142dc45faa2471f39090d2cad663b3df078a39c00bf913079e3b36c09fa5b234e8898a6bc7f33111a149bea54769c2530a2cdfe037472ab276fd61db19145588a2f725eb6ce9f81272b9790ca03", &(0x7f00000002c0)=@buf="386db839696a97f2eb0e99deb9e3ac6ffcc327ea61db88f2253149443c5e19d93ef8bc1d54ae918cf249d37ddb861ac031a16817fde87209a841f30af63ebaf62cb664b0ad9713c6dbfa31e7de8a746c0ed8dfcc33dc61611c655d374039892fe875dc830b8ae17572739ae3dd89", 0x1}, 0x20) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r3) write$uinput_user_dev(r3, &(0x7f0000000480)={'syz1\x00', {0x9, 0x7f, 0xf000, 0x8}, 0x2b, [0x7, 0x0, 0x51b0, 0x8, 0x2, 0x0, 0x6da, 0x9, 0x8000, 0x1000, 0x5, 0x90, 0x1f0000, 0x2, 0x7ff, 0x3, 0x4, 0x81, 0x8001, 0x6, 0xa27a, 0x3, 0x17, 0x9, 0xca9, 0x200, 0x9f, 0x100, 0x6, 0x800, 0x7ff, 0x80000001, 0xef47, 0xa8a8000, 0x4, 0x9, 0x6, 0x10001, 0x7, 0x80000000, 0x6, 0x0, 0x3f, 0x7fffffff, 0x1ff, 0x93f4, 0x6, 0xe6c, 0x78ca807b, 0x10001, 0x8001, 0x8001, 0x3f, 0x6, 0x5cdeb14, 0x7fff, 0x17ae, 0x5, 0x0, 0x1000, 0x1, 0x5, 0x9, 0x373], [0x0, 0x9d8f, 0x9, 0x1ff, 0xf4, 0xffff, 0x2c, 0x101, 0xfff, 0x4, 0x9, 0xf0, 0x8d0, 0xdba2, 0x10001, 0x6, 0x2, 0x8, 0x8, 0x20, 0x81, 0xfff, 0xe7, 0xfff, 0x6, 0x0, 0x7, 0x101, 0x8, 0x8000, 0x7, 0x6, 0xffff, 0x3, 0x80000000, 0xfffffffb, 0xc4, 0x1, 0xa9d, 0x3f, 0x1, 0x81, 0x0, 0xffffffff, 0xffff0001, 0x7, 0x0, 0x4, 0x2, 0x7f, 0x7, 0x8, 0x4, 0x0, 0x8, 0x0, 0xa9be, 0x4b, 0xd8f, 0xf8ee, 0x8, 0x2, 0x0, 0x2], [0x3, 0xffffffff, 0x200, 0x3, 0x10001, 0x9, 0x0, 0x1, 0x20, 0x48, 0x101, 0x9d9, 0x1, 0x8667, 0x5, 0xfffffff9, 0x1, 0xffffffff, 0x800, 0x5, 0x100, 0x0, 0x1f, 0x7, 0x1, 0x3, 0x3746, 0x3, 0x22ec, 0x76, 0xffff534f, 0x1000, 0xfff, 0x1, 0x3ff, 0x2, 0xffffffff, 0x3f, 0x4, 0x0, 0x2, 0x3ff, 0xffffffa3, 0x5, 0x401, 0xe29, 0x7, 0x80000001, 0x6, 0x7, 0x6, 0x7b43d078, 0x8, 0x10001, 0x2, 0x2, 0xe, 0x1ff, 0x3, 0x0, 0x8, 0x2e1b, 0x34c, 0x9], [0x4, 0x2, 0x3, 0x9, 0x3, 0x2f9, 0x0, 0x8, 0x1, 0x81, 0x1, 0x10001, 0xfb82, 0xfffff94f, 0xfffffff9, 0x1, 0x20000, 0x7, 0x5, 0x7, 0x1, 0xc0b, 0x80000001, 0x1, 0x6, 0x1, 0xfa9e, 0x6, 0x3, 0xffffff01, 0x0, 0x8000, 0x0, 0x1, 0x57, 0x200, 0xfffffffa, 0x7, 0x101, 0x9, 0x8f, 0x1ff, 0x1, 0xffff8001, 0x1, 0x4, 0x4, 0x8, 0x0, 0xfffffffc, 0x0, 0x8, 0x6a44, 0x20, 0x4a, 0x5, 0x6, 0x4, 0x0, 0x5, 0x9, 0x3, 0x4, 0x9000000]}, 0x45c) r5 = socket(0x29, 0x6, 0x0) ioctl$UI_SET_MSCBIT(r3, 0x40045568, 0x1a) getsockopt$MRT(r5, 0x0, 0xce, &(0x7f0000000a00), &(0x7f0000000a40)=0x4) r6 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r6, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000b00)={0x7, 0x2, 0x0, "409e7a9cfd551c6c356825b63dc3eea9990ab94bb523b15d85b971266d1091f4", 0x41416770}) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f0000000a80)) 11:42:55 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x3) 11:42:55 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000080)={0x5, "ec6034bed9b5b9e5038dd270ebb9f3d303a81d12b1181df5e6a794f629b2e6b8", 0x2, 0x1, 0x6, 0x7, 0x4, 0x4, 0x6d, 0x1}) 11:42:55 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) 11:42:55 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffe1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}}}) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f00000001c0)={@multicast2, @multicast1, 0x0, "6556ecb290a77fc888b31df26e0bb2d58c1e0ee90e84c8a9c0bfa14be72a4e53"}, 0x3c) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f00000001c0)={@multicast2, @multicast1, 0x0, "6556ecb290a77fc888b31df26e0bb2d58c1e0ee90e84c8a9c0bfa14be72a4e53"}, 0x3c) (async) io_submit(0x0, 0x2, &(0x7f0000000280)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x2, r1, &(0x7f0000000080)="132876b99ece681d22d8414292b96deefe5ffe26c8c709a50378758bc7070b1d45b4b492464ae1f57de95fe8072b8e7fcf207da6b48ac8ae1b7ee82ab27bdf3e42aa0ebff8988db9edbfa80cbe37475b7763a1f83b63ae7ec69f87aeccbeeb296080c10f2a65121af06572de3adb23562553459c0baceed2622258ce10aff234ddc6217b0e7ee183784b10c38daaedcd213c910a3a0c7b6ae38b7750", 0x9c, 0xde, 0x0, 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x1, r2, &(0x7f0000000140)="86e83ebe9d473cbd5c17b5e297159a711f9e5a4ae28c1f8c7af2d2a9048180f7e66a1c2082398088b97aefe206d6b4db2ddb1d0dbfd10088d2035aeb76a172169cf0daf098d9bdbb5b7183ba8246f4774742cd7c473e6cc77d4f34325f9438afd26461be6bf4ce2078f6836fe9bc0b38b5a0069bd022be6f0a4c7a2bb43e48a3820747b796981e8a0858e23132e4be0e9a876dd6081f1de067d833094aeea7aaf247310c4fe571c39968caa1f2953907bee16c78468bf4cf512f204b57323796ad620eff345d3c5f4afcc99fa1200bf6415c113cfdafa4c6bca72fc2890194c18687570973e05ac1938af6d536a88011bb2b1f76c0ff2a827189", 0xfa, 0xfffffffffffffffa, 0x0, 0x2}]) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000ac0)={0x1}) (async) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r4) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000900)="62d731095d84c5fb7b01dff499bf2b1797d9ee84a38a480550d9dbd796aca4f08defa335b0163a4e69e1c95d3f39e969d821a3c3890941ee598e708a7a671f217ff151171125e94bca072cb81e384ae8ccf4106f18f1db392e037d44a4d4d126c3a38cdd29c155830922259cdc3e6e76e15a24c142dc45faa2471f39090d2cad663b3df078a39c00bf913079e3b36c09fa5b234e8898a6bc7f33111a149bea54769c2530a2cdfe037472ab276fd61db19145588a2f725eb6ce9f81272b9790ca03", &(0x7f00000002c0)=@buf="386db839696a97f2eb0e99deb9e3ac6ffcc327ea61db88f2253149443c5e19d93ef8bc1d54ae918cf249d37ddb861ac031a16817fde87209a841f30af63ebaf62cb664b0ad9713c6dbfa31e7de8a746c0ed8dfcc33dc61611c655d374039892fe875dc830b8ae17572739ae3dd89", 0x1}, 0x20) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r3) (async) write$uinput_user_dev(r3, &(0x7f0000000480)={'syz1\x00', {0x9, 0x7f, 0xf000, 0x8}, 0x2b, [0x7, 0x0, 0x51b0, 0x8, 0x2, 0x0, 0x6da, 0x9, 0x8000, 0x1000, 0x5, 0x90, 0x1f0000, 0x2, 0x7ff, 0x3, 0x4, 0x81, 0x8001, 0x6, 0xa27a, 0x3, 0x17, 0x9, 0xca9, 0x200, 0x9f, 0x100, 0x6, 0x800, 0x7ff, 0x80000001, 0xef47, 0xa8a8000, 0x4, 0x9, 0x6, 0x10001, 0x7, 0x80000000, 0x6, 0x0, 0x3f, 0x7fffffff, 0x1ff, 0x93f4, 0x6, 0xe6c, 0x78ca807b, 0x10001, 0x8001, 0x8001, 0x3f, 0x6, 0x5cdeb14, 0x7fff, 0x17ae, 0x5, 0x0, 0x1000, 0x1, 0x5, 0x9, 0x373], [0x0, 0x9d8f, 0x9, 0x1ff, 0xf4, 0xffff, 0x2c, 0x101, 0xfff, 0x4, 0x9, 0xf0, 0x8d0, 0xdba2, 0x10001, 0x6, 0x2, 0x8, 0x8, 0x20, 0x81, 0xfff, 0xe7, 0xfff, 0x6, 0x0, 0x7, 0x101, 0x8, 0x8000, 0x7, 0x6, 0xffff, 0x3, 0x80000000, 0xfffffffb, 0xc4, 0x1, 0xa9d, 0x3f, 0x1, 0x81, 0x0, 0xffffffff, 0xffff0001, 0x7, 0x0, 0x4, 0x2, 0x7f, 0x7, 0x8, 0x4, 0x0, 0x8, 0x0, 0xa9be, 0x4b, 0xd8f, 0xf8ee, 0x8, 0x2, 0x0, 0x2], [0x3, 0xffffffff, 0x200, 0x3, 0x10001, 0x9, 0x0, 0x1, 0x20, 0x48, 0x101, 0x9d9, 0x1, 0x8667, 0x5, 0xfffffff9, 0x1, 0xffffffff, 0x800, 0x5, 0x100, 0x0, 0x1f, 0x7, 0x1, 0x3, 0x3746, 0x3, 0x22ec, 0x76, 0xffff534f, 0x1000, 0xfff, 0x1, 0x3ff, 0x2, 0xffffffff, 0x3f, 0x4, 0x0, 0x2, 0x3ff, 0xffffffa3, 0x5, 0x401, 0xe29, 0x7, 0x80000001, 0x6, 0x7, 0x6, 0x7b43d078, 0x8, 0x10001, 0x2, 0x2, 0xe, 0x1ff, 0x3, 0x0, 0x8, 0x2e1b, 0x34c, 0x9], [0x4, 0x2, 0x3, 0x9, 0x3, 0x2f9, 0x0, 0x8, 0x1, 0x81, 0x1, 0x10001, 0xfb82, 0xfffff94f, 0xfffffff9, 0x1, 0x20000, 0x7, 0x5, 0x7, 0x1, 0xc0b, 0x80000001, 0x1, 0x6, 0x1, 0xfa9e, 0x6, 0x3, 0xffffff01, 0x0, 0x8000, 0x0, 0x1, 0x57, 0x200, 0xfffffffa, 0x7, 0x101, 0x9, 0x8f, 0x1ff, 0x1, 0xffff8001, 0x1, 0x4, 0x4, 0x8, 0x0, 0xfffffffc, 0x0, 0x8, 0x6a44, 0x20, 0x4a, 0x5, 0x6, 0x4, 0x0, 0x5, 0x9, 0x3, 0x4, 0x9000000]}, 0x45c) r5 = socket(0x29, 0x6, 0x0) (async) ioctl$UI_SET_MSCBIT(r3, 0x40045568, 0x1a) getsockopt$MRT(r5, 0x0, 0xce, &(0x7f0000000a00), &(0x7f0000000a40)=0x4) r6 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r6, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000b00)={0x7, 0x2, 0x0, "409e7a9cfd551c6c356825b63dc3eea9990ab94bb523b15d85b971266d1091f4", 0x41416770}) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f0000000a80)) 11:42:55 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x3) 11:42:55 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}}) (async) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f00000000c0)={0x0, {0x2, 0x4}}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r3) (async) ioctl$VT_DISALLOCATE(r3, 0x5608) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, 0xfffffffffffffffe) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r4, 0x0, 0x0) (async) io_submit(r4, 0x1, &(0x7f0000000e80)=[&(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) (async, rerun: 64) io_getevents(r4, 0x20, 0x2, &(0x7f0000000180)=[{}, {}], &(0x7f00000001c0)={0x77359400}) (async, rerun: 64) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_S_STD(r5, 0x40085618, &(0x7f0000000140)=0x100000) 11:42:56 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) 11:42:56 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (async) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000080)={0x5, "ec6034bed9b5b9e5038dd270ebb9f3d303a81d12b1181df5e6a794f629b2e6b8", 0x2, 0x1, 0x6, 0x7, 0x4, 0x4, 0x6d, 0x1}) 11:42:56 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffe1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}}}) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f00000001c0)={@multicast2, @multicast1, 0x0, "6556ecb290a77fc888b31df26e0bb2d58c1e0ee90e84c8a9c0bfa14be72a4e53"}, 0x3c) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f00000001c0)={@multicast2, @multicast1, 0x0, "6556ecb290a77fc888b31df26e0bb2d58c1e0ee90e84c8a9c0bfa14be72a4e53"}, 0x3c) (async) io_submit(0x0, 0x2, &(0x7f0000000280)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x2, r1, &(0x7f0000000080)="132876b99ece681d22d8414292b96deefe5ffe26c8c709a50378758bc7070b1d45b4b492464ae1f57de95fe8072b8e7fcf207da6b48ac8ae1b7ee82ab27bdf3e42aa0ebff8988db9edbfa80cbe37475b7763a1f83b63ae7ec69f87aeccbeeb296080c10f2a65121af06572de3adb23562553459c0baceed2622258ce10aff234ddc6217b0e7ee183784b10c38daaedcd213c910a3a0c7b6ae38b7750", 0x9c, 0xde, 0x0, 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x1, r2, &(0x7f0000000140)="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", 0xfa, 0xfffffffffffffffa, 0x0, 0x2}]) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) (async, rerun: 64) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000ac0)={0x1}) (async, rerun: 64) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r4) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000900)="62d731095d84c5fb7b01dff499bf2b1797d9ee84a38a480550d9dbd796aca4f08defa335b0163a4e69e1c95d3f39e969d821a3c3890941ee598e708a7a671f217ff151171125e94bca072cb81e384ae8ccf4106f18f1db392e037d44a4d4d126c3a38cdd29c155830922259cdc3e6e76e15a24c142dc45faa2471f39090d2cad663b3df078a39c00bf913079e3b36c09fa5b234e8898a6bc7f33111a149bea54769c2530a2cdfe037472ab276fd61db19145588a2f725eb6ce9f81272b9790ca03", &(0x7f00000002c0)=@buf="386db839696a97f2eb0e99deb9e3ac6ffcc327ea61db88f2253149443c5e19d93ef8bc1d54ae918cf249d37ddb861ac031a16817fde87209a841f30af63ebaf62cb664b0ad9713c6dbfa31e7de8a746c0ed8dfcc33dc61611c655d374039892fe875dc830b8ae17572739ae3dd89", 0x1}, 0x20) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r3) (async, rerun: 32) write$uinput_user_dev(r3, &(0x7f0000000480)={'syz1\x00', {0x9, 0x7f, 0xf000, 0x8}, 0x2b, [0x7, 0x0, 0x51b0, 0x8, 0x2, 0x0, 0x6da, 0x9, 0x8000, 0x1000, 0x5, 0x90, 0x1f0000, 0x2, 0x7ff, 0x3, 0x4, 0x81, 0x8001, 0x6, 0xa27a, 0x3, 0x17, 0x9, 0xca9, 0x200, 0x9f, 0x100, 0x6, 0x800, 0x7ff, 0x80000001, 0xef47, 0xa8a8000, 0x4, 0x9, 0x6, 0x10001, 0x7, 0x80000000, 0x6, 0x0, 0x3f, 0x7fffffff, 0x1ff, 0x93f4, 0x6, 0xe6c, 0x78ca807b, 0x10001, 0x8001, 0x8001, 0x3f, 0x6, 0x5cdeb14, 0x7fff, 0x17ae, 0x5, 0x0, 0x1000, 0x1, 0x5, 0x9, 0x373], [0x0, 0x9d8f, 0x9, 0x1ff, 0xf4, 0xffff, 0x2c, 0x101, 0xfff, 0x4, 0x9, 0xf0, 0x8d0, 0xdba2, 0x10001, 0x6, 0x2, 0x8, 0x8, 0x20, 0x81, 0xfff, 0xe7, 0xfff, 0x6, 0x0, 0x7, 0x101, 0x8, 0x8000, 0x7, 0x6, 0xffff, 0x3, 0x80000000, 0xfffffffb, 0xc4, 0x1, 0xa9d, 0x3f, 0x1, 0x81, 0x0, 0xffffffff, 0xffff0001, 0x7, 0x0, 0x4, 0x2, 0x7f, 0x7, 0x8, 0x4, 0x0, 0x8, 0x0, 0xa9be, 0x4b, 0xd8f, 0xf8ee, 0x8, 0x2, 0x0, 0x2], [0x3, 0xffffffff, 0x200, 0x3, 0x10001, 0x9, 0x0, 0x1, 0x20, 0x48, 0x101, 0x9d9, 0x1, 0x8667, 0x5, 0xfffffff9, 0x1, 0xffffffff, 0x800, 0x5, 0x100, 0x0, 0x1f, 0x7, 0x1, 0x3, 0x3746, 0x3, 0x22ec, 0x76, 0xffff534f, 0x1000, 0xfff, 0x1, 0x3ff, 0x2, 0xffffffff, 0x3f, 0x4, 0x0, 0x2, 0x3ff, 0xffffffa3, 0x5, 0x401, 0xe29, 0x7, 0x80000001, 0x6, 0x7, 0x6, 0x7b43d078, 0x8, 0x10001, 0x2, 0x2, 0xe, 0x1ff, 0x3, 0x0, 0x8, 0x2e1b, 0x34c, 0x9], [0x4, 0x2, 0x3, 0x9, 0x3, 0x2f9, 0x0, 0x8, 0x1, 0x81, 0x1, 0x10001, 0xfb82, 0xfffff94f, 0xfffffff9, 0x1, 0x20000, 0x7, 0x5, 0x7, 0x1, 0xc0b, 0x80000001, 0x1, 0x6, 0x1, 0xfa9e, 0x6, 0x3, 0xffffff01, 0x0, 0x8000, 0x0, 0x1, 0x57, 0x200, 0xfffffffa, 0x7, 0x101, 0x9, 0x8f, 0x1ff, 0x1, 0xffff8001, 0x1, 0x4, 0x4, 0x8, 0x0, 0xfffffffc, 0x0, 0x8, 0x6a44, 0x20, 0x4a, 0x5, 0x6, 0x4, 0x0, 0x5, 0x9, 0x3, 0x4, 0x9000000]}, 0x45c) (rerun: 32) r5 = socket(0x29, 0x6, 0x0) ioctl$UI_SET_MSCBIT(r3, 0x40045568, 0x1a) (async) getsockopt$MRT(r5, 0x0, 0xce, &(0x7f0000000a00), &(0x7f0000000a40)=0x4) (async) r6 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r6, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000b00)={0x7, 0x2, 0x0, "409e7a9cfd551c6c356825b63dc3eea9990ab94bb523b15d85b971266d1091f4", 0x41416770}) (async) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f0000000a80)) 11:42:56 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (async) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000080)={0x5, "ec6034bed9b5b9e5038dd270ebb9f3d303a81d12b1181df5e6a794f629b2e6b8", 0x2, 0x1, 0x6, 0x7, 0x4, 0x4, 0x6d, 0x1}) 11:42:56 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x3) 11:42:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket(0x18, 0x0, 0x0) setsockopt$MRT_ASSERT(r1, 0x0, 0xcf, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1d}, 0x20004000) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000080)={0xf007a70dee07feda, @capture={0x0, 0x0, {0xff, 0x4}, 0x2, 0x2}}) 11:42:56 executing program 0: ioctl$VIDIOC_G_ENC_INDEX(0xffffffffffffffff, 0x8818564c, &(0x7f0000000cc0)) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff]}}}) ioctl$VIDIOC_G_AUDIO(0xffffffffffffffff, 0x80345621, &(0x7f0000000140)) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000100)=0x4) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x200, 0xc, 0x2, "c55651834f4ad73a21adc7cf64dfa60600"}) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x0, 0x4, 0x200, '\x00', &(0x7f0000000040)=0x3f}) 11:42:56 executing program 5: r0 = socket(0x18, 0x0, 0x0) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x244, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbe}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffa83}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xca6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xee}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x380}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7fffffff, @private1, 0x5e}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @loopback, 0x35df}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvtap0\x00'}}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffffffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x4000001}, 0xc000020) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:56 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}}) (async, rerun: 64) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 64) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f00000000c0)={0x0, {0x2, 0x4}}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r3) (async, rerun: 64) ioctl$VT_DISALLOCATE(r3, 0x5608) (async, rerun: 64) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, 0xfffffffffffffffe) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r4, 0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000000e80)=[&(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) (async) io_getevents(r4, 0x20, 0x2, &(0x7f0000000180)=[{}, {}], &(0x7f00000001c0)={0x77359400}) (async) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_S_STD(r5, 0x40085618, &(0x7f0000000140)=0x100000) 11:42:56 executing program 1: ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @raw_data="56c50de32fd8f817ae9ce102c038eb572058aa277c72add0481c5e5bbea231ee5d910fddb455af1310232243c7b722accc0b15d66359587d638d21e3a515e534ce1400d8e027f349c47122c8cee8720b1c8ae69108c0fe08f715412a54ce08c3bb6fae3b2c719c06f754524688522cfbc86f5c39cf1d50aa18a1d3b970735d0d6a04eb6af7a6732f77edf2da841f2276aac00ecbf719b06bffcd19328be77c9e8e20798286f2a6675c86544a04425c43f46233f784a7ac0bb212efc82d0cff6f7fceb05d531e42a7"}, 0xffffffff}) 11:42:56 executing program 0: ioctl$VIDIOC_G_ENC_INDEX(0xffffffffffffffff, 0x8818564c, &(0x7f0000000cc0)) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff]}}}) ioctl$VIDIOC_G_AUDIO(0xffffffffffffffff, 0x80345621, &(0x7f0000000140)) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000100)=0x4) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x200, 0xc, 0x2, "c55651834f4ad73a21adc7cf64dfa60600"}) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x0, 0x4, 0x200, '\x00', &(0x7f0000000040)=0x3f}) ioctl$VIDIOC_G_ENC_INDEX(0xffffffffffffffff, 0x8818564c, &(0x7f0000000cc0)) (async) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff]}}}) (async) ioctl$VIDIOC_G_AUDIO(0xffffffffffffffff, 0x80345621, &(0x7f0000000140)) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000100)=0x4) (async) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x200, 0xc, 0x2, "c55651834f4ad73a21adc7cf64dfa60600"}) (async) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x0, 0x4, 0x200, '\x00', &(0x7f0000000040)=0x3f}) (async) 11:42:56 executing program 5: r0 = socket(0x18, 0x0, 0x0) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x244, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbe}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffa83}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xca6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xee}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x380}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7fffffff, @private1, 0x5e}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @loopback, 0x35df}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvtap0\x00'}}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffffffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x4000001}, 0xc000020) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) (async) r1 = socket(0x18, 0x0, 0x0) setsockopt$MRT_ASSERT(r1, 0x0, 0xcf, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1d}, 0x20004000) (async) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000080)={0xf007a70dee07feda, @capture={0x0, 0x0, {0xff, 0x4}, 0x2, 0x2}}) 11:42:56 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000006c0)) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f00000000c0)={0xfffffffa, 0x0, 0x200e, 0x200, 0xfffffffd, 0x3}) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x800, 0x1, '\x00', &(0x7f0000000000)=0x9}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x80, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}, 0x1f}) 11:42:56 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @raw_data=[0x7fffffff, 0x40, 0x6, 0x0, 0xfff, 0x0, 0x3f, 0x1, 0x2, 0x9, 0x2, 0xffffffff, 0x5, 0xfffffff7, 0x10001, 0x7fff, 0xfffffff7, 0x7, 0xfff, 0x0, 0x2, 0xa6b0, 0x6, 0x9, 0x8, 0xeb, 0xfff, 0x0, 0x81, 0xffff, 0xf29e, 0x400]}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) 11:42:57 executing program 5: r0 = socket(0x18, 0x0, 0x0) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, 0x0, 0x0) (async) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x244, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbe}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffa83}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xca6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xee}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x380}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7fffffff, @private1, 0x5e}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @loopback, 0x35df}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvtap0\x00'}}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffffffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x4000001}, 0xc000020) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:42:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket(0x18, 0x0, 0x0) setsockopt$MRT_ASSERT(r1, 0x0, 0xcf, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1d}, 0x20004000) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000080)={0xf007a70dee07feda, @capture={0x0, 0x0, {0xff, 0x4}, 0x2, 0x2}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) (async) socket(0x18, 0x0, 0x0) (async) setsockopt$MRT_ASSERT(r1, 0x0, 0xcf, 0x0, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1d}, 0x20004000) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000080)={0xf007a70dee07feda, @capture={0x0, 0x0, {0xff, 0x4}, 0x2, 0x2}}) (async) 11:42:57 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000006c0)) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f00000000c0)={0xfffffffa, 0x0, 0x200e, 0x200, 0xfffffffd, 0x3}) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x800, 0x1, '\x00', &(0x7f0000000000)=0x9}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x80, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}, 0x1f}) 11:42:57 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @raw_data=[0x7fffffff, 0x40, 0x6, 0x0, 0xfff, 0x0, 0x3f, 0x1, 0x2, 0x9, 0x2, 0xffffffff, 0x5, 0xfffffff7, 0x10001, 0x7fff, 0xfffffff7, 0x7, 0xfff, 0x0, 0x2, 0xa6b0, 0x6, 0x9, 0x8, 0xeb, 0xfff, 0x0, 0x81, 0xffff, 0xf29e, 0x400]}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) 11:42:58 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/238}) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000000)) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000080)) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{}]}) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x29) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000100)=0x8) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x303902, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0xf800, 0x7, 0x5, 0x4, 0x8, "cb478a4a5b61eb7a"}) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x7, 0x0, 0x0, 0x0, 0xb7e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 11:42:58 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0xc4c8, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x7f]}}}) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x5, 0x800, 0x0, 0x2, 0x1fc, 0x800, 0x2b1, 0x3, 0x7f, 0x8, 0x80000000, 0xbe, 0x7f, 0x6, 0x3, 0x10, {0x2, 0x1ff}, 0x1a, 0x2}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000080)={0xc7f4, 0x38}) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f00000000c0)={0x0, 0x0, '\x00', {0x0, @reserved}}) [ 2192.595293] oom_reaper: reaped process 3474 (syz-executor.1), now anon-rss:0kB, file-rss:14336kB, shmem-rss:8kB [ 2192.627831] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2192.645674] systemd-journal cpuset=/ mems_allowed=0-1 [ 2192.650936] CPU: 1 PID: 1173 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 2192.658814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2192.668158] Call Trace: [ 2192.670739] dump_stack+0x1fc/0x2ef [ 2192.674350] dump_header+0x15d/0xc3f [ 2192.678045] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2192.679836] syz-executor.1: vmalloc: allocation failure, allocated 2514812928 of 3501035520 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2192.683135] ? ___ratelimit+0x319/0x590 [ 2192.700872] oom_kill_process.cold+0x10/0x692 [ 2192.703540] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2192.705378] ? check_preemption_disabled+0x41/0x280 [ 2192.715451] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2192.720725] out_of_memory+0x1072/0x1390 [ 2192.724812] ? oom_killer_disable+0x270/0x270 [ 2192.729297] ? mutex_trylock+0x15f/0x1a0 [ 2192.733350] __alloc_pages_nodemask+0x23a2/0x2890 [ 2192.738187] ? find_get_entry+0x4cd/0x8a0 [ 2192.742336] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2192.747190] alloc_pages_current+0x193/0x2a0 [ 2192.751586] filemap_fault+0x146e/0x2180 [ 2192.755655] ext4_filemap_fault+0x84/0xb0 [ 2192.759886] __do_fault+0x10b/0x4b0 [ 2192.763508] __handle_mm_fault+0x273b/0x41c0 [ 2192.767909] ? vm_insert_page+0x9c0/0x9c0 [ 2192.772059] ? check_preemption_disabled+0x41/0x280 [ 2192.777071] handle_mm_fault+0x436/0xb10 [ 2192.781130] __do_page_fault+0x68e/0xd60 [ 2192.785193] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2192.790980] ? spurious_fault+0x840/0x840 [ 2192.795119] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2192.799957] ? page_fault+0x8/0x30 [ 2192.803494] page_fault+0x1e/0x30 [ 2192.806939] RIP: 0033:0x7fe1fa98f2e3 [ 2192.810648] Code: Bad RIP value. [ 2192.813998] RSP: 002b:00007ffd4d0d9758 EFLAGS: 00010246 [ 2192.819350] RAX: 0000000000000001 RBX: 000055767311d1e0 RCX: 00007fe1fa98f2e3 [ 2192.826604] RDX: 0000000000000013 RSI: 00007ffd4d0d9760 RDI: 000000000000000c [ 2192.833861] RBP: 00007ffd4d0d9950 R08: 00007ffd4d175000 R09: 0000022cbb8d39a0 [ 2192.841120] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd4d0d9760 [ 2192.848376] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005ede56f9ccc47 [ 2192.855653] CPU: 0 PID: 3474 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2192.859210] Mem-Info: [ 2192.863445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2192.863450] Call Trace: [ 2192.863473] dump_stack+0x1fc/0x2ef [ 2192.863491] warn_alloc.cold+0x7b/0x18f [ 2192.863510] ? zone_watermark_ok_safe+0x260/0x260 [ 2192.865915] active_anon:15631 inactive_anon:17003 isolated_anon:0 [ 2192.865915] active_file:32 inactive_file:19 isolated_file:0 [ 2192.865915] unevictable:0 dirty:1 writeback:11 unstable:0 [ 2192.865915] slab_reclaimable:15101 slab_unreclaimable:125078 [ 2192.865915] mapped:22125 shmem:17528 pagetables:569 bounce:0 [ 2192.865915] free:13793 free_pcp:708 free_cma:0 [ 2192.875235] ? rcu_nmi_exit+0xb3/0x180 [ 2192.875272] __vmalloc_area_node+0x4fd/0x780 [ 2192.877844] Node 0 active_anon:60760kB inactive_anon:59864kB active_file:124kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88480kB dirty:4kB writeback:28kB shmem:61892kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2192.881441] ? __vmalloc_node_range+0x180/0x180 [ 2192.881460] ? _raw_spin_unlock+0x29/0x40 [ 2192.885421] Node 1 active_anon:1764kB inactive_anon:8148kB active_file:4kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:0kB writeback:16kB shmem:8220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2192.890225] ? __get_vm_area_node+0x2e2/0x3a0 [ 2192.890244] __vmalloc_node_range+0xed/0x180 [ 2192.890277] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2192.923579] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2192.927435] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2192.931832] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2192.959554] vmalloc_user+0x70/0xe0 [ 2192.959569] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2192.959585] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2192.964241] Node 0 DMA32 free:17560kB min:35996kB low:44992kB high:53988kB active_anon:60760kB inactive_anon:59864kB active_file:488kB inactive_file:184kB unevictable:0kB writepending:232kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7616kB pagetables:2060kB bounce:0kB free_pcp:2580kB local_pcp:1444kB free_cma:0kB [ 2192.968359] __vb2_queue_alloc+0x472/0xe60 [ 2192.995067] lowmem_reserve[]: 0 0 1 1 1 [ 2192.999537] vb2_core_create_bufs+0x273/0x7e0 [ 2193.003923] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2193.008213] ? __vb2_queue_free+0x870/0x870 [ 2193.034306] lowmem_reserve[]: 0 0 0 0 0 [ 2193.039642] ? pi_state_update_owner+0x450/0x450 [ 2193.044644] Node 1 Normal free:26720kB min:53876kB low:67344kB high:80812kB active_anon:1764kB inactive_anon:8148kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:116kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:216kB bounce:0kB free_pcp:252kB local_pcp:4kB free_cma:0kB [ 2193.048242] ? _raw_spin_unlock+0x29/0x40 [ 2193.052547] lowmem_reserve[]: 0 0 0 0 0 [ 2193.056670] ? __mutex_lock+0x368/0x1190 [ 2193.086064] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 2193.090264] vb2_create_bufs+0x332/0x620 [ 2193.090286] ? mark_held_locks+0xf0/0xf0 [ 2193.094229] Node 0 DMA32: 1050*4kB (ME) 659*8kB (ME) 205*16kB (ME) 45*32kB (ME) 22*64kB (ME) 12*128kB (ME) 2*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17648kB [ 2193.098709] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2193.124550] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2193.128834] ? futex_wait_queue_me+0x404/0x5e0 [ 2193.132796] Node 1 Normal: 144*4kB (UME) 116*8kB (UME) 88*16kB (ME) 70*32kB (UME) 35*64kB (UME) 19*128kB (UME) 12*256kB (ME) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 2*4096kB (U) = 26720kB [ 2193.137521] ? pi_state_update_owner+0x450/0x450 [ 2193.165970] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2193.170077] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2193.170093] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2193.170116] v4l_create_bufs+0xb2/0x160 [ 2193.174057] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2193.178100] __video_do_ioctl+0x49a/0xcd0 [ 2193.190595] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2193.194619] ? v4l_querycap+0x340/0x340 [ 2193.198653] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2193.213477] ? __might_fault+0x192/0x1d0 [ 2193.213495] ? v4l_querycap+0x340/0x340 [ 2193.213510] video_usercopy+0x13f/0xfa0 [ 2193.213530] ? v4l_enumstd+0x60/0x60 [ 2193.218627] 17566 total pagecache pages [ 2193.230042] ? do_futex+0x171/0x1880 [ 2193.230059] ? mark_held_locks+0xf0/0xf0 [ 2193.230076] ? debug_check_no_obj_freed+0x201/0x490 [ 2193.230098] ? video_usercopy+0xfa0/0xfa0 [ 2193.234660] 0 pages in swap cache [ 2193.251457] v4l2_ioctl+0x147/0x1a0 [ 2193.251471] ? video_devdata+0xa0/0xa0 [ 2193.251486] do_vfs_ioctl+0xcdb/0x12e0 [ 2193.251503] ? lock_downgrade+0x720/0x720 [ 2193.256235] Swap cache stats: add 0, delete 0, find 0/0 [ 2193.265048] ? check_preemption_disabled+0x41/0x280 [ 2193.265062] ? ioctl_preallocate+0x200/0x200 [ 2193.265080] ? __fget+0x356/0x510 [ 2193.270201] Free swap = 0kB [ 2193.275357] ? do_dup2+0x450/0x450 [ 2193.279304] Total swap = 0kB [ 2193.287866] ? __se_sys_futex+0x298/0x3b0 [ 2193.287885] ksys_ioctl+0x9b/0xc0 [ 2193.287901] __x64_sys_ioctl+0x6f/0xb0 [ 2193.287919] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2193.292060] 2097051 pages RAM [ 2193.300860] do_syscall_64+0xf9/0x620 [ 2193.300878] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2193.300892] RIP: 0033:0x7fa651442639 [ 2193.304837] 0 pages HighMem/MovableOnly [ 2193.313479] Code: Bad RIP value. [ 2193.313487] RSP: 002b:00007fa64f9b5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2193.313503] RAX: ffffffffffffffda RBX: 00007fa651562f80 RCX: 00007fa651442639 [ 2193.317537] 369649 pages reserved [ 2193.321485] RDX: 0000000020000380 RSI: 00000000c100565c RDI: 0000000000000003 [ 2193.321494] RBP: 00007fa65149dae9 R08: 0000000000000000 R09: 0000000000000000 [ 2193.321502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2193.321514] R13: 00007ffdac6e7cbf R14: 00007fa64f9b5300 R15: 0000000000022000 [ 2193.325462] 0 pages cma reserved [ 2193.364856] Mem-Info: [ 2193.365628] Unreclaimable slab info: [ 2193.388852] active_anon:15610 inactive_anon:17003 isolated_anon:0 [ 2193.388852] active_file:14 inactive_file:14 isolated_file:0 [ 2193.388852] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2193.388852] slab_reclaimable:15103 slab_unreclaimable:125076 [ 2193.388852] mapped:22109 shmem:17528 pagetables:568 bounce:0 [ 2193.388852] free:13815 free_pcp:711 free_cma:0 [ 2193.390590] Name Used Total [ 2193.390605] pid_2 133KB 220KB [ 2193.390680] batadv_tl_cache 4KB 12KB [ 2193.390707] TIPC 10KB 22KB [ 2193.390728] SCTPv6 14KB 24KB [ 2193.390746] DCCPv6 17KB 22KB [ 2193.390762] DCCP 16KB 21KB [ 2193.414671] Node 0 active_anon:60676kB inactive_anon:59864kB active_file:52kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88436kB dirty:0kB writeback:0kB shmem:61892kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2193.416680] RXRPC 11KB 13KB [ 2193.437555] Node 1 active_anon:1764kB inactive_anon:8148kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2193.444341] rxrpc_call_jar 78KB 86KB [ 2193.444355] bridge_fdb_cache 8KB 11KB [ 2193.444370] fib6_nodes 155KB 184KB [ 2193.444379] ip6_dst_cache 69KB 318KB [ 2193.444393] RAWv6 70KB 81KB [ 2193.468623] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2193.469782] UDPv6 26KB 30KB [ 2193.469795] TCPv6 27KB 30KB [ 2193.497351] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2193.527168] nf_conntrack 5KB 7KB [ 2193.527238] t10_alua_lu_gp_cache 0KB 3KB [ 2193.554848] Node 0 DMA32 free:17648kB min:35996kB low:44992kB high:53988kB active_anon:60676kB inactive_anon:59864kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7616kB pagetables:2056kB bounce:0kB free_pcp:2592kB local_pcp:1136kB free_cma:0kB [ 2193.559807] sd_ext_cdb 0KB 7KB [ 2193.584545] lowmem_reserve[]: 0 0 1 1 1 [ 2193.592865] scsi_sense_cache 1056KB 1060KB [ 2193.592877] virtio_scsi_cmd 16KB 16KB [ 2193.613749] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2193.627918] sgpool-128 8KB 8KB [ 2193.644158] lowmem_reserve[]: 0 0 0 0 0 [ 2193.648271] sgpool-64 4KB 12KB [ 2193.659358] Node 1 Normal free:26720kB min:53876kB low:67344kB high:80812kB active_anon:1764kB inactive_anon:8148kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:216kB bounce:0kB free_pcp:252kB local_pcp:248kB free_cma:0kB [ 2193.679246] sgpool-32 2KB 15KB [ 2193.679257] sgpool-16 1KB 7KB [ 2193.679266] sgpool-8 0KB 7KB [ 2193.679284] mqueue_inode_cache 10KB 15KB [ 2193.679299] bio_post_read_ctx 14KB 15KB [ 2193.679371] bio-2 14KB 15KB [ 2193.679380] jfs_mp 7KB 7KB [ 2193.679420] cifs_small_rq 15KB 16KB [ 2193.679429] cifs_request 67KB 67KB [ 2193.679438] cifs_mpx_ids 0KB 7KB [ 2193.679467] nfs_commit_data 3KB 14KB [ 2193.679476] nfs_write_data 34KB 44KB [ 2193.679516] ext4_system_zone 1KB 7KB [ 2193.700047] lowmem_reserve[]: 0 0 0 0 0 [ 2193.703814] kioctx 4KB 7KB [ 2193.706361] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 2193.738621] aio_kiocb 21KB 26KB [ 2193.754704] Node 0 DMA32: 1050*4kB (ME) 665*8kB (UME) 205*16kB (ME) 45*32kB (ME) 22*64kB (ME) 12*128kB (ME) 2*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17696kB [ 2193.758869] bio-1 1KB 7KB [ 2193.798431] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2193.828042] pid_namespace 2KB 7KB [ 2193.844138] Node 1 Normal: 144*4kB (UME) 116*8kB (UME) 88*16kB (ME) 70*32kB (UME) 35*64kB (UME) 19*128kB (UME) 12*256kB (ME) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 2*4096kB (U) = 26720kB [ 2193.848571] rpc_buffers 17KB 25KB [ 2193.866488] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2193.869333] rpc_tasks 2KB 7KB [ 2193.893649] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2193.898183] UNIX 120KB 123KB [ 2193.898883] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2193.904283] ip_mrt_cache 15KB 24KB [ 2193.904295] tcp_bind_bucket 1KB 4KB [ 2193.904311] ip_fib_trie 23KB 27KB [ 2193.924600] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2193.946553] ip_fib_alias 111KB 130KB [ 2193.961415] 17556 total pagecache pages [ 2193.985418] ip_dst_cache 4KB 16KB [ 2193.997433] 0 pages in swap cache [ 2194.016855] RAW 61KB 75KB [ 2194.023134] Swap cache stats: add 0, delete 0, find 0/0 [ 2194.027601] UDP 25KB 47KB [ 2194.030562] Free swap = 0kB [ 2194.043439] TCP 19KB 22KB [ 2194.047784] Total swap = 0kB [ 2194.049044] hugetlbfs_inode_cache 3KB 15KB [ 2194.053906] 2097051 pages RAM [ 2194.069346] fscache_cookie_jar 1KB 7KB [ 2194.077176] 0 pages HighMem/MovableOnly [ 2194.078184] eventpoll_pwq 39KB 51KB [ 2194.081206] 369649 pages reserved [ 2194.081212] 0 pages cma reserved [ 2194.123687] eventpoll_epi 62KB 66KB [ 2194.129067] inotify_inode_mark 44KB 70KB [ 2194.134593] request_queue 199KB 199KB [ 2194.146861] blkdev_requests 1KB 3KB [ 2194.152320] blkdev_ioc 10KB 19KB [ 2194.157715] bio-0 145KB 217KB [ 2194.169508] biovec-max 1303KB 1353KB [ 2194.174961] biovec-64 148KB 220KB [ 2194.187062] biovec-16 17KB 33KB [ 2194.192549] bio_integrity_payload 1KB 8KB [ 2194.198263] khugepaged_mm_slot 18KB 34KB [ 2194.210327] uid_cache 0KB 4KB [ 2194.215708] dmaengine-unmap-2 0KB 3KB [ 2194.224552] skbuff_fclone_cache 163KB 217KB [ 2194.233749] skbuff_head_cache 1572KB 3052KB [ 2194.239114] configfs_dir_cache 3KB 7KB [ 2194.247771] file_lock_cache 200KB 293KB [ 2194.256966] file_lock_ctx 9KB 11KB [ 2194.265655] fsnotify_mark_connector 24KB 47KB [ 2194.275154] net_namespace 52KB 52KB [ 2194.284084] shmem_inode_cache 8676KB 8691KB [ 2194.289460] task_delay_info 282KB 450KB [ 2194.298234] taskstats 130KB 202KB [ 2194.307733] proc_dir_entry 697KB 727KB [ 2194.316797] pde_opener 12KB 38KB [ 2194.325622] seq_file 281KB 492KB [ 2194.334502] sigqueue 61KB 66KB [ 2194.344268] kernfs_node_cache 18488KB 18510KB [ 2194.357144] mnt_cache 173KB 184KB [ 2194.366694] filp 5334KB 7275KB [ 2194.385688] names_cache 160293KB 160352KB [ 2194.394803] iint_cache 19KB 43KB [ 2194.407705] key_jar 4KB 7KB [ 2194.417161] uts_namespace 2KB 7KB [ 2194.434388] nsproxy 11KB 15KB [ 2194.444213] vm_area_struct 4002KB 4764KB [ 2194.466551] mm_struct 632KB 890KB [ 2194.472021] fs_cache 144KB 348KB [ 2194.477381] files_cache 534KB 708KB [ 2194.494072] signal_cache 1053KB 1487KB [ 2194.506767] sighand_cache 568KB 596KB [ 2194.516904] task_struct 9083KB 9140KB [ 2194.528812] cred_jar 1088KB 1916KB [ 2194.538921] anon_vma_chain 1446KB 1673KB [ 2194.555763] anon_vma 171KB 281KB [ 2194.564613] pid 68KB 232KB [ 2194.578201] Acpi-Operand 156KB 202KB [ 2194.586802] Acpi-ParseExt 9KB 11KB [ 2194.604410] Acpi-Parse 41KB 47KB [ 2194.615496] Acpi-State 52KB 63KB [ 2194.628369] Acpi-Namespace 21KB 27KB [ 2194.637837] numa_policy 0KB 3KB [ 2194.654800] debug_objects_cache 1197KB 1595KB [ 2194.663932] trace_event_file 297KB 298KB [ 2194.669301] ftrace_event_field 398KB 405KB [ 2194.686067] pool_workqueue 121KB 128KB [ 2194.705765] page->ptl 729KB 992KB [ 2194.712141] kmalloc-2097152 2050KB 2050KB [ 2194.717538] kmalloc-524288 2056KB 2056KB [ 2194.731278] kmalloc-262144 1290KB 1290KB [ 2194.736662] kmalloc-131072 650KB 650KB [ 2194.746492] kmalloc-65536 1848KB 1914KB [ 2194.756058] kmalloc-32768 1650KB 1650KB [ 2194.765577] kmalloc-16384 940KB 990KB [ 2194.775240] kmalloc-8192 4108KB 4149KB [ 2194.784746] kmalloc-4096 20744KB 20803KB [ 2194.794500] kmalloc-2048 12327KB 12794KB [ 2194.804578] kmalloc-1024 5584KB 7749KB [ 2194.813681] kmalloc-512 6276KB 8985KB [ 2194.819046] kmalloc-256 4346KB 4781KB [ 2194.824496] kmalloc-128 949KB 1382KB [ 2194.833530] kmalloc-96 2743KB 4000KB [ 2194.838899] kmalloc-64 2755KB 3744KB [ 2194.844444] kmalloc-32 1795KB 2445KB [ 2194.853415] kmalloc-192 1581KB 2304KB [ 2194.858783] kmem_cache 177KB 180KB [ 2194.864198] Out of memory (oom_kill_allocating_task): Kill process 1173 (systemd-journal) score 0 or sacrifice child [ 2194.878397] Killed process 1173 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1292kB [ 2194.890041] oom_reaper: reaped process 1173 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1292kB [ 2194.907309] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2194.919624] systemd-journal: page allocation failure: order:0, mode:0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null) [ 2194.929607] in:imklog cpuset=/ mems_allowed=0-1 [ 2194.934965] CPU: 0 PID: 29654 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 2194.942407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2194.949553] systemd-journal cpuset=/ mems_allowed=0-1 [ 2194.951758] Call Trace: [ 2194.959518] dump_stack+0x1fc/0x2ef [ 2194.963137] dump_header+0x15d/0xc3f [ 2194.966845] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2194.971942] ? ___ratelimit+0x319/0x590 [ 2194.975924] oom_kill_process.cold+0x10/0x692 [ 2194.980421] ? check_preemption_disabled+0x41/0x280 [ 2194.985449] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2194.990717] out_of_memory+0x1072/0x1390 [ 2194.994788] ? oom_killer_disable+0x270/0x270 [ 2194.999285] ? mutex_trylock+0x15f/0x1a0 [ 2195.003353] __alloc_pages_nodemask+0x23a2/0x2890 [ 2195.008190] ? find_get_entry+0x4cd/0x8a0 [ 2195.012341] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2195.017216] alloc_pages_current+0x193/0x2a0 [ 2195.021623] filemap_fault+0x146e/0x2180 [ 2195.025683] ext4_filemap_fault+0x84/0xb0 [ 2195.029822] __do_fault+0x10b/0x4b0 [ 2195.033449] __handle_mm_fault+0x273b/0x41c0 [ 2195.037863] ? vm_insert_page+0x9c0/0x9c0 [ 2195.042007] ? lock_downgrade+0x720/0x720 [ 2195.046161] ? check_preemption_disabled+0x41/0x280 [ 2195.051175] handle_mm_fault+0x436/0xb10 [ 2195.055237] __do_page_fault+0x68e/0xd60 [ 2195.059304] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2195.064411] ? spurious_fault+0x840/0x840 [ 2195.068552] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2195.073393] ? page_fault+0x8/0x30 [ 2195.076940] page_fault+0x1e/0x30 [ 2195.080386] RIP: 0033:0x7f1d9b60d22d [ 2195.084093] Code: Bad RIP value. [ 2195.087444] RSP: 002b:00007f1d98fa9580 EFLAGS: 00010293 [ 2195.092796] RAX: 0000000000000076 RBX: 0000000000000000 RCX: 00007f1d9b60d22d [ 2195.100056] RDX: 0000000000001fa0 RSI: 00007f1d98fa9da0 RDI: 0000000000000004 [ 2195.107312] RBP: 0000556832f399d0 R08: 00007f1d9a786940 R09: 0000000004000001 [ 2195.114571] R10: 0000000000000001 R11: 0000000000000293 R12: 00007f1d98fa9da0 [ 2195.121832] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f1d98fa9dd8 [ 2195.129120] CPU: 1 PID: 1173 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 2195.137001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2195.144485] Mem-Info: [ 2195.146352] Call Trace: [ 2195.148764] active_anon:15491 inactive_anon:17003 isolated_anon:0 [ 2195.148764] active_file:14 inactive_file:14 isolated_file:0 [ 2195.148764] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2195.148764] slab_reclaimable:15100 slab_unreclaimable:125064 [ 2195.148764] mapped:22109 shmem:17528 pagetables:568 bounce:0 [ 2195.148764] free:13827 free_pcp:830 free_cma:0 [ 2195.151320] dump_stack+0x1fc/0x2ef [ 2195.151337] warn_alloc.cold+0x7b/0x18f [ 2195.151354] ? zone_watermark_ok_safe+0x260/0x260 [ 2195.151368] ? usleep_range+0x170/0x170 [ 2195.151388] ? collect_expired_timers+0x2a0/0x2a0 [ 2195.151413] __alloc_pages_nodemask+0x232f/0x2890 [ 2195.151451] ? find_get_entry+0x4cd/0x8a0 [ 2195.197106] Node 0 active_anon:60652kB inactive_anon:59864kB active_file:52kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88436kB dirty:0kB writeback:0kB shmem:61892kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2195.200999] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2195.201036] alloc_pages_current+0x193/0x2a0 [ 2195.201052] filemap_fault+0x146e/0x2180 [ 2195.201082] ext4_filemap_fault+0x84/0xb0 [ 2195.218127] Node 1 active_anon:1312kB inactive_anon:8148kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2195.242430] __do_fault+0x10b/0x4b0 [ 2195.242446] __handle_mm_fault+0x273b/0x41c0 [ 2195.242463] ? vm_insert_page+0x9c0/0x9c0 [ 2195.242489] ? check_preemption_disabled+0x41/0x280 [ 2195.242507] handle_mm_fault+0x436/0xb10 [ 2195.242528] __do_page_fault+0x68e/0xd60 [ 2195.242547] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2195.242560] ? spurious_fault+0x840/0x840 [ 2195.242575] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2195.259230] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2195.259959] ? page_fault+0x8/0x30 [ 2195.259973] page_fault+0x1e/0x30 [ 2195.259985] RIP: 0033:0x7fe1fa98f2e3 [ 2195.259999] Code: Bad RIP value. [ 2195.260005] RSP: 002b:00007ffd4d0d9758 EFLAGS: 00010246 [ 2195.260014] RAX: 0000000000000001 RBX: 000055767311d1e0 RCX: 00007fe1fa98f2e3 [ 2195.260021] RDX: 0000000000000013 RSI: 00007ffd4d0d9760 RDI: 000000000000000c [ 2195.260033] RBP: 00007ffd4d0d9950 R08: 00007ffd4d175000 R09: 0000022cbb8d39a0 [ 2195.362508] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2195.362876] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd4d0d9760 [ 2195.366223] Node 0 DMA32 free:17696kB min:35996kB low:44992kB high:53988kB active_anon:60652kB inactive_anon:59864kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7616kB pagetables:2056kB bounce:0kB free_pcp:2616kB local_pcp:1136kB free_cma:0kB [ 2195.371564] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005ede56f9ccc47 [ 2195.389483] Mem-Info: [ 2195.404791] lowmem_reserve[]: 0 0 1 1 1 [ 2195.413851] active_anon:15491 inactive_anon:17003 isolated_anon:0 [ 2195.413851] active_file:14 inactive_file:14 isolated_file:0 [ 2195.413851] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2195.413851] slab_reclaimable:15100 slab_unreclaimable:125064 [ 2195.413851] mapped:22109 shmem:17528 pagetables:568 bounce:0 [ 2195.413851] free:13827 free_pcp:830 free_cma:0 [ 2195.450790] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2195.485242] Node 0 active_anon:60652kB inactive_anon:59864kB active_file:52kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88436kB dirty:0kB writeback:0kB shmem:61892kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2195.539414] Node 1 active_anon:1312kB inactive_anon:8148kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2195.569211] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2195.582649] lowmem_reserve[]: 0 0 0 0 0 [ 2195.610944] Node 1 Normal free:26720kB min:53876kB low:67344kB high:80812kB active_anon:1312kB inactive_anon:8148kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:216kB bounce:0kB free_pcp:704kB local_pcp:248kB free_cma:0kB [ 2195.612833] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2195.654902] lowmem_reserve[]: 0 0 0 0 0 [ 2195.658910] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 2195.669470] Node 0 DMA32 free:17696kB min:35996kB low:44992kB high:53988kB active_anon:60652kB inactive_anon:59864kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7616kB pagetables:2056kB bounce:0kB free_pcp:2616kB local_pcp:1480kB free_cma:0kB [ 2195.693975] Node 0 DMA32: 1050*4kB (ME) 665*8kB (UME) 205*16kB (ME) 45*32kB (ME) 22*64kB (ME) 12*128kB (ME) 2*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17696kB [ 2195.703798] lowmem_reserve[]: 0 0 1 1 1 [ 2195.728532] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2195.739466] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2195.750559] Node 1 Normal: 144*4kB (UME) 116*8kB (UME) 88*16kB (ME) 70*32kB (UME) 35*64kB (UME) 19*128kB (UME) 12*256kB (ME) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 2*4096kB (U) = 26720kB [ 2195.794456] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2195.799441] lowmem_reserve[]: 0 0 0 0 0 [ 2195.807280] Node 1 Normal free:26720kB min:53876kB low:67344kB high:80812kB active_anon:1312kB inactive_anon:8148kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:160kB pagetables:216kB bounce:0kB free_pcp:704kB local_pcp:456kB free_cma:0kB [ 2195.808195] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2195.858745] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2195.867686] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2195.883042] lowmem_reserve[]: 0 0 0 0 0 [ 2195.887810] 17556 total pagecache pages [ 2195.892000] 0 pages in swap cache [ 2195.895448] Swap cache stats: add 0, delete 0, find 0/0 [ 2195.899968] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 2195.907031] Free swap = 0kB [ 2195.916651] Total swap = 0kB [ 2195.920656] Node 0 DMA32: 1050*4kB (ME) 877*8kB (UME) 206*16kB (UME) 45*32kB (ME) 22*64kB (ME) 12*128kB (ME) 2*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19408kB [ 2195.925433] 2097051 pages RAM [ 2195.946749] 0 pages HighMem/MovableOnly [ 2195.949421] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2195.950946] 369649 pages reserved [ 2195.971211] 0 pages cma reserved [ 2195.974590] Unreclaimable slab info: [ 2195.977659] Node 1 Normal: 4*4kB (UE) 84*8kB (UME) 80*16kB (UME) 65*32kB (UME) 39*64kB (UME) 23*128kB (UME) 14*256kB (UME) 4*512kB (UM) 3*1024kB (UM) 2*2048kB (U) 22*4096kB (U) = 112400kB [ 2195.978292] Name Used Total [ 2196.007486] pid_2 127KB 220KB [ 2196.013589] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2196.028945] batadv_tl_cache 4KB 12KB [ 2196.037612] TIPC 10KB 22KB [ 2196.048611] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2196.058381] SCTPv6 14KB 24KB [ 2196.069765] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2196.078619] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2196.097928] DCCPv6 17KB 22KB [ 2196.105377] DCCP 16KB 21KB [ 2196.114957] RXRPC 11KB 13KB [ 2196.121278] rxrpc_call_jar 78KB 86KB [ 2196.126653] bridge_fdb_cache 7KB 11KB [ 2196.136950] 18237 total pagecache pages [ 2196.138509] fib6_nodes 155KB 184KB [ 2196.140998] 0 pages in swap cache [ 2196.141006] Swap cache stats: add 0, delete 0, find 0/0 [ 2196.141012] Free swap = 0kB [ 2196.141016] Total swap = 0kB [ 2196.141024] 2097051 pages RAM [ 2196.141029] 0 pages HighMem/MovableOnly [ 2196.141034] 369649 pages reserved [ 2196.141038] 0 pages cma reserved [ 2196.185788] ip6_dst_cache 68KB 318KB [ 2196.191274] RAWv6 70KB 81KB [ 2196.197247] UDPv6 26KB 30KB [ 2196.218668] TCPv6 24KB 30KB [ 2196.228981] nf_conntrack 5KB 7KB [ 2196.238498] t10_alua_lu_gp_cache 0KB 3KB [ 2196.247335] sd_ext_cdb 0KB 7KB [ 2196.256640] scsi_sense_cache 1056KB 1060KB [ 2196.290725] virtio_scsi_cmd 16KB 16KB [ 2196.305460] sgpool-128 8KB 8KB [ 2196.313489] sgpool-64 4KB 12KB [ 2196.333138] sgpool-32 2KB 15KB [ 2196.346754] sgpool-16 1KB 7KB [ 2196.356568] sgpool-8 0KB 7KB [ 2196.374113] mqueue_inode_cache 10KB 15KB [ 2196.379815] bio_post_read_ctx 14KB 15KB [ 2196.385243] bio-2 14KB 15KB [ 2196.395606] jfs_mp 7KB 7KB [ 2196.402383] cifs_small_rq 15KB 16KB [ 2196.407845] cifs_request 67KB 67KB [ 2196.417982] cifs_mpx_ids 0KB 7KB [ 2196.424401] nfs_commit_data 3KB 14KB [ 2196.437140] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2196.447454] nfs_write_data 34KB 44KB [ 2196.460276] ext4_system_zone 1KB 7KB [ 2196.466063] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2196.470610] kioctx 3KB 7KB [ 2196.485211] aio_kiocb 21KB 26KB [ 2196.490876] bio-1 1KB 7KB [ 2196.491142] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2196.496236] pid_namespace 2KB 7KB [ 2196.509589] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2196.513588] rpc_buffers 17KB 25KB [ 2196.516417] systemd[1]: Stopped Journal Service. [ 2196.528211] rpc_tasks 2KB 7KB [ 2196.539197] UNIX 120KB 123KB [ 2196.547256] systemd[1]: Starting Journal Service... [ 2196.555561] ip_mrt_cache 15KB 24KB [ 2196.568733] tcp_bind_bucket 1KB 4KB [ 2196.581933] ip_fib_trie 23KB 27KB [ 2196.588531] ip_fib_alias 111KB 130KB [ 2196.600397] ip_dst_cache 4KB 16KB [ 2196.605781] RAW 61KB 75KB [ 2196.615128] UDP 25KB 47KB [ 2196.623079] TCP 14KB 22KB [ 2196.634757] hugetlbfs_inode_cache 3KB 15KB [ 2196.647681] fscache_cookie_jar 1KB 7KB [ 2196.657580] eventpoll_pwq 34KB 51KB [ 2196.663825] eventpoll_epi 53KB 66KB [ 2196.674307] inotify_inode_mark 38KB 70KB [ 2196.680832] request_queue 199KB 199KB [ 2196.686202] blkdev_requests 1KB 3KB [ 2196.701688] blkdev_ioc 19KB 19KB [ 2196.707076] bio-0 265KB 266KB [ 2196.718706] biovec-max 1303KB 1353KB [ 2196.725785] biovec-64 221KB 228KB [ 2196.735378] biovec-16 30KB 33KB [ 2196.742435] bio_integrity_payload 1KB 8KB [ 2196.754033] khugepaged_mm_slot 15KB 34KB [ 2196.761200] uid_cache 0KB 4KB [ 2196.768926] dmaengine-unmap-2 0KB 3KB [ 2196.787664] skbuff_fclone_cache 156KB 217KB [ 2196.796711] skbuff_head_cache 1766KB 3052KB [ 2196.803990] configfs_dir_cache 3KB 7KB [ 2196.812974] file_lock_cache 193KB 293KB [ 2196.818370] file_lock_ctx 9KB 11KB [ 2196.825443] fsnotify_mark_connector 20KB 47KB [ 2196.835025] net_namespace 52KB 52KB [ 2196.836109] systemd-journald[3540]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2196.842088] shmem_inode_cache 8663KB 8691KB [ 2196.868097] task_delay_info 273KB 450KB [ 2196.873580] taskstats 122KB 202KB [ 2196.878944] proc_dir_entry 697KB 727KB [ 2196.889232] pde_opener 9KB 38KB [ 2196.894803] seq_file 290KB 492KB [ 2196.905090] sigqueue 66KB 66KB [ 2196.910514] kernfs_node_cache 18505KB 18510KB [ 2196.915878] mnt_cache 173KB 184KB [ 2196.926136] filp 5320KB 7275KB [ 2196.944038] names_cache 159077KB 159077KB [ 2196.949476] iint_cache 27KB 43KB [ 2196.965030] systemd-journald[3540]: /dev/kmsg buffer overrun, some messages lost. [ 2196.972944] key_jar 4KB 7KB [ 2196.978323] uts_namespace 2KB 7KB [ 2197.004051] nsproxy 9KB 15KB [ 2197.009560] vm_area_struct 4003KB 4764KB [ 2197.014926] mm_struct 615KB 890KB [ 2197.044178] fs_cache 136KB 348KB [ 2197.049618] files_cache 519KB 708KB [ 2197.069307] signal_cache 1043KB 1487KB [ 2197.074708] sighand_cache 545KB 596KB [ 2197.099343] task_struct 9007KB 9064KB [ 2197.104735] cred_jar 1076KB 1912KB [ 2197.119316] anon_vma_chain 1435KB 1673KB [ 2197.124697] anon_vma 160KB 281KB [ 2197.130110] pid 64KB 232KB [ 2197.135465] Acpi-Operand 156KB 202KB [ 2197.159339] Acpi-ParseExt 9KB 11KB [ 2197.164732] Acpi-Parse 41KB 47KB [ 2197.179361] Acpi-State 52KB 63KB [ 2197.184754] Acpi-Namespace 21KB 27KB [ 2197.199344] numa_policy 0KB 3KB [ 2197.204726] debug_objects_cache 1197KB 1595KB [ 2197.219304] trace_event_file 297KB 298KB [ 2197.225034] ftrace_event_field 398KB 405KB [ 2197.250514] pool_workqueue 121KB 128KB [ 2197.255907] page->ptl 720KB 992KB [ 2197.261364] kmalloc-2097152 2050KB 2050KB [ 2197.266727] kmalloc-524288 2056KB 2056KB [ 2197.289360] kmalloc-262144 1290KB 1290KB [ 2197.294757] kmalloc-131072 650KB 650KB [ 2197.309302] kmalloc-65536 1848KB 1914KB [ 2197.314693] kmalloc-32768 1650KB 1650KB [ 2197.329306] kmalloc-16384 973KB 990KB [ 2197.334701] kmalloc-8192 4108KB 4149KB [ 2197.340142] kmalloc-4096 20540KB 20578KB [ 2197.345510] kmalloc-2048 12305KB 12794KB [ 2197.350915] kmalloc-1024 5573KB 7749KB [ 2197.356276] kmalloc-512 6665KB 8985KB [ 2197.361724] kmalloc-256 4340KB 4781KB [ 2197.367087] kmalloc-128 940KB 1382KB [ 2197.372507] kmalloc-96 2811KB 4000KB [ 2197.377869] kmalloc-64 2749KB 3744KB [ 2197.383307] kmalloc-32 1806KB 2445KB [ 2197.388671] kmalloc-192 1569KB 2304KB [ 2197.394081] kmem_cache 177KB 180KB [ 2197.399536] Out of memory (oom_kill_allocating_task): Kill process 29654 (in:imklog) score 0 or sacrifice child [ 2197.409878] Killed process 29652 (rsyslogd) total-vm:254332kB, anon-rss:712kB, file-rss:0kB, shmem-rss:0kB [ 2197.421892] oom_reaper: reaped process 29652 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2197.435563] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 2197.451586] systemd[1]: rsyslog.service: Unit entered failed state. [ 2197.458307] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 2197.618009] systemd[1]: Started Journal Service. 11:43:09 executing program 1: ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @raw_data="56c50de32fd8f817ae9ce102c038eb572058aa277c72add0481c5e5bbea231ee5d910fddb455af1310232243c7b722accc0b15d66359587d638d21e3a515e534ce1400d8e027f349c47122c8cee8720b1c8ae69108c0fe08f715412a54ce08c3bb6fae3b2c719c06f754524688522cfbc86f5c39cf1d50aa18a1d3b970735d0d6a04eb6af7a6732f77edf2da841f2276aac00ecbf719b06bffcd19328be77c9e8e20798286f2a6675c86544a04425c43f46233f784a7ac0bb212efc82d0cff6f7fceb05d531e42a7"}, 0xffffffff}) 11:43:09 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/238}) (async) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000000)) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000080)) (async) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{}]}) (async) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) (async, rerun: 32) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) (rerun: 32) ioctl$TIOCSIG(r0, 0x40045436, 0x29) (async) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000100)=0x8) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x303902, 0x0) (async) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0xf800, 0x7, 0x5, 0x4, 0x8, "cb478a4a5b61eb7a"}) (async) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x7, 0x0, 0x0, 0x0, 0xb7e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 11:43:09 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000006c0)) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f00000000c0)={0xfffffffa, 0x0, 0x200e, 0x200, 0xfffffffd, 0x3}) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x800, 0x1, '\x00', &(0x7f0000000000)=0x9}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x80, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}, 0x1f}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000006c0)) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f00000000c0)={0xfffffffa, 0x0, 0x200e, 0x200, 0xfffffffd, 0x3}) (async) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x800, 0x1, '\x00', &(0x7f0000000000)=0x9}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x80, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}, 0x1f}) (async) 11:43:09 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @raw_data=[0x7fffffff, 0x40, 0x6, 0x0, 0xfff, 0x0, 0x3f, 0x1, 0x2, 0x9, 0x2, 0xffffffff, 0x5, 0xfffffff7, 0x10001, 0x7fff, 0xfffffff7, 0x7, 0xfff, 0x0, 0x2, 0xa6b0, 0x6, 0x9, 0x8, 0xeb, 0xfff, 0x0, 0x81, 0xffff, 0xf29e, 0x400]}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @raw_data=[0x7fffffff, 0x40, 0x6, 0x0, 0xfff, 0x0, 0x3f, 0x1, 0x2, 0x9, 0x2, 0xffffffff, 0x5, 0xfffffff7, 0x10001, 0x7fff, 0xfffffff7, 0x7, 0xfff, 0x0, 0x2, 0xa6b0, 0x6, 0x9, 0x8, 0xeb, 0xfff, 0x0, 0x81, 0xffff, 0xf29e, 0x400]}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) (async) 11:43:09 executing program 0: ioctl$VIDIOC_G_ENC_INDEX(0xffffffffffffffff, 0x8818564c, &(0x7f0000000cc0)) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff]}}}) (async) ioctl$VIDIOC_G_AUDIO(0xffffffffffffffff, 0x80345621, &(0x7f0000000140)) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000100)=0x4) (async) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x200, 0xc, 0x2, "c55651834f4ad73a21adc7cf64dfa60600"}) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x0, 0x4, 0x200, '\x00', &(0x7f0000000040)=0x3f}) 11:43:09 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0xc4c8, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x7f]}}}) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x5, 0x800, 0x0, 0x2, 0x1fc, 0x800, 0x2b1, 0x3, 0x7f, 0x8, 0x80000000, 0xbe, 0x7f, 0x6, 0x3, 0x10, {0x2, 0x1ff}, 0x1a, 0x2}}) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000080)={0xc7f4, 0x38}) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f00000000c0)={0x0, 0x0, '\x00', {0x0, @reserved}}) 11:43:09 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000480)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40]}}}) 11:43:10 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0xc4c8, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x7f]}}}) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x5, 0x800, 0x0, 0x2, 0x1fc, 0x800, 0x2b1, 0x3, 0x7f, 0x8, 0x80000000, 0xbe, 0x7f, 0x6, 0x3, 0x10, {0x2, 0x1ff}, 0x1a, 0x2}}) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000080)={0xc7f4, 0x38}) (async) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f00000000c0)={0x0, 0x0, '\x00', {0x0, @reserved}}) 11:43:10 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/238}) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000000)) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000080)) (async) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{}]}) (async) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x29) (async) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000100)=0x8) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x303902, 0x0) (async) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0xf800, 0x7, 0x5, 0x4, 0x8, "cb478a4a5b61eb7a"}) (async) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x7, 0x0, 0x0, 0x0, 0xb7e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 11:43:10 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000080)={0x3, "0203370487762b9fa3d2a4c02a99b02a1b5bb8c2c65be454c215348d854e5d12", 0x3, 0x2, 0x72, 0x1, 0x0, 0x3, 0x4, 0x3}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x98980, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000180)={0x9d0000, 0xfffffff7, 0xbf32, r2, 0x0, &(0x7f0000000140)={0x9b0906, 0x8, '\x00', @ptr=0x4b4}}) 11:43:10 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000480)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40]}}}) 11:43:11 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) clock_gettime(0x4, &(0x7f0000000080)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) [ 2205.190172] oom_reaper: reaped process 3568 (syz-executor.1), now anon-rss:0kB, file-rss:14336kB, shmem-rss:4kB [ 2205.221959] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2205.235298] systemd-journal cpuset=/ mems_allowed=0-1 [ 2205.240575] CPU: 1 PID: 3540 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 2205.248456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2205.257805] Call Trace: [ 2205.260400] dump_stack+0x1fc/0x2ef [ 2205.264030] dump_header+0x15d/0xc3f [ 2205.267735] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2205.272817] ? ___ratelimit+0x319/0x590 [ 2205.276775] oom_kill_process.cold+0x10/0x692 [ 2205.281260] ? check_preemption_disabled+0x41/0x280 [ 2205.286258] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2205.291516] out_of_memory+0x1072/0x1390 [ 2205.295557] ? oom_killer_disable+0x270/0x270 [ 2205.300049] ? mutex_trylock+0x15f/0x1a0 [ 2205.304117] __alloc_pages_nodemask+0x23a2/0x2890 [ 2205.308953] ? find_get_entry+0x4cd/0x8a0 [ 2205.313089] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2205.317941] alloc_pages_current+0x193/0x2a0 [ 2205.322351] filemap_fault+0x146e/0x2180 [ 2205.326403] ext4_filemap_fault+0x84/0xb0 [ 2205.330532] __do_fault+0x10b/0x4b0 [ 2205.334144] __handle_mm_fault+0x273b/0x41c0 [ 2205.338537] ? vm_insert_page+0x9c0/0x9c0 [ 2205.342678] ? check_preemption_disabled+0x41/0x280 [ 2205.347678] handle_mm_fault+0x436/0xb10 [ 2205.351729] __do_page_fault+0x68e/0xd60 [ 2205.355775] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2205.360770] ? spurious_fault+0x840/0x840 [ 2205.364916] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2205.369753] ? page_fault+0x8/0x30 [ 2205.373282] page_fault+0x1e/0x30 [ 2205.376722] RIP: 0033:0x7f1f4e0f72e3 [ 2205.380428] Code: Bad RIP value. [ 2205.383770] RSP: 002b:00007ffdef9daaa8 EFLAGS: 00010246 [ 2205.389114] RAX: 0000000000000001 RBX: 000055bf1e7ce1e0 RCX: 00007f1f4e0f72e3 [ 2205.396362] RDX: 0000000000000013 RSI: 00007ffdef9daab0 RDI: 000000000000000c [ 2205.403611] RBP: 00007ffdef9daca0 R08: 00007ffdef9e7000 R09: 00000233f7bac1f7 [ 2205.410859] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdef9daab0 [ 2205.418106] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005ede5714bdbd2 [ 2205.427600] Mem-Info: [ 2205.430082] active_anon:15633 inactive_anon:19035 isolated_anon:0 [ 2205.430082] active_file:15 inactive_file:15 isolated_file:0 [ 2205.430082] unevictable:0 dirty:1 writeback:0 unstable:0 [ 2205.430082] slab_reclaimable:14988 slab_unreclaimable:123943 [ 2205.430082] mapped:22146 shmem:19576 pagetables:569 bounce:0 [ 2205.430082] free:13844 free_pcp:263 free_cma:0 [ 2205.437475] syz-executor.1: vmalloc: allocation failure, allocated 2513305600 of 3501035520 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2205.468285] Node 0 active_anon:61168kB inactive_anon:59800kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87060kB dirty:0kB writeback:0kB shmem:61892kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2205.482823] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2205.508395] Node 1 active_anon:1364kB inactive_anon:16340kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1524kB dirty:4kB writeback:0kB shmem:16412kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2205.514590] CPU: 0 PID: 3568 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2205.540348] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2205.544756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2205.575756] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2205.580173] Call Trace: [ 2205.580194] dump_stack+0x1fc/0x2ef [ 2205.580211] warn_alloc.cold+0x7b/0x18f [ 2205.580230] ? zone_watermark_ok_safe+0x260/0x260 [ 2205.585217] Node 0 DMA32 free:17844kB min:35996kB low:44992kB high:53988kB active_anon:61168kB inactive_anon:59800kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7680kB pagetables:2104kB bounce:0kB free_pcp:552kB local_pcp:304kB free_cma:0kB [ 2205.587788] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2205.594644] lowmem_reserve[]: 0 0 1 1 1 [ 2205.595361] __vmalloc_area_node+0x4fd/0x780 [ 2205.600186] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2205.629037] ? __vmalloc_node_range+0x180/0x180 [ 2205.629051] ? _raw_spin_unlock+0x29/0x40 [ 2205.629063] ? __get_vm_area_node+0x2e2/0x3a0 [ 2205.629080] __vmalloc_node_range+0xed/0x180 [ 2205.629095] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2205.629108] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2205.629120] vmalloc_user+0x70/0xe0 [ 2205.629136] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2205.637054] lowmem_reserve[]: 0 0 0 0 0 [ 2205.637820] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2205.642230] Node 1 Normal free:26656kB min:53876kB low:67344kB high:80812kB active_anon:1364kB inactive_anon:16340kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:64kB pagetables:172kB bounce:0kB free_pcp:500kB local_pcp:252kB free_cma:0kB [ 2205.668038] __vb2_queue_alloc+0x472/0xe60 [ 2205.668063] vb2_core_create_bufs+0x273/0x7e0 [ 2205.668078] ? __vb2_queue_free+0x870/0x870 [ 2205.668091] ? __video_do_ioctl+0x632/0xcd0 [ 2205.668107] ? __mutex_lock+0x368/0x1190 [ 2205.668122] vb2_create_bufs+0x332/0x620 [ 2205.668138] ? mark_held_locks+0xf0/0xf0 [ 2205.668151] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2205.668164] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 2205.668180] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2205.668200] v4l_create_bufs+0xb2/0x160 [ 2205.668216] __video_do_ioctl+0x49a/0xcd0 [ 2205.668236] ? v4l_querycap+0x340/0x340 [ 2205.668253] ? __might_fault+0x192/0x1d0 [ 2205.668270] ? v4l_querycap+0x340/0x340 [ 2205.668285] video_usercopy+0x13f/0xfa0 [ 2205.668306] ? v4l_enumstd+0x60/0x60 [ 2205.668320] ? do_futex+0x171/0x1880 [ 2205.668335] ? mark_held_locks+0xf0/0xf0 [ 2205.668352] ? debug_check_no_obj_freed+0x201/0x490 [ 2205.668374] ? video_usercopy+0xfa0/0xfa0 [ 2205.668385] v4l2_ioctl+0x147/0x1a0 [ 2205.668397] ? video_devdata+0xa0/0xa0 [ 2205.668413] do_vfs_ioctl+0xcdb/0x12e0 [ 2205.668428] ? lock_downgrade+0x720/0x720 [ 2205.668443] ? check_preemption_disabled+0x41/0x280 [ 2205.668456] ? ioctl_preallocate+0x200/0x200 [ 2205.668473] ? __fget+0x356/0x510 [ 2205.668488] ? do_dup2+0x450/0x450 [ 2205.668502] ? __se_sys_futex+0x298/0x3b0 [ 2205.668523] ksys_ioctl+0x9b/0xc0 [ 2205.668539] __x64_sys_ioctl+0x6f/0xb0 [ 2205.668552] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2205.668566] do_syscall_64+0xf9/0x620 [ 2205.668584] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2205.668596] RIP: 0033:0x7fa651442639 [ 2205.668609] Code: Bad RIP value. [ 2205.668616] RSP: 002b:00007fa64f9b5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2205.668629] RAX: ffffffffffffffda RBX: 00007fa651562f80 RCX: 00007fa651442639 [ 2205.668637] RDX: 0000000020000380 RSI: 00000000c100565c RDI: 0000000000000003 [ 2205.668644] RBP: 00007fa65149dae9 R08: 0000000000000000 R09: 0000000000000000 [ 2205.668651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2205.668658] R13: 00007ffdac6e7cbf R14: 00007fa64f9b5300 R15: 0000000000022000 [ 2205.674592] Mem-Info: [ 2205.681989] lowmem_reserve[]: 0 0 0 0 0 [ 2205.683662] active_anon:15633 inactive_anon:19035 isolated_anon:0 [ 2205.683662] active_file:15 inactive_file:15 isolated_file:0 [ 2205.683662] unevictable:0 dirty:1 writeback:0 unstable:0 [ 2205.683662] slab_reclaimable:14988 slab_unreclaimable:123943 [ 2205.683662] mapped:22146 shmem:19576 pagetables:569 bounce:0 [ 2205.683662] free:13844 free_pcp:263 free_cma:0 [ 2205.687368] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 2205.696220] Node 0 active_anon:61168kB inactive_anon:59800kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87060kB dirty:0kB writeback:0kB shmem:61892kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2205.697076] Node 0 DMA32: 1107*4kB (UME) 649*8kB (ME) 202*16kB (UME) 42*32kB (UME) 15*64kB (UME) 7*128kB (ME) 3*256kB (M) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 17844kB [ 2205.700875] Node 1 active_anon:1364kB inactive_anon:16340kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1524kB dirty:4kB writeback:0kB shmem:16412kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2205.707131] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2205.713528] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2205.743012] Node 1 Normal: 154*4kB (ME) 137*8kB (UME) 107*16kB (UME) 74*32kB (ME) 56*64kB (ME) 27*128kB (ME) 10*256kB (UME) 0*512kB 1*1024kB (U) 1*2048kB (U) 2*4096kB (U) = 26656kB [ 2205.750474] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2205.754765] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2205.759095] Node 0 DMA32 free:17844kB min:35996kB low:44992kB high:53988kB active_anon:61168kB inactive_anon:59800kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7680kB pagetables:2104kB bounce:0kB free_pcp:552kB local_pcp:248kB free_cma:0kB [ 2205.759124] lowmem_reserve[]: 0 0 1 1 1 [ 2205.759139] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2205.759166] lowmem_reserve[]: 0 0 0 0 0 [ 2205.759183] Node 1 Normal free:26656kB min:53876kB low:67344kB high:80812kB active_anon:1364kB inactive_anon:16340kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:64kB pagetables:172kB bounce:0kB free_pcp:500kB local_pcp:248kB free_cma:0kB [ 2205.759210] lowmem_reserve[]: 0 0 0 0 0 [ 2205.759228] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 2205.759291] Node 0 DMA32: 1107*4kB (UME) 649*8kB (ME) 202*16kB (UME) 42*32kB (UME) 15*64kB (UME) 7*128kB (ME) 3*256kB (M) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 17844kB [ 2205.759359] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2205.759424] Node 1 Normal: 154*4kB (ME) 137*8kB (UME) 107*16kB (UME) 74*32kB (ME) 56*64kB (ME) 27*128kB (ME) 10*256kB (UME) 0*512kB 1*1024kB (U) 1*2048kB (U) 2*4096kB (U) = 26656kB [ 2205.759503] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2205.759513] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2205.759523] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2205.759532] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2205.759538] 19606 total pagecache pages [ 2205.759550] 0 pages in swap cache [ 2205.759558] Swap cache stats: add 0, delete 0, find 0/0 [ 2205.759563] Free swap = 0kB [ 2205.759567] Total swap = 0kB [ 2205.759575] 2097051 pages RAM [ 2205.759579] 0 pages HighMem/MovableOnly [ 2205.759584] 369649 pages reserved [ 2205.759588] 0 pages cma reserved [ 2206.364375] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2206.391026] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2206.414751] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2206.438257] 19606 total pagecache pages [ 2206.442257] 0 pages in swap cache [ 2206.445705] Swap cache stats: add 0, delete 0, find 0/0 [ 2206.451221] Free swap = 0kB [ 2206.454232] Total swap = 0kB [ 2206.457243] 2097051 pages RAM [ 2206.460405] 0 pages HighMem/MovableOnly [ 2206.464369] 369649 pages reserved [ 2206.467807] 0 pages cma reserved [ 2206.471214] Unreclaimable slab info: [ 2206.476579] Name Used Total [ 2206.482209] pid_2 111KB 220KB [ 2206.487639] batadv_tl_cache 4KB 12KB [ 2206.493237] TIPC 10KB 22KB [ 2206.498692] SCTPv6 14KB 24KB [ 2206.504058] DCCPv6 17KB 22KB [ 2206.509479] DCCP 16KB 21KB [ 2206.514868] RXRPC 11KB 13KB [ 2206.520291] rxrpc_call_jar 78KB 86KB [ 2206.525663] bridge_fdb_cache 7KB 11KB [ 2206.531079] fib6_nodes 155KB 184KB [ 2206.536438] ip6_dst_cache 75KB 318KB [ 2206.541871] RAWv6 70KB 81KB [ 2206.547233] UDPv6 26KB 30KB [ 2206.552646] TCPv6 27KB 36KB [ 2206.558012] nf_conntrack 6KB 7KB [ 2206.563484] t10_alua_lu_gp_cache 0KB 3KB [ 2206.569167] sd_ext_cdb 0KB 7KB [ 2206.574528] scsi_sense_cache 1056KB 1060KB [ 2206.581657] virtio_scsi_cmd 16KB 16KB [ 2206.587028] sgpool-128 8KB 8KB [ 2206.592438] sgpool-64 4KB 12KB [ 2206.597802] sgpool-32 2KB 15KB [ 2206.603247] sgpool-16 1KB 7KB [ 2206.608655] sgpool-8 0KB 7KB [ 2206.614021] mqueue_inode_cache 10KB 15KB [ 2206.619539] bio_post_read_ctx 14KB 15KB [ 2206.624963] bio-2 14KB 15KB [ 2206.630378] jfs_mp 7KB 7KB [ 2206.635765] cifs_small_rq 15KB 16KB [ 2206.646400] cifs_request 67KB 67KB [ 2206.654929] cifs_mpx_ids 0KB 7KB [ 2206.665394] nfs_commit_data 3KB 14KB [ 2206.674120] nfs_write_data 34KB 44KB [ 2206.686150] ext4_system_zone 1KB 7KB [ 2206.694706] kioctx 3KB 7KB [ 2206.705386] aio_kiocb 20KB 26KB [ 2206.713933] bio-1 1KB 7KB [ 2206.724679] pid_namespace 2KB 7KB [ 2206.733416] rpc_buffers 17KB 25KB [ 2206.743805] rpc_tasks 2KB 7KB [ 2206.752497] UNIX 176KB 176KB [ 2206.757876] ip_mrt_cache 15KB 24KB [ 2206.771744] tcp_bind_bucket 1KB 4KB [ 2206.777131] ip_fib_trie 23KB 27KB [ 2206.785873] ip_fib_alias 111KB 130KB [ 2206.798034] ip_dst_cache 4KB 16KB [ 2206.805066] RAW 60KB 75KB [ 2206.817075] UDP 30KB 47KB [ 2206.824223] TCP 11KB 16KB [ 2206.836143] hugetlbfs_inode_cache 3KB 15KB [ 2206.843506] fscache_cookie_jar 1KB 7KB [ 2206.855699] eventpoll_pwq 29KB 51KB [ 2206.864390] eventpoll_epi 53KB 66KB [ 2206.876446] inotify_inode_mark 32KB 70KB [ 2206.883565] request_queue 199KB 199KB [ 2206.897339] blkdev_requests 1KB 3KB [ 2206.904368] blkdev_ioc 13KB 23KB [ 2206.916373] bio-0 347KB 348KB [ 2206.923497] biovec-max 1361KB 1361KB [ 2206.935999] biovec-64 271KB 283KB [ 2206.943054] biovec-16 30KB 33KB [ 2206.951688] bio_integrity_payload 1KB 8KB [ 2206.957476] khugepaged_mm_slot 13KB 34KB [ 2206.964804] uid_cache 0KB 4KB [ 2206.973549] dmaengine-unmap-2 0KB 3KB [ 2206.980839] skbuff_fclone_cache 123KB 210KB [ 2206.991776] skbuff_head_cache 2407KB 3052KB [ 2206.997272] configfs_dir_cache 3KB 7KB [ 2207.004450] file_lock_cache 169KB 293KB [ 2207.013167] file_lock_ctx 9KB 11KB [ 2207.021898] fsnotify_mark_connector 17KB 47KB [ 2207.027940] net_namespace 52KB 52KB [ 2207.036570] shmem_inode_cache 8594KB 8691KB [ 2207.043776] task_delay_info 250KB 450KB [ 2207.052630] taskstats 102KB 195KB [ 2207.058056] proc_dir_entry 697KB 727KB [ 2207.065212] pde_opener 8KB 38KB [ 2207.073827] seq_file 288KB 492KB [ 2207.080928] sigqueue 50KB 66KB [ 2207.086394] kernfs_node_cache 18488KB 18510KB [ 2207.096737] mnt_cache 173KB 184KB [ 2207.105513] filp 5800KB 7275KB [ 2207.114158] names_cache 158852KB 158890KB [ 2207.121397] iint_cache 23KB 43KB [ 2207.126766] key_jar 4KB 7KB [ 2207.135410] uts_namespace 2KB 7KB [ 2207.142505] nsproxy 3KB 15KB [ 2207.147882] vm_area_struct 3901KB 4764KB [ 2207.156480] mm_struct 568KB 877KB [ 2207.163522] fs_cache 117KB 344KB [ 2207.172066] files_cache 466KB 701KB [ 2207.177530] signal_cache 957KB 1480KB [ 2207.184535] sighand_cache 536KB 596KB [ 2207.194394] task_struct 8338KB 8395KB [ 2207.201547] cred_jar 1214KB 1912KB [ 2207.206916] anon_vma_chain 1360KB 1673KB [ 2207.215587] anon_vma 152KB 281KB [ 2207.222603] pid 59KB 232KB [ 2207.227970] Acpi-Operand 156KB 202KB [ 2207.236879] Acpi-ParseExt 9KB 11KB [ 2207.243901] Acpi-Parse 41KB 47KB [ 2207.252455] Acpi-State 52KB 63KB [ 2207.257914] Acpi-Namespace 21KB 27KB [ 2207.264933] numa_policy 0KB 3KB [ 2207.273465] debug_objects_cache 1196KB 1595KB [ 2207.280665] trace_event_file 297KB 298KB [ 2207.286033] ftrace_event_field 398KB 405KB [ 2207.295902] pool_workqueue 121KB 128KB [ 2207.302926] page->ptl 664KB 992KB [ 2207.312028] kmalloc-2097152 2050KB 2050KB [ 2207.317487] kmalloc-524288 2056KB 2056KB [ 2207.324516] kmalloc-262144 1290KB 1290KB [ 2207.333224] kmalloc-131072 650KB 650KB [ 2207.340254] kmalloc-65536 1848KB 1914KB [ 2207.345635] kmalloc-32768 1650KB 1650KB [ 2207.354188] kmalloc-16384 973KB 990KB [ 2207.361242] kmalloc-8192 4075KB 4116KB [ 2207.366615] kmalloc-4096 20200KB 20238KB [ 2207.375166] kmalloc-2048 12210KB 12794KB [ 2207.382179] kmalloc-1024 5517KB 7741KB [ 2207.387548] kmalloc-512 7863KB 8977KB [ 2207.397440] kmalloc-256 4302KB 4781KB [ 2207.404455] kmalloc-128 922KB 1382KB [ 2207.413203] kmalloc-96 2938KB 4000KB [ 2207.420349] kmalloc-64 2679KB 3744KB [ 2207.425717] kmalloc-32 1801KB 2445KB [ 2207.434386] kmalloc-192 1546KB 2304KB [ 2207.441431] kmem_cache 177KB 180KB [ 2207.446800] Out of memory (oom_kill_allocating_task): Kill process 3540 (systemd-journal) score 0 or sacrifice child [ 2207.462385] Killed process 3540 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:0kB, shmem-rss:1300kB [ 2207.473903] oom_reaper: reaped process 3540 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1300kB [ 2207.553952] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2207.568506] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2207.587502] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2207.595216] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2207.611406] systemd[1]: Stopped Journal Service. [ 2207.634500] systemd[1]: Starting Journal Service... [ 2207.839822] systemd-journald[3617]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2208.311933] systemd[1]: Started Journal Service. [ 2209.568239] Bluetooth: hci1: command 0x0406 tx timeout 11:43:19 executing program 1: ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @raw_data="56c50de32fd8f817ae9ce102c038eb572058aa277c72add0481c5e5bbea231ee5d910fddb455af1310232243c7b722accc0b15d66359587d638d21e3a515e534ce1400d8e027f349c47122c8cee8720b1c8ae69108c0fe08f715412a54ce08c3bb6fae3b2c719c06f754524688522cfbc86f5c39cf1d50aa18a1d3b970735d0d6a04eb6af7a6732f77edf2da841f2276aac00ecbf719b06bffcd19328be77c9e8e20798286f2a6675c86544a04425c43f46233f784a7ac0bb212efc82d0cff6f7fceb05d531e42a7"}, 0xffffffff}) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @raw_data="56c50de32fd8f817ae9ce102c038eb572058aa277c72add0481c5e5bbea231ee5d910fddb455af1310232243c7b722accc0b15d66359587d638d21e3a515e534ce1400d8e027f349c47122c8cee8720b1c8ae69108c0fe08f715412a54ce08c3bb6fae3b2c719c06f754524688522cfbc86f5c39cf1d50aa18a1d3b970735d0d6a04eb6af7a6732f77edf2da841f2276aac00ecbf719b06bffcd19328be77c9e8e20798286f2a6675c86544a04425c43f46233f784a7ac0bb212efc82d0cff6f7fceb05d531e42a7"}, 0xffffffff}) (async) 11:43:19 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000480)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000480)) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40]}}}) (async) 11:43:19 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) clock_gettime(0x4, &(0x7f0000000080)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) clock_gettime(0x4, &(0x7f0000000080)) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) 11:43:19 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000180)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @bt={0x3ff, 0x2, 0x0, 0x2, 0x1ff, 0x0, 0x3, 0x1f, 0xfe33, 0x10000, 0x5, 0x0, 0x9, 0x100, 0x12, 0x0, {0x0, 0x84}, 0x47, 0x6}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000140)={0x4, 0x15228725, @name="bb001116872cabdf001059ba493636889f92e81de8764b75ffd2704ae8d3b8ca"}) 11:43:19 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000080)={0xa, @output={0x1000, 0x1, {0x6, 0x6}, 0x5, 0x9}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}) 11:43:19 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000080)={0x3, "0203370487762b9fa3d2a4c02a99b02a1b5bb8c2c65be454c215348d854e5d12", 0x3, 0x2, 0x72, 0x1, 0x0, 0x3, 0x4, 0x3}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x98980, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000180)={0x9d0000, 0xfffffff7, 0xbf32, r2, 0x0, &(0x7f0000000140)={0x9b0906, 0x8, '\x00', @ptr=0x4b4}}) 11:43:20 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000080)={0x3, "0203370487762b9fa3d2a4c02a99b02a1b5bb8c2c65be454c215348d854e5d12", 0x3, 0x2, 0x72, 0x1, 0x0, 0x3, 0x4, 0x3}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x98980, 0x0) (rerun: 32) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000180)={0x9d0000, 0xfffffff7, 0xbf32, r2, 0x0, &(0x7f0000000140)={0x9b0906, 0x8, '\x00', @ptr=0x4b4}}) 11:43:20 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) clock_gettime(0x4, &(0x7f0000000080)) (async, rerun: 64) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (rerun: 64) 11:43:20 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x3, 0x3, '\x00', &(0x7f0000000140)=0xff}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000100)) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f00000000c0)={0x7, 0x0, 0x2018, 0x40, 0x80000001, 0x8, 0x3, 0x1}) r1 = socket(0x18, 0x0, 0x0) setsockopt$MRT_ASSERT(r1, 0x0, 0xcf, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) 11:43:21 executing program 5: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}}) syz_open_dev$vivid(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0xa20000, 0x3f, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9e0907, 0xfffffff9, '\x00', @p_u32}}) 11:43:21 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0x80000001, 0x2008}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, &(0x7f0000000140)) 11:43:21 executing program 5: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}}) (async) syz_open_dev$vivid(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0xa20000, 0x3f, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9e0907, 0xfffffff9, '\x00', @p_u32}}) [ 2215.607166] oom_reaper: reaped process 3629 (syz-executor.1), now anon-rss:0kB, file-rss:14332kB, shmem-rss:4kB [ 2215.638992] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2215.654957] in:imklog cpuset=/ mems_allowed=0-1 [ 2215.659742] CPU: 1 PID: 3548 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 2215.667096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2215.676710] Call Trace: [ 2215.679305] dump_stack+0x1fc/0x2ef [ 2215.682933] dump_header+0x15d/0xc3f [ 2215.686648] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2215.691746] ? ___ratelimit+0x319/0x590 [ 2215.696944] oom_kill_process.cold+0x10/0x692 [ 2215.701438] ? check_preemption_disabled+0x41/0x280 [ 2215.706457] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2215.711743] out_of_memory+0x1072/0x1390 [ 2215.715810] ? oom_killer_disable+0x270/0x270 [ 2215.720303] ? mutex_trylock+0x15f/0x1a0 [ 2215.724365] __alloc_pages_nodemask+0x23a2/0x2890 [ 2215.729213] ? find_get_entry+0x4cd/0x8a0 [ 2215.733365] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2215.738228] alloc_pages_current+0x193/0x2a0 [ 2215.742628] filemap_fault+0x146e/0x2180 [ 2215.746675] ext4_filemap_fault+0x84/0xb0 [ 2215.750804] __do_fault+0x10b/0x4b0 [ 2215.754414] __handle_mm_fault+0x273b/0x41c0 [ 2215.757198] syz-executor.1: vmalloc: allocation failure, allocated 2490912768 of 3501035520 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2215.758808] ? vm_insert_page+0x9c0/0x9c0 [ 2215.775850] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2215.776704] ? lock_downgrade+0x720/0x720 [ 2215.785911] ? check_preemption_disabled+0x41/0x280 [ 2215.790923] handle_mm_fault+0x436/0xb10 [ 2215.794977] __do_page_fault+0x68e/0xd60 [ 2215.799039] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2215.804053] ? spurious_fault+0x840/0x840 [ 2215.808202] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2215.813043] ? page_fault+0x8/0x30 [ 2215.816573] page_fault+0x1e/0x30 [ 2215.820021] RIP: 0033:0x7fec4f57b22d [ 2215.823727] Code: Bad RIP value. [ 2215.827086] RSP: 002b:00007fec4cf17580 EFLAGS: 00010293 [ 2215.832437] RAX: 0000000000000076 RBX: 0000000000000000 RCX: 00007fec4f57b22d [ 2215.839694] RDX: 0000000000001fa0 RSI: 00007fec4cf17da0 RDI: 0000000000000004 [ 2215.846956] RBP: 000055a842e2a9d0 R08: 0000000000000000 R09: 0000000004000001 [ 2215.854213] R10: 0000000000000001 R11: 0000000000000293 R12: 00007fec4cf17da0 [ 2215.861469] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007fec4cf17ddd [ 2215.870393] CPU: 0 PID: 3629 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2215.877906] Mem-Info: [ 2215.878192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2215.880614] active_anon:16726 inactive_anon:21067 isolated_anon:0 [ 2215.880614] active_file:57 inactive_file:20 isolated_file:0 [ 2215.880614] unevictable:0 dirty:21 writeback:2 unstable:0 [ 2215.880614] slab_reclaimable:14946 slab_unreclaimable:123111 [ 2215.880614] mapped:22132 shmem:21624 pagetables:602 bounce:0 [ 2215.880614] free:13928 free_pcp:579 free_cma:0 [ 2215.889925] Call Trace: [ 2215.889946] dump_stack+0x1fc/0x2ef [ 2215.889962] warn_alloc.cold+0x7b/0x18f [ 2215.889997] ? zone_watermark_ok_safe+0x260/0x260 [ 2215.925608] Node 0 active_anon:65460kB inactive_anon:59800kB active_file:132kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87128kB dirty:64kB writeback:8kB shmem:61892kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2215.925868] ? rcu_nmi_exit+0xb3/0x180 [ 2215.929516] Node 1 active_anon:1444kB inactive_anon:24468kB active_file:96kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1400kB dirty:20kB writeback:0kB shmem:24604kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2215.933439] __vmalloc_area_node+0x4fd/0x780 [ 2215.938255] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2215.966079] ? __vmalloc_node_range+0x180/0x180 [ 2215.966097] ? _raw_spin_unlock+0x29/0x40 [ 2215.969970] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2215.997097] ? __get_vm_area_node+0x2e2/0x3a0 [ 2215.997116] __vmalloc_node_range+0xed/0x180 [ 2215.997132] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2215.997146] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2215.997156] vmalloc_user+0x70/0xe0 [ 2215.997167] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2215.997180] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2215.997193] __vb2_queue_alloc+0x472/0xe60 [ 2215.997218] vb2_core_create_bufs+0x273/0x7e0 [ 2215.997232] ? __vb2_queue_free+0x870/0x870 [ 2215.997251] ? pi_state_update_owner+0x450/0x450 [ 2215.997265] ? __mutex_lock+0x368/0x1190 [ 2215.997280] vb2_create_bufs+0x332/0x620 [ 2215.997296] ? mark_held_locks+0xf0/0xf0 [ 2215.997308] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2215.997321] ? futex_wait_queue_me+0x404/0x5e0 [ 2215.997336] ? pi_state_update_owner+0x450/0x450 [ 2215.997349] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2215.997364] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2215.997386] v4l_create_bufs+0xb2/0x160 [ 2215.997404] __video_do_ioctl+0x49a/0xcd0 [ 2215.997424] ? v4l_querycap+0x340/0x340 [ 2215.997442] ? __might_fault+0x192/0x1d0 [ 2215.997459] ? v4l_querycap+0x340/0x340 [ 2215.997474] video_usercopy+0x13f/0xfa0 [ 2215.997495] ? v4l_enumstd+0x60/0x60 [ 2215.997508] ? do_futex+0x171/0x1880 [ 2215.997523] ? mark_held_locks+0xf0/0xf0 [ 2215.997541] ? debug_check_no_obj_freed+0x201/0x490 [ 2215.997562] ? video_usercopy+0xfa0/0xfa0 [ 2215.997574] v4l2_ioctl+0x147/0x1a0 [ 2215.997586] ? video_devdata+0xa0/0xa0 [ 2215.997602] do_vfs_ioctl+0xcdb/0x12e0 [ 2215.997616] ? lock_downgrade+0x720/0x720 [ 2215.997630] ? check_preemption_disabled+0x41/0x280 [ 2215.997644] ? ioctl_preallocate+0x200/0x200 [ 2215.997662] ? __fget+0x356/0x510 [ 2215.997677] ? do_dup2+0x450/0x450 [ 2215.997691] ? __se_sys_futex+0x298/0x3b0 [ 2215.997712] ksys_ioctl+0x9b/0xc0 [ 2215.997728] __x64_sys_ioctl+0x6f/0xb0 [ 2215.997741] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2215.997754] do_syscall_64+0xf9/0x620 [ 2215.997772] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2215.997783] RIP: 0033:0x7fa651442639 [ 2215.997796] Code: Bad RIP value. [ 2215.997803] RSP: 002b:00007fa64f9b5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2215.997816] RAX: ffffffffffffffda RBX: 00007fa651562f80 RCX: 00007fa651442639 [ 2215.997824] RDX: 0000000020000380 RSI: 00000000c100565c RDI: 0000000000000003 [ 2215.997831] RBP: 00007fa65149dae9 R08: 0000000000000000 R09: 0000000000000000 [ 2215.997838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2215.997846] R13: 00007ffdac6e7cbf R14: 00007fa64f9b5300 R15: 0000000000022000 [ 2216.008563] Mem-Info: [ 2216.036885] Node 0 DMA32 free:17992kB min:35996kB low:44992kB high:53988kB active_anon:65396kB inactive_anon:59800kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7712kB pagetables:2228kB bounce:0kB free_pcp:320kB local_pcp:68kB free_cma:0kB [ 2216.043883] active_anon:16712 inactive_anon:21067 isolated_anon:0 [ 2216.043883] active_file:14 inactive_file:14 isolated_file:0 [ 2216.043883] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2216.043883] slab_reclaimable:14946 slab_unreclaimable:123112 [ 2216.043883] mapped:22109 shmem:21624 pagetables:601 bounce:0 [ 2216.043883] free:13932 free_pcp:580 free_cma:0 [ 2216.047027] lowmem_reserve[]: 0 0 1 1 1 [ 2216.051486] Node 0 active_anon:65396kB inactive_anon:59800kB active_file:52kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87060kB dirty:0kB writeback:0kB shmem:61892kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2216.058513] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2216.068023] Node 1 active_anon:1452kB inactive_anon:24468kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1376kB dirty:0kB writeback:0kB shmem:24604kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2216.074955] lowmem_reserve[]: 0 0 0 0 0 [ 2216.081015] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2216.082329] Node 1 Normal free:26860kB min:53876kB low:67344kB high:80812kB active_anon:1452kB inactive_anon:24468kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:64kB pagetables:176kB bounce:0kB free_pcp:2000kB local_pcp:252kB free_cma:0kB [ 2216.086612] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2216.099778] lowmem_reserve[]: 0 0 0 0 0 [ 2216.110012] Node 0 DMA32 free:17992kB min:35996kB low:44992kB high:53988kB active_anon:65396kB inactive_anon:59800kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7712kB pagetables:2228kB bounce:0kB free_pcp:320kB local_pcp:252kB free_cma:0kB [ 2216.120499] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 2216.123257] lowmem_reserve[]: 0 0 1 1 1 [ 2216.132407] Node 0 DMA32: 1128*4kB (UME) 659*8kB (UME) 205*16kB (UME) 44*32kB (UME) 23*64kB (UME) 8*128kB (ME) 2*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17992kB [ 2216.138030] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2216.143917] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2216.144783] lowmem_reserve[]: 0 0 0 0 0 [ 2216.148841] Node 1 Normal: 217*4kB (M) 161*8kB (ME) 132*16kB (ME) 90*32kB (ME) 52*64kB (ME) 12*128kB (ME) 4*256kB (ME) 1*512kB (M) 1*1024kB (U) 0*2048kB 3*4096kB (U) = 26860kB [ 2216.161406] Node 1 Normal free:26860kB min:53876kB low:67344kB high:80812kB active_anon:1452kB inactive_anon:24468kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:64kB pagetables:176kB bounce:0kB free_pcp:2000kB local_pcp:1748kB free_cma:0kB [ 2216.166493] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2216.172964] lowmem_reserve[]: 0 0 0 0 0 [ 2216.173400] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2216.177000] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 2216.185740] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2216.192651] Node 0 DMA32: 1128*4kB (UME) 659*8kB (UME) 205*16kB (UME) 44*32kB (UME) 23*64kB (UME) 8*128kB (ME) 2*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17992kB [ 2216.193969] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2216.205482] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2216.207097] 21652 total pagecache pages [ 2216.215518] Node 1 Normal: 217*4kB (M) 161*8kB (ME) 132*16kB (ME) 90*32kB (ME) 52*64kB (ME) 12*128kB (ME) 4*256kB (ME) 1*512kB (M) 1*1024kB (U) 0*2048kB 3*4096kB (U) = 26860kB [ 2216.219809] 0 pages in swap cache [ 2216.231664] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2216.234806] Swap cache stats: add 0, delete 0, find 0/0 [ 2216.239496] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2216.247094] Free swap = 0kB [ 2216.264156] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2216.270245] Total swap = 0kB [ 2216.283352] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2216.285070] 2097051 pages RAM [ 2216.324935] 21652 total pagecache pages [ 2216.355426] 0 pages HighMem/MovableOnly [ 2216.385520] 0 pages in swap cache [ 2216.412612] 369649 pages reserved [ 2216.440294] Swap cache stats: add 0, delete 0, find 0/0 [ 2216.469011] 0 pages cma reserved [ 2216.500762] Free swap = 0kB [ 2216.536053] Unreclaimable slab info: [ 2216.550858] Total swap = 0kB [ 2216.568647] Name Used Total [ 2216.592620] 2097051 pages RAM [ 2216.608739] pid_2 105KB 220KB [ 2216.623546] 0 pages HighMem/MovableOnly [ 2216.657818] batadv_tl_cache 4KB 12KB [ 2216.665520] 369649 pages reserved [ 2216.676008] TIPC 10KB 22KB [ 2216.687363] 0 pages cma reserved [ 2216.701153] SCTPv6 14KB 24KB [ 2216.878476] DCCPv6 17KB 22KB [ 2216.883846] DCCP 16KB 21KB [ 2216.889305] RXRPC 11KB 13KB [ 2216.894668] rxrpc_call_jar 78KB 86KB [ 2216.903679] bridge_fdb_cache 7KB 11KB [ 2216.909103] fib6_nodes 155KB 184KB [ 2216.914465] ip6_dst_cache 85KB 318KB [ 2216.923803] RAWv6 70KB 81KB [ 2216.929388] UDPv6 26KB 30KB [ 2216.934752] TCPv6 33KB 42KB [ 2216.943751] nf_conntrack 6KB 7KB [ 2216.949230] t10_alua_lu_gp_cache 0KB 3KB [ 2216.954856] sd_ext_cdb 0KB 7KB [ 2216.963884] scsi_sense_cache 1056KB 1060KB [ 2216.969300] virtio_scsi_cmd 16KB 16KB [ 2216.974665] sgpool-128 8KB 8KB [ 2216.983684] sgpool-64 4KB 12KB [ 2216.989113] sgpool-32 2KB 15KB [ 2216.994471] sgpool-16 1KB 7KB [ 2217.003486] sgpool-8 0KB 7KB [ 2217.008919] mqueue_inode_cache 10KB 15KB [ 2217.014376] bio_post_read_ctx 14KB 15KB [ 2217.023967] bio-2 14KB 15KB [ 2217.029387] jfs_mp 7KB 7KB [ 2217.034775] cifs_small_rq 15KB 16KB [ 2217.043741] cifs_request 67KB 67KB [ 2217.049162] cifs_mpx_ids 0KB 7KB [ 2217.054540] nfs_commit_data 3KB 14KB [ 2217.064673] nfs_write_data 34KB 44KB [ 2217.070224] ext4_system_zone 1KB 7KB [ 2217.075593] kioctx 3KB 7KB [ 2217.087382] aio_kiocb 20KB 26KB [ 2217.092765] bio-1 1KB 7KB [ 2217.101661] pid_namespace 2KB 7KB [ 2217.110654] rpc_buffers 17KB 25KB [ 2217.116019] rpc_tasks 2KB 7KB [ 2217.125084] UNIX 200KB 202KB [ 2217.133869] ip_mrt_cache 15KB 24KB [ 2217.142604] tcp_bind_bucket 1KB 4KB [ 2217.151603] ip_fib_trie 23KB 27KB [ 2217.160593] ip_fib_alias 111KB 130KB [ 2217.165961] ip_dst_cache 4KB 16KB [ 2217.174779] RAW 60KB 75KB [ 2217.183374] UDP 30KB 47KB [ 2217.192344] TCP 11KB 16KB [ 2217.201294] hugetlbfs_inode_cache 3KB 15KB [ 2217.210645] fscache_cookie_jar 1KB 7KB [ 2217.216102] eventpoll_pwq 30KB 51KB [ 2217.224693] eventpoll_epi 55KB 66KB [ 2217.233914] inotify_inode_mark 30KB 70KB [ 2217.242740] request_queue 199KB 199KB [ 2217.251708] blkdev_requests 1KB 3KB [ 2217.260663] blkdev_ioc 16KB 23KB [ 2217.266039] bio-0 525KB 528KB [ 2217.274805] biovec-max 1402KB 1402KB [ 2217.283378] biovec-64 425KB 441KB [ 2217.292308] biovec-16 40KB 48KB [ 2217.301255] bio_integrity_payload 1KB 8KB [ 2217.310572] khugepaged_mm_slot 13KB 34KB [ 2217.316040] uid_cache 0KB 4KB [ 2217.324642] dmaengine-unmap-2 0KB 3KB [ 2217.334151] skbuff_fclone_cache 122KB 202KB [ 2217.343064] skbuff_head_cache 3054KB 3056KB [ 2217.352083] configfs_dir_cache 3KB 7KB [ 2217.361135] file_lock_cache 165KB 293KB [ 2217.366510] file_lock_ctx 9KB 11KB [ 2217.375256] fsnotify_mark_connector 20KB 47KB [ 2217.384482] net_namespace 52KB 52KB [ 2217.393345] shmem_inode_cache 8549KB 8687KB [ 2217.402136] task_delay_info 235KB 450KB [ 2217.411094] taskstats 101KB 195KB [ 2217.416605] proc_dir_entry 697KB 727KB [ 2217.425206] pde_opener 10KB 38KB [ 2217.434454] seq_file 299KB 492KB [ 2217.443155] sigqueue 47KB 66KB [ 2217.452082] kernfs_node_cache 18489KB 18510KB [ 2217.461030] mnt_cache 173KB 184KB [ 2217.466399] filp 6046KB 7275KB [ 2217.475110] names_cache 157509KB 157547KB [ 2217.483680] iint_cache 25KB 43KB [ 2217.492601] key_jar 4KB 7KB [ 2217.501507] uts_namespace 2KB 7KB [ 2217.506881] nsproxy 2KB 11KB [ 2217.515599] vm_area_struct 3824KB 4764KB [ 2217.524189] mm_struct 539KB 871KB [ 2217.533540] fs_cache 110KB 344KB [ 2217.542329] files_cache 445KB 697KB [ 2217.551293] signal_cache 930KB 1473KB [ 2217.556660] sighand_cache 520KB 589KB [ 2217.565242] task_struct 7827KB 7884KB [ 2217.574160] cred_jar 1343KB 1912KB [ 2217.582921] anon_vma_chain 1335KB 1673KB [ 2217.592082] anon_vma 149KB 281KB [ 2217.601024] pid 60KB 232KB [ 2217.606394] Acpi-Operand 156KB 202KB [ 2217.615107] Acpi-ParseExt 9KB 11KB [ 2217.623677] Acpi-Parse 41KB 47KB [ 2217.632596] Acpi-State 52KB 63KB [ 2217.641950] Acpi-Namespace 21KB 27KB [ 2217.650938] numa_policy 0KB 3KB [ 2217.656308] debug_objects_cache 1196KB 1595KB [ 2217.665079] trace_event_file 297KB 298KB [ 2217.673859] ftrace_event_field 398KB 405KB [ 2217.682681] pool_workqueue 121KB 128KB [ 2217.691652] page->ptl 647KB 992KB [ 2217.700607] kmalloc-2097152 2050KB 2050KB [ 2217.705980] kmalloc-524288 2056KB 2056KB [ 2217.714705] kmalloc-262144 1290KB 1290KB [ 2217.723267] kmalloc-131072 650KB 650KB [ 2217.728734] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2217.728784] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2217.728831] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2217.728877] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2217.728923] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2217.728967] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2217.729202] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2217.782396] kmalloc-65536 1848KB 1914KB [ 2217.787839] kmalloc-32768 1650KB 1650KB [ 2217.793203] kmalloc-16384 1006KB 1006KB [ 2217.805182] kmalloc-8192 4075KB 4116KB [ 2217.810603] kmalloc-4096 19953KB 19992KB [ 2217.815967] kmalloc-2048 11889KB 12775KB [ 2217.827822] kmalloc-1024 5519KB 7741KB [ 2217.833204] kmalloc-512 8977KB 8977KB [ 2217.842476] kmalloc-256 4234KB 4781KB [ 2217.851476] kmalloc-128 903KB 1382KB [ 2217.856842] kmalloc-96 3043KB 4000KB [ 2217.865456] kmalloc-64 2604KB 3744KB [ 2217.874181] kmalloc-32 1801KB 2445KB [ 2217.882916] kmalloc-192 1546KB 2304KB [ 2217.891874] kmem_cache 177KB 180KB [ 2217.900820] Out of memory (oom_kill_allocating_task): Kill process 3548 (in:imklog) score 0 or sacrifice child [ 2217.914468] Killed process 3542 (rsyslogd) total-vm:254332kB, anon-rss:744kB, file-rss:0kB, shmem-rss:0kB [ 2217.929343] oom_reaper: reaped process 3542 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2217.944393] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2217.996908] systemd-journal cpuset=/ mems_allowed=0-1 [ 2218.002147] CPU: 1 PID: 3617 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 2218.010029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2218.019383] Call Trace: [ 2218.021977] dump_stack+0x1fc/0x2ef [ 2218.025611] dump_header+0x15d/0xc3f [ 2218.029331] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2218.034434] ? ___ratelimit+0x319/0x590 [ 2218.038412] oom_kill_process.cold+0x10/0x692 [ 2218.042906] ? check_preemption_disabled+0x41/0x280 [ 2218.047934] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2218.053222] out_of_memory+0x1072/0x1390 [ 2218.057300] ? oom_killer_disable+0x270/0x270 [ 2218.061805] ? mutex_trylock+0x15f/0x1a0 [ 2218.065881] __alloc_pages_nodemask+0x23a2/0x2890 [ 2218.070754] ? find_get_entry+0x4cd/0x8a0 [ 2218.074924] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2218.079796] alloc_pages_current+0x193/0x2a0 [ 2218.084214] filemap_fault+0x146e/0x2180 [ 2218.088292] ext4_filemap_fault+0x84/0xb0 [ 2218.092465] __do_fault+0x10b/0x4b0 [ 2218.096104] __handle_mm_fault+0x273b/0x41c0 [ 2218.100534] ? vm_insert_page+0x9c0/0x9c0 [ 2218.104702] ? check_preemption_disabled+0x41/0x280 [ 2218.109728] handle_mm_fault+0x436/0xb10 [ 2218.113801] __do_page_fault+0x68e/0xd60 [ 2218.117875] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2218.122897] ? spurious_fault+0x840/0x840 [ 2218.127051] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2218.131903] ? page_fault+0x8/0x30 [ 2218.135447] page_fault+0x1e/0x30 [ 2218.138901] RIP: 0033:0x7f669d0de2e3 [ 2218.142613] Code: Bad RIP value. [ 2218.145974] RSP: 002b:00007ffda70f2548 EFLAGS: 00010246 [ 2218.151338] RAX: 0000000000000001 RBX: 000055bed35bb1e0 RCX: 00007f669d0de2e3 [ 2218.158612] RDX: 0000000000000013 RSI: 00007ffda70f2550 RDI: 000000000000000c [ 2218.165974] RBP: 00007ffda70f2740 R08: 00007ffda7131000 R09: 00000236e9bab0a6 [ 2218.173246] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffda70f2550 [ 2218.180516] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005ede571fb568f [ 2218.196727] Mem-Info: [ 2218.199339] active_anon:16512 inactive_anon:21067 isolated_anon:0 [ 2218.199339] active_file:173 inactive_file:1516 isolated_file:0 [ 2218.199339] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2218.199339] slab_reclaimable:14946 slab_unreclaimable:123273 [ 2218.199339] mapped:23184 shmem:21624 pagetables:601 bounce:0 [ 2218.199339] free:56488 free_pcp:765 free_cma:0 [ 2218.237714] Node 0 active_anon:64796kB inactive_anon:59800kB active_file:76kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87060kB dirty:0kB writeback:0kB shmem:61892kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2218.272439] Node 1 active_anon:1352kB inactive_anon:24468kB active_file:716kB inactive_file:9336kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8376kB dirty:0kB writeback:0kB shmem:24604kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2218.306124] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2218.337035] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2218.342086] Node 0 DMA32 free:20028kB min:35996kB low:44992kB high:53988kB active_anon:64796kB inactive_anon:59800kB active_file:76kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7616kB pagetables:2228kB bounce:0kB free_pcp:196kB local_pcp:180kB free_cma:0kB [ 2218.378324] lowmem_reserve[]: 0 0 1 1 1 [ 2218.382340] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2218.413494] lowmem_reserve[]: 0 0 0 0 0 [ 2218.417538] Node 1 Normal free:433408kB min:53876kB low:67344kB high:80812kB active_anon:1652kB inactive_anon:24468kB active_file:816kB inactive_file:10920kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:32kB pagetables:176kB bounce:0kB free_pcp:2960kB local_pcp:1340kB free_cma:0kB [ 2218.464311] lowmem_reserve[]: 0 0 0 0 0 [ 2218.469253] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 2218.482666] Node 0 DMA32: 1111*4kB (ME) 981*8kB (UME) 205*16kB (UME) 47*32kB (UME) 22*64kB (UME) 10*128kB (UME) 5*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 21556kB [ 2218.498770] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2218.509878] Node 1 Normal: 50*4kB (U) 3*8kB (U) 16*16kB (UME) 64*32kB (U) 63*64kB (UE) 62*128kB (UE) 54*256kB (UME) 38*512kB (UM) 34*1024kB (U) 23*2048kB (U) 100*4096kB (U) = 539296kB [ 2218.527637] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2218.538336] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2218.556860] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2218.565748] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2218.576438] 24827 total pagecache pages [ 2218.580543] 0 pages in swap cache [ 2218.584887] Swap cache stats: add 0, delete 0, find 0/0 [ 2218.597602] Free swap = 0kB [ 2218.600634] Total swap = 0kB [ 2218.603651] 2097051 pages RAM [ 2218.606746] 0 pages HighMem/MovableOnly [ 2218.617367] 369649 pages reserved [ 2218.622269] 0 pages cma reserved [ 2218.625642] Unreclaimable slab info: [ 2218.633630] Name Used Total [ 2218.640052] pid_2 105KB 220KB [ 2218.645496] batadv_tl_cache 4KB 12KB [ 2218.654854] TIPC 10KB 22KB [ 2218.660731] SCTPv6 14KB 24KB [ 2218.666109] DCCPv6 17KB 22KB [ 2218.671617] DCCP 16KB 21KB [ 2218.677582] RXRPC 11KB 13KB [ 2218.684334] rxrpc_call_jar 78KB 86KB [ 2218.690400] bridge_fdb_cache 7KB 11KB [ 2218.696516] fib6_nodes 155KB 184KB [ 2218.701972] ip6_dst_cache 85KB 318KB [ 2218.707468] RAWv6 70KB 81KB [ 2218.712834] UDPv6 26KB 30KB [ 2218.718286] TCPv6 30KB 42KB [ 2218.724078] nf_conntrack 6KB 7KB [ 2218.734622] t10_alua_lu_gp_cache 0KB 3KB [ 2218.740337] sd_ext_cdb 0KB 7KB [ 2218.745703] scsi_sense_cache 1056KB 1060KB [ 2218.755104] virtio_scsi_cmd 16KB 16KB [ 2218.761278] sgpool-128 8KB 8KB [ 2218.766682] sgpool-64 4KB 12KB [ 2218.775241] sgpool-32 2KB 15KB [ 2218.783139] sgpool-16 1KB 7KB [ 2218.793844] sgpool-8 0KB 7KB [ 2218.800981] mqueue_inode_cache 10KB 15KB [ 2218.810774] bio_post_read_ctx 14KB 15KB [ 2218.816218] bio-2 14KB 15KB [ 2218.831704] jfs_mp 7KB 7KB [ 2218.839935] cifs_small_rq 15KB 16KB [ 2218.845315] cifs_request 67KB 67KB [ 2218.854167] cifs_mpx_ids 0KB 7KB [ 2218.861228] nfs_commit_data 3KB 14KB [ 2218.868204] nfs_write_data 34KB 44KB [ 2218.874483] ext4_system_zone 1KB 7KB [ 2218.881029] kioctx 3KB 7KB [ 2218.887244] aio_kiocb 20KB 26KB [ 2218.892630] bio-1 1KB 7KB [ 2218.898069] pid_namespace 2KB 7KB [ 2218.903440] rpc_buffers 17KB 25KB [ 2218.908939] rpc_tasks 2KB 7KB [ 2218.914304] UNIX 211KB 213KB [ 2218.919756] ip_mrt_cache 15KB 24KB [ 2218.925128] tcp_bind_bucket 1KB 4KB [ 2218.932748] ip_fib_trie 23KB 27KB [ 2218.938604] ip_fib_alias 111KB 130KB [ 2218.945324] ip_dst_cache 4KB 16KB [ 2218.951737] RAW 60KB 75KB [ 2218.958579] UDP 43KB 47KB [ 2218.963964] TCP 8KB 16KB [ 2218.970109] hugetlbfs_inode_cache 3KB 15KB [ 2218.976438] fscache_cookie_jar 1KB 7KB [ 2218.983135] eventpoll_pwq 29KB 51KB [ 2218.989490] eventpoll_epi 55KB 66KB [ 2218.995243] inotify_inode_mark 30KB 70KB [ 2219.002492] request_queue 199KB 199KB [ 2219.008417] blkdev_requests 1KB 3KB [ 2219.016167] blkdev_ioc 21KB 23KB [ 2219.022465] bio-0 670KB 671KB [ 2219.028634] biovec-max 1402KB 1402KB [ 2219.035114] biovec-64 565KB 567KB [ 2219.041482] biovec-16 53KB 56KB [ 2219.047921] bio_integrity_payload 1KB 8KB [ 2219.054602] khugepaged_mm_slot 12KB 34KB [ 2219.061141] uid_cache 0KB 4KB [ 2219.066512] dmaengine-unmap-2 0KB 3KB [ 2219.071956] skbuff_fclone_cache 115KB 202KB [ 2219.081635] skbuff_head_cache 3155KB 3157KB [ 2219.087884] configfs_dir_cache 3KB 7KB [ 2219.093339] file_lock_cache 162KB 293KB [ 2219.102690] file_lock_ctx 9KB 11KB [ 2219.108961] fsnotify_mark_connector 19KB 47KB [ 2219.116601] net_namespace 52KB 52KB [ 2219.127897] shmem_inode_cache 8542KB 8687KB [ 2219.133879] task_delay_info 231KB 450KB [ 2219.145545] taskstats 101KB 195KB [ 2219.169772] proc_dir_entry 697KB 727KB [ 2219.183482] pde_opener 10KB 38KB [ 2219.191411] seq_file 304KB 492KB [ 2219.203134] sigqueue 60KB 66KB [ 2219.213690] kernfs_node_cache 18502KB 18510KB [ 2219.222673] mnt_cache 173KB 184KB [ 2219.230640] filp 6039KB 7275KB [ 2219.236226] names_cache 156395KB 156395KB [ 2219.245009] iint_cache 36KB 43KB [ 2219.252801] key_jar 4KB 7KB [ 2219.261852] uts_namespace 2KB 7KB [ 2219.270592] nsproxy 2KB 11KB [ 2219.276692] vm_area_struct 3835KB 4764KB [ 2219.282702] mm_struct 531KB 871KB [ 2219.288266] fs_cache 108KB 344KB [ 2219.293633] files_cache 435KB 693KB [ 2219.299193] signal_cache 922KB 1466KB [ 2219.304557] sighand_cache 545KB 589KB [ 2219.310123] task_struct 7751KB 7808KB [ 2219.315492] cred_jar 1337KB 1912KB [ 2219.321201] anon_vma_chain 1332KB 1673KB [ 2219.326578] anon_vma 144KB 281KB [ 2219.332231] pid 60KB 232KB [ 2219.337783] Acpi-Operand 156KB 202KB [ 2219.343144] Acpi-ParseExt 9KB 11KB [ 2219.348695] Acpi-Parse 41KB 47KB [ 2219.354059] Acpi-State 52KB 63KB [ 2219.359644] Acpi-Namespace 21KB 27KB [ 2219.365012] numa_policy 0KB 3KB [ 2219.370568] debug_objects_cache 1196KB 1595KB [ 2219.376104] trace_event_file 297KB 298KB [ 2219.381669] ftrace_event_field 398KB 405KB [ 2219.390385] pool_workqueue 121KB 128KB [ 2219.395762] page->ptl 644KB 992KB [ 2219.402922] kmalloc-2097152 2050KB 2050KB [ 2219.411578] kmalloc-524288 2056KB 2056KB [ 2219.418722] kmalloc-262144 1290KB 1290KB [ 2219.424096] kmalloc-131072 650KB 650KB [ 2219.432780] kmalloc-65536 1848KB 1914KB [ 2219.439911] kmalloc-32768 1650KB 1650KB [ 2219.445286] kmalloc-16384 1006KB 1006KB [ 2219.453981] kmalloc-8192 4075KB 4116KB [ 2219.461107] kmalloc-4096 20055KB 20055KB [ 2219.466484] kmalloc-2048 11878KB 12775KB [ 2219.475281] kmalloc-1024 5513KB 7741KB [ 2219.481360] kmalloc-512 9208KB 9210KB [ 2219.487192] kmalloc-256 4230KB 4781KB [ 2219.492565] kmalloc-128 899KB 1382KB [ 2219.498313] kmalloc-96 3066KB 4000KB [ 2219.503682] kmalloc-64 2593KB 3744KB [ 2219.509388] kmalloc-32 1801KB 2445KB [ 2219.514771] kmalloc-192 1545KB 2304KB [ 2219.520524] kmem_cache 177KB 180KB [ 2219.525897] Out of memory (oom_kill_allocating_task): Kill process 3617 (systemd-journal) score 0 or sacrifice child [ 2219.537090] Killed process 3617 (systemd-journal) total-vm:46096kB, anon-rss:460kB, file-rss:0kB, shmem-rss:1296kB [ 2219.548818] oom_reaper: reaped process 3617 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1384kB [ 2219.573953] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2219.591363] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2219.607771] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2219.614560] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2219.624021] systemd[1]: Stopped Journal Service. [ 2219.639490] systemd[1]: Starting Journal Service... [ 2219.766630] systemd-journald[3689]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2220.142800] systemd[1]: Started Journal Service. 11:43:31 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000080)={0xa, @output={0x1000, 0x1, {0x6, 0x6}, 0x5, 0x9}}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}) 11:43:31 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0x80000001, 0x2008}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, &(0x7f0000000140)) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0x80000001, 0x2008}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, &(0x7f0000000140)) (async) 11:43:31 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000180)) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @bt={0x3ff, 0x2, 0x0, 0x2, 0x1ff, 0x0, 0x3, 0x1f, 0xfe33, 0x10000, 0x5, 0x0, 0x9, 0x100, 0x12, 0x0, {0x0, 0x84}, 0x47, 0x6}}) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000140)={0x4, 0x15228725, @name="bb001116872cabdf001059ba493636889f92e81de8764b75ffd2704ae8d3b8ca"}) 11:43:31 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x3, 0x3, '\x00', &(0x7f0000000140)=0xff}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000100)) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f00000000c0)={0x7, 0x0, 0x2018, 0x40, 0x80000001, 0x8, 0x3, 0x1}) r1 = socket(0x18, 0x0, 0x0) setsockopt$MRT_ASSERT(r1, 0x0, 0xcf, 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) 11:43:31 executing program 5: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}}) syz_open_dev$vivid(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0xa20000, 0x3f, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9e0907, 0xfffffff9, '\x00', @p_u32}}) 11:43:31 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80041, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000080)) 11:43:31 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 11:43:31 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000080)={0xa, @output={0x1000, 0x1, {0x6, 0x6}, 0x5, 0x9}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000080)={0xa, @output={0x1000, 0x1, {0x6, 0x6}, 0x5, 0x9}}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}) (async) 11:43:31 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 11:43:31 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80041, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000080)) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80041, 0x0) (async) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000080)) (async) 11:43:31 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0x80000001, 0x2008}) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, &(0x7f0000000140)) 11:43:31 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x3, 0x3, '\x00', &(0x7f0000000140)=0xff}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000100)) (async, rerun: 64) syz_open_dev$tty1(0xc, 0x4, 0x4) (async, rerun: 64) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f00000000c0)={0x7, 0x0, 0x2018, 0x40, 0x80000001, 0x8, 0x3, 0x1}) (async) r1 = socket(0x18, 0x0, 0x0) setsockopt$MRT_ASSERT(r1, 0x0, 0xcf, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) 11:43:31 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) (async) 11:43:31 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000180)) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @bt={0x3ff, 0x2, 0x0, 0x2, 0x1ff, 0x0, 0x3, 0x1f, 0xfe33, 0x10000, 0x5, 0x0, 0x9, 0x100, 0x12, 0x0, {0x0, 0x84}, 0x47, 0x6}}) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000140)={0x4, 0x15228725, @name="bb001116872cabdf001059ba493636889f92e81de8764b75ffd2704ae8d3b8ca"}) 11:43:31 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x9, 0x31424752, 0x1, @discrete={0x1000, 0x4}}) openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x410900, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37da]}}}) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000080)={0x6, "59e44c781304a0932b8903993d8d1f579ee9390df8ba7f350ad0f1783f4f7939", 0x1, 0x800, 0xaf7, 0x24, 0x2}) 11:43:31 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80041, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000080)) 11:43:31 executing program 4: openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x420000, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)="2af214197a0307a81af56aee035523f800459f8ed246c09e3ce57ea7059e6fa9e1001c7a7ceb16953161b23f464ecd9467790fa064764c54421b7f55e67304050f46f90875aedff7ef8bc1f7723ab46d973c58399a7c254f335670b690733c0966f48fd398d703200042d921a6011b6e203f6bf11621099efaa683ab8c388821afeea60559a03e3170e4a11482f47a186deee4d2e575c1112d7d1494fd9750719a3f508a3cb27642eb1ed3b7501b34c4d75b719d9a5062e98bf37ba508e54572dcf0c3dd4f9846219ed88c27ed37", &(0x7f0000000000)=@udp, 0x4}, 0x20) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000200)=0x4) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:43:31 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000000c0)={0x9a0000, 0x8000, 0x3d, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x980902, 0x2, '\x00', @string=&(0x7f0000000000)=0x2}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) 11:43:31 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x9, 0x0, 0x2) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x0, 0x200, '\x00', &(0x7f0000000000)=0xff}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0xc288, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20], 0x55}}}) 11:43:31 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (rerun: 64) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000000c0)={0x9a0000, 0x8000, 0x3d, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x980902, 0x2, '\x00', @string=&(0x7f0000000000)=0x2}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) 11:43:31 executing program 4: openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x420000, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)="2af214197a0307a81af56aee035523f800459f8ed246c09e3ce57ea7059e6fa9e1001c7a7ceb16953161b23f464ecd9467790fa064764c54421b7f55e67304050f46f90875aedff7ef8bc1f7723ab46d973c58399a7c254f335670b690733c0966f48fd398d703200042d921a6011b6e203f6bf11621099efaa683ab8c388821afeea60559a03e3170e4a11482f47a186deee4d2e575c1112d7d1494fd9750719a3f508a3cb27642eb1ed3b7501b34c4d75b719d9a5062e98bf37ba508e54572dcf0c3dd4f9846219ed88c27ed37", &(0x7f0000000000)=@udp, 0x4}, 0x20) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000200)=0x4) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x420000, 0x0) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)="2af214197a0307a81af56aee035523f800459f8ed246c09e3ce57ea7059e6fa9e1001c7a7ceb16953161b23f464ecd9467790fa064764c54421b7f55e67304050f46f90875aedff7ef8bc1f7723ab46d973c58399a7c254f335670b690733c0966f48fd398d703200042d921a6011b6e203f6bf11621099efaa683ab8c388821afeea60559a03e3170e4a11482f47a186deee4d2e575c1112d7d1494fd9750719a3f508a3cb27642eb1ed3b7501b34c4d75b719d9a5062e98bf37ba508e54572dcf0c3dd4f9846219ed88c27ed37", &(0x7f0000000000)=@udp, 0x4}, 0x20) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000200)=0x4) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) 11:43:31 executing program 1: ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000200)=0xffffff) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x5, "7cb2aa6f3ecd2b78457c4934d40a32af40995db34a1648848a009af7901a4aab", 0x3, 0x0, 0x3, 0x315c, 0x8, 0x6, 0x3, 0x4003, [0xaa, 0x3, 0x401, 0x9]}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x4, 0x1, {0xb, @pix={0x95, 0x3c, 0x3136564e, 0x2, 0x9, 0xec34, 0x1, 0xe1a, 0x0, 0x2, 0x1, 0x2}}, 0x8}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000340)={0x7, 0x1, 0x70, 0x7, 0xd6f2, 0x80000000, 0x8}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x60080, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000540)={0xff, 0x0, 0x2024, 0x81, 0x3, 0x2, 0xff, 0x1}) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000480)={0x2, "ab5e645ccbb6f736e3e2fb23c7212c4a01bfd5a3c454797a4f3eed6234d88e57", 0x2}) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000580)={0x2, 0xb5315258, 0xbb88, 0xfffffc00, 0x1, @stepwise={{0x5ea6cf92, 0x8}, {0x0, 0x46}, {0x6, 0x78f}}}) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f00000004c0)={0x80000001, "9a0a0dfef4e8a117502addb9a1b87f200e0004ba23f5a0d993d61b7ab77adad2", 0x2, 0x1}) 11:43:31 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000100)={0x7, "4a98b99b1935ca6efdede0acd02d8d1aa539487058489ecd6c1649e817871445", 0x0, 0x80, 0x5, 0x4, 0x2}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0xfffffffe, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1f, 0x0, 0x0, 0x800]}}, 0x40003ed6}) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x200) r1 = syz_open_dev$video(&(0x7f0000000180), 0x95cd, 0x200000) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f00000001c0)={0x3, 0x0, [0x8000, 0x6, 0x5, 0x6, 0x1ff, 0x7ff, 0xc161, 0xa4]}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x18084, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f0000000240)={0x2, 0x0, [0x1, 0x7, 0x0, 0x4, 0xfff, 0xcc8, 0x2ba, 0x3]}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000500)={0x3, 0x0, '\x00', {0x0, @reserved}}) ioctl$VIDIOC_S_EDID(r3, 0xc0285629, &(0x7f00000000c0)={0x0, 0x4, 0x20, '\x00', &(0x7f0000000080)=0x81}) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/110}) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000280)=0x4) 11:43:31 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x9, 0x31424752, 0x1, @discrete={0x1000, 0x4}}) (async, rerun: 64) openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x410900, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37da]}}}) (async) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000080)={0x6, "59e44c781304a0932b8903993d8d1f579ee9390df8ba7f350ad0f1783f4f7939", 0x1, 0x800, 0xaf7, 0x24, 0x2}) 11:43:31 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x9, 0x0, 0x2) (async) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x0, 0x200, '\x00', &(0x7f0000000000)=0xff}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0xc288, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20], 0x55}}}) 11:43:32 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x9, 0x0, 0x2) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x0, 0x200, '\x00', &(0x7f0000000000)=0xff}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0xc288, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20], 0x55}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x9, 0x0, 0x2) (async) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x0, 0x200, '\x00', &(0x7f0000000000)=0xff}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0xc288, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20], 0x55}}}) (async) [ 2222.849025] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.854638] ieee802154 phy1 wpan1: encryption failed: -22 11:43:32 executing program 1: ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000200)=0xffffff) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x5, "7cb2aa6f3ecd2b78457c4934d40a32af40995db34a1648848a009af7901a4aab", 0x3, 0x0, 0x3, 0x315c, 0x8, 0x6, 0x3, 0x4003, [0xaa, 0x3, 0x401, 0x9]}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x4, 0x1, {0xb, @pix={0x95, 0x3c, 0x3136564e, 0x2, 0x9, 0xec34, 0x1, 0xe1a, 0x0, 0x2, 0x1, 0x2}}, 0x8}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000340)={0x7, 0x1, 0x70, 0x7, 0xd6f2, 0x80000000, 0x8}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x60080, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000540)={0xff, 0x0, 0x2024, 0x81, 0x3, 0x2, 0xff, 0x1}) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000480)={0x2, "ab5e645ccbb6f736e3e2fb23c7212c4a01bfd5a3c454797a4f3eed6234d88e57", 0x2}) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000580)={0x2, 0xb5315258, 0xbb88, 0xfffffc00, 0x1, @stepwise={{0x5ea6cf92, 0x8}, {0x0, 0x46}, {0x6, 0x78f}}}) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f00000004c0)={0x80000001, "9a0a0dfef4e8a117502addb9a1b87f200e0004ba23f5a0d993d61b7ab77adad2", 0x2, 0x1}) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000200)=0xffffff) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x5, "7cb2aa6f3ecd2b78457c4934d40a32af40995db34a1648848a009af7901a4aab", 0x3, 0x0, 0x3, 0x315c, 0x8, 0x6, 0x3, 0x4003, [0xaa, 0x3, 0x401, 0x9]}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x4, 0x1, {0xb, @pix={0x95, 0x3c, 0x3136564e, 0x2, 0x9, 0xec34, 0x1, 0xe1a, 0x0, 0x2, 0x1, 0x2}}, 0x8}) (async) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000340)={0x7, 0x1, 0x70, 0x7, 0xd6f2, 0x80000000, 0x8}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x60080, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000540)={0xff, 0x0, 0x2024, 0x81, 0x3, 0x2, 0xff, 0x1}) (async) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000480)={0x2, "ab5e645ccbb6f736e3e2fb23c7212c4a01bfd5a3c454797a4f3eed6234d88e57", 0x2}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000580)={0x2, 0xb5315258, 0xbb88, 0xfffffc00, 0x1, @stepwise={{0x5ea6cf92, 0x8}, {0x0, 0x46}, {0x6, 0x78f}}}) (async) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f00000004c0)={0x80000001, "9a0a0dfef4e8a117502addb9a1b87f200e0004ba23f5a0d993d61b7ab77adad2", 0x2, 0x1}) (async) 11:43:32 executing program 4: openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x420000, 0x0) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async, rerun: 64) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)="2af214197a0307a81af56aee035523f800459f8ed246c09e3ce57ea7059e6fa9e1001c7a7ceb16953161b23f464ecd9467790fa064764c54421b7f55e67304050f46f90875aedff7ef8bc1f7723ab46d973c58399a7c254f335670b690733c0966f48fd398d703200042d921a6011b6e203f6bf11621099efaa683ab8c388821afeea60559a03e3170e4a11482f47a186deee4d2e575c1112d7d1494fd9750719a3f508a3cb27642eb1ed3b7501b34c4d75b719d9a5062e98bf37ba508e54572dcf0c3dd4f9846219ed88c27ed37", &(0x7f0000000000)=@udp, 0x4}, 0x20) (async, rerun: 64) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (rerun: 64) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000200)=0x4) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:43:32 executing program 1: ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000200)=0xffffff) (async) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x5, "7cb2aa6f3ecd2b78457c4934d40a32af40995db34a1648848a009af7901a4aab", 0x3, 0x0, 0x3, 0x315c, 0x8, 0x6, 0x3, 0x4003, [0xaa, 0x3, 0x401, 0x9]}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x4, 0x1, {0xb, @pix={0x95, 0x3c, 0x3136564e, 0x2, 0x9, 0xec34, 0x1, 0xe1a, 0x0, 0x2, 0x1, 0x2}}, 0x8}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000340)={0x7, 0x1, 0x70, 0x7, 0xd6f2, 0x80000000, 0x8}) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x60080, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000540)={0xff, 0x0, 0x2024, 0x81, 0x3, 0x2, 0xff, 0x1}) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000480)={0x2, "ab5e645ccbb6f736e3e2fb23c7212c4a01bfd5a3c454797a4f3eed6234d88e57", 0x2}) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000580)={0x2, 0xb5315258, 0xbb88, 0xfffffc00, 0x1, @stepwise={{0x5ea6cf92, 0x8}, {0x0, 0x46}, {0x6, 0x78f}}}) (async) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f00000004c0)={0x80000001, "9a0a0dfef4e8a117502addb9a1b87f200e0004ba23f5a0d993d61b7ab77adad2", 0x2, 0x1}) 11:43:32 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000000)={0x1, 0x1f, @value=0x7fff}) r1 = syz_open_dev$video(&(0x7f0000000080), 0x100000001, 0x42000) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x5, {0x8, 0x80000000, 0x2, 0x8}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x3, 0x4, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbff, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1]}}}) 11:43:32 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000080)="3ef05474bae9b0851b8630b7bd62c47a67e37002807d417564cef16578384ad94d1518e1e38c4c96249f703910a0741950dbc38b9a23432f1a21a2b959b712eeb82ef1fafdd0a01bfe11d0119da54a54aaac9c4c32eb33b77f0eb7671bb4fbd8886dcf547d6626efaa7d59140f9cf85cbb54ceda790c3b2b54825e278e015c30c397e326a80dd9ee00d2e67a1ed412cada4eba7b82e5fefe81662f908c21123dd2c5a554f7f2254ecae0650f217789a19f2e0aed493508e59b9ea607cdc96472c877101cac14f8f0cde6dabe23419dc1853d15a0f24084402e2779f2bf2f859b1514e8be3ae3006e48b61ba9e931", &(0x7f0000000180)=""/143}, 0x20) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f0000000240)="bc54742c77489c547a54c5b932e81990709495da407f845ec2fff810902adcbf951d23e605443a6d7018fd400615ec6017f370370dc53a703a1de0f2b4cf0c8aac992c5bad1e3cf684d279e17d9e761dbfe93f54d4dd18b960bd613c3af0f19e6eb19cb6153692c2f1bb367126fb7503536abe0874dc7423d493806de39932d4fa0c28f984e963e36d", &(0x7f0000000480)=""/229, &(0x7f00000005c0)="521e29d2eff42040fe6f53b6cbc4d358917a7478d2c88bac7e92c3e8bddc71970fe5959f44d07f765a3e5c3546a0663ea25b38ed4ab3183e5f7299aa949565f10fce9a8843684a0c883d49dc29ff04580da99d119ac14136947d77002733cb4ea1303c572028dcfe9345a48396e999a6640e6d6d4fc1d0bda80c245b979429c5b19adc76bdbb", &(0x7f0000000300)="2dccf99e841766fedd107d2b3056292d3d1ade20f0e4c666eff7cdc272ac", 0x32b, r0, 0x4}, 0x38) 11:43:32 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000000c0)={0x9a0000, 0x8000, 0x3d, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x980902, 0x2, '\x00', @string=&(0x7f0000000000)=0x2}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000000c0)={0x9a0000, 0x8000, 0x3d, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x980902, 0x2, '\x00', @string=&(0x7f0000000000)=0x2}}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) (async) 11:43:32 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x9, 0x31424752, 0x1, @discrete={0x1000, 0x4}}) openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x410900, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37da]}}}) (async) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000080)={0x6, "59e44c781304a0932b8903993d8d1f579ee9390df8ba7f350ad0f1783f4f7939", 0x1, 0x800, 0xaf7, 0x24, 0x2}) 11:43:32 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000100)={0x7, "4a98b99b1935ca6efdede0acd02d8d1aa539487058489ecd6c1649e817871445", 0x0, 0x80, 0x5, 0x4, 0x2}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0xfffffffe, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1f, 0x0, 0x0, 0x800]}}, 0x40003ed6}) (async) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x200) (async, rerun: 32) r1 = syz_open_dev$video(&(0x7f0000000180), 0x95cd, 0x200000) (rerun: 32) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f00000001c0)={0x3, 0x0, [0x8000, 0x6, 0x5, 0x6, 0x1ff, 0x7ff, 0xc161, 0xa4]}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x18084, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f0000000240)={0x2, 0x0, [0x1, 0x7, 0x0, 0x4, 0xfff, 0xcc8, 0x2ba, 0x3]}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000500)={0x3, 0x0, '\x00', {0x0, @reserved}}) ioctl$VIDIOC_S_EDID(r3, 0xc0285629, &(0x7f00000000c0)={0x0, 0x4, 0x20, '\x00', &(0x7f0000000080)=0x81}) (async) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/110}) (async) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000280)=0x4) 11:43:32 executing program 4: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32]}}}) 11:43:32 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) 11:43:32 executing program 4: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32]}}}) 11:43:32 executing program 4: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32]}}}) 11:43:32 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f0000000080)={{0x1, @name="17b589953b97c13e77362ec4bf4ead086de1e435865f1b35ca4c9b43f76ff080"}, "f8cf6ab1c5859653a27ba3d2bb16392937f5f3fc0b3bc282559db6bb69ccb77c", 0x1}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:43:32 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000080)="3ef05474bae9b0851b8630b7bd62c47a67e37002807d417564cef16578384ad94d1518e1e38c4c96249f703910a0741950dbc38b9a23432f1a21a2b959b712eeb82ef1fafdd0a01bfe11d0119da54a54aaac9c4c32eb33b77f0eb7671bb4fbd8886dcf547d6626efaa7d59140f9cf85cbb54ceda790c3b2b54825e278e015c30c397e326a80dd9ee00d2e67a1ed412cada4eba7b82e5fefe81662f908c21123dd2c5a554f7f2254ecae0650f217789a19f2e0aed493508e59b9ea607cdc96472c877101cac14f8f0cde6dabe23419dc1853d15a0f24084402e2779f2bf2f859b1514e8be3ae3006e48b61ba9e931", &(0x7f0000000180)=""/143}, 0x20) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f0000000240)="bc54742c77489c547a54c5b932e81990709495da407f845ec2fff810902adcbf951d23e605443a6d7018fd400615ec6017f370370dc53a703a1de0f2b4cf0c8aac992c5bad1e3cf684d279e17d9e761dbfe93f54d4dd18b960bd613c3af0f19e6eb19cb6153692c2f1bb367126fb7503536abe0874dc7423d493806de39932d4fa0c28f984e963e36d", &(0x7f0000000480)=""/229, &(0x7f00000005c0)="521e29d2eff42040fe6f53b6cbc4d358917a7478d2c88bac7e92c3e8bddc71970fe5959f44d07f765a3e5c3546a0663ea25b38ed4ab3183e5f7299aa949565f10fce9a8843684a0c883d49dc29ff04580da99d119ac14136947d77002733cb4ea1303c572028dcfe9345a48396e999a6640e6d6d4fc1d0bda80c245b979429c5b19adc76bdbb", &(0x7f0000000300)="2dccf99e841766fedd107d2b3056292d3d1ade20f0e4c666eff7cdc272ac", 0x32b, r0, 0x4}, 0x38) 11:43:32 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0xa20000, 0x2, 0x6, r2, 0x0, &(0x7f0000000180)={0x990a79, 0x0, '\x00', @value64=0x7ff}}) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000000)=0x40000) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd], 0x1000000}}}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={&(0x7f0000000200)="c251bc70ebfb6c86489b31c0822a321fa7f6217d2a94d4", &(0x7f0000000240)=""/108, &(0x7f00000002c0)="ade9944b2d5957212542aaa176d876337852bdf9078785e795e00ecad7bb0d9f4ed2c58e192963cbcdd7a2c78a3041e66aefeb0be37f0025ece90412d41dfe89827e0ca17be13d8d36b8c0406fce5090946c3dd10390ee92688c3dadc91597a6731dfba66ebdb54c95a4c532a53dd33198d5af1282d2d1d6f5fb6ed8375de6ba2a776e2f1f71576ce7cbd0f280442ec5bfeca7c69eff3262db5c31cfea1b1292392663f9813f", &(0x7f0000000480)="b86e2a8c0b1d608939a986ac59949c0887d907eb1f7de8ee82eec0ec0bcc4eb18cc70ee271dc353d4f930392", 0x7, r2}, 0x38) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f0000000080)) r4 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f0000000700)) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a0200, 0x0) ioctl$UI_SET_PHYS(r5, 0x4008556c, &(0x7f0000000100)='syz0\x00') 11:43:32 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000000)={0x1, 0x1f, @value=0x7fff}) r1 = syz_open_dev$video(&(0x7f0000000080), 0x100000001, 0x42000) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x5, {0x8, 0x80000000, 0x2, 0x8}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x3, 0x4, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbff, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000000)={0x1, 0x1f, @value=0x7fff}) (async) syz_open_dev$video(&(0x7f0000000080), 0x100000001, 0x42000) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x5, {0x8, 0x80000000, 0x2, 0x8}}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x3, 0x4, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbff, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1]}}}) (async) 11:43:32 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) (async) 11:43:32 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000080)="3ef05474bae9b0851b8630b7bd62c47a67e37002807d417564cef16578384ad94d1518e1e38c4c96249f703910a0741950dbc38b9a23432f1a21a2b959b712eeb82ef1fafdd0a01bfe11d0119da54a54aaac9c4c32eb33b77f0eb7671bb4fbd8886dcf547d6626efaa7d59140f9cf85cbb54ceda790c3b2b54825e278e015c30c397e326a80dd9ee00d2e67a1ed412cada4eba7b82e5fefe81662f908c21123dd2c5a554f7f2254ecae0650f217789a19f2e0aed493508e59b9ea607cdc96472c877101cac14f8f0cde6dabe23419dc1853d15a0f24084402e2779f2bf2f859b1514e8be3ae3006e48b61ba9e931", &(0x7f0000000180)=""/143}, 0x20) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f0000000240)="bc54742c77489c547a54c5b932e81990709495da407f845ec2fff810902adcbf951d23e605443a6d7018fd400615ec6017f370370dc53a703a1de0f2b4cf0c8aac992c5bad1e3cf684d279e17d9e761dbfe93f54d4dd18b960bd613c3af0f19e6eb19cb6153692c2f1bb367126fb7503536abe0874dc7423d493806de39932d4fa0c28f984e963e36d", &(0x7f0000000480)=""/229, &(0x7f00000005c0)="521e29d2eff42040fe6f53b6cbc4d358917a7478d2c88bac7e92c3e8bddc71970fe5959f44d07f765a3e5c3546a0663ea25b38ed4ab3183e5f7299aa949565f10fce9a8843684a0c883d49dc29ff04580da99d119ac14136947d77002733cb4ea1303c572028dcfe9345a48396e999a6640e6d6d4fc1d0bda80c245b979429c5b19adc76bdbb", &(0x7f0000000300)="2dccf99e841766fedd107d2b3056292d3d1ade20f0e4c666eff7cdc272ac", 0x32b, r0, 0x4}, 0x38) openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000080)="3ef05474bae9b0851b8630b7bd62c47a67e37002807d417564cef16578384ad94d1518e1e38c4c96249f703910a0741950dbc38b9a23432f1a21a2b959b712eeb82ef1fafdd0a01bfe11d0119da54a54aaac9c4c32eb33b77f0eb7671bb4fbd8886dcf547d6626efaa7d59140f9cf85cbb54ceda790c3b2b54825e278e015c30c397e326a80dd9ee00d2e67a1ed412cada4eba7b82e5fefe81662f908c21123dd2c5a554f7f2254ecae0650f217789a19f2e0aed493508e59b9ea607cdc96472c877101cac14f8f0cde6dabe23419dc1853d15a0f24084402e2779f2bf2f859b1514e8be3ae3006e48b61ba9e931", &(0x7f0000000180)=""/143}, 0x20) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f0000000240)="bc54742c77489c547a54c5b932e81990709495da407f845ec2fff810902adcbf951d23e605443a6d7018fd400615ec6017f370370dc53a703a1de0f2b4cf0c8aac992c5bad1e3cf684d279e17d9e761dbfe93f54d4dd18b960bd613c3af0f19e6eb19cb6153692c2f1bb367126fb7503536abe0874dc7423d493806de39932d4fa0c28f984e963e36d", &(0x7f0000000480)=""/229, &(0x7f00000005c0)="521e29d2eff42040fe6f53b6cbc4d358917a7478d2c88bac7e92c3e8bddc71970fe5959f44d07f765a3e5c3546a0663ea25b38ed4ab3183e5f7299aa949565f10fce9a8843684a0c883d49dc29ff04580da99d119ac14136947d77002733cb4ea1303c572028dcfe9345a48396e999a6640e6d6d4fc1d0bda80c245b979429c5b19adc76bdbb", &(0x7f0000000300)="2dccf99e841766fedd107d2b3056292d3d1ade20f0e4c666eff7cdc272ac", 0x32b, r0, 0x4}, 0x38) (async) 11:43:32 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f0000000080)={{0x1, @name="17b589953b97c13e77362ec4bf4ead086de1e435865f1b35ca4c9b43f76ff080"}, "f8cf6ab1c5859653a27ba3d2bb16392937f5f3fc0b3bc282559db6bb69ccb77c", 0x1}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f0000000080)={{0x1, @name="17b589953b97c13e77362ec4bf4ead086de1e435865f1b35ca4c9b43f76ff080"}, "f8cf6ab1c5859653a27ba3d2bb16392937f5f3fc0b3bc282559db6bb69ccb77c", 0x1}) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) 11:43:32 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0xa20000, 0x2, 0x6, r2, 0x0, &(0x7f0000000180)={0x990a79, 0x0, '\x00', @value64=0x7ff}}) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000000)=0x40000) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd], 0x1000000}}}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={&(0x7f0000000200)="c251bc70ebfb6c86489b31c0822a321fa7f6217d2a94d4", &(0x7f0000000240)=""/108, &(0x7f00000002c0)="ade9944b2d5957212542aaa176d876337852bdf9078785e795e00ecad7bb0d9f4ed2c58e192963cbcdd7a2c78a3041e66aefeb0be37f0025ece90412d41dfe89827e0ca17be13d8d36b8c0406fce5090946c3dd10390ee92688c3dadc91597a6731dfba66ebdb54c95a4c532a53dd33198d5af1282d2d1d6f5fb6ed8375de6ba2a776e2f1f71576ce7cbd0f280442ec5bfeca7c69eff3262db5c31cfea1b1292392663f9813f", &(0x7f0000000480)="b86e2a8c0b1d608939a986ac59949c0887d907eb1f7de8ee82eec0ec0bcc4eb18cc70ee271dc353d4f930392", 0x7, r2}, 0x38) (async) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f0000000080)) r4 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f0000000700)) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a0200, 0x0) ioctl$UI_SET_PHYS(r5, 0x4008556c, &(0x7f0000000100)='syz0\x00') 11:43:32 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000100)={0x7, "4a98b99b1935ca6efdede0acd02d8d1aa539487058489ecd6c1649e817871445", 0x0, 0x80, 0x5, 0x4, 0x2}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0xfffffffe, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1f, 0x0, 0x0, 0x800]}}, 0x40003ed6}) (async, rerun: 32) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x200) (rerun: 32) r1 = syz_open_dev$video(&(0x7f0000000180), 0x95cd, 0x200000) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f00000001c0)={0x3, 0x0, [0x8000, 0x6, 0x5, 0x6, 0x1ff, 0x7ff, 0xc161, 0xa4]}) (async, rerun: 64) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x18084, 0x0) (rerun: 64) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f0000000240)={0x2, 0x0, [0x1, 0x7, 0x0, 0x4, 0xfff, 0xcc8, 0x2ba, 0x3]}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000500)={0x3, 0x0, '\x00', {0x0, @reserved}}) (async) ioctl$VIDIOC_S_EDID(r3, 0xc0285629, &(0x7f00000000c0)={0x0, 0x4, 0x20, '\x00', &(0x7f0000000080)=0x81}) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/110}) (async) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000280)=0x4) 11:43:32 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000000)={0x1, 0x1f, @value=0x7fff}) (async) r1 = syz_open_dev$video(&(0x7f0000000080), 0x100000001, 0x42000) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x5, {0x8, 0x80000000, 0x2, 0x8}}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x3, 0x4, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbff, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1]}}}) 11:43:33 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) 11:43:33 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0xa20000, 0x2, 0x6, r2, 0x0, &(0x7f0000000180)={0x990a79, 0x0, '\x00', @value64=0x7ff}}) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000000)=0x40000) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd], 0x1000000}}}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={&(0x7f0000000200)="c251bc70ebfb6c86489b31c0822a321fa7f6217d2a94d4", &(0x7f0000000240)=""/108, &(0x7f00000002c0)="ade9944b2d5957212542aaa176d876337852bdf9078785e795e00ecad7bb0d9f4ed2c58e192963cbcdd7a2c78a3041e66aefeb0be37f0025ece90412d41dfe89827e0ca17be13d8d36b8c0406fce5090946c3dd10390ee92688c3dadc91597a6731dfba66ebdb54c95a4c532a53dd33198d5af1282d2d1d6f5fb6ed8375de6ba2a776e2f1f71576ce7cbd0f280442ec5bfeca7c69eff3262db5c31cfea1b1292392663f9813f", &(0x7f0000000480)="b86e2a8c0b1d608939a986ac59949c0887d907eb1f7de8ee82eec0ec0bcc4eb18cc70ee271dc353d4f930392", 0x7, r2}, 0x38) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f0000000080)) r4 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f0000000700)) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a0200, 0x0) ioctl$UI_SET_PHYS(r5, 0x4008556c, &(0x7f0000000100)='syz0\x00') openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) (async) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0xa20000, 0x2, 0x6, r2, 0x0, &(0x7f0000000180)={0x990a79, 0x0, '\x00', @value64=0x7ff}}) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000000)=0x40000) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd], 0x1000000}}}) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={&(0x7f0000000200)="c251bc70ebfb6c86489b31c0822a321fa7f6217d2a94d4", &(0x7f0000000240)=""/108, &(0x7f00000002c0)="ade9944b2d5957212542aaa176d876337852bdf9078785e795e00ecad7bb0d9f4ed2c58e192963cbcdd7a2c78a3041e66aefeb0be37f0025ece90412d41dfe89827e0ca17be13d8d36b8c0406fce5090946c3dd10390ee92688c3dadc91597a6731dfba66ebdb54c95a4c532a53dd33198d5af1282d2d1d6f5fb6ed8375de6ba2a776e2f1f71576ce7cbd0f280442ec5bfeca7c69eff3262db5c31cfea1b1292392663f9813f", &(0x7f0000000480)="b86e2a8c0b1d608939a986ac59949c0887d907eb1f7de8ee82eec0ec0bcc4eb18cc70ee271dc353d4f930392", 0x7, r2}, 0x38) (async) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f0000000080)) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f0000000700)) (async) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a0200, 0x0) (async) ioctl$UI_SET_PHYS(r5, 0x4008556c, &(0x7f0000000100)='syz0\x00') (async) 11:43:33 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0x8, 0x1010, 0x1}) 11:43:33 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f0000000080)={{0x1, @name="17b589953b97c13e77362ec4bf4ead086de1e435865f1b35ca4c9b43f76ff080"}, "f8cf6ab1c5859653a27ba3d2bb16392937f5f3fc0b3bc282559db6bb69ccb77c", 0x1}) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:43:33 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000080)={0xfc8, 0x5, 0x81, 0x107, 0x8, 0x8, 0xa7d}) 11:43:33 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000280)={0x4, 0x35323645, 0x54, 0x4, 0x2, @discrete={0x8, 0x9}}) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, '\x00', @bt={0x4000, 0x1f, 0x2, 0xffff0001, 0xc1b, 0x3ff, 0x10, 0x9}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r3) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000080)="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", &(0x7f0000000000)=@tcp, 0x2}, 0x20) 11:43:33 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}}) 11:43:33 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0x8, 0x1010, 0x1}) 11:43:33 executing program 4: ioctl$SOUND_MIXER_INFO(0xffffffffffffffff, 0x805c4d65, &(0x7f0000000080)) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:43:33 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f], 0x2}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000080)={0x2, "8a6f06583211701759d01ead3d86caf77de9de61254b2d46ddc93a85ae35febe", 0x100, 0x100, 0x6, 0x8, 0x3}) 11:43:33 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}}) 11:43:33 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000080)={0xfc8, 0x5, 0x81, 0x107, 0x8, 0x8, 0xa7d}) 11:43:33 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff]}}}) (async, rerun: 64) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (rerun: 64) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async, rerun: 64) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000280)={0x4, 0x35323645, 0x54, 0x4, 0x2, @discrete={0x8, 0x9}}) (async, rerun: 64) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, '\x00', @bt={0x4000, 0x1f, 0x2, 0xffff0001, 0xc1b, 0x3ff, 0x10, 0x9}}) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r3) (async, rerun: 64) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000080)="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", &(0x7f0000000000)=@tcp, 0x2}, 0x20) (rerun: 64) 11:43:33 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0x8, 0x1010, 0x1}) 11:43:33 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}}) 11:43:33 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000080)={0xfc8, 0x5, 0x81, 0x107, 0x8, 0x8, 0xa7d}) 11:43:33 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}}) 11:43:33 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff]}}}) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000280)={0x4, 0x35323645, 0x54, 0x4, 0x2, @discrete={0x8, 0x9}}) (async) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) (async, rerun: 32) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, '\x00', @bt={0x4000, 0x1f, 0x2, 0xffff0001, 0xc1b, 0x3ff, 0x10, 0x9}}) (async, rerun: 32) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r3) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000080)="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", &(0x7f0000000000)=@tcp, 0x2}, 0x20) 11:43:33 executing program 4: ioctl$SOUND_MIXER_INFO(0xffffffffffffffff, 0x805c4d65, &(0x7f0000000080)) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$SOUND_MIXER_INFO(0xffffffffffffffff, 0x805c4d65, &(0x7f0000000080)) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) 11:43:33 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}}) (async) 11:43:33 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f], 0x2}}}) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000080)={0x2, "8a6f06583211701759d01ead3d86caf77de9de61254b2d46ddc93a85ae35febe", 0x100, 0x100, 0x6, 0x8, 0x3}) 11:43:33 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x7fff, 0x4, 0x1, {0x9, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x40, 0x0, 0x0, 0x0, 0x0, 0x4]}}}) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000080)={0x3, "e2216c995575a88ec992798e1c6df98635024cb5289a1ee4f20b2321c9774777", 0x6, 0x2, 0x5, 0x3ff, 0x4, 0x1, 0xffff, 0x3f}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000100)={0x1e, 0x3, 0x10000, 0xa3, 0x0, 0x6, 0x3}) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x8, 0x0, @name="e37ca9e774d7bcf6e6975e68fa843d7d01a74e8cacb0fd3908a70959092e8a8e"}) 11:43:33 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x8, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffb], 0xfffffffc}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) r2 = syz_open_dev$video(&(0x7f00000000c0), 0xff, 0x200001) ioctl$VIDIOC_G_EDID(r2, 0xc0285628, &(0x7f0000000140)={0x0, 0x8, 0x8, '\x00', &(0x7f0000000100)}) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000080)={0x0, 0x7fffffff, 0x401, '\x00', &(0x7f0000000000)=0x80}) 11:43:33 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}}) 11:43:33 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x28000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x4, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:43:33 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x7fff, 0x4, 0x1, {0x9, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x40, 0x0, 0x0, 0x0, 0x0, 0x4]}}}) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000080)={0x3, "e2216c995575a88ec992798e1c6df98635024cb5289a1ee4f20b2321c9774777", 0x6, 0x2, 0x5, 0x3ff, 0x4, 0x1, 0xffff, 0x3f}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000100)={0x1e, 0x3, 0x10000, 0xa3, 0x0, 0x6, 0x3}) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x8, 0x0, @name="e37ca9e774d7bcf6e6975e68fa843d7d01a74e8cacb0fd3908a70959092e8a8e"}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x2}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x7fff, 0x4, 0x1, {0x9, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x40, 0x0, 0x0, 0x0, 0x0, 0x4]}}}) (async) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000080)={0x3, "e2216c995575a88ec992798e1c6df98635024cb5289a1ee4f20b2321c9774777", 0x6, 0x2, 0x5, 0x3ff, 0x4, 0x1, 0xffff, 0x3f}) (async) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000100)={0x1e, 0x3, 0x10000, 0xa3, 0x0, 0x6, 0x3}) (async) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x8, 0x0, @name="e37ca9e774d7bcf6e6975e68fa843d7d01a74e8cacb0fd3908a70959092e8a8e"}) (async) 11:43:33 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f], 0x2}}}) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000080)={0x2, "8a6f06583211701759d01ead3d86caf77de9de61254b2d46ddc93a85ae35febe", 0x100, 0x100, 0x6, 0x8, 0x3}) 11:43:33 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) 11:43:33 executing program 4: ioctl$SOUND_MIXER_INFO(0xffffffffffffffff, 0x805c4d65, &(0x7f0000000080)) (async) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:43:33 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x28000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x4, 0x1}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:43:33 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x20, 0x589000) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, &(0x7f0000000080)={{0x4, @addr=0x2}, "05b1c5f1ef96c7c0c2cbe535d52aaf94998ed30cd597330adc4a352285119517", 0x1}) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000180)={0x101, "3e2a4af76b4201bc0df81c482897ef5af8dab03be0e8bbdfbc858e7208c66d2f", 0x5, 0x40, 0x7, 0x2, 0x10, 0x2, 0x40, 0x7}) 11:43:33 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x8, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffb], 0xfffffffc}}}) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) r2 = syz_open_dev$video(&(0x7f00000000c0), 0xff, 0x200001) ioctl$VIDIOC_G_EDID(r2, 0xc0285628, &(0x7f0000000140)={0x0, 0x8, 0x8, '\x00', &(0x7f0000000100)}) (async) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000080)={0x0, 0x7fffffff, 0x401, '\x00', &(0x7f0000000000)=0x80}) 11:43:33 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) socket$inet_udplite(0x2, 0x2, 0x88) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) (async) 11:43:33 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x22100281}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200028bd7000fedbdf250200000008000100000000000c000600030000000000000008000100000000000c000200040000000000004000000000000000000c0002000000e0ffffffffff587ddab72217c9668eaea00d6fe841a8d7acbd917bc94672d3f61f6980c852db39381a9809fe18a6f88641437f23402dbc0013ed98fa3ad75198f895564c48cf"], 0x50}}, 0x44841) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x2, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_open_dev$vivid(&(0x7f0000000280), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f0000000300)={0x0, 0x2, 0x5, '\x00', &(0x7f00000002c0)=0xff}) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000000100)={0x1, 0x1, [0x1, 0x3, 0x1, 0x9, 0x800000, 0x641c8c45, 0x100, 0x4]}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) 11:43:34 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x2}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x7fff, 0x4, 0x1, {0x9, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x40, 0x0, 0x0, 0x0, 0x0, 0x4]}}}) (async) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000080)={0x3, "e2216c995575a88ec992798e1c6df98635024cb5289a1ee4f20b2321c9774777", 0x6, 0x2, 0x5, 0x3ff, 0x4, 0x1, 0xffff, 0x3f}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000100)={0x1e, 0x3, 0x10000, 0xa3, 0x0, 0x6, 0x3}) (async) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x8, 0x0, @name="e37ca9e774d7bcf6e6975e68fa843d7d01a74e8cacb0fd3908a70959092e8a8e"}) 11:43:34 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x28000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x4, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$video(&(0x7f0000000000), 0x3, 0x28000) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x4, 0x1}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) 11:43:34 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x20, 0x589000) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, &(0x7f0000000080)={{0x4, @addr=0x2}, "05b1c5f1ef96c7c0c2cbe535d52aaf94998ed30cd597330adc4a352285119517", 0x1}) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000180)={0x101, "3e2a4af76b4201bc0df81c482897ef5af8dab03be0e8bbdfbc858e7208c66d2f", 0x5, 0x40, 0x7, 0x2, 0x10, 0x2, 0x40, 0x7}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$video(&(0x7f0000000000), 0x20, 0x589000) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (async) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, &(0x7f0000000080)={{0x4, @addr=0x2}, "05b1c5f1ef96c7c0c2cbe535d52aaf94998ed30cd597330adc4a352285119517", 0x1}) (async) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000180)={0x101, "3e2a4af76b4201bc0df81c482897ef5af8dab03be0e8bbdfbc858e7208c66d2f", 0x5, 0x40, 0x7, 0x2, 0x10, 0x2, 0x40, 0x7}) (async) 11:43:34 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x83) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000001c0)={0x5, 0xfffffffa}) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000080)={0xc0000000, 0x10a, "58d4329b48728b3780919f0c9fce586ccb8781f2604aac1797470249cfb163f2", 0x8001, 0x6, 0x2, 0x80, 0x0, 0x4a7ee9bf, 0x5, 0x6, [0x3, 0x7, 0x7, 0x8]}) 11:43:34 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) socket$inet_udplite(0x2, 0x2, 0x88) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) (async) 11:43:34 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x8, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffb], 0xfffffffc}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) r2 = syz_open_dev$video(&(0x7f00000000c0), 0xff, 0x200001) ioctl$VIDIOC_G_EDID(r2, 0xc0285628, &(0x7f0000000140)={0x0, 0x8, 0x8, '\x00', &(0x7f0000000100)}) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000080)={0x0, 0x7fffffff, 0x401, '\x00', &(0x7f0000000000)=0x80}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x8, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffb], 0xfffffffc}}}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) syz_open_dev$video(&(0x7f00000000c0), 0xff, 0x200001) (async) ioctl$VIDIOC_G_EDID(r2, 0xc0285628, &(0x7f0000000140)={0x0, 0x8, 0x8, '\x00', &(0x7f0000000100)}) (async) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000080)={0x0, 0x7fffffff, 0x401, '\x00', &(0x7f0000000000)=0x80}) (async) 11:43:34 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x22100281}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200028bd7000fedbdf250200000008000100000000000c000600030000000000000008000100000000000c000200040000000000004000000000000000000c0002000000e0ffffffffff587ddab72217c9668eaea00d6fe841a8d7acbd917bc94672d3f61f6980c852db39381a9809fe18a6f88641437f23402dbc0013ed98fa3ad75198f895564c48cf"], 0x50}}, 0x44841) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x2, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_open_dev$vivid(&(0x7f0000000280), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f0000000300)={0x0, 0x2, 0x5, '\x00', &(0x7f00000002c0)=0xff}) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000000100)={0x1, 0x1, [0x1, 0x3, 0x1, 0x9, 0x800000, 0x641c8c45, 0x100, 0x4]}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x22100281}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200028bd7000fedbdf250200000008000100000000000c000600030000000000000008000100000000000c000200040000000000004000000000000000000c0002000000e0ffffffffff587ddab72217c9668eaea00d6fe841a8d7acbd917bc94672d3f61f6980c852db39381a9809fe18a6f88641437f23402dbc0013ed98fa3ad75198f895564c48cf"], 0x50}}, 0x44841) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x2, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}}) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000280), 0x0, 0x2) (async) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f0000000300)={0x0, 0x2, 0x5, '\x00', &(0x7f00000002c0)=0xff}) (async) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000000100)={0x1, 0x1, [0x1, 0x3, 0x1, 0x9, 0x800000, 0x641c8c45, 0x100, 0x4]}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (async) 11:43:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x25c442, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000100)) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) 11:43:34 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x83) (rerun: 64) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000001c0)={0x5, 0xfffffffa}) (async) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000080)={0xc0000000, 0x10a, "58d4329b48728b3780919f0c9fce586ccb8781f2604aac1797470249cfb163f2", 0x8001, 0x6, 0x2, 0x80, 0x0, 0x4a7ee9bf, 0x5, 0x6, [0x3, 0x7, 0x7, 0x8]}) 11:43:34 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x22100281}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200028bd7000fedbdf250200000008000100000000000c000600030000000000000008000100000000000c000200040000000000004000000000000000000c0002000000e0ffffffffff587ddab72217c9668eaea00d6fe841a8d7acbd917bc94672d3f61f6980c852db39381a9809fe18a6f88641437f23402dbc0013ed98fa3ad75198f895564c48cf"], 0x50}}, 0x44841) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x2, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_open_dev$vivid(&(0x7f0000000280), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f0000000300)={0x0, 0x2, 0x5, '\x00', &(0x7f00000002c0)=0xff}) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000000100)={0x1, 0x1, [0x1, 0x3, 0x1, 0x9, 0x800000, 0x641c8c45, 0x100, 0x4]}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x22100281}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200028bd7000fedbdf250200000008000100000000000c000600030000000000000008000100000000000c000200040000000000004000000000000000000c0002000000e0ffffffffff587ddab72217c9668eaea00d6fe841a8d7acbd917bc94672d3f61f6980c852db39381a9809fe18a6f88641437f23402dbc0013ed98fa3ad75198f895564c48cf"], 0x50}}, 0x44841) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x2, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}}) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000280), 0x0, 0x2) (async) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f0000000300)={0x0, 0x2, 0x5, '\x00', &(0x7f00000002c0)=0xff}) (async) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000000100)={0x1, 0x1, [0x1, 0x3, 0x1, 0x9, 0x800000, 0x641c8c45, 0x100, 0x4]}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (async) 11:43:34 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:43:34 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x20, 0x589000) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (async) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, &(0x7f0000000080)={{0x4, @addr=0x2}, "05b1c5f1ef96c7c0c2cbe535d52aaf94998ed30cd597330adc4a352285119517", 0x1}) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000180)={0x101, "3e2a4af76b4201bc0df81c482897ef5af8dab03be0e8bbdfbc858e7208c66d2f", 0x5, 0x40, 0x7, 0x2, 0x10, 0x2, 0x40, 0x7}) 11:43:34 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x7, 0x3, 0x2, {0x2, @raw_data="74e36c38109f07463d4491b1b4c1b970ab8666de149ba0cad524741ff66c00f67a4c098c83a298f6c036775f9a87d061d96327a7f7d6a2b90834ff25fbbc552ba3c59f4fcba15056b3e16b38baabba9d886d5cc218e5e0b42510f8a88c7e3773ce5129bdd50830471df1b0771d54e7de100e34081e01796e70269c72be73579363ad0a6fb5fa25c26051eef1b7879970f3bce9b72082fa445d8e6d924f2d68c1af6c9fa18dc61c2d45b22db4b92428a942d08d78d933de64234a625a1c8d8548a119579356e6c929"}}) 11:43:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x25c442, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000100)) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x25c442, 0x0) (async) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000100)) (async) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) (async) 11:43:34 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x83) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000001c0)={0x5, 0xfffffffa}) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000080)={0xc0000000, 0x10a, "58d4329b48728b3780919f0c9fce586ccb8781f2604aac1797470249cfb163f2", 0x8001, 0x6, 0x2, 0x80, 0x0, 0x4a7ee9bf, 0x5, 0x6, [0x3, 0x7, 0x7, 0x8]}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x83) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000001c0)={0x5, 0xfffffffa}) (async) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000080)={0xc0000000, 0x10a, "58d4329b48728b3780919f0c9fce586ccb8781f2604aac1797470249cfb163f2", 0x8001, 0x6, 0x2, 0x80, 0x0, 0x4a7ee9bf, 0x5, 0x6, [0x3, 0x7, 0x7, 0x8]}) (async) 11:43:34 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x98, 0x0, 0x9faa00713a39ac8d, 0x1ff, 0x0, 0x10001, 0x80, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:43:34 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) (async) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:43:34 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) syz_open_dev$video(&(0x7f00000000c0), 0x9, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000080)=0xa895) 11:43:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x25c442, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) (async, rerun: 64) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000100)) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) 11:43:34 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x7, 0x3, 0x2, {0x2, @raw_data="74e36c38109f07463d4491b1b4c1b970ab8666de149ba0cad524741ff66c00f67a4c098c83a298f6c036775f9a87d061d96327a7f7d6a2b90834ff25fbbc552ba3c59f4fcba15056b3e16b38baabba9d886d5cc218e5e0b42510f8a88c7e3773ce5129bdd50830471df1b0771d54e7de100e34081e01796e70269c72be73579363ad0a6fb5fa25c26051eef1b7879970f3bce9b72082fa445d8e6d924f2d68c1af6c9fa18dc61c2d45b22db4b92428a942d08d78d933de64234a625a1c8d8548a119579356e6c929"}}) 11:43:34 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x4, 0x40003) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:43:34 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x98, 0x0, 0x9faa00713a39ac8d, 0x1ff, 0x0, 0x10001, 0x80, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x98, 0x0, 0x9faa00713a39ac8d, 0x1ff, 0x0, 0x10001, 0x80, 0x1}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) 11:43:34 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) (async) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) 11:43:34 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) syz_open_dev$video(&(0x7f00000000c0), 0x9, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000080)=0xa895) 11:43:34 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x7, 0x3, 0x2, {0x2, @raw_data="74e36c38109f07463d4491b1b4c1b970ab8666de149ba0cad524741ff66c00f67a4c098c83a298f6c036775f9a87d061d96327a7f7d6a2b90834ff25fbbc552ba3c59f4fcba15056b3e16b38baabba9d886d5cc218e5e0b42510f8a88c7e3773ce5129bdd50830471df1b0771d54e7de100e34081e01796e70269c72be73579363ad0a6fb5fa25c26051eef1b7879970f3bce9b72082fa445d8e6d924f2d68c1af6c9fa18dc61c2d45b22db4b92428a942d08d78d933de64234a625a1c8d8548a119579356e6c929"}}) 11:43:34 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x4, 0x40003) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:43:34 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) (async) syz_open_dev$video(&(0x7f00000000c0), 0x9, 0x0) (async) r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000080)=0xa895) 11:43:35 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r1 = syz_open_dev$video(&(0x7f0000000080), 0x9, 0x80600) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f00000000c0)) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 11:43:35 executing program 3: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x8, 0x4, '\x00', &(0x7f0000000040)=0xfb}) 11:43:35 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x98, 0x0, 0x9faa00713a39ac8d, 0x1ff, 0x0, 0x10001, 0x80, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x98, 0x0, 0x9faa00713a39ac8d, 0x1ff, 0x0, 0x10001, 0x80, 0x1}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) 11:43:35 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000080)={0x3, @output={0x0, 0x1, {0x8, 0xc000000}, 0x9, 0x6}}) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x214) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x9, 0x4, 0x9, 0x2, 0x0, 0x4, 0x6}) 11:43:35 executing program 3: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x8, 0x4, '\x00', &(0x7f0000000040)=0xfb}) 11:43:35 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x4, 0x40003) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) 11:43:35 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000006c0)) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f00000000c0)={0xfffffffa, 0x0, 0x200e, 0x200, 0xfffffffd, 0x3}) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x800, 0x1, '\x00', &(0x7f0000000000)=0x9}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x80, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}, 0x1f}) 11:43:35 executing program 3: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x8, 0x4, '\x00', &(0x7f0000000040)=0xfb}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x8, 0x4, '\x00', &(0x7f0000000040)=0xfb}) (async) 11:43:35 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) (async, rerun: 32) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000080)={0x3, @output={0x0, 0x1, {0x8, 0xc000000}, 0x9, 0x6}}) (async, rerun: 32) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x214) (async) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x9, 0x4, 0x9, 0x2, 0x0, 0x4, 0x6}) 11:43:35 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r1 = syz_open_dev$video(&(0x7f0000000080), 0x9, 0x80600) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f00000000c0)) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) syz_open_dev$video(&(0x7f0000000080), 0x9, 0x80600) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f00000000c0)) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) 11:43:35 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f00000005c0)={0xfffffffc, 0x5, 0x5}) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0xe4, 0x4, 0x1, {0x1, @win={{0x10001, 0x3, 0x101, 0xaf}, 0x2, 0x40, &(0x7f0000000340)={{0xffff, 0x3, 0x9, 0xede}, &(0x7f0000000300)={{0x7, 0x1f, 0xffffffd9, 0x2}, &(0x7f0000000580)={{0x66c0, 0x8, 0x6, 0x3}}}}, 0x4, &(0x7f0000000480)="bc40a3de09f6b5e7afc820a862c0d358afcb8ed428fae1f71214dbe772a8e6344b70c76e2fc69ebef3b8ec7999adf3b61c71c1c2aa84a0130ba4e32b0e16f5de678117a5c7eed576f88f255e40a42998edc934338abb250b6fe2e62f45c6c431c579061086cc0e5539fa89360ebb13f7e3ca01f8bca833392496e67e9be4bc9b2ec0910b1076d55b6882087d07660dd566150e05f1b0145bcbdb4fab1c478c8d0455e872fac5db65087aca4f65ca5f46884b9c6bb5fe59947928b5c98a54bf9129b2aed5b8e46515831478f74f6540fe309f928a729cb47b8b6f", 0x1f}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x200, 0x6, 0x4, {0x3, @win={{0x2, 0x9, 0x5, 0x3}, 0x7, 0x999, &(0x7f0000000080)={{0xff, 0x4, 0x3ff, 0x2}, &(0x7f0000000000)={{0x5, 0x2, 0x3, 0x2}}}, 0x4, &(0x7f00000000c0)="3213170835d4bec2d08369249705d046fca95539489261a5950b50c6e24adfbb70a665957139362ea5fea198a3e400798e96bb446fa8f6a5bf96c316e6851fd9bf2843d413cd2f3da376f90ffa2ad8bae158a3af17f4b29f67fdf08b67a1585965990158e837e9968cce74ddc7e38dfee2e46262480fbd1e91d9c37e24a2523e4bb5ca6a34860335741ac7a1a1f0fae1d139ee049f06c7c4ed793eff1cc13a39a14e78d45b811040f46cacaf9557b502e528af88a73f6fe432e0cca77cf073a381d69b7b198764d30010c6eb7fc6d5eb6c0f2820b75017b6ce2907caee9d1b803afb147a5eaf012861"}}, 0x80000000}) 11:43:35 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x4, 0x8, 0x2, "02ad1cad2d4b9ed1f8ebafe60202cdea30dab3244bf2380b2eb7d5b061b69081", 0x4f565559}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) 11:43:35 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1]}}}) 11:43:35 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f00000005c0)={0xfffffffc, 0x5, 0x5}) (async, rerun: 64) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (rerun: 64) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0xe4, 0x4, 0x1, {0x1, @win={{0x10001, 0x3, 0x101, 0xaf}, 0x2, 0x40, &(0x7f0000000340)={{0xffff, 0x3, 0x9, 0xede}, &(0x7f0000000300)={{0x7, 0x1f, 0xffffffd9, 0x2}, &(0x7f0000000580)={{0x66c0, 0x8, 0x6, 0x3}}}}, 0x4, &(0x7f0000000480)="bc40a3de09f6b5e7afc820a862c0d358afcb8ed428fae1f71214dbe772a8e6344b70c76e2fc69ebef3b8ec7999adf3b61c71c1c2aa84a0130ba4e32b0e16f5de678117a5c7eed576f88f255e40a42998edc934338abb250b6fe2e62f45c6c431c579061086cc0e5539fa89360ebb13f7e3ca01f8bca833392496e67e9be4bc9b2ec0910b1076d55b6882087d07660dd566150e05f1b0145bcbdb4fab1c478c8d0455e872fac5db65087aca4f65ca5f46884b9c6bb5fe59947928b5c98a54bf9129b2aed5b8e46515831478f74f6540fe309f928a729cb47b8b6f", 0x1f}}}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x200, 0x6, 0x4, {0x3, @win={{0x2, 0x9, 0x5, 0x3}, 0x7, 0x999, &(0x7f0000000080)={{0xff, 0x4, 0x3ff, 0x2}, &(0x7f0000000000)={{0x5, 0x2, 0x3, 0x2}}}, 0x4, &(0x7f00000000c0)="3213170835d4bec2d08369249705d046fca95539489261a5950b50c6e24adfbb70a665957139362ea5fea198a3e400798e96bb446fa8f6a5bf96c316e6851fd9bf2843d413cd2f3da376f90ffa2ad8bae158a3af17f4b29f67fdf08b67a1585965990158e837e9968cce74ddc7e38dfee2e46262480fbd1e91d9c37e24a2523e4bb5ca6a34860335741ac7a1a1f0fae1d139ee049f06c7c4ed793eff1cc13a39a14e78d45b811040f46cacaf9557b502e528af88a73f6fe432e0cca77cf073a381d69b7b198764d30010c6eb7fc6d5eb6c0f2820b75017b6ce2907caee9d1b803afb147a5eaf012861"}}, 0x80000000}) 11:43:35 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000006c0)) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f00000000c0)={0xfffffffa, 0x0, 0x200e, 0x200, 0xfffffffd, 0x3}) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x800, 0x1, '\x00', &(0x7f0000000000)=0x9}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x80, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}, 0x1f}) 11:43:35 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1]}}}) (async) 11:43:35 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000006c0)) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f00000000c0)={0xfffffffa, 0x0, 0x200e, 0x200, 0xfffffffd, 0x3}) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x800, 0x1, '\x00', &(0x7f0000000000)=0x9}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x80, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}, 0x1f}) 11:43:35 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) r1 = syz_open_dev$video(&(0x7f0000000080), 0x9, 0x80600) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f00000000c0)) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) syz_open_dev$video(&(0x7f0000000080), 0x9, 0x80600) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f00000000c0)) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) 11:43:35 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000001c0)={@multicast2, @multicast1, 0x0, "6556ecb290a77fc888b31df26e0bb2d58c1e0ee90e84c8a9c0bfa14be72a4e53"}, 0x3c) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x8, 0x1, {0x2, @sliced={0x0, [0x0, 0xbfbb, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1f, 0x0, 0x0, 0xf1]}}}) 11:43:35 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f00000005c0)={0xfffffffc, 0x5, 0x5}) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0xe4, 0x4, 0x1, {0x1, @win={{0x10001, 0x3, 0x101, 0xaf}, 0x2, 0x40, &(0x7f0000000340)={{0xffff, 0x3, 0x9, 0xede}, &(0x7f0000000300)={{0x7, 0x1f, 0xffffffd9, 0x2}, &(0x7f0000000580)={{0x66c0, 0x8, 0x6, 0x3}}}}, 0x4, &(0x7f0000000480)="bc40a3de09f6b5e7afc820a862c0d358afcb8ed428fae1f71214dbe772a8e6344b70c76e2fc69ebef3b8ec7999adf3b61c71c1c2aa84a0130ba4e32b0e16f5de678117a5c7eed576f88f255e40a42998edc934338abb250b6fe2e62f45c6c431c579061086cc0e5539fa89360ebb13f7e3ca01f8bca833392496e67e9be4bc9b2ec0910b1076d55b6882087d07660dd566150e05f1b0145bcbdb4fab1c478c8d0455e872fac5db65087aca4f65ca5f46884b9c6bb5fe59947928b5c98a54bf9129b2aed5b8e46515831478f74f6540fe309f928a729cb47b8b6f", 0x1f}}}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x200, 0x6, 0x4, {0x3, @win={{0x2, 0x9, 0x5, 0x3}, 0x7, 0x999, &(0x7f0000000080)={{0xff, 0x4, 0x3ff, 0x2}, &(0x7f0000000000)={{0x5, 0x2, 0x3, 0x2}}}, 0x4, &(0x7f00000000c0)="3213170835d4bec2d08369249705d046fca95539489261a5950b50c6e24adfbb70a665957139362ea5fea198a3e400798e96bb446fa8f6a5bf96c316e6851fd9bf2843d413cd2f3da376f90ffa2ad8bae158a3af17f4b29f67fdf08b67a1585965990158e837e9968cce74ddc7e38dfee2e46262480fbd1e91d9c37e24a2523e4bb5ca6a34860335741ac7a1a1f0fae1d139ee049f06c7c4ed793eff1cc13a39a14e78d45b811040f46cacaf9557b502e528af88a73f6fe432e0cca77cf073a381d69b7b198764d30010c6eb7fc6d5eb6c0f2820b75017b6ce2907caee9d1b803afb147a5eaf012861"}}, 0x80000000}) 11:43:35 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) (async, rerun: 32) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000080)={0x3, @output={0x0, 0x1, {0x8, 0xc000000}, 0x9, 0x6}}) (async, rerun: 32) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x214) (async) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x9, 0x4, 0x9, 0x2, 0x0, 0x4, 0x6}) 11:43:35 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1]}}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1]}}}) (async) 11:43:35 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7], 0x8000000}}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x202000, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x1, 0x1, 0x3, {0x0, @sliced={0x5, [0xd7, 0x1, 0x7, 0x5, 0xfd72, 0x566, 0xd08, 0x1, 0x20, 0x4, 0xd535, 0xaa4, 0x1ff, 0xffa2, 0x621b, 0x3, 0x40, 0x9, 0x5, 0x6f8b, 0x20d2, 0x81, 0x40, 0x2f2b, 0x1, 0x6, 0x0, 0x1, 0x101, 0x8f52, 0x1, 0x200, 0x100, 0x6, 0x1, 0x2, 0x3, 0xfff9, 0x3, 0x2, 0x7f, 0x7, 0x0, 0xa6a, 0x100, 0x0, 0x1, 0x2], 0x6}}, 0x417}) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x72) 11:43:35 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000001c0)={@multicast2, @multicast1, 0x0, "6556ecb290a77fc888b31df26e0bb2d58c1e0ee90e84c8a9c0bfa14be72a4e53"}, 0x3c) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x8, 0x1, {0x2, @sliced={0x0, [0x0, 0xbfbb, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1f, 0x0, 0x0, 0xf1]}}}) 11:43:35 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000006c0)) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f00000000c0)={0xfffffffa, 0x0, 0x200e, 0x200, 0xfffffffd, 0x3}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x80, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}, 0x1f}) 11:43:35 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc]}}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000080)={0x80000001, 0x0, 0x300e, 0x401, 0x0, 0x5, 0x5988, 0x1}) 11:43:35 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000001c0)={@multicast2, @multicast1, 0x0, "6556ecb290a77fc888b31df26e0bb2d58c1e0ee90e84c8a9c0bfa14be72a4e53"}, 0x3c) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x8, 0x1, {0x2, @sliced={0x0, [0x0, 0xbfbb, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0xff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1f, 0x0, 0x0, 0xf1]}}}) 11:43:35 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f00000001c0)={0x0, 0x3, 0x9, '\x00', &(0x7f0000000180)=0xfc}) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f0000000080)={{0x3, @addr=0x1}, "7be47ae429113f0fe44aed8f03f89ae98b85df55b07e19c06536019b102f1a50", 0x3}) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000000)=0x6) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) 11:43:35 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7], 0x8000000}}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x202000, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x1, 0x1, 0x3, {0x0, @sliced={0x5, [0xd7, 0x1, 0x7, 0x5, 0xfd72, 0x566, 0xd08, 0x1, 0x20, 0x4, 0xd535, 0xaa4, 0x1ff, 0xffa2, 0x621b, 0x3, 0x40, 0x9, 0x5, 0x6f8b, 0x20d2, 0x81, 0x40, 0x2f2b, 0x1, 0x6, 0x0, 0x1, 0x101, 0x8f52, 0x1, 0x200, 0x100, 0x6, 0x1, 0x2, 0x3, 0xfff9, 0x3, 0x2, 0x7f, 0x7, 0x0, 0xa6a, 0x100, 0x0, 0x1, 0x2], 0x6}}, 0x417}) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x72) 11:43:36 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000006c0)) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x80, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}, 0x1f}) 11:43:36 executing program 4: socketpair(0x1a, 0x3, 0x5, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f00000000c0)={@mcast2, @private0}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0xbd9, 0xa, 0x1, "d43bade0be35400302240c26e6541bb1ef4e30027010dd6363145b0ee55e5d83", 0x55595659}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2b, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f0000000100)={0x1ff, "e8141acb159704fffc0ee4c7550b1b39665a6070d188dcbbb1c4bdd88fe258cd", 0x5, 0x4, 0x5, 0x8001, 0x2, 0x0, 0x3, 0x4}) 11:43:36 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f00000001c0)={0x0, 0x3, 0x9, '\x00', &(0x7f0000000180)=0xfc}) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f0000000080)={{0x3, @addr=0x1}, "7be47ae429113f0fe44aed8f03f89ae98b85df55b07e19c06536019b102f1a50", 0x3}) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) (async, rerun: 32) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000000)=0x6) (async, rerun: 32) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) 11:43:36 executing program 1: io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x200, 0xffffffffffffffff, &(0x7f00000000c0)="5845fd1838f9f2d97e3cc51f63c84e2b8601e74e4e09911d4cf72c32bf1a020c69bd470cd8db9213295387c1bc65d85b0c0ab613b5cac4b63c7ab5a0231a9232e2a6be3cc60f1b57c6d8018e17befdbb12d616d4b5f134a4e1", 0x59, 0xfff, 0x0, 0x3}]) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket(0xa, 0x6, 0x4e) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000300)="e543657fb9ae0dce451dbe7fef5db82efc7d56b934814bdeb36f316c54ff95ec82cfacd2de08ca1ed0c1d8d6661f47f61720eb08ffc2ce00040000d5caf8366f87bdcf29bc8b3fe6304c448023", &(0x7f0000000200)=@udp6=r1, 0x4}, 0x20) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sdr={0x32315559, 0x56}}}) r3 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000080)={0x2, 0x3147504d, 0x1, @discrete={0x6, 0x75b}}) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, &(0x7f0000000280)) 11:43:36 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7], 0x8000000}}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x202000, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x1, 0x1, 0x3, {0x0, @sliced={0x5, [0xd7, 0x1, 0x7, 0x5, 0xfd72, 0x566, 0xd08, 0x1, 0x20, 0x4, 0xd535, 0xaa4, 0x1ff, 0xffa2, 0x621b, 0x3, 0x40, 0x9, 0x5, 0x6f8b, 0x20d2, 0x81, 0x40, 0x2f2b, 0x1, 0x6, 0x0, 0x1, 0x101, 0x8f52, 0x1, 0x200, 0x100, 0x6, 0x1, 0x2, 0x3, 0xfff9, 0x3, 0x2, 0x7f, 0x7, 0x0, 0xa6a, 0x100, 0x0, 0x1, 0x2], 0x6}}, 0x417}) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x72) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7], 0x8000000}}}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x202000, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x1, 0x1, 0x3, {0x0, @sliced={0x5, [0xd7, 0x1, 0x7, 0x5, 0xfd72, 0x566, 0xd08, 0x1, 0x20, 0x4, 0xd535, 0xaa4, 0x1ff, 0xffa2, 0x621b, 0x3, 0x40, 0x9, 0x5, 0x6f8b, 0x20d2, 0x81, 0x40, 0x2f2b, 0x1, 0x6, 0x0, 0x1, 0x101, 0x8f52, 0x1, 0x200, 0x100, 0x6, 0x1, 0x2, 0x3, 0xfff9, 0x3, 0x2, 0x7f, 0x7, 0x0, 0xa6a, 0x100, 0x0, 0x1, 0x2], 0x6}}, 0x417}) (async) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x72) (async) 11:43:36 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc]}}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000080)={0x80000001, 0x0, 0x300e, 0x401, 0x0, 0x5, 0x5988, 0x1}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc]}}}) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000080)={0x80000001, 0x0, 0x300e, 0x401, 0x0, 0x5, 0x5988, 0x1}) (async) 11:43:36 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f00000001c0)={0x0, 0x3, 0x9, '\x00', &(0x7f0000000180)=0xfc}) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f0000000080)={{0x3, @addr=0x1}, "7be47ae429113f0fe44aed8f03f89ae98b85df55b07e19c06536019b102f1a50", 0x3}) (async) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000000)=0x6) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) 11:43:36 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000006c0)) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x80, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}, 0x1f}) 11:43:36 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x2) 11:43:36 executing program 5: socketpair(0x1a, 0x3, 0x5, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f00000000c0)={@mcast2, @private0}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0xbd9, 0xa, 0x1, "d43bade0be35400302240c26e6541bb1ef4e30027010dd6363145b0ee55e5d83", 0x55595659}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2b, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f0000000100)={0x1ff, "e8141acb159704fffc0ee4c7550b1b39665a6070d188dcbbb1c4bdd88fe258cd", 0x5, 0x4, 0x5, 0x8001, 0x2, 0x0, 0x3, 0x4}) 11:43:36 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x2) 11:43:36 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x80, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}, 0x1f}) 11:43:36 executing program 4: ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000200)={0x3, 0x200, {0x52, 0xde, 0x401, {0x6, 0x8}, {0x3}, @period={0x5a, 0x6, 0xd808, 0x5, 0xfc70, {0x7ff, 0x8, 0xad, 0x1000}, 0x6, &(0x7f00000001c0)=[0xfff, 0x800, 0x6, 0x0, 0x72ce, 0x6]}}, {0x57, 0x40, 0x9a0, {0xf1af}, {0x81a, 0x9}, @cond=[{0x9, 0x4, 0x9, 0x0, 0x9, 0xb0b}, {0x6, 0xa8, 0x4, 0x401, 0x0, 0xd9d9}]}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x2, "808a119a1f5329de6061144929a25aee514e8700f2ce03377285a39e9cf4bd45", 0x1, 0x8, 0x200, 0xb000, 0x8}) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @win={{0x2, 0x7, 0xffffffff, 0x5}, 0x7, 0xffffff04, &(0x7f0000000140)={{0x0, 0x5, 0x4, 0x6}, &(0x7f0000000100)={{0x42, 0x101, 0x250e}}}, 0x1, &(0x7f0000000180)="22133412e966d52f", 0x9}}}) r3 = syz_open_dev$video(&(0x7f0000000000), 0xab41, 0xa00) r4 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f00000006c0)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540), 0x802, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000580)={{0x8000, 0x4, 0x100, 0x3ff}, 'syz1\x00', 0x45}) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x4) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000300)={0xa00000, 0x7, 0x5, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x9b0971, 0x3, '\x00', @p_u32=&(0x7f0000000280)=0x2}}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000080)={0x6, 0x5, 0x0, 0x1000, 0x40f2, 0x8, 0x8}) 11:43:36 executing program 1: io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x200, 0xffffffffffffffff, &(0x7f00000000c0)="5845fd1838f9f2d97e3cc51f63c84e2b8601e74e4e09911d4cf72c32bf1a020c69bd470cd8db9213295387c1bc65d85b0c0ab613b5cac4b63c7ab5a0231a9232e2a6be3cc60f1b57c6d8018e17befdbb12d616d4b5f134a4e1", 0x59, 0xfff, 0x0, 0x3}]) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket(0xa, 0x6, 0x4e) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000300)="e543657fb9ae0dce451dbe7fef5db82efc7d56b934814bdeb36f316c54ff95ec82cfacd2de08ca1ed0c1d8d6661f47f61720eb08ffc2ce00040000d5caf8366f87bdcf29bc8b3fe6304c448023", &(0x7f0000000200)=@udp6=r1, 0x4}, 0x20) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sdr={0x32315559, 0x56}}}) r3 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000080)={0x2, 0x3147504d, 0x1, @discrete={0x6, 0x75b}}) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, &(0x7f0000000280)) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x200, 0xffffffffffffffff, &(0x7f00000000c0)="5845fd1838f9f2d97e3cc51f63c84e2b8601e74e4e09911d4cf72c32bf1a020c69bd470cd8db9213295387c1bc65d85b0c0ab613b5cac4b63c7ab5a0231a9232e2a6be3cc60f1b57c6d8018e17befdbb12d616d4b5f134a4e1", 0x59, 0xfff, 0x0, 0x3}]) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) socket(0xa, 0x6, 0x4e) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r2) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000300)="e543657fb9ae0dce451dbe7fef5db82efc7d56b934814bdeb36f316c54ff95ec82cfacd2de08ca1ed0c1d8d6661f47f61720eb08ffc2ce00040000d5caf8366f87bdcf29bc8b3fe6304c448023", &(0x7f0000000200)=@udp6=r1, 0x4}, 0x20) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sdr={0x32315559, 0x56}}}) (async) syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) (async) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000080)={0x2, 0x3147504d, 0x1, @discrete={0x6, 0x75b}}) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, &(0x7f0000000280)) (async) 11:43:36 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc]}}}) (async) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000080)={0x80000001, 0x0, 0x300e, 0x401, 0x0, 0x5, 0x5988, 0x1}) 11:43:36 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x2) 11:43:36 executing program 5: socketpair(0x1a, 0x3, 0x5, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f00000000c0)={@mcast2, @private0}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0xbd9, 0xa, 0x1, "d43bade0be35400302240c26e6541bb1ef4e30027010dd6363145b0ee55e5d83", 0x55595659}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2b, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f0000000100)={0x1ff, "e8141acb159704fffc0ee4c7550b1b39665a6070d188dcbbb1c4bdd88fe258cd", 0x5, 0x4, 0x5, 0x8001, 0x2, 0x0, 0x3, 0x4}) 11:43:36 executing program 4: ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000200)={0x3, 0x200, {0x52, 0xde, 0x401, {0x6, 0x8}, {0x3}, @period={0x5a, 0x6, 0xd808, 0x5, 0xfc70, {0x7ff, 0x8, 0xad, 0x1000}, 0x6, &(0x7f00000001c0)=[0xfff, 0x800, 0x6, 0x0, 0x72ce, 0x6]}}, {0x57, 0x40, 0x9a0, {0xf1af}, {0x81a, 0x9}, @cond=[{0x9, 0x4, 0x9, 0x0, 0x9, 0xb0b}, {0x6, 0xa8, 0x4, 0x401, 0x0, 0xd9d9}]}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x2, "808a119a1f5329de6061144929a25aee514e8700f2ce03377285a39e9cf4bd45", 0x1, 0x8, 0x200, 0xb000, 0x8}) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @win={{0x2, 0x7, 0xffffffff, 0x5}, 0x7, 0xffffff04, &(0x7f0000000140)={{0x0, 0x5, 0x4, 0x6}, &(0x7f0000000100)={{0x42, 0x101, 0x250e}}}, 0x1, &(0x7f0000000180)="22133412e966d52f", 0x9}}}) r3 = syz_open_dev$video(&(0x7f0000000000), 0xab41, 0xa00) r4 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f00000006c0)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540), 0x802, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000580)={{0x8000, 0x4, 0x100, 0x3ff}, 'syz1\x00', 0x45}) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x4) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000300)={0xa00000, 0x7, 0x5, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x9b0971, 0x3, '\x00', @p_u32=&(0x7f0000000280)=0x2}}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000080)={0x6, 0x5, 0x0, 0x1000, 0x40f2, 0x8, 0x8}) 11:43:36 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x80, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}, 0x1f}) 11:43:36 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000000)=0x9) 11:43:36 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) 11:43:36 executing program 4: ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000200)={0x3, 0x200, {0x52, 0xde, 0x401, {0x6, 0x8}, {0x3}, @period={0x5a, 0x6, 0xd808, 0x5, 0xfc70, {0x7ff, 0x8, 0xad, 0x1000}, 0x6, &(0x7f00000001c0)=[0xfff, 0x800, 0x6, 0x0, 0x72ce, 0x6]}}, {0x57, 0x40, 0x9a0, {0xf1af}, {0x81a, 0x9}, @cond=[{0x9, 0x4, 0x9, 0x0, 0x9, 0xb0b}, {0x6, 0xa8, 0x4, 0x401, 0x0, 0xd9d9}]}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x2, "808a119a1f5329de6061144929a25aee514e8700f2ce03377285a39e9cf4bd45", 0x1, 0x8, 0x200, 0xb000, 0x8}) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @win={{0x2, 0x7, 0xffffffff, 0x5}, 0x7, 0xffffff04, &(0x7f0000000140)={{0x0, 0x5, 0x4, 0x6}, &(0x7f0000000100)={{0x42, 0x101, 0x250e}}}, 0x1, &(0x7f0000000180)="22133412e966d52f", 0x9}}}) r3 = syz_open_dev$video(&(0x7f0000000000), 0xab41, 0xa00) r4 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f00000006c0)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540), 0x802, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000580)={{0x8000, 0x4, 0x100, 0x3ff}, 'syz1\x00', 0x45}) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x4) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000300)={0xa00000, 0x7, 0x5, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x9b0971, 0x3, '\x00', @p_u32=&(0x7f0000000280)=0x2}}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000080)={0x6, 0x5, 0x0, 0x1000, 0x40f2, 0x8, 0x8}) 11:43:36 executing program 4: ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000200)={0x3, 0x200, {0x52, 0xde, 0x401, {0x6, 0x8}, {0x3}, @period={0x5a, 0x6, 0xd808, 0x5, 0xfc70, {0x7ff, 0x8, 0xad, 0x1000}, 0x6, &(0x7f00000001c0)=[0xfff, 0x800, 0x6, 0x0, 0x72ce, 0x6]}}, {0x57, 0x40, 0x9a0, {0xf1af}, {0x81a, 0x9}, @cond=[{0x9, 0x4, 0x9, 0x0, 0x9, 0xb0b}, {0x6, 0xa8, 0x4, 0x401, 0x0, 0xd9d9}]}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x2, "808a119a1f5329de6061144929a25aee514e8700f2ce03377285a39e9cf4bd45", 0x1, 0x8, 0x200, 0xb000, 0x8}) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @win={{0x2, 0x7, 0xffffffff, 0x5}, 0x7, 0xffffff04, &(0x7f0000000140)={{0x0, 0x5, 0x4, 0x6}, &(0x7f0000000100)={{0x42, 0x101, 0x250e}}}, 0x1, &(0x7f0000000180)="22133412e966d52f", 0x9}}}) syz_open_dev$video(&(0x7f0000000000), 0xab41, 0xa00) r3 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540), 0x802, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000580)={{0x8000, 0x4, 0x100, 0x3ff}, 'syz1\x00', 0x45}) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x4) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000300)={0xa00000, 0x7, 0x5, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x9b0971, 0x3, '\x00', @p_u32=&(0x7f0000000280)=0x2}}) socket$nl_generic(0x10, 0x3, 0x10) 11:43:36 executing program 5: socketpair(0x1a, 0x3, 0x5, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f00000000c0)={@mcast2, @private0}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0xbd9, 0xa, 0x1, "d43bade0be35400302240c26e6541bb1ef4e30027010dd6363145b0ee55e5d83", 0x55595659}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2b, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f0000000100)={0x1ff, "e8141acb159704fffc0ee4c7550b1b39665a6070d188dcbbb1c4bdd88fe258cd", 0x5, 0x4, 0x5, 0x8001, 0x2, 0x0, 0x3, 0x4}) 11:43:36 executing program 1: io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x200, 0xffffffffffffffff, &(0x7f00000000c0)="5845fd1838f9f2d97e3cc51f63c84e2b8601e74e4e09911d4cf72c32bf1a020c69bd470cd8db9213295387c1bc65d85b0c0ab613b5cac4b63c7ab5a0231a9232e2a6be3cc60f1b57c6d8018e17befdbb12d616d4b5f134a4e1", 0x59, 0xfff, 0x0, 0x3}]) (async) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = socket(0xa, 0x6, 0x4e) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r2) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000300)="e543657fb9ae0dce451dbe7fef5db82efc7d56b934814bdeb36f316c54ff95ec82cfacd2de08ca1ed0c1d8d6661f47f61720eb08ffc2ce00040000d5caf8366f87bdcf29bc8b3fe6304c448023", &(0x7f0000000200)=@udp6=r1, 0x4}, 0x20) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sdr={0x32315559, 0x56}}}) (async) r3 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000080)={0x2, 0x3147504d, 0x1, @discrete={0x6, 0x75b}}) (async) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, &(0x7f0000000280)) 11:43:36 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) (async) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) 11:43:36 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x80, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}, 0x1f}) 11:43:36 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000000)=0x9) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) (async) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000000)=0x9) (async) 11:43:36 executing program 4: ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000200)={0x3, 0x200, {0x52, 0xde, 0x401, {0x6, 0x8}, {0x3}, @period={0x5a, 0x6, 0xd808, 0x5, 0xfc70, {0x7ff, 0x8, 0xad, 0x1000}, 0x6, &(0x7f00000001c0)=[0xfff, 0x800, 0x6, 0x0, 0x72ce, 0x6]}}, {0x57, 0x40, 0x9a0, {0xf1af}, {0x81a, 0x9}, @cond=[{0x9, 0x4, 0x9, 0x0, 0x9, 0xb0b}, {0x6, 0xa8, 0x4, 0x401, 0x0, 0xd9d9}]}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x2, "808a119a1f5329de6061144929a25aee514e8700f2ce03377285a39e9cf4bd45", 0x1, 0x8, 0x200, 0xb000, 0x8}) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @win={{0x2, 0x7, 0xffffffff, 0x5}, 0x7, 0xffffff04, &(0x7f0000000140)={{0x0, 0x5, 0x4, 0x6}, &(0x7f0000000100)={{0x42, 0x101, 0x250e}}}, 0x1, &(0x7f0000000180)="22133412e966d52f", 0x9}}}) syz_open_dev$video(&(0x7f0000000000), 0xab41, 0xa00) r3 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540), 0x802, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000580)={{0x8000, 0x4, 0x100, 0x3ff}, 'syz1\x00', 0x45}) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x4) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000300)={0xa00000, 0x7, 0x5, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x9b0971, 0x3, '\x00', @p_u32=&(0x7f0000000280)=0x2}}) 11:43:36 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x80, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}, 0x1f}) 11:43:36 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) (async) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) 11:43:36 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000000)={0x0, 0x6000}) 11:43:36 executing program 5: socketpair(0x1a, 0x3, 0x5, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f00000000c0)={@mcast2, @private0}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0xbd9, 0xa, 0x1, "d43bade0be35400302240c26e6541bb1ef4e30027010dd6363145b0ee55e5d83", 0x55595659}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2b, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) r2 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000006c0)) 11:43:36 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000080)) socket$inet6_dccp(0xa, 0x6, 0x0) 11:43:36 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x80, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}, 0x1f}) 11:43:37 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40]}}}) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000000)={0x0, 0x6000}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40]}}}) (async) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000000)={0x0, 0x6000}) (async) 11:43:37 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000000)=0x9) 11:43:37 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x80, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}, 0x1f}) 11:43:37 executing program 4: ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000200)={0x3, 0x200, {0x52, 0xde, 0x401, {0x6, 0x8}, {0x3}, @period={0x5a, 0x6, 0xd808, 0x5, 0xfc70, {0x7ff, 0x8, 0xad, 0x1000}, 0x6, &(0x7f00000001c0)=[0xfff, 0x800, 0x6, 0x0, 0x72ce, 0x6]}}, {0x57, 0x40, 0x9a0, {0xf1af}, {0x81a, 0x9}, @cond=[{0x9, 0x4, 0x9, 0x0, 0x9, 0xb0b}, {0x6, 0xa8, 0x4, 0x401, 0x0, 0xd9d9}]}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x2, "808a119a1f5329de6061144929a25aee514e8700f2ce03377285a39e9cf4bd45", 0x1, 0x8, 0x200, 0xb000, 0x8}) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @win={{0x2, 0x7, 0xffffffff, 0x5}, 0x7, 0xffffff04, &(0x7f0000000140)={{0x0, 0x5, 0x4, 0x6}, &(0x7f0000000100)={{0x42, 0x101, 0x250e}}}, 0x1, &(0x7f0000000180)="22133412e966d52f", 0x9}}}) syz_open_dev$video(&(0x7f0000000000), 0xab41, 0xa00) r3 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540), 0x802, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000580)={{0x8000, 0x4, 0x100, 0x3ff}, 'syz1\x00', 0x45}) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x4) 11:43:37 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) (async) r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000080)) (async) socket$inet6_dccp(0xa, 0x6, 0x0) 11:43:37 executing program 5: socketpair(0x1a, 0x3, 0x5, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f00000000c0)={@mcast2, @private0}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0xbd9, 0xa, 0x1, "d43bade0be35400302240c26e6541bb1ef4e30027010dd6363145b0ee55e5d83", 0x55595659}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2b, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) 11:43:37 executing program 2: r0 = syz_open_dev$vivid(0x0, 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x80, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}, 0x1f}) 11:43:37 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}}) 11:43:37 executing program 4: ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000200)={0x3, 0x200, {0x52, 0xde, 0x401, {0x6, 0x8}, {0x3}, @period={0x5a, 0x6, 0xd808, 0x5, 0xfc70, {0x7ff, 0x8, 0xad, 0x1000}, 0x6, &(0x7f00000001c0)=[0xfff, 0x800, 0x6, 0x0, 0x72ce, 0x6]}}, {0x57, 0x40, 0x9a0, {0xf1af}, {0x81a, 0x9}, @cond=[{0x9, 0x4, 0x9, 0x0, 0x9, 0xb0b}, {0x6, 0xa8, 0x4, 0x401, 0x0, 0xd9d9}]}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x2, "808a119a1f5329de6061144929a25aee514e8700f2ce03377285a39e9cf4bd45", 0x1, 0x8, 0x200, 0xb000, 0x8}) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @win={{0x2, 0x7, 0xffffffff, 0x5}, 0x7, 0xffffff04, &(0x7f0000000140)={{0x0, 0x5, 0x4, 0x6}, &(0x7f0000000100)={{0x42, 0x101, 0x250e}}}, 0x1, &(0x7f0000000180)="22133412e966d52f", 0x9}}}) syz_open_dev$video(&(0x7f0000000000), 0xab41, 0xa00) r3 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540), 0x802, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000580)={{0x8000, 0x4, 0x100, 0x3ff}, 'syz1\x00', 0x45}) 11:43:37 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40]}}}) (async) r1 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000006c0)) (async) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000000)={0x0, 0x6000}) 11:43:37 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000080)) socket$inet6_dccp(0xa, 0x6, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) (async) syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) (async) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000080)) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) 11:43:37 executing program 2: r0 = syz_open_dev$vivid(0x0, 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x80, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}, 0x1f}) 11:43:37 executing program 2: r0 = syz_open_dev$vivid(0x0, 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x80, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}, 0x1f}) 11:43:37 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}}) 11:43:37 executing program 5: socketpair(0x1a, 0x3, 0x5, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f00000000c0)={@mcast2, @private0}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0xbd9, 0xa, 0x1, "d43bade0be35400302240c26e6541bb1ef4e30027010dd6363145b0ee55e5d83", 0x55595659}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2b, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) 11:43:37 executing program 2: syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x80, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}, 0x1f}) 11:43:37 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x20000) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) 11:43:37 executing program 2: syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x80, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}, 0x1f}) 11:43:37 executing program 4: ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000200)={0x3, 0x200, {0x52, 0xde, 0x401, {0x6, 0x8}, {0x3}, @period={0x5a, 0x6, 0xd808, 0x5, 0xfc70, {0x7ff, 0x8, 0xad, 0x1000}, 0x6, &(0x7f00000001c0)=[0xfff, 0x800, 0x6, 0x0, 0x72ce, 0x6]}}, {0x57, 0x40, 0x9a0, {0xf1af}, {0x81a, 0x9}, @cond=[{0x9, 0x4, 0x9, 0x0, 0x9, 0xb0b}, {0x6, 0xa8, 0x4, 0x401, 0x0, 0xd9d9}]}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000004c0)={0x2, "808a119a1f5329de6061144929a25aee514e8700f2ce03377285a39e9cf4bd45", 0x1, 0x8, 0x200, 0xb000, 0x8}) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @win={{0x2, 0x7, 0xffffffff, 0x5}, 0x7, 0xffffff04, &(0x7f0000000140)={{0x0, 0x5, 0x4, 0x6}, &(0x7f0000000100)={{0x42, 0x101, 0x250e}}}, 0x1, &(0x7f0000000180)="22133412e966d52f", 0x9}}}) syz_open_dev$video(&(0x7f0000000000), 0xab41, 0xa00) r3 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000006c0)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000540), 0x802, 0x0) 11:43:37 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x2) 11:43:37 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}}) 11:43:37 executing program 2: syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x80, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}, 0x1f}) 11:43:37 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x20000) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x20000) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x0, {0xd, @sliced}}) (async) 11:43:37 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 11:43:37 executing program 5: socketpair(0x1a, 0x3, 0x5, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f00000000c0)={@mcast2, @private0}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0xbd9, 0xa, 0x1, "d43bade0be35400302240c26e6541bb1ef4e30027010dd6363145b0ee55e5d83", 0x55595659}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2b, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) [ 2228.480814] ================================================================== [ 2228.488603] BUG: KASAN: use-after-free in v4l2_ctrl_grab+0x150/0x160 [ 2228.495105] Read of size 8 at addr ffff8880a15fd3e0 by task syz-executor.1/4673 [ 2228.502550] [ 2228.504181] CPU: 0 PID: 4673 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2228.511972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2228.521326] Call Trace: [ 2228.523918] dump_stack+0x1fc/0x2ef [ 2228.527554] ? dev_debug_store+0x100/0x100 [ 2228.531802] print_address_description.cold+0x54/0x219 [ 2228.537093] ? dev_debug_store+0x100/0x100 [ 2228.541331] kasan_report_error.cold+0x8a/0x1b9 [ 2228.546004] ? v4l2_ctrl_grab+0x150/0x160 [ 2228.550157] __asan_report_load8_noabort+0x88/0x90 [ 2228.555088] ? v4l2_ctrl_grab+0x150/0x160 [ 2228.559239] v4l2_ctrl_grab+0x150/0x160 [ 2228.563218] vicodec_stop_streaming+0x14a/0x190 [ 2228.567889] ? vicodec_return_bufs+0x230/0x230 [ 2228.572474] __vb2_queue_cancel+0xae/0x790 [ 2228.576718] ? wait_for_completion_io+0x10/0x10 11:43:37 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x4, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0xffffffff}}}) [ 2228.581392] ? vidioc_querycap+0x100/0x100 [ 2228.585641] ? dev_debug_store+0x100/0x100 [ 2228.589875] vb2_core_queue_release+0x22/0x70 [ 2228.594431] v4l2_m2m_ctx_release+0x26/0x30 [ 2228.598765] vicodec_release+0xb6/0x110 [ 2228.602735] v4l2_release+0xf4/0x190 [ 2228.606442] __fput+0x2ce/0x890 [ 2228.609729] task_work_run+0x148/0x1c0 [ 2228.613613] exit_to_usermode_loop+0x251/0x2a0 [ 2228.618180] do_syscall_64+0x538/0x620 [ 2228.622051] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2228.627227] RIP: 0033:0x7fa6513f440b [ 2228.630928] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 2228.649822] RSP: 002b:00007ffdac6e7d20 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 2228.657527] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fa6513f440b [ 2228.664784] RDX: 00007fa650fb7ac0 RSI: ffffffffffffffff RDI: 0000000000000003 [ 2228.672038] RBP: 00007fa651564980 R08: 0000000000000000 R09: 00007fa650fb7000 [ 2228.679294] R10: 00007fa650fb7ac8 R11: 0000000000000293 R12: 00000000002201a2 [ 2228.686557] R13: 00007ffdac6e7e20 R14: 00007fa651562f80 R15: 0000000000000032 [ 2228.693837] [ 2228.695456] Allocated by task 4680: [ 2228.699069] __kmalloc_node+0x4c/0x70 [ 2228.702854] kvmalloc_node+0x61/0xf0 [ 2228.706556] v4l2_ctrl_new.part.0+0x22c/0x1400 [ 2228.711131] v4l2_ctrl_new_std+0x211/0x330 [ 2228.715350] vicodec_open+0x1a6/0xad0 [ 2228.719133] v4l2_open+0x1af/0x350 [ 2228.722658] chrdev_open+0x266/0x770 [ 2228.726368] do_dentry_open+0x4aa/0x1160 [ 2228.730430] path_openat+0x793/0x2df0 [ 2228.734217] do_filp_open+0x18c/0x3f0 [ 2228.738006] do_sys_open+0x3b3/0x520 [ 2228.741716] do_syscall_64+0xf9/0x620 [ 2228.745508] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2228.750678] [ 2228.752289] Freed by task 4673: [ 2228.755552] kfree+0xcc/0x210 [ 2228.758644] kvfree+0x59/0x60 [ 2228.761740] v4l2_ctrl_handler_free+0x4a9/0x810 [ 2228.766408] vicodec_release+0x63/0x110 [ 2228.770375] v4l2_release+0xf4/0x190 [ 2228.774075] __fput+0x2ce/0x890 [ 2228.777337] task_work_run+0x148/0x1c0 [ 2228.781206] exit_to_usermode_loop+0x251/0x2a0 [ 2228.785776] do_syscall_64+0x538/0x620 [ 2228.789662] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2228.794834] [ 2228.796451] The buggy address belongs to the object at ffff8880a15fd3c0 [ 2228.796451] which belongs to the cache kmalloc-256 of size 256 [ 2228.809107] The buggy address is located 32 bytes inside of [ 2228.809107] 256-byte region [ffff8880a15fd3c0, ffff8880a15fd4c0) [ 2228.820885] The buggy address belongs to the page: [ 2228.825809] page:ffffea0002857f40 count:1 mapcount:0 mapping:ffff88813bff07c0 index:0xffff8880a15fddc0 [ 2228.835268] flags: 0xfff00000000100(slab) [ 2228.839402] raw: 00fff00000000100 ffffea00024c63c8 ffffea0002960088 ffff88813bff07c0 [ 2228.847276] raw: ffff8880a15fddc0 ffff8880a15fd000 000000010000000a 0000000000000000 [ 2228.855146] page dumped because: kasan: bad access detected [ 2228.860837] [ 2228.862459] Memory state around the buggy address: [ 2228.867381] ffff8880a15fd280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2228.874732] ffff8880a15fd300: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc 11:43:38 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) [ 2228.882074] >ffff8880a15fd380: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 2228.889417] ^ [ 2228.895907] ffff8880a15fd400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2228.903267] ffff8880a15fd480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 2228.910617] ================================================================== [ 2228.917955] Disabling lock debugging due to kernel taint 11:43:38 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 11:43:38 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x80, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}, 0x1f}) [ 2228.935975] Kernel panic - not syncing: panic_on_warn set ... [ 2228.935975] [ 2228.943369] CPU: 1 PID: 4673 Comm: syz-executor.1 Tainted: G B 4.19.211-syzkaller #0 [ 2228.952550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2228.961902] Call Trace: [ 2228.964494] dump_stack+0x1fc/0x2ef [ 2228.968128] panic+0x26a/0x50e [ 2228.971325] ? __warn_printk+0xf3/0xf3 [ 2228.975216] ? preempt_schedule_common+0x45/0xc0 [ 2228.979975] ? ___preempt_schedule+0x16/0x18 11:43:38 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x0, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x80, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}, 0x1f}) [ 2228.984385] ? trace_hardirqs_on+0x55/0x210 [ 2228.988711] ? dev_debug_store+0x100/0x100 [ 2228.992952] kasan_end_report+0x43/0x49 [ 2228.996929] kasan_report_error.cold+0xa7/0x1b9 [ 2229.001600] ? v4l2_ctrl_grab+0x150/0x160 [ 2229.005754] __asan_report_load8_noabort+0x88/0x90 [ 2229.010672] ? v4l2_ctrl_grab+0x150/0x160 [ 2229.014799] v4l2_ctrl_grab+0x150/0x160 [ 2229.018755] vicodec_stop_streaming+0x14a/0x190 [ 2229.023400] ? vicodec_return_bufs+0x230/0x230 [ 2229.027958] __vb2_queue_cancel+0xae/0x790 [ 2229.032176] ? wait_for_completion_io+0x10/0x10 [ 2229.036823] ? vidioc_querycap+0x100/0x100 [ 2229.041035] ? dev_debug_store+0x100/0x100 [ 2229.045250] vb2_core_queue_release+0x22/0x70 [ 2229.049727] v4l2_m2m_ctx_release+0x26/0x30 [ 2229.054026] vicodec_release+0xb6/0x110 [ 2229.057982] v4l2_release+0xf4/0x190 [ 2229.061677] __fput+0x2ce/0x890 [ 2229.064939] task_work_run+0x148/0x1c0 [ 2229.068808] exit_to_usermode_loop+0x251/0x2a0 [ 2229.073384] do_syscall_64+0x538/0x620 [ 2229.077253] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2229.082431] RIP: 0033:0x7fa6513f440b [ 2229.086130] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 2229.105012] RSP: 002b:00007ffdac6e7d20 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 2229.112714] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fa6513f440b [ 2229.119980] RDX: 00007fa650fb7ac0 RSI: ffffffffffffffff RDI: 0000000000000003 [ 2229.127234] RBP: 00007fa651564980 R08: 0000000000000000 R09: 00007fa650fb7000 [ 2229.134482] R10: 00007fa650fb7ac8 R11: 0000000000000293 R12: 00000000002201a2 [ 2229.141729] R13: 00007ffdac6e7e20 R14: 00007fa651562f80 R15: 0000000000000032 [ 2229.149150] Kernel Offset: disabled [ 2229.152760] Rebooting in 86400 seconds..